Overview

URL nokia-6300.smartovik.ru/soft/mobile-forex.html
IP217.67.179.222
ASNAS29226 CJSC Mastertel
Location Russian Federation
Report completed2019-06-09 15:30:53 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-06-09 2 nokia-6300.smartovik.ru/soft/mobile-forex.html Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 217.67.179.222

Date UQ / IDS / BL URL IP
2019-06-09 15:34:38 +0200
0 - 0 - 1 nokia-6300.smartovik.ru/games/soccer-for-noki (...) 217.67.179.222
2019-06-07 12:04:10 +0200
0 - 0 - 1 nokia-n73.smartovik.ru/games/gladiator_n73.exe 217.67.179.222
2019-06-06 22:01:43 +0200
0 - 0 - 1 nokia-e65.smartovik.ru/soft/MobileAgent_13.exe 217.67.179.222
2019-06-06 07:44:45 +0200
0 - 0 - 1 nokia-n72.smartovik.ru/themes/Why_so_happy_ns (...) 217.67.179.222
2019-06-05 22:04:49 +0200
0 - 0 - 1 nokia-n73.smartovik.ru/soft/MobileAgent_13.exe 217.67.179.222
2019-06-05 17:36:29 +0200
0 - 0 - 1 nokia-n73.smartovik.ru/soft/Psiloc.irRemote.v (...) 217.67.179.222
2019-06-05 14:20:34 +0200
0 - 0 - 1 nokia-n73.smartovik.ru/soft/Psiloc.irRemote.v (...) 217.67.179.222
2019-06-05 08:12:38 +0200
0 - 0 - 1 nokia-n95.smartovik.ru/themes/vista_style.exe 217.67.179.222
2019-06-03 07:14:32 +0200
0 - 0 - 1 nokia-e65.smartovik.ru/themes/Abstract_Flames.exe 217.67.179.222
2019-06-03 05:23:42 +0200
0 - 0 - 1 nokia-6300.smartovik.ru/games/darknest-fear.exe 217.67.179.222

Last 10 reports on ASN: AS29226 CJSC Mastertel

Date UQ / IDS / BL URL IP
2019-06-30 00:49:38 +0200
0 - 0 - 0 blog.iyakushchenko.com 195.216.243.31
2019-06-26 20:02:40 +0200
0 - 0 - 0 uiptv.do.am 195.216.243.16
2019-06-21 09:40:54 +0200
0 - 0 - 0 https://u.to/SWOgFQ&companycode=saagklub 195.216.243.155
2019-06-18 19:16:19 +0200
0 - 7 - 0 https://u.to/GoupFQ?=citibankverification 195.216.243.155
2019-06-18 11:19:19 +0200
0 - 0 - 0 abisurekodo.com 195.216.243.218
2019-06-17 11:50:43 +0200
0 - 0 - 0 https://u.to/8JOgFQ&cid=67&cspid=7&rgid=1&hid (...) 195.216.243.155
2019-06-16 07:10:45 +0200
0 - 0 - 1 https://u.to/tjmQFQ 195.216.243.155
2019-06-12 05:49:17 +0200
0 - 0 - 1 https://u.to/he6gFQ 195.216.243.155
2019-06-10 19:55:26 +0200
0 - 0 - 1 wow-x.at.ua/news/2008-12-04-48/ 195.216.243.16
2019-06-10 17:13:20 +0200
0 - 0 - 1 https://u.to/scicFQ 195.216.243.155

No other reports on domain: smartovik.ru



JavaScript

Executed Scripts (21)


Executed Evals (0)


Executed Writes (3)

#1 JavaScript::Write (size: 5, repeated: 1) - SHA256: 454d2afd4b550c2fa634518d303c473a5ca5605ff9aec05eeef33b88fd4cbcd9

                                        <!--
                                    

#2 JavaScript::Write (size: 244, repeated: 1) - SHA256: 7cca3be8fee74160bac9f99060aa53529e0a56245cd1934527bbf0484048e2f2

                                        < a href = "http://top.mail.ru/jump?from=1606500"
target = "_top" > < img src = "http://d3.c8.b8.a1.top.mail.ru/counter?id=1606500;t=48;js=13;r=;j=true;s=1176*885;d=24;rand=0.02544725998821651"
alt = " 59B8=3@Mail.ru"
border = "0"
height = "31"
width = "88" > < /a>
                                    

#3 JavaScript::Write (size: 329, repeated: 1) - SHA256: e4dcb820167da855768fc3e9728ce2045755d8c50cee67dcea04333d565255fa

                                        < a href = 'http://www.liveinternet.ru/click'
target = _blank > < img src = 'http://counter.yadro.ru/hit?t16.5;r;s1176*885*24;uhttp%3A//nokia-6300.smartovik.ru/soft/mobile-forex.html;0.18770833308742096'
alt = ''
title = 'LiveInternet: ?>:070=> G8A;> ?@>A<>B@>2 70 24 G0A0, ?>A5B8B5;59 70 24 G0A0 8 70 A53>4=O'
border = 0 width = 88 height = 31 > < /a>
                                    


HTTP Transactions (108)


Request Response
                                        
                                            GET /soft/mobile-forex.html HTTP/1.1 
Host: nokia-6300.smartovik.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         217.67.179.222
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:27:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.35-0+deb7u2
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3364
Md5:    822aff67dc91efdc85ca6b92cd6afbfa
Sha1:   8f475f731195f2394a09e69d073c07ef259cc87c
Sha256: 067aa1880efc5266f4b81e91a4bbce04230021b55513272209457758c9f033e0

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /style.css HTTP/1.1 
Host: nokia-6300.smartovik.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html

                                         
                                         217.67.179.222
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:27:26 GMT
Content-Length: 1542
Last-Modified: Fri, 26 Sep 2008 09:22:22 GMT
Connection: keep-alive
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1542
Md5:    9f50ae9f76a4d31c109715c303739add
Sha1:   7b9d0074862972b7db116a21758e8eade781ff14
Sha256: a84f81f19f75c90a4aec3f869932e52a43d04d2179136299ce0b8667673bc1ae
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: nokia-6300.smartovik.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         217.67.179.222
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:27:26 GMT
Content-Length: 894
Last-Modified: Fri, 26 Sep 2008 07:39:16 GMT
Connection: keep-alive
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   894
Md5:    3e0ceea0e9e5f9551b2af647be39a1e3
Sha1:   c6682290027a4c6036e6f0254b56c55d3a48ea7e
Sha256: 8d981c5b5af0614af2ca96ea93cd80c4592ea165d67d537439f5372fb3573b3c
                                        
                                            GET /pagead/show_ads.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html

                                         
                                         172.217.21.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Sun, 09 Jun 2019 13:30:21 GMT
Expires: Sun, 09 Jun 2019 13:30:21 GMT
Cache-Control: private, max-age=3600
Etag: 8501437006787512160
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 24082
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   24082
Md5:    aa09aca9934f7d5eeef5486a7ccd9805
Sha1:   f988bbf44c1a87885ff5b703d1802ccf83122d42
Sha256: 0e94787bf04c7865712c886c5159c60899216097159c697ae5eb9823decb5476
                                        
                                            GET /images/mobileforex-2.jpg HTTP/1.1 
Host: nokia-6300.smartovik.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html

                                         
                                         217.67.179.222
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:27:26 GMT
Content-Length: 17909
Last-Modified: Sat, 06 Jun 2009 16:59:20 GMT
Connection: keep-alive
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   17909
Md5:    428837ebe47dfbbae2409a298a5a5dbf
Sha1:   8c5876205ae3e461c6d2e5c941ef6c9025039572
Sha256: 1ae74d52048ac376c6b8f2b45f8a4e7d9338f76460d04d63d7c77f14bc548f60
                                        
                                            GET /images/mobileforex-1.jpg HTTP/1.1 
Host: nokia-6300.smartovik.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html

                                         
                                         217.67.179.222
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:27:26 GMT
Content-Length: 17296
Last-Modified: Sat, 06 Jun 2009 16:59:20 GMT
Connection: keep-alive
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   17296
Md5:    d88d4a4d06439d3acd255c7694a6230e
Sha1:   83834a4e926f1362788bc55a6fbc9751e9b6f5ec
Sha256: e6588472f09bc78d1928ba7971553fb8a67802c3f1beca37ddcff47f524377e2
                                        
                                            GET /top100.jcn?1801860 HTTP/1.1 
Host: counter.rambler.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html

                                         
                                         81.19.88.108
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.4.4
Date: Sun, 09 Jun 2019 13:30:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   59829
Md5:    6765deee71233da32439399ebfdc18ed
Sha1:   f025d8a5ee9e5bc575277f60cf8159ef0015ac2e
Sha256: 88a805b8884c752f7a0e7ff3121151ec07a27cad518ef4eabb60d902a28924c0
                                        
                                            GET /top100/banner-88x31-rambler-black2.gif HTTP/1.1 
Host: top100-images.rambler.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html

                                         
                                         81.19.89.1
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:21 GMT
Content-Length: 931
Connection: keep-alive
Keep-Alive: timeout=40
Last-Modified: Tue, 26 Jun 2018 16:03:58 GMT
Etag: "5b3263ee-3a3"
Expires: Sat, 07 Sep 2019 13:30:21 GMT
Cache-Control: max-age=7776000
Set-Cookie: ruid=HQAAAO0J/Vxyc80MAQ8BBgB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
P3P: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 88 x 31
Size:   931
Md5:    9c0469e2e6906ab044535a8600f31a9e
Sha1:   723de368e40f81615c6fe29ebb69e08e722348f7
Sha256: 4e43c13024b70329bba9a3dbeca20618937588e5c94fade3746dc4f45fa3c1b5
                                        
                                            GET /img/header.jpg HTTP/1.1 
Host: nokia-6300.smartovik.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html

                                         
                                         217.67.179.222
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:27:26 GMT
Content-Length: 31230
Last-Modified: Mon, 29 Sep 2008 05:42:54 GMT
Connection: keep-alive
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   31230
Md5:    2c9627aa86ee263bce13683b56eb99c0
Sha1:   919393304d17071a1f767389f541eac5776627b4
Sha256: 042e71396ad0b7eba04b4a54bec728c85ca929e888f780534a3fed4b248cd9d5
                                        
                                            GET /pagead/js/r20190603/r20190131/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html

                                         
                                         172.217.21.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Sun, 09 Jun 2019 13:30:21 GMT
Expires: Sun, 09 Jun 2019 13:30:21 GMT
Cache-Control: private, max-age=1209600
Etag: 5654598310469848141
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 79498
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   79498
Md5:    ab0ff6825c8bbc23d60201aa48310643
Sha1:   5be65398425fbb4bba19e11b488d5be804c2fe5e
Sha256: 94483dbcf970e3d995dd502f55583b92a454258b5774a8ae814e5dee8eb63cad
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:30:21 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    3070066aa381805fee839ce346174048
Sha1:   1d2befd9f9dc96fbbda4343bc0bc7d2117e6946b
Sha256: cf8e86bf5f34b4a75a9d18639fe673eb9b7cfd5621d4d198cbb4f12979d96f0d
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:30:21 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    5be872b3fe0bb6f31385f91f811e9586
Sha1:   1192231bcb9ee73e9f619d433cdb66dddd9ae7f7
Sha256: db0ad6191770bff9043482b68acf62a4e25d4390a03274cfbe413675dd8c9cf5
                                        
                                            GET /pub-config/r20160913/ca-pub-9014511413944156.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html

                                         
                                         172.217.21.162
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 118
Date: Sun, 09 Jun 2019 13:30:22 GMT
Expires: Mon, 10 Jun 2019 01:30:22 GMT
Cache-Control: public, max-age=43200
Last-Modified: Sat, 08 Jun 2019 19:01:32 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   118
Md5:    6f5e216d6b559d8c625c16d9cf3aea0d
Sha1:   67c7c642c603aee5bd2bac15ebfb279807a8a74e
Sha256: 84a4c2774af94b013729bc5934fbf0fa87d5f4e2b001bd1cd0a7bce5ba41d7eb
                                        
                                            GET /aci.js HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html

                                         
                                         195.201.243.71
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:22 GMT
Content-Length: 5815
Last-Modified: Wed, 26 Dec 2018 10:22:37 GMT
Connection: keep-alive
Etag: "5c23566d-16b7"
Content-Encoding: gzip
Expires: Mon, 10 Jun 2019 01:30:22 GMT
Cache-Control: max-age=43200


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max compression
Size:   5815
Md5:    c03764b7dbf6f8c48af2d846ed9788ab
Sha1:   2307ef666a55709a7620b5809736a841da6e6ce7
Sha256: ac785a93d942f4d56d4e88de95cd5476a017540a207d2e9116c0e3743bf92433
                                        
                                            GET /img/footer.jpg HTTP/1.1 
Host: nokia-6300.smartovik.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html

                                         
                                         217.67.179.222
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:27:27 GMT
Content-Length: 17611
Last-Modified: Mon, 29 Sep 2008 05:49:30 GMT
Connection: keep-alive
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   17611
Md5:    3e54c872c5ff7df56036f04b3c16a208
Sha1:   a86c0027fd438699649875e65a04fa2cd2f0045a
Sha256: a3b9a36a270c3929a6a84eecc3839586b47b1a3f6dbfc7aee9213393907a8157
                                        
                                            GET /hit/?v=0.1.1&uid=b3eee3da-e1a4-41df-9f5f-20edfa9373da&dp=10&tz=%2B02%3A00&nc=07171262&u=http%3A%2F%2Fnokia-6300.smartovik.ru%2Fsoft%2Fmobile-forex.html&r=&rs=1176x885&t=%D0%91%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D1%8B%D0%B5%20%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D1%8B%20%D0%BD%D0%B0%20nokia%206300&oE=1&oP=1&dT=2019-06-09T15%3A30%3A22.841 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html

                                         
                                         195.201.243.71
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:22 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: keep-alive
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: aid=w8nzR1z9Ce5wRwduFmObAluajxhcnWDr0oYpAQV0QTm9gx3q; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /mc/?dp=10 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html

                                         
                                         195.201.243.71
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:22 GMT
Content-Length: 154
Connection: keep-alive
Set-Cookie: test_cookie=CheckForPermission; path=/; domain=.acint.net; expires=Sun, 09-Jun-19 13:40:22 GMT aid=w8nzR1z9Ce5vRgdsC8PMAk2wo0IqglpDFEiOMkGworBspWa2; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/
Location: /mc/?dp=10&tc=1


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            GET /mc/?dp=10&tc=1 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html
Cookie: aid=w8nzR1z9Ce5vRgdsC8PMAk2wo0IqglpDFEiOMkGworBspWa2; test_cookie=CheckForPermission

                                         
                                         195.201.243.71
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: cSyncDp7v2=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp14v2=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp17=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp23=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp24=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp32=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp35=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp37=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp45=1560087022; expires=Thu, 13-Jun-19 07:30:22 GMT; path=/; domain=.acint.net cSyncDp54v2=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp62=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp67v2=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp68=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp71=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp74=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp75=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp77=1560087022; expires=Thu, 27-Jun-19 01:30:22 GMT; path=/; domain=.acint.net cSyncDp79=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp84=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp88=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp92=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp98=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp101=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp104=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp111=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net cSyncDp112=1560087022; expires=Tue, 09-Jul-19 13:30:22 GMT; path=/; domain=.acint.net
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1270
Md5:    fca6f6198971127f557b9aca3c022788
Sha1:   61bec882982fb8b217765493b4f132e3e543e9bb
Sha256: e7a2a4d514ac987c2cf1e1c83fa165d06b226eed236a15e3e1f0fd8a11f7fefe
                                        
                                            GET /hit?t16.5;r;s1176*885*24;uhttp%3A//nokia-6300.smartovik.ru/soft/mobile-forex.html;0.18770833308742096 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html

                                         
                                         88.212.201.205
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Date: Sun, 09 Jun 2019 13:30:22 GMT
Server: 0W/0.8c
Location: http://counter.yadro.ru/hit?q;t16.5;r;s1176*885*24;uhttp%3A//nokia-6300.smartovik.ru/soft/mobile-forex.html;0.18770833308742096
Content-Length: 32
Expires: Fri, 08 Jun 2018 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: FTID=1S_Gdk34vRvp1S_Gdk00KDwY; path=/; expires=Sun, 07 Jun 2020 21:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  HTML document text
Size:   32
Md5:    3e9c09a8c5a87f266e047a596f48578c
Sha1:   07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
Sha256: 57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
                                        
                                            GET /cnt/?et=pv&pid=1801860&rid=1560087022.884-1072037357&v=1.6.0i&rn=2100224691&bs=1159x754&ce=1&rf&en=windows-1251&pt=%D0%91%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D1%8B%D0%B5%20%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D1%8B%20%D0%BD%D0%B0%20nokia%206300&sr=1176x885&cd=24-bit&la=en-US&ja=1&acn=Mozilla&an=Netscape&pl=Win32&tz=-120&fv=10.0%20r45&sv&lv&le=1&url=http%3A%2F%2Fnokia-6300.smartovik.ru%2Fsoft%2Fmobile-forex.html HTTP/1.1 
Host: kraken.rambler.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html
Cookie: ruid=HQAAAO0J/Vxyc80MAQ8BBgB=

                                         
                                         81.19.89.8
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.15.8
Date: Sun, 09 Jun 2019 13:30:22 GMT
Content-Length: 595
Last-Modified: Tue, 11 Oct 2016 09:15:18 GMT
Connection: keep-alive
Etag: "57fcada6-253"
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 87a, 88 x 31
Size:   595
Md5:    bc3b86b4098983e3e0bbe654222d2619
Sha1:   1f294ca6cb990a20deacc236075515510648ae5e
Sha256: 9955e76a0aa0414abf703f10e87d93722c71f3fa57c82eb7531c9473d9ef72fc
                                        
                                            GET /counter?id=1606500;t=48;js=13;r=;j=true;s=1176*885;d=24;rand=0.02544725998821651 HTTP/1.1 
Host: d3.c8.b8.a1.top.mail.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html

                                         
                                         217.69.133.145
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:22 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=60
Set-Cookie: FTID=1DA85x3-yVnp:1560087022:1606500:::; path=/; expires=Sat, 11-Jun-22 13:30:22 GMT; domain=.mail.ru; HttpOnly
Location: http://top-fwz1.mail.ru/counter?id=1606500;t=48;js=13;r=;j=true;s=1176*885;d=24;rand=0.02544725998821651
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
AMP-Access-Control-Allow-Source-Origin: *
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store, max-age=0
Pragma: no-cache


--- Additional Info ---
                                        
                                            GET /match?sysid=sa&uid=47F3C9C3EE09FD5C6C07466F02CCC30B HTTP/1.1 
Host: cs.digadex.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         95.216.2.91
HTTP/1.1 200 OK
Content-Type: text/plain
                                        
Server: nginx/1.14.2
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 2
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    e0aa021e21dddbd6d8cecec71e9cf564
Sha1:   9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
Sha256: 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
                                        
                                            GET /match?bidder_id=73&external_user_id=47F3C9C3EE09FD5C6C07466F02CCC30B HTTP/1.1 
Host: ads.betweendigital.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         88.212.252.22
HTTP/1.1 302 Found
                                        
Location: /match?bidder_id=73&external_user_id=47F3C9C3EE09FD5C6C07466F02CCC30B&crf=1
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Set-Cookie: dc=mow1; Max-Age=315360000; Expires=Wed, 06 Jun 2029 13:30:23 GMT; Path=/; Domain=.betweendigital.com tuuid=ca2a9774-c833-44a1-b732-8d6ac7915950; Max-Age=315360000; Expires=Wed, 06 Jun 2029 13:30:23 GMT; Path=/; Domain=.betweendigital.com ut=XP0J7wAAZZCWWkk8_wtetKhxXOUM6bcBy9Nh0A==; Max-Age=315360000; Expires=Wed, 06 Jun 2029 13:30:23 GMT; Path=/; Domain=.betweendigital.com
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /pixel?google_nid=agentstvo_sape_limited&google_hm=R_PJw-4J_VxsB0ZvAszDCw HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         172.217.21.130
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: http://cm.g.doubleclick.net/pixel?google_nid=agentstvo_sape_limited&google_hm=R_PJw-4J_VxsB0ZvAszDCw&google_tc=
Date: Sun, 09 Jun 2019 13:30:23 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 316
X-XSS-Protection: 0
Set-Cookie: test_cookie=CheckForPermission; expires=Sun, 09-Jun-2019 13:45:23 GMT; path=/; domain=.doubleclick.net


--- Additional Info ---
Magic:  HTML document text
Size:   316
Md5:    a3d92a250b612dac44da822f17231c4c
Sha1:   96f4d548c0fc3c200f88bd933e259e19fbe380ab
Sha256: 25ee4d768b6cd78bc40d323236e946a6412c6b7f6c2fc04b293ca0426989d0cc
                                        
                                            GET /hit?q;t16.5;r;s1176*885*24;uhttp%3A//nokia-6300.smartovik.ru/soft/mobile-forex.html;0.18770833308742096 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html
Cookie: FTID=1S_Gdk34vRvp1S_Gdk00KDwY

                                         
                                         88.212.201.205
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sun, 09 Jun 2019 13:30:23 GMT
Server: 0W/0.8c
Connection: Close
Content-Length: 209
Expires: Fri, 08 Jun 2018 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: VID=1vWgQQ0cocPp1S_Gdl00KDwc; path=/; expires=Sun, 07 Jun 2020 21:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  GIF image data, version 89a, 88 x 31
Size:   209
Md5:    b978c13c5c1c9669e6a0af09e080826e
Sha1:   d2f32b64b7ad61c282314d921f23bf589f832f54
Sha256: 162ff41db6933644e9223b77fc2acc20e19478f35af06865370f639fcf259bb2
                                        
                                            GET /images/1px-matching-rtbsape.gif?id=47F3C9C3EE09FD5C6C07466F02CCC30B HTTP/1.1 
Host: t.trafmag.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         193.200.65.5
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="NON DSP COR CURa TIA"


--- Additional Info ---
                                        
                                            GET /match?dsp=sape HTTP/1.1 
Host: sync.republer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         194.190.117.33
HTTP/1.1 307 Temporary Redirect
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: close
P3P: policyref="/w3c/p3p.xml", CP="NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA"
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
X-Host: rssp3
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Set-Cookie: ruid=dac5b24f-787a-49bc-8633-025f010aefd2; Max-Age=31536000; Expires=Mon, 08 Jun 2020 13:30:23 GMT; Path=/; Domain=.republer.com; HTTPOnly
Location: /match?dsp=sape&qset=1


--- Additional Info ---
                                        
                                            GET /sync2.204?pid=152&anket_id=47F3C9C3EE09FD5C6C07466F02CCC30B HTTP/1.1 
Host: profile.ssp.rambler.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: ruid=HQAAAO0J/Vxyc80MAQ8BBgB=

                                         
                                         91.192.148.30
HTTP/1.1 204 Http No Content
Content-Type: application/x-javascript; charset=Windows-1251
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: ruid=HQAAAO0J/Vxyc80MAQ8BBgB=; domain=.rambler.ru; path=/; expires=Fri, 6 Dec 2019 13:30:23 GMT embryo=; domain=.rambler.ru; path=/; expires=Sun, 9 Jun 2019 12:30:23 GMT uuts=4vrJyI2TUjZ8IpXlR1jAvpMet8IKfyXw; domain=.rambler.ru; path=/; expires=Fri, 6 Dec 2019 13:30:23 GMT
X-Passed: 2bal2
Strict-Transport-Security: max-age=0
P3P: policyref="/w3c/p3p.xml", CP="NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI COM NAV INT DEM STA"


--- Additional Info ---
                                        
                                            GET /match/sape?id=47F3C9C3EE09FD5C6C07466F02CCC30B HTTP/1.1 
Host: sync.dmp.otm-r.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         195.201.194.138
HTTP/1.1 204 No Content
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /sync?dspId=1116&uid=47F3C9C3EE09FD5C6C07466F02CCC30B HTTP/1.1 
Host: matching.adtags.pro
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         142.93.230.191
HTTP/1.1 200 OK
                                        
Server: nginx/1.14.0 (Ubuntu)
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: at_dsp_uid_1116=47F3C9C3EE09FD5C6C07466F02CCC30B; max-age=86400; domain=.adtags.pro
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
                                        
                                            GET /sync/pixel?source=sape&uid=47F3C9C3EE09FD5C6C07466F02CCC30B HTTP/1.1 
Host: eu.track.digitaladsystems.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         94.130.38.41
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 35
Connection: keep-alive
Keep-Alive: timeout=20
Set-Cookie: uid=4734b34f-bb0b-459c-98cc-6a3bb0211452; Max-Age=63072000; Expires=Tue, 08 Jun 2021 13:30:23 GMT; Path=/; Domain=.digitaladsystems.com


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /cgi-bin/sync.cgi?ssp_id=43&external_id=47F3C9C3EE09FD5C6C07466F02CCC30B HTTP/1.1 
Host: ssp.adriver.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         195.209.111.16
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /match?bidder_id=73&external_user_id=47F3C9C3EE09FD5C6C07466F02CCC30B&crf=1 HTTP/1.1 
Host: ads.betweendigital.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: dc=mow1; tuuid=ca2a9774-c833-44a1-b732-8d6ac7915950; ut=XP0J7wAAZZCWWkk8_wtetKhxXOUM6bcBy9Nh0A==

                                         
                                         88.212.252.22
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 68


--- Additional Info ---
Magic:  PNG image, 1 x 1, 8-bit/color RGBA, non-interlaced
Size:   68
Md5:    c4a2b870062c2bb98c500bc1526c0498
Sha1:   528666ccdb12997358077bc8fcdbfb6b825c7788
Sha256: 2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
                                        
                                            GET /merge_gpsid/?sid=50&id=47F3C9C3EE09FD5C6C07466F02CCC30B HTTP/1.1 
Host: stat.adlabs.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         109.248.237.37
HTTP/1.1 302
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: keep-alive
Location: //adlmerge.com/merge_gpsid/?sid=50&id=47F3C9C3EE09FD5C6C07466F02CCC30B


--- Additional Info ---
                                        
                                            GET /pixel?google_nid=agentstvo_sape_limited&google_hm=R_PJw-4J_VxsB0ZvAszDCw&google_tc= HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: test_cookie=CheckForPermission

                                         
                                         172.217.21.130
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: http://www.acint.net/match?dp=77&euid=
Date: Sun, 09 Jun 2019 13:30:23 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 239
X-XSS-Protection: 0
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUmwMyMxQ9tXor0ylcflS2r-rnovZR7zwBVe3xTinsko0WLnOZB0irKwJtlP; expires=Tue, 08-Jun-2021 13:30:23 GMT; path=/; domain=.doubleclick.net; HttpOnly


--- Additional Info ---
Magic:  HTML document text
Size:   239
Md5:    c5d2543d3421b4a36de8334db977b7a8
Sha1:   02785aa1de17eff07b1cb0a1a00dc197c0cea015
Sha256: e70e3fb03ff79a2bfa1dd9f32a4bc435dede861c5999fc384839df1e6c3e8bee
                                        
                                            GET /sape-sync?uid=47F3C9C3EE09FD5C6C07466F02CCC30B HTTP/1.1 
Host: adx.com.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         176.9.238.190
HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
                                        
Server: nginx/1.14.2
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 19
Connection: keep-alive
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text
Size:   19
Md5:    595e88012a6521aae3e12cbebe76eb9e
Sha1:   da3968197e7bf67aa45a77515b52ba2710c5fc34
Sha256: b16e15764b8bc06c5c3f9f19bc8b99fa48e7894aa5a6ccdad65da49bbf564793
                                        
                                            GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=47F3C9C3EE09FD5C6C07466F02CCC30B HTTP/1.1 
Host: sync.1dmp.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         136.243.148.229
HTTP/1.1 302 Found
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: keep-alive
Expires: 0
Cache-Control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
Set-Cookie: uid=bbcaefe0-8aba-11e9-9402-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Wed, 06 Jun 2029 13:30:23 GMT
Location: /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=47F3C9C3EE09FD5C6C07466F02CCC30B&cs=1


--- Additional Info ---
                                        
                                            GET /match?id=106&vid=47F3C9C3EE09FD5C6C07466F02CCC30B HTTP/1.1 
Host: dm.hybrid.ai
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         37.18.16.16
HTTP/1.1 302 Found
                                        
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store
Pragma: no-cache
Expires: -1
Location: https://cm.g.doubleclick.net/pixel?google_nid=hybrid&google_cm&google_sc
Set-Cookie: vid=3ee12b3e314d3455604b; expires=Fri, 09 Jun 2079 13:30:23 GMT; domain=.hybrid.ai; path=/
P3P: CP='NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC'
X-Mode: 116
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Origin: *
Server: Hybrid Web Server


--- Additional Info ---
                                        
                                            GET /cookie/accepter?source=sape&id=47F3C9C3EE09FD5C6C07466F02CCC30B HTTP/1.1 
Host: sync.datamind.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         78.46.94.184
HTTP/1.1 302
Content-Type: image/png
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: close
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Location: http://sync.datamind.ru/cookie/accepter?source=sape&id=47F3C9C3EE09FD5C6C07466F02CCC30B&dmp.ctest=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiXX19
Set-Cookie: dmp.ctest_id=1560087023073;Version=1;Comment=;Domain=.datamind.ru;Path=/;Max-Age=10800;Expires=Sun, 9 Jun 2019 16:30:23 GMT


--- Additional Info ---
                                        
                                            GET /cm.gif?p=48&id=47F3C9C3EE09FD5C6C07466F02CCC30B HTTP/1.1 
Host: ad.mail.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         94.100.180.197
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 43
Connection: keep-alive
Set-Cookie: VID=1iOn1_3_nCnp00000J0c94Hp:::0-0-0; path=/; expires=Sat, 11-Jun-22 13:30:23 GMT; domain=.mail.ru; HttpOnly
Expires: Sun, 09 Jun 2019 19:30:23 GMT
Cache-Control: max-age=21600
Last-Modified: Sun, 09 Jun 2019 13:30:23 GMT
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /sync HTTP/1.1 
Host: sape-sync.rutarget.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         138.201.8.33
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx/1.14.0
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: close
Location: http://www.acint.net/match?dp=104&euid=wzRVwK_kOM-c
P3P: CP="This is not a P3P policy. Please visit http://rutarget.ru/p3p/ to get more information."
Set-Cookie: userId=wzRVwK_kOM-c; Path=/; Domain=.rutarget.ru; Expires=Fri, 06 Dec 2019 13:30:23 GMT


--- Additional Info ---
                                        
                                            GET /match?dsp=sape&qset=1 HTTP/1.1 
Host: sync.republer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: ruid=dac5b24f-787a-49bc-8633-025f010aefd2

                                         
                                         194.190.117.33
HTTP/1.1 307 Temporary Redirect
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: close
P3P: policyref="/w3c/p3p.xml", CP="NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA"
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
X-Host: rssp2
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: http://px.adhigh.net/p/cm/rpblr
Set-Cookie: ruid=dac5b24f-787a-49bc-8633-025f010aefd2; Max-Age=31536000; Expires=Mon, 08 Jun 2020 13:30:23 GMT; Path=/; Domain=.republer.com; HTTPOnly


--- Additional Info ---
                                        
                                            GET /adcm.js HTTP/1.1 
Host: tag.digitaltarget.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         185.15.175.134
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 2940
Last-Modified: Thu, 06 Jun 2019 15:49:47 GMT
Connection: keep-alive
Etag: "5cf9361b-b7c"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   2940
Md5:    bc5a99284126138487b03fb86237de6f
Sha1:   c7bc0bc90f9a608bafac3f557552ba9bf46e1429
Sha256: 1af87ee482c6597882f9d9ed2e726626eb67e2c26996fe05e26e2c146e8556b4
                                        
                                            GET /counter?id=1606500;t=48;js=13;r=;j=true;s=1176*885;d=24;rand=0.02544725998821651 HTTP/1.1 
Host: top-fwz1.mail.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html
Cookie: FTID=1DA85x3-yVnp:1560087022:1606500:::

                                         
                                         217.69.136.176
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 617
Connection: keep-alive
Keep-Alive: timeout=60
Set-Cookie: VID=3pL3670CFBXp00000I0a94Hp:::0-0-0; path=/; expires=Sat, 11-Jun-22 13:30:23 GMT; domain=.mail.ru; HttpOnly FTID=0; path=/; expires=Thu, 01-Jan-70 00:00:00 GMT; domain=.mail.ru; HttpOnly
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
AMP-Access-Control-Allow-Source-Origin: *
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store, max-age=0
Pragma: no-cache


--- Additional Info ---
Magic:  GIF image data, version 87a, 88 x 31
Size:   617
Md5:    b610dbef3aa2393ba649726eccf47918
Sha1:   5ba2672a69562d6b2981a549396466664bcfe134
Sha256: 31bc5ef5359e3247f4db67f848662aa3b558b8365edfd77dfb89960f70ff223f
                                        
                                            GET /matchspm?pi=1000005&pui=47F3C9C3EE09FD5C6C07466F02CCC30B HTTP/1.1 
Host: ut.rktch.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         194.87.190.115
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.15.12
Date: Sun, 09 Jun 2019 13:30:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: b_uid=66055386b735f94e9b1f2d5cbf26f3268f89; Max-Age=2592000; Expires=Tue, 9 Jul 2019 13:30:23 GMT; Domain=rktch.com
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  data
Size:   84
Md5:    c8f3e9f1c69e39152024d27441a58c9c
Sha1:   228036167113e9821ad88a110d011f3b9e0f3205
Sha256: 370dbc0a7e85181d81ecf29999a4782fc0fde9621e538b4d17887e2d1af1522d
                                        
                                            GET /image?source=sape&id=47F3C9C3EE09FD5C6C07466F02CCC30B HTTP/1.1 
Host: sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         148.251.236.115
HTTP/1.1 302
Content-Type: image/png
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: close
Location: http://sync.upravel.com/image?source=sape&id=47F3C9C3EE09FD5C6C07466F02CCC30B&session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiXX19
Set-Cookie: session_tptc=1560087023096;Version=1;Comment=;Domain=.upravel.com;Path=/;Max-Age=180
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"


--- Additional Info ---
                                        
                                            GET /partners/sprcs?uid=47F3C9C3EE09FD5C6C07466F02CCC30B HTTP/1.1 
Host: relap.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         185.99.9.116
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 178
Connection: keep-alive
Location: https://relap.io/partners/sprcs?uid=47F3C9C3EE09FD5C6C07466F02CCC30B


--- Additional Info ---
Magic:  HTML document text
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
                                        
                                            GET /p/cm/sape?u=47F3C9C3EE09FD5C6C07466F02CCC30B HTTP/1.1 
Host: px.adhigh.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         136.243.75.7
HTTP/1.1 302 Found
                                        
Server: nginx/1.14.2
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: keep-alive
X-Backend-id: f3-de
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Set-Cookie: gi_u=PzWoEVdVTOX.AikABlFrPG7OHQ==;Path=/;Domain=.adhigh.net;Expires=Mon, 08-Jun-2020 13:30:23 GMT;Max-Age=31536000
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Pragma: no-cache
Cache-Control: no-cache, no-store
Location: http://px.adhigh.net/p/cm/sape?u=47F3C9C3EE09FD5C6C07466F02CCC30B&bounced=1


--- Additional Info ---
                                        
                                            GET /userbind?src=sape&pbf=1&id=47F3C9C3EE09FD5C6C07466F02CCC30B HTTP/1.1 
Host: ssp1.rtb.beeline.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         217.118.87.139
HTTP/1.1 302 Found
                                        
Server: nginx/1.10.2
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: keep-alive
Location: http://www.acint.net/match?dp=111&euid=


--- Additional Info ---
                                        
                                            GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=47F3C9C3EE09FD5C6C07466F02CCC30B&cs=1 HTTP/1.1 
Host: sync.1dmp.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: uid=bbcaefe0-8aba-11e9-9402-901b0e8b2a6e

                                         
                                         136.243.148.229
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 35
Connection: keep-alive
Expires: 0
Cache-Control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /rmatch/?r=%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D HTTP/1.1 
Host: ssp-rtb.sape.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         193.232.121.241
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 154
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Location: //acint.net/match?dp=14&euid=72F3C9C3EF09FD5C120093300271FA06
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=w8nzclz9Ce8wkwASBvpxApAe6b6Ko6ZD7n1pDBsbnZO/QZar; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            GET /match?dp=77&euid= HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: aid=w8nzR1z9Ce5vRgdsC8PMAk2wo0IqglpDFEiOMkGworBspWa2; test_cookie=CheckForPermission; cSyncDp7v2=1560087022; cSyncDp14v2=1560087022; cSyncDp17=1560087022; cSyncDp23=1560087022; cSyncDp24=1560087022; cSyncDp32=1560087022; cSyncDp35=1560087022; cSyncDp37=1560087022; cSyncDp45=1560087022; cSyncDp54v2=1560087022; cSyncDp62=1560087022; cSyncDp67v2=1560087022; cSyncDp68=1560087022; cSyncDp71=1560087022; cSyncDp74=1560087022; cSyncDp75=1560087022; cSyncDp77=1560087022; cSyncDp79=1560087022; cSyncDp84=1560087022; cSyncDp88=1560087022; cSyncDp92=1560087022; cSyncDp98=1560087022; cSyncDp101=1560087022; cSyncDp104=1560087022; cSyncDp111=1560087022; cSyncDp112=1560087022

                                         
                                         195.201.243.71
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: close
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /pixel?google_nid=hybrid&google_cm&google_sc HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: IDE=AHWqTUmwMyMxQ9tXor0ylcflS2r-rnovZR7zwBVe3xTinsko0WLnOZB0irKwJtlP

                                         
                                         172.217.21.130
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://dm.hybrid.ai/google-match?google_gid=CAESEO5T-x87ylf4sB_W2Btoflw&google_cver=1
Date: Sun, 09 Jun 2019 13:30:23 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 287
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  HTML document text
Size:   287
Md5:    fa04f758f1c2c7bc6aeb639d863aedb7
Sha1:   75732f2507bcac973835fb73043f7992d0b5182d
Sha256: dc68e50bf42a8582d91b3895a95c76d24e3ea54fbfba70914c8332e8790e6118
                                        
                                            GET /p/cm/rpblr HTTP/1.1 
Host: px.adhigh.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         136.243.75.7
HTTP/1.1 302 Found
                                        
Server: nginx/1.14.2
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: keep-alive
X-Backend-id: f3-de
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Set-Cookie: gi_u=PzWoEVdVTOX.AikABlFrPG7OSQ==;Path=/;Domain=.adhigh.net;Expires=Mon, 08-Jun-2020 13:30:23 GMT;Max-Age=31536000
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Pragma: no-cache
Cache-Control: no-cache, no-store
Location: http://px.adhigh.net/p/cm/rpblr?bounced=1


--- Additional Info ---
                                        
                                            GET /match?dp=104&euid=wzRVwK_kOM-c HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: aid=w8nzR1z9Ce5vRgdsC8PMAk2wo0IqglpDFEiOMkGworBspWa2; test_cookie=CheckForPermission; cSyncDp7v2=1560087022; cSyncDp14v2=1560087022; cSyncDp17=1560087022; cSyncDp23=1560087022; cSyncDp24=1560087022; cSyncDp32=1560087022; cSyncDp35=1560087022; cSyncDp37=1560087022; cSyncDp45=1560087022; cSyncDp54v2=1560087022; cSyncDp62=1560087022; cSyncDp67v2=1560087022; cSyncDp68=1560087022; cSyncDp71=1560087022; cSyncDp74=1560087022; cSyncDp75=1560087022; cSyncDp77=1560087022; cSyncDp79=1560087022; cSyncDp84=1560087022; cSyncDp88=1560087022; cSyncDp92=1560087022; cSyncDp98=1560087022; cSyncDp101=1560087022; cSyncDp104=1560087022; cSyncDp111=1560087022; cSyncDp112=1560087022

                                         
                                         195.201.243.71
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: close
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /cookie/accepter?source=sape&id=47F3C9C3EE09FD5C6C07466F02CCC30B&dmp.ctest=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiXX19 HTTP/1.1 
Host: sync.datamind.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: dmp.ctest_id=1560087023073

                                         
                                         78.46.94.184
HTTP/1.1 302
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: close
Location: http://sync.datamind.ru/cookie/emitter?source=google&nolog=true
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: dmp.id=d383864c-f2cd-4f27-96f0-3a107dac0604;Version=1;Domain=.datamind.ru;Path=/;Max-Age=31536000;Expires=Mon, 8 Jun 2020 13:30:23 GMT


--- Additional Info ---
                                        
                                            GET /p/cm/sape?u=47F3C9C3EE09FD5C6C07466F02CCC30B&bounced=1 HTTP/1.1 
Host: px.adhigh.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: gi_u=PzWoEVdVTOX.AikABlFrPG7OHQ==

                                         
                                         136.243.75.7
HTTP/1.1 302 Found
                                        
Server: nginx/1.14.2
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: keep-alive
X-Backend-id: f3-de
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache, no-store
Set-Cookie: sape_sync=nzG;Path=/;Domain=.adhigh.net;Expires=Mon, 08-Jun-2020 13:30:23 GMT;Max-Age=31536000
Location: http://acint.net/match?dp=17&euid=PzWoEVdVTOX.AikABlFrPG7OHQ==


--- Additional Info ---
                                        
                                            GET /processor.js?i=25299704019543 HTTP/1.1 
Host: tag.digitaltarget.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         185.15.175.134
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 9284
Last-Modified: Thu, 06 Jun 2019 15:49:47 GMT
Connection: keep-alive
Etag: "5cf9361b-2444"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   9284
Md5:    94de504020df3192c87c3e0c1e2ea8c7
Sha1:   83c9f2e2a9700cb90b2bab557789794cd6f2a707
Sha256: db209c42d3795504c5463163ab0689263e4f139d2f26d2fc225d9e0c7dcb2708
                                        
                                            GET /merge_gpsid/?sid=50&id=47F3C9C3EE09FD5C6C07466F02CCC30B HTTP/1.1 
Host: adlmerge.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         95.211.66.35
HTTP/1.1 200
Content-Type: image/gif
                                        
Server: nginx/1.12.1
Date: Sun, 09 Jun 2019 13:30:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /p/cm/rpblr?bounced=1 HTTP/1.1 
Host: px.adhigh.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: gi_u=PzWoEVdVTOX.AikABlFrPG7OSQ==

                                         
                                         136.243.75.7
HTTP/1.1 302 Found
                                        
Server: nginx/1.14.2
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: keep-alive
X-Backend-id: f3-de
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache, no-store
Set-Cookie: rpblr_sync=nzG;Path=/;Domain=.adhigh.net;Expires=Mon, 08-Jun-2020 13:30:23 GMT;Max-Age=31536000
Location: http://sync.republer.com/match?dsp=getintent&id=PzWoEVdVTOX.AikABlFrPG7OSQ==


--- Additional Info ---
                                        
                                            GET /match?dp=14&euid=72F3C9C3EF09FD5C120093300271FA06 HTTP/1.1 
Host: acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: aid=w8nzR1z9Ce5vRgdsC8PMAk2wo0IqglpDFEiOMkGworBspWa2; test_cookie=CheckForPermission; cSyncDp7v2=1560087022; cSyncDp14v2=1560087022; cSyncDp17=1560087022; cSyncDp23=1560087022; cSyncDp24=1560087022; cSyncDp32=1560087022; cSyncDp35=1560087022; cSyncDp37=1560087022; cSyncDp45=1560087022; cSyncDp54v2=1560087022; cSyncDp62=1560087022; cSyncDp67v2=1560087022; cSyncDp68=1560087022; cSyncDp71=1560087022; cSyncDp74=1560087022; cSyncDp75=1560087022; cSyncDp77=1560087022; cSyncDp79=1560087022; cSyncDp84=1560087022; cSyncDp88=1560087022; cSyncDp92=1560087022; cSyncDp98=1560087022; cSyncDp101=1560087022; cSyncDp104=1560087022; cSyncDp111=1560087022; cSyncDp112=1560087022

                                         
                                         195.201.243.72
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: close
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /match?dp=111&euid= HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: aid=w8nzR1z9Ce5vRgdsC8PMAk2wo0IqglpDFEiOMkGworBspWa2; test_cookie=CheckForPermission; cSyncDp7v2=1560087022; cSyncDp14v2=1560087022; cSyncDp17=1560087022; cSyncDp23=1560087022; cSyncDp24=1560087022; cSyncDp32=1560087022; cSyncDp35=1560087022; cSyncDp37=1560087022; cSyncDp45=1560087022; cSyncDp54v2=1560087022; cSyncDp62=1560087022; cSyncDp67v2=1560087022; cSyncDp68=1560087022; cSyncDp71=1560087022; cSyncDp74=1560087022; cSyncDp75=1560087022; cSyncDp77=1560087022; cSyncDp79=1560087022; cSyncDp84=1560087022; cSyncDp88=1560087022; cSyncDp92=1560087022; cSyncDp98=1560087022; cSyncDp101=1560087022; cSyncDp104=1560087022; cSyncDp111=1560087022; cSyncDp112=1560087022

                                         
                                         195.201.243.71
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: close
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /image?source=sape&id=47F3C9C3EE09FD5C6C07466F02CCC30B&session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiXX19 HTTP/1.1 
Host: sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: session_tptc=1560087023096

                                         
                                         148.251.236.115
HTTP/1.1 302
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: close
Location: http://58092a61-729d-4bb0-80d1-c4e3db66d47d.sync.upravel.com/image?source=sape&id=47F3C9C3EE09FD5C6C07466F02CCC30B&ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiLCJodHRwOi8vd3d3LmFjaW50Lm5ldC9tYy8_ZHBcdTAwM2QxMFx1MDAyNnRjXHUwMDNkMSJdfX0
Set-Cookie: user_id=58092a61-729d-4bb0-80d1-c4e3db66d47d;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"


--- Additional Info ---
                                        
                                            POST /gsalphasha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 1521
Connection: keep-alive
Set-Cookie: __cfduid=d3a5568332322f9e6e1cb213533dd84071560087023; expires=Mon, 08-Jun-20 13:30:23 GMT; path=/; domain=.globalsign.com; HttpOnly
Expires: Thu, 13 Jun 2019 10:27:40 GMT
X-Powered-By: Undertow/1
Etag: "68be4c799c2077a41bfd3e557c50584744b1cc70"
Last-Modified: Sun, 09 Jun 2019 10:27:40 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4e4375b72b6242bf-OSL


--- Additional Info ---
Magic:  data
Size:   1521
Md5:    acb03fdb2eee20d7936b5117683e38f8
Sha1:   68be4c799c2077a41bfd3e557c50584744b1cc70
Sha256: 8a2c1bac44fa3391d50a06ccaafcf9d1e9d847b9ba22a506101d1190228144b6
                                        
                                            GET /cookie/emitter?source=google&nolog=true HTTP/1.1 
Host: sync.datamind.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: dmp.ctest_id=1560087023073; dmp.id=d383864c-f2cd-4f27-96f0-3a107dac0604

                                         
                                         78.46.94.184
HTTP/1.1 302
Content-Type: image/png
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: close
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Location: https://cm.g.doubleclick.net/pixel?google_nid=tinkoff_bank_wdatamind&google_cm&google_hm=04OGTPLNTyeW8DoQfawGBA
Set-Cookie: dmp.id=d383864c-f2cd-4f27-96f0-3a107dac0604;Version=1;Domain=.datamind.ru;Path=/;Max-Age=31536000;Expires=Mon, 8 Jun 2020 13:30:23 GMT


--- Additional Info ---
                                        
                                            GET /match?dp=17&euid=PzWoEVdVTOX.AikABlFrPG7OHQ== HTTP/1.1 
Host: acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: aid=w8nzR1z9Ce5vRgdsC8PMAk2wo0IqglpDFEiOMkGworBspWa2; test_cookie=CheckForPermission; cSyncDp7v2=1560087022; cSyncDp14v2=1560087022; cSyncDp17=1560087022; cSyncDp23=1560087022; cSyncDp24=1560087022; cSyncDp32=1560087022; cSyncDp35=1560087022; cSyncDp37=1560087022; cSyncDp45=1560087022; cSyncDp54v2=1560087022; cSyncDp62=1560087022; cSyncDp67v2=1560087022; cSyncDp68=1560087022; cSyncDp71=1560087022; cSyncDp74=1560087022; cSyncDp75=1560087022; cSyncDp77=1560087022; cSyncDp79=1560087022; cSyncDp84=1560087022; cSyncDp88=1560087022; cSyncDp92=1560087022; cSyncDp98=1560087022; cSyncDp101=1560087022; cSyncDp104=1560087022; cSyncDp111=1560087022; cSyncDp112=1560087022

                                         
                                         195.201.243.72
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: close
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /pixel?google_nid=tinkoff_bank_wdatamind&google_cm&google_hm=04OGTPLNTyeW8DoQfawGBA HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: IDE=AHWqTUmwMyMxQ9tXor0ylcflS2r-rnovZR7zwBVe3xTinsko0WLnOZB0irKwJtlP

                                         
                                         172.217.21.130
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://sync.datamind.ru/cookie/accepter?source=google&google_gid=CAESEIyT_OCMgHkjnLFSEuw0DiI&google_cver=1
Date: Sun, 09 Jun 2019 13:30:23 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 312
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  HTML document text
Size:   312
Md5:    a6d810b22ab27920e6673dbcdc632e56
Sha1:   33d8e98f14ff153ff35e751ce8a36a7e206599c0
Sha256: 7545a5961d7229d24d266edf617afb44f4a4fae0417647156586bfc92139dbd5
                                        
                                            GET /match?dsp=getintent&id=PzWoEVdVTOX.AikABlFrPG7OSQ== HTTP/1.1 
Host: sync.republer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: ruid=dac5b24f-787a-49bc-8633-025f010aefd2

                                         
                                         194.190.117.33
HTTP/1.1 307 Temporary Redirect
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: close
P3P: policyref="/w3c/p3p.xml", CP="NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA"
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
X-Host: rssp2
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: http://republer-sync.rutarget.ru/sync?ssp_user_id=dac5b24f-787a-49bc-8633-025f010aefd2
Set-Cookie: ruid=dac5b24f-787a-49bc-8633-025f010aefd2; Max-Age=31536000; Expires=Mon, 08 Jun 2020 13:30:23 GMT; Path=/; Domain=.republer.com; HTTPOnly


--- Additional Info ---
                                        
                                            GET /counter.php?sid=28&ref=&uri=/soft/mobile-forex.html HTTP/1.1 
Host: nokia-6300.smartovik.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html

                                         
                                         217.67.179.222
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:27:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.35-0+deb7u2
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   22
Md5:    3a1ca2120a5cce1968931187de00e962
Sha1:   b1d86ff86c4494729759b53d408c513fb8e20b92
Sha256: c8ae9511600b79ae44df9e2afde5353d4471352de16b883d8a775505a393b270
                                        
                                            GET /1/1093/i/i?i=367151773711223.485524589633331&a=77&e=47F3C9C3EE09FD5C6C07466F02CCC30B&c=ss:77.up:47F3C9C3EE09FD5C6C07466F02CCC30B.sync:up.xdua:dubhI7gd4Cq_Lfh73fPU0Xs_.xps:xps9cSgHumb5iwTnZJizlYy1F.dn:acint__net.tg:.cr:http%3A%2F%2Fnokia-6300.smartovik.ru%2Fsoft%2Fmobile-forex.html HTTP/1.1 
Host: dmg.digitaltarget.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         185.15.175.144
HTTP/1.1 302 Found
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: keep-alive
Location: /1/1093/i/i?i=367151773711223.485524589633331&a=77&e=47F3C9C3EE09FD5C6C07466F02CCC30B&c=ss:77.up:47F3C9C3EE09FD5C6C07466F02CCC30B.sync:up.xdua:dubhI7gd4Cq_Lfh73fPU0Xs_.xps:xps9cSgHumb5iwTnZJizlYy1F.dn:acint__net.tg:.cr:http%3A%2F%2Fnokia-6300.smartovik.ru%2Fsoft%2Fmobile-forex.html&q=scc
P3P: policyref="http://dmg.digitaltarget.ru/p3p.xml", CP="NON NID PSAa PSDa OUR BUS COM NAV DEM STA PRE"
Set-Cookie: visessid=56351538_16a278f97cc_00000000021d6e0d; Path=/; Domain=dmg.digitaltarget.ru viuserid=bSZJiEwj5R3y55u5Ps9b; Max-Age=93312000; Expires=Tue, 24 May 2022 13:30:23 GMT; Path=/; Domain=dmg.digitaltarget.ru


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.128.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:30:23 GMT
Accept-Ranges: bytes
Last-Modified: Thu, 06 Jun 2019 05:09:59 GMT
Server: Apache
Etag: B7FE3450FE8D473E93D56CBC27B5132A7BF3363B
Cache-Control: max-age=333301,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp14
X-HW: 1560087023.cds054.sk1.h2,1560087023.cds041.sk1.c
Connection: keep-alive
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    3e4ce7a9348549dcef52f8d3765580fc
Sha1:   b7fe3450fe8d473e93d56cbc27b5132a7bf3363b
Sha256: 634945875e132fa6584a355804254e180cf4bc3f5a154d6b3eebb0dcf652d134
                                        
                                            GET /image?source=sape&id=47F3C9C3EE09FD5C6C07466F02CCC30B&ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiLCJodHRwOi8vd3d3LmFjaW50Lm5ldC9tYy8_ZHBcdTAwM2QxMFx1MDAyNnRjXHUwMDNkMSJdfX0 HTTP/1.1 
Host: 58092a61-729d-4bb0-80d1-c4e3db66d47d.sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: session_tptc=1560087023096; user_id=58092a61-729d-4bb0-80d1-c4e3db66d47d

                                         
                                         176.9.8.252
HTTP/1.1 302
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: close
Location: http://sync.upravel.com/google/sync
Set-Cookie: user_id=58092a61-729d-4bb0-80d1-c4e3db66d47d;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"


--- Additional Info ---
                                        
                                            GET /sync?ssp_user_id=dac5b24f-787a-49bc-8633-025f010aefd2 HTTP/1.1 
Host: republer-sync.rutarget.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: userId=wzRVwK_kOM-c

                                         
                                         138.201.8.32
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx/1.14.0
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: close
Location: http://sync.republer.com/match?src=rutarget&id=wzRVwK_kOM-c
P3P: CP="This is not a P3P policy. Please visit http://rutarget.ru/p3p/ to get more information."
Set-Cookie: userId=wzRVwK_kOM-c; Path=/; Domain=.rutarget.ru; Expires=Fri, 06 Dec 2019 13:30:23 GMT


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.128.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:30:23 GMT
Accept-Ranges: bytes
Last-Modified: Mon, 03 Jun 2019 00:14:19 GMT
Server: Apache
Etag: 206ADD62719874AF8E5F8A0DDBAA98434FCA8AAB
Cache-Control: max-age=302399,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp14
X-HW: 1560087023.cds046.sk1.h2,1560087023.cds047.sk1.c
Connection: keep-alive
Content-Length: 727


--- Additional Info ---
Magic:  data
Size:   727
Md5:    5bd4cf07f2e90a2c27853558c88b9d86
Sha1:   206add62719874af8e5f8a0ddbaa98434fca8aab
Sha256: 095a49059441382b1768b781d4d37251969679ad91d24249ed866b7f2f1022ae
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.128.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:30:23 GMT
Accept-Ranges: bytes
Last-Modified: Mon, 03 Jun 2019 00:14:19 GMT
Server: Apache
Etag: BF40A85D9AEA5D5BB383FE1342EEF4689083FD5D
Cache-Control: max-age=302399,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp11
X-HW: 1560087023.cds046.sk1.h2,1560087023.cds046.sk1.c
Connection: keep-alive
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    27d88db03010f065a0ad06fe1ab2dcc2
Sha1:   bf40a85d9aea5d5bb383fe1342eef4689083fd5d
Sha256: d16a0780592846993736b7e25fabee605b539d8c361762fac2057216bdb1b15b
                                        
                                            GET /1/1093/i/i?i=367151773711223.485524589633331&a=77&e=47F3C9C3EE09FD5C6C07466F02CCC30B&c=ss:77.up:47F3C9C3EE09FD5C6C07466F02CCC30B.sync:up.xdua:dubhI7gd4Cq_Lfh73fPU0Xs_.xps:xps9cSgHumb5iwTnZJizlYy1F.dn:acint__net.tg:.cr:http%3A%2F%2Fnokia-6300.smartovik.ru%2Fsoft%2Fmobile-forex.html&q=scc HTTP/1.1 
Host: dmg.digitaltarget.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: visessid=56351538_16a278f97cc_00000000021d6e0d; viuserid=bSZJiEwj5R3y55u5Ps9b

                                         
                                         185.15.175.144
HTTP/1.1 204 No Content
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: keep-alive
P3P: policyref="http://dmg.digitaltarget.ru/p3p.xml", CP="NON NID PSAa PSDa OUR BUS COM NAV DEM STA PRE"
Set-Cookie: viuserid=bSZJiEwj5R3y55u5Ps9b; Max-Age=93312000; Expires=Tue, 24 May 2022 13:30:23 GMT; Path=/; Domain=dmg.digitaltarget.ru


--- Additional Info ---
                                        
                                            GET /google/sync HTTP/1.1 
Host: sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: session_tptc=1560087023096; user_id=58092a61-729d-4bb0-80d1-c4e3db66d47d

                                         
                                         148.251.236.115
HTTP/1.1 302
Content-Type: image/png
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: close
Location: http://58092a61-729d-4bb0-80d1-c4e3db66d47d.sync.upravel.com/google/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiXX19
Set-Cookie: user_id=58092a61-729d-4bb0-80d1-c4e3db66d47d;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"


--- Additional Info ---
                                        
                                            GET /partners/sprcs?uid=47F3C9C3EE09FD5C6C07466F02CCC30B HTTP/1.1 
Host: relap.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         185.99.9.116
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Content-Length: 43
Connection: keep-alive
Date: Sun, 09 Jun 2019 13:30:23 GMT
Pragma: no-cache
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: unique=qAyL6Hkf; expires=Wed, 06 Jun 2029 13:30:23 GMT; domain=relap.io; path=/; secure; HttpOnly suid=44c3db7c1efab74276b27d365c5b4759e7077e9e--8b99391549b2ec71fc7488b199ea847965c57bb4; domain=relap.io; path=/; secure; HttpOnly hllc=1; expires=Mon, 10 Jun 2019 13:30:23 GMT; domain=relap.io; path=/; secure; HttpOnly rlpsprcs=eyJ1aWQiOiI0N0YzQzlDM0VFMDlGRDVDNkMwNzQ2NkYwMkNDQzMwQiIsInRzIjoxNTYwMDg3MDIzfQ--b97b87935109337bb2b6cea69d56e82c4b7407c0; expires=Mon, 08 Jun 2020 13:30:23 GMT; domain=relap.io; path=/; secure; HttpOnly
Strict-Transport-Security: max-age=5184000; includeSubdomains;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /match?src=rutarget&id=wzRVwK_kOM-c HTTP/1.1 
Host: sync.republer.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: ruid=dac5b24f-787a-49bc-8633-025f010aefd2

                                         
                                         194.190.117.33
HTTP/1.1 307 Temporary Redirect
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: close
P3P: policyref="/w3c/p3p.xml", CP="NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA"
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
X-Host: rssp3
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: http://ut.rktch.com/matchspm?pi=14&pui=dac5b24f-787a-49bc-8633-025f010aefd2
Set-Cookie: ruid=dac5b24f-787a-49bc-8633-025f010aefd2; Max-Age=31536000; Expires=Mon, 08 Jun 2020 13:30:23 GMT; Path=/; Domain=.republer.com; HTTPOnly


--- Additional Info ---
                                        
                                            GET /google/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiXX19 HTTP/1.1 
Host: 58092a61-729d-4bb0-80d1-c4e3db66d47d.sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: session_tptc=1560087023096; user_id=58092a61-729d-4bb0-80d1-c4e3db66d47d

                                         
                                         176.9.8.252
HTTP/1.1 302
Content-Type: image/png
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: close
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: user_id=58092a61-729d-4bb0-80d1-c4e3db66d47d;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
Location: https://cm.g.doubleclick.net/pixel?google_nid=mgcom&google_cm&google_hm=WAkqYXKdS7CA0cTj22bUfQ


--- Additional Info ---
                                        
                                            GET /matchspm?pi=14&pui=dac5b24f-787a-49bc-8633-025f010aefd2 HTTP/1.1 
Host: ut.rktch.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: b_uid=66055386b735f94e9b1f2d5cbf26f3268f89

                                         
                                         194.87.190.115
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.15.12
Date: Sun, 09 Jun 2019 13:30:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  data
Size:   84
Md5:    c8f3e9f1c69e39152024d27441a58c9c
Sha1:   228036167113e9821ad88a110d011f3b9e0f3205
Sha256: 370dbc0a7e85181d81ecf29999a4782fc0fde9621e538b4d17887e2d1af1522d
                                        
                                            POST / HTTP/1.1 
Host: status.thawte.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=107069
Date: Sun, 09 Jun 2019 13:30:33 GMT
Etag: "5cfbf2fa-1d7"
Expires: Mon, 10 Jun 2019 19:14:52 GMT
Last-Modified: Sat, 08 Jun 2019 17:40:10 GMT
Server: ECS (ams/4996)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    b81d128bbe0aeb9469f5549eac14cddd
Sha1:   ad0eb02d879a11994a83ef021ea29ef1cc596d26
Sha256: 1853199a6d6d33b06610ec52e0e7d321070136c02add393982b204bf859f5895
                                        
                                            GET /csync/?t=p&ep=281184&extuid=47F3C9C3EE09FD5C6C07466F02CCC30B&redir=http%3A%2F%2Facint.net%2Fmatch%3Fdp%3D24%26euid%3D%7Buid%7D HTTP/1.1 
Host: sync.vertamedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         62.149.0.72
HTTP/1.1 302 Found
                                        
Server: Adtelligent 1.0
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Location: http://acint.net/match?dp=24&euid=5bfe9b92346cda3f
Set-Cookie: vmuid=5bfe9b92346cda3f; expires=Sat, 10 Aug 2019 13:30:23 GMT; domain=.vertamedia.com; path=/ p281184=47F3C9C3EE09FD5C6C07466F02CCC30B; expires=Sat, 10 Aug 2019 13:30:23 GMT; domain=.vertamedia.com; path=/


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=156809
Date: Sun, 09 Jun 2019 13:30:23 GMT
Etag: "5cfcbf07-1d7"
Expires: Tue, 11 Jun 2019 09:03:52 GMT
Last-Modified: Sun, 09 Jun 2019 08:10:47 GMT
Server: ECS (lcy/1D5D)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    195215aab744785656c438deecb860b0
Sha1:   1498d324a45e8cea15cc3ab787b575f4606d64c7
Sha256: 315aacf19fed44488e9a822009c6e13d9050c266c14403059aad30054a298b7b
                                        
                                            GET /google-match?google_gid=CAESEO5T-x87ylf4sB_W2Btoflw&google_cver=1 HTTP/1.1 
Host: dm.hybrid.ai
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: vid=3ee12b3e314d3455604b

                                         
                                         37.18.16.16
HTTP/1.1 302 Found
                                        
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store
Pragma: no-cache
Expires: -1
Location: https://dm-us.hybrid.ai/google-match?ovid=3ee12b3e314d3455604b&google_gid=CAESEO5T-x87ylf4sB_W2Btoflw&google_cver=1
P3P: CP='NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC'
X-Mode: 127
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Origin: *
Server: Hybrid Web Server


--- Additional Info ---
                                        
                                            GET /match?dp=24&euid=5bfe9b92346cda3f HTTP/1.1 
Host: acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: aid=w8nzR1z9Ce5vRgdsC8PMAk2wo0IqglpDFEiOMkGworBspWa2; test_cookie=CheckForPermission; cSyncDp7v2=1560087022; cSyncDp14v2=1560087022; cSyncDp17=1560087022; cSyncDp23=1560087022; cSyncDp24=1560087022; cSyncDp32=1560087022; cSyncDp35=1560087022; cSyncDp37=1560087022; cSyncDp45=1560087022; cSyncDp54v2=1560087022; cSyncDp62=1560087022; cSyncDp67v2=1560087022; cSyncDp68=1560087022; cSyncDp71=1560087022; cSyncDp74=1560087022; cSyncDp75=1560087022; cSyncDp77=1560087022; cSyncDp79=1560087022; cSyncDp84=1560087022; cSyncDp88=1560087022; cSyncDp92=1560087022; cSyncDp98=1560087022; cSyncDp101=1560087022; cSyncDp104=1560087022; cSyncDp111=1560087022; cSyncDp112=1560087022

                                         
                                         195.201.243.72
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: close
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /pixel?google_nid=mgcom&google_cm&google_hm=WAkqYXKdS7CA0cTj22bUfQ HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: IDE=AHWqTUmwMyMxQ9tXor0ylcflS2r-rnovZR7zwBVe3xTinsko0WLnOZB0irKwJtlP

                                         
                                         172.217.21.130
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://sync.upravel.com/image?source=google&google_gid=CAESELQtB8kwJgTpRWbJZPxQUk0&google_cver=1
Date: Sun, 09 Jun 2019 13:30:23 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 302
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  HTML document text
Size:   302
Md5:    a4e218bebf7c4c50318a48a5a8d1f76c
Sha1:   9f39c5ee3937be41ee48b7bc057605b10b5101c0
Sha256: 5552eee0d6801c0c6df52e4b0805bf2ee18d97201703838a446ce112150fed09
                                        
                                            GET /cookie/accepter?source=google&google_gid=CAESEIyT_OCMgHkjnLFSEuw0DiI&google_cver=1 HTTP/1.1 
Host: sync.datamind.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: dmp.ctest_id=1560087023073; dmp.id=d383864c-f2cd-4f27-96f0-3a107dac0604

                                         
                                         78.46.94.184
HTTP/1.1 302
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: close
Location: https://sync.datamind.ru/cookie/emitter?source=cityads&nolog=true
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: dmp.id=d383864c-f2cd-4f27-96f0-3a107dac0604;Version=1;Domain=.datamind.ru;Path=/;Max-Age=31536000;Expires=Mon, 8 Jun 2020 13:30:23 GMT


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.128.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:30:23 GMT
Accept-Ranges: bytes
Last-Modified: Sat, 08 Jun 2019 03:55:31 GMT
Server: Apache
Etag: 9E8802529366E471087B0EC9F3957FE75DF0E3BE
Cache-Control: max-age=330367,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp10
X-HW: 1560087023.cds028.sk1.h2,1560087023.cds022.sk1.c
Connection: keep-alive
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    6975c4454fe601e6875cd771e248f83f
Sha1:   9e8802529366e471087b0ec9f3957fe75df0e3be
Sha256: db7a1eec082f6e20b1b8bc9e27aea843c912b7c443932b2f915cc62a86215bf3
                                        
                                            GET /cookie/emitter?source=cityads&nolog=true HTTP/1.1 
Host: sync.datamind.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: dmp.ctest_id=1560087023073; dmp.id=d383864c-f2cd-4f27-96f0-3a107dac0604

                                         
                                         78.46.94.184
HTTP/1.1 302
Content-Type: image/png
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: close
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Location: https://x.cnt.my/cmp/?p=TD&cookie=d383864c-f2cd-4f27-96f0-3a107dac0604&md5=ecace1e7b87336e6ce4472428372e117&v=1
Set-Cookie: dmp.id=d383864c-f2cd-4f27-96f0-3a107dac0604;Version=1;Domain=.datamind.ru;Path=/;Max-Age=31536000;Expires=Mon, 8 Jun 2020 13:30:23 GMT


--- Additional Info ---
                                        
                                            GET /image?source=google&google_gid=CAESELQtB8kwJgTpRWbJZPxQUk0&google_cver=1 HTTP/1.1 
Host: sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: session_tptc=1560087023096; user_id=58092a61-729d-4bb0-80d1-c4e3db66d47d

                                         
                                         148.251.236.115
HTTP/1.1 302
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: close
Location: https://58092a61-729d-4bb0-80d1-c4e3db66d47d.sync.upravel.com/image?source=google&google_gid=CAESELQtB8kwJgTpRWbJZPxQUk0&google_cver=1&ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiXX19
Set-Cookie: user_id=58092a61-729d-4bb0-80d1-c4e3db66d47d;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         151.139.128.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:30:23 GMT
Accept-Ranges: bytes
Last-Modified: Sun, 02 Jun 2019 17:20:41 GMT
Server: Apache
Etag: ABD615AD5BFE251816D902F76C4857F4B07DBCC1
Cache-Control: max-age=300344,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp14
X-HW: 1560087023.cds055.sk1.h2,1560087023.cds032.sk1.c
Connection: keep-alive
Content-Length: 472


--- Additional Info ---
Magic:  data
Size:   472
Md5:    42e4e37251869a4c843d60f5954b628d
Sha1:   abd615ad5bfe251816d902f76c4857f4b07dbcc1
Sha256: acb5a3361d6b0a04650075c26865de77bbbd213d04ae6d5daa47b702d6305b37
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.128.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:30:23 GMT
Accept-Ranges: bytes
Last-Modified: Thu, 06 Jun 2019 12:14:19 GMT
Server: Apache
Etag: 8099BB07E7050604DE4259CFE266D535C04E9322
Cache-Control: max-age=507466,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp14
X-HW: 1560087023.cds055.sk1.h2,1560087023.cds041.sk1.c
Connection: keep-alive
Content-Length: 727


--- Additional Info ---
Magic:  data
Size:   727
Md5:    241b983353821984fdc5f3d18cb9b582
Sha1:   8099bb07e7050604de4259cfe266d535c04e9322
Sha256: ed1804e48e4176bfa75fb14d2e6d79d568332b46b29e2ca562b3970499397598
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         151.139.128.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:30:23 GMT
Accept-Ranges: bytes
Last-Modified: Thu, 06 Jun 2019 12:14:19 GMT
Server: Apache
Etag: B44FAF03540FCA33016D09282127AE20BEAA4CA4
Cache-Control: max-age=507466,public,no-transform,must-revalidate
X-OCSP-Responder-ID: mcdpcaocsp4
X-HW: 1560087023.cds046.sk1.h2,1560087023.cds047.sk1.c
Connection: keep-alive
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    fb545f5eec15e712c9606a6366bedb83
Sha1:   b44faf03540fca33016d09282127ae20beaa4ca4
Sha256: d23de25011516addadb4b89614cb41dcffe22cc4cab419e9f3d07835241c9f8e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "CE50C2D0B8CE01293DE714E78D90182F642712EF65E253A0B08AC31D559C8F92"
Last-Modified: Fri, 07 Jun 2019 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20733
Expires: Sun, 09 Jun 2019 19:15:56 GMT
Date: Sun, 09 Jun 2019 13:30:23 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    4ad6b8ee27f60a0aa74a67c582a23244
Sha1:   612dd414ac9e61ab8abef639cab19dcb9b33cf73
Sha256: ce50c2d0b8ce01293de714e78d90182f642712ef65e253a0b08ac31d559c8f92
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.26
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Content-Transfer-Encoding: Binary
Last-Modified: Fri, 07 Jun 2019 17:30:09 GMT
Etag: "2cf877ce4290fed2cae71c1172055582327ebf77"
Content-Length: 1398
Cache-Control: public, no-transform, must-revalidate, max-age=38354
Expires: Mon, 10 Jun 2019 00:09:37 GMT
Date: Sun, 09 Jun 2019 13:30:23 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1398
Md5:    7859b70e303e40d2a50e56ec14efe2d6
Sha1:   2cf877ce4290fed2cae71c1172055582327ebf77
Sha256: 8e4bec54e49487ddb4f8c8ebe6e3088d526d9367a4233c2f18a2b65e13a55253
                                        
