Overview

URL nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html
IP217.67.179.222
ASNAS29226 CJSC Mastertel
Location Russian Federation
Report completed2019-06-09 15:34:38 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-06-09 2 nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 217.67.179.222

Date UQ / IDS / BL URL IP
2019-06-09 15:30:53 +0200
0 - 0 - 1 nokia-6300.smartovik.ru/soft/mobile-forex.html 217.67.179.222
2019-06-07 12:04:10 +0200
0 - 0 - 1 nokia-n73.smartovik.ru/games/gladiator_n73.exe 217.67.179.222
2019-06-06 22:01:43 +0200
0 - 0 - 1 nokia-e65.smartovik.ru/soft/MobileAgent_13.exe 217.67.179.222
2019-06-06 07:44:45 +0200
0 - 0 - 1 nokia-n72.smartovik.ru/themes/Why_so_happy_ns (...) 217.67.179.222
2019-06-05 22:04:49 +0200
0 - 0 - 1 nokia-n73.smartovik.ru/soft/MobileAgent_13.exe 217.67.179.222
2019-06-05 17:36:29 +0200
0 - 0 - 1 nokia-n73.smartovik.ru/soft/Psiloc.irRemote.v (...) 217.67.179.222
2019-06-05 14:20:34 +0200
0 - 0 - 1 nokia-n73.smartovik.ru/soft/Psiloc.irRemote.v (...) 217.67.179.222
2019-06-05 08:12:38 +0200
0 - 0 - 1 nokia-n95.smartovik.ru/themes/vista_style.exe 217.67.179.222
2019-06-03 07:14:32 +0200
0 - 0 - 1 nokia-e65.smartovik.ru/themes/Abstract_Flames.exe 217.67.179.222
2019-06-03 05:23:42 +0200
0 - 0 - 1 nokia-6300.smartovik.ru/games/darknest-fear.exe 217.67.179.222

Last 10 reports on ASN: AS29226 CJSC Mastertel

Date UQ / IDS / BL URL IP
2019-06-30 00:49:38 +0200
0 - 0 - 0 blog.iyakushchenko.com 195.216.243.31
2019-06-26 20:02:40 +0200
0 - 0 - 0 uiptv.do.am 195.216.243.16
2019-06-21 09:40:54 +0200
0 - 0 - 0 https://u.to/SWOgFQ&companycode=saagklub 195.216.243.155
2019-06-18 19:16:19 +0200
0 - 7 - 0 https://u.to/GoupFQ?=citibankverification 195.216.243.155
2019-06-18 11:19:19 +0200
0 - 0 - 0 abisurekodo.com 195.216.243.218
2019-06-17 11:50:43 +0200
0 - 0 - 0 https://u.to/8JOgFQ&cid=67&cspid=7&rgid=1&hid (...) 195.216.243.155
2019-06-16 07:10:45 +0200
0 - 0 - 1 https://u.to/tjmQFQ 195.216.243.155
2019-06-12 05:49:17 +0200
0 - 0 - 1 https://u.to/he6gFQ 195.216.243.155
2019-06-10 19:55:26 +0200
0 - 0 - 1 wow-x.at.ua/news/2008-12-04-48/ 195.216.243.16
2019-06-10 17:13:20 +0200
0 - 0 - 1 https://u.to/scicFQ 195.216.243.155

No other reports on domain: smartovik.ru



JavaScript

Executed Scripts (21)


Executed Evals (0)


Executed Writes (3)

#1 JavaScript::Write (size: 5, repeated: 1) - SHA256: 454d2afd4b550c2fa634518d303c473a5ca5605ff9aec05eeef33b88fd4cbcd9

                                        <!--
                                    

#2 JavaScript::Write (size: 242, repeated: 1) - SHA256: d16ea3d68ed905d15aae6f3afcc137fdfc3bd0e314b39038874cf7deb7e27c39

                                        < a href = "http://top.mail.ru/jump?from=1606500"
target = "_top" > < img src = "http://d3.c8.b8.a1.top.mail.ru/counter?id=1606500;t=48;js=13;r=;j=true;s=1176*885;d=24;rand=0.667087189092328"
alt = " 59B8=3@Mail.ru"
border = "0"
height = "31"
width = "88" > < /a>
                                    

#3 JavaScript::Write (size: 338, repeated: 1) - SHA256: 0653cb94e3017c83e2a054bc2a1b1b0b11074855a92ce7dad85fcf1140774b3c

                                        < a href = 'http://www.liveinternet.ru/click'
target = _blank > < img src = 'http://counter.yadro.ru/hit?t16.5;r;s1176*885*24;uhttp%3A//nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html;0.6416795473149631'
alt = ''
title = 'LiveInternet: ?>:070=> G8A;> ?@>A<>B@>2 70 24 G0A0, ?>A5B8B5;59 70 24 G0A0 8 70 A53>4=O'
border = 0 width = 88 height = 31 > < /a>
                                    


HTTP Transactions (109)


Request Response
                                        
                                            GET /games/soccer-for-nokia-6300.html HTTP/1.1 
Host: nokia-6300.smartovik.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         217.67.179.222
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:31:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.35-0+deb7u2
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3245
Md5:    8d30f0da4a12d18b2abdb90e663f2447
Sha1:   2f7fb2cbe5575462824e2de4ad49c43e4fbb9a65
Sha256: b7a06c255e0cdf608e20c3a91155e3fcd95e13898d8a8297625637542a286df1

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /style.css HTTP/1.1 
Host: nokia-6300.smartovik.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html

                                         
                                         217.67.179.222
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:31:09 GMT
Content-Length: 1542
Last-Modified: Fri, 26 Sep 2008 09:22:22 GMT
Connection: keep-alive
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1542
Md5:    9f50ae9f76a4d31c109715c303739add
Sha1:   7b9d0074862972b7db116a21758e8eade781ff14
Sha256: a84f81f19f75c90a4aec3f869932e52a43d04d2179136299ce0b8667673bc1ae
                                        
                                            GET /images/soccer-2.gif HTTP/1.1 
Host: nokia-6300.smartovik.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html

                                         
                                         217.67.179.222
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:31:09 GMT
Content-Length: 13390
Last-Modified: Mon, 05 Jul 2010 12:57:22 GMT
Connection: keep-alive
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 176 x 208
Size:   13390
Md5:    4bf6f172bda9aec161c452d10fa772c8
Sha1:   f1372793290ccff9daf59307a87a90183061f121
Sha256: 0a43dc66b40d57bd2b8812dedc3dba76067d0069315d648c9a392c71fb1ed384
                                        
                                            GET /pagead/show_ads.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html

                                         
                                         172.217.21.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Sun, 09 Jun 2019 13:34:04 GMT
Expires: Sun, 09 Jun 2019 13:34:04 GMT
Cache-Control: private, max-age=3600
Etag: 8501437006787512160
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 24082
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   24082
Md5:    aa09aca9934f7d5eeef5486a7ccd9805
Sha1:   f988bbf44c1a87885ff5b703d1802ccf83122d42
Sha256: 0e94787bf04c7865712c886c5159c60899216097159c697ae5eb9823decb5476
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: nokia-6300.smartovik.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         217.67.179.222
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:31:09 GMT
Content-Length: 894
Last-Modified: Fri, 26 Sep 2008 07:39:16 GMT
Connection: keep-alive
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   894
Md5:    3e0ceea0e9e5f9551b2af647be39a1e3
Sha1:   c6682290027a4c6036e6f0254b56c55d3a48ea7e
Sha256: 8d981c5b5af0614af2ca96ea93cd80c4592ea165d67d537439f5372fb3573b3c
                                        
                                            GET /images/soccer-3.gif HTTP/1.1 
Host: nokia-6300.smartovik.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html

                                         
                                         217.67.179.222
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:31:09 GMT
Content-Length: 12672
Last-Modified: Mon, 05 Jul 2010 12:57:22 GMT
Connection: keep-alive
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 176 x 208
Size:   12672
Md5:    77e208f379feaac0058dd099baf2b4fd
Sha1:   b7a66d8b944120dd68652ef6de3fb25bc9ba6771
Sha256: 0b38704410ae4d3f744aaca1d71d43d25efc885ed2960f29f5058940abb7b23d
                                        
                                            GET /top100/banner-88x31-rambler-black2.gif HTTP/1.1 
Host: top100-images.rambler.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html

                                         
                                         81.19.89.1
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:04 GMT
Content-Length: 931
Connection: keep-alive
Keep-Alive: timeout=40
Last-Modified: Tue, 26 Jun 2018 16:03:54 GMT
Etag: "5b3263ea-3a3"
Expires: Sat, 07 Sep 2019 13:34:04 GMT
Cache-Control: max-age=7776000
Set-Cookie: ruid=HQAAAMwK/VxMeFNNAcXRCQB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
P3P: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 88 x 31
Size:   931
Md5:    9c0469e2e6906ab044535a8600f31a9e
Sha1:   723de368e40f81615c6fe29ebb69e08e722348f7
Sha256: 4e43c13024b70329bba9a3dbeca20618937588e5c94fade3746dc4f45fa3c1b5
                                        
                                            GET /top100.jcn?1801860 HTTP/1.1 
Host: counter.rambler.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html

                                         
                                         81.19.88.80
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.4.7
Date: Sun, 09 Jun 2019 13:34:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   59829
Md5:    6765deee71233da32439399ebfdc18ed
Sha1:   f025d8a5ee9e5bc575277f60cf8159ef0015ac2e
Sha256: 88a805b8884c752f7a0e7ff3121151ec07a27cad518ef4eabb60d902a28924c0
                                        
                                            GET /img/header.jpg HTTP/1.1 
Host: nokia-6300.smartovik.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html

                                         
                                         217.67.179.222
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:31:09 GMT
Content-Length: 31230
Last-Modified: Mon, 29 Sep 2008 05:42:54 GMT
Connection: keep-alive
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   31230
Md5:    2c9627aa86ee263bce13683b56eb99c0
Sha1:   919393304d17071a1f767389f541eac5776627b4
Sha256: 042e71396ad0b7eba04b4a54bec728c85ca929e888f780534a3fed4b248cd9d5
                                        
                                            GET /pagead/js/r20190603/r20190131/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html

                                         
                                         172.217.21.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Sun, 09 Jun 2019 13:34:05 GMT
Expires: Sun, 09 Jun 2019 13:34:05 GMT
Cache-Control: private, max-age=1209600
Etag: 5654598310469848141
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 79498
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   79498
Md5:    ab0ff6825c8bbc23d60201aa48310643
Sha1:   5be65398425fbb4bba19e11b488d5be804c2fe5e
Sha256: 94483dbcf970e3d995dd502f55583b92a454258b5774a8ae814e5dee8eb63cad
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.207.195
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:34:05 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    3070066aa381805fee839ce346174048
Sha1:   1d2befd9f9dc96fbbda4343bc0bc7d2117e6946b
Sha256: cf8e86bf5f34b4a75a9d18639fe673eb9b7cfd5621d4d198cbb4f12979d96f0d
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.207.195
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:34:05 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    5be872b3fe0bb6f31385f91f811e9586
Sha1:   1192231bcb9ee73e9f619d433cdb66dddd9ae7f7
Sha256: db0ad6191770bff9043482b68acf62a4e25d4390a03274cfbe413675dd8c9cf5
                                        
                                            GET /pub-config/r20160913/ca-pub-9014511413944156.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html

                                         
                                         172.217.21.162
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 118
Date: Sun, 09 Jun 2019 13:30:22 GMT
Expires: Mon, 10 Jun 2019 01:30:22 GMT
Last-Modified: Sat, 08 Jun 2019 19:01:32 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=43200
Age: 223
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   118
Md5:    6f5e216d6b559d8c625c16d9cf3aea0d
Sha1:   67c7c642c603aee5bd2bac15ebfb279807a8a74e
Sha256: 84a4c2774af94b013729bc5934fbf0fa87d5f4e2b001bd1cd0a7bce5ba41d7eb
                                        
                                            GET /aci.js HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html

                                         
                                         195.201.243.72
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:05 GMT
Content-Length: 5815
Last-Modified: Wed, 26 Dec 2018 10:16:37 GMT
Connection: keep-alive
Etag: "5c235505-16b7"
Content-Encoding: gzip
Expires: Mon, 10 Jun 2019 01:34:05 GMT
Cache-Control: max-age=43200


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max compression
Size:   5815
Md5:    c03764b7dbf6f8c48af2d846ed9788ab
Sha1:   2307ef666a55709a7620b5809736a841da6e6ce7
Sha256: ac785a93d942f4d56d4e88de95cd5476a017540a207d2e9116c0e3743bf92433
                                        
                                            GET /img/footer.jpg HTTP/1.1 
Host: nokia-6300.smartovik.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html

                                         
                                         217.67.179.222
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:31:10 GMT
Content-Length: 17611
Last-Modified: Mon, 29 Sep 2008 05:49:30 GMT
Connection: keep-alive
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   17611
Md5:    3e54c872c5ff7df56036f04b3c16a208
Sha1:   a86c0027fd438699649875e65a04fa2cd2f0045a
Sha256: a3b9a36a270c3929a6a84eecc3839586b47b1a3f6dbfc7aee9213393907a8157
                                        
                                            GET /hit/?v=0.1.1&uid=f3eab47b-5eef-41c5-a421-fbf5bf5d4bb2&dp=10&tz=%2B02%3A00&nc=20491738&u=http%3A%2F%2Fnokia-6300.smartovik.ru%2Fgames%2Fsoccer-for-nokia-6300.html&r=&rs=1176x885&t=%D0%A4%D1%83%D1%82%D0%B1%D0%BE%D0%BB%20%D0%B4%D0%BB%D1%8F%20Nokia%206300.%20%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D0%B9%20%D0%B8%D0%B3%D1%80%D1%8B%20java%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE.&oE=1&oP=1&dT=2019-06-09T15%3A34%3A06.037 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html

                                         
                                         195.201.243.72
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: keep-alive
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: aid=w8nzSFz9Cs6FIgdNDAv7AuwQxURlp12mo7o4n1mo87TwhrcP; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /mc/?dp=10 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html

                                         
                                         195.201.243.72
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 154
Connection: keep-alive
Set-Cookie: test_cookie=CheckForPermission; path=/; domain=.acint.net; expires=Sun, 09-Jun-19 13:44:06 GMT aid=w8nzSFz9Cs6FIgdNDAv8AmW5VLQRd9W5/qI8dR8Vw+CLIazl; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/
Location: /mc/?dp=10&tc=1


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            GET /mc/?dp=10&tc=1 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html
Cookie: aid=w8nzSFz9Cs6FIgdNDAv8AmW5VLQRd9W5/qI8dR8Vw+CLIazl; test_cookie=CheckForPermission

                                         
                                         195.201.243.72
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: cSyncDp7v2=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp14v2=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp17=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp23=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp24=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp32=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp35=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp37=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp45=1560087246; expires=Thu, 13-Jun-19 07:34:06 GMT; path=/; domain=.acint.net cSyncDp54v2=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp62=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp67v2=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp68=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp71=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp74=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp75=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp77=1560087246; expires=Thu, 27-Jun-19 01:34:06 GMT; path=/; domain=.acint.net cSyncDp79=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp84=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp88=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp92=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp98=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp101=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp104=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp111=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net cSyncDp112=1560087246; expires=Tue, 09-Jul-19 13:34:06 GMT; path=/; domain=.acint.net
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1269
Md5:    eab8b962046b72088728e1deb5ad5298
Sha1:   8e4047e985bbe6359989e909c1df1f42912b27e6
Sha256: 9f84b577aa8a9726dc08508de220f00a8ef166db174bd89a6edf4d7ccdb7912f
                                        
                                            GET /counter?id=1606500;t=48;js=13;r=;j=true;s=1176*885;d=24;rand=0.667087189092328 HTTP/1.1 
Host: d3.c8.b8.a1.top.mail.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html

                                         
                                         217.69.133.148
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=60
Set-Cookie: FTID=1DA85x3-yVnp:1560087246:1606500:::; path=/; expires=Sat, 11-Jun-22 13:34:06 GMT; domain=.mail.ru; HttpOnly
Location: http://top-fwz1.mail.ru/counter?id=1606500;t=48;js=13;r=;j=true;s=1176*885;d=24;rand=0.667087189092328
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
AMP-Access-Control-Allow-Source-Origin: *
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store, max-age=0
Pragma: no-cache


--- Additional Info ---
                                        
                                            GET /hit?t16.5;r;s1176*885*24;uhttp%3A//nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html;0.6416795473149631 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html

                                         
                                         88.212.201.194
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Date: Sun, 09 Jun 2019 13:34:06 GMT
Server: 0W/0.8c
Location: http://counter.yadro.ru/hit?q;t16.5;r;s1176*885*24;uhttp%3A//nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html;0.6416795473149631
Content-Length: 32
Expires: Fri, 08 Jun 2018 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: FTID=1S_GhE24bOvp1S_GhE00EG4E; path=/; expires=Sun, 07 Jun 2020 21:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  HTML document text
Size:   32
Md5:    3e9c09a8c5a87f266e047a596f48578c
Sha1:   07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
Sha256: 57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
                                        
                                            GET /cnt/?et=pv&pid=1801860&rid=1560087246.078-880913279&v=1.6.0i&rn=1997946597&bs=1159x754&ce=1&rf&en=windows-1251&pt=%D0%A4%D1%83%D1%82%D0%B1%D0%BE%D0%BB%20%D0%B4%D0%BB%D1%8F%20Nokia%206300.%20%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D0%B9%20%D0%B8%D0%B3%D1%80%D1%8B%20java%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE.&sr=1176x885&cd=24-bit&la=en-US&ja=1&acn=Mozilla&an=Netscape&pl=Win32&tz=-120&fv=10.0%20r45&sv&lv&le=1&url=http%3A%2F%2Fnokia-6300.smartovik.ru%2Fgames%2Fsoccer-for-nokia-6300.html HTTP/1.1 
Host: kraken.rambler.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html
Cookie: ruid=HQAAAMwK/VxMeFNNAcXRCQB=

                                         
                                         81.19.89.8
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.15.8
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 595
Last-Modified: Tue, 11 Oct 2016 09:15:18 GMT
Connection: keep-alive
Etag: "57fcada6-253"
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 87a, 88 x 31
Size:   595
Md5:    bc3b86b4098983e3e0bbe654222d2619
Sha1:   1f294ca6cb990a20deacc236075515510648ae5e
Sha256: 9955e76a0aa0414abf703f10e87d93722c71f3fa57c82eb7531c9473d9ef72fc
                                        
                                            GET /hit?q;t16.5;r;s1176*885*24;uhttp%3A//nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html;0.6416795473149631 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html
Cookie: FTID=1S_GhE24bOvp1S_GhE00EG4E

                                         
                                         88.212.201.194
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sun, 09 Jun 2019 13:34:06 GMT
Server: 0W/0.8c
Connection: Close
Content-Length: 206
Expires: Fri, 08 Jun 2018 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: VID=1vXRrw3ck5Pp1S_GhE00EG4H; path=/; expires=Sun, 07 Jun 2020 21:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  GIF image data, version 89a, 88 x 31
Size:   206
Md5:    3e97955abe6c7ce3db49d150c91b1153
Sha1:   c6054f8d565380eabd05497b43c606dd56420e5b
Sha256: ca29d35019452b9309a2f6c4c382c5fa88b421835e9889485dec1229236f8c7b
                                        
                                            GET /match?bidder_id=73&external_user_id=48F3C9C3CE0AFD5C4D07228502FC0B0C HTTP/1.1 
Host: ads.betweendigital.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         88.212.252.22
HTTP/1.1 302 Found
                                        
Location: /match?bidder_id=73&external_user_id=48F3C9C3CE0AFD5C4D07228502FC0B0C&crf=1
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Set-Cookie: dc=mow1; Max-Age=315360000; Expires=Wed, 06 Jun 2029 13:34:06 GMT; Path=/; Domain=.betweendigital.com tuuid=2a883a87-0038-4701-a3d4-32e52cb13e26; Max-Age=315360000; Expires=Wed, 06 Jun 2029 13:34:06 GMT; Path=/; Domain=.betweendigital.com ut=XP0KzgADwPBAr9wCjj8cpNixUKcgEDhx5tWxEg==; Max-Age=315360000; Expires=Wed, 06 Jun 2029 13:34:06 GMT; Path=/; Domain=.betweendigital.com
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /images/1px-matching-rtbsape.gif?id=48F3C9C3CE0AFD5C4D07228502FC0B0C HTTP/1.1 
Host: t.trafmag.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         193.200.65.5
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NON DSP COR CURa TIA"


--- Additional Info ---
                                        
                                            GET /rmatch/?r=%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D HTTP/1.1 
Host: ssp-rtb.sape.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         193.232.121.241
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 154
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Location: //acint.net/match?dp=14&euid=F179E8C1CE0AFD5C1400043C02B9B60F
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=weh58Vz9Cs48BAAUD7a5AsR9+UnN2mgQGQ4mdYjC0p7xvnQB; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            GET /match?sysid=sa&uid=48F3C9C3CE0AFD5C4D07228502FC0B0C HTTP/1.1 
Host: cs.digadex.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         95.216.2.91
HTTP/1.1 200 OK
Content-Type: text/plain
                                        
Server: nginx/1.14.2
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 2
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    e0aa021e21dddbd6d8cecec71e9cf564
Sha1:   9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
Sha256: 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
                                        
                                            GET /match?bidder_id=73&external_user_id=48F3C9C3CE0AFD5C4D07228502FC0B0C&crf=1 HTTP/1.1 
Host: ads.betweendigital.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: dc=mow1; tuuid=2a883a87-0038-4701-a3d4-32e52cb13e26; ut=XP0KzgADwPBAr9wCjj8cpNixUKcgEDhx5tWxEg==

                                         
                                         88.212.252.22
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 68


--- Additional Info ---
Magic:  PNG image, 1 x 1, 8-bit/color RGBA, non-interlaced
Size:   68
Md5:    c4a2b870062c2bb98c500bc1526c0498
Sha1:   528666ccdb12997358077bc8fcdbfb6b825c7788
Sha256: 2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
                                        
                                            GET /sync2.204?pid=152&anket_id=48F3C9C3CE0AFD5C4D07228502FC0B0C HTTP/1.1 
Host: profile.ssp.rambler.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: ruid=HQAAAMwK/VxMeFNNAcXRCQB=

                                         
                                         91.192.149.30
HTTP/1.1 204 Http No Content
Content-Type: application/x-javascript; charset=Windows-1251
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: ruid=HQAAAMwK/VxMeFNNAcXRCQB=; domain=.rambler.ru; path=/; expires=Fri, 6 Dec 2019 13:34:06 GMT embryo=; domain=.rambler.ru; path=/; expires=Sun, 9 Jun 2019 12:34:06 GMT uuts=4vrJyOpzBkc9kdGXYpv-MQhL4K3tLFCt; domain=.rambler.ru; path=/; expires=Fri, 6 Dec 2019 13:34:06 GMT
X-Passed: 1bal2
Strict-Transport-Security: max-age=0
P3P: policyref="/w3c/p3p.xml", CP="NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI COM NAV INT DEM STA"


--- Additional Info ---
                                        
                                            GET /cgi-bin/sync.cgi?ssp_id=43&external_id=48F3C9C3CE0AFD5C4D07228502FC0B0C HTTP/1.1 
Host: ssp.adriver.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         195.209.111.16
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /match?dsp=sape HTTP/1.1 
Host: sync.republer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         194.190.117.33
HTTP/1.1 307 Temporary Redirect
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: close
P3P: policyref="/w3c/p3p.xml", CP="NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA"
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
X-Host: rssp1
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Set-Cookie: ruid=4f5bce4d-d004-419b-890d-264f820678e3; Max-Age=31536000; Expires=Mon, 08 Jun 2020 13:34:06 GMT; Path=/; Domain=.republer.com; HTTPOnly
Location: /match?dsp=sape&qset=1


--- Additional Info ---
                                        
                                            GET /cm.gif?p=48&id=48F3C9C3CE0AFD5C4D07228502FC0B0C HTTP/1.1 
Host: ad.mail.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         94.100.180.197
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 43
Connection: keep-alive
Set-Cookie: VID=1HeR3n3ej5np00000J0c94Hp:::0-0-0; path=/; expires=Sat, 11-Jun-22 13:34:06 GMT; domain=.mail.ru; HttpOnly
Expires: Sun, 09 Jun 2019 19:34:06 GMT
Cache-Control: max-age=21600
Last-Modified: Sun, 09 Jun 2019 13:34:06 GMT
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /pixel?google_nid=agentstvo_sape_limited&google_hm=SPPJw84K_VxNByKFAvwLDA HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: http://cm.g.doubleclick.net/pixel?google_nid=agentstvo_sape_limited&google_hm=SPPJw84K_VxNByKFAvwLDA&google_tc=
Date: Sun, 09 Jun 2019 13:34:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 316
X-XSS-Protection: 0
Set-Cookie: test_cookie=CheckForPermission; expires=Sun, 09-Jun-2019 13:49:06 GMT; path=/; domain=.doubleclick.net


--- Additional Info ---
Magic:  HTML document text
Size:   316
Md5:    1e423bc5610f47433ca741226e53f4f6
Sha1:   117c01e3f2a16c0c3bf3498db86cb68304b30a51
Sha256: 556a49fe4231c390b673ee8004e277f82a2cbe64851b146e23e36f9f0da30a5e
                                        
                                            GET /match?id=106&vid=48F3C9C3CE0AFD5C4D07228502FC0B0C HTTP/1.1 
Host: dm.hybrid.ai
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         37.18.16.16
HTTP/1.1 302 Found
                                        
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store
Pragma: no-cache
Expires: -1
Location: https://x01.aidata.io/0.gif?pid=TARGETIX&id=f581e6cb3239e905114c
Set-Cookie: vid=f581e6cb3239e905114c; expires=Fri, 09 Jun 2079 13:34:06 GMT; domain=.hybrid.ai; path=/
P3P: CP='NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC'
X-Mode: 122
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Origin: *
Server: Hybrid Web Server


--- Additional Info ---
                                        
                                            GET /match/sape?id=48F3C9C3CE0AFD5C4D07228502FC0B0C HTTP/1.1 
Host: sync.dmp.otm-r.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         195.201.194.138
HTTP/1.1 204 No Content
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /pixel?google_nid=agentstvo_sape_limited&google_hm=SPPJw84K_VxNByKFAvwLDA&google_tc= HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: test_cookie=CheckForPermission

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: http://www.acint.net/match?dp=77&euid=
Date: Sun, 09 Jun 2019 13:34:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 239
X-XSS-Protection: 0
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUkSLTO1EDGDQy6HHWw15HBNi2zDDZdxdNiZRXHWBgzqzCksyM4hFzkIHxkc; expires=Tue, 08-Jun-2021 13:34:06 GMT; path=/; domain=.doubleclick.net; HttpOnly


--- Additional Info ---
Magic:  HTML document text
Size:   239
Md5:    c5d2543d3421b4a36de8334db977b7a8
Sha1:   02785aa1de17eff07b1cb0a1a00dc197c0cea015
Sha256: e70e3fb03ff79a2bfa1dd9f32a4bc435dede861c5999fc384839df1e6c3e8bee
                                        
                                            GET /sync/pixel?source=sape&uid=48F3C9C3CE0AFD5C4D07228502FC0B0C HTTP/1.1 
Host: eu.track.digitaladsystems.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         94.130.38.41
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 35
Connection: keep-alive
Keep-Alive: timeout=20
Set-Cookie: uid=894df765-99cf-49b7-a8fd-1284c6f3fdac; Max-Age=63072000; Expires=Tue, 08 Jun 2021 13:34:06 GMT; Path=/; Domain=.digitaladsystems.com


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /cookie/accepter?source=sape&id=48F3C9C3CE0AFD5C4D07228502FC0B0C HTTP/1.1 
Host: sync.datamind.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         78.46.94.184
HTTP/1.1 302
Content-Type: image/png
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: close
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Location: http://sync.datamind.ru/cookie/accepter?source=sape&id=48F3C9C3CE0AFD5C4D07228502FC0B0C&dmp.ctest=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiXX19
Set-Cookie: dmp.ctest_id=1560087246328;Version=1;Comment=;Domain=.datamind.ru;Path=/;Max-Age=10800;Expires=Sun, 9 Jun 2019 16:34:06 GMT


--- Additional Info ---
                                        
                                            GET /merge_gpsid/?sid=50&id=48F3C9C3CE0AFD5C4D07228502FC0B0C HTTP/1.1 
Host: stat.adlabs.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         109.248.237.37
HTTP/1.1 302
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: keep-alive
Location: //adlmerge.com/merge_gpsid/?sid=50&id=48F3C9C3CE0AFD5C4D07228502FC0B0C


--- Additional Info ---
                                        
                                            GET /match?dsp=sape&qset=1 HTTP/1.1 
Host: sync.republer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: ruid=4f5bce4d-d004-419b-890d-264f820678e3

                                         
                                         194.190.117.33
HTTP/1.1 307 Temporary Redirect
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: close
P3P: policyref="/w3c/p3p.xml", CP="NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA"
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
X-Host: rssp3
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: http://px.adhigh.net/p/cm/rpblr
Set-Cookie: ruid=4f5bce4d-d004-419b-890d-264f820678e3; Max-Age=31536000; Expires=Mon, 08 Jun 2020 13:34:06 GMT; Path=/; Domain=.republer.com; HTTPOnly


--- Additional Info ---
                                        
                                            GET /sync?dspId=1116&uid=48F3C9C3CE0AFD5C4D07228502FC0B0C HTTP/1.1 
Host: matching.adtags.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         142.93.230.191
HTTP/1.1 200 OK
                                        
Server: nginx/1.14.0 (Ubuntu)
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: at_dsp_uid_1116=48F3C9C3CE0AFD5C4D07228502FC0B0C; max-age=86400; domain=.adtags.pro
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
                                        
                                            GET /partners/sprcs?uid=48F3C9C3CE0AFD5C4D07228502FC0B0C HTTP/1.1 
Host: relap.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         185.99.9.117
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 178
Connection: keep-alive
Location: https://relap.io/partners/sprcs?uid=48F3C9C3CE0AFD5C4D07228502FC0B0C


--- Additional Info ---
Magic:  HTML document text
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
                                        
                                            GET /image?source=sape&id=48F3C9C3CE0AFD5C4D07228502FC0B0C HTTP/1.1 
Host: sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         148.251.129.43
HTTP/1.1 302
Content-Type: image/png
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: close
Location: http://sync.upravel.com/image?source=sape&id=48F3C9C3CE0AFD5C4D07228502FC0B0C&session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiXX19
Set-Cookie: session_tptc=1560087246360;Version=1;Comment=;Domain=.upravel.com;Path=/;Max-Age=180
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"


--- Additional Info ---
                                        
                                            GET /adcm.js HTTP/1.1 
Host: tag.digitaltarget.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         185.15.175.130
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:22 GMT
Content-Length: 2940
Last-Modified: Thu, 06 Jun 2019 15:50:01 GMT
Connection: keep-alive
Etag: "5cf93629-b7c"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   2940
Md5:    bc5a99284126138487b03fb86237de6f
Sha1:   c7bc0bc90f9a608bafac3f557552ba9bf46e1429
Sha256: 1af87ee482c6597882f9d9ed2e726626eb67e2c26996fe05e26e2c146e8556b4
                                        
                                            GET /sape-sync?uid=48F3C9C3CE0AFD5C4D07228502FC0B0C HTTP/1.1 
Host: adx.com.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         176.9.238.188
HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
                                        
Server: nginx/1.14.2
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 19
Connection: keep-alive
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text
Size:   19
Md5:    595e88012a6521aae3e12cbebe76eb9e
Sha1:   da3968197e7bf67aa45a77515b52ba2710c5fc34
Sha256: b16e15764b8bc06c5c3f9f19bc8b99fa48e7894aa5a6ccdad65da49bbf564793
                                        
                                            GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=48F3C9C3CE0AFD5C4D07228502FC0B0C HTTP/1.1 
Host: sync.1dmp.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         136.243.148.229
HTTP/1.1 302 Found
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: keep-alive
Expires: 0
Cache-Control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
Set-Cookie: uid=40e35af0-8abb-11e9-9402-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Wed, 06 Jun 2029 13:34:06 GMT
Location: /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=48F3C9C3CE0AFD5C4D07228502FC0B0C&cs=1


--- Additional Info ---
                                        
                                            GET /counter?id=1606500;t=48;js=13;r=;j=true;s=1176*885;d=24;rand=0.667087189092328 HTTP/1.1 
Host: top-fwz1.mail.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html
Cookie: FTID=1DA85x3-yVnp:1560087246:1606500:::

                                         
                                         217.69.133.148
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 623
Connection: keep-alive
Keep-Alive: timeout=60
Set-Cookie: VID=0Ugyss1XuBnp00000J0c94Hp:::0-0-0; path=/; expires=Sat, 11-Jun-22 13:34:06 GMT; domain=.mail.ru; HttpOnly FTID=0; path=/; expires=Thu, 01-Jan-70 00:00:00 GMT; domain=.mail.ru; HttpOnly
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
AMP-Access-Control-Allow-Source-Origin: *
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store, max-age=0
Pragma: no-cache


--- Additional Info ---
Magic:  GIF image data, version 87a, 88 x 31
Size:   623
Md5:    e030a0e45409282d6fbeb37e6ee2889a
Sha1:   5ab5ee5d68a8f54c38297dfa08bbd5fcf94c19b8
Sha256: 03d005775f0b79c758746d5545dcf7a02c71d6988ec1e8baa3007a689d5a6126
                                        
                                            GET /match?dp=77&euid= HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: aid=w8nzSFz9Cs6FIgdNDAv8AmW5VLQRd9W5/qI8dR8Vw+CLIazl; test_cookie=CheckForPermission; cSyncDp7v2=1560087246; cSyncDp14v2=1560087246; cSyncDp17=1560087246; cSyncDp23=1560087246; cSyncDp24=1560087246; cSyncDp32=1560087246; cSyncDp35=1560087246; cSyncDp37=1560087246; cSyncDp45=1560087246; cSyncDp54v2=1560087246; cSyncDp62=1560087246; cSyncDp67v2=1560087246; cSyncDp68=1560087246; cSyncDp71=1560087246; cSyncDp74=1560087246; cSyncDp75=1560087246; cSyncDp77=1560087246; cSyncDp79=1560087246; cSyncDp84=1560087246; cSyncDp88=1560087246; cSyncDp92=1560087246; cSyncDp98=1560087246; cSyncDp101=1560087246; cSyncDp104=1560087246; cSyncDp111=1560087246; cSyncDp112=1560087246

                                         
                                         195.201.243.72
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: close
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /match?dp=14&euid=F179E8C1CE0AFD5C1400043C02B9B60F HTTP/1.1 
Host: acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: aid=w8nzSFz9Cs6FIgdNDAv8AmW5VLQRd9W5/qI8dR8Vw+CLIazl; test_cookie=CheckForPermission; cSyncDp7v2=1560087246; cSyncDp14v2=1560087246; cSyncDp17=1560087246; cSyncDp23=1560087246; cSyncDp24=1560087246; cSyncDp32=1560087246; cSyncDp35=1560087246; cSyncDp37=1560087246; cSyncDp45=1560087246; cSyncDp54v2=1560087246; cSyncDp62=1560087246; cSyncDp67v2=1560087246; cSyncDp68=1560087246; cSyncDp71=1560087246; cSyncDp74=1560087246; cSyncDp75=1560087246; cSyncDp77=1560087246; cSyncDp79=1560087246; cSyncDp84=1560087246; cSyncDp88=1560087246; cSyncDp92=1560087246; cSyncDp98=1560087246; cSyncDp101=1560087246; cSyncDp104=1560087246; cSyncDp111=1560087246; cSyncDp112=1560087246

                                         
                                         195.201.243.71
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: close
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /cookie/accepter?source=sape&id=48F3C9C3CE0AFD5C4D07228502FC0B0C&dmp.ctest=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiXX19 HTTP/1.1 
Host: sync.datamind.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: dmp.ctest_id=1560087246328

                                         
                                         78.46.94.184
HTTP/1.1 302
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: close
Location: http://sync.datamind.ru/cookie/emitter?source=google&nolog=true
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: dmp.id=98c2e3be-547c-4157-a7ec-a8a7d4431426;Version=1;Domain=.datamind.ru;Path=/;Max-Age=31536000;Expires=Mon, 8 Jun 2020 13:34:06 GMT


--- Additional Info ---
                                        
                                            GET /userbind?src=sape&pbf=1&id=48F3C9C3CE0AFD5C4D07228502FC0B0C HTTP/1.1 
Host: ssp1.rtb.beeline.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         217.118.87.139
HTTP/1.1 302 Found
                                        
Server: nginx/1.10.2
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: keep-alive
Location: http://www.acint.net/match?dp=111&euid=


--- Additional Info ---
                                        
                                            GET /merge_gpsid/?sid=50&id=48F3C9C3CE0AFD5C4D07228502FC0B0C HTTP/1.1 
Host: adlmerge.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         95.211.66.35
HTTP/1.1 200
Content-Type: image/gif
                                        
Server: nginx/1.12.1
Date: Sun, 09 Jun 2019 13:34:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /p/cm/rpblr HTTP/1.1 
Host: px.adhigh.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         136.243.75.34
HTTP/1.1 302 Found
                                        
Server: nginx/1.14.2
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: keep-alive
X-Backend-id: f5-de
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Set-Cookie: gi_u=8Pk2bkA7Cvy.AikABlFrPHI2YA==;Path=/;Domain=.adhigh.net;Expires=Mon, 08-Jun-2020 13:34:06 GMT;Max-Age=31536000
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Pragma: no-cache
Cache-Control: no-cache, no-store
Location: http://px.adhigh.net/p/cm/rpblr?bounced=1


--- Additional Info ---
                                        
                                            GET /p/cm/sape?u=48F3C9C3CE0AFD5C4D07228502FC0B0C HTTP/1.1 
Host: px.adhigh.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         136.243.75.34
HTTP/1.1 302 Found
                                        
Server: nginx/1.14.2
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: keep-alive
X-Backend-id: f5-de
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Set-Cookie: gi_u=8Pk2bkA7Cvy.AikABlFrPHI2YA==;Path=/;Domain=.adhigh.net;Expires=Mon, 08-Jun-2020 13:34:06 GMT;Max-Age=31536000
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Pragma: no-cache
Cache-Control: no-cache, no-store
Location: http://px.adhigh.net/p/cm/sape?u=48F3C9C3CE0AFD5C4D07228502FC0B0C&bounced=1


--- Additional Info ---
                                        
                                            GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=48F3C9C3CE0AFD5C4D07228502FC0B0C&cs=1 HTTP/1.1 
Host: sync.1dmp.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: uid=40e35af0-8abb-11e9-9402-901b0e8b2a6e

                                         
                                         136.243.148.229
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 35
Connection: keep-alive
Expires: 0
Cache-Control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /sync HTTP/1.1 
Host: sape-sync.rutarget.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         138.201.8.33
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx/1.14.0
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: close
Location: http://www.acint.net/match?dp=104&euid=AxRUcXMd0GBx
P3P: CP="This is not a P3P policy. Please visit http://rutarget.ru/p3p/ to get more information."
Set-Cookie: userId=AxRUcXMd0GBx; Path=/; Domain=.rutarget.ru; Expires=Fri, 06 Dec 2019 13:34:06 GMT


--- Additional Info ---
                                        
                                            GET /matchspm?pi=1000005&pui=48F3C9C3CE0AFD5C4D07228502FC0B0C HTTP/1.1 
Host: ut.rktch.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         194.87.190.115
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.15.12
Date: Sun, 09 Jun 2019 13:34:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: b_uid=66055386b735f94e9b1f2d5cbf26f3268f89; Max-Age=2592000; Expires=Tue, 9 Jul 2019 13:34:06 GMT; Domain=rktch.com
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  data
Size:   84
Md5:    c8f3e9f1c69e39152024d27441a58c9c
Sha1:   228036167113e9821ad88a110d011f3b9e0f3205
Sha256: 370dbc0a7e85181d81ecf29999a4782fc0fde9621e538b4d17887e2d1af1522d
                                        
                                            GET /processor.js?i=580874686120199 HTTP/1.1 
Host: tag.digitaltarget.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         185.15.175.130
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:22 GMT
Content-Length: 9284
Last-Modified: Thu, 06 Jun 2019 15:50:02 GMT
Connection: keep-alive
Etag: "5cf9362a-2444"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   9284
Md5:    94de504020df3192c87c3e0c1e2ea8c7
Sha1:   83c9f2e2a9700cb90b2bab557789794cd6f2a707
Sha256: db209c42d3795504c5463163ab0689263e4f139d2f26d2fc225d9e0c7dcb2708
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.128.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:34:06 GMT
Accept-Ranges: bytes
Last-Modified: Sat, 08 Jun 2019 10:32:05 GMT
Server: Apache
Etag: 4EB468D66F1AC4C369734C3D55CFAC4D91E628B8
Cache-Control: max-age=331199,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp4
X-HW: 1560087246.cds041.sk1.h2,1560087246.cds047.sk1.c
Connection: keep-alive
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    cdd709be4997d2b7a7054216a65a1dcd
Sha1:   4eb468d66f1ac4c369734c3d55cfac4d91e628b8
Sha256: 1e1466c815b15a1ec9703b668d6932726e7a60bb825663432df5e5961d27cbfd
                                        
                                            GET /p/cm/rpblr?bounced=1 HTTP/1.1 
Host: px.adhigh.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: gi_u=8Pk2bkA7Cvy.AikABlFrPHI2YA==

                                         
                                         136.243.75.34
HTTP/1.1 302 Found
                                        
Server: nginx/1.14.2
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: keep-alive
X-Backend-id: f5-de
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache, no-store
Set-Cookie: rpblr_sync=nzG;Path=/;Domain=.adhigh.net;Expires=Mon, 08-Jun-2020 13:34:06 GMT;Max-Age=31536000
Location: http://sync.republer.com/match?dsp=getintent&id=8Pk2bkA7Cvy.AikABlFrPHI2YA==


--- Additional Info ---
                                        
                                            GET /p/cm/sape?u=48F3C9C3CE0AFD5C4D07228502FC0B0C&bounced=1 HTTP/1.1 
Host: px.adhigh.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: gi_u=8Pk2bkA7Cvy.AikABlFrPHI2YA==

                                         
                                         136.243.75.34
HTTP/1.1 302 Found
                                        
Server: nginx/1.14.2
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: keep-alive
X-Backend-id: f5-de
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache, no-store
Set-Cookie: sape_sync=nzG;Path=/;Domain=.adhigh.net;Expires=Mon, 08-Jun-2020 13:34:06 GMT;Max-Age=31536000
Location: http://acint.net/match?dp=17&euid=8Pk2bkA7Cvy.AikABlFrPHI2YA==


--- Additional Info ---
                                        
                                            GET /cookie/emitter?source=google&nolog=true HTTP/1.1 
Host: sync.datamind.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: dmp.ctest_id=1560087246328; dmp.id=98c2e3be-547c-4157-a7ec-a8a7d4431426

                                         
                                         78.46.94.184
HTTP/1.1 302
Content-Type: image/png
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: close
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Location: https://cm.g.doubleclick.net/pixel?google_nid=tinkoff_bank_wdatamind&google_cm&google_hm=mMLjvlR8QVen7Kin1EMUJg
Set-Cookie: dmp.id=98c2e3be-547c-4157-a7ec-a8a7d4431426;Version=1;Domain=.datamind.ru;Path=/;Max-Age=31536000;Expires=Mon, 8 Jun 2020 13:34:06 GMT


--- Additional Info ---
                                        
                                            GET /image?source=sape&id=48F3C9C3CE0AFD5C4D07228502FC0B0C&session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiXX19 HTTP/1.1 
Host: sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: session_tptc=1560087246360

                                         
                                         148.251.129.43
HTTP/1.1 302
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: close
Location: http://7d129763-a4c6-43c8-9e4f-0ded8e7aaa40.sync.upravel.com/image?source=sape&id=48F3C9C3CE0AFD5C4D07228502FC0B0C&ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiLCJodHRwOi8vd3d3LmFjaW50Lm5ldC9tYy8_ZHBcdTAwM2QxMFx1MDAyNnRjXHUwMDNkMSJdfX0
Set-Cookie: user_id=7d129763-a4c6-43c8-9e4f-0ded8e7aaa40;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"


--- Additional Info ---
                                        
                                            GET /match?dp=111&euid= HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: aid=w8nzSFz9Cs6FIgdNDAv8AmW5VLQRd9W5/qI8dR8Vw+CLIazl; test_cookie=CheckForPermission; cSyncDp7v2=1560087246; cSyncDp14v2=1560087246; cSyncDp17=1560087246; cSyncDp23=1560087246; cSyncDp24=1560087246; cSyncDp32=1560087246; cSyncDp35=1560087246; cSyncDp37=1560087246; cSyncDp45=1560087246; cSyncDp54v2=1560087246; cSyncDp62=1560087246; cSyncDp67v2=1560087246; cSyncDp68=1560087246; cSyncDp71=1560087246; cSyncDp74=1560087246; cSyncDp75=1560087246; cSyncDp77=1560087246; cSyncDp79=1560087246; cSyncDp84=1560087246; cSyncDp88=1560087246; cSyncDp92=1560087246; cSyncDp98=1560087246; cSyncDp101=1560087246; cSyncDp104=1560087246; cSyncDp111=1560087246; cSyncDp112=1560087246

                                         
                                         195.201.243.72
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: close
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /match?dp=104&euid=AxRUcXMd0GBx HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: aid=w8nzSFz9Cs6FIgdNDAv8AmW5VLQRd9W5/qI8dR8Vw+CLIazl; test_cookie=CheckForPermission; cSyncDp7v2=1560087246; cSyncDp14v2=1560087246; cSyncDp17=1560087246; cSyncDp23=1560087246; cSyncDp24=1560087246; cSyncDp32=1560087246; cSyncDp35=1560087246; cSyncDp37=1560087246; cSyncDp45=1560087246; cSyncDp54v2=1560087246; cSyncDp62=1560087246; cSyncDp67v2=1560087246; cSyncDp68=1560087246; cSyncDp71=1560087246; cSyncDp74=1560087246; cSyncDp75=1560087246; cSyncDp77=1560087246; cSyncDp79=1560087246; cSyncDp84=1560087246; cSyncDp88=1560087246; cSyncDp92=1560087246; cSyncDp98=1560087246; cSyncDp101=1560087246; cSyncDp104=1560087246; cSyncDp111=1560087246; cSyncDp112=1560087246

                                         
                                         195.201.243.72
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: close
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.128.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:34:06 GMT
Accept-Ranges: bytes
Last-Modified: Mon, 03 Jun 2019 00:14:19 GMT
Server: Apache
Etag: 206ADD62719874AF8E5F8A0DDBAA98434FCA8AAB
Cache-Control: max-age=302399,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp14
X-HW: 1560087246.cds024.sk1.h2,1560087246.cds047.sk1.c
Connection: keep-alive
Content-Length: 727


--- Additional Info ---
Magic:  data
Size:   727
Md5:    5bd4cf07f2e90a2c27853558c88b9d86
Sha1:   206add62719874af8e5f8a0ddbaa98434fca8aab
Sha256: 095a49059441382b1768b781d4d37251969679ad91d24249ed866b7f2f1022ae
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.128.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:34:06 GMT
Accept-Ranges: bytes
Last-Modified: Mon, 03 Jun 2019 00:14:19 GMT
Server: Apache
Etag: BF40A85D9AEA5D5BB383FE1342EEF4689083FD5D
Cache-Control: max-age=302399,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp11
X-HW: 1560087246.cds024.sk1.h2,1560087246.cds046.sk1.c
Connection: keep-alive
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    27d88db03010f065a0ad06fe1ab2dcc2
Sha1:   bf40a85d9aea5d5bb383fe1342eef4689083fd5d
Sha256: d16a0780592846993736b7e25fabee605b539d8c361762fac2057216bdb1b15b
                                        
                                            GET /match?dsp=getintent&id=8Pk2bkA7Cvy.AikABlFrPHI2YA== HTTP/1.1 
Host: sync.republer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: ruid=4f5bce4d-d004-419b-890d-264f820678e3

                                         
                                         194.190.117.33
HTTP/1.1 307 Temporary Redirect
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: close
P3P: policyref="/w3c/p3p.xml", CP="NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA"
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
X-Host: rssp4
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: http://republer-sync.rutarget.ru/sync?ssp_user_id=4f5bce4d-d004-419b-890d-264f820678e3
Set-Cookie: ruid=4f5bce4d-d004-419b-890d-264f820678e3; Max-Age=31536000; Expires=Mon, 08 Jun 2020 13:34:06 GMT; Path=/; Domain=.republer.com; HTTPOnly


--- Additional Info ---
                                        
                                            GET /match?dp=17&euid=8Pk2bkA7Cvy.AikABlFrPHI2YA== HTTP/1.1 
Host: acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: aid=w8nzSFz9Cs6FIgdNDAv8AmW5VLQRd9W5/qI8dR8Vw+CLIazl; test_cookie=CheckForPermission; cSyncDp7v2=1560087246; cSyncDp14v2=1560087246; cSyncDp17=1560087246; cSyncDp23=1560087246; cSyncDp24=1560087246; cSyncDp32=1560087246; cSyncDp35=1560087246; cSyncDp37=1560087246; cSyncDp45=1560087246; cSyncDp54v2=1560087246; cSyncDp62=1560087246; cSyncDp67v2=1560087246; cSyncDp68=1560087246; cSyncDp71=1560087246; cSyncDp74=1560087246; cSyncDp75=1560087246; cSyncDp77=1560087246; cSyncDp79=1560087246; cSyncDp84=1560087246; cSyncDp88=1560087246; cSyncDp92=1560087246; cSyncDp98=1560087246; cSyncDp101=1560087246; cSyncDp104=1560087246; cSyncDp111=1560087246; cSyncDp112=1560087246

                                         
                                         195.201.243.71
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: close
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            POST /gsalphasha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 1521
Connection: keep-alive
Set-Cookie: __cfduid=d68d9bff7364d8136ad175346fc03e2c21560087246; expires=Mon, 08-Jun-20 13:34:06 GMT; path=/; domain=.globalsign.com; HttpOnly
Expires: Thu, 13 Jun 2019 10:27:40 GMT
X-Powered-By: Undertow/1
Etag: "68be4c799c2077a41bfd3e557c50584744b1cc70"
Last-Modified: Sun, 09 Jun 2019 10:27:40 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4e437b2af8854283-OSL


--- Additional Info ---
Magic:  data
Size:   1521
Md5:    acb03fdb2eee20d7936b5117683e38f8
Sha1:   68be4c799c2077a41bfd3e557c50584744b1cc70
Sha256: 8a2c1bac44fa3391d50a06ccaafcf9d1e9d847b9ba22a506101d1190228144b6
                                        
                                            GET /1/1093/i/i?i=937185294671495.223560766958542&a=77&e=48F3C9C3CE0AFD5C4D07228502FC0B0C&c=ss:77.up:48F3C9C3CE0AFD5C4D07228502FC0B0C.sync:up.xdua:dud7t02v_k_SVETb7US6i8q7.xps:xpsPlXgqJIy6_IgAs1126oooD.dn:acint__net.tg:.cr:http%3A%2F%2Fnokia-6300.smartovik.ru%2Fgames%2Fsoccer-for-nokia-6300.html HTTP/1.1 
Host: dmg.digitaltarget.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         185.15.175.145
HTTP/1.1 302 Found
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: keep-alive
P3P: policyref="http://dmg.digitaltarget.ru/p3p.xml", CP="NON NID PSAa PSDa OUR BUS COM NAV DEM STA PRE"
Location: /1/1093/i/i?i=937185294671495.223560766958542&a=77&e=48F3C9C3CE0AFD5C4D07228502FC0B0C&c=ss:77.up:48F3C9C3CE0AFD5C4D07228502FC0B0C.sync:up.xdua:dud7t02v_k_SVETb7US6i8q7.xps:xpsPlXgqJIy6_IgAs1126oooD.dn:acint__net.tg:.cr:http%3A%2F%2Fnokia-6300.smartovik.ru%2Fgames%2Fsoccer-for-nokia-6300.html&q=scc
Set-Cookie: viuserid=QlvaEIwj5R3055u5PDCv; Max-Age=93312000; Expires=Tue, 24 May 2022 13:34:06 GMT; Path=/; Domain=dmg.digitaltarget.ru visessid=85a188d3_16a278f97b0_00000000021d9a8b; Path=/; Domain=dmg.digitaltarget.ru


--- Additional Info ---
                                        
                                            GET /image?source=sape&id=48F3C9C3CE0AFD5C4D07228502FC0B0C&ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiLCJodHRwOi8vd3d3LmFjaW50Lm5ldC9tYy8_ZHBcdTAwM2QxMFx1MDAyNnRjXHUwMDNkMSJdfX0 HTTP/1.1 
Host: 7d129763-a4c6-43c8-9e4f-0ded8e7aaa40.sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: session_tptc=1560087246360; user_id=7d129763-a4c6-43c8-9e4f-0ded8e7aaa40

                                         
                                         148.251.78.49
HTTP/1.1 302
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: close
Location: http://sync.upravel.com/google/sync
Set-Cookie: user_id=7d129763-a4c6-43c8-9e4f-0ded8e7aaa40;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"


--- Additional Info ---
                                        
                                            GET /counter.php?sid=28&ref=&uri=/games/soccer-for-nokia-6300.html HTTP/1.1 
Host: nokia-6300.smartovik.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html

                                         
                                         217.67.179.222
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:31:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.35-0+deb7u2
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   22
Md5:    3a1ca2120a5cce1968931187de00e962
Sha1:   b1d86ff86c4494729759b53d408c513fb8e20b92
Sha256: c8ae9511600b79ae44df9e2afde5353d4471352de16b883d8a775505a393b270
                                        
                                            GET /0.gif?pid=TARGETIX&id=f581e6cb3239e905114c HTTP/1.1 
Host: x01.aidata.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         144.76.85.254
HTTP/1.1 302 Found
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: keep-alive
Location: https://x01.aidata.io/0.gif?pid=TARGETIX&id=f581e6cb3239e905114c&bounce=1
Expires: Sun, 09 Jun 2019 13:34:05 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Sun, 09 Jun 2019 13:34:05 GMT
Set-Cookie: __upin=/15LOwZJ/9V1UNKoerhhCg;domain=.aidata.io;path=/;max-age=63072000 __upints=1560087246;domain=.aidata.io;path=/;max-age=63072000
P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'


--- Additional Info ---
                                        
                                            GET /1/1093/i/i?i=937185294671495.223560766958542&a=77&e=48F3C9C3CE0AFD5C4D07228502FC0B0C&c=ss:77.up:48F3C9C3CE0AFD5C4D07228502FC0B0C.sync:up.xdua:dud7t02v_k_SVETb7US6i8q7.xps:xpsPlXgqJIy6_IgAs1126oooD.dn:acint__net.tg:.cr:http%3A%2F%2Fnokia-6300.smartovik.ru%2Fgames%2Fsoccer-for-nokia-6300.html&q=scc HTTP/1.1 
Host: dmg.digitaltarget.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: viuserid=QlvaEIwj5R3055u5PDCv; visessid=85a188d3_16a278f97b0_00000000021d9a8b

                                         
                                         185.15.175.145
HTTP/1.1 204 No Content
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: keep-alive
P3P: policyref="http://dmg.digitaltarget.ru/p3p.xml", CP="NON NID PSAa PSDa OUR BUS COM NAV DEM STA PRE"
Set-Cookie: viuserid=QlvaEIwj5R3055u5PDCv; Max-Age=93312000; Expires=Tue, 24 May 2022 13:34:06 GMT; Path=/; Domain=dmg.digitaltarget.ru


--- Additional Info ---
                                        
                                            GET /pixel?google_nid=tinkoff_bank_wdatamind&google_cm&google_hm=mMLjvlR8QVen7Kin1EMUJg HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: IDE=AHWqTUkSLTO1EDGDQy6HHWw15HBNi2zDDZdxdNiZRXHWBgzqzCksyM4hFzkIHxkc

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://sync.datamind.ru/cookie/accepter?source=google&google_gid=CAESECQOZWCJ0heXEDuPESgOaMs&google_cver=1
Date: Sun, 09 Jun 2019 13:34:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 312
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  HTML document text
Size:   312
Md5:    5ab9994591832f465bb91cd28fb28147
Sha1:   18985049765dba5e0f13c6f14b5f6d1553b72460
Sha256: 1211da46d7caf3cbf855e5fc048ed080071a96d653caf25841a4a1a43b48b618
                                        
                                            GET /sync?ssp_user_id=4f5bce4d-d004-419b-890d-264f820678e3 HTTP/1.1 
Host: republer-sync.rutarget.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: userId=AxRUcXMd0GBx

                                         
                                         138.201.8.32
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx/1.14.0
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: close
Location: http://sync.republer.com/match?src=rutarget&id=AxRUcXMd0GBx
P3P: CP="This is not a P3P policy. Please visit http://rutarget.ru/p3p/ to get more information."
Set-Cookie: userId=AxRUcXMd0GBx; Path=/; Domain=.rutarget.ru; Expires=Fri, 06 Dec 2019 13:34:06 GMT


--- Additional Info ---
                                        
                                            GET /0.gif?pid=TARGETIX&id=f581e6cb3239e905114c&bounce=1 HTTP/1.1 
Host: x01.aidata.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: __upin=/15LOwZJ/9V1UNKoerhhCg; __upints=1560087246

                                         
                                         144.76.85.254
HTTP/1.1 302 Found
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dm.hybrid.ai/match?id=8&vid=%2F15LOwZJ%2F9V1UNKoerhhCg
Set-Cookie: tx=1;path=/;expires=Sun, 9 Jun 2019 13:34:07 GMT;max-age=1 __upin=/15LOwZJ/9V1UNKoerhhCg;domain=.aidata.io;path=/;max-age=63072000 __upints=1560087246;domain=.aidata.io;path=/;max-age=63072000
Expires: Sun, 09 Jun 2019 13:34:05 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Sun, 09 Jun 2019 13:34:05 GMT
P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'


--- Additional Info ---
                                        
                                            GET /partners/sprcs?uid=48F3C9C3CE0AFD5C4D07228502FC0B0C HTTP/1.1 
Host: relap.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         185.99.9.117
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Content-Length: 43
Connection: keep-alive
Pragma: no-cache
Set-Cookie: unique=RBq1DSBO; expires=Wed, 06 Jun 2029 13:34:06 GMT; domain=relap.io; path=/; secure; HttpOnly suid=434c98c663effc2e5ad20194687b39474baacfb5--b37319ac68e26bf7eff107956f53b770e8045a2e; domain=relap.io; path=/; secure; HttpOnly hllc=1; expires=Mon, 10 Jun 2019 13:34:06 GMT; domain=relap.io; path=/; secure; HttpOnly rlpsprcs=eyJ0cyI6MTU2MDA4NzI0NiwidWlkIjoiNDhGM0M5QzNDRTBBRkQ1QzREMDcyMjg1MDJGQzBCMEMifQ--3689cb0ea4e957c74a62f945801821a9f4e54e85; expires=Mon, 08 Jun 2020 13:34:06 GMT; domain=relap.io; path=/; secure; HttpOnly
Date: Sun, 09 Jun 2019 13:34:06 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Strict-Transport-Security: max-age=5184000; includeSubdomains;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /google/sync HTTP/1.1 
Host: sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: session_tptc=1560087246360; user_id=7d129763-a4c6-43c8-9e4f-0ded8e7aaa40

                                         
                                         148.251.129.43
HTTP/1.1 302
Content-Type: image/png
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: close
Location: http://7d129763-a4c6-43c8-9e4f-0ded8e7aaa40.sync.upravel.com/google/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiXX19
Set-Cookie: user_id=7d129763-a4c6-43c8-9e4f-0ded8e7aaa40;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"


--- Additional Info ---
                                        
                                            GET /match?src=rutarget&id=AxRUcXMd0GBx HTTP/1.1 
Host: sync.republer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: ruid=4f5bce4d-d004-419b-890d-264f820678e3

                                         
                                         194.190.117.33
HTTP/1.1 307 Temporary Redirect
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: close
P3P: policyref="/w3c/p3p.xml", CP="NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA"
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
X-Host: rssp4
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: http://ut.rktch.com/matchspm?pi=14&pui=4f5bce4d-d004-419b-890d-264f820678e3
Set-Cookie: ruid=4f5bce4d-d004-419b-890d-264f820678e3; Max-Age=31536000; Expires=Mon, 08 Jun 2020 13:34:06 GMT; Path=/; Domain=.republer.com; HTTPOnly


--- Additional Info ---
                                        
                                            GET /google/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiXX19 HTTP/1.1 
Host: 7d129763-a4c6-43c8-9e4f-0ded8e7aaa40.sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: session_tptc=1560087246360; user_id=7d129763-a4c6-43c8-9e4f-0ded8e7aaa40

                                         
                                         148.251.78.49
HTTP/1.1 302
Content-Type: image/png
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: close
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: user_id=7d129763-a4c6-43c8-9e4f-0ded8e7aaa40;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
Location: https://cm.g.doubleclick.net/pixel?google_nid=mgcom&google_cm&google_hm=fRKXY6TGQ8ieTw3tjnqqQA


--- Additional Info ---
                                        
                                            GET /matchspm?pi=14&pui=4f5bce4d-d004-419b-890d-264f820678e3 HTTP/1.1 
Host: ut.rktch.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: b_uid=66055386b735f94e9b1f2d5cbf26f3268f89

                                         
                                         194.87.190.115
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.15.12
Date: Sun, 09 Jun 2019 13:34:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  data
Size:   84
Md5:    c8f3e9f1c69e39152024d27441a58c9c
Sha1:   228036167113e9821ad88a110d011f3b9e0f3205
Sha256: 370dbc0a7e85181d81ecf29999a4782fc0fde9621e538b4d17887e2d1af1522d
                                        
                                            POST / HTTP/1.1 
Host: status.thawte.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=103441
Date: Sun, 09 Jun 2019 13:34:06 GMT
Etag: "5cfbf2fa-1d7"
Expires: Mon, 10 Jun 2019 18:18:07 GMT
Last-Modified: Sat, 08 Jun 2019 17:40:10 GMT
Server: ECS (ams/49B4)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    b81d128bbe0aeb9469f5549eac14cddd
Sha1:   ad0eb02d879a11994a83ef021ea29ef1cc596d26
Sha256: 1853199a6d6d33b06610ec52e0e7d321070136c02add393982b204bf859f5895
                                        
                                            GET /csync/?t=p&ep=281184&extuid=48F3C9C3CE0AFD5C4D07228502FC0B0C&redir=http%3A%2F%2Facint.net%2Fmatch%3Fdp%3D24%26euid%3D%7Buid%7D HTTP/1.1 
Host: sync.vertamedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         62.149.0.72
HTTP/1.1 302 Found
                                        
Server: Adtelligent 1.0
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Location: http://acint.net/match?dp=24&euid=22f6fdf1d8bcd3f3
Set-Cookie: vmuid=22f6fdf1d8bcd3f3; expires=Sat, 10 Aug 2019 13:34:06 GMT; domain=.vertamedia.com; path=/ p281184=48F3C9C3CE0AFD5C4D07228502FC0B0C; expires=Sat, 10 Aug 2019 13:34:06 GMT; domain=.vertamedia.com; path=/


--- Additional Info ---
                                        
                                            GET /match?dp=24&euid=22f6fdf1d8bcd3f3 HTTP/1.1 
Host: acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: aid=w8nzSFz9Cs6FIgdNDAv8AmW5VLQRd9W5/qI8dR8Vw+CLIazl; test_cookie=CheckForPermission; cSyncDp7v2=1560087246; cSyncDp14v2=1560087246; cSyncDp17=1560087246; cSyncDp23=1560087246; cSyncDp24=1560087246; cSyncDp32=1560087246; cSyncDp35=1560087246; cSyncDp37=1560087246; cSyncDp45=1560087246; cSyncDp54v2=1560087246; cSyncDp62=1560087246; cSyncDp67v2=1560087246; cSyncDp68=1560087246; cSyncDp71=1560087246; cSyncDp74=1560087246; cSyncDp75=1560087246; cSyncDp77=1560087246; cSyncDp79=1560087246; cSyncDp84=1560087246; cSyncDp88=1560087246; cSyncDp92=1560087246; cSyncDp98=1560087246; cSyncDp101=1560087246; cSyncDp104=1560087246; cSyncDp111=1560087246; cSyncDp112=1560087246

                                         
                                         195.201.243.71
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: close
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=161671
Date: Sun, 09 Jun 2019 13:34:06 GMT
Etag: "5cfcbf0f-1d7"
Expires: Tue, 11 Jun 2019 10:28:37 GMT
Last-Modified: Sun, 09 Jun 2019 08:10:55 GMT
Server: ECS (lcy/1D1C)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    195215aab744785656c438deecb860b0
Sha1:   1498d324a45e8cea15cc3ab787b575f4606d64c7
Sha256: 315aacf19fed44488e9a822009c6e13d9050c266c14403059aad30054a298b7b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.128.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:34:06 GMT
Accept-Ranges: bytes
Last-Modified: Thu, 06 Jun 2019 05:09:59 GMT
Server: Apache
Etag: B7FE3450FE8D473E93D56CBC27B5132A7BF3363B
Cache-Control: max-age=333301,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp14
X-HW: 1560087246.cds042.sk1.h2,1560087246.cds041.sk1.c
Connection: keep-alive
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    3e4ce7a9348549dcef52f8d3765580fc
Sha1:   b7fe3450fe8d473e93d56cbc27b5132a7bf3363b
Sha256: 634945875e132fa6584a355804254e180cf4bc3f5a154d6b3eebb0dcf652d134
                                        
                                            GET /pixel?google_nid=mgcom&google_cm&google_hm=fRKXY6TGQ8ieTw3tjnqqQA HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: IDE=AHWqTUkSLTO1EDGDQy6HHWw15HBNi2zDDZdxdNiZRXHWBgzqzCksyM4hFzkIHxkc

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://sync.upravel.com/image?source=google&google_gid=CAESEMguu_WTL4XIailbYuzHLDc&google_cver=1
Date: Sun, 09 Jun 2019 13:34:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 302
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  HTML document text
Size:   302
Md5:    8596cd2672471dc3d99875bacf145dbc
Sha1:   15880796ca44dc751e2ca8651766c0d45117fa22
Sha256: 83e08ed4c67549a080220ee7530d6af12311cd704b93bcf208f8eadac3cb4a1b
                                        
                                            GET /cookie/accepter?source=google&google_gid=CAESECQOZWCJ0heXEDuPESgOaMs&google_cver=1 HTTP/1.1 
Host: sync.datamind.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: dmp.ctest_id=1560087246328; dmp.id=98c2e3be-547c-4157-a7ec-a8a7d4431426

                                         
                                         78.46.94.184
HTTP/1.1 302
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: close
Location: https://sync.datamind.ru/cookie/emitter?source=cityads&nolog=true
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: dmp.id=98c2e3be-547c-4157-a7ec-a8a7d4431426;Version=1;Domain=.datamind.ru;Path=/;Max-Age=31536000;Expires=Mon, 8 Jun 2020 13:34:06 GMT


--- Additional Info ---
                                        
                                            GET /match?id=8&vid=%2F15LOwZJ%2F9V1UNKoerhhCg HTTP/1.1 
Host: dm.hybrid.ai
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: vid=f581e6cb3239e905114c

                                         
                                         37.18.16.16
HTTP/1.1 302 Found
                                        
Date: Sun, 09 Jun 2019 13:34:06 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store
Pragma: no-cache
Expires: -1
Location: https://dm-us.hybrid.ai/match?ovid=f581e6cb3239e905114c&id=8&vid=%2F15LOwZJ%2F9V1UNKoerhhCg
P3P: CP='NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC'
X-Mode: 114
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Origin: *
Server: Hybrid Web Server


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.128.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:34:07 GMT
Accept-Ranges: bytes
Last-Modified: Sat, 08 Jun 2019 03:55:31 GMT
Server: Apache
Etag: 9E8802529366E471087B0EC9F3957FE75DF0E3BE
Cache-Control: max-age=330367,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp10
X-HW: 1560087247.cds007.sk1.h2,1560087247.cds022.sk1.c
Connection: keep-alive
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    6975c4454fe601e6875cd771e248f83f
Sha1:   9e8802529366e471087b0ec9f3957fe75df0e3be
Sha256: db7a1eec082f6e20b1b8bc9e27aea843c912b7c443932b2f915cc62a86215bf3
                                        
                                            GET /cookie/emitter?source=cityads&nolog=true HTTP/1.1 
Host: sync.datamind.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: dmp.ctest_id=1560087246328; dmp.id=98c2e3be-547c-4157-a7ec-a8a7d4431426

                                         
                                         78.46.94.184
HTTP/1.1 302
Content-Type: image/png
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:07 GMT
Content-Length: 0
Connection: close
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Location: https://x.cnt.my/cmp/?p=TD&cookie=98c2e3be-547c-4157-a7ec-a8a7d4431426&md5=26cbcae25e9980b0fbd6443d7c9f4661&v=1
Set-Cookie: dmp.id=98c2e3be-547c-4157-a7ec-a8a7d4431426;Version=1;Domain=.datamind.ru;Path=/;Max-Age=31536000;Expires=Mon, 8 Jun 2020 13:34:07 GMT


--- Additional Info ---
                                        
                                            GET /image?source=google&google_gid=CAESEMguu_WTL4XIailbYuzHLDc&google_cver=1 HTTP/1.1 
Host: sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: session_tptc=1560087246360; user_id=7d129763-a4c6-43c8-9e4f-0ded8e7aaa40

                                         
                                         148.251.129.43
HTTP/1.1 302
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:07 GMT
Content-Length: 0
Connection: close
Location: https://7d129763-a4c6-43c8-9e4f-0ded8e7aaa40.sync.upravel.com/image?source=google&google_gid=CAESEMguu_WTL4XIailbYuzHLDc&google_cver=1&ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiXX19
Set-Cookie: user_id=7d129763-a4c6-43c8-9e4f-0ded8e7aaa40;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         151.139.128.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:34:07 GMT
Accept-Ranges: bytes
Last-Modified: Sun, 02 Jun 2019 17:20:41 GMT
Server: Apache
Etag: ABD615AD5BFE251816D902F76C4857F4B07DBCC1
Cache-Control: max-age=300344,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp14
X-HW: 1560087247.cds041.sk1.h2,1560087247.cds032.sk1.c
Connection: keep-alive
Content-Length: 472


--- Additional Info ---
Magic:  data
Size:   472
Md5:    42e4e37251869a4c843d60f5954b628d
Sha1:   abd615ad5bfe251816d902f76c4857f4b07dbcc1
Sha256: acb5a3361d6b0a04650075c26865de77bbbd213d04ae6d5daa47b702d6305b37
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.128.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:34:07 GMT
Accept-Ranges: bytes
Last-Modified: Thu, 06 Jun 2019 12:14:19 GMT
Server: Apache
Etag: 8099BB07E7050604DE4259CFE266D535C04E9322
Cache-Control: max-age=507466,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp14
X-HW: 1560087247.cds041.sk1.h2,1560087247.cds041.sk1.c
Connection: keep-alive
Content-Length: 727


--- Additional Info ---
Magic:  data
Size:   727
Md5:    241b983353821984fdc5f3d18cb9b582
Sha1:   8099bb07e7050604de4259cfe266d535c04e9322
Sha256: ed1804e48e4176bfa75fb14d2e6d79d568332b46b29e2ca562b3970499397598
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.128.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:34:07 GMT
Accept-Ranges: bytes
Last-Modified: Thu, 06 Jun 2019 12:14:19 GMT
Server: Apache
Etag: B44FAF03540FCA33016D09282127AE20BEAA4CA4
Cache-Control: max-age=507466,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp4
X-HW: 1560087247.cds024.sk1.h2,1560087247.cds047.sk1.c
Connection: keep-alive
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    fb545f5eec15e712c9606a6366bedb83
Sha1:   b44faf03540fca33016d09282127ae20beaa4ca4
Sha256: d23de25011516addadb4b89614cb41dcffe22cc4cab419e9f3d07835241c9f8e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "CE50C2D0B8CE01293DE714E78D90182F642712EF65E253A0B08AC31D559C8F92"
Last-Modified: Fri, 07 Jun 2019 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20509
Expires: Sun, 09 Jun 2019 19:15:56 GMT
Date: Sun, 09 Jun 2019 13:34:07 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    4ad6b8ee27f60a0aa74a67c582a23244
Sha1:   612dd414ac9e61ab8abef639cab19dcb9b33cf73
Sha256: ce50c2d0b8ce01293de714e78d90182f642712ef65e253a0b08ac31d559c8f92
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.26
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Content-Transfer-Encoding: Binary
Last-Modified: Fri, 07 Jun 2019 17:30:09 GMT
Etag: "2cf877ce4290fed2cae71c1172055582327ebf77"
Content-Length: 1398
Cache-Control: public, no-transform, must-revalidate, max-age=38130
Expires: Mon, 10 Jun 2019 00:09:37 GMT
Date: Sun, 09 Jun 2019 13:34:07 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1398
Md5:    7859b70e303e40d2a50e56ec14efe2d6
Sha1:   2cf877ce4290fed2cae71c1172055582327ebf77
Sha256: 8e4bec54e49487ddb4f8c8ebe6e3088d526d9367a4233c2f18a2b65e13a55253
                                        
                                            GET /cmp/?p=TD&cookie=98c2e3be-547c-4157-a7ec-a8a7d4431426&md5=26cbcae25e9980b0fbd6443d7c9f4661&v=1 HTTP/1.1 
Host: x.cnt.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         138.201.230.88
HTTP/1.1 301 Moved Permanently
Content-Type: text/plain; charset=utf-8
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:07 GMT
Content-Length: 126
Connection: keep-alive
Cache-Control: no-cache
Set-Cookie: xcntUt=x2112210f47de98115; Expires=Mon, 10 Jun 2019 13:34:07 GMT; Path=/; Domain=.cnt.my
Expires: 0
Location: /cmp/?p=TD&cookie=98c2e3be-547c-4157-a7ec-a8a7d4431426&md5=26cbcae25e9980b0fbd6443d7c9f4661&v=1&rand=0.9639735615661202&xtmp=1
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   126
Md5:    8de72df3ee56091bd90662126dddab95
Sha1:   5879b2ff528a8d8dda2193c46d871e8eaba5a3e2
Sha256: 0a07c7669595ac64060bed745883884a4d3f3cb80b6130305390a380948750ea
                                        
                                            GET /cmp/?p=TD&cookie=98c2e3be-547c-4157-a7ec-a8a7d4431426&md5=26cbcae25e9980b0fbd6443d7c9f4661&v=1&rand=0.9639735615661202&xtmp=1 HTTP/1.1 
Host: x.cnt.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: xcntUt=x2112210f47de98115

                                         
                                         138.201.230.88
HTTP/1.1 200 OK
Content-Type: image/gif; charset=utf-8
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:07 GMT
Content-Length: 35
Connection: keep-alive
Cache-Control: no-cache,max-age=0,must-revalidate, no-cache
Set-Cookie: xcntID=y2b6ccdfa5e6e0985c; Expires=Mon, 08 Jun 2020 13:34:07 GMT; Path=/; Domain=.cnt.my xcntUt=x2112210f47de98115; Expires=Sun, 09 Jun 2019 13:34:07 GMT; Path=/; Domain=.cnt.my
Expires: 0
Pragma: no-cache
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    df16d33739defe9bda1f4c45d36fd7a7
Sha1:   ff7489a6dd9ab0d9a4b084315f5b9d77cf9fdf50
Sha256: 90252ef0aa9e3d36c861bbeaa1bd57b7f855333edf2957ab9473838a52e2dd7f
                                        
                                            GET /image?source=google&google_gid=CAESEMguu_WTL4XIailbYuzHLDc&google_cver=1&ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiXX19 HTTP/1.1 
Host: 7d129763-a4c6-43c8-9e4f-0ded8e7aaa40.sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: session_tptc=1560087246360; user_id=7d129763-a4c6-43c8-9e4f-0ded8e7aaa40

                                         
                                         148.251.78.49
HTTP/1.1 302
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:07 GMT
Content-Length: 0
Connection: close
Location: https://sync.upravel.com/aidata/sync
Set-Cookie: user_id=7d129763-a4c6-43c8-9e4f-0ded8e7aaa40;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"


--- Additional Info ---
                                        
                                            GET /match?ovid=f581e6cb3239e905114c&id=8&vid=%2F15LOwZJ%2F9V1UNKoerhhCg HTTP/1.1 
Host: dm-us.hybrid.ai
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: vid=f581e6cb3239e905114c

                                         
                                         67.55.65.228
HTTP/1.1 204 No Content
                                        
Date: Sun, 09 Jun 2019 13:34:07 GMT
Connection: keep-alive
Cache-Control: no-cache, no-store
Pragma: no-cache
Expires: -1
P3P: CP='NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC'
X-Mode: 408
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Origin: *
Server: Hybrid Web Server


--- Additional Info ---
                                        
                                            GET /aidata/sync HTTP/1.1 
Host: sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: session_tptc=1560087246360; user_id=7d129763-a4c6-43c8-9e4f-0ded8e7aaa40

                                         
                                         148.251.129.43
HTTP/1.1 302
Content-Type: image/png
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:07 GMT
Content-Length: 0
Connection: close
Location: https://7d129763-a4c6-43c8-9e4f-0ded8e7aaa40.sync.upravel.com/aidata/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiXX19
Set-Cookie: user_id=7d129763-a4c6-43c8-9e4f-0ded8e7aaa40;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"


--- Additional Info ---
                                        
                                            GET /aidata/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiXX19 HTTP/1.1 
Host: 7d129763-a4c6-43c8-9e4f-0ded8e7aaa40.sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: session_tptc=1560087246360; user_id=7d129763-a4c6-43c8-9e4f-0ded8e7aaa40

                                         
                                         148.251.78.49
HTTP/1.1 302
Content-Type: image/png
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:07 GMT
Content-Length: 0
Connection: close
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: user_id=7d129763-a4c6-43c8-9e4f-0ded8e7aaa40;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
Location: https://x01.aidata.io/0.gif?pid=MGCOM&id=7d129763-a4c6-43c8-9e4f-0ded8e7aaa40&back=


--- Additional Info ---
                                        
                                            GET /0.gif?pid=MGCOM&id=7d129763-a4c6-43c8-9e4f-0ded8e7aaa40&back= HTTP/1.1 
Host: x01.aidata.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: __upin=/15LOwZJ/9V1UNKoerhhCg; __upints=1560087246

                                         
                                         144.76.85.254
HTTP/1.1 302 Found
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:07 GMT
Content-Length: 0
Connection: keep-alive
Location: https://cm.g.doubleclick.net/pixel?google_nid=aidata_ddp&back=SYNC&google_cm
Set-Cookie: gl=1;path=/;expires=Sun, 16 Jun 2019 13:34:07 GMT;max-age=604800 __upin=/15LOwZJ/9V1UNKoerhhCg;domain=.aidata.io;path=/;max-age=63072000 __upints=1560087246;domain=.aidata.io;path=/;max-age=63072000
Expires: Sun, 09 Jun 2019 13:34:06 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Sun, 09 Jun 2019 13:34:06 GMT
P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'


--- Additional Info ---
                                        
                                            GET /pixel?google_nid=aidata_ddp&back=SYNC&google_cm HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: IDE=AHWqTUkSLTO1EDGDQy6HHWw15HBNi2zDDZdxdNiZRXHWBgzqzCksyM4hFzkIHxkc

                                         
                                         172.217.22.162
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://x01.aidata.io/0.gif?pid=GOOGLE&back=SYNC&google_gid=CAESEP5FamviWVxRSXFQT3_rLPo&google_cver=1
Date: Sun, 09 Jun 2019 13:34:07 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 310
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  HTML document text
Size:   310
Md5:    45c4ecf826182d492ab418548607971e
Sha1:   13bf188dabe75cba4d8acc56a6600ed5b1aa8b4c
Sha256: 50b3e506e6b83164c9f8c78aab803a918c503a58d57550061cbf1e5ef9d6d2f2
                                        
                                            GET /0.gif?pid=GOOGLE&back=SYNC&google_gid=CAESEP5FamviWVxRSXFQT3_rLPo&google_cver=1 HTTP/1.1 
Host: x01.aidata.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: __upin=/15LOwZJ/9V1UNKoerhhCg; __upints=1560087246; gl=1

                                         
                                         144.76.85.254
HTTP/1.1 302 Found
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:07 GMT
Content-Length: 0
Connection: keep-alive
Location: https://ib.adnxs.com/getuid?//x01.aidata.io/0.gif%3Fpid%3DAPPNEXUS%26id%3D%24UID%26back=SYNC
Set-Cookie: anx=1;path=/;expires=Wed, 12 Jun 2019 13:34:07 GMT;max-age=259200 __upin=/15LOwZJ/9V1UNKoerhhCg;domain=.aidata.io;path=/;max-age=63072000 __upints=1560087246;domain=.aidata.io;path=/;max-age=63072000
Expires: Sun, 09 Jun 2019 13:34:06 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Sun, 09 Jun 2019 13:34:06 GMT
P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'


--- Additional Info ---
                                        
                                            GET /ping/?v=0.1.1&uid=f3eab47b-5eef-41c5-a421-fbf5bf5d4bb2&dp=10&tz=%2B02%3A00&nc=58042299&dT=2019-06-09T15%3A34%3A09.040 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html
Cookie: aid=w8nzSFz9Cs6FIgdNDAv8AmW5VLQRd9W5/qI8dR8Vw+CLIazl; test_cookie=CheckForPermission; cSyncDp7v2=1560087246; cSyncDp14v2=1560087246; cSyncDp17=1560087246; cSyncDp23=1560087246; cSyncDp24=1560087246; cSyncDp32=1560087246; cSyncDp35=1560087246; cSyncDp37=1560087246; cSyncDp45=1560087246; cSyncDp54v2=1560087246; cSyncDp62=1560087246; cSyncDp67v2=1560087246; cSyncDp68=1560087246; cSyncDp71=1560087246; cSyncDp74=1560087246; cSyncDp75=1560087246; cSyncDp77=1560087246; cSyncDp79=1560087246; cSyncDp84=1560087246; cSyncDp88=1560087246; cSyncDp92=1560087246; cSyncDp98=1560087246; cSyncDp101=1560087246; cSyncDp104=1560087246; cSyncDp111=1560087246; cSyncDp112=1560087246; _a_d3t6sf=dud7t02v_k_SVETb7US6i8q7

                                         
                                         195.201.243.72
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:09 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: keep-alive
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /ping/?v=0.1.1&uid=f3eab47b-5eef-41c5-a421-fbf5bf5d4bb2&dp=10&tz=%2B02%3A00&nc=35189736&dT=2019-06-09T15%3A34%3A29.043 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/games/soccer-for-nokia-6300.html
Cookie: aid=w8nzSFz9Cs6FIgdNDAv8AmW5VLQRd9W5/qI8dR8Vw+CLIazl; test_cookie=CheckForPermission; cSyncDp7v2=1560087246; cSyncDp14v2=1560087246; cSyncDp17=1560087246; cSyncDp23=1560087246; cSyncDp24=1560087246; cSyncDp32=1560087246; cSyncDp35=1560087246; cSyncDp37=1560087246; cSyncDp45=1560087246; cSyncDp54v2=1560087246; cSyncDp62=1560087246; cSyncDp67v2=1560087246; cSyncDp68=1560087246; cSyncDp71=1560087246; cSyncDp74=1560087246; cSyncDp75=1560087246; cSyncDp77=1560087246; cSyncDp79=1560087246; cSyncDp84=1560087246; cSyncDp88=1560087246; cSyncDp92=1560087246; cSyncDp98=1560087246; cSyncDp101=1560087246; cSyncDp104=1560087246; cSyncDp111=1560087246; cSyncDp112=1560087246; _a_d3t6sf=dud7t02v_k_SVETb7US6i8q7

                                         
                                         195.201.243.72
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:34:29 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: keep-alive
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda