| |  193.46.255.26 | 200 OK | 8.7 kB |
URL User Request GET HTTP/1.1IP193.46.255.26:443
CertificateIssuerLet's Encrypt Subjectrutor.is FingerprintC9:95:80:68:51:F5:7F:31:4A:48:6E:0F:91:11:F5:15:D7:ED:9E:C1 ValiditySun, 21 Apr 2024 12:53:19 GMT - Sat, 20 Jul 2024 12:53:18 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (968), with CRLF, CR, LF line terminators Hash43030e56c9d26fb8ba1593cad15bdc3e efac35611e3f6dcb67ab356ce7e6dc72e479da66 1e341221ebfd02880c7f0efd58c29e9c52aaaabf1caee56f36d0e2f0233c29c5
GET /torrent/407364e HTTP/1.1
Host: rutor.is
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Tue, 07 May 2024 16:06:06 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 8663
Connection: keep-alive
Content-Encoding: gzip
Age: 74
Accept-Ranges: bytes
X-Debug: 14400.000 3 v
|
|
| receivedachest.com/services/?id=144655 |  193.200.64.24 | 200 OK | 1.9 kB |
URL GET HTTP/1.1receivedachest.com/services/?id=144655 IP193.200.64.24:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectreceivedachest.com Fingerprint81:E7:3A:A3:AB:4C:B2:DF:11:02:4D:32:89:D0:F1:68:8D:D6:7F:7A ValidityTue, 20 Feb 2024 13:27:47 GMT - Mon, 20 May 2024 13:27:46 GMT
File typeJavaScript source, ASCII text, with very long lines (1887), with no line terminators Hash6b0c4e1a2589a43753112476f4226040 85f7f613dc8cecedb048a9e1cba19b3052d79c39 7e767171894626e51f34727e86599c6bd632c647e459288d31806609493e24c4
GET /services/?id=144655 HTTP/1.1
Host: receivedachest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 16:06:06 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 1887
Connection: keep-alive
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js |  142.250.74.106 | 200 OK | 25 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js IP142.250.74.106:443
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeJavaScript source, ASCII text, with very long lines (820) Hash10092eee563dec2dca82b77d2cf5a1ae 65cbff4e9d95d47a6f31d96ab4ea361c1f538a7b e23a2a4e2d7c2b41ebcdd8ffc0679df7140eb7f52e1eebabf827a88182643c59
GET /ajax/libs/jquery/1.4.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 24715
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 05:01:51 GMT
expires: Sat, 03 May 2025 05:01:51 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 385455
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| i58.fastpic.ru/big/2015/0125/bc/dc2ef3463118901c03f354395d4edcbc.jpg |  95.217.39.24 | 301 Moved Permanently | 162 B |
URL GET HTTP/2i58.fastpic.ru/big/2015/0125/bc/dc2ef3463118901c03f354395d4edcbc.jpg IP95.217.39.24:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectfastpic.ru Fingerprint51:8C:28:FE:3C:4B:A6:51:F6:79:49:67:E3:5C:B3:A7:70:0E:C8:80 ValidityThu, 14 Mar 2024 20:45:33 GMT - Wed, 12 Jun 2024 20:45:32 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /big/2015/0125/bc/dc2ef3463118901c03f354395d4edcbc.jpg HTTP/1.1
Host: i58.fastpic.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 16:06:06 GMT
content-type: text/html
content-length: 162
location: https://i58.fastpic.org/big/2015/0125/bc/dc2ef3463118901c03f354395d4edcbc.jpg
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| vak345.com/s.js?v=ea59f7a89d04d570fbb4ef98a8a1693c |  104.21.69.38 | 200 OK | 2.5 kB |
URL GET HTTP/2vak345.com/s.js?v=ea59f7a89d04d570fbb4ef98a8a1693c IP104.21.69.38:443
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerGoogle Trust Services LLC Subjectvak345.com Fingerprint24:4A:87:25:20:E4:20:04:34:86:6B:9B:53:2A:57:5F:39:1D:94:22 ValiditySun, 07 Apr 2024 00:32:34 GMT - Sat, 06 Jul 2024 00:32:33 GMT
File typeJavaScript source, ASCII text, with very long lines (3902) Hashd88190b9bb1f46646767db386ffda49f df2dacc651f74dca25e1bf7b92efab1dcf8191b4 5192c4cbd3355609a35c03efa352089b546be69f5cdf52c1477fc3916bde7a72
GET /s.js?v=ea59f7a89d04d570fbb4ef98a8a1693c HTTP/1.1
Host: vak345.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 16:06:06 GMT
content-type: text/javascript;charset=UTF-8
vary: Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-movieads-country: NO
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=97vsSTiOThZVWILbOuh8aZ1ag6r8SbliT0XyWSvgnoKZTBBSUJKr3ubUlyc%2BaFhNGfJ6mSRqydEQFH%2BquT2IXuxUwQMDEVxoCGLovxVDyKBOmJGeITuumzkAR0rW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8802749279c8b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnbunny.org/t/functions.js |  77.91.100.49 | 200 OK | 3.9 kB |
URL GET HTTP/1.1cdnbunny.org/t/functions.js IP77.91.100.49:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectcdnbunny.org Fingerprint5F:3F:E5:94:94:38:04:8B:81:0D:0A:70:32:1E:E0:2C:DF:22:2A:62 ValidityWed, 13 Mar 2024 06:51:34 GMT - Tue, 11 Jun 2024 06:51:33 GMT
File typeUnicode text, UTF-8 text, with very long lines (318) Hashacee02196e40649c575ccf4848b623d8 152193c0a635fdd111253397d32f52392bcf8c52 c787a40d68005890630932870e5b79587360d9eb1c2a4c0323ed5da897690801
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /t/functions.js HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 16:06:06 GMT
Content-Type: application/javascript
Content-Length: 3862
Connection: keep-alive
Last-Modified: Wed, 06 Jan 2016 14:43:48 GMT
ETag: "568d2824-f16"
Cache-Control: max-age=604800
Age: 464330
X-Debug: 604800.000 1562544
Accept-Ranges: bytes
|
|
| cdnbunny.org/jquery.cookie-min.js | 77.91.100.49 | 200 OK | 732 B |
URL GET HTTP/1.1cdnbunny.org/jquery.cookie-min.js IP77.91.100.49:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectcdnbunny.org Fingerprint5F:3F:E5:94:94:38:04:8B:81:0D:0A:70:32:1E:E0:2C:DF:22:2A:62 ValidityWed, 13 Mar 2024 06:51:34 GMT - Tue, 11 Jun 2024 06:51:33 GMT
File typeJavaScript source, ASCII text, with very long lines (732), with no line terminators Hashce56bb0d2daafc993b2866ccc1af86fc fe46733587f81da245f6b3e16d6bbbd8a1cb2fea 874d19eae19d9f20a884d976ccca6092c91da6ee8c71d8be1c5c893acbad9159
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /jquery.cookie-min.js HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 16:06:06 GMT
Content-Type: application/javascript
Content-Length: 732
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 17:05:24 GMT
ETag: "4ebea754-2dc"
Cache-Control: max-age=604800
Age: 464330
X-Debug: 604800.000 1585223
Accept-Ranges: bytes
|
|
| cdnbunny.org/css.css | 77.91.100.49 | 200 OK | 24 kB |
IP77.91.100.49:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectcdnbunny.org Fingerprint5F:3F:E5:94:94:38:04:8B:81:0D:0A:70:32:1E:E0:2C:DF:22:2A:62 ValidityWed, 13 Mar 2024 06:51:34 GMT - Tue, 11 Jun 2024 06:51:33 GMT
File typeASCII text, with very long lines (3877), with CRLF line terminators Hash751ab231b9980ced48191df03db9999a 36bd22d3521f2dfd5530d74796082fc276160c99 581b656ce90c82bb602f30470c75abbd2eb9d68d26cfc8f2d7a975f0ca0675a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css.css HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 16:06:06 GMT
Content-Type: text/css
Content-Length: 23547
Connection: keep-alive
Last-Modified: Sun, 17 May 2015 18:55:35 GMT
ETag: "5558e427-5bfb"
Cache-Control: max-age=604800
Age: 464330
X-Debug: 604800.000 1556660
Accept-Ranges: bytes
|
|
| cdnbunny.org/i/com.gif | 77.91.100.49 | 200 OK | 295 B |
IP77.91.100.49:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectcdnbunny.org Fingerprint5F:3F:E5:94:94:38:04:8B:81:0D:0A:70:32:1E:E0:2C:DF:22:2A:62 ValidityWed, 13 Mar 2024 06:51:34 GMT - Tue, 11 Jun 2024 06:51:33 GMT
File typeGIF image data, version 89a, 11 x 9 Hashe91f48c29a8f6285ade898585e58f8ad c171b970bbdb33210c1e9714bc7fa96e42bdb0bf 30bacf9c5db02b0b5fdbe670c15301ec8231d2e526ab20ea5f8dfb8692e02f17
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /i/com.gif HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 16:06:06 GMT
Content-Type: image/gif
Content-Length: 295
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:28:29 GMT
ETag: "4ebe909d-127"
Cache-Control: max-age=604800
Age: 464331
X-Debug: 604800.000 1534885
Accept-Ranges: bytes
|
|
| cdnbunny.org/i/m.png | 77.91.100.49 | 200 OK | 656 B |
IP77.91.100.49:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectcdnbunny.org Fingerprint5F:3F:E5:94:94:38:04:8B:81:0D:0A:70:32:1E:E0:2C:DF:22:2A:62 ValidityWed, 13 Mar 2024 06:51:34 GMT - Tue, 11 Jun 2024 06:51:33 GMT
File typePNG image data, 13 x 13, 8-bit/color RGBA, non-interlaced Hash1c923e4247dd2fbbc7e407beecf6028c 37a7cd424c135206071cad59df92511df4fb6e5e efb2d84b9882f1e58d07b358cb77ad0b67fcce154bc7dc70086532abe8f57fff
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /i/m.png HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 16:06:06 GMT
Content-Type: image/png
Content-Length: 656
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:28:36 GMT
ETag: "4ebe90a4-290"
Cache-Control: max-age=604800
Age: 464331
X-Debug: 604800.000 1659322
Accept-Ranges: bytes
|
|
| cdnbunny.org/t/arrowdown.gif | 77.91.100.49 | 200 OK | 51 B |
URL GET HTTP/1.1cdnbunny.org/t/arrowdown.gif IP77.91.100.49:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectcdnbunny.org Fingerprint5F:3F:E5:94:94:38:04:8B:81:0D:0A:70:32:1E:E0:2C:DF:22:2A:62 ValidityWed, 13 Mar 2024 06:51:34 GMT - Tue, 11 Jun 2024 06:51:33 GMT
File typeGIF image data, version 89a, 5 x 8 Hashfe98a58fe6509fb7cb897d25228329d3 34d9e63fe61d4b543f84003c70d0473b6893926f a045e7b1f5ceaefbab2ef782b86b12de0a41fc2ca34c43cbf6b8b8a107d339ff
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /t/arrowdown.gif HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 16:06:06 GMT
Content-Type: image/gif
Content-Length: 51
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:30:58 GMT
ETag: "4ebe9132-33"
Cache-Control: max-age=604800
Age: 464330
X-Debug: 604800.000 1591728
Accept-Ranges: bytes
|
|
| cdnbunny.org/i/forum.gif | 77.91.100.49 | 200 OK | 4.4 kB |
IP77.91.100.49:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectcdnbunny.org Fingerprint5F:3F:E5:94:94:38:04:8B:81:0D:0A:70:32:1E:E0:2C:DF:22:2A:62 ValidityWed, 13 Mar 2024 06:51:34 GMT - Tue, 11 Jun 2024 06:51:33 GMT
File typeGIF image data, version 89a, 250 x 42 Hash48ae00889ff3baa47dafe9d6d0977019 8c08f0f6ee7fd93f40679bea8d3ceb7be01b3e2c 790a5e6e4ff054d64eca66bd8cfe77b7f379695366e3e5f1f35d5b702e39506c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /i/forum.gif HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 16:06:06 GMT
Content-Type: image/gif
Content-Length: 4367
Connection: keep-alive
Last-Modified: Sun, 03 Jan 2016 20:49:57 GMT
ETag: "56898975-110f"
Cache-Control: max-age=604800
Age: 464329
X-Debug: 604800.000 1454121
Accept-Ranges: bytes
|
|
| s.rutor.info/imdb/pic/0058089.gif | 193.46.255.28 | 200 OK | 1.8 kB |
URL GET HTTP/1.1s.rutor.info/imdb/pic/0058089.gif IP193.46.255.28:443
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectrutor.info FingerprintD9:5A:C8:A1:8A:8D:C4:E1:05:2E:2A:44:9E:1A:88:69:AE:BC:44:10 ValiditySun, 21 Apr 2024 12:53:12 GMT - Sat, 20 Jul 2024 12:53:11 GMT
File typeGIF image data, version 87a, 102 x 38 Hashc09318bd0f5ad63f9e625c513838ab3a 784659e74e120e965f2d28a85641c0d11aa77b89 4b55d7be8926c880ec82679cf2b0b898a83b83f9bdd83d2a6d15f4791bf93791
GET /imdb/pic/0058089.gif HTTP/1.1
Host: s.rutor.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Tue, 07 May 2024 16:06:06 GMT
Content-Type: image/gif
Content-Length: 1798
Connection: keep-alive
Last-Modified: Thu, 02 May 2024 07:37:33 GMT
ETag: "663342bd-706"
Cache-Control: max-age=86400
Age: 97783
Accept-Ranges: bytes
X-Debug: 172800.000 8
|
|
| cdnbunny.org/t/smilies/thankyou.gif | 77.91.100.49 | 200 OK | 15 kB |
URL GET HTTP/1.1cdnbunny.org/t/smilies/thankyou.gif IP77.91.100.49:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectcdnbunny.org Fingerprint5F:3F:E5:94:94:38:04:8B:81:0D:0A:70:32:1E:E0:2C:DF:22:2A:62 ValidityWed, 13 Mar 2024 06:51:34 GMT - Tue, 11 Jun 2024 06:51:33 GMT
File typeGIF image data, version 89a, 160 x 51 Hash14a95f068bb667ac8cb8420c4dda2dde dea8729bead5e4e2d905b66b3f5fd435c5496042 625f6d56625802e504c3cae4f217d1ae3b7f8dbbb11730d897d08e6896120590
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /t/smilies/thankyou.gif HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 16:06:06 GMT
Content-Type: image/gif
Content-Length: 15327
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:30:48 GMT
ETag: "4ebe9128-3bdf"
Cache-Control: max-age=604800
Age: 464326
X-Debug: 604800.000 343855
Accept-Ranges: bytes
|
|
| cdnbunny.org/t/arrowup.gif | 77.91.100.49 | 200 OK | 52 B |
URL GET HTTP/1.1cdnbunny.org/t/arrowup.gif IP77.91.100.49:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectcdnbunny.org Fingerprint5F:3F:E5:94:94:38:04:8B:81:0D:0A:70:32:1E:E0:2C:DF:22:2A:62 ValidityWed, 13 Mar 2024 06:51:34 GMT - Tue, 11 Jun 2024 06:51:33 GMT
File typeGIF image data, version 89a, 5 x 8 Hash7cbfc089fd0b0d261187a0c1ef0826af 1583fd0ccdd6a7dcb24ef670761ab01387cf87cf b88cfd011c972f65586f207621005b8b3336773a252e2a309ddbd9b7dda7b8b9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /t/arrowup.gif HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 16:06:06 GMT
Content-Type: image/gif
Content-Length: 52
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:30:59 GMT
ETag: "4ebe9133-34"
Cache-Control: max-age=604800
Age: 464331
X-Debug: 604800.000 1632102
Accept-Ranges: bytes
|
|
| cdnbunny.org/i/magnet.gif | 77.91.100.49 | 200 OK | 796 B |
URL GET HTTP/1.1cdnbunny.org/i/magnet.gif IP77.91.100.49:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectcdnbunny.org Fingerprint5F:3F:E5:94:94:38:04:8B:81:0D:0A:70:32:1E:E0:2C:DF:22:2A:62 ValidityWed, 13 Mar 2024 06:51:34 GMT - Tue, 11 Jun 2024 06:51:33 GMT
File typeGIF image data, version 89a, 30 x 30 Hash1a31398a96af2ae3e63de5055912daec 55d558e163c634baeae650b15000f513753f29a8 7c92fab95800728d3ab74659b56bdc267928496ec422f03954679ebe0155cf9a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /i/magnet.gif HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 16:06:06 GMT
Content-Type: image/gif
Content-Length: 796
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:28:27 GMT
ETag: "4ebe909b-31c"
Cache-Control: max-age=604800
Age: 464330
X-Debug: 604800.000 976934
Accept-Ranges: bytes
|
|
| cdnbunny.org/i/lupa.gif | 77.91.100.49 | 200 OK | 3.1 kB |
IP77.91.100.49:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectcdnbunny.org Fingerprint5F:3F:E5:94:94:38:04:8B:81:0D:0A:70:32:1E:E0:2C:DF:22:2A:62 ValidityWed, 13 Mar 2024 06:51:34 GMT - Tue, 11 Jun 2024 06:51:33 GMT
File typeGIF image data, version 89a, 55 x 56 Hashe2c8f8537818f7880be3ae505852b9ff 2a1f5572e6f4c9efc1700f34d6c6969bedbd8535 6946c64a41b61a1e8708b7bcf8274274c71cdc23932aab32da5b868d19212b3a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /i/lupa.gif HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 16:06:06 GMT
Content-Type: image/gif
Content-Length: 3079
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:28:36 GMT
ETag: "4ebe90a4-c07"
Cache-Control: max-age=604800
Age: 464326
X-Debug: 604800.000 1452844
Accept-Ranges: bytes
|
|
| cdnbunny.org/t/down.png | 77.91.100.49 | 200 OK | 4.6 kB |
IP77.91.100.49:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectcdnbunny.org Fingerprint5F:3F:E5:94:94:38:04:8B:81:0D:0A:70:32:1E:E0:2C:DF:22:2A:62 ValidityWed, 13 Mar 2024 06:51:34 GMT - Tue, 11 Jun 2024 06:51:33 GMT
File typePNG image data, 27 x 27, 8-bit/color RGBA, interlaced Hash7c13d91e67d4debe5cc1469495197d9d e58a04673dd493302d7e6f1198b68ffdce39ebc2 d2e05bd0c1f904da109ba2558bcc76c84c48e3de9a2cece178ceba790c6d2bb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /t/down.png HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 16:06:06 GMT
Content-Type: image/png
Content-Length: 4603
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:31:05 GMT
ETag: "4ebe9139-11fb"
Cache-Control: max-age=604800
Age: 464330
X-Debug: 604800.000 978212
Accept-Ranges: bytes
|
|
| cdnbunny.org/i/d.gif | 77.91.100.49 | 200 OK | 359 B |
IP77.91.100.49:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectcdnbunny.org Fingerprint5F:3F:E5:94:94:38:04:8B:81:0D:0A:70:32:1E:E0:2C:DF:22:2A:62 ValidityWed, 13 Mar 2024 06:51:34 GMT - Tue, 11 Jun 2024 06:51:33 GMT
File typeGIF image data, version 89a, 13 x 13 Hash3def66024a583b6ca763e249acb3c426 82f2f897d3e2746181b889811ac675565dcaf0fa 7d4fb7d5a9e681b2313ca88338e3255364aa452f243d6397aa905783e98bfca0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /i/d.gif HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 16:06:06 GMT
Content-Type: image/gif
Content-Length: 359
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:28:29 GMT
ETag: "4ebe909d-167"
Cache-Control: max-age=604800
Age: 464331
X-Debug: 604800.000 1686778
Accept-Ranges: bytes
|
|
| cdnbunny.org/t/top.gif | 77.91.100.49 | 200 OK | 612 B |
IP77.91.100.49:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectcdnbunny.org Fingerprint5F:3F:E5:94:94:38:04:8B:81:0D:0A:70:32:1E:E0:2C:DF:22:2A:62 ValidityWed, 13 Mar 2024 06:51:34 GMT - Tue, 11 Jun 2024 06:51:33 GMT
File typeGIF image data, version 89a, 24 x 24 Hashab3755cddb40723270164fa84b8f0362 a7e6700d02578c03bd76b217b23c55b4fba997ea 79df9f5b18cac4dbaec0808448c15e094b5fe20d04aabfe7bed9e6ae07739dfd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /t/top.gif HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 16:06:06 GMT
Content-Type: image/gif
Content-Length: 612
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:31:17 GMT
ETag: "4ebe9145-264"
Cache-Control: max-age=604800
Age: 464331
X-Debug: 604800.000 1454010
Accept-Ranges: bytes
|
|
| cdnbunny.org/i/poisk_bg.gif | 77.91.100.49 | 200 OK | 2.0 kB |
URL GET HTTP/1.1cdnbunny.org/i/poisk_bg.gif IP77.91.100.49:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectcdnbunny.org Fingerprint5F:3F:E5:94:94:38:04:8B:81:0D:0A:70:32:1E:E0:2C:DF:22:2A:62 ValidityWed, 13 Mar 2024 06:51:34 GMT - Tue, 11 Jun 2024 06:51:33 GMT
File typeGIF image data, version 89a, 46 x 56 Hash76118a48fd5ae4b926e34f4edb427386 4aa5f228e3f511bf626afa6703488d1d7c6df5e0 4912841156c4582948d016867a6c71845a0221f1dd6419ea911f6f83bbc431d7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /i/poisk_bg.gif HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 16:06:06 GMT
Content-Type: image/gif
Content-Length: 1998
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:28:37 GMT
ETag: "4ebe90a5-7ce"
Cache-Control: max-age=604800
Age: 464331
X-Debug: 604800.000 883234
Accept-Ranges: bytes
|
|
| cdnbunny.org/i/zaiti.gif | 77.91.100.49 | 200 OK | 3.1 kB |
IP77.91.100.49:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectcdnbunny.org Fingerprint5F:3F:E5:94:94:38:04:8B:81:0D:0A:70:32:1E:E0:2C:DF:22:2A:62 ValidityWed, 13 Mar 2024 06:51:34 GMT - Tue, 11 Jun 2024 06:51:33 GMT
File typeGIF image data, version 89a, 99 x 30 Hash9815ec4cdd376b7d71df61b74a7ce6c6 962c557ce627cc0332bc6ee175914946ff4bd2a1 a1d3e2383ecd387242844341a7200834f5cf3517ab846f17d276a2adc0286421
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /i/zaiti.gif HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 16:06:06 GMT
Content-Type: image/gif
Content-Length: 3070
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:28:40 GMT
ETag: "4ebe90a8-bfe"
Cache-Control: max-age=604800
Age: 464331
X-Debug: 604800.000 992691
Accept-Ranges: bytes
|
|
| cdnbunny.org/logo.jpg | 77.91.100.49 | 200 OK | 45 kB |