                                            GET /image?source=google&google_gid=CAESELQtB8kwJgTpRWbJZPxQUk0&google_cver=1&ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiXX19 HTTP/1.1 
Host: 58092a61-729d-4bb0-80d1-c4e3db66d47d.sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: session_tptc=1560087023096; user_id=58092a61-729d-4bb0-80d1-c4e3db66d47d

                                         
                                         176.9.8.252
HTTP/1.1 302
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:23 GMT
Content-Length: 0
Connection: close
Location: https://sync.upravel.com/doubleclick/sync
Set-Cookie: user_id=58092a61-729d-4bb0-80d1-c4e3db66d47d;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"


--- Additional Info ---
                                        
                                            GET /cmp/?p=TD&cookie=d383864c-f2cd-4f27-96f0-3a107dac0604&md5=ecace1e7b87336e6ce4472428372e117&v=1 HTTP/1.1 
Host: x.cnt.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         138.201.230.88
HTTP/1.1 301 Moved Permanently
Content-Type: text/plain; charset=utf-8
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:24 GMT
Content-Length: 125
Connection: keep-alive
Cache-Control: no-cache
Set-Cookie: xcntUt=x2112210f47de98115; Expires=Mon, 10 Jun 2019 13:30:24 GMT; Path=/; Domain=.cnt.my
Expires: 0
Location: /cmp/?p=TD&cookie=d383864c-f2cd-4f27-96f0-3a107dac0604&md5=ecace1e7b87336e6ce4472428372e117&v=1&rand=0.726092734025185&xtmp=1
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   125
Md5:    5a47d99dea0eef4ecfdc34c37cf56872
Sha1:   234ea04ea5b28ab695ac60de91a3246548c85222
Sha256: c11d22fff4aea821d8e7f1bcb1a27cd0c410b62723eed7d6e7f706a8ddedb78a
                                        
                                            GET /cmp/?p=TD&cookie=d383864c-f2cd-4f27-96f0-3a107dac0604&md5=ecace1e7b87336e6ce4472428372e117&v=1&rand=0.726092734025185&xtmp=1 HTTP/1.1 
Host: x.cnt.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: xcntUt=x2112210f47de98115

                                         
                                         138.201.230.88
HTTP/1.1 200 OK
Content-Type: image/gif; charset=utf-8
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:24 GMT
Content-Length: 35
Connection: keep-alive
Cache-Control: no-cache,max-age=0,must-revalidate, no-cache
Set-Cookie: xcntID=y218ade91528f49714; Expires=Mon, 08 Jun 2020 13:30:24 GMT; Path=/; Domain=.cnt.my xcntUt=x2112210f47de98115; Expires=Sun, 09 Jun 2019 13:30:24 GMT; Path=/; Domain=.cnt.my
Expires: 0
Pragma: no-cache
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    df16d33739defe9bda1f4c45d36fd7a7
Sha1:   ff7489a6dd9ab0d9a4b084315f5b9d77cf9fdf50
Sha256: 90252ef0aa9e3d36c861bbeaa1bd57b7f855333edf2957ab9473838a52e2dd7f
                                        
                                            GET /doubleclick/sync HTTP/1.1 
Host: sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: session_tptc=1560087023096; user_id=58092a61-729d-4bb0-80d1-c4e3db66d47d

                                         
                                         148.251.236.115
HTTP/1.1 302
Content-Type: image/png
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:24 GMT
Content-Length: 0
Connection: close
Location: https://58092a61-729d-4bb0-80d1-c4e3db66d47d.sync.upravel.com/doubleclick/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiXX19
Set-Cookie: user_id=58092a61-729d-4bb0-80d1-c4e3db66d47d;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"


--- Additional Info ---
                                        
                                            GET /google-match?ovid=3ee12b3e314d3455604b&google_gid=CAESEO5T-x87ylf4sB_W2Btoflw&google_cver=1 HTTP/1.1 
Host: dm-us.hybrid.ai
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: vid=3ee12b3e314d3455604b

                                         
                                         67.55.65.228
HTTP/1.1 204 No Content
                                        
Date: Sun, 09 Jun 2019 13:30:24 GMT
Connection: keep-alive
Cache-Control: no-cache, no-store
Pragma: no-cache
Expires: -1
P3P: CP='NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC'
X-Mode: 403
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Origin: *
Server: Hybrid Web Server


--- Additional Info ---
                                        
                                            GET /doubleclick/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3d3dy5hY2ludC5uZXQvbWMvP2RwXHUwMDNkMTBcdTAwMjZ0Y1x1MDAzZDEiXX19 HTTP/1.1 
Host: 58092a61-729d-4bb0-80d1-c4e3db66d47d.sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: session_tptc=1560087023096; user_id=58092a61-729d-4bb0-80d1-c4e3db66d47d

                                         
                                         176.9.8.252
HTTP/1.1 302
Content-Type: image/png
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:24 GMT
Content-Length: 0
Connection: close
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Set-Cookie: user_id=58092a61-729d-4bb0-80d1-c4e3db66d47d;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
Location: https://ad.doubleclick.net/ddm/activity/src=8441199;type=synco0;cat=gmp-u0;u7=58092a61-729d-4bb0-80d1-c4e3db66d47d;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1?


--- Additional Info ---
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:30:24 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    4918c4a598da777efe01061118487a09
Sha1:   56501540e117d7edc7b3f68539779f1bc8cbff5e
Sha256: 308c34bed81f9223e0e3c8d2b9d5cb6af5486d44861fd604dd18a77a610e8028
                                        
                                            GET /ddm/activity/src=8441199;type=synco0;cat=gmp-u0;u7=58092a61-729d-4bb0-80d1-c4e3db66d47d;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1? HTTP/1.1 
Host: ad.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1
Cookie: IDE=AHWqTUmwMyMxQ9tXor0ylcflS2r-rnovZR7zwBVe3xTinsko0WLnOZB0irKwJtlP

                                         
                                         172.217.21.134
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Sun, 09 Jun 2019 13:30:24 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Location: https://adservice.google.com/ddm/fls/z/src=8441199;type=synco0;cat=gmp-u0;u7=58092a61-729d-4bb0-80d1-c4e3db66d47d;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 0
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 09 Jun 2019 13:30:24 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    b3d8cb0c34a764c8a87a13fef29ab6f5
Sha1:   4ac5b61a1a4f79a66a605d57fdab535c4d1f9054
Sha256: f5450f7a3854041fcd5f2eb9921c9ad37f4ec1dd7ee95970e4dfd668e00f442d
                                        
                                            GET /ddm/fls/z/src=8441199;type=synco0;cat=gmp-u0;u7=58092a61-729d-4bb0-80d1-c4e3db66d47d;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1 HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.acint.net/mc/?dp=10&tc=1

                                         
                                         172.217.21.162
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Sun, 09 Jun 2019 13:30:24 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /ping/?v=0.1.1&uid=b3eee3da-e1a4-41df-9f5f-20edfa9373da&dp=10&tz=%2B02%3A00&nc=85942880&dT=2019-06-09T15%3A30%3A25.842 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html
Cookie: aid=w8nzR1z9Ce5vRgdsC8PMAk2wo0IqglpDFEiOMkGworBspWa2; test_cookie=CheckForPermission; cSyncDp7v2=1560087022; cSyncDp14v2=1560087022; cSyncDp17=1560087022; cSyncDp23=1560087022; cSyncDp24=1560087022; cSyncDp32=1560087022; cSyncDp35=1560087022; cSyncDp37=1560087022; cSyncDp45=1560087022; cSyncDp54v2=1560087022; cSyncDp62=1560087022; cSyncDp67v2=1560087022; cSyncDp68=1560087022; cSyncDp71=1560087022; cSyncDp74=1560087022; cSyncDp75=1560087022; cSyncDp77=1560087022; cSyncDp79=1560087022; cSyncDp84=1560087022; cSyncDp88=1560087022; cSyncDp92=1560087022; cSyncDp98=1560087022; cSyncDp101=1560087022; cSyncDp104=1560087022; cSyncDp111=1560087022; cSyncDp112=1560087022; _a_d3t6sf=dubhI7gd4Cq_Lfh73fPU0Xs_

                                         
                                         195.201.243.71
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:25 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: keep-alive
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /ping/?v=0.1.1&uid=b3eee3da-e1a4-41df-9f5f-20edfa9373da&dp=10&tz=%2B02%3A00&nc=50885094&dT=2019-06-09T15%3A30%3A45.843 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://nokia-6300.smartovik.ru/soft/mobile-forex.html
Cookie: aid=w8nzR1z9Ce5vRgdsC8PMAk2wo0IqglpDFEiOMkGworBspWa2; test_cookie=CheckForPermission; cSyncDp7v2=1560087022; cSyncDp14v2=1560087022; cSyncDp17=1560087022; cSyncDp23=1560087022; cSyncDp24=1560087022; cSyncDp32=1560087022; cSyncDp35=1560087022; cSyncDp37=1560087022; cSyncDp45=1560087022; cSyncDp54v2=1560087022; cSyncDp62=1560087022; cSyncDp67v2=1560087022; cSyncDp68=1560087022; cSyncDp71=1560087022; cSyncDp74=1560087022; cSyncDp75=1560087022; cSyncDp77=1560087022; cSyncDp79=1560087022; cSyncDp84=1560087022; cSyncDp88=1560087022; cSyncDp92=1560087022; cSyncDp98=1560087022; cSyncDp101=1560087022; cSyncDp104=1560087022; cSyncDp111=1560087022; cSyncDp112=1560087022; _a_d3t6sf=dubhI7gd4Cq_Lfh73fPU0Xs_

                                         
                                         195.201.243.71
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sun, 09 Jun 2019 13:30:45 GMT
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: keep-alive
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda