www.taranov.ru/dfsroot/documents%20and%20settings/irebrov/local%20settings/temporary%20internet%20files/olk18/new%20ver.xls
92.53.96.109302 Found 205 B URL HTTP/1.1 www.taranov.ru/dfsroot/documents%20and%20settings/irebrov/local%20settings/temporary%20internet%20files/olk18/new%20ver.xls
IP 92.53.96.109:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 69263f7e0ee101705c61be7cbd4ca83c
e4759d6dfaa3181ef5cb4660d6002d297a48a2cd
cc31fde93e3d6eb65ee97a306b85cf8c946f8344100c59495fbd8f752f7ab44e
Analyzer Verdict Alert fortinet Malware
GET /dfsroot/documents%20and%20settings/irebrov/local%20settings/temporary%20internet%20files/olk18/new%20ver.xls HTTP/1.1
Host: www.taranov.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx/1.14.1
Date: Wed, 28 Sep 2022 08:54:42 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 205
Connection: keep-alive
Location: http://www.taranov.ru
firefox.settings.services.mozilla.com/v1/
143.204.55.115200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 28 Sep 2022 08:15:39 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: sR9YKTUb_p5yNBYrcFiKClBCETikdHjoOz5K8iKoCO2-pka13cXtDw==
Age: 2343
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7fb7c70f7f4e2cee27eb0e7d875931f7
98fca3817a551b1daecebae103a48e718b8b5a53
2a40f957a6b1734aa3f87cff51b673f0536732db15b09033dd604879692df349
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A40F957A6B1734AA3F87CFF51B673F0536732DB15B09033DD604879692DF349"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7197
Expires: Wed, 28 Sep 2022 10:54:39 GMT
Date: Wed, 28 Sep 2022 08:54:42 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
143.204.55.25200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 143.204.55.25:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 27 Sep 2022 09:24:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1SqL7Fvbm_jBE-6uoXmWsgkFp-nRkTw2YibN0659BSZrlo8_Vs_ezg==
age: 84629
X-Firefox-Spdy: h2
www.taranov.ru/
92.53.96.109200 OK 4.9 kB IP 92.53.96.109:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Non-ISO extended-ASCII text, with very long lines (443), with CRLF, LF line terminators
Hash ea04448d5d3a06189062ab98000549b1
3181fb1d8fcd32d14484361158799290f3cfe2e4
e483729e96260c44f01383e2d2bdea22882973c53d2d5616960fe52499cd5e0f
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: www.taranov.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 28 Sep 2022 08:54:42 GMT
Content-Type: text/html; charset=Windows-1251
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Generator: Nucleus CMS v3.51
Set-Cookie: lastVisit=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
Content-Encoding: gzip
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 08:54:42 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.taranov.ru/skins/raspberry/style.css
92.53.96.109200 OK 3.2 kB URL HTTP/1.1 www.taranov.ru/skins/raspberry/style.css
IP 92.53.96.109:0
File type HTML document, ASCII text, with CRLF line terminators
Hash 2557a281b70c197aa82a817c4f0e6808
707ad59b952cc42fe9353a6e81ea0b9c91b2111b
f0dd2a844e9f9b03b41c2b9c0175a9fdbc97c8e337b45092bbf5f09f265132a6
GET /skins/raspberry/style.css HTTP/1.1
Host: www.taranov.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.taranov.ru/
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 28 Sep 2022 08:54:43 GMT
Content-Type: text/css
Last-Modified: Wed, 20 Nov 2019 14:53:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5dd5537a-3183"
Expires: Sat, 29 Oct 2022 08:54:43 GMT
Cache-Control: max-age=2678400
Content-Encoding: gzip
pagead2.googlesyndication.com/pagead/show_ads.js
142.250.74.98200 OK 40 kB URL HTTP/1.1 pagead2.googlesyndication.com/pagead/show_ads.js
IP 142.250.74.98:0
File type ASCII text, with very long lines (2320)
Hash 49793081775ed73743431a1d5d378bdd
895091be35230773865c470dbba659ca3dc27ac8
12854ffeb88a556a13a15d0dd98a86d9a4874407fdb4d8551f05353afb9253cc
GET /pagead/show_ads.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.taranov.ru/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Date: Wed, 28 Sep 2022 08:54:43 GMT
Expires: Wed, 28 Sep 2022 08:54:43 GMT
Cache-Control: private, max-age=3600
Content-Type: text/javascript; charset=UTF-8
ETag: 146588099392466458
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 40166
X-XSS-Protection: 0
www.taranov.ru/media/1/st_957s.jpg
92.53.96.109200 OK 67 kB URL HTTP/1.1 www.taranov.ru/media/1/st_957s.jpg
IP 92.53.96.109:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=13, height=330, bps=170, PhotometricIntepretation=RGB, orientation=upper-left, width=500], baseline, precision 8, 500x330, components 3\012- data
Hash 1146e975af531c787475d218c54054c9
1af108ed18b2d9457b5db0d5e8a6e4a4fe78384f
6395efbe85617138dbc9167263d3b4ea835c28148c853e39ba8c96405be53495
GET /media/1/st_957s.jpg HTTP/1.1
Host: www.taranov.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.taranov.ru/
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 28 Sep 2022 08:54:43 GMT
Content-Type: image/jpeg
Content-Length: 66596
Last-Modified: Wed, 20 Nov 2019 14:53:52 GMT
Connection: keep-alive
ETag: "5dd55380-10424"
Expires: Sat, 29 Oct 2022 08:54:43 GMT
Cache-Control: max-age=2678400
Accept-Ranges: bytes
www.taranov.ru/media/1/TTT.jpg
92.53.96.109200 OK 62 kB URL HTTP/1.1 www.taranov.ru/media/1/TTT.jpg
IP 92.53.96.109:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=II*], progressive, precision 8, 500x333, components 3\012- data
Hash cd83960215ef26164f935b27e143443e
20025e5387ef50380a004c0f966c5bbaa62247b9
bfd0066639a7e4420748d5fcbdec21b7144601561a9fd50c458421b152bce47c
GET /media/1/TTT.jpg HTTP/1.1
Host: www.taranov.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.taranov.ru/
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 28 Sep 2022 08:54:43 GMT
Content-Type: image/jpeg
Content-Length: 62096
Last-Modified: Wed, 20 Nov 2019 14:53:52 GMT
Connection: keep-alive
ETag: "5dd55380-f290"
Expires: Sat, 29 Oct 2022 08:54:43 GMT
Cache-Control: max-age=2678400
Accept-Ranges: bytes
www.taranov.ru/skins/raspberry/img/header.jpg
92.53.96.109200 OK 33 kB URL HTTP/1.1 www.taranov.ru/skins/raspberry/img/header.jpg
IP 92.53.96.109:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, baseline, precision 8, 900x150, components 3\012- data
Hash 170e911c612163fa3995ac5907a01fcc
c3f0f51015a2ca440bb1f827e7f19916e1a461e6
21e6ee40eb4d36333185e4939cb9f092e1924af127637ced28f32a5c4d1d1f35
GET /skins/raspberry/img/header.jpg HTTP/1.1
Host: www.taranov.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.taranov.ru/skins/raspberry/style.css
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 28 Sep 2022 08:54:43 GMT
Content-Type: image/jpeg
Content-Length: 33388
Last-Modified: Wed, 20 Nov 2019 14:53:45 GMT
Connection: keep-alive
ETag: "5dd55379-826c"
Expires: Sat, 29 Oct 2022 08:54:43 GMT
Cache-Control: max-age=2678400
Accept-Ranges: bytes
cdn-rtb.sape.ru/rtb-b/js/995/2/106995.js
95.181.171.231200 OK 41 kB URL HTTP/1.1 cdn-rtb.sape.ru/rtb-b/js/995/2/106995.js
IP 95.181.171.231:0
File type ASCII text, with very long lines (5800)
Hash e4b1d0eca7ed2908672ba147d4557e2a
33be54e180c801e60277fc41a5a5288b6a458c83
8608e44cf42b0dfc7f67ff2dfec3d76d450f86d3ca35d9b8f0776cafb8a28a0a
GET /rtb-b/js/995/2/106995.js HTTP/1.1
Host: cdn-rtb.sape.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.taranov.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 28 Sep 2022 08:54:43 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: W/"04ce3c920ff2546e59d384216b6ca440"
Last-Modified: Tue, 27 Sep 2022 08:15:39 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 1718FA4FD23D8ABE
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Encoding: gzip
Expires: Wed, 28 Sep 2022 09:54:43 GMT
Cache-Control: max-age=3600
X-Cache-Status: MISS
www.taranov.ru/skins/raspberry/img/icon_comments.gif
92.53.96.109200 OK 70 B URL HTTP/1.1 www.taranov.ru/skins/raspberry/img/icon_comments.gif
IP 92.53.96.109:0
File type GIF image data, version 89a, 13 x 13\012- data
Hash 8baa2a95070d1524f1fa03605fc50654
a8358e913e00f7ac19a15d31e825bf419f893b67
6fcba8a1634008a6d19911f680a88c6b82a014d1bb74d9f72b6bdc5c8c78cee8
GET /skins/raspberry/img/icon_comments.gif HTTP/1.1
Host: www.taranov.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.taranov.ru/skins/raspberry/style.css
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 28 Sep 2022 08:54:43 GMT
Content-Type: image/gif
Content-Length: 70
Last-Modified: Wed, 20 Nov 2019 14:53:45 GMT
Connection: keep-alive
ETag: "5dd55379-46"
Expires: Sat, 29 Oct 2022 08:54:43 GMT
Cache-Control: max-age=2678400
Accept-Ranges: bytes
www.taranov.ru/skins/raspberry/img/icon.jpg
92.53.96.109200 OK 1.3 kB URL HTTP/1.1 www.taranov.ru/skins/raspberry/img/icon.jpg
IP 92.53.96.109:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 45x60, components 3\012- data
Hash ad05df6c140c5b1f8673d220b8cc6d31
47dadc99d8f0206c97469cf898d57d5e8e74f086
3d1d17ea0c10f8cf967e5c58869ab5c7b35f673c11fd8817e529b73810663c35
GET /skins/raspberry/img/icon.jpg HTTP/1.1
Host: www.taranov.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.taranov.ru/skins/raspberry/style.css
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 28 Sep 2022 08:54:43 GMT
Content-Type: image/jpeg
Content-Length: 1283
Last-Modified: Wed, 20 Nov 2019 14:53:45 GMT
Connection: keep-alive
ETag: "5dd55379-503"
Expires: Sat, 29 Oct 2022 08:54:43 GMT
Cache-Control: max-age=2678400
Accept-Ranges: bytes
www.taranov.ru/skins/raspberry/img/bullet.jpg
92.53.96.109200 OK 684 B URL HTTP/1.1 www.taranov.ru/skins/raspberry/img/bullet.jpg
IP 92.53.96.109:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 9x9, components 3\012- data
Hash ef4a9d27491d209513e396ba2cd1ce61
bd25d490f80e26f85f8e334adee103a025f40cd5
88dd930275a5df285fa81498198073793c1529ce74d4115367ac10f30074fb6a
GET /skins/raspberry/img/bullet.jpg HTTP/1.1
Host: www.taranov.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.taranov.ru/skins/raspberry/style.css
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 28 Sep 2022 08:54:43 GMT
Content-Type: image/jpeg
Content-Length: 684
Last-Modified: Wed, 20 Nov 2019 14:53:45 GMT
Connection: keep-alive
ETag: "5dd55379-2ac"
Expires: Sat, 29 Oct 2022 08:54:43 GMT
Cache-Control: max-age=2678400
Accept-Ranges: bytes
www.taranov.ru/skins/raspberry/img/h2bullet.gif
92.53.96.109200 OK 1.1 kB URL HTTP/1.1 www.taranov.ru/skins/raspberry/img/h2bullet.gif
IP 92.53.96.109:0
File type GIF image data, version 89a, 22 x 22\012- data
Hash 0952e4ea1953cb3aaca8d49f7bf6fbc6
cc972fd1fa15f911bb645ab52ab94654026143fe
be48c43232c91906d830dcef2486bd20d17d0716493a0710a5d0ad88e8c84e7b
GET /skins/raspberry/img/h2bullet.gif HTTP/1.1
Host: www.taranov.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.taranov.ru/skins/raspberry/style.css
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Wed, 28 Sep 2022 08:54:43 GMT
Content-Type: image/gif
Content-Length: 1054
Last-Modified: Wed, 20 Nov 2019 14:53:45 GMT
Connection: keep-alive
ETag: "5dd55379-41e"
Expires: Sat, 29 Oct 2022 08:54:43 GMT
Cache-Control: max-age=2678400
Accept-Ranges: bytes
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 4ba8f7fdbd4d1d5ed592e1ebc1d0217f
78ecb7a9a8ae7135ff6049f5d5ff10dfa0ea96aa
b3ec1d236f8500a59b1b331ccd64b85aa580b3325dd4b3e2bb5b4cb287ceb962
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B3EC1D236F8500A59B1B331CCD64B85AA580B3325DD4B3E2BB5B4CB287CEB962"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8399
Expires: Wed, 28 Sep 2022 11:14:42 GMT
Date: Wed, 28 Sep 2022 08:54:43 GMT
Connection: keep-alive
www.acint.net/aci.js
185.12.125.25200 OK 7.5 kB IP 185.12.125.25:0
File type ASCII text, with very long lines (1408)
Hash ae0aab6c5a2ae2e1168e74f6e6ae4741
2c00f69ee4bbe2ec96c0f7bb33b5f827a6195af8
a47a88a9b6c7635e5074c25c6e3c92f399fdf8772376e94f077167241e59f9de
GET /aci.js HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.taranov.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:43 GMT
content-type: application/x-javascript
content-length: 7461
last-modified: Tue, 22 Mar 2022 06:39:32 GMT
etag: "62396f24-1d25"
content-encoding: gzip
expires: Wed, 28 Sep 2022 20:54:43 GMT
cache-control: max-age=43200
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A106995%2C%22sc%22%3A0%2C%22pl%22%3A700491%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281
185.12.125.25200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A106995%2C%22sc%22%3A0%2C%22pl%22%3A700491%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281
IP 185.12.125.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A106995%2C%22sc%22%3A0%2C%22pl%22%3A700491%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.taranov.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=wQO4iWM0C9NjjgSC7uURArI6Xd+Anm7TLPUsj2OdVOntqI8k; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A106995%2C%22sc%22%3A0%2C%22pl%22%3A700491%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281
185.12.125.25200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A106995%2C%22sc%22%3A0%2C%22pl%22%3A700491%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281
IP 185.12.125.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A106995%2C%22sc%22%3A0%2C%22pl%22%3A700491%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.taranov.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=uQx9GWM0C9NRoADeMBHBAhWw/bvo89pMoE/j6aq3b1ezJh2Z; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A106995%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281
185.12.125.25200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A106995%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281
IP 185.12.125.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A106995%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.taranov.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=wQO4iWM0C9NjjgSC7uUSAiBEemEU08w9t8+c4N+DIYy7Bk32; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A106995%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1062%7D&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281
185.12.125.25200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A106995%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1062%7D&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281
IP 185.12.125.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A106995%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1062%7D&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.taranov.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=fwAAAWM0C9NRoADeMBHHAj4JJR7VOEyoFoy1yyX3xjefQTVn; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/mc/?dp=10
185.12.125.25302 Moved Temporarily 142 B IP 185.12.125.25:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /mc/?dp=10 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.taranov.ru/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Wed, 28 Sep 2022 08:54:43 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/mc/?dp=10
www.acint.net/hit/?v=0.4.0&uid=6781ec5c-2131-4c9f-9b0e-fe515a3f5ee4&dp=10&tz=%2B00%3A00&nc=64261662&u=http%3A%2F%2Fwww.taranov.ru%2F&r=&rs=1280x1024&t=%D0%9A%D1%83%D0%BB%D0%B8%D0%BD%D0%B0%D1%80%D0%B8%D1%8F%20%D0%98%D0%B2%D0%B0%D0%BD%D0%B0%20%D0%A2%D0%B0%D1%80%D0%B0%D0%BD%D0%BE%D0%B2%D0%B0%20-%20%D0%A0%D0%B5%D1%86%D0%B5%D0%BF%D1%82%D1%8B%20%D1%81%D0%BB%D0%B0%D0%B4%D0%BE%D1%81%D1%82%D0%B5%D0%B9%20%D0%B8%20%D0%B4%D0%B5%D1%81%D0%B5%D1%80%D1%82%D0%BE%D0%B2&oE=1&oP=1&dT=2022-09-28T08%3A54%3A40.892&fu=29233837-4c09-4de7-a6b1-2625aadbf966
185.12.125.25302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/hit/?v=0.4.0&uid=6781ec5c-2131-4c9f-9b0e-fe515a3f5ee4&dp=10&tz=%2B00%3A00&nc=64261662&u=http%3A%2F%2Fwww.taranov.ru%2F&r=&rs=1280x1024&t=%D0%9A%D1%83%D0%BB%D0%B8%D0%BD%D0%B0%D1%80%D0%B8%D1%8F%20%D0%98%D0%B2%D0%B0%D0%BD%D0%B0%20%D0%A2%D0%B0%D1%80%D0%B0%D0%BD%D0%BE%D0%B2%D0%B0%20-%20%D0%A0%D0%B5%D1%86%D0%B5%D0%BF%D1%82%D1%8B%20%D1%81%D0%BB%D0%B0%D0%B4%D0%BE%D1%81%D1%82%D0%B5%D0%B9%20%D0%B8%20%D0%B4%D0%B5%D1%81%D0%B5%D1%80%D1%82%D0%BE%D0%B2&oE=1&oP=1&dT=2022-09-28T08%3A54%3A40.892&fu=29233837-4c09-4de7-a6b1-2625aadbf966
IP 185.12.125.25:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /hit/?v=0.4.0&uid=6781ec5c-2131-4c9f-9b0e-fe515a3f5ee4&dp=10&tz=%2B00%3A00&nc=64261662&u=http%3A%2F%2Fwww.taranov.ru%2F&r=&rs=1280x1024&t=%D0%9A%D1%83%D0%BB%D0%B8%D0%BD%D0%B0%D1%80%D0%B8%D1%8F%20%D0%98%D0%B2%D0%B0%D0%BD%D0%B0%20%D0%A2%D0%B0%D1%80%D0%B0%D0%BD%D0%BE%D0%B2%D0%B0%20-%20%D0%A0%D0%B5%D1%86%D0%B5%D0%BF%D1%82%D1%8B%20%D1%81%D0%BB%D0%B0%D0%B4%D0%BE%D1%81%D1%82%D0%B5%D0%B9%20%D0%B8%20%D0%B4%D0%B5%D1%81%D0%B5%D1%80%D1%82%D0%BE%D0%B2&oE=1&oP=1&dT=2022-09-28T08%3A54%3A40.892&fu=29233837-4c09-4de7-a6b1-2625aadbf966 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.taranov.ru/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Wed, 28 Sep 2022 08:54:43 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/hit/?v=0.4.0&uid=6781ec5c-2131-4c9f-9b0e-fe515a3f5ee4&dp=10&tz=%2B00%3A00&nc=64261662&u=http%3A%2F%2Fwww.taranov.ru%2F&r=&rs=1280x1024&t=%D0%9A%D1%83%D0%BB%D0%B8%D0%BD%D0%B0%D1%80%D0%B8%D1%8F%20%D0%98%D0%B2%D0%B0%D0%BD%D0%B0%20%D0%A2%D0%B0%D1%80%D0%B0%D0%BD%D0%BE%D0%B2%D0%B0%20-%20%D0%A0%D0%B5%D1%86%D0%B5%D0%BF%D1%82%D1%8B%20%D1%81%D0%BB%D0%B0%D0%B4%D0%BE%D1%81%D1%82%D0%B5%D0%B9%20%D0%B8%20%D0%B4%D0%B5%D1%81%D0%B5%D1%80%D1%82%D0%BE%D0%B2&oE=1&oP=1&dT=2022-09-28T08%3A54%3A40.892&fu=29233837-4c09-4de7-a6b1-2625aadbf966
www.acint.net/pxl/1?dp=16&id=106995.700491.164138895.0.0.0&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281
185.12.125.25200 OK 43 B URL HTTP/2 www.acint.net/pxl/1?dp=16&id=106995.700491.164138895.0.0.0&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281
IP 185.12.125.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/1?dp=16&id=106995.700491.164138895.0.0.0&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.taranov.ru/
Cookie: aid=fwAAAWM0C9NRoADeMBHHAj4JJR7VOEyoFoy1yyX3xjefQTVn
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A106995%2C%22sc%22%3A0%2C%22pl%22%3A700491%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281
185.12.125.25200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A106995%2C%22sc%22%3A0%2C%22pl%22%3A700491%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281
IP 185.12.125.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A106995%2C%22sc%22%3A0%2C%22pl%22%3A700491%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.taranov.ru/
Cookie: aid=fwAAAWM0C9NRoADeMBHHAj4JJR7VOEyoFoy1yyX3xjefQTVn
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 63449bf7eaa399f0857c456a48d74855
5915d9ca251576ccb7f219daad1798572dfc5581
0152086418b20ed86c03519b195f284a2c95bd7620139f16be5aa6c6667e8c29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0152086418B20ED86C03519B195F284A2C95BD7620139F16BE5AA6C6667E8C29"
Last-Modified: Tue, 27 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16885
Expires: Wed, 28 Sep 2022 13:36:08 GMT
Date: Wed, 28 Sep 2022 08:54:43 GMT
Connection: keep-alive
www.acint.net/pxl/1?dp=16&id=106995.700492.164138904.0.0.0&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281
185.12.125.25200 OK 43 B URL HTTP/2 www.acint.net/pxl/1?dp=16&id=106995.700492.164138904.0.0.0&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281
IP 185.12.125.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/1?dp=16&id=106995.700492.164138904.0.0.0&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.taranov.ru/
Cookie: aid=fwAAAWM0C9NRoADeMBHHAj4JJR7VOEyoFoy1yyX3xjefQTVn
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/hit/?v=0.4.0&uid=6781ec5c-2131-4c9f-9b0e-fe515a3f5ee4&dp=10&tz=%2B00%3A00&nc=64261662&u=http%3A%2F%2Fwww.taranov.ru%2F&r=&rs=1280x1024&t=%D0%9A%D1%83%D0%BB%D0%B8%D0%BD%D0%B0%D1%80%D0%B8%D1%8F%20%D0%98%D0%B2%D0%B0%D0%BD%D0%B0%20%D0%A2%D0%B0%D1%80%D0%B0%D0%BD%D0%BE%D0%B2%D0%B0%20-%20%D0%A0%D0%B5%D1%86%D0%B5%D0%BF%D1%82%D1%8B%20%D1%81%D0%BB%D0%B0%D0%B4%D0%BE%D1%81%D1%82%D0%B5%D0%B9%20%D0%B8%20%D0%B4%D0%B5%D1%81%D0%B5%D1%80%D1%82%D0%BE%D0%B2&oE=1&oP=1&dT=2022-09-28T08%3A54%3A40.892&fu=29233837-4c09-4de7-a6b1-2625aadbf966
185.12.125.25200 OK 43 B URL HTTP/2 www.acint.net/hit/?v=0.4.0&uid=6781ec5c-2131-4c9f-9b0e-fe515a3f5ee4&dp=10&tz=%2B00%3A00&nc=64261662&u=http%3A%2F%2Fwww.taranov.ru%2F&r=&rs=1280x1024&t=%D0%9A%D1%83%D0%BB%D0%B8%D0%BD%D0%B0%D1%80%D0%B8%D1%8F%20%D0%98%D0%B2%D0%B0%D0%BD%D0%B0%20%D0%A2%D0%B0%D1%80%D0%B0%D0%BD%D0%BE%D0%B2%D0%B0%20-%20%D0%A0%D0%B5%D1%86%D0%B5%D0%BF%D1%82%D1%8B%20%D1%81%D0%BB%D0%B0%D0%B4%D0%BE%D1%81%D1%82%D0%B5%D0%B9%20%D0%B8%20%D0%B4%D0%B5%D1%81%D0%B5%D1%80%D1%82%D0%BE%D0%B2&oE=1&oP=1&dT=2022-09-28T08%3A54%3A40.892&fu=29233837-4c09-4de7-a6b1-2625aadbf966
IP 185.12.125.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hit/?v=0.4.0&uid=6781ec5c-2131-4c9f-9b0e-fe515a3f5ee4&dp=10&tz=%2B00%3A00&nc=64261662&u=http%3A%2F%2Fwww.taranov.ru%2F&r=&rs=1280x1024&t=%D0%9A%D1%83%D0%BB%D0%B8%D0%BD%D0%B0%D1%80%D0%B8%D1%8F%20%D0%98%D0%B2%D0%B0%D0%BD%D0%B0%20%D0%A2%D0%B0%D1%80%D0%B0%D0%BD%D0%BE%D0%B2%D0%B0%20-%20%D0%A0%D0%B5%D1%86%D0%B5%D0%BF%D1%82%D1%8B%20%D1%81%D0%BB%D0%B0%D0%B4%D0%BE%D1%81%D1%82%D0%B5%D0%B9%20%D0%B8%20%D0%B4%D0%B5%D1%81%D0%B5%D1%80%D1%82%D0%BE%D0%B2&oE=1&oP=1&dT=2022-09-28T08%3A54%3A40.892&fu=29233837-4c09-4de7-a6b1-2625aadbf966 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.taranov.ru/
Connection: keep-alive
Cookie: aid=fwAAAWM0C9NRoADeMBHHAj4JJR7VOEyoFoy1yyX3xjefQTVn
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ssp-rtb.sape.ru/data/?callback=sapeRTB_63340bd0e_25570049&srtbid=106995&scids=164138895&sx=1268&sy=939&ref=&u=http%3A%2F%2Fwww.taranov.ru%2F&allimps=0&fl=0&v=3&tz=%2B00%3A00
193.3.184.212200 OK 50 B URL HTTP/1.1 ssp-rtb.sape.ru/data/?callback=sapeRTB_63340bd0e_25570049&srtbid=106995&scids=164138895&sx=1268&sy=939&ref=&u=http%3A%2F%2Fwww.taranov.ru%2F&allimps=0&fl=0&v=3&tz=%2B00%3A00
IP 193.3.184.212:0
File type ASCII text, with no line terminators
Hash df09fe756d924aafed360b8e31e6a3cb
62eff1b750b83b4322b625e3d1bb10ef175ae8f2
50acf81c6efa8e02caac5685f97ac39a1e515d735773657f4a0c025bc0d1e162
GET /data/?callback=sapeRTB_63340bd0e_25570049&srtbid=106995&scids=164138895&sx=1268&sy=939&ref=&u=http%3A%2F%2Fwww.taranov.ru%2F&allimps=0&fl=0&v=3&tz=%2B00%3A00 HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.taranov.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 28 Sep 2022 08:54:43 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 50
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Content-Encoding: gzip
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=wQO40GM0C9NxBgBASF7QAoF+50jNRwSUH7gcNmq2hr2BbkDN; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
193.3.184.212302 Moved Temporarily 142 B URL HTTP/1.1 ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
IP 193.3.184.212:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Wed, 28 Sep 2022 08:54:43 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/match?dp=14&euid=C5B803C1D30B346361008B820249D346
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=wQO4xWM0C9OCiwBhRtNJArz0ekJq5Kh2pv914goj8cqIZHeK; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.115200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Wed, 28 Sep 2022 08:29:33 GMT
Expires: Wed, 28 Sep 2022 09:22:54 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: C2ZsveZBBZ_PTf_jYL7rSY2vXAmP9M1SBID1ZRFF1qcyOvQeLKiywg==
Age: 1510
www.acint.net/pxl/3?dp=16&id=106995.700491.164138895.0.0.0&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281
185.12.125.25200 OK 43 B URL HTTP/2 www.acint.net/pxl/3?dp=16&id=106995.700491.164138895.0.0.0&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281
IP 185.12.125.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/3?dp=16&id=106995.700491.164138895.0.0.0&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355281 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.taranov.ru/
Cookie: aid=fwAAAWM0C9NRoADeMBHHAj4JJR7VOEyoFoy1yyX3xjefQTVn; cSyncDp7v2=1664355283; cSyncDp14v3=1664355283; cSyncDp17=1664355283; cSyncDp32=1664355283; cSyncDp45v3=1664355283; cSyncDp53=1664355283; cSyncDp54v2=1664355283; cSyncDp62=1664355283; cSyncDp67v2=1664355283; cSyncDp68=1664355283; cSyncDp71=1664355283; cSyncDp77=1664355283; cSyncDp84=1664355283; cSyncDp85=1664355283; cSyncDp95v3=1664355283; cSyncDp101=1664355283; cSyncDp104v2=1664355283; cSyncDp107=1664355283; cSyncDp110=1664355283; cSyncDp111v2=1664355283; cSyncDp112v2=1664355283; cSyncDp125v2=1664355283; cSyncDp126=1664355283; cSyncDp127=1664355283; cSyncDp129=1664355283; cSyncDp136v2=1664355283; cSyncDp138=1664355283; cSyncDp144=1664355283; cSyncDp146=1664355283; cSyncDp148=1664355283; cSyncDp149=1664355283; cSyncDp151=1664355283; cSyncDp178=1664355283; cSyncDp179=1664355283; cSyncDp186=1664355283; cSyncDp221=1664355283
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5e3075fd11903cc150ab603432add54c
f16ce73ef2306ec3037dd1d2397b732e9cce9e0d
7ad313d8dd0deffef42ba3d5230fdb2cad64772748476f294f41011944056aeb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7AD313D8DD0DEFFEF42BA3D5230FDB2CAD64772748476F294F41011944056AEB"
Last-Modified: Tue, 27 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9858
Expires: Wed, 28 Sep 2022 11:39:01 GMT
Date: Wed, 28 Sep 2022 08:54:43 GMT
Connection: keep-alive
www.taranov.ru/favicon.ico
92.53.96.109302 Found 205 B URL HTTP/1.1 www.taranov.ru/favicon.ico
IP 92.53.96.109:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 69263f7e0ee101705c61be7cbd4ca83c
e4759d6dfaa3181ef5cb4660d6002d297a48a2cd
cc31fde93e3d6eb65ee97a306b85cf8c946f8344100c59495fbd8f752f7ab44e
GET /favicon.ico HTTP/1.1
Host: www.taranov.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.taranov.ru/
Cookie: fid=29233837-4c09-4de7-a6b1-2625aadbf966
HTTP/1.1 302 Found
Server: nginx/1.14.1
Date: Wed, 28 Sep 2022 08:54:43 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 205
Connection: keep-alive
Location: http://www.taranov.ru
dm-eu.hybrid.ai/match?id=106&vid=0100007FD30B3463DE00A05102C71130
37.18.103.16204 No Content 0 B URL HTTP/2 dm-eu.hybrid.ai/match?id=106&vid=0100007FD30B3463DE00A05102C71130
IP 37.18.103.16:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?id=106&vid=0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: dm-eu.hybrid.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 28 Sep 2022 08:54:43 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
set-cookie: vid=a269ac8227534e26994d; expires=Thu, 28 Sep 2023 08:54:42 GMT; domain=.hybrid.ai; path=/; samesite=none
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 529
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: Hybrid Web Server
X-Firefox-Spdy: h2
acint.net/match?dp=14&euid=C5B803C1D30B346361008B820249D346
185.12.125.25200 OK 43 B URL HTTP/2 acint.net/match?dp=14&euid=C5B803C1D30B346361008B820249D346
IP 185.12.125.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=14&euid=C5B803C1D30B346361008B820249D346 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=fwAAAWM0C9NRoADeMBHHAj4JJR7VOEyoFoy1yyX3xjefQTVn; cSyncDp7v2=1664355283; cSyncDp14v3=1664355283; cSyncDp17=1664355283; cSyncDp32=1664355283; cSyncDp45v3=1664355283; cSyncDp53=1664355283; cSyncDp54v2=1664355283; cSyncDp62=1664355283; cSyncDp67v2=1664355283; cSyncDp68=1664355283; cSyncDp71=1664355283; cSyncDp77=1664355283; cSyncDp84=1664355283; cSyncDp85=1664355283; cSyncDp95v3=1664355283; cSyncDp101=1664355283; cSyncDp104v2=1664355283; cSyncDp107=1664355283; cSyncDp110=1664355283; cSyncDp111v2=1664355283; cSyncDp112v2=1664355283; cSyncDp125v2=1664355283; cSyncDp126=1664355283; cSyncDp127=1664355283; cSyncDp129=1664355283; cSyncDp136v2=1664355283; cSyncDp138=1664355283; cSyncDp144=1664355283; cSyncDp146=1664355283; cSyncDp148=1664355283; cSyncDp149=1664355283; cSyncDp151=1664355283; cSyncDp178=1664355283; cSyncDp179=1664355283; cSyncDp186=1664355283; cSyncDp221=1664355283
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.upravel.com/sape/sync
148.251.129.43302 Found 0 B URL HTTP/2 sync.upravel.com/sape/sync
IP 148.251.129.43:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 28 Sep 2022 08:54:43 GMT
content-type: image/png
content-length: 0
location: https://sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
set-cookie: session_tptc=1664355283791;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
session_tptc-legacy=1664355283791;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 772b3e5730f255bf1c9df2e6660a9efe
4d2513e851b38b24ba4bf1b873efaa44215b6745
dd731f2c380dd6922953331bef0bbb35f556c2b4d5eaa72e44960fa5167abe34
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DD731F2C380DD6922953331BEF0BBB35F556C2B4D5EAA72E44960FA5167ABE34"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14891
Expires: Wed, 28 Sep 2022 13:02:54 GMT
Date: Wed, 28 Sep 2022 08:54:43 GMT
Connection: keep-alive
df.c4.ba.a1.top.mail.ru/counter?id=1724189;t=60;js=13;r=;j=false;s=1280*1024;d=24;rand=0.4270326534881925
95.163.52.67302 Moved Temporarily 0 B URL HTTP/1.1 df.c4.ba.a1.top.mail.ru/counter?id=1724189;t=60;js=13;r=;j=false;s=1280*1024;d=24;rand=0.4270326534881925
IP 95.163.52.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?id=1724189;t=60;js=13;r=;j=false;s=1280*1024;d=24;rand=0.4270326534881925 HTTP/1.1
Host: df.c4.ba.a1.top.mail.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.taranov.ru/
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Wed, 28 Sep 2022 08:54:43 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=60
Location: https://top-fwz1.mail.ru/counter?id=1724189;t=60;js=13;r=;j=false;s=1280*1024;d=24;rand=0.4270326534881925
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: *
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: private, no-cache, no-store, max-age=0
Pragma: no-cache
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash c18823050f86339eaa73ddb1bf80d64c
ac4ee81f59f706cee8a74458d498bbc20d8d351a
9a505647517bd02d8ff994fd4ad98dc2f4b519916145b0c327691420c1084c46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4245
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:54:43 GMT
Last-Modified: Wed, 28 Sep 2022 07:43:58 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash e3fd0fb0c07470b45e5477a9177cfd94
70bade5b1e91dcaeb0bdc2e1fbb76b57e3e203b0
2d513a5007fc2dec60ab066a41a088ea5a163fc3fc105b82ab7107be716f6d5e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3149
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:54:43 GMT
Last-Modified: Wed, 28 Sep 2022 08:02:14 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 280
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d6d3ddb59c44535bd05d8bce91e4e0ee
47fd85d5d0a0052347f45297d186a5253ff62f88
06234610a598215afd431090967575d372673a2001ee7993e383a825be302e07
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "06234610A598215AFD431090967575D372673A2001EE7993E383A825BE302E07"
Last-Modified: Tue, 27 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4098
Expires: Wed, 28 Sep 2022 10:03:01 GMT
Date: Wed, 28 Sep 2022 08:54:43 GMT
Connection: keep-alive
stat.adlabs.ru/merge_gpsid/?sid=50&id=0100007FD30B3463DE00A05102C71130
109.248.237.36302 Found 0 B URL HTTP/2 stat.adlabs.ru/merge_gpsid/?sid=50&id=0100007FD30B3463DE00A05102C71130
IP 109.248.237.36:0
ASN #201009 Centre of server systems Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /merge_gpsid/?sid=50&id=0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: stat.adlabs.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 28 Sep 2022 08:42:14 GMT
content-length: 0
location: //adlmerge.com/merge_gpsid/?sid=50&id=0100007FD30B3463DE00A05102C71130
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP 104.18.21.226:0
Hash ce22eb3de3844c1bab4fddcb997ea5ed
9ac710feed536da786ce3d4de4bf14625459fd60
f380b16fabf3d9f382627d3ac37efa0c5f49415bb4a01df883fc8a8a08bc1411
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:54:43 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sun, 02 Oct 2022 07:35:33 GMT
ETag: "9ac710feed536da786ce3d4de4bf14625459fd60"
Last-Modified: Wed, 28 Sep 2022 07:35:34 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 678
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 751b418bf886b51e-OSL
sync.republer.com/match?dsp=sape
23.88.82.46204 No Content 0 B URL HTTP/2 sync.republer.com/match?dsp=sape
IP 23.88.82.46:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?dsp=sape HTTP/1.1
Host: sync.republer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Wed, 28 Sep 2022 08:54:43 GMT
strict-transport-security: max-age=0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 6ab8b69fade235ccf1a15d2cac6dd95e
37c426c0e6940920c4478855c6bb610731edd316
025fc814f74bed6fcfc2a4c25b670c1d538d06c5ce07af13d3f9f8354ca34604
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:54:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6c90ac9cd0f5ab80aac7b5c2de59dd18
a23b17626f7d97216bd5a4fc3facd90b42253eda
4f7110cb7d9b7a3f36e1b7c576955a5a9f79ebc6d0d8383a62e367ac7287d432
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4F7110CB7D9B7A3F36E1B7C576955A5A9F79EBC6D0D8383A62E367AC7287D432"
Last-Modified: Mon, 26 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11042
Expires: Wed, 28 Sep 2022 11:58:45 GMT
Date: Wed, 28 Sep 2022 08:54:43 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9bdcfcfc1d299171765f8a778deabaf6
218d29dcd9d17ac7693b5f7ce37d827b21cc53e5
1d3b837a90506ae8380c065e0ea82ea37d0d28eaaa638f94f56cc99c656fb9ea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D3B837A90506AE8380C065E0EA82EA37D0D28EAAA638F94F56CC99C656FB9EA"
Last-Modified: Mon, 26 Sep 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3680
Expires: Wed, 28 Sep 2022 09:56:03 GMT
Date: Wed, 28 Sep 2022 08:54:43 GMT
Connection: keep-alive
a.utraff.com/sync?ssp=sape
172.67.217.151204 No Content 0 B URL HTTP/2 a.utraff.com/sync?ssp=sape
IP 172.67.217.151:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?ssp=sape HTTP/1.1
Host: a.utraff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 28 Sep 2022 08:54:43 GMT
content-type: text/plain
set-cookie: preutid=1; Expires=Fri, 28 Oct 2022 11:54:43 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/
preutid=1; Expires=Fri, 28 Oct 2022 11:54:43 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-expose-headers: Content-Length,Content-Range
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SUPnyzVcKJH13u2qMsfZwk%2B%2Bdvt2Sr4w30xQpaHDKA66M9rXr%2BPmUckOTUcdPFXgx02yikcTxDyqqB4TwgCkWpL2jYFuoBivCHvR9VwnnSnyYQXl4qfZrSc3x3eJSaE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 751b418c2c0d0b3d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ads.adlook.me/csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
176.122.21.130302 Found 0 B URL HTTP/2 ads.adlook.me/csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
IP 176.122.21.130:0
ASN #48096 Enterprise Cloud Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://acint.net/match?dp=110&euid=b527a3ef92d34e37898594976f99977a
server: Kestrel
set-cookie: adlm_userId=b527a3ef92d34e37898594976f99977a; expires=Wed, 27 Sep 2023 21:00:00 GMT; path=/; SameSite=None; secure
date: Wed, 28 Sep 2022 08:54:43 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
104.18.20.226200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.20.226:0
Hash f045266274f4c8bb3fb7309b1c4a12dc
60e81c60c9b3a9ac5c04b9a0541b0441f4149c70
b538dc7c1845913f5bb66bad99bf13f5c80acaf7ce5003c0f2c9028ba023bd6f
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:54:43 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sun, 02 Oct 2022 06:34:01 GMT
ETag: "60e81c60c9b3a9ac5c04b9a0541b0441f4149c70"
Last-Modified: Wed, 28 Sep 2022 06:34:02 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1039
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 751b418c7f10fac0-OSL
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 668e7163919445c00798cc20b85350f7
2b57ef1ebdc873a19bd2deb8a7aa1c5e915283d1
a35265fc895082c3f19fedacd320990df05278c73fb11797b992811fbecb517b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A35265FC895082C3F19FEDACD320990DF05278C73FB11797B992811FBECB517B"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11170
Expires: Wed, 28 Sep 2022 12:00:53 GMT
Date: Wed, 28 Sep 2022 08:54:43 GMT
Connection: keep-alive
ocsp.globalsign.com/gsgccr3dvtlsca2020
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP 104.18.20.226:0
Hash c2bb9e5ffc1003f1926d64f42e528456
e0ecc8684c895f5be6f03fc8573625c4f562cd47
1792f2269edaba3e9f02d66f2663aa8e32d37fd13664f27a5e8d2d07a1e1bbba
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:54:43 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sun, 02 Oct 2022 07:30:35 GMT
ETag: "e0ecc8684c895f5be6f03fc8573625c4f562cd47"
Last-Modified: Wed, 28 Sep 2022 07:30:36 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1887
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 751b418c89af0b55-OSL
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 24867fbb749bd48170032211ddb6068d
1de7a0aa3ea98479689b437ff133cf314e9aaa94
c86a644408a68c10f57ded9f7d7cf4296b9aa804db55c68db74f3036525bb3b4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C86A644408A68C10F57DED9F7D7CF4296B9AA804DB55C68DB74F3036525BB3B4"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6696
Expires: Wed, 28 Sep 2022 10:46:19 GMT
Date: Wed, 28 Sep 2022 08:54:43 GMT
Connection: keep-alive
sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0100007FD30B3463DE00A05102C71130
78.46.100.125302 Found 0 B URL HTTP/2 sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0100007FD30B3463DE00A05102C71130
IP 78.46.100.125:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: sync.1dmp.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 28 Sep 2022 08:54:43 GMT
content-length: 0
expires: 0
cache-control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
set-cookie: uid=324a1760-3f0b-11ed-8677-901b0e934d81; Version=1; Path=/; Domain=.1dmp.io; Expires=Thu, 28 Sep 2023 08:54:43 GMT; SameSite=None; Secure
uid-legacy=324a1760-3f0b-11ed-8677-901b0e934d81; Version=1; Path=/; Domain=.1dmp.io; Expires=Thu, 28 Sep 2023 08:54:43 GMT
location: /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0100007FD30B3463DE00A05102C71130&cs=1
X-Firefox-Spdy: h2
ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
185.147.80.35302 Found 0 B URL HTTP/1.1 ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
IP 185.147.80.35:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D HTTP/1.1
Host: ssp.bestssp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.16.1
Date: Wed, 28 Sep 2022 08:54:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.acint.net/match?dp=95&euid=VIWMIDJD
Set-Cookie: uid=VIWMIDJD; Expires=Wed, 28 Sep 2032 00:00:00 GMT; mf2=1; Expires=Fri, 28 Oct 2022 00:00:00 GMT;
s.uuidksinc.net/match/396/?remote_uid=0100007FD30B3463DE00A05102C71130
31.220.27.135302 Found 0 B URL HTTP/2 s.uuidksinc.net/match/396/?remote_uid=0100007FD30B3463DE00A05102C71130
IP 31.220.27.135:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/396/?remote_uid=0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: s.uuidksinc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.19.0
date: Wed, 28 Sep 2022 08:54:43 GMT
content-length: 0
location: https://www.acint.net/match?dp=127&euid=SDANNC5P4YcSe2hoHlB8
set-cookie: jcsuuid=SDANNC5P4YcSe2hoHlB8; expires=Thu, 28 Sep 2023 08:54:43 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/mc/?dp=10
185.12.125.25200 OK 1.5 kB IP 185.12.125.25:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 3e490c7eee1ffbc4b2d26bbf6a4fe72f
3bee616a5c46903b227a194b880f62e52066315d
4b0d1b531d096caf4bc875f57bd309fb961eba4b1466255762f9e5d109058b05
GET /mc/?dp=10 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.taranov.ru/
Connection: keep-alive
Cookie: aid=fwAAAWM0C9NRoADeMBHHAj4JJR7VOEyoFoy1yyX3xjefQTVn
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:43 GMT
content-type: text/html
set-cookie: cSyncDp7v2=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp14v3=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp17=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp32=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp45v3=1664355283; expires=Thu, 29-Sep-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp53=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp54v2=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp62=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp67v2=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp68=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp71=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp77=1664355283; expires=Wed, 12-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp84=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp85=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp95v3=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp101=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp104v2=1664355283; expires=Wed, 12-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp107=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp110=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp111v2=1664355283; expires=Wed, 12-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp112v2=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp125v2=1664355283; expires=Thu, 13-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp126=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp127=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp129=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp136v2=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp138=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp144=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp146=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp148=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp149=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp151=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp178=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp179=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp186=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp221=1664355283; expires=Fri, 28-Oct-22 08:54:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
content-encoding: gzip
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/managed/js/adsense/m202209220101/show_ads_impl_with_ama_fy2021.js?client=pub-2710681560546448&plah=www.taranov.ru
142.250.74.98200 OK 126 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/managed/js/adsense/m202209220101/show_ads_impl_with_ama_fy2021.js?client=pub-2710681560546448&plah=www.taranov.ru
IP 142.250.74.98:0
File type ASCII text, with very long lines (5899)
Size 126 kB (125493 bytes)
Hash 3ceda0dc5adc28b44435abd16224c164
1355a2b0f01bfbaca94eb62a47fca51d6d14040c
859742ec159db943da8daadcc6577df414358be114290a44711b3cc66ea95fb4
GET /pagead/managed/js/adsense/m202209220101/show_ads_impl_with_ama_fy2021.js?client=pub-2710681560546448&plah=www.taranov.ru HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.taranov.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Wed, 28 Sep 2022 08:54:43 GMT
expires: Wed, 28 Sep 2022 08:54:43 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 5627250767161637144
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 125493
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
acint.net/match?dp=110&euid=b527a3ef92d34e37898594976f99977a
185.12.125.25200 OK 43 B URL HTTP/2 acint.net/match?dp=110&euid=b527a3ef92d34e37898594976f99977a
IP 185.12.125.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=110&euid=b527a3ef92d34e37898594976f99977a HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=fwAAAWM0C9NRoADeMBHHAj4JJR7VOEyoFoy1yyX3xjefQTVn; cSyncDp7v2=1664355283; cSyncDp14v3=1664355283; cSyncDp17=1664355283; cSyncDp32=1664355283; cSyncDp45v3=1664355283; cSyncDp53=1664355283; cSyncDp54v2=1664355283; cSyncDp62=1664355283; cSyncDp67v2=1664355283; cSyncDp68=1664355283; cSyncDp71=1664355283; cSyncDp77=1664355283; cSyncDp84=1664355283; cSyncDp85=1664355283; cSyncDp95v3=1664355283; cSyncDp101=1664355283; cSyncDp104v2=1664355283; cSyncDp107=1664355283; cSyncDp110=1664355283; cSyncDp111v2=1664355283; cSyncDp112v2=1664355283; cSyncDp125v2=1664355283; cSyncDp126=1664355283; cSyncDp127=1664355283; cSyncDp129=1664355283; cSyncDp136v2=1664355283; cSyncDp138=1664355283; cSyncDp144=1664355283; cSyncDp146=1664355283; cSyncDp148=1664355283; cSyncDp149=1664355283; cSyncDp151=1664355283; cSyncDp178=1664355283; cSyncDp179=1664355283; cSyncDp186=1664355283; cSyncDp221=1664355283
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0100007FD30B3463DE00A05102C71130&cs=1
78.46.100.125200 OK 35 B URL HTTP/2 sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0100007FD30B3463DE00A05102C71130&cs=1
IP 78.46.100.125:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0100007FD30B3463DE00A05102C71130&cs=1 HTTP/1.1
Host: sync.1dmp.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: uid=324a1760-3f0b-11ed-8677-901b0e934d81
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 08:54:43 GMT
content-type: image/gif
content-length: 35
expires: 0
cache-control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
set-cookie: uid=324a1760-3f0b-11ed-8677-901b0e934d81; Version=1; Path=/; Domain=.1dmp.io; Expires=Thu, 28 Sep 2023 08:54:43 GMT; SameSite=None; Secure
uid-legacy=324a1760-3f0b-11ed-8677-901b0e934d81; Version=1; Path=/; Domain=.1dmp.io; Expires=Thu, 28 Sep 2023 08:54:43 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash c0749aff60150fe94054fd92e1ae58b7
8566774460e83c8ec1e8fe7e3e22f878d59e2833
7ea1cee9ac8d3d78270991c4c20d608d4e8282f277e2cb2cb1e74b6071a9066d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7EA1CEE9AC8D3D78270991C4C20D608D4E8282F277E2CB2CB1E74B6071A9066D"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5129
Expires: Wed, 28 Sep 2022 10:20:12 GMT
Date: Wed, 28 Sep 2022 08:54:43 GMT
Connection: keep-alive
0100007fd30b3463de00a05102c71130-sp.ops.beeline.ru/p?ssp=sp&id=0100007FD30B3463DE00A05102C71130
37.9.245.57301 Moved Permanently 0 B URL HTTP/2 0100007fd30b3463de00a05102c71130-sp.ops.beeline.ru/p?ssp=sp&id=0100007FD30B3463DE00A05102C71130
IP 37.9.245.57:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&id=0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: 0100007fd30b3463de00a05102c71130-sp.ops.beeline.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Wed, 28 Sep 2022 08:54:43 GMT
content-length: 0
location: https://www.acint.net/match?dp=111&euid=2261b45d-ad8d-4e0f-92c8-67a10be24749
access-control-allow-origin: *
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: BeeAID=2261b45d-ad8d-4e0f-92c8-67a10be24749; expires=Tue, 19 Sep 2023 08:54:43 GMT; domain=ops.beeline.ru; path=/; secure; SameSite=None
access-control-allow-credentials: true, true
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS, GET, HEAD, POST, OPTIONS, PUT, DELETE
access-control-allow-headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
x-route: http://upstream_cookiesync
x-host: 192.168.152.35
X-Firefox-Spdy: h2
ut.rktch.com/matchspm?pi=1000005&pui=0100007FD30B3463DE00A05102C71130
89.108.97.2302 Found 0 B URL HTTP/1.1 ut.rktch.com/matchspm?pi=1000005&pui=0100007FD30B3463DE00A05102C71130
IP 89.108.97.2:0
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /matchspm?pi=1000005&pui=0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: ut.rktch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Wed, 28 Sep 2022 08:54:43 GMT
Content-Length: 0
Connection: keep-alive
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
Set-Cookie: b_uid=5fac73dba1cb047f7d6c204f3ba1c2b3a161; Max-Age=2592000; Expires=Fri, 28 Oct 2022 08:54:43 GMT; Domain=rktch.com; Secure; SameSite=None
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Access-Control-Allow-Headers: Content-Type, Accept, Authorization
Access-Control-Allow-Credentials: true
match.new-programmatic.com/userbind?src=sape&id=0100007FD30B3463DE00A05102C71130
217.65.2.150204 No Content 0 B URL HTTP/1.1 match.new-programmatic.com/userbind?src=sape&id=0100007FD30B3463DE00A05102C71130
IP 217.65.2.150:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=sape&id=0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: match.new-programmatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0
Date: Wed, 28 Sep 2022 08:54:43 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
sync.bumlam.com/?src=sap1&uid=0100007FD30B3463DE00A05102C71130
31.172.81.159302 Moved Temporarily 0 B URL HTTP/1.1 sync.bumlam.com/?src=sap1&uid=0100007FD30B3463DE00A05102C71130
IP 31.172.81.159:0
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&uid=0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Wed, 28 Sep 2022 08:54:43 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQzMjUyNDFjZS0zZjBiLTExZWQtODY0NC0wMDI1OTBjODI0Mzc*; Path=/; Expires=Tue, 23 Sep 2042 08:54:43 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync.bumlam.com/?src=sap1&s_data=CAIQARjTl9CZBmIgMDEwMDAwN0ZEMzBCMzQ2M0RFMDBBMDUxMDJDNzExMzCiARAyUkHOPwsR7YZEACWQyCQ3
ETag: 325241ce-3f0b-11ed-8644-002590c82437
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash e3fd0fb0c07470b45e5477a9177cfd94
70bade5b1e91dcaeb0bdc2e1fbb76b57e3e203b0
2d513a5007fc2dec60ab066a41a088ea5a163fc3fc105b82ab7107be716f6d5e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6253
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:54:44 GMT
Last-Modified: Wed, 28 Sep 2022 07:10:32 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 280
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d2b6207a1cd7f5179c47f7e16228f295
e737e5dadf05b89bda9219404108cb3058c827ff
01de1ffa9539bf4fb62b9a213191a22e088336992673a81188d187af144aed4e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01DE1FFA9539BF4FB62B9A213191A22E088336992673A81188D187AF144AED4E"
Last-Modified: Mon, 26 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11554
Expires: Wed, 28 Sep 2022 12:07:18 GMT
Date: Wed, 28 Sep 2022 08:54:44 GMT
Connection: keep-alive
www.acint.net/match?dp=127&euid=SDANNC5P4YcSe2hoHlB8
185.12.125.25200 OK 43 B URL HTTP/2 www.acint.net/match?dp=127&euid=SDANNC5P4YcSe2hoHlB8
IP 185.12.125.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=127&euid=SDANNC5P4YcSe2hoHlB8 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=fwAAAWM0C9NRoADeMBHHAj4JJR7VOEyoFoy1yyX3xjefQTVn; cSyncDp7v2=1664355283; cSyncDp14v3=1664355283; cSyncDp17=1664355283; cSyncDp32=1664355283; cSyncDp45v3=1664355283; cSyncDp53=1664355283; cSyncDp54v2=1664355283; cSyncDp62=1664355283; cSyncDp67v2=1664355283; cSyncDp68=1664355283; cSyncDp71=1664355283; cSyncDp77=1664355283; cSyncDp84=1664355283; cSyncDp85=1664355283; cSyncDp95v3=1664355283; cSyncDp101=1664355283; cSyncDp104v2=1664355283; cSyncDp107=1664355283; cSyncDp110=1664355283; cSyncDp111v2=1664355283; cSyncDp112v2=1664355283; cSyncDp125v2=1664355283; cSyncDp126=1664355283; cSyncDp127=1664355283; cSyncDp129=1664355283; cSyncDp136v2=1664355283; cSyncDp138=1664355283; cSyncDp144=1664355283; cSyncDp146=1664355283; cSyncDp148=1664355283; cSyncDp149=1664355283; cSyncDp151=1664355283; cSyncDp178=1664355283; cSyncDp179=1664355283; cSyncDp186=1664355283; cSyncDp221=1664355283
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:44 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mediatoday.ru/core/match.gif?s=32&id=0100007FD30B3463DE00A05102C71130
139.45.228.111200 OK 43 B URL HTTP/2 mediatoday.ru/core/match.gif?s=32&id=0100007FD30B3463DE00A05102C71130
IP 139.45.228.111:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /core/match.gif?s=32&id=0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: mediatoday.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.22.0
date: Wed, 28 Sep 2022 08:54:44 GMT
content-type: image/gif
content-length: 43
p3p: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
cache-control: no-cache, max-age=0, must-revalidate, no-store
pragma: no-cache
expires: Thursday, 01-Jan-1970 00:00:00 GMT
set-cookie: idntfy=VUy4cjER9ku6KeM; expires=Sat, 25-Sep-2032 08:54:44 GMT; domain=mediatoday.ru; path=/core; SameSite=None; Secure
X-Firefox-Spdy: h2
nr.bidderstack.com/sape/cm?user_id=0100007FD30B3463DE00A05102C71130
46.4.70.80200 OK 44 B URL HTTP/1.1 nr.bidderstack.com/sape/cm?user_id=0100007FD30B3463DE00A05102C71130
IP 46.4.70.80:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash f9d60352c70a2ba15616d1c9421f3844
e9abc8bea7721a4b6a50295850d13c515006a95c
82cb517a8f80c91dfcec543c6d140deb3baaf463ea9e77655475096eba7bc7d9
GET /sape/cm?user_id=0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: nr.bidderstack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Type: image/gif
Content-Length: 44
Connection: keep-alive
Set-Cookie: uid=c3bfe2d7-3b91-4622-ba4a-c78c8efa65f0; domain=.bidderstack.com; path=/; expires=Thu, 28-Sep-2023 08:54:44 GMT;
Access-Control-Allow-Credentials: true
cs.agency2.ru/p?ssp=sp&uid=0100007FD30B3463DE00A05102C71130
23.111.107.44301 Moved Permanently 0 B URL HTTP/1.1 cs.agency2.ru/p?ssp=sp&uid=0100007FD30B3463DE00A05102C71130
IP 23.111.107.44:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&uid=0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: cs.agency2.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Length: 0
Connection: keep-alive
Server: fasthttp
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.acint.net/match?dp=186&euid=4c692823-9e2c-4b62-83f4-0bb3022d20a9
Set-Cookie: uuid=4c692823-9e2c-4b62-83f4-0bb3022d20a9; expires=Tue, 19 Sep 2023 08:54:44 GMT; domain=agency2.ru; path=/; secure; SameSite=None
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.107.44
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 6ab8b69fade235ccf1a15d2cac6dd95e
37c426c0e6940920c4478855c6bb610731edd316
025fc814f74bed6fcfc2a4c25b670c1d538d06c5ce07af13d3f9f8354ca34604
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:54:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sync.bumlam.com/?src=sap1&s_data=CAIQARjTl9CZBmIgMDEwMDAwN0ZEMzBCMzQ2M0RFMDBBMDUxMDJDNzExMzCiARAyUkHOPwsR7YZEACWQyCQ3
31.172.81.159200 OK 0 B URL HTTP/1.1 sync.bumlam.com/?src=sap1&s_data=CAIQARjTl9CZBmIgMDEwMDAwN0ZEMzBCMzQ2M0RFMDBBMDUxMDJDNzExMzCiARAyUkHOPwsR7YZEACWQyCQ3
IP 31.172.81.159:0
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&s_data=CAIQARjTl9CZBmIgMDEwMDAwN0ZEMzBCMzQ2M0RFMDBBMDUxMDJDNzExMzCiARAyUkHOPwsR7YZEACWQyCQ3 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQzMjUyNDFjZS0zZjBiLTExZWQtODY0NC0wMDI1OTBjODI0Mzc*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQzMjUyNDFjZS0zZjBiLTExZWQtODY0NC0wMDI1OTBjODI0Mzc*; Path=/; Expires=Tue, 23 Sep 2042 08:54:44 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
www.acint.net/match?dp=111&euid=2261b45d-ad8d-4e0f-92c8-67a10be24749
185.12.125.25200 OK 43 B URL HTTP/2 www.acint.net/match?dp=111&euid=2261b45d-ad8d-4e0f-92c8-67a10be24749
IP 185.12.125.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=111&euid=2261b45d-ad8d-4e0f-92c8-67a10be24749 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=fwAAAWM0C9NRoADeMBHHAj4JJR7VOEyoFoy1yyX3xjefQTVn; cSyncDp7v2=1664355283; cSyncDp14v3=1664355283; cSyncDp17=1664355283; cSyncDp32=1664355283; cSyncDp45v3=1664355283; cSyncDp53=1664355283; cSyncDp54v2=1664355283; cSyncDp62=1664355283; cSyncDp67v2=1664355283; cSyncDp68=1664355283; cSyncDp71=1664355283; cSyncDp77=1664355283; cSyncDp84=1664355283; cSyncDp85=1664355283; cSyncDp95v3=1664355283; cSyncDp101=1664355283; cSyncDp104v2=1664355283; cSyncDp107=1664355283; cSyncDp110=1664355283; cSyncDp111v2=1664355283; cSyncDp112v2=1664355283; cSyncDp125v2=1664355283; cSyncDp126=1664355283; cSyncDp127=1664355283; cSyncDp129=1664355283; cSyncDp136v2=1664355283; cSyncDp138=1664355283; cSyncDp144=1664355283; cSyncDp146=1664355283; cSyncDp148=1664355283; cSyncDp149=1664355283; cSyncDp151=1664355283; cSyncDp178=1664355283; cSyncDp179=1664355283; cSyncDp186=1664355283; cSyncDp221=1664355283
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:44 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
push.services.mozilla.com/
35.86.38.2101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.86.38.2:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: r/HFxJtqYMt4wly/C2hSiA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zvDD4Vg0CtjKe/F3oPwN7UwkA00=
www.acint.net/match?dp=129&euid=8ys9f4ypmy
185.12.125.25200 OK 43 B URL HTTP/2 www.acint.net/match?dp=129&euid=8ys9f4ypmy
IP 185.12.125.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=129&euid=8ys9f4ypmy HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=fwAAAWM0C9NRoADeMBHHAj4JJR7VOEyoFoy1yyX3xjefQTVn; cSyncDp7v2=1664355283; cSyncDp14v3=1664355283; cSyncDp17=1664355283; cSyncDp32=1664355283; cSyncDp45v3=1664355283; cSyncDp53=1664355283; cSyncDp54v2=1664355283; cSyncDp62=1664355283; cSyncDp67v2=1664355283; cSyncDp68=1664355283; cSyncDp71=1664355283; cSyncDp77=1664355283; cSyncDp84=1664355283; cSyncDp85=1664355283; cSyncDp95v3=1664355283; cSyncDp101=1664355283; cSyncDp104v2=1664355283; cSyncDp107=1664355283; cSyncDp110=1664355283; cSyncDp111v2=1664355283; cSyncDp112v2=1664355283; cSyncDp125v2=1664355283; cSyncDp126=1664355283; cSyncDp127=1664355283; cSyncDp129=1664355283; cSyncDp136v2=1664355283; cSyncDp138=1664355283; cSyncDp144=1664355283; cSyncDp146=1664355283; cSyncDp148=1664355283; cSyncDp149=1664355283; cSyncDp151=1664355283; cSyncDp178=1664355283; cSyncDp179=1664355283; cSyncDp186=1664355283; cSyncDp221=1664355283
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:44 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/match?dp=186&euid=4c692823-9e2c-4b62-83f4-0bb3022d20a9
185.12.125.25200 OK 43 B URL HTTP/2 www.acint.net/match?dp=186&euid=4c692823-9e2c-4b62-83f4-0bb3022d20a9
IP 185.12.125.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=186&euid=4c692823-9e2c-4b62-83f4-0bb3022d20a9 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=fwAAAWM0C9NRoADeMBHHAj4JJR7VOEyoFoy1yyX3xjefQTVn; cSyncDp7v2=1664355283; cSyncDp14v3=1664355283; cSyncDp17=1664355283; cSyncDp32=1664355283; cSyncDp45v3=1664355283; cSyncDp53=1664355283; cSyncDp54v2=1664355283; cSyncDp62=1664355283; cSyncDp67v2=1664355283; cSyncDp68=1664355283; cSyncDp71=1664355283; cSyncDp77=1664355283; cSyncDp84=1664355283; cSyncDp85=1664355283; cSyncDp95v3=1664355283; cSyncDp101=1664355283; cSyncDp104v2=1664355283; cSyncDp107=1664355283; cSyncDp110=1664355283; cSyncDp111v2=1664355283; cSyncDp112v2=1664355283; cSyncDp125v2=1664355283; cSyncDp126=1664355283; cSyncDp127=1664355283; cSyncDp129=1664355283; cSyncDp136v2=1664355283; cSyncDp138=1664355283; cSyncDp144=1664355283; cSyncDp146=1664355283; cSyncDp148=1664355283; cSyncDp149=1664355283; cSyncDp151=1664355283; cSyncDp178=1664355283; cSyncDp179=1664355283; cSyncDp186=1664355283; cSyncDp221=1664355283
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:44 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
status.geotrust.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 4fad74340139759d7172fb9db7816330
5ba6ce839f38db6864617f134716b23256709fec
c15fadf6ddd00d1878152a6f5bc97ce670a3a5853cfb93ff7f99e49b0e238856
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1474
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:54:44 GMT
Last-Modified: Wed, 28 Sep 2022 08:30:10 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 278
sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
148.251.129.43302 Found 0 B URL HTTP/2 sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
IP 148.251.129.43:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0 HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: session_tptc=1664355283791
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 28 Sep 2022 08:54:44 GMT
content-type: image/png
content-length: 0
location: https://ab5b3c84-7bd9-4ee6-8804-6cd04ace7280.sync.upravel.com/sape/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyIsImh0dHBzOi8vd3d3LmFjaW50Lm5ldC8iXX19
set-cookie: user_id=ab5b3c84-7bd9-4ee6-8804-6cd04ace7280;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
user_id-legacy=ab5b3c84-7bd9-4ee6-8804-6cd04ace7280;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 704fadce938bda623c3d5b0e5f7e559b
3cd43b1b901958dbdc3b2697251332928597c3b7
85eed717f7720ae6e061b7b035ff6d07d17dbc8ef9876f2f87af8c17a48941a5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 15:41:04 GMT
Expires: Tue, 04 Oct 2022 15:41:03 GMT
Etag: "3cd43b1b901958dbdc3b2697251332928597c3b7"
Cache-Control: max-age=542178,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 751b418c9b12b511-OSL
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4f9b485cf94d88ef8c835c0f1a9dd397
07ef0ce794ab8cd9f0b1564c5f2ac4acb18f8f83
b396d74e533e944041f2737e98f2c872f772bd19a328cfac562f28c82438a1fc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:54:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
144.76.119.17301 Moved Permanently 115 B URL HTTP/2 exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
IP 144.76.119.17:0
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text
Hash 6763d00978a9c1fd67b5f9508d16cb6e
9aa435201b7f0e94d49066b2a532f0670338f75e
1add22b604a3fa0a009b3ed8b667aa8b8c9ffe5c85180917268c0058b56f58c5
GET /cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Wed, 28 Sep 2022 08:54:44 GMT
content-type: text/html; charset=utf-8
content-length: 115
location: https://www.acint.net/match?dp=126&euid=b9bb840c-cd86-4697-7b14-a0b6cded132a
serverid: TODO
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/watch.js
87.250.251.119200 OK 57 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP 87.250.251.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (570)
Hash 48798013c0390f91a854635fb2e562e6
db45594e537654f93149d519012551fc5fe4d52c
b61e415e48fd94a289c2ccf980631bb1a4a75aebeace394b8c9d988dd879bfa5
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.taranov.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 57234
date: Wed, 28 Sep 2022 08:54:44 GMT
access-control-allow-origin: *
etag: "632d6d03-df92"
expires: Wed, 28 Sep 2022 09:54:44 GMT
last-modified: Fri, 23 Sep 2022 11:23:31 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter?id=1724189;t=60;js=13;r=;j=false;s=1280*1024;d=24;rand=0.4270326534881925
0 B URL top-fwz1.mail.ru/counter?id=1724189;t=60;js=13;r=;j=false;s=1280*1024;d=24;rand=0.4270326534881925
IP :0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?id=1724189;t=60;js=13;r=;j=false;s=1280*1024;d=24;rand=0.4270326534881925 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.taranov.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
partner.googleadservices.com/gampad/cookie.js?domain=www.taranov.ru&callback=_gfp_s_&client=ca-pub-2710681560546448
172.217.21.162200 OK 199 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=www.taranov.ru&callback=_gfp_s_&client=ca-pub-2710681560546448
IP 172.217.21.162:0
File type ASCII text, with no line terminators
Hash f2747863dbe22126cee389d29076e7ec
50e27fe1c7d795ea984031ca372343851fcca183
0676210e06dbf5a7907a9135269e4d11098d79718232e98ee3b07ecf98c11f78
GET /gampad/cookie.js?domain=www.taranov.ru&callback=_gfp_s_&client=ca-pub-2710681560546448 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.taranov.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Wed, 28 Sep 2022 08:54:44 GMT
server: cafe
cache-control: private
content-length: 199
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash ef12641bb4d59312b43f4f06ae2cee73
5450eaf271bf466e6aa58b63d52b49b66c5f4a6f
894fd5dabf39c09179591f3305d88ef71eb467ddeb1fc5c568dc377c3a1317d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:54:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash be52dbe2d47697a7f007d69c486b77b4
fe445ea87749e97423e7865bc559ad78f672a62d
65d16df2b3095c658d2bdf39b06d57486967bba7b43c43108e5025d7af5b7ab6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:54:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.acint.net/match?dp=126&euid=b9bb840c-cd86-4697-7b14-a0b6cded132a
185.12.125.25200 OK 43 B URL HTTP/2 www.acint.net/match?dp=126&euid=b9bb840c-cd86-4697-7b14-a0b6cded132a
IP 185.12.125.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=126&euid=b9bb840c-cd86-4697-7b14-a0b6cded132a HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=fwAAAWM0C9NRoADeMBHHAj4JJR7VOEyoFoy1yyX3xjefQTVn; cSyncDp7v2=1664355283; cSyncDp14v3=1664355283; cSyncDp17=1664355283; cSyncDp32=1664355283; cSyncDp45v3=1664355283; cSyncDp53=1664355283; cSyncDp54v2=1664355283; cSyncDp62=1664355283; cSyncDp67v2=1664355283; cSyncDp68=1664355283; cSyncDp71=1664355283; cSyncDp77=1664355283; cSyncDp84=1664355283; cSyncDp85=1664355283; cSyncDp95v3=1664355283; cSyncDp101=1664355283; cSyncDp104v2=1664355283; cSyncDp107=1664355283; cSyncDp110=1664355283; cSyncDp111v2=1664355283; cSyncDp112v2=1664355283; cSyncDp125v2=1664355283; cSyncDp126=1664355283; cSyncDp127=1664355283; cSyncDp129=1664355283; cSyncDp136v2=1664355283; cSyncDp138=1664355283; cSyncDp144=1664355283; cSyncDp146=1664355283; cSyncDp148=1664355283; cSyncDp149=1664355283; cSyncDp151=1664355283; cSyncDp178=1664355283; cSyncDp179=1664355283; cSyncDp186=1664355283; cSyncDp221=1664355283
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:44 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 96e1a54f8b04ca53fe0e73f041a2ce39
3e393e9db2de6713ae8048c706fb3d1ad2e1594b
b1f5e335313df2a7085397abb43a58a7f247906f4aeed510a1c14a0fe67b5858
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 25 Sep 2022 11:26:46 GMT
Expires: Sun, 02 Oct 2022 11:26:45 GMT
Etag: "3e393e9db2de6713ae8048c706fb3d1ad2e1594b"
Cache-Control: max-age=354120,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 751b418d383d0b41-OSL
adlmerge.com/merge_gpsid/?sid=50&id=0100007FD30B3463DE00A05102C71130
95.211.66.35200 OK 143 B URL HTTP/2 adlmerge.com/merge_gpsid/?sid=50&id=0100007FD30B3463DE00A05102C71130
IP 95.211.66.35:0
ASN #60781 LeaseWeb Netherlands B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9c7558e2aa3693cf8714f6a9da0a5dd5
98f600d6659e4874908362a216baad562bfd5444
5389b93276497a3870194b5c250d443752a11d855651fea2acd054a3792f7883
GET /merge_gpsid/?sid=50&id=0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: adlmerge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.16.0
date: Wed, 28 Sep 2022 08:54:44 GMT
content-type: image/gif
iseu: eu
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=www.taranov.ru
216.58.207.226200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=www.taranov.ru
IP 216.58.207.226:0
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.taranov.ru HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.taranov.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Wed, 28 Sep 2022 08:54:44 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4f9b485cf94d88ef8c835c0f1a9dd397
07ef0ce794ab8cd9f0b1564c5f2ac4acb18f8f83
b396d74e533e944041f2737e98f2c872f772bd19a328cfac562f28c82438a1fc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:54:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dmp.gotechnology.io/match/sape?id=0100007FD30B3463DE00A05102C71130
142.132.209.138302 Found 0 B URL HTTP/2 dmp.gotechnology.io/match/sape?id=0100007FD30B3463DE00A05102C71130
IP 142.132.209.138:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: dmp.gotechnology.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 28 Sep 2022 08:54:44 GMT
content-length: 0
location: https://dmp.gotechnology.io/match/sape?id=0100007FD30B3463DE00A05102C71130&chk=1
set-cookie: chk=1; path=/; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash ef12641bb4d59312b43f4f06ae2cee73
5450eaf271bf466e6aa58b63d52b49b66c5f4a6f
894fd5dabf39c09179591f3305d88ef71eb467ddeb1fc5c568dc377c3a1317d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:54:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
top-fwz1.mail.ru/counter2?id=1724189;t=60;js=13;r=;j=false;s=1280*1024;d=24;rand=0.4270326534881925
95.163.52.67200 OK 540 B URL HTTP/2 top-fwz1.mail.ru/counter2?id=1724189;t=60;js=13;r=;j=false;s=1280*1024;d=24;rand=0.4270326534881925
IP 95.163.52.67:0
File type GIF image data, version 87a, 88 x 31\012- data
Hash 1ce46540cc64e2d577c5e40982f8225e
b939a78b324ad00e5656e895ddd87c224816d66f
c65caac6a25ef44c2717fe904b3d7c0f588b693a65905e5fc353decf97580e3a
GET /counter2?id=1724189;t=60;js=13;r=;j=false;s=1280*1024;d=24;rand=0.4270326534881925 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.taranov.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 08:54:44 GMT
content-type: image/gif
content-length: 540
set-cookie: FTID=1RMYgQ0tkIIC:1664355284:1724189:::; path=/; expires=Fri, 29-Sep-23 08:54:44 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash be52dbe2d47697a7f007d69c486b77b4
fe445ea87749e97423e7865bc559ad78f672a62d
65d16df2b3095c658d2bdf39b06d57486967bba7b43c43108e5025d7af5b7ab6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:54:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ab5b3c84-7bd9-4ee6-8804-6cd04ace7280.sync.upravel.com/sape/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyIsImh0dHBzOi8vd3d3LmFjaW50Lm5ldC8iXX19
148.251.237.106302 Found 0 B URL HTTP/2 ab5b3c84-7bd9-4ee6-8804-6cd04ace7280.sync.upravel.com/sape/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyIsImh0dHBzOi8vd3d3LmFjaW50Lm5ldC8iXX19
IP 148.251.237.106:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyIsImh0dHBzOi8vd3d3LmFjaW50Lm5ldC8iXX19 HTTP/1.1
Host: ab5b3c84-7bd9-4ee6-8804-6cd04ace7280.sync.upravel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: session_tptc=1664355283791; user_id=ab5b3c84-7bd9-4ee6-8804-6cd04ace7280
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 28 Sep 2022 08:54:44 GMT
content-type: image/png
content-length: 0
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: user_id=ab5b3c84-7bd9-4ee6-8804-6cd04ace7280;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
user_id-legacy=ab5b3c84-7bd9-4ee6-8804-6cd04ace7280;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
location: https://www.acint.net/match?dp=71&euid=ab5b3c84-7bd9-4ee6-8804-6cd04ace7280
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
www.acint.net/match?dp=71&euid=ab5b3c84-7bd9-4ee6-8804-6cd04ace7280
185.12.125.25200 OK 43 B URL HTTP/2 www.acint.net/match?dp=71&euid=ab5b3c84-7bd9-4ee6-8804-6cd04ace7280
IP 185.12.125.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=71&euid=ab5b3c84-7bd9-4ee6-8804-6cd04ace7280 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=fwAAAWM0C9NRoADeMBHHAj4JJR7VOEyoFoy1yyX3xjefQTVn; cSyncDp7v2=1664355283; cSyncDp14v3=1664355283; cSyncDp17=1664355283; cSyncDp32=1664355283; cSyncDp45v3=1664355283; cSyncDp53=1664355283; cSyncDp54v2=1664355283; cSyncDp62=1664355283; cSyncDp67v2=1664355283; cSyncDp68=1664355283; cSyncDp71=1664355283; cSyncDp77=1664355283; cSyncDp84=1664355283; cSyncDp85=1664355283; cSyncDp95v3=1664355283; cSyncDp101=1664355283; cSyncDp104v2=1664355283; cSyncDp107=1664355283; cSyncDp110=1664355283; cSyncDp111v2=1664355283; cSyncDp112v2=1664355283; cSyncDp125v2=1664355283; cSyncDp126=1664355283; cSyncDp127=1664355283; cSyncDp129=1664355283; cSyncDp136v2=1664355283; cSyncDp138=1664355283; cSyncDp144=1664355283; cSyncDp146=1664355283; cSyncDp148=1664355283; cSyncDp149=1664355283; cSyncDp151=1664355283; cSyncDp178=1664355283; cSyncDp179=1664355283; cSyncDp186=1664355283; cSyncDp221=1664355283
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:44 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A106995%2C%22sc%22%3A0%2C%22pl%22%3A700491%2C%22ev%22%3A%22vis100%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355282
185.12.125.25200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A106995%2C%22sc%22%3A0%2C%22pl%22%3A700491%2C%22ev%22%3A%22vis100%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355282
IP 185.12.125.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A106995%2C%22sc%22%3A0%2C%22pl%22%3A700491%2C%22ev%22%3A%22vis100%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355282 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.taranov.ru/
Cookie: aid=fwAAAWM0C9NRoADeMBHHAj4JJR7VOEyoFoy1yyX3xjefQTVn; cSyncDp7v2=1664355283; cSyncDp14v3=1664355283; cSyncDp17=1664355283; cSyncDp32=1664355283; cSyncDp45v3=1664355283; cSyncDp53=1664355283; cSyncDp54v2=1664355283; cSyncDp62=1664355283; cSyncDp67v2=1664355283; cSyncDp68=1664355283; cSyncDp71=1664355283; cSyncDp77=1664355283; cSyncDp84=1664355283; cSyncDp85=1664355283; cSyncDp95v3=1664355283; cSyncDp101=1664355283; cSyncDp104v2=1664355283; cSyncDp107=1664355283; cSyncDp110=1664355283; cSyncDp111v2=1664355283; cSyncDp112v2=1664355283; cSyncDp125v2=1664355283; cSyncDp126=1664355283; cSyncDp127=1664355283; cSyncDp129=1664355283; cSyncDp136v2=1664355283; cSyncDp138=1664355283; cSyncDp144=1664355283; cSyncDp146=1664355283; cSyncDp148=1664355283; cSyncDp149=1664355283; cSyncDp151=1664355283; cSyncDp178=1664355283; cSyncDp179=1664355283; cSyncDp186=1664355283; cSyncDp221=1664355283
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:44 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
87.250.251.119200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 87.250.251.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.taranov.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 28 Sep 2022 08:54:44 GMT
access-control-allow-origin: *
etag: "632d6d03-2b"
expires: Wed, 28 Sep 2022 09:54:44 GMT
accept-ranges: bytes
last-modified: Fri, 23 Sep 2022 11:23:31 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
dmp.gotechnology.io/match/sape?id=0100007FD30B3463DE00A05102C71130&chk=1
142.132.209.138302 Found 0 B URL HTTP/2 dmp.gotechnology.io/match/sape?id=0100007FD30B3463DE00A05102C71130&chk=1
IP 142.132.209.138:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=0100007FD30B3463DE00A05102C71130&chk=1 HTTP/1.1
Host: dmp.gotechnology.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: chk=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 28 Sep 2022 08:54:44 GMT
content-length: 0
location: https://ads.betweendigital.com/match?bidder_id=98&external_user_id=MjA0MzViYWJjZjViZDIyMw
set-cookie: pid=MjA0MzViYWJjZjViZDIyMw; expires=Thu, 28 Sep 2023 08:54:44 GMT; domain=.gotechnology.io; path=/; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71281900/1?wmode=7&page-url=http%3A%2F%2Fwww.taranov.ru%2F&charset=utf-8&site-info=%7B%22site_id%22%3A106995%2C%22srtb_sid%22%3A%2263340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A624%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A1297399688392%3Ahid%3A839973435%3Az%3A0%3Ai%3A20220928085441%3Aet%3A1664355282%3Ac%3A1%3Arn%3A26526671%3Arqn%3A1%3Au%3A1664355282878545051%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C52%2C0%2C342%2C347%2C1%2C362%2C50%2C%2C%2C%2C795%3Ans%3A1664355280002%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664355282%3At%3A%D0%9A%D1%83%D0%BB%D0%B8%D0%BD%D0%B0%D1%80%D0%B8%D1%8F%20%D0%98%D0%B2%D0%B0%D0%BD%D0%B0%20%D0%A2%D0%B0%D1%80%D0%B0%D0%BD%D0%BE%D0%B2%D0%B0%20-%20%D0%A0%D0%B5%D1%86%D0%B5%D0%BF%D1%82%D1%8B%20%D1%81%D0%BB%D0%B0%D0%B4%D0%BE%D1%81%D1%82%D0%B5%D0%B9%20%D0%B8%20%D0%B4%D0%B5%D1%81%D0%B5%D1%80%D1%82%D0%BE%D0%B2&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
87.250.251.119200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/71281900/1?wmode=7&page-url=http%3A%2F%2Fwww.taranov.ru%2F&charset=utf-8&site-info=%7B%22site_id%22%3A106995%2C%22srtb_sid%22%3A%2263340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A624%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A1297399688392%3Ahid%3A839973435%3Az%3A0%3Ai%3A20220928085441%3Aet%3A1664355282%3Ac%3A1%3Arn%3A26526671%3Arqn%3A1%3Au%3A1664355282878545051%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C52%2C0%2C342%2C347%2C1%2C362%2C50%2C%2C%2C%2C795%3Ans%3A1664355280002%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664355282%3At%3A%D0%9A%D1%83%D0%BB%D0%B8%D0%BD%D0%B0%D1%80%D0%B8%D1%8F%20%D0%98%D0%B2%D0%B0%D0%BD%D0%B0%20%D0%A2%D0%B0%D1%80%D0%B0%D0%BD%D0%BE%D0%B2%D0%B0%20-%20%D0%A0%D0%B5%D1%86%D0%B5%D0%BF%D1%82%D1%8B%20%D1%81%D0%BB%D0%B0%D0%B4%D0%BE%D1%81%D1%82%D0%B5%D0%B9%20%D0%B8%20%D0%B4%D0%B5%D1%81%D0%B5%D1%80%D1%82%D0%BE%D0%B2&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
IP 87.250.251.119:0
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 3626a59d75f1d90a274552b717930af4
b49e21cdc1b0c2f152b090929cc673bf2417b28a
013a6151b2e182ea614959c23107afd73ea496c98605764698d57568e58b2f43
GET /watch/71281900/1?wmode=7&page-url=http%3A%2F%2Fwww.taranov.ru%2F&charset=utf-8&site-info=%7B%22site_id%22%3A106995%2C%22srtb_sid%22%3A%2263340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A624%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A1297399688392%3Ahid%3A839973435%3Az%3A0%3Ai%3A20220928085441%3Aet%3A1664355282%3Ac%3A1%3Arn%3A26526671%3Arqn%3A1%3Au%3A1664355282878545051%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C52%2C0%2C342%2C347%2C1%2C362%2C50%2C%2C%2C%2C795%3Ans%3A1664355280002%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664355282%3At%3A%D0%9A%D1%83%D0%BB%D0%B8%D0%BD%D0%B0%D1%80%D0%B8%D1%8F%20%D0%98%D0%B2%D0%B0%D0%BD%D0%B0%20%D0%A2%D0%B0%D1%80%D0%B0%D0%BD%D0%BE%D0%B2%D0%B0%20-%20%D0%A0%D0%B5%D1%86%D0%B5%D0%BF%D1%82%D1%8B%20%D1%81%D0%BB%D0%B0%D0%B4%D0%BE%D1%81%D1%82%D0%B5%D0%B9%20%D0%B8%20%D0%B4%D0%B5%D1%81%D0%B5%D1%80%D1%82%D0%BE%D0%B2&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.taranov.ru
Referer: http://www.taranov.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Wed, 28 Sep 2022 08:54:44 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://www.taranov.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 28-Sep-2022 08:54:44 GMT
last-modified: Wed, 28-Sep-2022 08:54:44 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP 104.18.20.226:0
Hash 381642c6d3899f1cd248273e9e2d10cb
cae8714eb1b919b591a0b3cd12cbc64cab448849
0ab7b76758e8d9ac06b16a434f901123cd4a434e42f5ab5a2b0abac73f118a3d
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sun, 02 Oct 2022 07:05:36 GMT
ETag: "cae8714eb1b919b591a0b3cd12cbc64cab448849"
Last-Modified: Wed, 28 Sep 2022 07:05:37 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2615
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 751b41906dec0b55-OSL
ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=153&external_id=0100007FD30B3463DE00A05102C71130
195.209.111.13200 OK 42 B URL HTTP/1.1 ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=153&external_id=0100007FD30B3463DE00A05102C71130
IP 195.209.111.13:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cgi-bin/sync.cgi?dsp_id=153&external_id=0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: ssp.adriver.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
ocsp.globalsign.com/gsgccr3dvtlsca2020
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP 104.18.20.226:0
Hash 381642c6d3899f1cd248273e9e2d10cb
cae8714eb1b919b591a0b3cd12cbc64cab448849
0ab7b76758e8d9ac06b16a434f901123cd4a434e42f5ab5a2b0abac73f118a3d
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sun, 02 Oct 2022 07:05:36 GMT
ETag: "cae8714eb1b919b591a0b3cd12cbc64cab448849"
Last-Modified: Wed, 28 Sep 2022 07:05:37 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2615
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 751b4190ae290b55-OSL
ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691
195.209.108.47302 Moved Temporarily 0 B URL HTTP/1.1 ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691
IP 195.209.108.47:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691 HTTP/1.1
Host: ad.adriver.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-control: no-cache, max-age=0, must-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
Set-Cookie: cid=-6306927530; expires=Fri, 27 Sep 2024 08:54:44 GMT; path=/; domain=.adriver.ru; SameSite=None; Secure
Location: /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-6306927530
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
fcgi4.gnezdo.ru/cookie_matching_ssp/Sape-dsp/0100007FD30B3463DE00A05102C71130
93.95.102.105204 No Content 0 B URL HTTP/2 fcgi4.gnezdo.ru/cookie_matching_ssp/Sape-dsp/0100007FD30B3463DE00A05102C71130
IP 93.95.102.105:0
ASN #48347 JSC Mediasoft ekspert
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookie_matching_ssp/Sape-dsp/0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: fcgi4.gnezdo.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Wed, 28 Sep 2022 08:54:44 GMT
set-cookie: uid=XV9maWM0C9Q6pYY5YhN3Ag==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=gnezdo.ru; path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash b136a198d3e3ea2583518132f3f68fd3
430877df5ccfc02082a7a42fb7e4a8563eea4415
7d469ee860c8f18a28d74ec08b33efe6005e292095e538c1400f5091832f75ac
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 04:09:16 GMT
Expires: Tue, 04 Oct 2022 04:09:15 GMT
Etag: "430877df5ccfc02082a7a42fb7e4a8563eea4415"
Cache-Control: max-age=500670,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 751b4190b87fb511-OSL
ocsp.usertrust.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 095cc13120b6204c4c431eb9b6a1c5fb
49ba0b6490cf20f9a06398c7d3cb1e35483d678a
159f2a56dc518743e70b1397c01ec71b79fbe27927b8421fedd5abf4af99cd13
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 26 Sep 2022 04:18:21 GMT
Expires: Mon, 03 Oct 2022 04:18:20 GMT
Etag: "49ba0b6490cf20f9a06398c7d3cb1e35483d678a"
Cache-Control: max-age=603637,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 143
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 751b41910e210b31-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash b136a198d3e3ea2583518132f3f68fd3
430877df5ccfc02082a7a42fb7e4a8563eea4415
7d469ee860c8f18a28d74ec08b33efe6005e292095e538c1400f5091832f75ac
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 04:09:16 GMT
Expires: Tue, 04 Oct 2022 04:09:15 GMT
Etag: "430877df5ccfc02082a7a42fb7e4a8563eea4415"
Cache-Control: max-age=500670,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 751b4190cbeb0b41-OSL
ads.betweendigital.com/match?bidder_id=98&external_user_id=MjA0MzViYWJjZjViZDIyMw
188.42.196.115302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=98&external_user_id=MjA0MzViYWJjZjViZDIyMw
IP 188.42.196.115:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=98&external_user_id=MjA0MzViYWJjZjViZDIyMw HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /match?bidder_id=98&external_user_id=MjA0MzViYWJjZjViZDIyMw&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 28 Sep 2023 08:54:44 GMT; Path=/; Domain=.betweendigital.com
tuuid=b49565cf-f499-520f-8277-936ce14398b8; Max-Age=31536000; Expires=Thu, 28 Sep 2023 08:54:44 GMT; Path=/; Domain=.betweendigital.com
ut=YzQL1AAKIcBgfk4h7hPXhq4vKhIQ5s_IocGLPQ==; Max-Age=31536000; Expires=Thu, 28 Sep 2023 08:54:44 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash b136a198d3e3ea2583518132f3f68fd3
430877df5ccfc02082a7a42fb7e4a8563eea4415
7d469ee860c8f18a28d74ec08b33efe6005e292095e538c1400f5091832f75ac
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 04:09:16 GMT
Expires: Tue, 04 Oct 2022 04:09:15 GMT
Etag: "430877df5ccfc02082a7a42fb7e4a8563eea4415"
Cache-Control: max-age=500670,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 751b4190ffd3b52d-OSL
ocsp2.globalsign.com/gsalphasha2g2
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP 104.18.21.226:0
Hash 948ba22d5280e286c22258728853c922
520ef94aa61806f6a7c29a0828bdaabd1e5636d5
24861b0923c4a810ad61a1956c0cd0d666eb7ae964e4b0b311bad1768ce1f17a
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sun, 02 Oct 2022 06:58:14 GMT
ETag: "520ef94aa61806f6a7c29a0828bdaabd1e5636d5"
Last-Modified: Wed, 28 Sep 2022 06:58:15 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 477
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 751b41914f2eb51e-OSL
ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-6306927530
195.209.108.47302 Moved Temporarily 40 B URL HTTP/1.1 ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-6306927530
IP 195.209.108.47:0
File type ASCII text, with CRLF line terminators
Hash 251630b588179b239e8fab1ac9ef6d3a
91b91a97bc481dd2bbd5e0f3fea6ba1c4e843882
c95661e0ef6975b1df5361695a439f71a021d72c345023c3e668e84f35b3c38b
GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-6306927530 HTTP/1.1
Host: ad.adriver.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-control: no-cache, no-cache=Set-Cookie, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref="//adriver.ru/w3c/p3p.xml", CP="NON DSP COR CURa ADMa DEVa OUR BUS UNI COM NAV INT STA"
Set-Cookie: cid=0; expires=Fri, 27 Sep 2024 08:54:44 GMT; path=/; domain=.adriver.ru;
uid=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain=.adriver.ru
Location: https://www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
ad.mail.ru/cm.gif?p=48&id=0100007FD30B3463DE00A05102C71130
95.163.41.56200 OK 43 B URL HTTP/2 ad.mail.ru/cm.gif?p=48&id=0100007FD30B3463DE00A05102C71130
IP 95.163.41.56:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /cm.gif?p=48&id=0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: ad.mail.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 08:54:44 GMT
content-type: image/gif
content-length: 43
set-cookie: VID=0-sML92Kg82C002FWK0de42C:::0-0-0-84e6494:CAASEDeurubeek2HWHK1hyPbQ6UaYG5PfzpoUw1NZIhHxZAtouL9kfBbg6QAKXdHZcxpdYhZK0QXHWSSIAghCdIMq2VVrx78OKFxhqKXHOOqDMcTsGV6gxhyVo5Y6uPMfI2qnaZgUIl3lCA_uAr9HBre-UYwnw; path=/; expires=Fri, 29-Sep-23 08:54:44 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
expires: Wed, 28 Sep 2022 14:54:44 GMT
cache-control: max-age=21600
last-modified: Wed, 28 Sep 2022 08:54:44 GMT
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: require-corp
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D
188.42.196.115302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D
IP 188.42.196.115:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 28 Sep 2023 08:54:44 GMT; Path=/; Domain=.betweendigital.com
tuuid=13d65576-44f0-520f-9671-7c5df5457789; Max-Age=31536000; Expires=Thu, 28 Sep 2023 08:54:44 GMT; Path=/; Domain=.betweendigital.com
ut=YzQL1AAKTLgy2s3vVjTBWACtfDKbH8JcPha_1A==; Max-Age=31536000; Expires=Thu, 28 Sep 2023 08:54:44 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.20.226:0
Hash 4e9f3bf119ebfd1451272d736356913c
f0f5869b19b785d9358aff0283d2549277ec4da6
6f1f2e918fd1cbe10b2510b6772e1fdc9151487716635d80019fbffe92bb1f31
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sun, 02 Oct 2022 07:34:32 GMT
ETag: "f0f5869b19b785d9358aff0283d2549277ec4da6"
Last-Modified: Wed, 28 Sep 2022 07:34:33 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 87
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 751b41915ea70b55-OSL
ocsp.godaddy.com/
192.124.249.24200 OK 1.8 kB IP 192.124.249.24:0
Hash 89ff0f8e885e5753adf45398f2a47735
0def7fe4e1b5cf94e39ba7380ff7305f42dc0a80
a84027b0dc5c677a3c1b9c4a170ade383f3d67ff0c9286c93696c8206a5a7af8
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 27 Sep 2022 23:37:55 GMT
Expires: Wed, 28 Sep 2022 23:37:55 GMT
ETag: "0def7fe4e1b5cf94e39ba7380ff7305f42dc0a80"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
sape-sync.rutarget.ru/sync
45.9.27.120302 Moved Temporarily 0 B URL HTTP/1.1 sape-sync.rutarget.ru/sync
IP 45.9.27.120:0
ASN #208677 Cloud technology Limited (Ltd.)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync HTTP/1.1
Host: sape-sync.rutarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Length: 0
Connection: close
Location: https://www.acint.net/match?dp=104&euid=V2fkQ3ncxYu5
P3P: CP="This is not a P3P policy. Please visit http://rutarget.ru/p3p/ to get more information."
Set-Cookie: userId=V2fkQ3ncxYu5; Path=/; Domain=.rutarget.ru; Expires=Mon, 27 Mar 2023 08:54:44 GMT; SameSite=None; Secure
status.thawte.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 09bc2e50beef65d44365eca6ecd7903b
b7959d42513fe3e0519000f22136020bb75584c2
382c237bf31b08165a0ef6da452b9ec0f75c75d70d7ac5a9ddcc56a6fd4788f0
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3275
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:54:44 GMT
Last-Modified: Wed, 28 Sep 2022 08:00:09 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d620e69055fd2c49ce27500289dcb8b7
a3b4c67cd757bab2f10a2e5a3f9afc165db8cd35
f818ee7cc07da39e9ba6dc3078b65567e6e22d0354cde9acb57fce024ff2658c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F818EE7CC07DA39E9BA6DC3078B65567E6E22D0354CDE9ACB57FCE024FF2658C"
Last-Modified: Mon, 26 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2763
Expires: Wed, 28 Sep 2022 09:40:47 GMT
Date: Wed, 28 Sep 2022 08:54:44 GMT
Connection: keep-alive
sync.adkernel.com/user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D
77.245.57.72200 OK 0 B URL HTTP/1.1 sync.adkernel.com/user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D
IP 77.245.57.72:0
ASN #36057 WEBAIR-INTERNET-MTL
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D HTTP/1.1
Host: sync.adkernel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Length: 0
Connection: close
ocsp.globalsign.com/gseccovsslca2018
104.18.20.226200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.20.226:0
Hash 4e35295f1dde3a934b3587d8c40135f3
d5ea2dcc89bf04052b139d2ee78a48cde43dea83
2d259d4a586d5d835cb0b949b86e086db11ae2fd89a21597f1a973396715dd69
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sun, 02 Oct 2022 07:08:24 GMT
ETag: "d5ea2dcc89bf04052b139d2ee78a48cde43dea83"
Last-Modified: Wed, 28 Sep 2022 07:08:25 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2225
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 751b41917ec10b55-OSL
ads.betweendigital.com/match?bidder_id=73&external_user_id=0100007FD30B3463DE00A05102C71130
188.42.196.115302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=73&external_user_id=0100007FD30B3463DE00A05102C71130
IP 188.42.196.115:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=73&external_user_id=0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /match?bidder_id=73&external_user_id=0100007FD30B3463DE00A05102C71130&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 28 Sep 2023 08:54:44 GMT; Path=/; Domain=.betweendigital.com
tuuid=52dacbeb-52a3-520f-b508-2eb5d63c2561; Max-Age=31536000; Expires=Thu, 28 Sep 2023 08:54:44 GMT; Path=/; Domain=.betweendigital.com
ut=YzQL1AAKybi3YhW5so9SW5hMPX65-Qid84fZjg==; Max-Age=31536000; Expires=Thu, 28 Sep 2023 08:54:44 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=98&external_user_id=MjA0MzViYWJjZjViZDIyMw&crf=1
188.42.196.115200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=98&external_user_id=MjA0MzViYWJjZjViZDIyMw&crf=1
IP 188.42.196.115:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=98&external_user_id=MjA0MzViYWJjZjViZDIyMw&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 28 Sep 2023 08:54:44 GMT; Path=/; Domain=.betweendigital.com
tuuid=68405750-fb35-520f-be7c-d23edd48d9ea; Max-Age=31536000; Expires=Thu, 28 Sep 2023 08:54:44 GMT; Path=/; Domain=.betweendigital.com
ut=YzQL1AAKybieotnWxJYbWNb0LmyKuxllEeMdhw==; Max-Age=31536000; Expires=Thu, 28 Sep 2023 08:54:44 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
185.12.125.25302 Found 154 B URL HTTP/2 www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
IP 185.12.125.25:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=fwAAAWM0C9NRoADeMBHHAj4JJR7VOEyoFoy1yyX3xjefQTVn; cSyncDp7v2=1664355283; cSyncDp14v3=1664355283; cSyncDp17=1664355283; cSyncDp32=1664355283; cSyncDp45v3=1664355283; cSyncDp53=1664355283; cSyncDp54v2=1664355283; cSyncDp62=1664355283; cSyncDp67v2=1664355283; cSyncDp68=1664355283; cSyncDp71=1664355283; cSyncDp77=1664355283; cSyncDp84=1664355283; cSyncDp85=1664355283; cSyncDp95v3=1664355283; cSyncDp101=1664355283; cSyncDp104v2=1664355283; cSyncDp107=1664355283; cSyncDp110=1664355283; cSyncDp111v2=1664355283; cSyncDp112v2=1664355283; cSyncDp125v2=1664355283; cSyncDp126=1664355283; cSyncDp127=1664355283; cSyncDp129=1664355283; cSyncDp136v2=1664355283; cSyncDp138=1664355283; cSyncDp144=1664355283; cSyncDp146=1664355283; cSyncDp148=1664355283; cSyncDp149=1664355283; cSyncDp151=1664355283; cSyncDp178=1664355283; cSyncDp179=1664355283; cSyncDp186=1664355283; cSyncDp221=1664355283
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Wed, 28 Sep 2022 08:54:44 GMT
content-type: text/html
content-length: 154
location: https://ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=0100007FD30B3463DE00A05102C71130
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
188.42.196.115200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
IP 188.42.196.115:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 28 Sep 2023 08:54:44 GMT; Path=/; Domain=.betweendigital.com
tuuid=f8307549-d788-520f-b3a9-9001d09d9bd5; Max-Age=31536000; Expires=Thu, 28 Sep 2023 08:54:44 GMT; Path=/; Domain=.betweendigital.com
ut=YzQL1AALE_DkRTws9gI-NvwtvXOxoPzM3bCiOw==; Max-Age=31536000; Expires=Thu, 28 Sep 2023 08:54:44 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
www.acint.net/match?dp=104&euid=V2fkQ3ncxYu5
185.12.125.25200 OK 43 B URL HTTP/2 www.acint.net/match?dp=104&euid=V2fkQ3ncxYu5
IP 185.12.125.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=104&euid=V2fkQ3ncxYu5 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=fwAAAWM0C9NRoADeMBHHAj4JJR7VOEyoFoy1yyX3xjefQTVn; cSyncDp7v2=1664355283; cSyncDp14v3=1664355283; cSyncDp17=1664355283; cSyncDp32=1664355283; cSyncDp45v3=1664355283; cSyncDp53=1664355283; cSyncDp54v2=1664355283; cSyncDp62=1664355283; cSyncDp67v2=1664355283; cSyncDp68=1664355283; cSyncDp71=1664355283; cSyncDp77=1664355283; cSyncDp84=1664355283; cSyncDp85=1664355283; cSyncDp95v3=1664355283; cSyncDp101=1664355283; cSyncDp104v2=1664355283; cSyncDp107=1664355283; cSyncDp110=1664355283; cSyncDp111v2=1664355283; cSyncDp112v2=1664355283; cSyncDp125v2=1664355283; cSyncDp126=1664355283; cSyncDp127=1664355283; cSyncDp129=1664355283; cSyncDp136v2=1664355283; cSyncDp138=1664355283; cSyncDp144=1664355283; cSyncDp146=1664355283; cSyncDp148=1664355283; cSyncDp149=1664355283; cSyncDp151=1664355283; cSyncDp178=1664355283; cSyncDp179=1664355283; cSyncDp186=1664355283; cSyncDp221=1664355283
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:44 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
35.190.24.218302 Found 0 B URL HTTP/2 redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
IP 35.190.24.218:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect HTTP/1.1
Host: redirect.frontend.weborama.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: Weborama Collect Frontend
date: Wed, 28 Sep 2022 08:54:44 GMT
content-length: 0
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=1713785309
access-control-allow-origin: *
p3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM"
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: Tue, 03 Jul 2001 06:00:00 GMT
last-modified: Wed, 28 Sep 2022 08:54:44 GMT
set-cookie: AFFICHE_W=66AUCayn1tLr63; expires=Thu, 26 Oct 2023 08:54:44 GMT; domain=.weborama.fr; path=/; secure; SameSite=None
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=73&external_user_id=0100007FD30B3463DE00A05102C71130&crf=1
188.42.196.115200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=73&external_user_id=0100007FD30B3463DE00A05102C71130&crf=1
IP 188.42.196.115:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=73&external_user_id=0100007FD30B3463DE00A05102C71130&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 28 Sep 2023 08:54:44 GMT; Path=/; Domain=.betweendigital.com
tuuid=2f7d6202-9260-520f-b4d9-a633d7edade7; Max-Age=31536000; Expires=Thu, 28 Sep 2023 08:54:44 GMT; Path=/; Domain=.betweendigital.com
ut=YzQL1AALToh0Xpsj-PH-tPMrMDl2Teh3Lf052w==; Max-Age=31536000; Expires=Thu, 28 Sep 2023 08:54:44 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=0100007FD30B3463DE00A05102C71130
195.209.111.13200 OK 42 B URL HTTP/1.1 ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=0100007FD30B3463DE00A05102C71130
IP 195.209.111.13:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cgi-bin/sync.cgi?ssp_id=43&external_id=0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: ssp.adriver.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
sm.rtb.mts.ru/p?ssp=sape&id=0100007FD30B3463DE00A05102C71130
217.66.147.35301 Moved Permanently 0 B URL HTTP/1.1 sm.rtb.mts.ru/p?ssp=sape&id=0100007FD30B3463DE00A05102C71130
IP 217.66.147.35:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sape&id=0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: sm.rtb.mts.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin
Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
Vary: Origin
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://sm.rtb.mts.ru/match/second?ssp=30&exu=0100007FD30B3463DE00A05102C71130
Set-Cookie: dspid=3e96845d-a8fb-4cb7-84a2-8671cd0ff977; expires=Tue, 19 Sep 2023 08:54:44 GMT; domain=.mts.ru; path=/; secure; SameSite=None
px.adhigh.net/p/cm/sape?u=0100007FD30B3463DE00A05102C71130
193.232.150.60302 Found 0 B URL HTTP/2 px.adhigh.net/p/cm/sape?u=0100007FD30B3463DE00A05102C71130
IP 193.232.150.60:0
ASN #48061 Limited Liability Company GPM Digital Technologies
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/cm/sape?u=0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 28 Sep 2022 08:54:44 GMT
content-length: 0
x-backend-id: f20-ru
access-control-allow-origin: *
access-control-allow-credentials: true
set-cookie: gi_u=L9JsPxysFT1.AikABlGDg043Dg;Path=/;Domain=.adhigh.net;Expires=Thu, 28-Sep-2023 08:54:44 GMT;Secure;SameSite=None
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
location: https://px.adhigh.net/p/cm/sape?u=0100007FD30B3463DE00A05102C71130&bounced=1
X-Firefox-Spdy: h2
tag.digitaltarget.ru/adcm.js
185.15.175.147200 OK 3.1 kB URL HTTP/1.1 tag.digitaltarget.ru/adcm.js
IP 185.15.175.147:0
File type ASCII text, with very long lines (3051), with no line terminators
Hash e7097284185069f52fc736bcd50cda13
1cdfdf2d869841202079ddf91e0a00a8610812e6
40f2a96f78f4c8484e9da6e172f5ddd3e4d7786ca29e04b96e1067a365190e80
GET /adcm.js HTTP/1.1
Host: tag.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Type: application/javascript
Content-Length: 3051
Last-Modified: Wed, 28 Sep 2022 08:34:13 GMT
Connection: keep-alive
ETag: "63340705-beb"
Accept-Ranges: bytes
redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=1713785309
35.190.24.218204 No Content 0 B URL HTTP/2 redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=1713785309
IP 35.190.24.218:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=1713785309 HTTP/1.1
Host: redirect.frontend.weborama.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: Weborama Collect Frontend
date: Wed, 28 Sep 2022 08:54:44 GMT
access-control-allow-origin: *
p3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM"
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: Tue, 03 Jul 2001 06:00:00 GMT
last-modified: Wed, 28 Sep 2022 08:54:44 GMT
set-cookie: AFFICHE_W=; expires=Tue, 10 Nov 2009 23:00:00 GMT; domain=.weborama.fr; path=/; secure; SameSite=None
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2710681560546448&output=html&h=280&slotname=1174883296&adk=2553427016&adf=3242202670&pi=t.ma~as.1174883296&w=336&lmt=1664355281&url=http%3A%2F%2Fwww.taranov.ru%2F&wgl=1&dt=1664355280779&bpp=5&bdt=289&idt=921&shv=r20220922&mjsv=m202209220101&ptt=5&saldr=sa&abxe=1&cookie=ID%3D14e6946514eaa57e-221b9c2d30ce0038%3AT%3D1664355284%3ART%3D1664355284%3AS%3DALNI_Mb_h5kzb2SE33QY7fdLK3sPEoeZrg&prev_slotnames=5571641336&correlator=7401170515511&frm=20&pv=1&ga_vid=1034778895.1664355282&ga_sid=1664355282&ga_hid=650481041&ga_fc=0&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=326&ady=863&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C42531706%2C44772927&oid=2&pvsid=3472826446706664&nvt=1&eae=0&fc=640&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=o%7C%7CoEe%7C&abl=CS&pfx=0&fu=0&bc=23&ifi=2&uci=a!2&fsb=1&xpc=BZg7A8Obzd&p=http%3A//www.taranov.ru&dtd=1047
142.250.74.162200 OK 31 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2710681560546448&output=html&h=280&slotname=1174883296&adk=2553427016&adf=3242202670&pi=t.ma~as.1174883296&w=336&lmt=1664355281&url=http%3A%2F%2Fwww.taranov.ru%2F&wgl=1&dt=1664355280779&bpp=5&bdt=289&idt=921&shv=r20220922&mjsv=m202209220101&ptt=5&saldr=sa&abxe=1&cookie=ID%3D14e6946514eaa57e-221b9c2d30ce0038%3AT%3D1664355284%3ART%3D1664355284%3AS%3DALNI_Mb_h5kzb2SE33QY7fdLK3sPEoeZrg&prev_slotnames=5571641336&correlator=7401170515511&frm=20&pv=1&ga_vid=1034778895.1664355282&ga_sid=1664355282&ga_hid=650481041&ga_fc=0&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=326&ady=863&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C42531706%2C44772927&oid=2&pvsid=3472826446706664&nvt=1&eae=0&fc=640&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=o%7C%7CoEe%7C&abl=CS&pfx=0&fu=0&bc=23&ifi=2&uci=a!2&fsb=1&xpc=BZg7A8Obzd&p=http%3A//www.taranov.ru&dtd=1047
IP 142.250.74.162:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Hash f5a2a7424fa1ddcd0f612fa9d270e0f6
57cd4cfc7430b461dbd1aa05c861dd92313f9dee
8d66dd66be873b768e32f58f4620ebebe2aa031a067ec414667c3899e2261178
GET /pagead/ads?client=ca-pub-2710681560546448&output=html&h=280&slotname=1174883296&adk=2553427016&adf=3242202670&pi=t.ma~as.1174883296&w=336&lmt=1664355281&url=http%3A%2F%2Fwww.taranov.ru%2F&wgl=1&dt=1664355280779&bpp=5&bdt=289&idt=921&shv=r20220922&mjsv=m202209220101&ptt=5&saldr=sa&abxe=1&cookie=ID%3D14e6946514eaa57e-221b9c2d30ce0038%3AT%3D1664355284%3ART%3D1664355284%3AS%3DALNI_Mb_h5kzb2SE33QY7fdLK3sPEoeZrg&prev_slotnames=5571641336&correlator=7401170515511&frm=20&pv=1&ga_vid=1034778895.1664355282&ga_sid=1664355282&ga_hid=650481041&ga_fc=0&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=326&ady=863&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C42531706%2C44772927&oid=2&pvsid=3472826446706664&nvt=1&eae=0&fc=640&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=o%7C%7CoEe%7C&abl=CS&pfx=0&fu=0&bc=23&ifi=2&uci=a!2&fsb=1&xpc=BZg7A8Obzd&p=http%3A//www.taranov.ru&dtd=1047 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.taranov.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Wed, 28 Sep 2022 08:54:44 GMT
server: cafe
content-length: 30768
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 28-Sep-2022 09:09:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Wed, 28 Sep 2022 08:54:44 GMT
cache-control: private
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2710681560546448&output=html&h=60&slotname=5571641336&adk=470676839&adf=2484149752&pi=t.ma~as.5571641336&w=468&lmt=1664355281&url=http%3A%2F%2Fwww.taranov.ru%2F&wgl=1&dt=1664355280779&bpp=32&bdt=289&idt=902&shv=r20220922&mjsv=m202209220101&ptt=5&saldr=sa&abxe=1&cookie=ID%3D14e6946514eaa57e-221b9c2d30ce0038%3AT%3D1664355284%3ART%3D1664355284%3AS%3DALNI_Mb_h5kzb2SE33QY7fdLK3sPEoeZrg&correlator=7401170515511&frm=20&pv=2&ga_vid=1034778895.1664355282&ga_sid=1664355282&ga_hid=650481041&ga_fc=0&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=260&ady=225&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C42531706%2C44772927&oid=2&pvsid=3472826446706664&nvt=1&eae=0&fc=640&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=o%7Co%7CoEe%7C&abl=NS&pfx=0&fu=0&bc=23&ifi=1&uci=a!1&fsb=1&xpc=dkdsny21zk&p=http%3A//www.taranov.ru&dtd=1039
142.250.74.162200 OK 30 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2710681560546448&output=html&h=60&slotname=5571641336&adk=470676839&adf=2484149752&pi=t.ma~as.5571641336&w=468&lmt=1664355281&url=http%3A%2F%2Fwww.taranov.ru%2F&wgl=1&dt=1664355280779&bpp=32&bdt=289&idt=902&shv=r20220922&mjsv=m202209220101&ptt=5&saldr=sa&abxe=1&cookie=ID%3D14e6946514eaa57e-221b9c2d30ce0038%3AT%3D1664355284%3ART%3D1664355284%3AS%3DALNI_Mb_h5kzb2SE33QY7fdLK3sPEoeZrg&correlator=7401170515511&frm=20&pv=2&ga_vid=1034778895.1664355282&ga_sid=1664355282&ga_hid=650481041&ga_fc=0&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=260&ady=225&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C42531706%2C44772927&oid=2&pvsid=3472826446706664&nvt=1&eae=0&fc=640&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=o%7Co%7CoEe%7C&abl=NS&pfx=0&fu=0&bc=23&ifi=1&uci=a!1&fsb=1&xpc=dkdsny21zk&p=http%3A//www.taranov.ru&dtd=1039
IP 142.250.74.162:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (65509), with no line terminators
Hash fdea9564647539b01ee0a01e220b96d9
660e4f927ba1b81a7142515410310c2ffb78d8d0
5ae93efbcfbbbe806d04594e54dbd2c6c2f787da0e33c80f9fc0e0cdb877342e
GET /pagead/ads?client=ca-pub-2710681560546448&output=html&h=60&slotname=5571641336&adk=470676839&adf=2484149752&pi=t.ma~as.5571641336&w=468&lmt=1664355281&url=http%3A%2F%2Fwww.taranov.ru%2F&wgl=1&dt=1664355280779&bpp=32&bdt=289&idt=902&shv=r20220922&mjsv=m202209220101&ptt=5&saldr=sa&abxe=1&cookie=ID%3D14e6946514eaa57e-221b9c2d30ce0038%3AT%3D1664355284%3ART%3D1664355284%3AS%3DALNI_Mb_h5kzb2SE33QY7fdLK3sPEoeZrg&correlator=7401170515511&frm=20&pv=2&ga_vid=1034778895.1664355282&ga_sid=1664355282&ga_hid=650481041&ga_fc=0&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=260&ady=225&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C42531706%2C44772927&oid=2&pvsid=3472826446706664&nvt=1&eae=0&fc=640&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=o%7Co%7CoEe%7C&abl=NS&pfx=0&fu=0&bc=23&ifi=1&uci=a!1&fsb=1&xpc=dkdsny21zk&p=http%3A//www.taranov.ru&dtd=1039 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.taranov.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Wed, 28 Sep 2022 08:54:44 GMT
server: cafe
content-length: 30423
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 28-Sep-2022 09:09:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Wed, 28 Sep 2022 08:54:44 GMT
cache-control: private
X-Firefox-Spdy: h2
sm.rtb.mts.ru/match/second?ssp=30&exu=0100007FD30B3463DE00A05102C71130
217.66.147.35301 Moved Permanently 0 B URL HTTP/1.1 sm.rtb.mts.ru/match/second?ssp=30&exu=0100007FD30B3463DE00A05102C71130
IP 217.66.147.35:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/second?ssp=30&exu=0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: sm.rtb.mts.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin
Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
Vary: Origin
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://tech.rtb.mts.ru/
ocsp.godaddy.com/
192.124.249.24200 OK 1.8 kB IP 192.124.249.24:0
Hash 89ff0f8e885e5753adf45398f2a47735
0def7fe4e1b5cf94e39ba7380ff7305f42dc0a80
a84027b0dc5c677a3c1b9c4a170ade383f3d67ff0c9286c93696c8206a5a7af8
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 27 Sep 2022 23:37:55 GMT
Expires: Wed, 28 Sep 2022 23:37:55 GMT
ETag: "0def7fe4e1b5cf94e39ba7380ff7305f42dc0a80"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
px.adhigh.net/p/cm/sape?u=0100007FD30B3463DE00A05102C71130&bounced=1
193.232.150.60200 OK 49 B URL HTTP/2 px.adhigh.net/p/cm/sape?u=0100007FD30B3463DE00A05102C71130&bounced=1
IP 193.232.150.60:0
ASN #48061 Limited Liability Company GPM Digital Technologies
File type GIF image data, version 89a, 1 x 1\012- data
Hash 889bc1fffc025af4685839fb516a0b8b
7f105137a4eafe93213ecd8cc34dd907c340467c
d0409a1b73dab4e29dc40f92fb431fa9133baa23b4a1ffae4897f39068110e32
GET /p/cm/sape?u=0100007FD30B3463DE00A05102C71130&bounced=1 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 08:54:44 GMT
content-type: image/gif
content-length: 49
x-backend-id: f20-ru
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 68c35c28c9c13cf2e9c6e6f204b35fc0
f3304b5fd40e250d969071ce611ff0d9ce26be93
5a0c4bc7f3afef994cf3ba6f678b98713b30562d256e5461ba2436188d4a3dcd
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 08:54:44 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 27 Sep 2022 14:18:44 GMT
Expires: Tue, 04 Oct 2022 14:18:43 GMT
Etag: "f3304b5fd40e250d969071ce611ff0d9ce26be93"
Cache-Control: max-age=537238,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 751b4191195eb511-OSL
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash e2875a9e06f892f0d4fa46c0f98a1c49
9c0e332f55a592367b602494642ee2127699b543
74692ca89ddc427d0c55f56aedb738b107a9761c44ed5201f932f54950a6f406
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:54:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 042c38716faa379dfe35bfc0e350d539
f604c07161c10f251501fe5bf3ea534beb6ea865
2038294cc39316a8f13c431224609cd186f9e115b792f0b8f0f22f039c9d9ed8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:54:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 042c38716faa379dfe35bfc0e350d539
f604c07161c10f251501fe5bf3ea534beb6ea865
2038294cc39316a8f13c431224609cd186f9e115b792f0b8f0f22f039c9d9ed8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:54:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/pagead/js/r20220922/r20110914/abg_lite_fy2021.js
142.250.74.33200 OK 9.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220922/r20110914/abg_lite_fy2021.js
IP 142.250.74.33:0
File type ASCII text, with very long lines (1624)
Hash f46cc3169ffbd99218f62616e2dc44ea
f44964026d2af9900a059c88967c9e8d067def45
9c82ae03291d76510460e1468338fd9303e25ccbf65e94c66e7a3e2173d7b29c
GET /pagead/js/r20220922/r20110914/abg_lite_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 9559
x-xss-protection: 0
date: Wed, 28 Sep 2022 08:38:22 GMT
expires: Wed, 12 Oct 2022 08:38:22 GMT
cache-control: public, max-age=1209600
etag: 12142024561622733046
content-type: text/javascript; charset=UTF-8
age: 982
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
x01.aidata.io/0.gif?pid=9401454&id=0100007FD30B3463DE00A05102C71130
89.108.120.68302 Found 0 B URL HTTP/2 x01.aidata.io/0.gif?pid=9401454&id=0100007FD30B3463DE00A05102C71130
IP 89.108.120.68:0
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0.gif?pid=9401454&id=0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: x01.aidata.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 28 Sep 2022 08:54:44 GMT
content-length: 0
location: https://x01.aidata.io/0.gif?pid=9401454&id=0100007FD30B3463DE00A05102C71130&bounce=1
expires: Wed, 28 Sep 2022 08:54:43 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Wed, 28 Sep 2022 08:54:43 GMT
set-cookie: __upin=5danEZBFcg+PDPePPLgusQ;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
__upints=1664355284;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220922/r20110914/client/qs_click_protection_fy2021.js
142.250.74.33200 OK 7.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220922/r20110914/client/qs_click_protection_fy2021.js
IP 142.250.74.33:0
File type ASCII text, with very long lines (1494)
Hash d4c271459de87911060fd730756373be
9100e62d0d61513c1b489e47a6a35b84e8be4a25
b14fbcdbed0b02e9656b4d5ff183d84c25b076ac0b1087d2feb9254ee9ce8c24
GET /pagead/js/r20220922/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 7553
x-xss-protection: 0
date: Wed, 28 Sep 2022 08:35:03 GMT
expires: Wed, 12 Oct 2022 08:35:03 GMT
cache-control: public, max-age=1209600
etag: 15375136450269253166
content-type: text/javascript; charset=UTF-8
age: 1181
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
an.yandex.ru/mapuid/sapeis/0100007FD30B3463DE00A05102C71130?redir-setuniq=1
87.250.250.90200 OK 16 kB URL HTTP/2 an.yandex.ru/mapuid/sapeis/0100007FD30B3463DE00A05102C71130?redir-setuniq=1
IP 87.250.250.90:0
Hash 600808771fbd95ac5dc4f0eb3fba1bb4
68cc1d9262408e2616b6389617801d1ce48d57b9
202e8fc96a9ef6202ea27eb43d1a708d8483454fd28dab49478e9ff613128544
GET /mapuid/sapeis/0100007FD30B3463DE00A05102C71130?redir-setuniq=1 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Wed, 28 Sep 2022 08:54:44 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 28 Sep 2022 08:54:44 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Wed, 28 Sep 2022 08:54:44 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif; charset=utf-8
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash e2875a9e06f892f0d4fa46c0f98a1c49
9c0e332f55a592367b602494642ee2127699b543
74692ca89ddc427d0c55f56aedb738b107a9761c44ed5201f932f54950a6f406
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:54:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
x01.aidata.io/0.gif?pid=9401454&id=0100007FD30B3463DE00A05102C71130&bounce=1
89.108.120.68204 No Content 0 B URL HTTP/2 x01.aidata.io/0.gif?pid=9401454&id=0100007FD30B3463DE00A05102C71130&bounce=1
IP 89.108.120.68:0
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0.gif?pid=9401454&id=0100007FD30B3463DE00A05102C71130&bounce=1 HTTP/1.1
Host: x01.aidata.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Wed, 28 Sep 2022 08:54:44 GMT
expires: Wed, 28 Sep 2022 08:54:43 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Wed, 28 Sep 2022 08:54:43 GMT
set-cookie: __upin=IJ20wd9MRzdLiXegRIVqmg;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
__upints=1664355285;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash fc82211401f793132f7d43c2fd253af5
605d8371709b5d2a41967fd390c34fa649f89ea3
b23fd36ec037710672ac1aa6fea284e3869c4bae7941d9b53c771cff8743478e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:54:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 5e01e4cfb215a3f052b4c716bc77c1a6
6e63b3e883051319571310c44b87591f0312d83f
aebb544e0762c6c3eb289d85c20299baa3f742dc46cfa5bcc33ac6df411285ae
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:54:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/mysidia/270cb447f650f22be90b4349b85576c2.js?tag=mysidia_one_click_handler_one_afma_2019
142.250.74.163200 OK 14 kB URL HTTP/2 www.gstatic.com/mysidia/270cb447f650f22be90b4349b85576c2.js?tag=mysidia_one_click_handler_one_afma_2019
IP 142.250.74.163:0
File type C++ source, ASCII text, with very long lines (1792)
Hash 10e6f3bdb6fae70ad38bdf5dbf63ec92
9bc2aed43500f7a96923397c67624983f7593c77
07cfe15791ca91426412f72bbd4300bb7b19b5fd976285a9071861dc3c90e779
GET /mysidia/270cb447f650f22be90b4349b85576c2.js?tag=mysidia_one_click_handler_one_afma_2019 HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/mysidia
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="mysidia"
report-to: {"group":"mysidia","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/mysidia"}]}
content-length: 13677
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 17:06:30 GMT
expires: Sat, 24 Dec 2022 17:06:30 GMT
cache-control: public, max-age=7776000
last-modified: Fri, 23 Sep 2022 12:48:13 GMT
content-type: text/javascript
age: 229695
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/measurement/l?ebcid=ALh7CaSmOikpggVBX2wI4hvmBvDk9JTQXFm-PK9QdbVoYTNPKVZlWjg1droOdP2Aa5ZsaSujVQtUlI0vpnxWAaW6tVYr6re4vA
142.250.74.164204 No Content 0 B URL HTTP/2 www.google.com/ads/measurement/l?ebcid=ALh7CaSmOikpggVBX2wI4hvmBvDk9JTQXFm-PK9QdbVoYTNPKVZlWjg1droOdP2Aa5ZsaSujVQtUlI0vpnxWAaW6tVYr6re4vA
IP 142.250.74.164:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/measurement/l?ebcid=ALh7CaSmOikpggVBX2wI4hvmBvDk9JTQXFm-PK9QdbVoYTNPKVZlWjg1droOdP2Aa5ZsaSujVQtUlI0vpnxWAaW6tVYr6re4vA HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 28 Sep 2022 08:54:45 GMT
server: jumble_frontend_server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash fc82211401f793132f7d43c2fd253af5
605d8371709b5d2a41967fd390c34fa649f89ea3
b23fd36ec037710672ac1aa6fea284e3869c4bae7941d9b53c771cff8743478e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 08:54:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/measurement/l?ebcid=ALh7CaTMhj9Gvt7yHl5McItd7NogrBwr-j8ksw8r3sWKdvD-msd4Z2sSMfcGfAeITUXc-c8W3U9TP7Z2PuJ2lQXlzdIQVoGxzA
142.250.74.164204 No Content 0 B URL HTTP/2 www.google.com/ads/measurement/l?ebcid=ALh7CaTMhj9Gvt7yHl5McItd7NogrBwr-j8ksw8r3sWKdvD-msd4Z2sSMfcGfAeITUXc-c8W3U9TP7Z2PuJ2lQXlzdIQVoGxzA
IP 142.250.74.164:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/measurement/l?ebcid=ALh7CaTMhj9Gvt7yHl5McItd7NogrBwr-j8ksw8r3sWKdvD-msd4Z2sSMfcGfAeITUXc-c8W3U9TP7Z2PuJ2lQXlzdIQVoGxzA HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 28 Sep 2022 08:54:45 GMT
server: jumble_frontend_server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tech.rtb.mts.ru/
213.87.44.187204 No Content 0 B IP 213.87.44.187:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: tech.rtb.mts.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.2
Date: Wed, 28 Sep 2022 08:54:45 GMT
Content-Type: text/html; charset=utf-8
Connection: keep-alive
Set-Cookie: mts_id=c67b25c4-12c6-480f-8be0-990be5bcfc3f; Domain=mts.ru; expires=Fri, 06 Aug 2032 08:54:45 GMT; SameSite=None; Secure
mts_id_last_sync=1664355285; Domain=mts.ru; expires=Fri, 06 Aug 2032 08:54:45 GMT; SameSite=None; Secure
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Access-Control-Allow-Headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
142.250.74.163200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:34:21 GMT
expires: Thu, 21 Sep 2023 19:34:21 GMT
cache-control: public, max-age=31536000
age: 566424
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2
142.250.74.163200 OK 9.6 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 9644, version 1.0\012- data
Hash 6f112ec2b932ee12379442c42853244e
b2e73c8c70d6261e1d187f41693c43ac4fe0809d
6a84eeee6a25e7c9a8a03191007a6720566b5a2aa2384d36168fb07f49e97e9e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9644
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:34:41 GMT
expires: Thu, 21 Sep 2023 19:34:41 GMT
cache-control: public, max-age=31536000
age: 566404
last-modified: Wed, 11 May 2022 19:24:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
142.250.74.163200 OK 9.6 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 9628, version 1.0\012- data
Hash d9ac47c7e500fb7083b8d595eaf6fe12
112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933
495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 06:19:49 GMT
expires: Fri, 22 Sep 2023 06:19:49 GMT
cache-control: public, max-age=31536000
age: 527696
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.163200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:34:08 GMT
expires: Thu, 21 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 566437
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
142.250.74.163200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:34:08 GMT
expires: Thu, 21 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 566437
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a8444315e9f84e4a547b08110266ad0e
fe9b5d8ee778dd3dc354e1d7947b760a33a2545f
396637c614c1ebec1726a49477720d1f14a859ff28931003238958a969c0b5c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "396637C614C1EBEC1726A49477720D1F14A859FF28931003238958A969C0B5C3"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8883
Expires: Wed, 28 Sep 2022 11:22:48 GMT
Date: Wed, 28 Sep 2022 08:54:45 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a8444315e9f84e4a547b08110266ad0e
fe9b5d8ee778dd3dc354e1d7947b760a33a2545f
396637c614c1ebec1726a49477720d1f14a859ff28931003238958a969c0b5c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "396637C614C1EBEC1726A49477720D1F14A859FF28931003238958A969C0B5C3"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8883
Expires: Wed, 28 Sep 2022 11:22:48 GMT
Date: Wed, 28 Sep 2022 08:54:45 GMT
Connection: keep-alive
dmg.digitaltarget.ru/1/1093/i/i?i=75368953929717.213477764622828&a=77&e=0100007FD30B3463DE00A05102C71130&pref=http%3A%2F%2Fwww.taranov.ru%2F&c=ss:77.up:0100007FD30B3463DE00A05102C71130.sync:up.xdua:duHMTdgZB2MgBTub8M0Zau71.xps:xpsnSZO4RDe8D098O98lHjBkd.dn:acint__net.adcm:hit.tg:adcmjs_noorient
185.15.175.131307 Temporary Redirect 0 B URL HTTP/1.1 dmg.digitaltarget.ru/1/1093/i/i?i=75368953929717.213477764622828&a=77&e=0100007FD30B3463DE00A05102C71130&pref=http%3A%2F%2Fwww.taranov.ru%2F&c=ss:77.up:0100007FD30B3463DE00A05102C71130.sync:up.xdua:duHMTdgZB2MgBTub8M0Zau71.xps:xpsnSZO4RDe8D098O98lHjBkd.dn:acint__net.adcm:hit.tg:adcmjs_noorient
IP 185.15.175.131:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/1093/i/i?i=75368953929717.213477764622828&a=77&e=0100007FD30B3463DE00A05102C71130&pref=http%3A%2F%2Fwww.taranov.ru%2F&c=ss:77.up:0100007FD30B3463DE00A05102C71130.sync:up.xdua:duHMTdgZB2MgBTub8M0Zau71.xps:xpsnSZO4RDe8D098O98lHjBkd.dn:acint__net.adcm:hit.tg:adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Wed, 28 Sep 2022 08:54:45 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=75368953929717.213477764622828&a=77&e=0100007FD30B3463DE00A05102C71130&pref=http%3A%2F%2Fwww.taranov.ru%2F&c=ss:77.up:0100007FD30B3463DE00A05102C71130.sync:up.xdua:duHMTdgZB2MgBTub8M0Zau71.xps:xpsnSZO4RDe8D098O98lHjBkd.dn:acint__net.adcm:hit.tg:adcmjs_noorient
Set-Cookie: viuserid=LLorWOMJStYJw0B7Lc9t; Max-Age=93312000; Expires=Fri, 12 Sep 2025 08:54:45 GMT; SameSite=None; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly
Request-Time: 0
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/1/1093/i/i?i=75368953929717.712892669324941&a=77&e=0100007FD30B3463DE00A05102C71130&pref=http%3A%2F%2Fwww.taranov.ru%2F&c=ss:77.up:0100007FD30B3463DE00A05102C71130.sync:up.xdua:duHMTdgZB2MgBTub8M0Zau71.xps:xpsnSZO4RDe8D098O98lHjBkd.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
185.15.175.131307 Temporary Redirect 0 B URL HTTP/1.1 dmg.digitaltarget.ru/1/1093/i/i?i=75368953929717.712892669324941&a=77&e=0100007FD30B3463DE00A05102C71130&pref=http%3A%2F%2Fwww.taranov.ru%2F&c=ss:77.up:0100007FD30B3463DE00A05102C71130.sync:up.xdua:duHMTdgZB2MgBTub8M0Zau71.xps:xpsnSZO4RDe8D098O98lHjBkd.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
IP 185.15.175.131:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/1093/i/i?i=75368953929717.712892669324941&a=77&e=0100007FD30B3463DE00A05102C71130&pref=http%3A%2F%2Fwww.taranov.ru%2F&c=ss:77.up:0100007FD30B3463DE00A05102C71130.sync:up.xdua:duHMTdgZB2MgBTub8M0Zau71.xps:xpsnSZO4RDe8D098O98lHjBkd.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Wed, 28 Sep 2022 08:54:45 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=75368953929717.712892669324941&a=77&e=0100007FD30B3463DE00A05102C71130&pref=http%3A%2F%2Fwww.taranov.ru%2F&c=ss:77.up:0100007FD30B3463DE00A05102C71130.sync:up.xdua:duHMTdgZB2MgBTub8M0Zau71.xps:xpsnSZO4RDe8D098O98lHjBkd.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
Set-Cookie: viuserid=I48UYKwJLSdkOWk70p3h; Max-Age=93312000; Expires=Fri, 12 Sep 2025 08:54:45 GMT; SameSite=None; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly
Request-Time: 1
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10165
Expires: Wed, 28 Sep 2022 11:44:10 GMT
Date: Wed, 28 Sep 2022 08:54:45 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10165
Expires: Wed, 28 Sep 2022 11:44:10 GMT
Date: Wed, 28 Sep 2022 08:54:45 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10165
Expires: Wed, 28 Sep 2022 11:44:10 GMT
Date: Wed, 28 Sep 2022 08:54:45 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff14e2acf-9d43-48bc-ab80-1dc73fa7dfc8.webp
34.120.237.76200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff14e2acf-9d43-48bc-ab80-1dc73fa7dfc8.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c301dff6ddda16fd64692c19173cfa8c
2afdfb716192540a61327137706462c53588bf23
fd0f33a778fec87dbfa323ffa6b24ca5f94aa16d102e62683ad54b759208058b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff14e2acf-9d43-48bc-ab80-1dc73fa7dfc8.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5377
x-amzn-requestid: 28ddd5cd-c299-4b36-98be-b6dbeaadc1ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI4KRGo7oAMFUiQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336d74-27ebe6e974ee5b7d06227fca;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:39:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _yH8kTWHHDU-LcnNz0fjoHkPhf6dRP7p7QydoE3DNu4fJhDpEkxPrg==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:50:17 GMT
age: 39868
etag: "2afdfb716192540a61327137706462c53588bf23"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
an.yandex.ru/mapuid/sapeis/0100007FD30B3463DE00A05102C71130
87.250.250.90302 Found 8.5 kB URL HTTP/2 an.yandex.ru/mapuid/sapeis/0100007FD30B3463DE00A05102C71130
IP 87.250.250.90:0
Hash daf6cc0e587961dfb7b0d11d2502e2d9
85fcf8bedfc6fdec50917c14fc718b838d8bff40
79b14ae16eb6b3ff7f74b37d1579d617a37e8b8a5038ab06cb3dbe3a26f9f904
GET /mapuid/sapeis/0100007FD30B3463DE00A05102C71130 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
timing-allow-origin: *
location: https://an.yandex.ru/mapuid/sapeis/0100007FD30B3463DE00A05102C71130?redir-setuniq=1
date: Wed, 28 Sep 2022 08:54:44 GMT
set-cookie: yandexuid=1366018691664355284; domain=.yandex.ru; path=/; expires=Sat, 25-Sep-2032 08:54:44 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 28 Sep 2022 08:54:44 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Wed, 28 Sep 2022 08:54:44 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5653a1a-a7d7-4b1e-a27e-4eb6b032901d.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5653a1a-a7d7-4b1e-a27e-4eb6b032901d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ee83d08d024d127fad5918e1ffacb78b
8ad289a77705358ab660b6123e9d90de991b6c13
aaab3590ef3777ce8b7a9a34f18866fa20ecaa554cbcdcdb3f1fa3c34c88ceb4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5653a1a-a7d7-4b1e-a27e-4eb6b032901d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11314
x-amzn-requestid: 9f410158-cd1a-45a9-9e86-4005b25577e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e4Hw7oAMFpAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5f-70683c681f22a3b6103fcb4a;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: l9IinQYCcQV_iymSArIEnOWgbmLlmVqz94402zcsmga5Bp3Sty7QRg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:40:49 GMT
age: 40436
etag: "8ad289a77705358ab660b6123e9d90de991b6c13"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f1c3f99-416b-41d1-a46a-b033a0c3c4e0.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f1c3f99-416b-41d1-a46a-b033a0c3c4e0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 028eb76f8e04e6b5d209c0e42b00bd20
251777479f84b43885fe63cc2627269590cafb15
8bb6374e64f6d2303f8d1af261e1d74af01b61ef49964295bd35c3350c72d09f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f1c3f99-416b-41d1-a46a-b033a0c3c4e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11543
x-amzn-requestid: 1d16ab89-2c8d-4c5b-a4dd-e22d3c7eccdb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI37hEnnIAMFTYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336d16-74ff11ed7bd3eace611ac20d;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:37:26 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: g-9Qy83NyV9AqmIXXT-JAyx3fqEceoDucPcdMLnC11wqDqDK9hcCKg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:57:21 GMT
age: 39444
etag: "251777479f84b43885fe63cc2627269590cafb15"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc40456fc-e6ad-484b-8754-8b2b0e7abc7c.jpeg
34.120.237.76200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc40456fc-e6ad-484b-8754-8b2b0e7abc7c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1fa8cb4f4be5057788cd1a2a4d0e76d6
1aec1d67a36867bee8069a144fb1b0d95ff2cb54
5193131db8040ef254554d59109002ec7b8cfc2eab1e872b63e5f65db7cf5105
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc40456fc-e6ad-484b-8754-8b2b0e7abc7c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5944
x-amzn-requestid: 040b4452-4120-4ae5-9ad2-c5b341abbb13
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI34BFdmIAMFmew=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336cff-103adde82b57535e4f3fb16a;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:37:04 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: q03mXCSikJcsTBGqk1Xq7452EiDz4t9PFbp5Qj4xwobiFgqtPwGCBw==
via: 1.1 d2575afea3774df33dcf5e5ff475025e.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 23:06:54 GMT
age: 35271
etag: "1aec1d67a36867bee8069a144fb1b0d95ff2cb54"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7723c423-9c9b-4e58-93cc-7198e8ff6f62.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7723c423-9c9b-4e58-93cc-7198e8ff6f62.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 46dc8f1499f4de5f03bd87a68c3c6c7b
0cd28a243f9704140ccb9eb1415a77fcccc7cf87
3d7a5cdc0812857efabd7ab941aea6d6582790b86a9587809d222c0a8546262b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7723c423-9c9b-4e58-93cc-7198e8ff6f62.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7359
x-amzn-requestid: 6e3123b2-ea7e-4e3e-8399-19a66d27923f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI34CEYtIAMF01w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336d00-5995316c70da7a0c460ac432;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:37:04 GMT
x-amz-cf-pop: SEA73-P2, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: C8VwjZMvXqbQlvSRB8ugvw6o-wRUI0Xtbn91g79lSpBxrXiCzC_FXg==
via: 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 22:26:18 GMT
age: 37707
etag: "0cd28a243f9704140ccb9eb1415a77fcccc7cf87"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=75368953929717.213477764622828&a=77&e=0100007FD30B3463DE00A05102C71130&pref=http%3A%2F%2Fwww.taranov.ru%2F&c=ss:77.up:0100007FD30B3463DE00A05102C71130.sync:up.xdua:duHMTdgZB2MgBTub8M0Zau71.xps:xpsnSZO4RDe8D098O98lHjBkd.dn:acint__net.adcm:hit.tg:adcmjs_noorient
185.15.175.131200 OK 64 B URL HTTP/1.1 dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=75368953929717.213477764622828&a=77&e=0100007FD30B3463DE00A05102C71130&pref=http%3A%2F%2Fwww.taranov.ru%2F&c=ss:77.up:0100007FD30B3463DE00A05102C71130.sync:up.xdua:duHMTdgZB2MgBTub8M0Zau71.xps:xpsnSZO4RDe8D098O98lHjBkd.dn:acint__net.adcm:hit.tg:adcmjs_noorient
IP 185.15.175.131:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ffd585dfb1ac6320633a0be46d579437
5a6033d23bc9cd5d1de9ee61de69a44428086dcb
df18d81deb0cc1c48ae87e6481bb4ee375b40cce0fec3d226e002704d49f6cc8
GET /awg/custom/1093/i/i?call_source=awg&i=75368953929717.213477764622828&a=77&e=0100007FD30B3463DE00A05102C71130&pref=http%3A%2F%2Fwww.taranov.ru%2F&c=ss:77.up:0100007FD30B3463DE00A05102C71130.sync:up.xdua:duHMTdgZB2MgBTub8M0Zau71.xps:xpsnSZO4RDe8D098O98lHjBkd.dn:acint__net.adcm:hit.tg:adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 08:54:45 GMT
Content-Type: image/gif
Content-Length: 64
Connection: keep-alive
Vary: Accept-Encoding
Request-Time: 6
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=75368953929717.712892669324941&a=77&e=0100007FD30B3463DE00A05102C71130&pref=http%3A%2F%2Fwww.taranov.ru%2F&c=ss:77.up:0100007FD30B3463DE00A05102C71130.sync:up.xdua:duHMTdgZB2MgBTub8M0Zau71.xps:xpsnSZO4RDe8D098O98lHjBkd.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
185.15.175.131200 OK 64 B URL HTTP/1.1 dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=75368953929717.712892669324941&a=77&e=0100007FD30B3463DE00A05102C71130&pref=http%3A%2F%2Fwww.taranov.ru%2F&c=ss:77.up:0100007FD30B3463DE00A05102C71130.sync:up.xdua:duHMTdgZB2MgBTub8M0Zau71.xps:xpsnSZO4RDe8D098O98lHjBkd.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
IP 185.15.175.131:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ffd585dfb1ac6320633a0be46d579437
5a6033d23bc9cd5d1de9ee61de69a44428086dcb
df18d81deb0cc1c48ae87e6481bb4ee375b40cce0fec3d226e002704d49f6cc8
GET /awg/custom/1093/i/i?call_source=awg&i=75368953929717.712892669324941&a=77&e=0100007FD30B3463DE00A05102C71130&pref=http%3A%2F%2Fwww.taranov.ru%2F&c=ss:77.up:0100007FD30B3463DE00A05102C71130.sync:up.xdua:duHMTdgZB2MgBTub8M0Zau71.xps:xpsnSZO4RDe8D098O98lHjBkd.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 28 Sep 2022 08:54:45 GMT
Content-Type: image/gif
Content-Length: 64
Connection: keep-alive
Vary: Accept-Encoding
Request-Time: 6
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
www.acint.net/ping/?v=0.4.0&uid=6781ec5c-2131-4c9f-9b0e-fe515a3f5ee4&dp=10&tz=%2B00%3A00&nc=24450809&dT=2022-09-28T08%3A54%3A43.915
185.12.125.25302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/ping/?v=0.4.0&uid=6781ec5c-2131-4c9f-9b0e-fe515a3f5ee4&dp=10&tz=%2B00%3A00&nc=24450809&dT=2022-09-28T08%3A54%3A43.915
IP 185.12.125.25:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /ping/?v=0.4.0&uid=6781ec5c-2131-4c9f-9b0e-fe515a3f5ee4&dp=10&tz=%2B00%3A00&nc=24450809&dT=2022-09-28T08%3A54%3A43.915 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.taranov.ru/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Wed, 28 Sep 2022 08:54:46 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/ping/?v=0.4.0&uid=6781ec5c-2131-4c9f-9b0e-fe515a3f5ee4&dp=10&tz=%2B00%3A00&nc=24450809&dT=2022-09-28T08%3A54%3A43.915
www.acint.net/ping/?v=0.4.0&uid=6781ec5c-2131-4c9f-9b0e-fe515a3f5ee4&dp=10&tz=%2B00%3A00&nc=24450809&dT=2022-09-28T08%3A54%3A43.915
185.12.125.25200 OK 43 B URL HTTP/2 www.acint.net/ping/?v=0.4.0&uid=6781ec5c-2131-4c9f-9b0e-fe515a3f5ee4&dp=10&tz=%2B00%3A00&nc=24450809&dT=2022-09-28T08%3A54%3A43.915
IP 185.12.125.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /ping/?v=0.4.0&uid=6781ec5c-2131-4c9f-9b0e-fe515a3f5ee4&dp=10&tz=%2B00%3A00&nc=24450809&dT=2022-09-28T08%3A54%3A43.915 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.taranov.ru/
Connection: keep-alive
Cookie: aid=fwAAAWM0C9NRoADeMBHHAj4JJR7VOEyoFoy1yyX3xjefQTVn; cSyncDp7v2=1664355283; cSyncDp14v3=1664355283; cSyncDp17=1664355283; cSyncDp32=1664355283; cSyncDp45v3=1664355283; cSyncDp53=1664355283; cSyncDp54v2=1664355283; cSyncDp62=1664355283; cSyncDp67v2=1664355283; cSyncDp68=1664355283; cSyncDp71=1664355283; cSyncDp77=1664355283; cSyncDp84=1664355283; cSyncDp85=1664355283; cSyncDp95v3=1664355283; cSyncDp101=1664355283; cSyncDp104v2=1664355283; cSyncDp107=1664355283; cSyncDp110=1664355283; cSyncDp111v2=1664355283; cSyncDp112v2=1664355283; cSyncDp125v2=1664355283; cSyncDp126=1664355283; cSyncDp127=1664355283; cSyncDp129=1664355283; cSyncDp136v2=1664355283; cSyncDp138=1664355283; cSyncDp144=1664355283; cSyncDp146=1664355283; cSyncDp148=1664355283; cSyncDp149=1664355283; cSyncDp151=1664355283; cSyncDp178=1664355283; cSyncDp179=1664355283; cSyncDp186=1664355283; cSyncDp221=1664355283
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:46 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=16&cd=%7B%22st%22%3A106995%2C%22sc%22%3A164138904%2C%22pl%22%3A700492%2C%22ev%22%3A%22adTime%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A8%7D&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355289
185.12.125.25200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=16&cd=%7B%22st%22%3A106995%2C%22sc%22%3A164138904%2C%22pl%22%3A700492%2C%22ev%22%3A%22adTime%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A8%7D&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355289
IP 185.12.125.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=16&cd=%7B%22st%22%3A106995%2C%22sc%22%3A164138904%2C%22pl%22%3A700492%2C%22ev%22%3A%22adTime%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A8%7D&sid=63340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97&ref=http%3A%2F%2Fwww.taranov.ru%2F&r=1664355289 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.taranov.ru/
Cookie: aid=fwAAAWM0C9NRoADeMBHHAj4JJR7VOEyoFoy1yyX3xjefQTVn; cSyncDp7v2=1664355283; cSyncDp14v3=1664355283; cSyncDp17=1664355283; cSyncDp32=1664355283; cSyncDp45v3=1664355283; cSyncDp53=1664355283; cSyncDp54v2=1664355283; cSyncDp62=1664355283; cSyncDp67v2=1664355283; cSyncDp68=1664355283; cSyncDp71=1664355283; cSyncDp77=1664355283; cSyncDp84=1664355283; cSyncDp85=1664355283; cSyncDp95v3=1664355283; cSyncDp101=1664355283; cSyncDp104v2=1664355283; cSyncDp107=1664355283; cSyncDp110=1664355283; cSyncDp111v2=1664355283; cSyncDp112v2=1664355283; cSyncDp125v2=1664355283; cSyncDp126=1664355283; cSyncDp127=1664355283; cSyncDp129=1664355283; cSyncDp136v2=1664355283; cSyncDp138=1664355283; cSyncDp144=1664355283; cSyncDp146=1664355283; cSyncDp148=1664355283; cSyncDp149=1664355283; cSyncDp151=1664355283; cSyncDp178=1664355283; cSyncDp179=1664355283; cSyncDp186=1664355283; cSyncDp221=1664355283
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:51 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71281900?wmode=7&page-url=http%3A%2F%2Fwww.taranov.ru%2F&charset=utf-8&site-info=%7B%22site_id%22%3A106995%2C%22srtb_sid%22%3A%2263340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A624%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A1297399688392%3Ahid%3A839973435%3Az%3A0%3Ai%3A20220928085441%3Aet%3A1664355282%3Ac%3A1%3Arn%3A26526671%3Arqn%3A1%3Au%3A1664355282878545051%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C52%2C0%2C342%2C347%2C1%2C362%2C50%2C%2C%2C%2C795%3Ans%3A1664355280002%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664355282%3At%3A%D0%9A%D1%83%D0%BB%D0%B8%D0%BD%D0%B0%D1%80%D0%B8%D1%8F%20%D0%98%D0%B2%D0%B0%D0%BD%D0%B0%20%D0%A2%D0%B0%D1%80%D0%B0%D0%BD%D0%BE%D0%B2%D0%B0%20-%20%D0%A0%D0%B5%D1%86%D0%B5%D0%BF%D1%82%D1%8B%20%D1%81%D0%BB%D0%B0%D0%B4%D0%BE%D1%81%D1%82%D0%B5%D0%B9%20%D0%B8%20%D0%B4%D0%B5%D1%81%D0%B5%D1%80%D1%82%D0%BE%D0%B2&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
87.250.251.119302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/71281900?wmode=7&page-url=http%3A%2F%2Fwww.taranov.ru%2F&charset=utf-8&site-info=%7B%22site_id%22%3A106995%2C%22srtb_sid%22%3A%2263340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A624%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A1297399688392%3Ahid%3A839973435%3Az%3A0%3Ai%3A20220928085441%3Aet%3A1664355282%3Ac%3A1%3Arn%3A26526671%3Arqn%3A1%3Au%3A1664355282878545051%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C52%2C0%2C342%2C347%2C1%2C362%2C50%2C%2C%2C%2C795%3Ans%3A1664355280002%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664355282%3At%3A%D0%9A%D1%83%D0%BB%D0%B8%D0%BD%D0%B0%D1%80%D0%B8%D1%8F%20%D0%98%D0%B2%D0%B0%D0%BD%D0%B0%20%D0%A2%D0%B0%D1%80%D0%B0%D0%BD%D0%BE%D0%B2%D0%B0%20-%20%D0%A0%D0%B5%D1%86%D0%B5%D0%BF%D1%82%D1%8B%20%D1%81%D0%BB%D0%B0%D0%B4%D0%BE%D1%81%D1%82%D0%B5%D0%B9%20%D0%B8%20%D0%B4%D0%B5%D1%81%D0%B5%D1%80%D1%82%D0%BE%D0%B2&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP 87.250.251.119:0
GET /watch/71281900?wmode=7&page-url=http%3A%2F%2Fwww.taranov.ru%2F&charset=utf-8&site-info=%7B%22site_id%22%3A106995%2C%22srtb_sid%22%3A%2263340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A624%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A1297399688392%3Ahid%3A839973435%3Az%3A0%3Ai%3A20220928085441%3Aet%3A1664355282%3Ac%3A1%3Arn%3A26526671%3Arqn%3A1%3Au%3A1664355282878545051%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C52%2C0%2C342%2C347%2C1%2C362%2C50%2C%2C%2C%2C795%3Ans%3A1664355280002%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664355282%3At%3A%D0%9A%D1%83%D0%BB%D0%B8%D0%BD%D0%B0%D1%80%D0%B8%D1%8F%20%D0%98%D0%B2%D0%B0%D0%BD%D0%B0%20%D0%A2%D0%B0%D1%80%D0%B0%D0%BD%D0%BE%D0%B2%D0%B0%20-%20%D0%A0%D0%B5%D1%86%D0%B5%D0%BF%D1%82%D1%8B%20%D1%81%D0%BB%D0%B0%D0%B4%D0%BE%D1%81%D1%82%D0%B5%D0%B9%20%D0%B8%20%D0%B4%D0%B5%D1%81%D0%B5%D1%80%D1%82%D0%BE%D0%B2&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.taranov.ru
Connection: keep-alive
Referer: http://www.taranov.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/71281900/1?wmode=7&page-url=http%3A%2F%2Fwww.taranov.ru%2F&charset=utf-8&site-info=%7B%22site_id%22%3A106995%2C%22srtb_sid%22%3A%2263340bd0-bd2f-1c8o-f1wc-ke9rbrrcck97%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A624%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A1297399688392%3Ahid%3A839973435%3Az%3A0%3Ai%3A20220928085441%3Aet%3A1664355282%3Ac%3A1%3Arn%3A26526671%3Arqn%3A1%3Au%3A1664355282878545051%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C52%2C0%2C342%2C347%2C1%2C362%2C50%2C%2C%2C%2C795%3Ans%3A1664355280002%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664355282%3At%3A%D0%9A%D1%83%D0%BB%D0%B8%D0%BD%D0%B0%D1%80%D0%B8%D1%8F%20%D0%98%D0%B2%D0%B0%D0%BD%D0%B0%20%D0%A2%D0%B0%D1%80%D0%B0%D0%BD%D0%BE%D0%B2%D0%B0%20-%20%D0%A0%D0%B5%D1%86%D0%B5%D0%BF%D1%82%D1%8B%20%D1%81%D0%BB%D0%B0%D0%B4%D0%BE%D1%81%D1%82%D0%B5%D0%B9%20%D0%B8%20%D0%B4%D0%B5%D1%81%D0%B5%D1%80%D1%82%D0%BE%D0%B2&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Wed, 28 Sep 2022 08:54:44 GMT
access-control-allow-origin: http://www.taranov.ru
set-cookie: yandexuid=2656471001664355284; Expires=Thu, 28-Sep-2023 08:54:44 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=2656471001664355284; Expires=Thu, 28-Sep-2023 08:54:44 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=359580231664355284; Path=/; SameSite=None; Secure
i=gQLq/+C6z7gc0hyM9HU5IP+WwuMu6DHLEQXHtfYNtx3b/TJBfdoW+9bot4f1aZD2mKYPkE40a+MSqHCX7sFIUA+5v48=; Expires=Sat, 25-Sep-2032 08:54:43 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1695891284.yrts.1664355284#1695891284.yrtsi.1664355284; Expires=Thu, 28-Sep-2023 08:54:44 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 28-Sep-2022 08:54:44 GMT
last-modified: Wed, 28-Sep-2022 08:54:44 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
cdn-rtb.sape.ru/js/vast/player.min.js
95.181.171.231200 OK 0 B URL HTTP/2 cdn-rtb.sape.ru/js/vast/player.min.js
IP 95.181.171.231:0
GET /js/vast/player.min.js HTTP/1.1
Host: cdn-rtb.sape.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.taranov.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Wed, 28 Sep 2022 08:54:43 GMT
content-type: text/javascript
content-security-policy: block-all-mixed-content
etag: W/"af856922ff467590a5fca2f0fb02e919"
last-modified: Tue, 27 Sep 2022 08:10:25 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-request-id: 1718F142F281FFA9
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
expires: Thu, 29 Sep 2022 08:54:43 GMT
cache-control: max-age=86400
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
x-cache-status: HIT
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A300%2C400%2C700
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A300%2C400%2C700
IP 142.250.74.10:0
GET /css?family=Roboto%3A300%2C400%2C700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 28 Sep 2022 08:54:44 GMT
date: Wed, 28 Sep 2022 08:54:44 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ssp.bidvol.com/usersync?dspcsid=8&redirect=1
65.108.1.47302 Found 0 B URL HTTP/2 ssp.bidvol.com/usersync?dspcsid=8&redirect=1
IP 65.108.1.47:0
ASN #24940 Hetzner Online GmbH
GET /usersync?dspcsid=8&redirect=1 HTTP/1.1
Host: ssp.bidvol.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.23.0
date: Wed, 28 Sep 2022 08:54:44 GMT
x-request-id: 1d428c0b-eb14-4bac-a9bb-8ab1db4abfba
set-cookie: bvuid=8ys9f4ypmy; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None
bvuid2=8ys9f4ypmy; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT
vary: Origin
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
surrogate-control: no-store
location: https://www.acint.net/match?dp=129&euid=8ys9f4ypmy
X-Firefox-Spdy: h2