IP77.91.100.49:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectcdnbunny.org Fingerprint5F:3F:E5:94:94:38:04:8B:81:0D:0A:70:32:1E:E0:2C:DF:22:2A:62 ValidityWed, 13 Mar 2024 06:51:34 GMT - Tue, 11 Jun 2024 06:51:33 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=120, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=450], baseline, precision 8, 420x110, components 3 Hashdc4a948f3ccf35b2c39269cde1aad6f3 1b952aa88121ee56b0648e0e2476a0dacc39da5e eabb9097a448d6066ceac9b449f2a3759776e14aea3d574208495af12ed84f56
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /logo.jpg HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 16:06:06 GMT
Content-Type: image/jpeg
Content-Length: 44893
Connection: keep-alive
Last-Modified: Wed, 23 Jan 2019 21:57:36 GMT
ETag: "5c48e350-af5d"
Cache-Control: max-age=604800
Age: 464326
X-Debug: 604800.000 1486273
Accept-Ranges: bytes
|
|
| i58.fastpic.org/big/2015/0125/bc/dc2ef3463118901c03f354395d4edcbc.jpg | 95.217.39.24 | 200 OK | 79 kB |
URL GET HTTP/2i58.fastpic.org/big/2015/0125/bc/dc2ef3463118901c03f354395d4edcbc.jpg IP95.217.39.24:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectfastpic.org Fingerprint28:89:73:18:40:37:E7:78:6A:1C:55:49:E7:B1:13:3A:EC:FA:4C:EC ValidityThu, 14 Mar 2024 20:44:46 GMT - Wed, 12 Jun 2024 20:44:45 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=8, description=kinopoisk.ru, orientation=upper-left, xresolution=124, yresolution=132, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2015:01:18 22:15:29], baseline, precision 8, 350x500, components 3 Hash016efa529c75a1bdf5e5df7e55086938 1528a1af67d0579213ffe1d2d15781b34e78f2c0 da23a2cd4d497c22f17cf1d5308dcdb57854b70ce1bd9b7ac92480744ee706c8
GET /big/2015/0125/bc/dc2ef3463118901c03f354395d4edcbc.jpg HTTP/1.1
Host: i58.fastpic.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:06 GMT
content-type: image/jpeg
content-length: 78959
last-modified: Sun, 25 Jan 2015 18:31:58 GMT
etag: "54c5369e-1346f"
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://fastpic.org
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdnbunny.org/favicon.ico | 77.91.100.49 | 200 OK | 894 B |
IP77.91.100.49:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectcdnbunny.org Fingerprint5F:3F:E5:94:94:38:04:8B:81:0D:0A:70:32:1E:E0:2C:DF:22:2A:62 ValidityWed, 13 Mar 2024 06:51:34 GMT - Tue, 11 Jun 2024 06:51:33 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 24 bits/pixel Hashab55f59a775976829d8352a7a0584d3e e4b29ec4ac46d97ea15c582d61d02c523dd0485b e68d4b7f22b5027fef4672cc5ba884fb52ac248fd1ca4648c9ac89d95b0e58f4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 16:06:07 GMT
Content-Type: image/x-icon
Content-Length: 894
Connection: keep-alive
Last-Modified: Fri, 08 Feb 2013 21:57:36 GMT
ETag: "511574d0-37e"
Cache-Control: max-age=604800
Age: 464329
X-Debug: 604800.000 878360
Accept-Ranges: bytes
|
|
| www.kinopoisk.ru/rating/47984.gif |  213.180.199.9 | 301 Moved Permanently | 178 B |
URL GET HTTP/2www.kinopoisk.ru/rating/47984.gif IP213.180.199.9:443
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerGlobalSign nv-sa Subject*.kinopoisk.ru Fingerprint60:65:F8:10:D8:3A:62:4C:14:01:40:39:D4:CF:BD:67:36:B0:A8:D3 ValidityThu, 23 Nov 2023 21:12:48 GMT - Thu, 23 May 2024 20:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashcd2e0e43980a00fb6a2742d3afd803b8 81ffbd1712afe8cdf138b570c0fc9934742c33c1 bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /rating/47984.gif HTTP/1.1
Host: www.kinopoisk.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
content-length: 178
location: https://rating.kinopoisk.ru/47984.gif
date: Tue, 07 May 2024 16:06:07 GMT
nel: {"report_to": "neldrlog", "max_age": 200, "success_fraction": 0.01, "failure_fraction": 1}
set-cookie: _yasc=iehTIzkfmKx/txqKB/5N8Y5InVpNrJXwVLY14PwS9mRiiMtiYHYf8IED/RDYP5I7Kg==; domain=.kinopoisk.ru; path=/; expires=Fri, 05 May 2034 16:06:07 GMT; secure
i=3rSxAR6nqgMli19LfXvxpx7sYO/pe7Q1vDH0ijOV7mXwGsNadJFIJpfKdf3n88EIG1EL4R2/rLJbbrDVQRtjKioFBVs=; Expires=Thu, 07-May-2026 16:06:07 GMT; Domain=.kinopoisk.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=7146058941715097967; Expires=Thu, 07-May-2026 16:06:07 GMT; Domain=.kinopoisk.ru; Path=/; Secure; SameSite=None
yashr=5102285281715097967; Path=/; Domain=.kinopoisk.ru; Expires=Wed, 07 May 2025 16:06:07 GMT; SameSite=None; Secure; HttpOnly
x-request-id: 1715097967132772-15873064241202623173
report-to: {"group": "neldrlog", "max_age": 200, "endpoints": [{"url": "https://dr.yandex.net/kinopoisk/nel", "priority": 1}, {"url": "https://dr2.yandex.net/kinopoisk/nel", "priority": 2}]}
content-type: text/html
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=btwcookie&rnd=1715097967 | 193.200.65.150 | | 0 B |
URL code.moviead55.ru/go/cinit?cn=btwcookie&rnd=1715097967 IP193.200.65.150:0 ASN#6681 Giveme Cloud Sp Z O O
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=btwcookie&rnd=1715097967 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
content-length: 0
location: https://ads.betweendigital.com/match?bidder_id=34348&callback_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbtwcookie%26bid%3D%24%7BUSER_ID%7D
set-cookie: sky_uuid=f7ff5f2c-aa7e-4947-528b-581b9ddebff7; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=ohmybid&rnd=1715097967 | 193.200.65.150 | | 0 B |
URL code.moviead55.ru/go/cinit?cn=ohmybid&rnd=1715097967 IP193.200.65.150:0 ASN#6681 Giveme Cloud Sp Z O O
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=ohmybid&rnd=1715097967 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
content-length: 0
location: https://match.ohmy.bid/cm?ssp=skyadv&redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dohmybid%26bid%3D%24%7BUUID%7D
set-cookie: sky_uuid=ca12161e-043c-93c5-5828-7d389efe7348; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=hbrdcookie2&rnd=1715097967 | 193.200.65.150 | | 0 B |
URL code.moviead55.ru/go/cinit?cn=hbrdcookie2&rnd=1715097967 IP193.200.65.150:0 ASN#6681 Giveme Cloud Sp Z O O
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=hbrdcookie2&rnd=1715097967 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
content-length: 0
location: https://dm-eu.hybrid.ai/match?id=185&burl=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dhbrdcookie2%26bid%3D%24%7BVID%7D
set-cookie: sky_uuid=8a5b612a-eccf-2314-cd48-8b2daad581cd; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=otmbid&rnd=1715097967 | 193.200.65.150 | | 0 B |
URL code.moviead55.ru/go/cinit?cn=otmbid&rnd=1715097967 IP193.200.65.150:0 ASN#6681 Giveme Cloud Sp Z O O
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=otmbid&rnd=1715097967 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
content-length: 0
location: https://sync.dmp.otm-r.com/match/skyadvert
set-cookie: sky_uuid=a6e82d17-ad37-4ad1-1cf3-21fd2afac8a4; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=bzcookie&rnd=1715097967 | 193.200.65.150 | | 0 B |
URL code.moviead55.ru/go/cinit?cn=bzcookie&rnd=1715097967 IP193.200.65.150:0 ASN#6681 Giveme Cloud Sp Z O O
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=bzcookie&rnd=1715097967 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
content-length: 0
location: https://exchange.buzzoola.com/cookiesync/redirect/skyadvert?redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbzcookie%26bid%3D%24%7BUUID%7D
set-cookie: sky_uuid=ed77eff1-5f7f-5da0-2b74-dd4fd5dba56a; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=solta&rnd=1715097967 | 193.200.65.150 | | 0 B |
URL code.moviead55.ru/go/cinit?cn=solta&rnd=1715097967 IP193.200.65.150:0 ASN#6681 Giveme Cloud Sp Z O O
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=solta&rnd=1715097967 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
content-length: 0
location: https://kimberlite.io/rtb/sync/skyadvert?u=1e64b93b-9685-7c00-5a14-87e64a30d998
set-cookie: sky_uuid=1e64b93b-9685-7c00-5a14-87e64a30d998; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=gonetbid&rnd=1715097967 | 193.200.65.150 | | 0 B |
URL code.moviead55.ru/go/cinit?cn=gonetbid&rnd=1715097967 IP193.200.65.150:0 ASN#6681 Giveme Cloud Sp Z O O
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=gonetbid&rnd=1715097967 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
content-length: 0
location: https://sync.gonet-ads.com/match/SkyAdvert?id=b1885712-b120-9b10-ab87-1c4804defaff
set-cookie: sky_uuid=b1885712-b120-9b10-ab87-1c4804defaff; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=gtnt&rnd=1715097967 | 193.200.65.150 | | 0 B |
URL code.moviead55.ru/go/cinit?cn=gtnt&rnd=1715097967 IP193.200.65.150:0 ASN#6681 Giveme Cloud Sp Z O O
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=gtnt&rnd=1715097967 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
content-length: 0
location: https://px.adhigh.net/p/cm/skyadvert?u=45c7fa91-7e1f-b525-8bda-f62b59abd01e
set-cookie: sky_uuid=45c7fa91-7e1f-b525-8bda-f62b59abd01e; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=dgm2&rnd=1715097967 | 193.200.65.150 | | 0 B |
URL code.moviead55.ru/go/cinit?cn=dgm2&rnd=1715097967 IP193.200.65.150:0 ASN#6681 Giveme Cloud Sp Z O O
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=dgm2&rnd=1715097967 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
content-length: 0
location: https://sync.opendsp.ru/match/MovieAds?id=d0e3f75a-e8ac-f5a5-85a8-37ffdb83139c
set-cookie: sky_uuid=d0e3f75a-e8ac-f5a5-85a8-37ffdb83139c; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=otclkbid&rnd=1715097967 | 193.200.65.150 | | 0 B |
URL code.moviead55.ru/go/cinit?cn=otclkbid&rnd=1715097967 IP193.200.65.150:0 ASN#6681 Giveme Cloud Sp Z O O
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=otclkbid&rnd=1715097967 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
content-length: 0
location: https://otclick-adv.ru/core/match.gif?s=30&reference=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dotclkbid%26bid%3D%23%7BUID%7D
set-cookie: sky_uuid=e449fdd0-3db6-c36e-8b63-f00ae22ab477; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=sapecookie&rnd=1715097967 | 193.200.65.150 | | 0 B |
URL code.moviead55.ru/go/cinit?cn=sapecookie&rnd=1715097967 IP193.200.65.150:0 ASN#6681 Giveme Cloud Sp Z O O
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=sapecookie&rnd=1715097967 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
content-length: 0
location: https://www.acint.net/rmatch?dp=167&euid=524bd7df-05ce-e799-58c3-063f3cd7b8e7&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D
set-cookie: sky_uuid=524bd7df-05ce-e799-58c3-063f3cd7b8e7; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| vak345.com/cs/202405071906.js?v=ea59f7a89d04d570fbb4ef98a8a1693c&_t=1715097966760.76 | 104.21.69.38 | 200 OK | 103 kB |
URL GET HTTP/3vak345.com/cs/202405071906.js?v=ea59f7a89d04d570fbb4ef98a8a1693c&_t=1715097966760.76 IP104.21.69.38:443
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerGoogle Trust Services LLC Subjectvak345.com Fingerprint24:4A:87:25:20:E4:20:04:34:86:6B:9B:53:2A:57:5F:39:1D:94:22 ValiditySun, 07 Apr 2024 00:32:34 GMT - Sat, 06 Jul 2024 00:32:33 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65358), with no line terminators Size103 kB (103306 bytes) Hash7fa026c60eb4c6c5ed7680b130b05e0a 522af2ee6c8b8186b76f82cadb5aef22ea76ab5a 42da7e0ebfb895e53d305373ee5d5874747936efa1f92387f8da589604ff2acd
GET /cs/202405071906.js?v=ea59f7a89d04d570fbb4ef98a8a1693c&_t=1715097966760.76 HTTP/1.1
Host: vak345.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 16:06:06 GMT
content-type: application/javascript;charset=UTF-8
vary: Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-movieads-udata: cache
x-yac-source: Yac
x-movieads-setup: combo
x-movieads-country: NO
cf-cache-status: BYPASS
set-cookie: sky_uuid=e20e1d34-7235-44f2-bc9f-155d68fef72a; expires=Wed, 07-May-2025 16:06:06 GMT; Max-Age=31536000; path=/; SameSite=None;Secure
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kq8WqHsMA6LnBqlRmQBUL1RQyb%2BQsAFbY8RS8E4g9Nvij9EblmGl0us6BneX3%2FIYkiPNt8y8cvW%2BqmzR3Hf5yCGBwnhQiKgI38zZaUDCU00Bbp1wskA7bnLOlJ5j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88027494af5156cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.acint.net/mc/?dp=167 | 193.3.184.131 | 200 OK | 154 B |
IP193.3.184.131:443
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subject*.acint.net Fingerprint73:1C:BA:EB:E3:79:9A:52:40:EB:AA:73:62:F1:A6:C3:AA:A7:6C:E1 ValidityMon, 29 Apr 2024 01:51:20 GMT - Sun, 28 Jul 2024 01:51:19 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashcfbeaf604823f038b8b46f0ac862b98c 7b9eb1dac48e74fa5f418bc456cb410f88b81d98 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /mc/?dp=167 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 16:06:07 GMT
content-type: text/html
content-length: 154
location: /mc/?dp=167&tc=1
set-cookie: test_cookie=CheckForPermission; path=/; Secure; SameSite=None; domain=.acint.net; expires=Tue, 07-May-24 16:16:07 GMT
aid=fwAACWY6UW9tkzZJvctpAq4Hi5PsgcE4mkXl4KQDH4l7raP6; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| user91471.clients-cdnnow.ru/yasdk/vw.js?v3 | 185.40.155.13 | | 1.5 kB |
URL user91471.clients-cdnnow.ru/yasdk/vw.js?v3 IP185.40.155.13:0
File typegzip compressed data, from Unix Hashfe7e1824aaeafe972299154c151f8a64 f0129a2f3dc8c7fff8d740232dfd759cf0266a24 d0a500c0126b42f820c706a805f129196db5a159af85273ae039034c12d75f93
GET /yasdk/vw.js?v3 HTTP/1.1
Host: user91471.clients-cdnnow.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:34 GMT
content-type: application/javascript
last-modified: Fri, 21 Jul 2023 13:34:19 GMT
vary: Accept-Encoding
etag: W/"64ba895b-12fc"
x-movieads-country: RU
content-encoding: gzip
x-edge-cache: HIT
x-edge-ip: 172.19.32.6
X-Firefox-Spdy: h2
|
|
| dm-eu.hybrid.ai/match?id=185&burl=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dhbrdcookie2%26bid%3D%24%7BVID%7D | 37.230.131.16 | | 0 B |
URL dm-eu.hybrid.ai/match?id=185&burl=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dhbrdcookie2%26bid%3D%24%7BVID%7D IP37.230.131.16:0 ASN#200197 Hybrid Adtech Sp.z.o.o.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?id=185&burl=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dhbrdcookie2%26bid%3D%24%7BVID%7D HTTP/1.1
Host: dm-eu.hybrid.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 07 May 2024 16:06:07 GMT
content-length: 0
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
location: https://code.moviead55.ru/go/csync?cn=hbrdcookie2&bid=c237592430317f179545
set-cookie: vid=c237592430317f179545; Expires=Wed, 07 May 2025 16:06:06 GMT; Domain=.hybrid.ai; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 568
x-xss-protection: 1; mode=block
access-control-allow-origin: https://rutor.is
access-control-allow-credentials: true
server: Hybrid Web Server
X-Firefox-Spdy: h2
|
|
| otclick-adv.ru/core/match.gif?s=30&reference=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dotclkbid%26bid%3D%23%7BUID%7D | 139.45.228.134 | | 124 B |
URL otclick-adv.ru/core/match.gif?s=30&reference=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dotclkbid%26bid%3D%23%7BUID%7D IP139.45.228.134:0
File typeHTML document, ASCII text, with CRLF line terminators Hashc73e35f73ed5c795c70cf66e99088b7c 63a9ffe5d0e5b4070819b95ef564a58d8a3a3a1c 80034a9712f07e6b0577c7e5bf6d5d718736593e7d21c81dd1a3cbdb4eb860de
GET /core/match.gif?s=30&reference=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dotclkbid%26bid%3D%23%7BUID%7D HTTP/1.1
Host: otclick-adv.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.24.0
date: Tue, 07 May 2024 16:06:07 GMT
content-length: 124
location: https://code.moviead55.ru/go/csync?cn=otclkbid&bid=VU0cO9fZFTbYzyf
p3p: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
cache-control: no-cache, max-age=0, must-revalidate, no-store
pragma: no-cache
expires: Thursday, 01-Jan-1970 00:00:00 GMT
set-cookie: idntfy=VU0cO9fZFTbYzyf; expires=Fri, 05-May-2034 16:06:07 GMT; domain=otclick-adv.ru; path=/core; SameSite=None; Secure
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| sp.ohmy.bid/cmf?0.8020022065280666 |  167.235.9.235 | | 0 B |
URL sp.ohmy.bid/cmf?0.8020022065280666 IP167.235.9.235:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cmf?0.8020022065280666 HTTP/1.1
Host: sp.ohmy.bid
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
bidder: bid-03 1.1542.871fc76
set-cookie: uid=e5f21b43-64d2-4245-bd69-88954d2cdd10.663a516f.2a98df83b583c78c; domain=.ohmy.bid; path=/; expires=Thu, 06-Jun-2024 16:06:07 GMT; SameSite=None; Secure;
access-control-allow-credentials: true
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/csync?cn=hbrdcookie2&bid=c237592430317f179545 | 193.200.65.150 | | 0 B |
URL code.moviead55.ru/go/csync?cn=hbrdcookie2&bid=c237592430317f179545 IP193.200.65.150:0 ASN#6681 Giveme Cloud Sp Z O O
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=hbrdcookie2&bid=c237592430317f179545 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=524bd7df-05ce-e799-58c3-063f3cd7b8e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
content-type: image/jpeg
content-length: 0
set-cookie: hbrdcookie2=c237592430317f179545; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| www.acint.net/rmatch?r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D&dp=167&tc=1&euid=524bd7df-05ce-e799-58c3-063f3cd7b8e7 | 193.3.184.131 | | 154 B |
URL www.acint.net/rmatch?r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D&dp=167&tc=1&euid=524bd7df-05ce-e799-58c3-063f3cd7b8e7 IP193.3.184.131:0
CertificateIssuerLet's Encrypt Subject*.acint.net Fingerprint73:1C:BA:EB:E3:79:9A:52:40:EB:AA:73:62:F1:A6:C3:AA:A7:6C:E1 ValidityMon, 29 Apr 2024 01:51:20 GMT - Sun, 28 Jul 2024 01:51:19 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashcfbeaf604823f038b8b46f0ac862b98c 7b9eb1dac48e74fa5f418bc456cb410f88b81d98 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D&dp=167&tc=1&euid=524bd7df-05ce-e799-58c3-063f3cd7b8e7 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: test_cookie=CheckForPermission; aid=fwAACWY6UW9tkzZJvctzAsYDYMNZpzo+awElskf4HFlvcGTF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 16:06:07 GMT
content-type: text/html
content-length: 154
location: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcode.moviead55.ru%252Fgo%252Fcsync%253Fcn%253Dsapecookie%2526bid%253D$%257BUSER_ID%257D&dp=14
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
set-cookie: cSyncDp14v4=1715097967; expires=Thu, 06-Jun-24 16:06:07 GMT; path=/; Secure; SameSite=None; domain=.acint.net
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/csync?cn=otclkbid&bid=VU0cO9fZFTbYzyf | 193.200.65.150 | | 0 B |
URL code.moviead55.ru/go/csync?cn=otclkbid&bid=VU0cO9fZFTbYzyf IP193.200.65.150:0 ASN#6681 Giveme Cloud Sp Z O O
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=otclkbid&bid=VU0cO9fZFTbYzyf HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=524bd7df-05ce-e799-58c3-063f3cd7b8e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
content-type: image/jpeg
content-length: 0
set-cookie: otclkbid=VU0cO9fZFTbYzyf; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| match.ohmy.bid/cm?ssp=skyadv&redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dohmybid%26bid%3D%24%7BUUID%7D | 167.235.14.51 | | 0 B |
URL match.ohmy.bid/cm?ssp=skyadv&redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dohmybid%26bid%3D%24%7BUUID%7D IP167.235.14.51:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?ssp=skyadv&redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dohmybid%26bid%3D%24%7BUUID%7D HTTP/1.1
Host: match.ohmy.bid
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
content-length: 0
bidder: bid-12 1.1542.871fc768
location: https://code.moviead55.ru/go/csync?cn=ohmybid&bid=76358c67-0c3c-49df-b1d0-68dc4b682d86
set-cookie: uid=76358c67-0c3c-49df-b1d0-68dc4b682d86.663a516f.159e1ea8153b2469; domain=.ohmy.bid; path=/; expires=Thu, 06-Jun-2024 16:06:07 GMT; SameSite=None; Secure;
access-control-allow-credentials: true
X-Firefox-Spdy: h2
|
|
| sync.dmp.otm-r.com/match/skyadvert | 194.55.244.184 | | 61 B |
URL sync.dmp.otm-r.com/match/skyadvert IP194.55.244.184:0
File typeHTML document, ASCII text Hash15021e144e30535b2fb9d5c61397649b 16b27d87e3ac760b36b622a952d8ea9378e913cd b11a68394c466213cadae32242c28c33a73dc6be3c5486ce31a67df5107507c1
GET /match/skyadvert HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.23.2
date: Tue, 07 May 2024 16:06:07 GMT
content-type: text/html; charset=utf-8
content-length: 61
access-control-allow-origin: *
location: /match/skyadvert?otcm_check=1715097967
set-cookie: mpid=NjYzYTUxNmYwODQzYTI3OA==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| sync.opendsp.ru/match/MovieAds?id=d0e3f75a-e8ac-f5a5-85a8-37ffdb83139c | 82.148.20.186 | | 43 B |
URL sync.opendsp.ru/match/MovieAds?id=d0e3f75a-e8ac-f5a5-85a8-37ffdb83139c IP82.148.20.186:0 ASN#50340 OOO Network of data-centers Selectel
File typeGIF image data, version 89a, 1 x 1 Hash07fff40b5dd495aca2ac4e1c3fbc60aa e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4 a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/MovieAds?id=d0e3f75a-e8ac-f5a5-85a8-37ffdb83139c HTTP/1.1
Host: sync.opendsp.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| exchange.buzzoola.com/cookiesync/redirect/skyadvert?redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbzcookie%26bid%3D%24%7BUUID%7D | 176.9.81.69 | | 114 B |
URL exchange.buzzoola.com/cookiesync/redirect/skyadvert?redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbzcookie%26bid%3D%24%7BUUID%7D IP176.9.81.69:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, ASCII text Hashc14de28e5e9049d06522a44bf107522f d7ad6cccef6f74d96daf1106943e47f57cbd952d 87e10fa913120c5711549454f0dc4f9fbc42a477433449f07fad6f278c3e0455
GET /cookiesync/redirect/skyadvert?redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbzcookie%26bid%3D%24%7BUUID%7D HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
content-type: text/html; charset=utf-8
content-length: 114
location: https://code.moviead55.ru/go/csync?cn=bzcookie&bid=170a2d46-81d3-47a5-59f3-c39da03e38f7
serverid: TODO
X-Firefox-Spdy: h2
|
|
| kimberlite.io/rtb/sync/skyadvert?u=1e64b93b-9685-7c00-5a14-87e64a30d998 | 217.199.220.44 | | 0 B |
URL kimberlite.io/rtb/sync/skyadvert?u=1e64b93b-9685-7c00-5a14-87e64a30d998 IP217.199.220.44:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/sync/skyadvert?u=1e64b93b-9685-7c00-5a14-87e64a30d998 HTTP/1.1
Host: kimberlite.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Tue, 07 May 2024 16:06:07 GMT
Content-Length: 0
Connection: keep-alive
cache-control: no-store
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: u=ZjpRb0rwXEM~eOOgG08C9JUeu5D7TUVdRanLeyU; path=/; max-age=7776000; samesite=none; httponly; secure
as=hPJ_CGY6UW8; max-age=604800; samesite=none; httponly; secure
f=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsolta%26bid%3DZjpRb0rwXEM; max-age=30; samesite=none; httponly; secure
n=1; max-age=30; samesite=none; httponly; secure
location: https://sync.dsp.solta.io/match/kimberlite?id=ZjpRb0rwXEM
referrer-policy: no-referrer
server-timing: app;srv=0;dur=0.0002
|
|
| code.moviead55.ru/go/csync?cn=ohmybid&bid=76358c67-0c3c-49df-b1d0-68dc4b682d86 | 193.200.65.150 | | 0 B |
URL code.moviead55.ru/go/csync?cn=ohmybid&bid=76358c67-0c3c-49df-b1d0-68dc4b682d86 IP193.200.65.150:0 ASN#6681 Giveme Cloud Sp Z O O
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=ohmybid&bid=76358c67-0c3c-49df-b1d0-68dc4b682d86 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=524bd7df-05ce-e799-58c3-063f3cd7b8e7; hbrdcookie2=c237592430317f179545; otclkbid=VU0cO9fZFTbYzyf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
content-type: image/jpeg
content-length: 0
set-cookie: ohmybid=76358c67-0c3c-49df-b1d0-68dc4b682d86; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| sync.gonet-ads.com/match/SkyAdvert?id=b1885712-b120-9b10-ab87-1c4804defaff |  188.42.105.220 | | 43 B |
URL sync.gonet-ads.com/match/SkyAdvert?id=b1885712-b120-9b10-ab87-1c4804defaff IP188.42.105.220:0
File typeGIF image data, version 89a, 1 x 1 Hash07fff40b5dd495aca2ac4e1c3fbc60aa e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4 a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/SkyAdvert?id=b1885712-b120-9b10-ab87-1c4804defaff HTTP/1.1
Host: sync.gonet-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| sync.dmp.otm-r.com/match/skyadvert?otcm_check=1715097967 | 194.55.244.184 | | 104 B |
URL sync.dmp.otm-r.com/match/skyadvert?otcm_check=1715097967 IP194.55.244.184:0
File typeHTML document, ASCII text Hash2ae254a5b0cee1384aab4b1be9be97dc ee1e7d79d6e0ac7dc86b85cc2394b8c3ecbf7262 9fa944d70f60c47de1b3aaface06086639668009bcfadf1c9879605efbf44961
GET /match/skyadvert?otcm_check=1715097967 HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: mpid=NjYzYTUxNmYwODQzYTI3OA==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.23.2
date: Tue, 07 May 2024 16:06:07 GMT
content-type: text/html; charset=utf-8
content-length: 104
access-control-allow-origin: *
location: https://code.moviead55.ru/go/csync?cn=otmbid&bid=NjYzYTUxNmYwODQzYTI3OA%3D%3D
set-cookie: mpid=NjYzYTUxNmYwODQzYTI3OA==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/csync?cn=bzcookie&bid=170a2d46-81d3-47a5-59f3-c39da03e38f7 | 193.200.65.150 | | 0 B |
URL code.moviead55.ru/go/csync?cn=bzcookie&bid=170a2d46-81d3-47a5-59f3-c39da03e38f7 IP193.200.65.150:0 ASN#6681 Giveme Cloud Sp Z O O
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=bzcookie&bid=170a2d46-81d3-47a5-59f3-c39da03e38f7 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=524bd7df-05ce-e799-58c3-063f3cd7b8e7; hbrdcookie2=c237592430317f179545; otclkbid=VU0cO9fZFTbYzyf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
content-type: image/jpeg
content-length: 0
set-cookie: bzcookie=170a2d46-81d3-47a5-59f3-c39da03e38f7; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcode.moviead55.ru%252Fgo%252Fcsync%253Fcn%253Dsapecookie%2526bid%253D$%257BUSER_ID%257D&dp=14 | 193.3.184.214 | | 142 B |
URL ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcode.moviead55.ru%252Fgo%252Fcsync%253Fcn%253Dsapecookie%2526bid%253D$%257BUSER_ID%257D&dp=14 IP193.3.184.214:0
File typeHTML document, ASCII text, with CRLF line terminators Hash82c98e8e012b79c922655461171cc2fa 0828d79135573276005b04be42d79a8a3291292b 745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcode.moviead55.ru%252Fgo%252Fcsync%253Fcn%253Dsapecookie%2526bid%253D$%257BUSER_ID%257D&dp=14 HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Tue, 07 May 2024 16:06:08 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/rmatch?dp=14&euid=3F03420A70513A66210012B902C90EB9&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=CkIDP2Y6UXC5EgAhuQ7JAoz8oOAn78krLpk3AHVeCpxzibXH; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
|
|
| dm-eu.hybrid.ai/match?id=106&vid=0900007F6F513A664936936D0273CBBD | 37.230.131.16 | | 0 B |
URL dm-eu.hybrid.ai/match?id=106&vid=0900007F6F513A664936936D0273CBBD IP37.230.131.16:0 ASN#200197 Hybrid Adtech Sp.z.o.o.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?id=106&vid=0900007F6F513A664936936D0273CBBD HTTP/1.1
Host: dm-eu.hybrid.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Cookie: vid=c237592430317f179545
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Tue, 07 May 2024 16:06:08 GMT
content-length: 0
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fdm.hybrid.ai%2Fmatch%3Fid%3D206%26vid%3D{WEBO_CID}
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 568
x-xss-protection: 1; mode=block
access-control-allow-origin: https://www.acint.net
access-control-allow-credentials: true
server: Hybrid Web Server
X-Firefox-Spdy: h2
|
|
| ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D | 193.3.184.214 | | 142 B |
URL ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D IP193.3.184.214:0
File typeHTML document, ASCII text, with CRLF line terminators Hash82c98e8e012b79c922655461171cc2fa 0828d79135573276005b04be42d79a8a3291292b 745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Tue, 07 May 2024 16:06:08 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/match?dp=14&euid=5003420A70513A662C005055024C0C09
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=CkIDUGY6UXBVUAAsCQxMAh2FZkxBEJQvhqeCLMCnKIBTzjAk; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
|
|
| exchange.buzzoola.com/cookiesync/dsp/sape-banner?uid=0900007F6F513A664936936D0273CBBD&url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126 | 176.9.81.69 | | 269 B |
URL exchange.buzzoola.com/cookiesync/dsp/sape-banner?uid=0900007F6F513A664936936D0273CBBD&url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126 IP176.9.81.69:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, ASCII text Hash88c32b9e28f8450451fd5b0172afadc8 79123289f29b90598a677845dd295b73122adad3 4f683b202fba29fe87298c75edd683549bc943657ae24a55445cd9da5917f326
GET /cookiesync/dsp/sape-banner?uid=0900007F6F513A664936936D0273CBBD&url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126 HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 307 Temporary Redirect
server: nginx
date: Tue, 07 May 2024 16:06:11 GMT
content-type: text/html; charset=utf-8
content-length: 269
location: /cookiesync/dsp/sape-banner?set_buzzoola_cookie=t&uid=0900007F6F513A664936936D0273CBBD&url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126
set-cookie: uuid=904cdd28-ebf1-407c-40bb-29c75511cfa2; Path=/; Domain=buzzoola.com; Expires=Thu, 06 Jun 2024 16:06:11 GMT; Max-Age=2592000; Secure; SameSite=None
serverid: TODO
X-Firefox-Spdy: h2
|
|
| sync.gonet-ads.com/match/sape.js?id=0900007F6F513A664936936D0273CBBD | 188.42.105.220 | | 43 B |
URL sync.gonet-ads.com/match/sape.js?id=0900007F6F513A664936936D0273CBBD IP188.42.105.220:0
File typeGIF image data, version 89a, 1 x 1 Hash07fff40b5dd495aca2ac4e1c3fbc60aa e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4 a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/sape.js?id=0900007F6F513A664936936D0273CBBD HTTP/1.1
Host: sync.gonet-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:08 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| match.ohmy.bid/cm?ssp=sape&redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D | 167.235.14.51 | | 0 B |
URL match.ohmy.bid/cm?ssp=sape&redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D IP167.235.14.51:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?ssp=sape&redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D HTTP/1.1
Host: match.ohmy.bid
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Cookie: uid=76358c67-0c3c-49df-b1d0-68dc4b682d86.663a516f.159e1ea8153b2469
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Tue, 07 May 2024 16:06:08 GMT
content-length: 0
bidder: bid-28 1.1542.871fc768
location: https://mc.acint.net/match?dp=217&euid=76358c67-0c3c-49df-b1d0-68dc4b682d86
access-control-allow-credentials: true
X-Firefox-Spdy: h2
|
|
| sync.dmp.otm-r.com/match/sape?id=0900007F6F513A664936936D0273CBBD | 194.55.244.184 | | 94 B |
URL sync.dmp.otm-r.com/match/sape?id=0900007F6F513A664936936D0273CBBD IP194.55.244.184:0
File typeHTML document, ASCII text Hash6f04c69d760f004dacdd71509b78a78f 2ba0d94273a5126e96f66ae96c1f6e75a45abb92 9efa9dc73274f4e00e5b314e897af6467141a33bcecf9cb2b8da4622d70bdd7e
GET /match/sape?id=0900007F6F513A664936936D0273CBBD HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Cookie: mpid=NjYzYTUxNmYwODQzYTI3OA==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.23.2
date: Tue, 07 May 2024 16:06:08 GMT
content-type: text/html; charset=utf-8
content-length: 94
access-control-allow-origin: *
location: https://www.acint.net/match?dp=68&euid=NjYzYTUxNmYwODQzYTI3OA%3D%3D
set-cookie: mpid=NjYzYTUxNmYwODQzYTI3OA==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| sync.opendsp.ru/match/sape_ex?id=0900007F6F513A664936936D0273CBBD | 82.148.20.186 | | 43 B |
URL sync.opendsp.ru/match/sape_ex?id=0900007F6F513A664936936D0273CBBD IP82.148.20.186:0 ASN#50340 OOO Network of data-centers Selectel
File typeGIF image data, version 89a, 1 x 1 Hash07fff40b5dd495aca2ac4e1c3fbc60aa e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4 a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/sape_ex?id=0900007F6F513A664936936D0273CBBD HTTP/1.1
Host: sync.opendsp.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:08 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| a.utraff.com/sync?ssp=8&id=0900007F6F513A664936936D0273CBBD | 104.26.7.189 | | 0 B |
URL a.utraff.com/sync?ssp=8&id=0900007F6F513A664936936D0273CBBD IP104.26.7.189:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?ssp=8&id=0900007F6F513A664936936D0273CBBD HTTP/1.1
Host: a.utraff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Tue, 07 May 2024 16:06:08 GMT
content-type: text/plain
set-cookie: preutid=1; Expires=Thu, 06 Jun 2024 19:06:08 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/
preutid=1; Expires=Thu, 06 Jun 2024 19:06:08 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-expose-headers: Content-Length,Content-Range
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eGUJE16GLjCFkihaS561bOhMxYomOT%2BLca%2FksUOuVrQZp4Go1NEK5FqsyuJhmUAzXkMvxQp25a5iXPh5Lpnzp1imy4qvA7CrZMnXjsTHZC06ezgPeh4CvKljYNLaOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8802749cbab2b521-OSL
X-Firefox-Spdy: h2
|
|
| sync.dsp.solta.io/match/kimberlite?id=ZjpRb0rwXEM | 217.199.220.72 | | 43 B |
URL sync.dsp.solta.io/match/kimberlite?id=ZjpRb0rwXEM IP217.199.220.72:0
File typeGIF image data, version 89a, 1 x 1 Hash07fff40b5dd495aca2ac4e1c3fbc60aa e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4 a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/kimberlite?id=ZjpRb0rwXEM HTTP/1.1
Host: sync.dsp.solta.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:08 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| sync.dsp.solta.io/match/sape?id=0900007F6F513A664936936D0273CBBD | 217.199.220.72 | | 43 B |
URL sync.dsp.solta.io/match/sape?id=0900007F6F513A664936936D0273CBBD IP217.199.220.72:0
File typeGIF image data, version 89a, 1 x 1 Hash07fff40b5dd495aca2ac4e1c3fbc60aa e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4 a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/sape?id=0900007F6F513A664936936D0273CBBD HTTP/1.1
Host: sync.dsp.solta.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:08 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/csync?cn=otmbid&bid=NjYzYTUxNmYwODQzYTI3OA%3D%3D | 193.200.65.150 | | 0 B |
URL code.moviead55.ru/go/csync?cn=otmbid&bid=NjYzYTUxNmYwODQzYTI3OA%3D%3D IP193.200.65.150:0 ASN#6681 Giveme Cloud Sp Z O O
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=otmbid&bid=NjYzYTUxNmYwODQzYTI3OA%3D%3D HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=524bd7df-05ce-e799-58c3-063f3cd7b8e7; hbrdcookie2=c237592430317f179545; otclkbid=VU0cO9fZFTbYzyf; ohmybid=76358c67-0c3c-49df-b1d0-68dc4b682d86; bzcookie=170a2d46-81d3-47a5-59f3-c39da03e38f7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:08 GMT
content-type: image/jpeg
content-length: 0
set-cookie: otmbid=NjYzYTUxNmYwODQzYTI3OA==; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| kimberlite.io/rtb/sync/sape2?u=0900007F6F513A664936936D0273CBBD | 217.199.220.44 | | 0 B |
URL kimberlite.io/rtb/sync/sape2?u=0900007F6F513A664936936D0273CBBD IP217.199.220.44:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/sync/sape2?u=0900007F6F513A664936936D0273CBBD HTTP/1.1
Host: kimberlite.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Cookie: as=hPJ_CGY6UW8; f=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsolta%26bid%3DZjpRb0rwXEM; n=1; u=ZjpRb0rwXEM~eOOgG08C9JUeu5D7TUVdRanLeyU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Tue, 07 May 2024 16:06:08 GMT
Content-Length: 0
Connection: keep-alive
cache-control: no-store
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: as=-WrUeGY6UXCE8n8IZjpRbw; max-age=604800; samesite=none; httponly; secure
n=2; max-age=30; samesite=none; httponly; secure
location: https://solta-sync.rutarget.ru/sync
referrer-policy: no-referrer
server-timing: app;srv=0;dur=0.0003
|
|
| pix.bumlam.com/sync/sape/check?sspuid=0900007F6F513A664936936D0273CBBD | 31.172.81.172 | | 0 B |
URL pix.bumlam.com/sync/sape/check?sspuid=0900007F6F513A664936936D0273CBBD IP31.172.81.172:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/sape/check?sspuid=0900007F6F513A664936936D0273CBBD HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 07 May 2024 16:06:08 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://sync.bumlam.com/?src=sape
|
|
| s.uuidksinc.net/match/396/?remote_uid=0900007F6F513A664936936D0273CBBD | 185.98.54.153 | | 0 B |
URL s.uuidksinc.net/match/396/?remote_uid=0900007F6F513A664936936D0273CBBD IP185.98.54.153:0 ASN#39572 DataWeb Global Group B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/396/?remote_uid=0900007F6F513A664936936D0273CBBD HTTP/1.1
Host: s.uuidksinc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.23.2
date: Tue, 07 May 2024 16:06:08 GMT
content-length: 0
location: https://www.acint.net/match?dp=127&euid=pMELjnHo0ERgEKVarsQh
set-cookie: jcsuuid=pMELjnHo0ERgEKVarsQh; expires=Wed, 07 May 2025 16:06:08 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| sync.bumlam.com/?src=sap1&uid=0900007F6F513A664936936D0273CBBD | 31.172.81.128 | | 0 B |
URL sync.bumlam.com/?src=sap1&uid=0900007F6F513A664936936D0273CBBD IP31.172.81.128:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&uid=0900007F6F513A664936936D0273CBBD HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Tue, 07 May 2024 16:06:08 GMT
Content-Length: 0
Connection: close
Set-Cookie: suuid3=IiRiNzIzZDJkOC0wYzhiLTExZWYtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Mon, 02 May 2044 16:06:08 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync.bumlam.com/?src=sap1&s_data=CAIQARjwoumxBmIgMDkwMDAwN0Y2RjUxM0E2NjQ5MzY5MzZEMDI3M0NCQkSiARC3I9LYDIsR74bgACWQwGR8
ETag: b723d2d8-0c8b-11ef-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
|
|
| sync.upravel.com/sape/sync | 195.201.193.156 | | 0 B |
URL sync.upravel.com/sape/sync IP195.201.193.156:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Tue, 07 May 2024 16:06:08 GMT
content-type: image/png
content-length: 0
location: https://sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
set-cookie: session_tptc=1715097968441;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
session_tptc-legacy=1715097968441;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
|
|
| nr.bidderstack.com/sape/cm?user_id=0900007F6F513A664936936D0273CBBD | 195.201.240.61 | | 0 B |
URL nr.bidderstack.com/sape/cm?user_id=0900007F6F513A664936936D0273CBBD IP195.201.240.61:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/cm?user_id=0900007F6F513A664936936D0273CBBD HTTP/1.1
Host: nr.bidderstack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 07 May 2024 16:06:08 GMT
Content-Length: 0
Connection: keep-alive
Location: /sape/cm?user_id=0900007F6F513A664936936D0273CBBD&pupa=1
Set-Cookie: pupa=640e7186-c82e-8e96-3510-09e21081c185; domain=.bidderstack.com; path=/; expires=Wed, 07-May-2025 16:06:08 GMT;
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
|
|
| acint.net/match?dp=14&euid=5003420A70513A662C005055024C0C09 | 193.3.184.131 | | 43 B |
URL acint.net/match?dp=14&euid=5003420A70513A662C005055024C0C09 IP193.3.184.131:0
File typeGIF image data, version 89a, 1 x 1 Hashad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=14&euid=5003420A70513A662C005055024C0C09 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAACWY6UW9tkzZJvctzAsYDYMNZpzo+awElskf4HFlvcGTF; cSyncDp14v6=1715097967; cSyncDp17v2=1715097967; cSyncDp45v5=1715097967; cSyncDp53v5=1715097967; cSyncDp62v2=1715097967; cSyncDp67v3=1715097967; cSyncDp68v3=1715097967; cSyncDp71v2=1715097967; cSyncDp80v2=1715097967; cSyncDp85v2=1715097967; cSyncDp95v4=1715097967; cSyncDp98v3=1715097967; cSyncDp104v2=1715097967; cSyncDp107v2=1715097967; cSyncDp110v3=1715097967; cSyncDp125v4=1715097967; cSyncDp126v3=1715097967; cSyncDp127v2=1715097967; cSyncDp129v2=1715097967; cSyncDp136v3=1715097967; cSyncDp146v2=1715097967; cSyncDp148v2=1715097967; cSyncDp149v3=1715097967; cSyncDp151v2=1715097967; cSyncDp251v1=1715097967; cSyncDp186v2=1715097967; cSyncDp217v2=1715097967; cSyncDp235v2=1715097967; cSyncDp239v2=1715097967; cSyncDp243v2=1715097967; cSyncDp260v2=1715097967; cSyncDp244v2=1715097967; cSyncDp248v2=1715097967; cSyncDp261v1=1715097967; cSyncDp289v2=1715097967; cSyncDp293v1=1715097967; cSyncDp296v2=1715097967; cSyncDp312v1=1715097967; cSyncDp14v4=1715097967
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 07 May 2024 16:06:08 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
|
|
| acint.net/rmatch?dp=14&euid=3F03420A70513A66210012B902C90EB9&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D | 193.3.184.131 | | 154 B |
URL acint.net/rmatch?dp=14&euid=3F03420A70513A66210012B902C90EB9&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D IP193.3.184.131:0
File typeHTML document, ASCII text, with CRLF line terminators Hashcfbeaf604823f038b8b46f0ac862b98c 7b9eb1dac48e74fa5f418bc456cb410f88b81d98 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=14&euid=3F03420A70513A66210012B902C90EB9&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: test_cookie=CheckForPermission; aid=fwAACWY6UW9tkzZJvctzAsYDYMNZpzo+awElskf4HFlvcGTF; cSyncDp14v6=1715097967; cSyncDp17v2=1715097967; cSyncDp45v5=1715097967; cSyncDp53v5=1715097967; cSyncDp62v2=1715097967; cSyncDp67v3=1715097967; cSyncDp68v3=1715097967; cSyncDp71v2=1715097967; cSyncDp80v2=1715097967; cSyncDp85v2=1715097967; cSyncDp95v4=1715097967; cSyncDp98v3=1715097967; cSyncDp104v2=1715097967; cSyncDp107v2=1715097967; cSyncDp110v3=1715097967; cSyncDp125v4=1715097967; cSyncDp126v3=1715097967; cSyncDp127v2=1715097967; cSyncDp129v2=1715097967; cSyncDp136v3=1715097967; cSyncDp146v2=1715097967; cSyncDp148v2=1715097967; cSyncDp149v3=1715097967; cSyncDp151v2=1715097967; cSyncDp251v1=1715097967; cSyncDp186v2=1715097967; cSyncDp217v2=1715097967; cSyncDp235v2=1715097967; cSyncDp239v2=1715097967; cSyncDp243v2=1715097967; cSyncDp260v2=1715097967; cSyncDp244v2=1715097967; cSyncDp248v2=1715097967; cSyncDp261v1=1715097967; cSyncDp289v2=1715097967; cSyncDp293v1=1715097967; cSyncDp296v2=1715097967; cSyncDp312v1=1715097967; cSyncDp14v4=1715097967
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 16:06:08 GMT
content-type: text/html
content-length: 154
location: https://code.moviead55.ru/go/csync?cn=sapecookie&bid=0900007F6F513A664936936D0273CBBD
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
|
|
| www.acint.net/match?dp=68&euid=NjYzYTUxNmYwODQzYTI3OA%3D%3D | 193.3.184.131 | | 43 B |
URL www.acint.net/match?dp=68&euid=NjYzYTUxNmYwODQzYTI3OA%3D%3D IP193.3.184.131:0
CertificateIssuerLet's Encrypt Subject*.acint.net Fingerprint73:1C:BA:EB:E3:79:9A:52:40:EB:AA:73:62:F1:A6:C3:AA:A7:6C:E1 ValidityMon, 29 Apr 2024 01:51:20 GMT - Sun, 28 Jul 2024 01:51:19 GMT
File typeGIF image data, version 89a, 1 x 1 Hashad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=68&euid=NjYzYTUxNmYwODQzYTI3OA%3D%3D HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAACWY6UW9tkzZJvctzAsYDYMNZpzo+awElskf4HFlvcGTF; cSyncDp14v6=1715097967; cSyncDp17v2=1715097967; cSyncDp45v5=1715097967; cSyncDp53v5=1715097967; cSyncDp62v2=1715097967; cSyncDp67v3=1715097967; cSyncDp68v3=1715097967; cSyncDp71v2=1715097967; cSyncDp80v2=1715097967; cSyncDp85v2=1715097967; cSyncDp95v4=1715097967; cSyncDp98v3=1715097967; cSyncDp104v2=1715097967; cSyncDp107v2=1715097967; cSyncDp110v3=1715097967; cSyncDp125v4=1715097967; cSyncDp126v3=1715097967; cSyncDp127v2=1715097967; cSyncDp129v2=1715097967; cSyncDp136v3=1715097967; cSyncDp146v2=1715097967; cSyncDp148v2=1715097967; cSyncDp149v3=1715097967; cSyncDp151v2=1715097967; cSyncDp251v1=1715097967; cSyncDp186v2=1715097967; cSyncDp217v2=1715097967; cSyncDp235v2=1715097967; cSyncDp239v2=1715097967; cSyncDp243v2=1715097967; cSyncDp260v2=1715097967; cSyncDp244v2=1715097967; cSyncDp248v2=1715097967; cSyncDp261v1=1715097967; cSyncDp289v2=1715097967; cSyncDp293v1=1715097967; cSyncDp296v2=1715097967; cSyncDp312v1=1715097967; cSyncDp14v4=1715097967
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 07 May 2024 16:06:08 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
|
|
| exchange.buzzoola.com/cookiesync/dsp/sape-banner?set_buzzoola_cookie=t&uid=0900007F6F513A664936936D0273CBBD&url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126 | 176.9.81.69 | | 156 B |
URL exchange.buzzoola.com/cookiesync/dsp/sape-banner?set_buzzoola_cookie=t&uid=0900007F6F513A664936936D0273CBBD&url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126 IP176.9.81.69:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, ASCII text Hashee91d09d077ce0170b5b67e4b71cad26 975e75fd3f504fac76439fce673f83dae75ab94c b52c394471abd8c3e78c165e73105f12c73b65f27d1732d971450bcbc7d57c83
GET /cookiesync/dsp/sape-banner?set_buzzoola_cookie=t&uid=0900007F6F513A664936936D0273CBBD&url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126 HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: uuid=904cdd28-ebf1-407c-40bb-29c75511cfa2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Tue, 07 May 2024 16:06:08 GMT
content-type: text/html; charset=utf-8
content-length: 156
location: https://mc.acint.net/rmatch?dp=126&euid=904cdd28-ebf1-407c-40bb-29c75511cfa2&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126
serverid: TODO
X-Firefox-Spdy: h2
|
|
| match.new-programmatic.com/userbind?src=sape&id=0900007F6F513A664936936D0273CBBD | 217.65.2.150 | | 0 B |
URL match.new-programmatic.com/userbind?src=sape&id=0900007F6F513A664936936D0273CBBD IP217.65.2.150:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=sape&id=0900007F6F513A664936936D0273CBBD HTTP/1.1
Host: match.new-programmatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.22.1
Date: Tue, 07 May 2024 16:06:08 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
|
|
| cs.agency2.ru/p?ssp=sp&uid=0900007F6F513A664936936D0273CBBD | 23.111.107.44 | | 0 B |
URL cs.agency2.ru/p?ssp=sp&uid=0900007F6F513A664936936D0273CBBD IP23.111.107.44:0 ASN#39134 Edinaya Set Limited Liability Company
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&uid=0900007F6F513A664936936D0273CBBD HTTP/1.1
Host: cs.agency2.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 07 May 2024 16:06:08 GMT
Content-Length: 0
Connection: keep-alive
Server: fasthttp
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.acint.net/match?dp=186&euid=aa077704-05a6-40c4-88b6-f145476b00a0
Set-Cookie: uuid=aa077704-05a6-40c4-88b6-f145476b00a0; expires=Mon, 28 Apr 2025 16:06:08 GMT; domain=agency2.ru; path=/; secure; SameSite=None
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.107.44
|
|
| sync.programmatica.com/match/01 | 158.160.128.78 | | 43 B |
URL sync.programmatica.com/match/01 IP158.160.128.78:0 ASN#200350 Yandex.Cloud LLC
File typeGIF image data, version 89a, 1 x 1 Hash07fff40b5dd495aca2ac4e1c3fbc60aa e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4 a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/01 HTTP/1.1
Host: sync.programmatica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 16:06:08 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| mc.acint.net/match?dp=217&euid=76358c67-0c3c-49df-b1d0-68dc4b682d86 | 193.3.184.131 | | 43 B |
URL mc.acint.net/match?dp=217&euid=76358c67-0c3c-49df-b1d0-68dc4b682d86 IP193.3.184.131:0
File typeGIF image data, version 89a, 1 x 1 Hashad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=217&euid=76358c67-0c3c-49df-b1d0-68dc4b682d86 HTTP/1.1
Host: mc.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAACWY6UW9tkzZJvctzAsYDYMNZpzo+awElskf4HFlvcGTF; cSyncDp14v6=1715097967; cSyncDp17v2=1715097967; cSyncDp45v5=1715097967; cSyncDp53v5=1715097967; cSyncDp62v2=1715097967; cSyncDp67v3=1715097967; cSyncDp68v3=1715097967; cSyncDp71v2=1715097967; cSyncDp80v2=1715097967; cSyncDp85v2=1715097967; cSyncDp95v4=1715097967; cSyncDp98v3=1715097967; cSyncDp104v2=1715097967; cSyncDp107v2=1715097967; cSyncDp110v3=1715097967; cSyncDp125v4=1715097967; cSyncDp126v3=1715097967; cSyncDp127v2=1715097967; cSyncDp129v2=1715097967; cSyncDp136v3=1715097967; cSyncDp146v2=1715097967; cSyncDp148v2=1715097967; cSyncDp149v3=1715097967; cSyncDp151v2=1715097967; cSyncDp251v1=1715097967; cSyncDp186v2=1715097967; cSyncDp217v2=1715097967; cSyncDp235v2=1715097967; cSyncDp239v2=1715097967; cSyncDp243v2=1715097967; cSyncDp260v2=1715097967; cSyncDp244v2=1715097967; cSyncDp248v2=1715097967; cSyncDp261v1=1715097967; cSyncDp289v2=1715097967; cSyncDp293v1=1715097967; cSyncDp296v2=1715097967; cSyncDp312v1=1715097967; cSyncDp14v4=1715097967
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 07 May 2024 16:06:08 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
|
|
| pixel.dsp.onetarget.ru/sape/pixel?id=0900007F6F513A664936936D0273CBBD | 130.193.53.230 | | 0 B |
URL pixel.dsp.onetarget.ru/sape/pixel?id=0900007F6F513A664936936D0273CBBD IP130.193.53.230:0 ASN#200350 Yandex.Cloud LLC
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/pixel?id=0900007F6F513A664936936D0273CBBD HTTP/1.1
Host: pixel.dsp.onetarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 07 May 2024 16:06:08 GMT
content-length: 0
location: https://x01.aidata.io/0.gif?pid=5813217&id=ed587fa6-4e88-4fdd-9276-dce4745133ca
set-cookie: USER_ID=ed587fa6-4e88-4fdd-9276-dce4745133ca;max-age=2147483647;Secure;HttpOnly;SameSite=None
SAPE_USER_ID=0900007F6F513A664936936D0273CBBD;max-age=30758400;Secure;HttpOnly;SameSite=None
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-max-age: 1728000
X-Firefox-Spdy: h2
|
|
| www.acint.net/match?dp=127&euid=pMELjnHo0ERgEKVarsQh | 193.3.184.131 | | 43 B |
URL www.acint.net/match?dp=127&euid=pMELjnHo0ERgEKVarsQh IP193.3.184.131:0
CertificateIssuerLet's Encrypt Subject*.acint.net Fingerprint73:1C:BA:EB:E3:79:9A:52:40:EB:AA:73:62:F1:A6:C3:AA:A7:6C:E1 ValidityMon, 29 Apr 2024 01:51:20 GMT - Sun, 28 Jul 2024 01:51:19 GMT
File typeGIF image data, version 89a, 1 x 1 Hashad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=127&euid=pMELjnHo0ERgEKVarsQh HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAACWY6UW9tkzZJvctzAsYDYMNZpzo+awElskf4HFlvcGTF; cSyncDp14v6=1715097967; cSyncDp17v2=1715097967; cSyncDp45v5=1715097967; cSyncDp53v5=1715097967; cSyncDp62v2=1715097967; cSyncDp67v3=1715097967; cSyncDp68v3=1715097967; cSyncDp71v2=1715097967; cSyncDp80v2=1715097967; cSyncDp85v2=1715097967; cSyncDp95v4=1715097967; cSyncDp98v3=1715097967; cSyncDp104v2=1715097967; cSyncDp107v2=1715097967; cSyncDp110v3=1715097967; cSyncDp125v4=1715097967; cSyncDp126v3=1715097967; cSyncDp127v2=1715097967; cSyncDp129v2=1715097967; cSyncDp136v3=1715097967; cSyncDp146v2=1715097967; cSyncDp148v2=1715097967; cSyncDp149v3=1715097967; cSyncDp151v2=1715097967; cSyncDp251v1=1715097967; cSyncDp186v2=1715097967; cSyncDp217v2=1715097967; cSyncDp235v2=1715097967; cSyncDp239v2=1715097967; cSyncDp243v2=1715097967; cSyncDp260v2=1715097967; cSyncDp244v2=1715097967; cSyncDp248v2=1715097967; cSyncDp261v1=1715097967; cSyncDp289v2=1715097967; cSyncDp293v1=1715097967; cSyncDp296v2=1715097967; cSyncDp312v1=1715097967; cSyncDp14v4=1715097967
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 07 May 2024 16:06:08 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
|
|
| ssp.al-adtech.com/api/sync/sape | 45.139.25.121 | | 0 B |
URL ssp.al-adtech.com/api/sync/sape IP45.139.25.121:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/sync/sape HTTP/1.1
Host: ssp.al-adtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.20.1
Date: Tue, 07 May 2024 16:06:08 GMT
Content-Length: 0
Connection: keep-alive
Vary: Origin
Access-Control-Allow-Origin:
Access-Control-Allow-Credentials: true
Location: https://mc.acint.net/rmatch?dp=261&euid=33aa44b4-172c-4838-a83f-f17f945a696d&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D261
Set-Cookie: afp_cookie=gAAAAABmOlFwO3nGc5J-6754sHZrNs0-jhue3fW_pYGzg8q07fqFuuMm-yJSEOgR1tcjcsPC0dCR4YzP3mRdYVwbpUxHnOaqGZ-eQCJnJ0BQ0IAoI-3RrxAR3-2P4XU0emH8-YsD_gCj_dZtfKcRQ7NCw77qDc0X2m5t9rTuSusse4qp3dYEtLKQN83bZMCRXKz_vNVzTUiKC5m_6wM0FXwSiejbvsBg4A==$; expires=Fri, 07 Jun 2024 16:06:08 GMT; path=/; secure; SameSite=None
|
|
| adx.com.ru/sape-sync?uid=0900007F6F513A664936936D0273CBBD | 83.222.104.70 | | 85 B |
URL adx.com.ru/sape-sync?uid=0900007F6F513A664936936D0273CBBD IP83.222.104.70:0
File typeHTML document, ASCII text Hash2a1d3ea3f68d698f4032769c5f4da56a 45b085b9a2884507893678feb884e5c2719391cb 47c96cad73d2f75ef054c088a915964af838b8cffb48070036fea01934d3cf02
GET /sape-sync?uid=0900007F6F513A664936936D0273CBBD HTTP/1.1
Host: adx.com.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.26.0
date: Tue, 07 May 2024 16:06:08 GMT
content-type: text/html; charset=utf-8
content-length: 85
cache-control: max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
location: /sync?sspKey=25&sspUserID=0900007F6F513A664936936D0273CBBD
p3p: CP="adx.com.ru does not have a P3P policy"
set-cookie: user=663a5170991c7a00014d5539; Path=/; Domain=adx.com.ru; Max-Age=31536000; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| mc.acint.net/rmatch?dp=110&euid=fa00ffb0adb84813b778df5123151609&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D110 | 193.3.184.131 | | 154 B |
URL mc.acint.net/rmatch?dp=110&euid=fa00ffb0adb84813b778df5123151609&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D110 IP193.3.184.131:0
File typeHTML document, ASCII text, with CRLF line terminators Hashcfbeaf604823f038b8b46f0ac862b98c 7b9eb1dac48e74fa5f418bc456cb410f88b81d98 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=110&euid=fa00ffb0adb84813b778df5123151609&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D110 HTTP/1.1
Host: mc.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAACWY6UW9tkzZJvctzAsYDYMNZpzo+awElskf4HFlvcGTF; cSyncDp14v6=1715097967; cSyncDp17v2=1715097967; cSyncDp45v5=1715097967; cSyncDp53v5=1715097967; cSyncDp62v2=1715097967; cSyncDp67v3=1715097967; cSyncDp68v3=1715097967; cSyncDp71v2=1715097967; cSyncDp80v2=1715097967; cSyncDp85v2=1715097967; cSyncDp95v4=1715097967; cSyncDp98v3=1715097967; cSyncDp104v2=1715097967; cSyncDp107v2=1715097967; cSyncDp110v3=1715097967; cSyncDp125v4=1715097967; cSyncDp126v3=1715097967; cSyncDp127v2=1715097967; cSyncDp129v2=1715097967; cSyncDp136v3=1715097967; cSyncDp146v2=1715097967; cSyncDp148v2=1715097967; cSyncDp149v3=1715097967; cSyncDp151v2=1715097967; cSyncDp251v1=1715097967; cSyncDp186v2=1715097967; cSyncDp217v2=1715097967; cSyncDp235v2=1715097967; cSyncDp239v2=1715097967; cSyncDp243v2=1715097967; cSyncDp260v2=1715097967; cSyncDp244v2=1715097967; cSyncDp248v2=1715097967; cSyncDp261v1=1715097967; cSyncDp289v2=1715097967; cSyncDp293v1=1715097967; cSyncDp296v2=1715097967; cSyncDp312v1=1715097967; cSyncDp14v4=1715097967
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 16:06:08 GMT
content-type: text/html
content-length: 154
location: https://mc.acint.net/cmatch?dp=110
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/csync?cn=sapecookie&bid=0900007F6F513A664936936D0273CBBD | 193.200.65.150 | | 0 B |
URL code.moviead55.ru/go/csync?cn=sapecookie&bid=0900007F6F513A664936936D0273CBBD IP193.200.65.150:0 ASN#6681 Giveme Cloud Sp Z O O
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=sapecookie&bid=0900007F6F513A664936936D0273CBBD HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=524bd7df-05ce-e799-58c3-063f3cd7b8e7; hbrdcookie2=c237592430317f179545; otclkbid=VU0cO9fZFTbYzyf; ohmybid=76358c67-0c3c-49df-b1d0-68dc4b682d86; bzcookie=170a2d46-81d3-47a5-59f3-c39da03e38f7; otmbid=NjYzYTUxNmYwODQzYTI3OA==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:08 GMT
content-type: image/jpeg
content-length: 0
set-cookie: sapecookie=0900007F6F513A664936936D0273CBBD; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0 | 195.201.193.156 | | 0 B |
URL sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0 IP195.201.193.156:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0 HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: session_tptc=1715097968441
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Tue, 07 May 2024 16:06:08 GMT
content-type: image/png
content-length: 0
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: user_id=a237064a-1665-4c2d-a3ea-d60eef57d730;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
user_id-legacy=a237064a-1665-4c2d-a3ea-d60eef57d730;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
location: https://www.acint.net/rmatch?dp=71&euid=a237064a-1665-4c2d-a3ea-d60eef57d730&r=https%3A%2F%2Facint.net%2Fcmatch%3Fdp%3D71
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
|
|
| mc.acint.net/rmatch?dp=126&euid=904cdd28-ebf1-407c-40bb-29c75511cfa2&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126 | 193.3.184.131 | | 154 B |
URL mc.acint.net/rmatch?dp=126&euid=904cdd28-ebf1-407c-40bb-29c75511cfa2&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126 IP193.3.184.131:0
File typeHTML document, ASCII text, with CRLF line terminators Hashcfbeaf604823f038b8b46f0ac862b98c 7b9eb1dac48e74fa5f418bc456cb410f88b81d98 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=126&euid=904cdd28-ebf1-407c-40bb-29c75511cfa2&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126 HTTP/1.1
Host: mc.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAACWY6UW9tkzZJvctzAsYDYMNZpzo+awElskf4HFlvcGTF; cSyncDp14v6=1715097967; cSyncDp17v2=1715097967; cSyncDp45v5=1715097967; cSyncDp53v5=1715097967; cSyncDp62v2=1715097967; cSyncDp67v3=1715097967; cSyncDp68v3=1715097967; cSyncDp71v2=1715097967; cSyncDp80v2=1715097967; cSyncDp85v2=1715097967; cSyncDp95v4=1715097967; cSyncDp98v3=1715097967; cSyncDp104v2=1715097967; cSyncDp107v2=1715097967; cSyncDp110v3=1715097967; cSyncDp125v4=1715097967; cSyncDp126v3=1715097967; cSyncDp127v2=1715097967; cSyncDp129v2=1715097967; cSyncDp136v3=1715097967; cSyncDp146v2=1715097967; cSyncDp148v2=1715097967; cSyncDp149v3=1715097967; cSyncDp151v2=1715097967; cSyncDp251v1=1715097967; cSyncDp186v2=1715097967; cSyncDp217v2=1715097967; cSyncDp235v2=1715097967; cSyncDp239v2=1715097967; cSyncDp243v2=1715097967; cSyncDp260v2=1715097967; cSyncDp244v2=1715097967; cSyncDp248v2=1715097967; cSyncDp261v1=1715097967; cSyncDp289v2=1715097967; cSyncDp293v1=1715097967; cSyncDp296v2=1715097967; cSyncDp312v1=1715097967; cSyncDp14v4=1715097967
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 16:06:08 GMT
content-type: text/html
content-length: 154
location: https://mc.acint.net/cmatch?dp=126
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
|
|
| sync.bumlam.com/?src=sap1&s_data=CAIQARjwoumxBmIgMDkwMDAwN0Y2RjUxM0E2NjQ5MzY5MzZEMDI3M0NCQkSiARC3I9LYDIsR74bgACWQwGR8 | 31.172.81.159 | | 0 B |
URL sync.bumlam.com/?src=sap1&s_data=CAIQARjwoumxBmIgMDkwMDAwN0Y2RjUxM0E2NjQ5MzY5MzZEMDI3M0NCQkSiARC3I9LYDIsR74bgACWQwGR8 IP31.172.81.159:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&s_data=CAIQARjwoumxBmIgMDkwMDAwN0Y2RjUxM0E2NjQ5MzY5MzZEMDI3M0NCQkSiARC3I9LYDIsR74bgACWQwGR8 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiRiNzIzZDJkOC0wYzhiLTExZWYtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 16:06:08 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: close
Set-Cookie: suuid3=IiRiNzIzZDJkOC0wYzhiLTExZWYtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Mon, 02 May 2044 16:06:08 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
|
|
| www.acint.net/match?dp=186&euid=aa077704-05a6-40c4-88b6-f145476b00a0 | 193.3.184.131 | | 43 B |
URL www.acint.net/match?dp=186&euid=aa077704-05a6-40c4-88b6-f145476b00a0 IP193.3.184.131:0
CertificateIssuerLet's Encrypt Subject*.acint.net Fingerprint73:1C:BA:EB:E3:79:9A:52:40:EB:AA:73:62:F1:A6:C3:AA:A7:6C:E1 ValidityMon, 29 Apr 2024 01:51:20 GMT - Sun, 28 Jul 2024 01:51:19 GMT
File typeGIF image data, version 89a, 1 x 1 Hashad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=186&euid=aa077704-05a6-40c4-88b6-f145476b00a0 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAACWY6UW9tkzZJvctzAsYDYMNZpzo+awElskf4HFlvcGTF; cSyncDp14v6=1715097967; cSyncDp17v2=1715097967; cSyncDp45v5=1715097967; cSyncDp53v5=1715097967; cSyncDp62v2=1715097967; cSyncDp67v3=1715097967; cSyncDp68v3=1715097967; cSyncDp71v2=1715097967; cSyncDp80v2=1715097967; cSyncDp85v2=1715097967; cSyncDp95v4=1715097967; cSyncDp98v3=1715097967; cSyncDp104v2=1715097967; cSyncDp107v2=1715097967; cSyncDp110v3=1715097967; cSyncDp125v4=1715097967; cSyncDp126v3=1715097967; cSyncDp127v2=1715097967; cSyncDp129v2=1715097967; cSyncDp136v3=1715097967; cSyncDp146v2=1715097967; cSyncDp148v2=1715097967; cSyncDp149v3=1715097967; cSyncDp151v2=1715097967; cSyncDp251v1=1715097967; cSyncDp186v2=1715097967; cSyncDp217v2=1715097967; cSyncDp235v2=1715097967; cSyncDp239v2=1715097967; cSyncDp243v2=1715097967; cSyncDp260v2=1715097967; cSyncDp244v2=1715097967; cSyncDp248v2=1715097967; cSyncDp261v1=1715097967; cSyncDp289v2=1715097967; cSyncDp293v1=1715097967; cSyncDp296v2=1715097967; cSyncDp312v1=1715097967; cSyncDp14v4=1715097967
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 07 May 2024 16:06:08 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
|
|
| www.acint.net/match?dp=98&euid=82e23aad-c60f-4223-a943-d5e1850d508f | 193.3.184.131 | | 43 B |
URL www.acint.net/match?dp=98&euid=82e23aad-c60f-4223-a943-d5e1850d508f IP193.3.184.131:0
CertificateIssuerLet's Encrypt Subject*.acint.net Fingerprint73:1C:BA:EB:E3:79:9A:52:40:EB:AA:73:62:F1:A6:C3:AA:A7:6C:E1 ValidityMon, 29 Apr 2024 01:51:20 GMT - Sun, 28 Jul 2024 01:51:19 GMT
File typeGIF image data, version 89a, 1 x 1 Hashad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=98&euid=82e23aad-c60f-4223-a943-d5e1850d508f HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAACWY6UW9tkzZJvctzAsYDYMNZpzo+awElskf4HFlvcGTF; cSyncDp14v6=1715097967; cSyncDp17v2=1715097967; cSyncDp45v5=1715097967; cSyncDp53v5=1715097967; cSyncDp62v2=1715097967; cSyncDp67v3=1715097967; cSyncDp68v3=1715097967; cSyncDp71v2=1715097967; cSyncDp80v2=1715097967; cSyncDp85v2=1715097967; cSyncDp95v4=1715097967; cSyncDp98v3=1715097967; cSyncDp104v2=1715097967; cSyncDp107v2=1715097967; cSyncDp110v3=1715097967; cSyncDp125v4=1715097967; cSyncDp126v3=1715097967; cSyncDp127v2=1715097967; cSyncDp129v2=1715097967; cSyncDp136v3=1715097967; cSyncDp146v2=1715097967; cSyncDp148v2=1715097967; cSyncDp149v3=1715097967; cSyncDp151v2=1715097967; cSyncDp251v1=1715097967; cSyncDp186v2=1715097967; cSyncDp217v2=1715097967; cSyncDp235v2=1715097967; cSyncDp239v2=1715097967; cSyncDp243v2=1715097967; cSyncDp260v2=1715097967; cSyncDp244v2=1715097967; cSyncDp248v2=1715097967; cSyncDp261v1=1715097967; cSyncDp289v2=1715097967; cSyncDp293v1=1715097967; cSyncDp296v2=1715097967; cSyncDp312v1=1715097967; cSyncDp14v4=1715097967
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 07 May 2024 16:06:08 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
|
|
| sync.bumlam.com/?src=sape | 31.172.81.159 | | 0 B |
URL sync.bumlam.com/?src=sape IP31.172.81.159:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sape HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiRiNzIzZDJkOC0wYzhiLTExZWYtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Tue, 07 May 2024 16:06:08 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: close
Set-Cookie: suuid3=IiRiNzIzZDJkOC0wYzhiLTExZWYtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Mon, 02 May 2044 16:06:08 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: https://pix.bumlam.com/sync/sape/sync_ok?guid=b723d2d8-0c8b-11ef-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
Access-Control-Allow-Origin: https://acint.net
Access-Control-Allow-Credentials: true
|
|
| gw-iad-bid.ymmobi.com/dsp/user/sync?dspid=c2FwZV9kc3A=&gdpr=0&gdpr_consent=0&us_privacy=0&callback=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D293%26euid%3D%7Bym_user_id%7D | 47.253.61.56 | | 0 B |
URL gw-iad-bid.ymmobi.com/dsp/user/sync?dspid=c2FwZV9kc3A=&gdpr=0&gdpr_consent=0&us_privacy=0&callback=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D293%26euid%3D%7Bym_user_id%7D IP47.253.61.56:0 ASN#45102 Alibaba US Technology Co., Ltd.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dsp/user/sync?dspid=c2FwZV9kc3A=&gdpr=0&gdpr_consent=0&us_privacy=0&callback=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D293%26euid%3D%7Bym_user_id%7D HTTP/1.1
Host: gw-iad-bid.ymmobi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 07 May 2024 16:06:08 GMT
content-length: 0
location: https://mc.acint.net/match?dp=293&euid=ym_user_c0d72fa1-6e89-40e3-8229-e799de2cda88
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token
access-control-allow-credentials: true
set-cookie: ym_user_cookie=ym_user_c0d72fa1-6e89-40e3-8229-e799de2cda88; max-age=31104000; domain=ymmobi.com; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D95%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D95%26euid%3D | 83.222.96.170 | | 126 B |
URL ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D95%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D95%26euid%3D IP83.222.96.170:0
File typeHTML document, ASCII text Hash88407a7bbe9f94ca9531323c9c639bee 7e317be46452ecf4383938313f4c850a9051d5e2 a84aff52887293679ac2e9860b55762e58ab9289e3bbaf0c5054ab1a32c7b148
GET /sspmatch?url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D95%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D95%26euid%3D HTTP/1.1
Host: ssp.bestssp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.22.0
date: Tue, 07 May 2024 16:06:08 GMT
content-type: text/html; charset=utf-8
content-length: 126
location: https://mc.acint.net/rmatch?dp=95&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95&euid=SHKVKYOJ
set-cookie: uid=SHKVKYOJ; Expires=Fri, 05 May 2034 16:06:08 GMT
X-Firefox-Spdy: h2
|
|
| mc.acint.net/rmatch?dp=261&euid=33aa44b4-172c-4838-a83f-f17f945a696d&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D261 | 193.3.184.131 | | 154 B |
URL mc.acint.net/rmatch?dp=261&euid=33aa44b4-172c-4838-a83f-f17f945a696d&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D261 IP193.3.184.131:0
File typeHTML document, ASCII text, with CRLF line terminators Hashcfbeaf604823f038b8b46f0ac862b98c 7b9eb1dac48e74fa5f418bc456cb410f88b81d98 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=261&euid=33aa44b4-172c-4838-a83f-f17f945a696d&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D261 HTTP/1.1
Host: mc.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAACWY6UW9tkzZJvctzAsYDYMNZpzo+awElskf4HFlvcGTF; cSyncDp14v6=1715097967; cSyncDp17v2=1715097967; cSyncDp45v5=1715097967; cSyncDp53v5=1715097967; cSyncDp62v2=1715097967; cSyncDp67v3=1715097967; cSyncDp68v3=1715097967; cSyncDp71v2=1715097967; cSyncDp80v2=1715097967; cSyncDp85v2=1715097967; cSyncDp95v4=1715097967; cSyncDp98v3=1715097967; cSyncDp104v2=1715097967; cSyncDp107v2=1715097967; cSyncDp110v3=1715097967; cSyncDp125v4=1715097967; cSyncDp126v3=1715097967; cSyncDp127v2=1715097967; cSyncDp129v2=1715097967; cSyncDp136v3=1715097967; cSyncDp146v2=1715097967; cSyncDp148v2=1715097967; cSyncDp149v3=1715097967; cSyncDp151v2=1715097967; cSyncDp251v1=1715097967; cSyncDp186v2=1715097967; cSyncDp217v2=1715097967; cSyncDp235v2=1715097967; cSyncDp239v2=1715097967; cSyncDp243v2=1715097967; cSyncDp260v2=1715097967; cSyncDp244v2=1715097967; cSyncDp248v2=1715097967; cSyncDp261v1=1715097967; cSyncDp289v2=1715097967; cSyncDp293v1=1715097967; cSyncDp296v2=1715097967; cSyncDp312v1=1715097967; cSyncDp14v4=1715097967
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 16:06:08 GMT
content-type: text/html
content-length: 154
location: https://mc.acint.net/cmatch?dp=261
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
|
|
| mc.acint.net/cmatch?dp=110 | 193.3.184.131 | | 154 B |
URL mc.acint.net/cmatch?dp=110 IP193.3.184.131:0
File typeHTML document, ASCII text, with CRLF line terminators Hashcfbeaf604823f038b8b46f0ac862b98c 7b9eb1dac48e74fa5f418bc456cb410f88b81d98 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /cmatch?dp=110 HTTP/1.1
Host: mc.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAACWY6UW9tkzZJvctzAsYDYMNZpzo+awElskf4HFlvcGTF; cSyncDp14v6=1715097967; cSyncDp17v2=1715097967; cSyncDp45v5=1715097967; cSyncDp53v5=1715097967; cSyncDp62v2=1715097967; cSyncDp67v3=1715097967; cSyncDp68v3=1715097967; cSyncDp71v2=1715097967; cSyncDp80v2=1715097967; cSyncDp85v2=1715097967; cSyncDp95v4=1715097967; cSyncDp98v3=1715097967; cSyncDp104v2=1715097967; cSyncDp107v2=1715097967; cSyncDp110v3=1715097967; cSyncDp125v4=1715097967; cSyncDp126v3=1715097967; cSyncDp127v2=1715097967; cSyncDp129v2=1715097967; cSyncDp136v3=1715097967; cSyncDp146v2=1715097967; cSyncDp148v2=1715097967; cSyncDp149v3=1715097967; cSyncDp151v2=1715097967; cSyncDp251v1=1715097967; cSyncDp186v2=1715097967; cSyncDp217v2=1715097967; cSyncDp235v2=1715097967; cSyncDp239v2=1715097967; cSyncDp243v2=1715097967; cSyncDp260v2=1715097967; cSyncDp244v2=1715097967; cSyncDp248v2=1715097967; cSyncDp261v1=1715097967; cSyncDp289v2=1715097967; cSyncDp293v1=1715097967; cSyncDp296v2=1715097967; cSyncDp312v1=1715097967; cSyncDp14v4=1715097967
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 16:06:08 GMT
content-type: text/html
content-length: 154
location: https://ads.betweendigital.com/match?bidder_id=73&external_user_id=0900007F6F513A664936936D0273CBBD
set-cookie: cSyncDp7v3=1715097968; expires=Thu, 06-Jun-24 16:06:08 GMT; path=/; Secure; SameSite=None; domain=.acint.net
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
|
|
| www.acint.net/rmatch?dp=71&euid=a237064a-1665-4c2d-a3ea-d60eef57d730&r=https%3A%2F%2Facint.net%2Fcmatch%3Fdp%3D71 | 193.3.184.131 | | 154 B |
URL www.acint.net/rmatch?dp=71&euid=a237064a-1665-4c2d-a3ea-d60eef57d730&r=https%3A%2F%2Facint.net%2Fcmatch%3Fdp%3D71 IP193.3.184.131:0
CertificateIssuerLet's Encrypt Subject*.acint.net Fingerprint73:1C:BA:EB:E3:79:9A:52:40:EB:AA:73:62:F1:A6:C3:AA:A7:6C:E1 ValidityMon, 29 Apr 2024 01:51:20 GMT - Sun, 28 Jul 2024 01:51:19 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashcfbeaf604823f038b8b46f0ac862b98c 7b9eb1dac48e74fa5f418bc456cb410f88b81d98 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=71&euid=a237064a-1665-4c2d-a3ea-d60eef57d730&r=https%3A%2F%2Facint.net%2Fcmatch%3Fdp%3D71 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAACWY6UW9tkzZJvctzAsYDYMNZpzo+awElskf4HFlvcGTF; cSyncDp14v6=1715097967; cSyncDp17v2=1715097967; cSyncDp45v5=1715097967; cSyncDp53v5=1715097967; cSyncDp62v2=1715097967; cSyncDp67v3=1715097967; cSyncDp68v3=1715097967; cSyncDp71v2=1715097967; cSyncDp80v2=1715097967; cSyncDp85v2=1715097967; cSyncDp95v4=1715097967; cSyncDp98v3=1715097967; cSyncDp104v2=1715097967; cSyncDp107v2=1715097967; cSyncDp110v3=1715097967; cSyncDp125v4=1715097967; cSyncDp126v3=1715097967; cSyncDp127v2=1715097967; cSyncDp129v2=1715097967; cSyncDp136v3=1715097967; cSyncDp146v2=1715097967; cSyncDp148v2=1715097967; cSyncDp149v3=1715097967; cSyncDp151v2=1715097967; cSyncDp251v1=1715097967; cSyncDp186v2=1715097967; cSyncDp217v2=1715097967; cSyncDp235v2=1715097967; cSyncDp239v2=1715097967; cSyncDp243v2=1715097967; cSyncDp260v2=1715097967; cSyncDp244v2=1715097967; cSyncDp248v2=1715097967; cSyncDp261v1=1715097967; cSyncDp289v2=1715097967; cSyncDp293v1=1715097967; cSyncDp296v2=1715097967; cSyncDp312v1=1715097967; cSyncDp14v4=1715097967
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 16:06:08 GMT
content-type: text/html
content-length: 154
location: https://acint.net/cmatch?dp=71
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
|
|
| mc.acint.net/cmatch?dp=126 | 193.3.184.131 | | 154 B |
URL mc.acint.net/cmatch?dp=126 IP193.3.184.131:0
File typeHTML document, ASCII text, with CRLF line terminators Hashcfbeaf604823f038b8b46f0ac862b98c 7b9eb1dac48e74fa5f418bc456cb410f88b81d98 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /cmatch?dp=126 HTTP/1.1
Host: mc.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAACWY6UW9tkzZJvctzAsYDYMNZpzo+awElskf4HFlvcGTF; cSyncDp14v6=1715097967; cSyncDp17v2=1715097967; cSyncDp45v5=1715097967; cSyncDp53v5=1715097967; cSyncDp62v2=1715097967; cSyncDp67v3=1715097967; cSyncDp68v3=1715097967; cSyncDp71v2=1715097967; cSyncDp80v2=1715097967; cSyncDp85v2=1715097967; cSyncDp95v4=1715097967; cSyncDp98v3=1715097967; cSyncDp104v2=1715097967; cSyncDp107v2=1715097967; cSyncDp110v3=1715097967; cSyncDp125v4=1715097967; cSyncDp126v3=1715097967; cSyncDp127v2=1715097967; cSyncDp129v2=1715097967; cSyncDp136v3=1715097967; cSyncDp146v2=1715097967; cSyncDp148v2=1715097967; cSyncDp149v3=1715097967; cSyncDp151v2=1715097967; cSyncDp251v1=1715097967; cSyncDp186v2=1715097967; cSyncDp217v2=1715097967; cSyncDp235v2=1715097967; cSyncDp239v2=1715097967; cSyncDp243v2=1715097967; cSyncDp260v2=1715097967; cSyncDp244v2=1715097967; cSyncDp248v2=1715097967; cSyncDp261v1=1715097967; cSyncDp289v2=1715097967; cSyncDp293v1=1715097967; cSyncDp296v2=1715097967; cSyncDp312v1=1715097967; cSyncDp14v4=1715097967
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 16:06:08 GMT
content-type: text/html
content-length: 154
location: https://ads.betweendigital.com/match?bidder_id=73&external_user_id=0900007F6F513A664936936D0273CBBD
set-cookie: cSyncDp7v3=1715097968; expires=Thu, 06-Jun-24 16:06:08 GMT; path=/; Secure; SameSite=None; domain=.acint.net
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
|
|
| pix.bumlam.com/sync/sape/sync_ok?guid=b723d2d8-0c8b-11ef-86e0-002590c0647c | 31.172.81.172 | | 0 B |
URL pix.bumlam.com/sync/sape/sync_ok?guid=b723d2d8-0c8b-11ef-86e0-002590c0647c IP31.172.81.172:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/sape/sync_ok?guid=b723d2d8-0c8b-11ef-86e0-002590c0647c HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiRiNzIzZDJkOC0wYzhiLTExZWYtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 07 May 2024 16:06:08 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://b723d2d8-0c8b-11ef-86e0-002590c0647c.n6.sync.bumlam.com/?src=sape
|
|
| mc.acint.net/match?dp=293&euid=ym_user_c0d72fa1-6e89-40e3-8229-e799de2cda88 | 193.3.184.131 | | 43 B |
URL mc.acint.net/match?dp=293&euid=ym_user_c0d72fa1-6e89-40e3-8229-e799de2cda88 IP193.3.184.131:0
File typeGIF image data, version 89a, 1 x 1 Hashad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=293&euid=ym_user_c0d72fa1-6e89-40e3-8229-e799de2cda88 HTTP/1.1
Host: mc.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAACWY6UW9tkzZJvctzAsYDYMNZpzo+awElskf4HFlvcGTF; cSyncDp14v6=1715097967; cSyncDp17v2=1715097967; cSyncDp45v5=1715097967; cSyncDp53v5=1715097967; cSyncDp62v2=1715097967; cSyncDp67v3=1715097967; cSyncDp68v3=1715097967; cSyncDp71v2=1715097967; cSyncDp80v2=1715097967; cSyncDp85v2=1715097967; cSyncDp95v4=1715097967; cSyncDp98v3=1715097967; cSyncDp104v2=1715097967; cSyncDp107v2=1715097967; cSyncDp110v3=1715097967; cSyncDp125v4=1715097967; cSyncDp126v3=1715097967; cSyncDp127v2=1715097967; cSyncDp129v2=1715097967; cSyncDp136v3=1715097967; cSyncDp146v2=1715097967; cSyncDp148v2=1715097967; cSyncDp149v3=1715097967; cSyncDp151v2=1715097967; cSyncDp251v1=1715097967; cSyncDp186v2=1715097967; cSyncDp217v2=1715097967; cSyncDp235v2=1715097967; cSyncDp239v2=1715097967; cSyncDp243v2=1715097967; cSyncDp260v2=1715097967; cSyncDp244v2=1715097967; cSyncDp248v2=1715097967; cSyncDp261v1=1715097967; cSyncDp289v2=1715097967; cSyncDp293v1=1715097967; cSyncDp296v2=1715097967; cSyncDp312v1=1715097967; cSyncDp14v4=1715097967
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 07 May 2024 16:06:08 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
|
|
| mc.acint.net/rmatch?dp=95&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95&euid=SHKVKYOJ | 193.3.184.131 | | 154 B |
URL mc.acint.net/rmatch?dp=95&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95&euid=SHKVKYOJ IP193.3.184.131:0
File typeHTML document, ASCII text, with CRLF line terminators Hashcfbeaf604823f038b8b46f0ac862b98c 7b9eb1dac48e74fa5f418bc456cb410f88b81d98 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=95&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95&euid=SHKVKYOJ HTTP/1.1
Host: mc.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAACWY6UW9tkzZJvctzAsYDYMNZpzo+awElskf4HFlvcGTF; cSyncDp14v6=1715097967; cSyncDp17v2=1715097967; cSyncDp45v5=1715097967; cSyncDp53v5=1715097967; cSyncDp62v2=1715097967; cSyncDp67v3=1715097967; cSyncDp68v3=1715097967; cSyncDp71v2=1715097967; cSyncDp80v2=1715097967; cSyncDp85v2=1715097967; cSyncDp95v4=1715097967; cSyncDp98v3=1715097967; cSyncDp104v2=1715097967; cSyncDp107v2=1715097967; cSyncDp110v3=1715097967; cSyncDp125v4=1715097967; cSyncDp126v3=1715097967; cSyncDp127v2=1715097967; cSyncDp129v2=1715097967; cSyncDp136v3=1715097967; cSyncDp146v2=1715097967; cSyncDp148v2=1715097967; cSyncDp149v3=1715097967; cSyncDp151v2=1715097967; cSyncDp251v1=1715097967; cSyncDp186v2=1715097967; cSyncDp217v2=1715097967; cSyncDp235v2=1715097967; cSyncDp239v2=1715097967; cSyncDp243v2=1715097967; cSyncDp260v2=1715097967; cSyncDp244v2=1715097967; cSyncDp248v2=1715097967; cSyncDp261v1=1715097967; cSyncDp289v2=1715097967; cSyncDp293v1=1715097967; cSyncDp296v2=1715097967; cSyncDp312v1=1715097967; cSyncDp14v4=1715097967
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 16:06:08 GMT
content-type: text/html
content-length: 154
location: https://mc.acint.net/cmatch?dp=95
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
|
|
| adx.com.ru/sync?sspKey=25&sspUserID=0900007F6F513A664936936D0273CBBD | 83.222.104.70 | | 231 B |
URL adx.com.ru/sync?sspKey=25&sspUserID=0900007F6F513A664936936D0273CBBD IP83.222.104.70:0
File typeHTML document, ASCII text Hashb2326972e9468850e9f1a6360f775784 0dc4926f0a2e2df8785541aed7670b9bbaf25a43 7603b05a446750f1c62e7c51956863aa0412d858026d11adf69c9a2bf6862497
GET /sync?sspKey=25&sspUserID=0900007F6F513A664936936D0273CBBD HTTP/1.1
Host: adx.com.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: user=663a5170991c7a00014d5539
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.26.0
date: Tue, 07 May 2024 16:06:08 GMT
content-type: text/html; charset=utf-8
content-length: 231
cache-control: max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fadx.com.ru%2Fweborama-sync%3Furl%3Dhttps%253A%252F%252Fprodmp.ru%252Fyabbi.gif%253Fuid%253D663a5170991c7a00014d5539%2526r%253D%26webouid%3D{WEBO_CID}
p3p: CP="adx.com.ru does not have a P3P policy"
X-Firefox-Spdy: h2
|
|
| mc.acint.net/cmatch?dp=261 | 193.3.184.131 | | 154 B |
URL mc.acint.net/cmatch?dp=261 IP193.3.184.131:0
File typeHTML document, ASCII text, with CRLF line terminators Hashcfbeaf604823f038b8b46f0ac862b98c 7b9eb1dac48e74fa5f418bc456cb410f88b81d98 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /cmatch?dp=261 HTTP/1.1
Host: mc.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAACWY6UW9tkzZJvctzAsYDYMNZpzo+awElskf4HFlvcGTF; cSyncDp14v6=1715097967; cSyncDp17v2=1715097967; cSyncDp45v5=1715097967; cSyncDp53v5=1715097967; cSyncDp62v2=1715097967; cSyncDp67v3=1715097967; cSyncDp68v3=1715097967; cSyncDp71v2=1715097967; cSyncDp80v2=1715097967; cSyncDp85v2=1715097967; cSyncDp95v4=1715097967; cSyncDp98v3=1715097967; cSyncDp104v2=1715097967; cSyncDp107v2=1715097967; cSyncDp110v3=1715097967; cSyncDp125v4=1715097967; cSyncDp126v3=1715097967; cSyncDp127v2=1715097967; cSyncDp129v2=1715097967; cSyncDp136v3=1715097967; cSyncDp146v2=1715097967; cSyncDp148v2=1715097967; cSyncDp149v3=1715097967; cSyncDp151v2=1715097967; cSyncDp251v1=1715097967; cSyncDp186v2=1715097967; cSyncDp217v2=1715097967; cSyncDp235v2=1715097967; cSyncDp239v2=1715097967; cSyncDp243v2=1715097967; cSyncDp260v2=1715097967; cSyncDp244v2=1715097967; cSyncDp248v2=1715097967; cSyncDp261v1=1715097967; cSyncDp289v2=1715097967; cSyncDp293v1=1715097967; cSyncDp296v2=1715097967; cSyncDp312v1=1715097967; cSyncDp14v4=1715097967; cSyncDp7v3=1715097968
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 16:06:08 GMT
content-type: text/html
content-length: 154
location: https://match.qtarget.tech/userbind?src=sape&id=0900007F6F513A664936936D0273CBBD
set-cookie: cSyncDp241v2=1715097968; expires=Thu, 06-Jun-24 16:06:08 GMT; path=/; Secure; SameSite=None; domain=.acint.net
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
|
|
| acint.net/cmatch?dp=71 | 193.3.184.131 | | 154 B |
IP193.3.184.131:0
File typeHTML document, ASCII text, with CRLF line terminators Hashcfbeaf604823f038b8b46f0ac862b98c 7b9eb1dac48e74fa5f418bc456cb410f88b81d98 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /cmatch?dp=71 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAACWY6UW9tkzZJvctzAsYDYMNZpzo+awElskf4HFlvcGTF; cSyncDp14v6=1715097967; cSyncDp17v2=1715097967; cSyncDp45v5=1715097967; cSyncDp53v5=1715097967; cSyncDp62v2=1715097967; cSyncDp67v3=1715097967; cSyncDp68v3=1715097967; cSyncDp71v2=1715097967; cSyncDp80v2=1715097967; cSyncDp85v2=1715097967; cSyncDp95v4=1715097967; cSyncDp98v3=1715097967; cSyncDp104v2=1715097967; cSyncDp107v2=1715097967; cSyncDp110v3=1715097967; cSyncDp125v4=1715097967; cSyncDp126v3=1715097967; cSyncDp127v2=1715097967; cSyncDp129v2=1715097967; cSyncDp136v3=1715097967; cSyncDp146v2=1715097967; cSyncDp148v2=1715097967; cSyncDp149v3=1715097967; cSyncDp151v2=1715097967; cSyncDp251v1=1715097967; cSyncDp186v2=1715097967; cSyncDp217v2=1715097967; cSyncDp235v2=1715097967; cSyncDp239v2=1715097967; cSyncDp243v2=1715097967; cSyncDp260v2=1715097967; cSyncDp244v2=1715097967; cSyncDp248v2=1715097967; cSyncDp261v1=1715097967; cSyncDp289v2=1715097967; cSyncDp293v1=1715097967; cSyncDp296v2=1715097967; cSyncDp312v1=1715097967; cSyncDp14v4=1715097967; cSyncDp7v3=1715097968
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 16:06:08 GMT
content-type: text/html
content-length: 154
location: https://match.qtarget.tech/userbind?src=sape&id=0900007F6F513A664936936D0273CBBD
set-cookie: cSyncDp241v2=1715097968; expires=Thu, 06-Jun-24 16:06:08 GMT; path=/; Secure; SameSite=None; domain=.acint.net
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
|
|
| mc.acint.net/cmatch?dp=95 | 193.3.184.131 | | 43 B |
URL mc.acint.net/cmatch?dp=95 IP193.3.184.131:0
File typeGIF image data, version 89a, 1 x 1 Hashad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /cmatch?dp=95 HTTP/1.1
Host: mc.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAACWY6UW9tkzZJvctzAsYDYMNZpzo+awElskf4HFlvcGTF; cSyncDp14v6=1715097967; cSyncDp17v2=1715097967; cSyncDp45v5=1715097967; cSyncDp53v5=1715097967; cSyncDp62v2=1715097967; cSyncDp67v3=1715097967; cSyncDp68v3=1715097967; cSyncDp71v2=1715097967; cSyncDp80v2=1715097967; cSyncDp85v2=1715097967; cSyncDp95v4=1715097967; cSyncDp98v3=1715097967; cSyncDp104v2=1715097967; cSyncDp107v2=1715097967; cSyncDp110v3=1715097967; cSyncDp125v4=1715097967; cSyncDp126v3=1715097967; cSyncDp127v2=1715097967; cSyncDp129v2=1715097967; cSyncDp136v3=1715097967; cSyncDp146v2=1715097967; cSyncDp148v2=1715097967; cSyncDp149v3=1715097967; cSyncDp151v2=1715097967; cSyncDp251v1=1715097967; cSyncDp186v2=1715097967; cSyncDp217v2=1715097967; cSyncDp235v2=1715097967; cSyncDp239v2=1715097967; cSyncDp243v2=1715097967; cSyncDp260v2=1715097967; cSyncDp244v2=1715097967; cSyncDp248v2=1715097967; cSyncDp261v1=1715097967; cSyncDp289v2=1715097967; cSyncDp293v1=1715097967; cSyncDp296v2=1715097967; cSyncDp312v1=1715097967; cSyncDp14v4=1715097967; cSyncDp7v3=1715097968; cSyncDp241v2=1715097968
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 07 May 2024 16:06:08 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
|
|
| match.qtarget.tech/userbind?src=sape&id=0900007F6F513A664936936D0273CBBD | 95.163.92.180 | | 0 B |
URL match.qtarget.tech/userbind?src=sape&id=0900007F6F513A664936936D0273CBBD IP95.163.92.180:0 ASN#12695 LLC Digital Network
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=sape&id=0900007F6F513A664936936D0273CBBD HTTP/1.1
Host: match.qtarget.tech
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.22.1
Date: Tue, 07 May 2024 16:06:09 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
|
|
| match.qtarget.tech/userbind?src=sape&id=0900007F6F513A664936936D0273CBBD | 95.163.92.180 | | 0 B |
URL match.qtarget.tech/userbind?src=sape&id=0900007F6F513A664936936D0273CBBD IP95.163.92.180:0 ASN#12695 LLC Digital Network
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=sape&id=0900007F6F513A664936936D0273CBBD HTTP/1.1
Host: match.qtarget.tech
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.22.1
Date: Tue, 07 May 2024 16:06:09 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
|
|
| b723d2d8-0c8b-11ef-86e0-002590c0647c.n6.sync.bumlam.com/?src=sape | 188.120.241.43 | | 0 B |
URL b723d2d8-0c8b-11ef-86e0-002590c0647c.n6.sync.bumlam.com/?src=sape IP188.120.241.43:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sape HTTP/1.1
Host: b723d2d8-0c8b-11ef-86e0-002590c0647c.n6.sync.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiRiNzIzZDJkOC0wYzhiLTExZWYtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.26.0
date: Tue, 07 May 2024 16:06:09 GMT
content-length: 0
location: https://pix.bumlam.com/sync/sape/done
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
X-Firefox-Spdy: h2
|
|
| pix.bumlam.com/sync/sape/done | 31.172.81.172 | | 43 B |
URL pix.bumlam.com/sync/sape/done IP31.172.81.172:0
File typeGIF image data, version 89a, 1 x 1 Hashad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /sync/sape/done HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiRiNzIzZDJkOC0wYzhiLTExZWYtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 16:06:09 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
|
|
| logger.moviead55.ru/logger.php?v=ea59f7a89d04d570fbb4ef98a8a1693c&c=36a9df20-32ca-41af-9aa5-739c3dc2e600&t=player_init&a=&m=%7B%22vis%22%3A100%2C%22dv%22%3Atrue%2C%22jmap%22%3A1%2C%22blen%22%3A1%7D&o= | 193.200.65.146 | 200 OK | 102 B |
URL GET HTTP/2logger.moviead55.ru/logger.php?v=ea59f7a89d04d570fbb4ef98a8a1693c&c=36a9df20-32ca-41af-9aa5-739c3dc2e600&t=player_init&a=&m=%7B%22vis%22%3A100%2C%22dv%22%3Atrue%2C%22jmap%22%3A1%2C%22blen%22%3A1%7D&o= IP193.200.65.146:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subject*.moviead55.ru FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9 ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
File typegzip compressed data, from Unix Hash32bda1df91b456917c5a82e747502dea c316a11fbc6627607c987b8fb90fba8769e2aff0 c71a3f075ad38ebc7ee079fbc26e945b66a715239b29c2f59db44803be7ba91f
GET /logger.php?v=ea59f7a89d04d570fbb4ef98a8a1693c&c=36a9df20-32ca-41af-9aa5-739c3dc2e600&t=player_init&a=&m=%7B%22vis%22%3A100%2C%22dv%22%3Atrue%2C%22jmap%22%3A1%2C%22blen%22%3A1%7D&o= HTTP/1.1
Host: logger.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:08 GMT
content-type: Content-Type: image/png
vary: Accept-Encoding
x-movieads-le: true
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| user91471.clients-cdnnow.ru/vp_dist/hls.js?v3 | 185.40.155.13 | 200 OK | 255 kB |
URL GET HTTP/2user91471.clients-cdnnow.ru/vp_dist/hls.js?v3 IP185.40.155.13:443
Requested byhttps://videotoday.site/mp_dist/td/trhls.html?v6774352230 CertificateIssuerLet's Encrypt Subject*.clients-cdnnow.ru Fingerprint87:A1:BF:A0:80:28:87:49:3F:56:5F:54:07:46:04:BE:B8:84:07:49 ValidityFri, 12 Apr 2024 18:02:24 GMT - Thu, 11 Jul 2024 18:02:23 GMT
File typeJavaScript source, ASCII text Size255 kB (255246 bytes) Hasheb032b5eead8c28b044fe25af475e1d7 e52663adc5f52f70919701841289d61071ed632b 9fb29560e8da12d912d6de08b0e4dfbc1d8176015267bba24aed2d8954f8c7e0
GET /vp_dist/hls.js?v3 HTTP/1.1
Host: user91471.clients-cdnnow.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videotoday.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:37 GMT
content-type: application/javascript
last-modified: Tue, 05 Mar 2024 14:56:11 GMT
vary: Accept-Encoding
etag: W/"65e7328b-1132d6"
x-movieads-country: RU
content-encoding: gzip
x-edge-cache: HIT
x-edge-ip: 172.19.32.6
X-Firefox-Spdy: h2
|
|
| static.filmskino.site/hls/trailers/tQs0gRLaweA.mp4/seg-1-v1-a1.ts | 193.200.65.210 | | 172 kB |
URL static.filmskino.site/hls/trailers/tQs0gRLaweA.mp4/seg-1-v1-a1.ts IP193.200.65.210:0 ASN#6681 Giveme Cloud Sp Z O O
File typeMPEG transport stream data Size172 kB (171832 bytes) Hash02e52db09d0f484b8507994fac7cffa5 65d82708fbe88ff01c22986526ff180e605be0c6 51864afda1faa031042be3c24fce9168eb886a7e17d896961275ba63ef9df461
GET /hls/trailers/tQs0gRLaweA.mp4/seg-1-v1-a1.ts HTTP/1.1
Host: static.filmskino.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videotoday.site
DNT: 1
Connection: keep-alive
Referer: https://videotoday.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 16:06:10 GMT
Content-Type: video/MP2T
Content-Length: 171832
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Connection: keep-alive
ETag: "3a1794b0-29f38"
Expires: Thu, 15 Aug 2024 16:06:10 GMT
Cache-Control: max-age=8640000
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| static.filmskino.site/hls/trailers/tQs0gRLaweA.mp4/seg-2-v1-a1.ts | 193.200.65.210 | | 178 kB |
URL static.filmskino.site/hls/trailers/tQs0gRLaweA.mp4/seg-2-v1-a1.ts IP193.200.65.210:0 ASN#6681 Giveme Cloud Sp Z O O
File typeMPEG transport stream data Size178 kB (177848 bytes) Hash654e950dc5613c86b04bd90e995ae8c5 d1b4f46e92ec5e0b5c254ed10a45e89c360741c0 cb2d2a5ae5ef20b99dcec219eea42589f733bd9e62f7538e380636217f6d3241
GET /hls/trailers/tQs0gRLaweA.mp4/seg-2-v1-a1.ts HTTP/1.1
Host: static.filmskino.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videotoday.site
DNT: 1
Connection: keep-alive
Referer: https://videotoday.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 16:06:10 GMT
Content-Type: video/MP2T
Content-Length: 177848
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Connection: keep-alive
ETag: "3a1794b0-2b6b8"
Expires: Thu, 15 Aug 2024 16:06:10 GMT
Cache-Control: max-age=8640000
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| ads.adlook.me/csync?pid=sape&uid=0900007F6F513A664936936D0273CBBD&url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D110%26euid%3D%7BuserId%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D110 | 176.122.21.226 | | 0 B |
URL ads.adlook.me/csync?pid=sape&uid=0900007F6F513A664936936D0273CBBD&url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D110%26euid%3D%7BuserId%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D110 IP176.122.21.226:0 ASN#48096 Enterprise Cloud Ltd.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /csync?pid=sape&uid=0900007F6F513A664936936D0273CBBD&url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D110%26euid%3D%7BuserId%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D110 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://mc.acint.net/rmatch?dp=110&euid=fa00ffb0adb84813b778df5123151609&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D110
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=fa00ffb0adb84813b778df5123151609; expires=Tue, 06 May 2025 21:00:00 GMT; path=/; SameSite=None; secure; samesite=none
adlk_cmatch=sape%3A0900007F6F513A664936936D0273CBBD; expires=Fri, 31 Dec 9999 20:59:59 GMT; path=/; SameSite=None; secure; samesite=none
date: Tue, 07 May 2024 16:06:08 GMT
X-Firefox-Spdy: h2
|
|
| www.acint.net/match?dp=251&euid=7730e2b5-36d9-97f2-0053-0bfcc440869b | 193.3.184.131 | | 43 B |
URL www.acint.net/match?dp=251&euid=7730e2b5-36d9-97f2-0053-0bfcc440869b IP193.3.184.131:0
CertificateIssuerLet's Encrypt Subject*.acint.net Fingerprint73:1C:BA:EB:E3:79:9A:52:40:EB:AA:73:62:F1:A6:C3:AA:A7:6C:E1 ValidityMon, 29 Apr 2024 01:51:20 GMT - Sun, 28 Jul 2024 01:51:19 GMT
File typeGIF image data, version 89a, 1 x 1 Hashad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=251&euid=7730e2b5-36d9-97f2-0053-0bfcc440869b HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAACWY6UW9tkzZJvctzAsYDYMNZpzo+awElskf4HFlvcGTF; cSyncDp14v6=1715097967; cSyncDp17v2=1715097967; cSyncDp45v5=1715097967; cSyncDp53v5=1715097967; cSyncDp62v2=1715097967; cSyncDp67v3=1715097967; cSyncDp68v3=1715097967; cSyncDp71v2=1715097967; cSyncDp80v2=1715097967; cSyncDp85v2=1715097967; cSyncDp95v4=1715097967; cSyncDp98v3=1715097967; cSyncDp104v2=1715097967; cSyncDp107v2=1715097967; cSyncDp110v3=1715097967; cSyncDp125v4=1715097967; cSyncDp126v3=1715097967; cSyncDp127v2=1715097967; cSyncDp129v2=1715097967; cSyncDp136v3=1715097967; cSyncDp146v2=1715097967; cSyncDp148v2=1715097967; cSyncDp149v3=1715097967; cSyncDp151v2=1715097967; cSyncDp251v1=1715097967; cSyncDp186v2=1715097967; cSyncDp217v2=1715097967; cSyncDp235v2=1715097967; cSyncDp239v2=1715097967; cSyncDp243v2=1715097967; cSyncDp260v2=1715097967; cSyncDp244v2=1715097967; cSyncDp248v2=1715097967; cSyncDp261v1=1715097967; cSyncDp289v2=1715097967; cSyncDp293v1=1715097967; cSyncDp296v2=1715097967; cSyncDp312v1=1715097967; cSyncDp14v4=1715097967; cSyncDp7v3=1715097968; cSyncDp241v2=1715097968
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 07 May 2024 16:06:11 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
|
|
| videotoday.site/frndnp.php?ver=1&autoplay=1&v=ea59f7a89d04d570fbb4ef98a8a1693c&cb=36a9df20-32ca-41af-9aa5-739c3dc2e600&fclose=false&jh=cpzse3jqpizzc4mfcf1dkpjqqj4o&sth=qp4gn7djcczg455spf1sn3bigwz8r7e&sub_id=ap&fmt_id=1&testad=no&nomon=1&cdiv=38&r=https%3A%2F%2Frutor.is%2Ftorrent%2F407364e&frnd=true | 172.67.218.218 | | 37 kB |
URL videotoday.site/frndnp.php?ver=1&autoplay=1&v=ea59f7a89d04d570fbb4ef98a8a1693c&cb=36a9df20-32ca-41af-9aa5-739c3dc2e600&fclose=false&jh=cpzse3jqpizzc4mfcf1dkpjqqj4o&sth=qp4gn7djcczg455spf1sn3bigwz8r7e&sub_id=ap&fmt_id=1&testad=no&nomon=1&cdiv=38&r=https%3A%2F%2Frutor.is%2Ftorrent%2F407364e&frnd=true IP172.67.218.218:0
File typeASCII text, with very long lines (65518) Hash4da541d6229160f110707606c98b2919 73e48ee4dfe6caec1a83f3a32430a19ad5c6cb98 cdb4ad5b40e7e685db5b8750209b99b2be6081fbbabda170d5ee8da2c8f1e815
GET /frndnp.php?ver=1&autoplay=1&v=ea59f7a89d04d570fbb4ef98a8a1693c&cb=36a9df20-32ca-41af-9aa5-739c3dc2e600&fclose=false&jh=cpzse3jqpizzc4mfcf1dkpjqqj4o&sth=qp4gn7djcczg455spf1sn3bigwz8r7e&sub_id=ap&fmt_id=1&testad=no&nomon=1&cdiv=38&r=https%3A%2F%2Frutor.is%2Ftorrent%2F407364e&frnd=true HTTP/1.1
Host: videotoday.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 16:06:07 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-cache: Yac
x-movieads-country: NO
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xrUkwH5I8F5%2FmVF%2BQbIYmPyhj9mLkPhZwpp%2Bmf3PncRdHRTa41ZgU9g4XqVC6BMSa9cQtApP78aUYdQDLHmgdUNwRVB8XI2KUhTBe8hVPFI1AaBsaHZC4o4wHsFVT24ALWQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88027496695856a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/bmap?v=ea59f7a89d04d570fbb4ef98a8a1693c&sub_id=ap&fmt_id=4&pl_key=banner&testad=no&r=https%3A%2F%2Frutor.is%2Ftorrent%2F407364e&maid=085dd933-b8ee-4da3-b49e-fc70eae6e3c1&rel=true&rnd=1715097977677&cnt=1 | 193.200.65.150 | 200 OK | 22 kB |
URL GET HTTP/2code.moviead55.ru/go/bmap?v=ea59f7a89d04d570fbb4ef98a8a1693c&sub_id=ap&fmt_id=4&pl_key=banner&testad=no&r=https%3A%2F%2Frutor.is%2Ftorrent%2F407364e&maid=085dd933-b8ee-4da3-b49e-fc70eae6e3c1&rel=true&rnd=1715097977677&cnt=1 IP193.200.65.150:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subject*.moviead55.ru FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9 ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
Hash715f0ec6c119ef509009a851876345a0 803a32d88c50418fd371e73a8a3fe62fed1d22f3 365835aa934ca8ab061038b9924887bf8517baf3bb73a03ceeabff49752c4e94
GET /go/bmap?v=ea59f7a89d04d570fbb4ef98a8a1693c&sub_id=ap&fmt_id=4&pl_key=banner&testad=no&r=https%3A%2F%2Frutor.is%2Ftorrent%2F407364e&maid=085dd933-b8ee-4da3-b49e-fc70eae6e3c1&rel=true&rnd=1715097977677&cnt=1 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=524bd7df-05ce-e799-58c3-063f3cd7b8e7; hbrdcookie2=c237592430317f179545; otclkbid=VU0cO9fZFTbYzyf; ohmybid=76358c67-0c3c-49df-b1d0-68dc4b682d86; bzcookie=170a2d46-81d3-47a5-59f3-c39da03e38f7; otmbid=NjYzYTUxNmYwODQzYTI3OA==; sapecookie=0900007F6F513A664936936D0273CBBD; 754rmads=1715097968
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:22 GMT
content-type: text/javascript;charset=UTF-8
vary: Accept-Encoding
x-movieads-udata: cache,parsed,10302
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=ohmybid&rnd=1715097985 | 193.200.65.150 | 200 OK | 0 B |
URL GET HTTP/2code.moviead55.ru/go/cinit?cn=ohmybid&rnd=1715097985 IP193.200.65.150:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subject*.moviead55.ru FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9 ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=ohmybid&rnd=1715097985 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=524bd7df-05ce-e799-58c3-063f3cd7b8e7; hbrdcookie2=c237592430317f179545; otclkbid=VU0cO9fZFTbYzyf; ohmybid=76358c67-0c3c-49df-b1d0-68dc4b682d86; bzcookie=170a2d46-81d3-47a5-59f3-c39da03e38f7; otmbid=NjYzYTUxNmYwODQzYTI3OA==; sapecookie=0900007F6F513A664936936D0273CBBD; 754rmads=1715097968
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:25 GMT
content-type: image/jpeg
content-length: 0
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=hbrdcookie2&rnd=1715097985 | 193.200.65.150 | 200 OK | 0 B |
URL GET HTTP/2code.moviead55.ru/go/cinit?cn=hbrdcookie2&rnd=1715097985 IP193.200.65.150:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subject*.moviead55.ru FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9 ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=hbrdcookie2&rnd=1715097985 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=524bd7df-05ce-e799-58c3-063f3cd7b8e7; hbrdcookie2=c237592430317f179545; otclkbid=VU0cO9fZFTbYzyf; ohmybid=76358c67-0c3c-49df-b1d0-68dc4b682d86; bzcookie=170a2d46-81d3-47a5-59f3-c39da03e38f7; otmbid=NjYzYTUxNmYwODQzYTI3OA==; sapecookie=0900007F6F513A664936936D0273CBBD; 754rmads=1715097968
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:25 GMT
content-type: image/jpeg
content-length: 0
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=otmbid&rnd=1715097985 | 193.200.65.150 | 200 OK | 0 B |
URL GET HTTP/2code.moviead55.ru/go/cinit?cn=otmbid&rnd=1715097985 IP193.200.65.150:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subject*.moviead55.ru FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9 ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=otmbid&rnd=1715097985 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=524bd7df-05ce-e799-58c3-063f3cd7b8e7; hbrdcookie2=c237592430317f179545; otclkbid=VU0cO9fZFTbYzyf; ohmybid=76358c67-0c3c-49df-b1d0-68dc4b682d86; bzcookie=170a2d46-81d3-47a5-59f3-c39da03e38f7; otmbid=NjYzYTUxNmYwODQzYTI3OA==; sapecookie=0900007F6F513A664936936D0273CBBD; 754rmads=1715097968
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:25 GMT
content-type: image/jpeg
content-length: 0
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=bzcookie&rnd=1715097985 | 193.200.65.150 | 200 OK | 0 B |
URL GET HTTP/2code.moviead55.ru/go/cinit?cn=bzcookie&rnd=1715097985 IP193.200.65.150:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subject*.moviead55.ru FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9 ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=bzcookie&rnd=1715097985 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=524bd7df-05ce-e799-58c3-063f3cd7b8e7; hbrdcookie2=c237592430317f179545; otclkbid=VU0cO9fZFTbYzyf; ohmybid=76358c67-0c3c-49df-b1d0-68dc4b682d86; bzcookie=170a2d46-81d3-47a5-59f3-c39da03e38f7; otmbid=NjYzYTUxNmYwODQzYTI3OA==; sapecookie=0900007F6F513A664936936D0273CBBD; 754rmads=1715097968
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:25 GMT
content-type: image/jpeg
content-length: 0
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=gonetbid&rnd=1715097985 | 193.200.65.150 | 301 Moved Permanently | 0 B |
URL GET HTTP/2code.moviead55.ru/go/cinit?cn=gonetbid&rnd=1715097985 IP193.200.65.150:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subject*.moviead55.ru FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9 ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=gonetbid&rnd=1715097985 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=524bd7df-05ce-e799-58c3-063f3cd7b8e7; hbrdcookie2=c237592430317f179545; otclkbid=VU0cO9fZFTbYzyf; ohmybid=76358c67-0c3c-49df-b1d0-68dc4b682d86; bzcookie=170a2d46-81d3-47a5-59f3-c39da03e38f7; otmbid=NjYzYTUxNmYwODQzYTI3OA==; sapecookie=0900007F6F513A664936936D0273CBBD; 754rmads=1715097968
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 16:06:25 GMT
content-length: 0
location: https://sync.gonet-ads.com/match/SkyAdvert?id=524bd7df-05ce-e799-58c3-063f3cd7b8e7
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=solta&rnd=1715097985 | 193.200.65.150 | 301 Moved Permanently | 0 B |
URL GET HTTP/2code.moviead55.ru/go/cinit?cn=solta&rnd=1715097985 IP193.200.65.150:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subject*.moviead55.ru FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9 ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=solta&rnd=1715097985 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=524bd7df-05ce-e799-58c3-063f3cd7b8e7; hbrdcookie2=c237592430317f179545; otclkbid=VU0cO9fZFTbYzyf; ohmybid=76358c67-0c3c-49df-b1d0-68dc4b682d86; bzcookie=170a2d46-81d3-47a5-59f3-c39da03e38f7; otmbid=NjYzYTUxNmYwODQzYTI3OA==; sapecookie=0900007F6F513A664936936D0273CBBD; 754rmads=1715097968
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 16:06:25 GMT
content-length: 0
location: https://kimberlite.io/rtb/sync/skyadvert?u=524bd7df-05ce-e799-58c3-063f3cd7b8e7
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=gtnt&rnd=1715097985 | 193.200.65.150 | 301 Moved Permanently | 0 B |
URL GET HTTP/2code.moviead55.ru/go/cinit?cn=gtnt&rnd=1715097985 IP193.200.65.150:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subject*.moviead55.ru FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9 ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=gtnt&rnd=1715097985 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=524bd7df-05ce-e799-58c3-063f3cd7b8e7; hbrdcookie2=c237592430317f179545; otclkbid=VU0cO9fZFTbYzyf; ohmybid=76358c67-0c3c-49df-b1d0-68dc4b682d86; bzcookie=170a2d46-81d3-47a5-59f3-c39da03e38f7; otmbid=NjYzYTUxNmYwODQzYTI3OA==; sapecookie=0900007F6F513A664936936D0273CBBD; 754rmads=1715097968
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 16:06:25 GMT
content-length: 0
location: https://px.adhigh.net/p/cm/skyadvert?u=524bd7df-05ce-e799-58c3-063f3cd7b8e7
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=dgm2&rnd=1715097985 | 193.200.65.150 | 301 Moved Permanently | 0 B |
URL GET HTTP/2code.moviead55.ru/go/cinit?cn=dgm2&rnd=1715097985 IP193.200.65.150:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subject*.moviead55.ru FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9 ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=dgm2&rnd=1715097985 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=524bd7df-05ce-e799-58c3-063f3cd7b8e7; hbrdcookie2=c237592430317f179545; otclkbid=VU0cO9fZFTbYzyf; ohmybid=76358c67-0c3c-49df-b1d0-68dc4b682d86; bzcookie=170a2d46-81d3-47a5-59f3-c39da03e38f7; otmbid=NjYzYTUxNmYwODQzYTI3OA==; sapecookie=0900007F6F513A664936936D0273CBBD; 754rmads=1715097968
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 16:06:25 GMT
content-length: 0
location: https://sync.opendsp.ru/match/MovieAds?id=524bd7df-05ce-e799-58c3-063f3cd7b8e7
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=otclkbid&rnd=1715097985 | 193.200.65.150 | 200 OK | 0 B |
URL GET HTTP/2code.moviead55.ru/go/cinit?cn=otclkbid&rnd=1715097985 IP193.200.65.150:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subject*.moviead55.ru FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9 ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=otclkbid&rnd=1715097985 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=524bd7df-05ce-e799-58c3-063f3cd7b8e7; hbrdcookie2=c237592430317f179545; otclkbid=VU0cO9fZFTbYzyf; ohmybid=76358c67-0c3c-49df-b1d0-68dc4b682d86; bzcookie=170a2d46-81d3-47a5-59f3-c39da03e38f7; otmbid=NjYzYTUxNmYwODQzYTI3OA==; sapecookie=0900007F6F513A664936936D0273CBBD; 754rmads=1715097968
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:25 GMT
content-type: image/jpeg
content-length: 0
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=sapecookie&rnd=1715097985 | 193.200.65.150 | 200 OK | 0 B |
URL GET HTTP/2code.moviead55.ru/go/cinit?cn=sapecookie&rnd=1715097985 IP193.200.65.150:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subject*.moviead55.ru FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9 ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=sapecookie&rnd=1715097985 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=524bd7df-05ce-e799-58c3-063f3cd7b8e7; hbrdcookie2=c237592430317f179545; otclkbid=VU0cO9fZFTbYzyf; ohmybid=76358c67-0c3c-49df-b1d0-68dc4b682d86; bzcookie=170a2d46-81d3-47a5-59f3-c39da03e38f7; otmbid=NjYzYTUxNmYwODQzYTI3OA==; sapecookie=0900007F6F513A664936936D0273CBBD; 754rmads=1715097968
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:25 GMT
content-type: image/jpeg
content-length: 0
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| sp.ohmy.bid/cmf?0.3303327283160068 | 167.235.9.235 | 204 No Content | 0 B |
URL GET HTTP/2sp.ohmy.bid/cmf?0.3303327283160068 IP167.235.9.235:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectsp.ohmy.bid Fingerprint3D:58:E2:D5:2F:E7:90:A7:4A:D3:A3:9B:6F:C5:FA:97:B5:84:10:81 ValiditySat, 23 Mar 2024 20:09:28 GMT - Fri, 21 Jun 2024 20:09:27 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cmf?0.3303327283160068 HTTP/1.1
Host: sp.ohmy.bid
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: uid=76358c67-0c3c-49df-b1d0-68dc4b682d86.663a516f.159e1ea8153b2469
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 07 May 2024 16:06:25 GMT
bidder: bid-03 1.1542.871fc76
access-control-allow-credentials: true
X-Firefox-Spdy: h2
|
|
| sync.opendsp.ru/match/MovieAds?id=524bd7df-05ce-e799-58c3-063f3cd7b8e7 | 82.148.20.186 | 200 OK | 43 B |
URL GET HTTP/2sync.opendsp.ru/match/MovieAds?id=524bd7df-05ce-e799-58c3-063f3cd7b8e7 IP82.148.20.186:443 ASN#50340 OOO Network of data-centers Selectel
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectsync.opendsp.ru Fingerprint61:B4:DA:9F:EB:AB:9D:73:4C:76:FB:7C:3B:0B:80:A4:0F:14:18:28 ValidityThu, 04 Apr 2024 10:36:13 GMT - Wed, 03 Jul 2024 10:36:12 GMT
File typeGIF image data, version 89a, 1 x 1 Hash07fff40b5dd495aca2ac4e1c3fbc60aa e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4 a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/MovieAds?id=524bd7df-05ce-e799-58c3-063f3cd7b8e7 HTTP/1.1
Host: sync.opendsp.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:25 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| sync.gonet-ads.com/match/SkyAdvert?id=524bd7df-05ce-e799-58c3-063f3cd7b8e7 | 188.42.105.220 | 200 OK | 43 B |
URL GET HTTP/2sync.gonet-ads.com/match/SkyAdvert?id=524bd7df-05ce-e799-58c3-063f3cd7b8e7 IP188.42.105.220:443
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerSectigo Limited Subject*.gonet-ads.com Fingerprint2B:BE:BF:75:0A:67:AA:2D:FA:0A:7F:92:F4:37:AE:9B:DD:47:68:2D ValidityWed, 07 Jun 2023 00:00:00 GMT - Tue, 11 Jun 2024 23:59:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hash07fff40b5dd495aca2ac4e1c3fbc60aa e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4 a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/SkyAdvert?id=524bd7df-05ce-e799-58c3-063f3cd7b8e7 HTTP/1.1
Host: sync.gonet-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:25 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| kimberlite.io/rtb/sync/skyadvert?u=524bd7df-05ce-e799-58c3-063f3cd7b8e7 | 217.199.220.43 | 307 Temporary Redirect | 0 B |
URL GET HTTP/1.1kimberlite.io/rtb/sync/skyadvert?u=524bd7df-05ce-e799-58c3-063f3cd7b8e7 IP217.199.220.43:443
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerGlobalSign nv-sa Subject*.kimberlite.io Fingerprint27:9B:57:5F:3C:19:A5:31:A3:1B:E6:A4:8E:CF:2F:73:78:4E:46:C1 ValidityThu, 29 Feb 2024 12:20:14 GMT - Tue, 01 Apr 2025 12:20:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/sync/skyadvert?u=524bd7df-05ce-e799-58c3-063f3cd7b8e7 HTTP/1.1
Host: kimberlite.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: as=-WrUeGY6UXCE8n8IZjpRbw; f=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsolta%26bid%3DZjpRb0rwXEM; n=2; u=ZjpRb0rwXEM~eOOgG08C9JUeu5D7TUVdRanLeyU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Tue, 07 May 2024 16:06:25 GMT
Content-Length: 0
Connection: keep-alive
cache-control: no-store
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: as=-WrUeGY6UXCE8n8IZjpRbzhax-FmOlGB; max-age=604800; samesite=none; httponly; secure
n=3; max-age=30; samesite=none; httponly; secure
location: https://sm.rtb.mts.ru/p?ssp=toptraffic&id=ZjpRb0rwXEM
referrer-policy: no-referrer
server-timing: app;srv=0;dur=0.0002
|
|
| code.moviead55.ru/go/jmap?v=ea59f7a89d04d570fbb4ef98a8a1693c&sid=ap&cp.referer=https%253A%252F%252Frutor.is%252Ftorrent%252F407364e&it=1&tq=2&cp.cb=05d7e47a-8acf-c999-5a7a-0dc011d52a26&session=36a9df20-32ca-41af-9aa5-739c3dc2e600&position=pre&vt=100&ostream=true&isp=0&suri=https%253A%252F%252Frutor.is%252Ftorrent%252F407364e&rnd=1715097986544&raw=yes&ma=085dd933-b8ee-4da3-b49e-fc70eae6e3c1 | 193.200.65.150 | 200 OK | 1.5 kB |
URL GET HTTP/2code.moviead55.ru/go/jmap?v=ea59f7a89d04d570fbb4ef98a8a1693c&sid=ap&cp.referer=https%253A%252F%252Frutor.is%252Ftorrent%252F407364e&it=1&tq=2&cp.cb=05d7e47a-8acf-c999-5a7a-0dc011d52a26&session=36a9df20-32ca-41af-9aa5-739c3dc2e600&position=pre&vt=100&ostream=true&isp=0&suri=https%253A%252F%252Frutor.is%252Ftorrent%252F407364e&rnd=1715097986544&raw=yes&ma=085dd933-b8ee-4da3-b49e-fc70eae6e3c1 IP193.200.65.150:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subject*.moviead55.ru FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9 ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
File typegzip compressed data, from Unix Hash2fa12a287e6af0cb4bc815ef53ad9fb5 8d96e232864211e01db1052b9a426fd028b5fe79 88db0a748d4549820319d54ad728c40be592e81a57010ec54844fc39cf60cf7d
GET /go/jmap?v=ea59f7a89d04d570fbb4ef98a8a1693c&sid=ap&cp.referer=https%253A%252F%252Frutor.is%252Ftorrent%252F407364e&it=1&tq=2&cp.cb=05d7e47a-8acf-c999-5a7a-0dc011d52a26&session=36a9df20-32ca-41af-9aa5-739c3dc2e600&position=pre&vt=100&ostream=true&isp=0&suri=https%253A%252F%252Frutor.is%252Ftorrent%252F407364e&rnd=1715097986544&raw=yes&ma=085dd933-b8ee-4da3-b49e-fc70eae6e3c1 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rutor.is
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=524bd7df-05ce-e799-58c3-063f3cd7b8e7; hbrdcookie2=c237592430317f179545; otclkbid=VU0cO9fZFTbYzyf; ohmybid=76358c67-0c3c-49df-b1d0-68dc4b682d86; bzcookie=170a2d46-81d3-47a5-59f3-c39da03e38f7; otmbid=NjYzYTUxNmYwODQzYTI3OA==; sapecookie=0900007F6F513A664936936D0273CBBD; 754rmads=1715097968
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:26 GMT
content-type: application/json;charset=UTF-8
vary: Accept-Encoding
x-movieads-cors-qex: Referer
x-movieads-path: /
access-control-allow-credentials: true
access-control-allow-origin: https://rutor.is
x-go-country: NO
x-movieads-udata: cache,parsed,405839
x-movieads-plc: 1
x-movieads-ark: true
x-movieads-qmc: NO
x-movieads-rdb: 0
x-movieads-alc: 5
x-movieads-ctvs: 4
server-timing: wmData;dur=0.0000, qManager;dur=0.0000, getLinks;dur=0.0000, range_links;dur=0.0000, jmapParams;dur=0.0000, corsParams;dur=0.0000, keyValidation;dur=0.0000, optProc;dur=0.0000, uData;dur=0.0000, validations_776;dur=0.0000, queuesMerge;dur=0.0000, getJson;dur=0.0000, initBuilder;dur=0.0000, queueSort;dur=0.0000, attachTracking;dur=0.0000, getAnyQueue;dur=0.0000, buildTagsQueue;dur=0.0000
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| videotoday.site/mp_dist/td/trhls.html?v6774352230 | 172.67.218.218 | 200 OK | 4.2 kB |
URL GET HTTP/3videotoday.site/mp_dist/td/trhls.html?v6774352230 IP172.67.218.218:443
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerGoogle Trust Services LLC Subjectvideotoday.site Fingerprint2E:82:77:4A:04:B4:6A:BB:CF:BD:C2:A4:DE:A0:9C:DE:43:BB:6C:B4 ValiditySun, 31 Mar 2024 03:52:08 GMT - Sat, 29 Jun 2024 03:52:07 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (7914) Hashe2b7fe8ca5ded3441ceb57849100d840 3b92cf354e5e82d0b8e2604d6ab33a01a56f7266 9b55240774fd2e6418c2674edac975e47438c11f39a4842c467ee36719c2f2f8
GET /mp_dist/td/trhls.html?v6774352230 HTTP/1.1
Host: videotoday.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 16:06:26 GMT
content-type: text/html
last-modified: Fri, 03 May 2024 13:20:31 GMT
vary: Accept-Encoding
x-movieads-country: NO
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-max-age: 1728000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gFC2gCTFz7MtzQBf%2BRK%2Fzg2IA2cRBbhakujXvSr2vZ7pKeKuF6Z7CIl59K4Z0t2tNsdpAp%2FxH0qBhCE4emYOr6XWdfupZbAGykMd%2BhL2q8sT2ylaIEi64sPx%2BhnuqVPIFLs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88027511ce2e1bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| static.filmskino.site/hls/trailers/VyOL3Oik_EE.mp4/seg-1-v1-a1.ts | 193.200.65.210 | 200 OK | 157 kB |
URL GET HTTP/1.1static.filmskino.site/hls/trailers/VyOL3Oik_EE.mp4/seg-1-v1-a1.ts IP193.200.65.210:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://videotoday.site/mp_dist/td/trhls.html?v6774352230 CertificateIssuerLet's Encrypt Subjectstatic.filmskino.site Fingerprint42:89:E3:B7:17:CB:25:42:1E:CA:AB:31:65:00:AB:EC:5E:99:19:D5 ValidityFri, 05 Apr 2024 07:32:34 GMT - Thu, 04 Jul 2024 07:32:33 GMT
File typeMPEG transport stream data Size157 kB (156792 bytes) Hashc763438d2348a923755d3a06d460a729 ef7a65f410a146850880d276711ea0f4a07705f8 39aa7a355b5b7eef8f3c81df1e7563d3638ba068b2317e0d04332818dc20c92d
GET /hls/trailers/VyOL3Oik_EE.mp4/seg-1-v1-a1.ts HTTP/1.1
Host: static.filmskino.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videotoday.site
DNT: 1
Connection: keep-alive
Referer: https://videotoday.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 16:06:27 GMT
Content-Type: video/MP2T
Content-Length: 156792
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Connection: keep-alive
ETag: "3a1794b0-26478"
Expires: Thu, 15 Aug 2024 16:06:27 GMT
Cache-Control: max-age=8640000
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| static.filmskino.site/hls/trailers/VyOL3Oik_EE.mp4/seg-2-v1-a1.ts | 193.200.65.210 | 200 OK | 229 kB |
URL GET HTTP/1.1static.filmskino.site/hls/trailers/VyOL3Oik_EE.mp4/seg-2-v1-a1.ts IP193.200.65.210:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://videotoday.site/mp_dist/td/trhls.html?v6774352230 CertificateIssuerLet's Encrypt Subjectstatic.filmskino.site Fingerprint42:89:E3:B7:17:CB:25:42:1E:CA:AB:31:65:00:AB:EC:5E:99:19:D5 ValidityFri, 05 Apr 2024 07:32:34 GMT - Thu, 04 Jul 2024 07:32:33 GMT
File typeMPEG transport stream data Size229 kB (228984 bytes) Hashce2430efcb212bcafc71d2d60e2c1e51 3ed030e25277606874324bec24b16dbc0f94209d 267336ca3ea3ea22c2c6791d35402f82c88911cd6995d847dda81974c96d5beb
GET /hls/trailers/VyOL3Oik_EE.mp4/seg-2-v1-a1.ts HTTP/1.1
Host: static.filmskino.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videotoday.site
DNT: 1
Connection: keep-alive
Referer: https://videotoday.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 16:06:27 GMT
Content-Type: video/MP2T
Content-Length: 228984
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Connection: keep-alive
ETag: "3a1794b0-37e78"
Expires: Thu, 15 Aug 2024 16:06:27 GMT
Cache-Control: max-age=8640000
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| videotoday.site/frndnp.php?ver=1&autoplay=1&v=ea59f7a89d04d570fbb4ef98a8a1693c&cb=36a9df20-32ca-41af-9aa5-739c3dc2e600&fclose=false&jh=cpzse3jqpizzc4mfcf1dkpjqqj4o&sth=qp4gn7djcczg455spf1sn3bigwz8r7e&sub_id=ap&fmt_id=1&testad=no&nomon=1&cdiv=40&r=https%3A%2F%2Frutor.is%2Ftorrent%2F407364e&frnd=true&maid=085dd933-b8ee-4da3-b49e-fc70eae6e3c1&rel=true&rnd=1715097985339&cnt=1 | 0.0.0.0 | | 0 B |
URL GET videotoday.site/frndnp.php?ver=1&autoplay=1&v=ea59f7a89d04d570fbb4ef98a8a1693c&cb=36a9df20-32ca-41af-9aa5-739c3dc2e600&fclose=false&jh=cpzse3jqpizzc4mfcf1dkpjqqj4o&sth=qp4gn7djcczg455spf1sn3bigwz8r7e&sub_id=ap&fmt_id=1&testad=no&nomon=1&cdiv=40&r=https%3A%2F%2Frutor.is%2Ftorrent%2F407364e&frnd=true&maid=085dd933-b8ee-4da3-b49e-fc70eae6e3c1&rel=true&rnd=1715097985339&cnt=1 IP0.0.0.0:0
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerGoogle Trust Services LLC Subjectvideotoday.site Fingerprint2E:82:77:4A:04:B4:6A:BB:CF:BD:C2:A4:DE:A0:9C:DE:43:BB:6C:B4 ValiditySun, 31 Mar 2024 03:52:08 GMT - Sat, 29 Jun 2024 03:52:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /frndnp.php?ver=1&autoplay=1&v=ea59f7a89d04d570fbb4ef98a8a1693c&cb=36a9df20-32ca-41af-9aa5-739c3dc2e600&fclose=false&jh=cpzse3jqpizzc4mfcf1dkpjqqj4o&sth=qp4gn7djcczg455spf1sn3bigwz8r7e&sub_id=ap&fmt_id=1&testad=no&nomon=1&cdiv=40&r=https%3A%2F%2Frutor.is%2Ftorrent%2F407364e&frnd=true&maid=085dd933-b8ee-4da3-b49e-fc70eae6e3c1&rel=true&rnd=1715097985339&cnt=1 HTTP/1.1
Host: videotoday.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 16:06:25 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-cache: Yac
x-movieads-country: NO
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FMAEhVx0%2BtG4I9In6W9qR5Lo9icMuvhN8b4HBmexqNo74rOS98Mfz1B5l0EXrhXNG%2FDE6O8oifguS8%2F82ymmPBHEmI%2BUaZ%2BFputmwKvi%2FRRB07nz4yQJOXX0PjNgG5Nf0VM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88027508ce391bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| logger.moviead55.ru/logger.php?t=player_finish&c=36a9df20-32ca-41af-9aa5-739c3dc2e600&a=&m=&v=ea59f7a89d04d570fbb4ef98a8a1693c&o=undefined | 193.200.65.146 | 200 OK | 70 B |
URL GET HTTP/2logger.moviead55.ru/logger.php?t=player_finish&c=36a9df20-32ca-41af-9aa5-739c3dc2e600&a=&m=&v=ea59f7a89d04d570fbb4ef98a8a1693c&o=undefined IP193.200.65.146:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subject*.moviead55.ru FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9 ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
File typePNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced Hashb357a19c87624c7c4d131aeeb4ae677f c7a9c45fd419815a5ab1998503a9f03514c0e229 497790947d4666760ce38f3c00e852c71fdb66cae849bae8e9ede352719e1581
GET /logger.php?t=player_finish&c=36a9df20-32ca-41af-9aa5-739c3dc2e600&a=&m=&v=ea59f7a89d04d570fbb4ef98a8a1693c&o=undefined HTTP/1.1
Host: logger.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:25 GMT
content-type: Content-Type: image/png
vary: Accept-Encoding
x-movieads-le: true
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| code.moviead55.ru/go/cinit?cn=btwcookie&rnd=1715097985 | 193.200.65.150 | 301 Moved Permanently | 0 B |
URL GET HTTP/2code.moviead55.ru/go/cinit?cn=btwcookie&rnd=1715097985 IP193.200.65.150:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subject*.moviead55.ru FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9 ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=btwcookie&rnd=1715097985 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=524bd7df-05ce-e799-58c3-063f3cd7b8e7; hbrdcookie2=c237592430317f179545; otclkbid=VU0cO9fZFTbYzyf; ohmybid=76358c67-0c3c-49df-b1d0-68dc4b682d86; bzcookie=170a2d46-81d3-47a5-59f3-c39da03e38f7; otmbid=NjYzYTUxNmYwODQzYTI3OA==; sapecookie=0900007F6F513A664936936D0273CBBD; 754rmads=1715097968
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 16:06:25 GMT
content-length: 0
location: https://ads.betweendigital.com/match?bidder_id=34348&callback_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbtwcookie%26bid%3D%24%7BUSER_ID%7D
x-movieads-country: NO
X-Firefox-Spdy: h2
|
|
| rating.kinopoisk.ru/47984.gif | 213.180.199.9 | 200 OK | 766 B |
URL GET HTTP/2rating.kinopoisk.ru/47984.gif IP213.180.199.9:443
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerGlobalSign nv-sa Subject*.kinopoisk.ru Fingerprint60:65:F8:10:D8:3A:62:4C:14:01:40:39:D4:CF:BD:67:36:B0:A8:D3 ValidityThu, 23 Nov 2023 21:12:48 GMT - Thu, 23 May 2024 20:59:59 GMT
File typeGIF image data, version 87a, 102 x 38 Hasheae8503338b4f7c3f443600641b7cf93 a0f4b098d6bb5c2964f1bac1b2f694db183071de 4330ff63701899d9d093771b22f0ecefa4f47495d3d307cbc7426887e9cdac4d
GET /47984.gif HTTP/1.1
Host: rating.kinopoisk.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 16:06:07 GMT
x-partial-components-secret: YTJlNDdhZmI5MjEyNjc1M2Q0OTEzODU2
x-content-type-options: nosniff
set-cookie: _yasc=AG5kbdOi/PiCQb/ex0IzlsOI741cFOOaSk5HxSAnvD0nR1nULHcHtkunb54erHKE8A==; domain=.kinopoisk.ru; path=/; expires=Fri, 05 May 2034 16:06:07 GMT; secure
i=3x60V3e4aMAZ2kAwKur2/7dyhkboAZlMzucnvG3iMz8obnsLysN46Z8dzvRmjgFZM3scnrOe0xTmfr/tU8xnyNMRmqk=; Expires=Thu, 07-May-2026 16:06:07 GMT; Domain=.kinopoisk.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=1011425921715097967; Expires=Thu, 07-May-2026 16:06:07 GMT; Domain=.kinopoisk.ru; Path=/; Secure; SameSite=None
yashr=6203057661715097967; Path=/; Domain=.kinopoisk.ru; Expires=Wed, 07 May 2025 16:06:07 GMT; SameSite=None; Secure; HttpOnly
x-request-id: 1715097967301107-8197954972322789063
x-frame-options: DENY
expires: Tue, 07 May 2024 16:11:07 GMT
cache-control: max-age=300, must-revalidate, no-cache, private
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| endpoints.dochase.com/?seat=evxGM8Wybgk6hDa9lZoy&token=ggVl8a4pY8KlsunXQ24YAedeD25lKPrm&cb=1715097986.6085892&ua=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&ip=192.168.110.150%3A46064&w=400&h=225&url=https%3A%2F%2Frutor.is%2Ftorrent%2F407364e&domain=rutor.is&cat=324&ref=https%3A%2F%2Frutor.is%2Ftorrent%2F407364e&maxduration=40&minduration=1&playerwidth=400&playerheight=225&publisher_id=524bd7df-05ce-e799-58c3-063f3cd7b8e7 | 8.2.109.53 | 200 OK | 21 B |
URL GET HTTP/1.1endpoints.dochase.com/?seat=evxGM8Wybgk6hDa9lZoy&token=ggVl8a4pY8KlsunXQ24YAedeD25lKPrm&cb=1715097986.6085892&ua=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&ip=192.168.110.150%3A46064&w=400&h=225&url=https%3A%2F%2Frutor.is%2Ftorrent%2F407364e&domain=rutor.is&cat=324&ref=https%3A%2F%2Frutor.is%2Ftorrent%2F407364e&maxduration=40&minduration=1&playerwidth=400&playerheight=225&publisher_id=524bd7df-05ce-e799-58c3-063f3cd7b8e7 IP8.2.109.53:443
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerGlobalSign nv-sa Subject*.dochase.com Fingerprint67:CF:80:F8:5A:15:36:52:0F:79:77:E0:B9:6F:2C:4B:63:70:E1:41 ValidityThu, 04 Jan 2024 12:17:10 GMT - Tue, 04 Feb 2025 12:17:09 GMT
File typeASCII text, with no line terminators Hash73585956e1ab6eec67477b0219fe5a49 5d7661f530e76df06c522c8178ccd611181c2a1f c0cc1c763fa66aa593a6ee3d727f78cd63de02f9950ae8083376ac2e483d2514
GET /?seat=evxGM8Wybgk6hDa9lZoy&token=ggVl8a4pY8KlsunXQ24YAedeD25lKPrm&cb=1715097986.6085892&ua=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&ip=192.168.110.150%3A46064&w=400&h=225&url=https%3A%2F%2Frutor.is%2Ftorrent%2F407364e&domain=rutor.is&cat=324&ref=https%3A%2F%2Frutor.is%2Ftorrent%2F407364e&maxduration=40&minduration=1&playerwidth=400&playerheight=225&publisher_id=524bd7df-05ce-e799-58c3-063f3cd7b8e7 HTTP/1.1
Host: endpoints.dochase.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rutor.is
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 16:06:26 GMT
Content-Type: text/xml
Content-Length: 21
Connection: keep-alive
Access-Control-Allow-Origin: https://rutor.is
Access-Control-Allow-Credentials: true
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Frame-Options: DENY
|
|
| static.moviead55.ru/mp_dist/mstream2.js?v6774352230 | 104.21.48.195 | 200 OK | 159 kB |
URL GET HTTP/3static.moviead55.ru/mp_dist/mstream2.js?v6774352230 IP104.21.48.195:443
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerGoogle Trust Services LLC Subjectmoviead55.ru Fingerprint70:2C:A9:4D:65:8C:20:4C:10:D9:25:7E:E1:56:35:6C:F3:D8:35:55 ValidityThu, 14 Mar 2024 18:33:22 GMT - Wed, 12 Jun 2024 18:33:21 GMT
Size159 kB (159360 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mp_dist/mstream2.js?v6774352230 HTTP/1.1
Host: static.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 16:06:25 GMT
content-type: application/javascript
last-modified: Fri, 03 May 2024 13:20:31 GMT
vary: Accept-Encoding
etag: W/"6634e49f-26e80"
x-movieads-country: NO
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-max-age: 1728000
cache-control: max-age=7200
cf-cache-status: HIT
age: 2702
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IY4ocfJRBJNAyIC8dSon9LD1rMORiHDkFoh2QhPWZS2jJ5V2c%2BAx7CmE9sXDiYgWN3crfWRCdxICRwoicmR8vQlPjMqRbdNIIGYqJuUPFDk6C5m6lwOb4%2FwGXnFd8w9GJ89EAL0k"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8802750a2d9b56c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| static.filmskino.site/hls/trailers/VyOL3Oik_EE.mp4/index.m3u8 | 193.200.65.210 | 200 OK | 4.8 kB |
URL GET HTTP/1.1static.filmskino.site/hls/trailers/VyOL3Oik_EE.mp4/index.m3u8 IP193.200.65.210:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://videotoday.site/mp_dist/td/trhls.html?v6774352230 CertificateIssuerLet's Encrypt Subjectstatic.filmskino.site Fingerprint42:89:E3:B7:17:CB:25:42:1E:CA:AB:31:65:00:AB:EC:5E:99:19:D5 ValidityFri, 05 Apr 2024 07:32:34 GMT - Thu, 04 Jul 2024 07:32:33 GMT
File typeM3U playlist, ASCII text, with very long lines (4918), with no line terminators Hasheb3caffa2b5322bcfbcbd6c82ce590f6 8a5fda0772d3f241332acf4006616435c7c109a3 f6c553b88da271c49df9f01006c89cc454ed4cbce3a8e0e47f904fadb87de53a
GET /hls/trailers/VyOL3Oik_EE.mp4/index.m3u8 HTTP/1.1
Host: static.filmskino.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videotoday.site
DNT: 1
Connection: keep-alive
Referer: https://videotoday.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 16:06:27 GMT
Content-Type: application/vnd.apple.mpegurl
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"3a1794b0-12c7"
Expires: Thu, 15 Aug 2024 16:06:27 GMT
Cache-Control: max-age=8640000
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|
| code.moviead55.ru/madstyle.css | 193.200.65.150 | 200 OK | 209 B |
URL GET HTTP/2code.moviead55.ru/madstyle.css IP193.200.65.150:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subject*.moviead55.ru FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9 ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
File typeASCII text, with no line terminators Hash65c23ae7a4e6bae374502261344cc71b 4ce6f053504b263bc4d3f14b7d29885e544cf43d dc02d0d8c802a03307621415f2cf7c04924e4d70b207f9d1b39bc593be390328
GET /madstyle.css HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
content-type: text/css; charset=utf-8
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
access-control-allow-origin: *
access-control-expose-headers: *
access-control-max-age: 86400
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method
etag: W/"28021-7Ba9Gb9K6bwuIzasQJpQO7varK0"
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| clpeachcod.com/bens/vinos.js?24105&u=null&a=0.5144024876160905 | 193.200.65.68 | 200 OK | 78 kB |
URL GET HTTP/1.1clpeachcod.com/bens/vinos.js?24105&u=null&a=0.5144024876160905 IP193.200.65.68:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subjectclpeachcod.com Fingerprint31:1D:EF:34:07:77:44:9A:22:DA:B5:D0:82:70:C6:D0:8A:31:E3:27 ValidityWed, 17 Apr 2024 11:34:05 GMT - Tue, 16 Jul 2024 11:34:04 GMT
File typeJavaScript source, ASCII text, with very long lines (699) Hashfdcf68c356044f87699a4d64f66f6f4e e554b9ad48730a4aa298c657074d09a78b3dfb56 00c7708f3fa550f4cdab30cfa65f5662d7d41fcbe810929d1428a59d3b0dcaf5
GET /bens/vinos.js?24105&u=null&a=0.5144024876160905 HTTP/1.1
Host: clpeachcod.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 16:06:07 GMT
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="NON DSP COR CURa TIA"
Set-Cookie: uuid=17150979677699912171; expires=Thu, 07-May-2026 16:06:07 GMT; Max-Age=63072000; path=/; samesite=None; domain=.clpeachcod.com; secure
|
|
| logger.moviead55.ru/logger.php?t=player_frame_loaded_new&c=36a9df20-32ca-41af-9aa5-739c3dc2e600&a=&m=1&v=ea59f7a89d04d570fbb4ef98a8a1693c&o= | 193.200.65.146 | 200 OK | 70 B |
URL GET HTTP/2logger.moviead55.ru/logger.php?t=player_frame_loaded_new&c=36a9df20-32ca-41af-9aa5-739c3dc2e600&a=&m=1&v=ea59f7a89d04d570fbb4ef98a8a1693c&o= IP193.200.65.146:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subject*.moviead55.ru FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9 ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
File typePNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced Hashb357a19c87624c7c4d131aeeb4ae677f c7a9c45fd419815a5ab1998503a9f03514c0e229 497790947d4666760ce38f3c00e852c71fdb66cae849bae8e9ede352719e1581
GET /logger.php?t=player_frame_loaded_new&c=36a9df20-32ca-41af-9aa5-739c3dc2e600&a=&m=1&v=ea59f7a89d04d570fbb4ef98a8a1693c&o= HTTP/1.1
Host: logger.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:25 GMT
content-type: Content-Type: image/png
vary: Accept-Encoding
x-movieads-le: true
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| s020.radikal.ru/i715/1302/33/01a1652712ec.gif | 0.0.0.0 | | 0 B |
URL GET s020.radikal.ru/i715/1302/33/01a1652712ec.gif IP0.0.0.0:0
Requested byhttps://rutor.is/torrent/407364e
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /i715/1302/33/01a1652712ec.gif HTTP/1.1
Host: s020.radikal.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| code.moviead55.ru/vast2?key=ea59f7a89d04d570fbb4ef98a8a1693c&sid=autoplay&cp.adsource=Dhs_out_g3&cp.adtype=pre&vt=100&fp=[fp]&w=400&h=225&vid=&fpro=&suri=https%3A%2F%2Frutor.is%2Ftorrent%2F407364e&rdd1=true&cp.referer=https%253A%252F%252Frutor.is%252Ftorrent%252F407364e&cp.cb=05d7e47a-8acf-c999-5a7a-0dc011d52a26 | 193.200.65.150 | 200 OK | 911 B |
URL GET HTTP/2code.moviead55.ru/vast2?key=ea59f7a89d04d570fbb4ef98a8a1693c&sid=autoplay&cp.adsource=Dhs_out_g3&cp.adtype=pre&vt=100&fp=[fp]&w=400&h=225&vid=&fpro=&suri=https%3A%2F%2Frutor.is%2Ftorrent%2F407364e&rdd1=true&cp.referer=https%253A%252F%252Frutor.is%252Ftorrent%252F407364e&cp.cb=05d7e47a-8acf-c999-5a7a-0dc011d52a26 IP193.200.65.150:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subject*.moviead55.ru FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9 ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
File typeXML document, ASCII text, with very long lines (937), with no line terminators Hasha8d3c3b2ebb6485cd879444157ab293d 956f221b4c33f5460a9646ab7d514cbcee29cf54 8895f51ad48a16a866a921bc114187f3617c97bf03ce496485cf3a3675033be1
GET /vast2?key=ea59f7a89d04d570fbb4ef98a8a1693c&sid=autoplay&cp.adsource=Dhs_out_g3&cp.adtype=pre&vt=100&fp=[fp]&w=400&h=225&vid=&fpro=&suri=https%3A%2F%2Frutor.is%2Ftorrent%2F407364e&rdd1=true&cp.referer=https%253A%252F%252Frutor.is%252Ftorrent%252F407364e&cp.cb=05d7e47a-8acf-c999-5a7a-0dc011d52a26 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rutor.is
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=524bd7df-05ce-e799-58c3-063f3cd7b8e7; hbrdcookie2=c237592430317f179545; otclkbid=VU0cO9fZFTbYzyf; ohmybid=76358c67-0c3c-49df-b1d0-68dc4b682d86; bzcookie=170a2d46-81d3-47a5-59f3-c39da03e38f7; otmbid=NjYzYTUxNmYwODQzYTI3OA==; sapecookie=0900007F6F513A664936936D0273CBBD; 754rmads=1715097968
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:26 GMT
content-type: text/xml;charset=UTF-8
vary: Accept-Encoding
x-movieads-cors-qex: Referer
x-movieads-path: /
access-control-allow-credentials: true
access-control-allow-origin: https://rutor.is
x-movieads-udata: cache,parsed,10306
x-movieads-referrer: https://rutor.is/
x-cache-source: Rist
x-movieads-mrc: no
x-movieads-ref: {"Scheme":"https","Opaque":"","User":null,"Host":"rutor.is","Path":"/","RawPath":"","OmitHost":false,"ForceQuery":false,"RawQuery":"","Fragment":"","RawFragment":""}
set-cookie: 754rmads=1715097986; max-age=31536000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| logger.moviead55.ru/logger.php?t=prev_session&c=36a9df20-32ca-41af-9aa5-739c3dc2e600&a=&m=36a9df20-32ca-41af-9aa5-739c3dc2e600&v=ea59f7a89d04d570fbb4ef98a8a1693c&o= | 193.200.65.146 | 200 OK | 70 B |
URL GET HTTP/2logger.moviead55.ru/logger.php?t=prev_session&c=36a9df20-32ca-41af-9aa5-739c3dc2e600&a=&m=36a9df20-32ca-41af-9aa5-739c3dc2e600&v=ea59f7a89d04d570fbb4ef98a8a1693c&o= IP193.200.65.146:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subject*.moviead55.ru FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9 ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
File typePNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced Hashb357a19c87624c7c4d131aeeb4ae677f c7a9c45fd419815a5ab1998503a9f03514c0e229 497790947d4666760ce38f3c00e852c71fdb66cae849bae8e9ede352719e1581
GET /logger.php?t=prev_session&c=36a9df20-32ca-41af-9aa5-739c3dc2e600&a=&m=36a9df20-32ca-41af-9aa5-739c3dc2e600&v=ea59f7a89d04d570fbb4ef98a8a1693c&o= HTTP/1.1
Host: logger.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:25 GMT
content-type: Content-Type: image/png
vary: Accept-Encoding
x-movieads-le: true
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| logger.moviead55.ru/logger.php?t=target_country_load&c=36a9df20-32ca-41af-9aa5-739c3dc2e600&a=&m=%7B%22browser%22%3A%22%7B%5C%22name%5C%22%3A%5C%22firefox%5C%22%2C%5C%22version%5C%22%3A%5C%2296%5C%22%7D%22%2C%22isMobile%22%3Afalse%2C%22format%22%3A%22new%22%7D&v=ea59f7a89d04d570fbb4ef98a8a1693c&o=undefined | 193.200.65.146 | 200 OK | 70 B |
URL GET HTTP/2logger.moviead55.ru/logger.php?t=target_country_load&c=36a9df20-32ca-41af-9aa5-739c3dc2e600&a=&m=%7B%22browser%22%3A%22%7B%5C%22name%5C%22%3A%5C%22firefox%5C%22%2C%5C%22version%5C%22%3A%5C%2296%5C%22%7D%22%2C%22isMobile%22%3Afalse%2C%22format%22%3A%22new%22%7D&v=ea59f7a89d04d570fbb4ef98a8a1693c&o=undefined IP193.200.65.146:443 ASN#6681 Giveme Cloud Sp Z O O
Requested byhttps://rutor.is/torrent/407364e CertificateIssuerLet's Encrypt Subject*.moviead55.ru FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9 ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
File typePNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced Hashb357a19c87624c7c4d131aeeb4ae677f c7a9c45fd419815a5ab1998503a9f03514c0e229 497790947d4666760ce38f3c00e852c71fdb66cae849bae8e9ede352719e1581
GET /logger.php?t=target_country_load&c=36a9df20-32ca-41af-9aa5-739c3dc2e600&a=&m=%7B%22browser%22%3A%22%7B%5C%22name%5C%22%3A%5C%22firefox%5C%22%2C%5C%22version%5C%22%3A%5C%2296%5C%22%7D%22%2C%22isMobile%22%3Afalse%2C%22format%22%3A%22new%22%7D&v=ea59f7a89d04d570fbb4ef98a8a1693c&o=undefined HTTP/1.1
Host: logger.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 16:06:07 GMT
content-type: Content-Type: image/png
vary: Accept-Encoding
x-movieads-le: true
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
0.0.0.0