softreview.com.ua/tag/notepad/
200 OK 52 kB URL HTTP/1.1 softreview.com.ua/tag/notepad/
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (22742), with CRLF, LF line terminators
Hash 207b6985579c0d02164fda0d6d3421b2
bf5a31a926593446cc11c125a0bf2d9bc90f159f
095c246c0b54f0702e08d65c6ef9ee0c14c3c3596ab214997ca65351b5a058f5
Analyzer Verdict Alert fortinet Malware
GET /tag/notepad/ HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.6.40
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13669
Expires: Sun, 04 Dec 2022 19:36:40 GMT
Date: Sun, 04 Dec 2022 15:48:51 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash fb2c0697c6d9a96a5411dd2952947458
79e57f831ec396bbdaa5bfe9472a05e6c9fb31f4
3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4015
Cache-Control: max-age=157761
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:48:51 GMT
Etag: "638c76f5-1d7"
Expires: Tue, 06 Dec 2022 11:38:12 GMT
Last-Modified: Sun, 04 Dec 2022 10:31:17 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4069
Expires: Sun, 04 Dec 2022 16:56:40 GMT
Date: Sun, 04 Dec 2022 15:48:51 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 04 Dec 2022 15:20:07 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1724
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: R7FQ+ehauBJu0y7XJOakNjJfeO8ekp+CmI0DN3xwWZPrwEt5mA7uHxB0CiihYYaciuDTbyFkQ3ySKA8aznssww==
x-amz-request-id: FQRX2XPRW9DA6HH9
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 04 Dec 2022 15:47:02 GMT
age: 109
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:48:51 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
softreview.com.ua/js/calendar/calendar-win2k-1.css
200 OK 6.0 kB URL HTTP/1.1 softreview.com.ua/js/calendar/calendar-win2k-1.css
IP
ASN #24940 Hetzner Online GmbH
Hash 67ffc8a3110966444ace262dba3daab9
fc0356c8cece1e09303ea0ce53e35ebf852cc7bc
612e69e39661fcb843ebdf0648e2fcca60497efcb347dc3dcd341e682a367b3c
GET /js/calendar/calendar-win2k-1.css HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: text/css
Content-Length: 6010
Last-Modified: Fri, 16 Mar 2018 11:03:16 GMT
Connection: keep-alive
ETag: "5aaba474-177a"
Accept-Ranges: bytes
softreview.com.ua/skin/frontend/default/em0006/css/widgets.css
200 OK 5.3 kB URL HTTP/1.1 softreview.com.ua/skin/frontend/default/em0006/css/widgets.css
IP
ASN #24940 Hetzner Online GmbH
Hash b620e9a444311cbf879321e5d777bd1d
a348769872be111f25aef284c8494e9358bd8ef9
50ec5e216ae8df77b3fb09df69d4b33f92c7f38b5429943d670b9912bc801166
GET /skin/frontend/default/em0006/css/widgets.css HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: text/css
Content-Length: 5297
Last-Modified: Fri, 16 Mar 2018 11:14:59 GMT
Connection: keep-alive
ETag: "5aaba733-14b1"
Accept-Ranges: bytes
softreview.com.ua/skin/frontend/default/default/css/clnews/style.css
200 OK 4.0 kB URL HTTP/1.1 softreview.com.ua/skin/frontend/default/default/css/clnews/style.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with CRLF, LF line terminators
Hash 8dd312c02fe6f60f9112ca2c5123f483
6f6db375c6be50f3fdb1300f3cbe2f20b79fe33a
e81d91441ba5941aed7986f3121fb52870a9001026c40065e8c6027d0fdd1ce0
GET /skin/frontend/default/default/css/clnews/style.css HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: text/css
Content-Length: 4044
Last-Modified: Fri, 16 Mar 2018 11:14:30 GMT
Connection: keep-alive
ETag: "5aaba716-fcc"
Accept-Ranges: bytes
softreview.com.ua/skin/frontend/default/default/css/commercelab/treeview/jquery.treeview.css
200 OK 3.8 kB URL HTTP/1.1 softreview.com.ua/skin/frontend/default/default/css/commercelab/treeview/jquery.treeview.css
IP
ASN #24940 Hetzner Online GmbH
File type assembler source, ASCII text, with CRLF, LF line terminators
Hash 233117ee40b3d7761d5bc311a63e3316
33fd88a5b852e83d0d7ea26d1f7e32dcdb802674
3a2c3204b51aaa2bd8d4618e2ee595d81b8b9227883de7713adbdd124b8b200b
GET /skin/frontend/default/default/css/commercelab/treeview/jquery.treeview.css HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: text/css
Content-Length: 3835
Last-Modified: Fri, 16 Mar 2018 11:14:34 GMT
Connection: keep-alive
ETag: "5aaba71a-efb"
Accept-Ranges: bytes
softreview.com.ua/skin/frontend/default/default/css/style-nav.css
200 OK 9.9 kB URL HTTP/1.1 softreview.com.ua/skin/frontend/default/default/css/style-nav.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with CRLF, LF line terminators
Hash 532c2d0ec3a8ea7eb36c187c6118488b
2d0ea8e2d135006b280aa8ecfbcc15a3431c10ca
856b869e457a402cd2dc6f05c4dbe477a5b59c0380bee83c719d93eff32c01f6
GET /skin/frontend/default/default/css/style-nav.css HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: text/css
Content-Length: 9903
Last-Modified: Fri, 16 Mar 2018 11:14:29 GMT
Connection: keep-alive
ETag: "5aaba715-26af"
Accept-Ranges: bytes
softreview.com.ua/skin/frontend/default/default/css/isfeatured.css
200 OK 2.0 kB URL HTTP/1.1 softreview.com.ua/skin/frontend/default/default/css/isfeatured.css
IP
ASN #24940 Hetzner Online GmbH
Hash e0a3b9e9602a290a5e1237ed74573782
9749884e0fe81f95093884a5ede0de499a007998
ff7044391a11d4438da2d48f475518705be67b45c03a21c2be81ce278150e23d
GET /skin/frontend/default/default/css/isfeatured.css HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: text/css
Content-Length: 1963
Last-Modified: Fri, 16 Mar 2018 11:14:28 GMT
Connection: keep-alive
ETag: "5aaba714-7ab"
Accept-Ranges: bytes
softreview.com.ua/skin/frontend/default/default/css/pascalsystem/base.css
200 OK 757 B URL HTTP/1.1 softreview.com.ua/skin/frontend/default/default/css/pascalsystem/base.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with CRLF, LF line terminators
Hash 11ec5ee641dbbce1afe8effc95bd53de
042b70cacc1ff1e46b886a8aa64f435b8055eccc
21856156beea53f650222c06acc3cd986401749fe51abf5737a9fded0e580f60
GET /skin/frontend/default/default/css/pascalsystem/base.css HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: text/css
Content-Length: 757
Last-Modified: Fri, 16 Mar 2018 11:14:45 GMT
Connection: keep-alive
ETag: "5aaba725-2f5"
Accept-Ranges: bytes
softreview.com.ua/skin/frontend/default/default/css/pascalsystem/ajaxquickcart.css
200 OK 406 B URL HTTP/1.1 softreview.com.ua/skin/frontend/default/default/css/pascalsystem/ajaxquickcart.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with CRLF, LF line terminators
Hash da875eb5bb8733bde0307fc6603c7dc7
62700026582a6051eb2b3091e717cb63d637ba4e
6c76140508dfd1b5a2f34bba4f52ecd1e4316a163a19f42d920a5d8433db4b3d
GET /skin/frontend/default/default/css/pascalsystem/ajaxquickcart.css HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: text/css
Content-Length: 406
Last-Modified: Fri, 16 Mar 2018 11:14:45 GMT
Connection: keep-alive
ETag: "5aaba725-196"
Accept-Ranges: bytes
softreview.com.ua/skin/frontend/default/em0006/css/vertnav.css
200 OK 923 B URL HTTP/1.1 softreview.com.ua/skin/frontend/default/em0006/css/vertnav.css
IP
ASN #24940 Hetzner Online GmbH
Hash e2c9f27da88f7dc59d9ba72c09f48ca8
60ebd9fec089f0f90b7298f2dd475c7bcd945c36
b7de9addc8c85933d0737b3ffcf4fbeaef6894cb366c4b17287aeb8a637d58ca
GET /skin/frontend/default/em0006/css/vertnav.css HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: text/css
Content-Length: 923
Last-Modified: Fri, 16 Mar 2018 11:14:59 GMT
Connection: keep-alive
ETag: "5aaba733-39b"
Accept-Ranges: bytes
softreview.com.ua/skin/frontend/base/default/css/Toogas/Featuredpopup/default.css
200 OK 4.6 kB URL HTTP/1.1 softreview.com.ua/skin/frontend/base/default/css/Toogas/Featuredpopup/default.css
IP
ASN #24940 Hetzner Online GmbH
Hash 09291b84e331f60e495e37df0f924dd9
ebee778c6e2e60e7bd9dd6f03902a568e7567124
4f3f3f957179a9a4dfdb148c7866a50c8e39af6cf3e7f35e0173b473f8037dc5
GET /skin/frontend/base/default/css/Toogas/Featuredpopup/default.css HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: text/css
Content-Length: 4616
Last-Modified: Fri, 16 Mar 2018 11:14:01 GMT
Connection: keep-alive
ETag: "5aaba6f9-1208"
Accept-Ranges: bytes
softreview.com.ua/skin/frontend/default/em0006/css/easytabs.css
200 OK 1.3 kB URL HTTP/1.1 softreview.com.ua/skin/frontend/default/em0006/css/easytabs.css
IP
ASN #24940 Hetzner Online GmbH
Hash ca58bb0963d0a8e1f5b3b9560ecb34ec
8471da6d493eae26a7a38ab9ada2537f446e47a2
2237c3d0dbe1aa29908e4a3ec5ffca0de0f990f5ba50cc8419950e8e5af2831d
GET /skin/frontend/default/em0006/css/easytabs.css HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: text/css
Content-Length: 1289
Last-Modified: Fri, 16 Mar 2018 11:14:55 GMT
Connection: keep-alive
ETag: "5aaba72f-509"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:48:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:48:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash d989f35706c62ce4a5c561586c55566e
d32e7958e5765609bf08dcdefd0b2c2a8714ce34
375dfe942a03ee024b5cc827b3efda5550d13df7530281f50862ce3b33fcb716
GET /ajax/libs/jquery/1.7.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://softreview.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33845
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 13:01:47 GMT
expires: Wed, 29 Nov 2023 13:01:47 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 442024
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ab20d06d17f171b624d05b11b2ef2b97
c2b7a65ba8fb8b483defa73d9e0dba33487ba540
97ccb492877149c80caa856554b1f8aaac21878ef473f84f816d92449b29f0d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "97CCB492877149C80CAA856554B1F8AAAC21878EF473F84F816D92449B29F0D1"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3946
Expires: Sun, 04 Dec 2022 16:54:37 GMT
Date: Sun, 04 Dec 2022 15:48:51 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:48:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jqueryui/1.8.23/jquery-ui.min.js
200 OK 52 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jqueryui/1.8.23/jquery-ui.min.js
IP
File type ASCII text, with very long lines (64651)
Hash 3f52ab6e6343ddcd0f9b5365f87875bd
471c32e514c2f2dfe4bb5197738008f62bece4a4
b0e3e00251e47680e3ed06c26d3cca79943d3158ffd0c7474e5f327c629aac8b
GET /ajax/libs/jqueryui/1.8.23/jquery-ui.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://softreview.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 51646
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Dec 2022 20:58:17 GMT
expires: Sun, 03 Dec 2023 20:58:17 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 67834
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
softreview.com.ua/skin/frontend/default/em0006/css/prototype-ui.css
200 OK 2.0 kB URL HTTP/1.1 softreview.com.ua/skin/frontend/default/em0006/css/prototype-ui.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (334), with CRLF, LF line terminators
Hash be30800038f454fd83b78443d9662e3f
dae401968f4241297e7a7c7db19e9daa73a25d02
5a2a9ed0d5688624014f98a79db8cdeb1521dce49d96b9af4e13b43517a0383c
GET /skin/frontend/default/em0006/css/prototype-ui.css HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: text/css
Content-Length: 2031
Last-Modified: Fri, 16 Mar 2018 11:14:55 GMT
Connection: keep-alive
ETag: "5aaba72f-7ef"
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b6385ff9071e08353d1afe395c416f9
3254c9579ca53e26fbb5a11e40418aea332dfd68
9a8b28c33e8de85ab3c9c0c14f0178e5dea3d7456755d3f9352e766f67632526
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9A8B28C33E8DE85AB3C9C0C14F0178E5DEA3D7456755D3F9352E766F67632526"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2401
Expires: Sun, 04 Dec 2022 16:28:52 GMT
Date: Sun, 04 Dec 2022 15:48:51 GMT
Connection: keep-alive
softreview.com.ua/skin/frontend/default/em0006/navigation/css/nav.css
200 OK 8.0 kB URL HTTP/1.1 softreview.com.ua/skin/frontend/default/em0006/navigation/css/nav.css
IP
ASN #24940 Hetzner Online GmbH
Hash 5df961190bb4eab5c781c8b1e03393f3
59b3cba011f22555b8b738c7e14c870236f19a0a
1830de05db79ff9ae51bf10fc270d6bc387982ee2eb3327127c72ef637e69c66
GET /skin/frontend/default/em0006/navigation/css/nav.css HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: text/css
Content-Length: 7960
Last-Modified: Fri, 16 Mar 2018 11:16:24 GMT
Connection: keep-alive
ETag: "5aaba788-1f18"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:48:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
get.mycounter.ua/counter2.0.js
200 OK 3.7 kB URL HTTP/1.1 get.mycounter.ua/counter2.0.js
IP
File type HTML document, ASCII text
Hash 60dd4a0324b6a778a81131c4dc6b2998
a723d940f991f781044a948e4f423331646bf70a
266a3771ef39c4855333a8ff90d4a48d8c19f2ddb561ceb41a5a8ab4747304f8
GET /counter2.0.js HTTP/1.1
Host: get.mycounter.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://softreview.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: application/javascript
Content-Length: 3653
Last-Modified: Mon, 11 Jan 2021 22:30:07 GMT
Connection: keep-alive
ETag: "5ffcd16f-e45"
Expires: Sun, 04 Dec 2022 16:48:51 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes
softreview.com.ua/skin/frontend/default/em0006/css/styles.css
200 OK 194 kB URL HTTP/1.1 softreview.com.ua/skin/frontend/default/em0006/css/styles.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (765), with CRLF, LF line terminators
Size 194 kB (193700 bytes)
Hash 424a398c6d4d146a8721b0e09117f48c
fbed70ec71a84abcda7a896b1dd81c2e355a7651
6e33ca9382027462b0c6494c3643dc0bdd5f5f856c7c0dfe336e23b272652a54
GET /skin/frontend/default/em0006/css/styles.css HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: text/css
Content-Length: 193700
Last-Modified: Fri, 16 Mar 2018 11:14:59 GMT
Connection: keep-alive
ETag: "5aaba733-2f4a4"
Accept-Ranges: bytes
w.uptolike.com/widgets/v1/zp.js?pid=lf0644d4115ba1e6b50d8ade3edcbd0452e8a62951
200 OK 11 kB URL HTTP/1.1 w.uptolike.com/widgets/v1/zp.js?pid=lf0644d4115ba1e6b50d8ade3edcbd0452e8a62951
IP
ASN #12695 LLC Digital Network
File type ASCII text, with very long lines (585)
Hash 2a9d115c432f8f9b7b23ab85dd3778be
d3d1d2bcdb6347a0af930e1704696b47becdb88f
9548428668688f2221980fdc017d701d5cf328a5078d3be080ded8bd3cce6716
GET /widgets/v1/zp.js?pid=lf0644d4115ba1e6b50d8ade3edcbd0452e8a62951 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://softreview.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: utl_id2=29836706654; Expires=Tue, 03 Dec 2024 15:48:51 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
utl_dat="COXZze7NMBAAIOWqmPfNMCjlqpj3zTAwAPW4ydTrfjGPQZRmBtdMgAk="; Expires=Tue, 03 Dec 2024 15:48:51 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
Cache-Control: max-age=31556926
P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
Access-Control-Allow-Origin: *
Content-Encoding: gzip
softreview.com.ua/js/magestore/bannerslider/jquery-1.4.2.min.js
200 OK 72 kB URL HTTP/1.1 softreview.com.ua/js/magestore/bannerslider/jquery-1.4.2.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (820), with CRLF, LF line terminators
Hash 132112f9bbf03b4650de71d2050e2a0c
0c1f1a643711df2c8de5c0771b8b13a4496225ce
dc0c6848b89f2cf0a01cf8ce8f5f644a23ced057391d241851a9c310d2996592
Analyzer Verdict Alert fortinet Malware
GET /js/magestore/bannerslider/jquery-1.4.2.min.js HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 72443
Last-Modified: Fri, 16 Mar 2018 11:03:19 GMT
Connection: keep-alive
ETag: "5aaba477-11afb"
Accept-Ranges: bytes
softreview.com.ua/media/js/e197693b913b569c8afb300c86e4a609.js
200 OK 732 kB URL HTTP/1.1 softreview.com.ua/media/js/e197693b913b569c8afb300c86e4a609.js
IP
ASN #24940 Hetzner Online GmbH
Size 732 kB (731941 bytes)
Hash f5e5ac49f02821f61949ef31dc605cd9
3f428ff7602d4d3aca091ff316bd5a6de5f63263
9354f5ebfb22c22e4898668a70bb2895d8986ceaceae4b967804ff4cc0ae1357
Analyzer Verdict Alert fortinet Malware
GET /media/js/e197693b913b569c8afb300c86e4a609.js HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 731941
Last-Modified: Fri, 16 Mar 2018 11:13:27 GMT
Connection: keep-alive
ETag: "5aaba6d7-b2b25"
Accept-Ranges: bytes
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 04 Dec 2022 15:11:19 GMT
cache-control: public,max-age=3600
age: 2252
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
softreview.com.ua/skin/frontend/default/em0006/images/vlo-skype.png
200 OK 9.1 kB URL HTTP/1.1 softreview.com.ua/skin/frontend/default/em0006/images/vlo-skype.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 63 x 53, 8-bit/color RGBA, interlaced\012- data
Hash 1bfc4d43577e63ffab0199273d61ee9c
7846e30a407c0b425727f323d4ccc3dc5df4ab51
63a12a407acb40ef2af6c66304224fe5c28b5503bd93f4e8f1d95661f71d54a7
GET /skin/frontend/default/em0006/images/vlo-skype.png HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: image/png
Content-Length: 9056
Last-Modified: Fri, 16 Mar 2018 11:16:16 GMT
Connection: keep-alive
ETag: "5aaba780-2360"
Accept-Ranges: bytes
softreview.com.ua/skin/frontend/default/em0006/images/vlo-cart.png
200 OK 13 kB URL HTTP/1.1 softreview.com.ua/skin/frontend/default/em0006/images/vlo-cart.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 75 x 53, 8-bit/color RGBA, interlaced\012- data
Hash 298423879b6bdff49043041f79b778ac
1ddd68ad360c13b6e280c48aff950f2ab46c8263
457614cd7290c9e03774c368719472efdfddf7815a2bf932c37c7edad0ad50ef
GET /skin/frontend/default/em0006/images/vlo-cart.png HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: image/png
Content-Length: 12698
Last-Modified: Fri, 16 Mar 2018 11:16:06 GMT
Connection: keep-alive
ETag: "5aaba776-319a"
Accept-Ranges: bytes
softreview.com.ua/media/stories/vlo-phone.png
200 OK 12 kB URL HTTP/1.1 softreview.com.ua/media/stories/vlo-phone.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 85 x 67, 8-bit/color RGBA, interlaced\012- data
Hash 04a312c72be9cfd8cfb4d9a91c0cbc32
6581f34354e3adca1aec10fe6903bb1ca1f34ab0
9148751fc6abda055acdb3b8d96e8790f29a42497c1486bcb45c57cc13213877
GET /media/stories/vlo-phone.png HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: image/png
Content-Length: 12430
Last-Modified: Fri, 16 Mar 2018 11:13:38 GMT
Connection: keep-alive
ETag: "5aaba6e2-308e"
Accept-Ranges: bytes
softreview.com.ua/media/stories/vlo-vert-triangle.png
200 OK 2.8 kB URL HTTP/1.1 softreview.com.ua/media/stories/vlo-vert-triangle.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 14 x 7, 8-bit/color RGBA, non-interlaced\012- data
Hash 052c6c555ca981bf8a879be6994dabde
262ec7b60434ea4b1814137df162343155b42f77
387bb1d43813cf67d868aa5541abafd6367cf3e6df9a95fefef123e8f0aaa3c1
GET /media/stories/vlo-vert-triangle.png HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: image/png
Content-Length: 2842
Last-Modified: Fri, 16 Mar 2018 11:13:40 GMT
Connection: keep-alive
ETag: "5aaba6e4-b1a"
Accept-Ranges: bytes
softreview.com.ua/skin/frontend/default/em0006/images/vlo-time.png
200 OK 10 kB URL HTTP/1.1 softreview.com.ua/skin/frontend/default/em0006/images/vlo-time.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 63 x 53, 8-bit/color RGBA, interlaced\012- data
Hash f907fa76c93f9a653d00aa6c58df29b2
45393af3a62ec32a86589cc65b3be2a470b4fafc
9b0679d7b0c8e98836a9e2c571e432dd38d61631217ae0d7e4f79409da2fd749
GET /skin/frontend/default/em0006/images/vlo-time.png HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: image/png
Content-Length: 10169
Last-Modified: Fri, 16 Mar 2018 11:16:16 GMT
Connection: keep-alive
ETag: "5aaba780-27b9"
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 471 B IP
Hash 31b129c94a90b1e695b21395cb54e378
a3cae46b48d469cc61ab0581303bcd5f5b654db9
fac3f681be358a20f78958dff10c89b7a91365c5114c81246c1bc34c1362ba1e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4003
Cache-Control: max-age=152683
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:48:51 GMT
Etag: "638c632b-1d7"
Expires: Tue, 06 Dec 2022 10:13:34 GMT
Last-Modified: Sun, 04 Dec 2022 09:06:51 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
ajax.googleapis.com/ajax/libs/jqueryui/1.8.2/jquery.min.js
404 Not Found 1.6 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jqueryui/1.8.2/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 8b22d9b8411903520348f5662a237b8d
589f63b5129aaad0e1d6fc3b5c76727ab897860a
b0d1598fb3f4aa178ec5ea169892b709e969f8fdcb696308ada5259acae1faed
GET /ajax/libs/jqueryui/1.8.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://softreview.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 15:48:52 GMT
content-type: text/html; charset=UTF-8
server: sffe
content-length: 1599
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
softreview.com.ua/skin/frontend/default/em0006/css/print.css
200 OK 1.6 kB URL HTTP/1.1 softreview.com.ua/skin/frontend/default/em0006/css/print.css
IP
ASN #24940 Hetzner Online GmbH
Hash d2814a3109cb6244d4d7de2b4b23176a
6f1830c49c15a249bb17a14ead6915d020e8e055
a4cc86a908072b99d353e81bd878d8e04fc4d3153c0bed39ddc4548edb4b2e1e
GET /skin/frontend/default/em0006/css/print.css HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:52 GMT
Content-Type: text/css
Content-Length: 1575
Last-Modified: Fri, 16 Mar 2018 11:14:55 GMT
Connection: keep-alive
ETag: "5aaba72f-627"
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 626b7b0a0f404f8638fc90583e071133
4c7cc52631a45dd5d5d24eaa0921978438b725e1
e57c7a86b5cb2b2325dc3305122a55bd723719816aa8d04c1a0822f037b18cfb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E57C7A86B5CB2B2325DC3305122A55BD723719816AA8D04C1A0822F037B18CFB"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3124
Expires: Sun, 04 Dec 2022 16:40:56 GMT
Date: Sun, 04 Dec 2022 15:48:52 GMT
Connection: keep-alive
get.mycounter.ua/counter.php?id=161109&w=http%3A//softreview.com.ua/tag/notepad/&s=1280x1024x24&c=1&j=5
200 OK 544 B URL HTTP/1.1 get.mycounter.ua/counter.php?id=161109&w=http%3A//softreview.com.ua/tag/notepad/&s=1280x1024x24&c=1&j=5
IP
File type PNG image data, 88 x 31, 8-bit colormap, non-interlaced\012- data
Hash 4476b10fdac59b35d4bdc0f013df2692
68bafbb5c141cc34e95416b61c8f8368a9205a6a
afb15db618df4ea1803f03eb8be1c460a4211c3e1ff985165bb986d9cbaa80f0
GET /counter.php?id=161109&w=http%3A//softreview.com.ua/tag/notepad/&s=1280x1024x24&c=1&j=5 HTTP/1.1
Host: get.mycounter.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://softreview.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 544
Connection: keep-alive
Date: Sun, 04 Dec 2022 17:48:52 GMT
Server: MyCounter TCP Server v.2.0.0
Accept-Ranges: bytes
Expires: 0
Cache-control: no-cache
softreview.com.ua/skin/frontend/default/em0006/images/vlo-footer-underline2.png
200 OK 3.2 kB URL HTTP/1.1 softreview.com.ua/skin/frontend/default/em0006/images/vlo-footer-underline2.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 238 x 10, 8-bit/color RGBA, non-interlaced\012- data
Hash e28c91241e64f24225f75a431e6410d8
545e597e3e8eaa78cb3eede6fe6c721daec0abcb
df189b3c3587fd030eb1dd1248a59088779d9d54904433fc4511b363dfe8d777
GET /skin/frontend/default/em0006/images/vlo-footer-underline2.png HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/skin/frontend/default/em0006/css/styles.css
Cookie: s=1
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:52 GMT
Content-Type: image/png
Content-Length: 3170
Last-Modified: Fri, 16 Mar 2018 11:16:09 GMT
Connection: keep-alive
ETag: "5aaba779-c62"
Accept-Ranges: bytes
softreview.com.ua/skin/frontend/default/em0006/images/vlo-footer-underline3.png
200 OK 3.1 kB URL HTTP/1.1 softreview.com.ua/skin/frontend/default/em0006/images/vlo-footer-underline3.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 142 x 10, 8-bit/color RGBA, non-interlaced\012- data
Hash 9858e4a248497c17e7bb558da4118b3e
75d42f7aac53a1fe75d4e6d7a998738ab6143c1c
2008ffca50872d90cbd45b303b3a00dd6c50f87d842f6857007e265ca2a3ca5b
GET /skin/frontend/default/em0006/images/vlo-footer-underline3.png HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/skin/frontend/default/em0006/css/styles.css
Cookie: s=1
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:52 GMT
Content-Type: image/png
Content-Length: 3080
Last-Modified: Fri, 16 Mar 2018 11:16:09 GMT
Connection: keep-alive
ETag: "5aaba779-c08"
Accept-Ranges: bytes
softreview.com.ua/skin/frontend/default/em0006/images/vlo-footer-underline1.png
200 OK 3.1 kB URL HTTP/1.1 softreview.com.ua/skin/frontend/default/em0006/images/vlo-footer-underline1.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 175 x 10, 8-bit/color RGBA, non-interlaced\012- data
Hash 0b7be15d9aee5be21c61ced9c24c712b
d199ecec04107b67c7acab1ff5ff3cd2ea3e4412
2d818de2a7d8a2b3d2521adde0703292641d74efb18b6eb2a62d40aca8904efa
GET /skin/frontend/default/em0006/images/vlo-footer-underline1.png HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/skin/frontend/default/em0006/css/styles.css
Cookie: s=1
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:52 GMT
Content-Type: image/png
Content-Length: 3112
Last-Modified: Fri, 16 Mar 2018 11:16:08 GMT
Connection: keep-alive
ETag: "5aaba778-c28"
Accept-Ranges: bytes
www.acint.net/aci.js
200 OK 7.5 kB IP
File type ASCII text, with very long lines (1408)
Hash ae0aab6c5a2ae2e1168e74f6e6ae4741
2c00f69ee4bbe2ec96c0f7bb33b5f827a6195af8
a47a88a9b6c7635e5074c25c6e3c92f399fdf8772376e94f077167241e59f9de
GET /aci.js HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://softreview.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Sun, 04 Dec 2022 15:48:52 GMT
content-type: application/x-javascript
content-length: 7461
last-modified: Tue, 25 Oct 2022 14:21:14 GMT
etag: "6357f0da-1d25"
content-encoding: gzip
expires: Mon, 05 Dec 2022 03:48:52 GMT
cache-control: max-age=43200
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0ifd7D4S3SO2/MuN1nWBnA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: I3E3iGRugr5D+F1YCGIVqJn2bv8=
w.uptolike.com/widgets/v1/version.js?cb=cb__utl_cb_share_1670168929795993
200 OK 84 B URL HTTP/1.1 w.uptolike.com/widgets/v1/version.js?cb=cb__utl_cb_share_1670168929795993
IP
ASN #12695 LLC Digital Network
File type ASCII text, with no line terminators
Hash 5ec6042be2972d8a64ee64b510bb3e8e
fd5e91b17559e737ea497dd606e0d1c690c9b7a9
81a8a52d21b60ca3be86718de7674ad827908c04f12ddff970a6099b32f40e5b
GET /widgets/v1/version.js?cb=cb__utl_cb_share_1670168929795993 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://softreview.com.ua/
Cookie: utl_id2=29836706654; utl_dat="COXZze7NMBAAIOWqmPfNMCjlqpj3zTAwAPW4ydTrfjGPQZRmBtdMgAk="
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 15:48:52 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Wed, 23 Nov 2022 19:31:36 GMT
Cache-Control: no-cache,no-store,max-age=0,must-revalidate
Pragma: no-cache
Set-Cookie: utl_id2=29836706654; Expires=Tue, 03 Dec 2024 15:48:52 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
utl_dat="COXZze7NMBAAIOWqmPfNMCjlqpj3zTAwAPW4ydTrfjGPQZRmBtdMgAk="; Expires=Tue, 03 Dec 2024 15:48:52 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
Access-Control-Allow-Origin: *
Content-Encoding: gzip
www.acint.net/mc/?dp=10
302 Moved Temporarily 142 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /mc/?dp=10 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Sun, 04 Dec 2022 15:48:52 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/mc/?dp=10
www.acint.net/hit/?v=0.4.0&uid=36f6dcd7-0564-4542-8290-2b84cfa4e3b1&dp=10&tz=%2B00%3A00&nc=94546118&u=http%3A%2F%2Fsoftreview.com.ua%2Ftag%2Fnotepad%2F&r=&rs=1280x1024&t=%D0%9D%D0%B0%20%D1%81%D0%B2%D0%BE%D0%B5%D0%B9%20%D0%BD%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%D1%83%D1%85%D0%BD%D0%B8%20%D0%BF%D1%80%D0%B8%D0%B3%D0%BE%D1%82%D0%BE%D0%B2%D1%8C%D1%82%D0%B5%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%BB%D1%8E%D0%B1%D0%B8%D0%BC%D1%8B%D0%B5%20%D0%B1%D0%BB%D1%8E%D0%B4%D0%B0&oE=1&oP=1&dT=2022-12-04T15%3A48%3A49.931&fu=5cf35ad6-cadc-45fc-aead-94981be9a921
302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/hit/?v=0.4.0&uid=36f6dcd7-0564-4542-8290-2b84cfa4e3b1&dp=10&tz=%2B00%3A00&nc=94546118&u=http%3A%2F%2Fsoftreview.com.ua%2Ftag%2Fnotepad%2F&r=&rs=1280x1024&t=%D0%9D%D0%B0%20%D1%81%D0%B2%D0%BE%D0%B5%D0%B9%20%D0%BD%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%D1%83%D1%85%D0%BD%D0%B8%20%D0%BF%D1%80%D0%B8%D0%B3%D0%BE%D1%82%D0%BE%D0%B2%D1%8C%D1%82%D0%B5%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%BB%D1%8E%D0%B1%D0%B8%D0%BC%D1%8B%D0%B5%20%D0%B1%D0%BB%D1%8E%D0%B4%D0%B0&oE=1&oP=1&dT=2022-12-04T15%3A48%3A49.931&fu=5cf35ad6-cadc-45fc-aead-94981be9a921
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /hit/?v=0.4.0&uid=36f6dcd7-0564-4542-8290-2b84cfa4e3b1&dp=10&tz=%2B00%3A00&nc=94546118&u=http%3A%2F%2Fsoftreview.com.ua%2Ftag%2Fnotepad%2F&r=&rs=1280x1024&t=%D0%9D%D0%B0%20%D1%81%D0%B2%D0%BE%D0%B5%D0%B9%20%D0%BD%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%D1%83%D1%85%D0%BD%D0%B8%20%D0%BF%D1%80%D0%B8%D0%B3%D0%BE%D1%82%D0%BE%D0%B2%D1%8C%D1%82%D0%B5%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%BB%D1%8E%D0%B1%D0%B8%D0%BC%D1%8B%D0%B5%20%D0%B1%D0%BB%D1%8E%D0%B4%D0%B0&oE=1&oP=1&dT=2022-12-04T15%3A48%3A49.931&fu=5cf35ad6-cadc-45fc-aead-94981be9a921 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Sun, 04 Dec 2022 15:48:52 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/hit/?v=0.4.0&uid=36f6dcd7-0564-4542-8290-2b84cfa4e3b1&dp=10&tz=%2B00%3A00&nc=94546118&u=http%3A%2F%2Fsoftreview.com.ua%2Ftag%2Fnotepad%2F&r=&rs=1280x1024&t=%D0%9D%D0%B0%20%D1%81%D0%B2%D0%BE%D0%B5%D0%B9%20%D0%BD%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%D1%83%D1%85%D0%BD%D0%B8%20%D0%BF%D1%80%D0%B8%D0%B3%D0%BE%D1%82%D0%BE%D0%B2%D1%8C%D1%82%D0%B5%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%BB%D1%8E%D0%B1%D0%B8%D0%BC%D1%8B%D0%B5%20%D0%B1%D0%BB%D1%8E%D0%B4%D0%B0&oE=1&oP=1&dT=2022-12-04T15%3A48%3A49.931&fu=5cf35ad6-cadc-45fc-aead-94981be9a921
softreview.com.ua/skin/frontend/default/em0006/images/kuhni-logo2.png
200 OK 269 kB URL HTTP/1.1 softreview.com.ua/skin/frontend/default/em0006/images/kuhni-logo2.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 421 x 158, 8-bit/color RGBA, non-interlaced\012- data
Size 269 kB (269054 bytes)
Hash 4549983ce88361f6ab246fb0e29954db
7e39ae596763b09cd900da267970918354713f1f
d88f17e8ae716730cb58d55de9036a3d942ff042e90cdb9d992225321a922c57
GET /skin/frontend/default/em0006/images/kuhni-logo2.png HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: image/png
Content-Length: 269054
Last-Modified: Fri, 16 Mar 2018 11:16:00 GMT
Connection: keep-alive
ETag: "5aaba770-41afe"
Accept-Ranges: bytes
www.acint.net/mc/?dp=10
302 Found 154 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /mc/?dp=10 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://softreview.com.ua/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sun, 04 Dec 2022 15:48:52 GMT
content-type: text/html
content-length: 154
location: /mc/?dp=10&tc=1
set-cookie: test_cookie=CheckForPermission; path=/; Secure; SameSite=None; domain=.acint.net; expires=Sun, 04-Dec-22 15:58:52 GMT
aid=CkIDE2OMwWSSaANULT99AipwP13vE3WqVss4bok7mwH4wb2j; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/hit/?v=0.4.0&uid=36f6dcd7-0564-4542-8290-2b84cfa4e3b1&dp=10&tz=%2B00%3A00&nc=94546118&u=http%3A%2F%2Fsoftreview.com.ua%2Ftag%2Fnotepad%2F&r=&rs=1280x1024&t=%D0%9D%D0%B0%20%D1%81%D0%B2%D0%BE%D0%B5%D0%B9%20%D0%BD%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%D1%83%D1%85%D0%BD%D0%B8%20%D0%BF%D1%80%D0%B8%D0%B3%D0%BE%D1%82%D0%BE%D0%B2%D1%8C%D1%82%D0%B5%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%BB%D1%8E%D0%B1%D0%B8%D0%BC%D1%8B%D0%B5%20%D0%B1%D0%BB%D1%8E%D0%B4%D0%B0&oE=1&oP=1&dT=2022-12-04T15%3A48%3A49.931&fu=5cf35ad6-cadc-45fc-aead-94981be9a921
200 OK 43 B URL HTTP/2 www.acint.net/hit/?v=0.4.0&uid=36f6dcd7-0564-4542-8290-2b84cfa4e3b1&dp=10&tz=%2B00%3A00&nc=94546118&u=http%3A%2F%2Fsoftreview.com.ua%2Ftag%2Fnotepad%2F&r=&rs=1280x1024&t=%D0%9D%D0%B0%20%D1%81%D0%B2%D0%BE%D0%B5%D0%B9%20%D0%BD%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%D1%83%D1%85%D0%BD%D0%B8%20%D0%BF%D1%80%D0%B8%D0%B3%D0%BE%D1%82%D0%BE%D0%B2%D1%8C%D1%82%D0%B5%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%BB%D1%8E%D0%B1%D0%B8%D0%BC%D1%8B%D0%B5%20%D0%B1%D0%BB%D1%8E%D0%B4%D0%B0&oE=1&oP=1&dT=2022-12-04T15%3A48%3A49.931&fu=5cf35ad6-cadc-45fc-aead-94981be9a921
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hit/?v=0.4.0&uid=36f6dcd7-0564-4542-8290-2b84cfa4e3b1&dp=10&tz=%2B00%3A00&nc=94546118&u=http%3A%2F%2Fsoftreview.com.ua%2Ftag%2Fnotepad%2F&r=&rs=1280x1024&t=%D0%9D%D0%B0%20%D1%81%D0%B2%D0%BE%D0%B5%D0%B9%20%D0%BD%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%D1%83%D1%85%D0%BD%D0%B8%20%D0%BF%D1%80%D0%B8%D0%B3%D0%BE%D1%82%D0%BE%D0%B2%D1%8C%D1%82%D0%B5%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%BB%D1%8E%D0%B1%D0%B8%D0%BC%D1%8B%D0%B5%20%D0%B1%D0%BB%D1%8E%D0%B4%D0%B0&oE=1&oP=1&dT=2022-12-04T15%3A48%3A49.931&fu=5cf35ad6-cadc-45fc-aead-94981be9a921 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://softreview.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 04 Dec 2022 15:48:52 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=CkIDE2OMwWSScgNXVoFwAjJhdcsWWvI7ivEU5FeBjLSBOQ9U; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
softreview.com.ua/skin/frontend/default/em0006/favicon.ico
200 OK 932 B URL HTTP/1.1 softreview.com.ua/skin/frontend/default/em0006/favicon.ico
IP
ASN #24940 Hetzner Online GmbH
File type MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel\012- data
Hash deae4e573448f3948fbb8e099d19e2de
463516d0e6b80376fcd8b19d7f4e3e2789e51337
59ee23cfc1f66ef559d055b4da3fa700e65bdb38c7357e759f492191af8a59ac
GET /skin/frontend/default/em0006/favicon.ico HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
Cookie: s=1; fid=5cf35ad6-cadc-45fc-aead-94981be9a921
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:52 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 932
Connection: keep-alive
Last-Modified: Fri, 16 Mar 2018 11:14:53 GMT
ETag: "3a4-56785b7a66540"
Accept-Ranges: bytes
mc.yandex.ru/metrika/watch.js
302 Moved temporarily 0 B URL HTTP/1.1 mc.yandex.ru/metrika/watch.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/
HTTP/1.1 302 Moved temporarily
Content-Length: 0
Location: https://mc.yandex.ru/metrika/watch.js
ocsp.digicert.com/
200 OK 278 B IP
Hash 52d316b14794bb8e70b22281333fbcbc
421dde0e2ea643ef0b1c4c0f389d8344dfb8294a
bb36ba73c4011d8b513fb00a76ab0372e20992c40c31c2be7d829495689867e4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3392
Cache-Control: max-age=116427
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:48:52 GMT
Etag: "638bd7ef-116"
Expires: Tue, 06 Dec 2022 00:09:19 GMT
Last-Modified: Sat, 03 Dec 2022 23:12:47 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 278
a.utraff.com/sync?ssp=sape
204 No Content 0 B URL HTTP/2 a.utraff.com/sync?ssp=sape
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?ssp=sape HTTP/1.1
Host: a.utraff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sun, 04 Dec 2022 15:48:52 GMT
content-type: text/plain
set-cookie: preutid=1; Expires=Tue, 03 Jan 2023 18:48:52 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/
preutid=1; Expires=Tue, 03 Jan 2023 18:48:52 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-expose-headers: Content-Length,Content-Range
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FViDB3BTcXtp5RC9gqT02ejT5XadzBGwtdKJS0a25q23CnIldMrl1zE5qHzvtSrO8vCyEDajb7yi0T0KZUU8aYmFM7fGaxG0Gdcp1YFpJrxkyn1Mt11KDsK4vfkvK4Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7745b054a858b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3397016e2425e2a0b388d166257f693a
5f25e9a847c92040894151e0929000dbe884308d
faa57a8516426835f3fde716ba9693664e82896c3102ba4324c5f37ea8e9f827
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAA57A8516426835F3FDE716BA9693664E82896C3102BA4324C5F37EA8E9F827"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6021
Expires: Sun, 04 Dec 2022 17:29:13 GMT
Date: Sun, 04 Dec 2022 15:48:52 GMT
Connection: keep-alive
dm-eu.hybrid.ai/match?id=106&vid=1303420A64C18C6354036892027D3F2D
204 No Content 0 B URL HTTP/2 dm-eu.hybrid.ai/match?id=106&vid=1303420A64C18C6354036892027D3F2D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?id=106&vid=1303420A64C18C6354036892027D3F2D HTTP/1.1
Host: dm-eu.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sun, 04 Dec 2022 15:48:52 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
set-cookie: vid=6eb300c9444e99693845; Expires=Mon, 04 Dec 2023 15:48:51 GMT; Domain=.hybrid.ai; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 507
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: Hybrid Web Server
X-Firefox-Spdy: h2
sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1303420A64C18C6354036892027D3F2D
302 Found 0 B URL HTTP/2 sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1303420A64C18C6354036892027D3F2D
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1303420A64C18C6354036892027D3F2D HTTP/1.1
Host: sync.1dmp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sun, 04 Dec 2022 15:48:52 GMT
content-length: 0
expires: 0
cache-control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
set-cookie: uid=26ff5591-73eb-11ed-8ff0-f832e4719dd9; Version=1; Path=/; Domain=.1dmp.io; Expires=Mon, 04 Dec 2023 15:48:52 GMT; SameSite=None; Secure
uid-legacy=26ff5591-73eb-11ed-8ff0-f832e4719dd9; Version=1; Path=/; Domain=.1dmp.io; Expires=Mon, 04 Dec 2023 15:48:52 GMT
location: /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1303420A64C18C6354036892027D3F2D&cs=1
X-Firefox-Spdy: h2
ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
302 Found 0 B URL HTTP/1.1 ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D HTTP/1.1
Host: ssp.bestssp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.acint.net/match?dp=95&euid=LYGPSFDT
Set-Cookie: uid=LYGPSFDT; Expires=Sun, 04 Dec 2032 00:00:00 GMT; mf2=1; Expires=Tue, 03 Jan 2023 00:00:00 GMT;
sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1303420A64C18C6354036892027D3F2D&cs=1
200 OK 35 B URL HTTP/2 sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1303420A64C18C6354036892027D3F2D&cs=1
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1303420A64C18C6354036892027D3F2D&cs=1 HTTP/1.1
Host: sync.1dmp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: uid=26ff5591-73eb-11ed-8ff0-f832e4719dd9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:48:52 GMT
content-type: image/gif
content-length: 35
expires: 0
cache-control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
set-cookie: uid=26ff5591-73eb-11ed-8ff0-f832e4719dd9; Version=1; Path=/; Domain=.1dmp.io; Expires=Mon, 04 Dec 2023 15:48:52 GMT; SameSite=None; Secure
uid-legacy=26ff5591-73eb-11ed-8ff0-f832e4719dd9; Version=1; Path=/; Domain=.1dmp.io; Expires=Mon, 04 Dec 2023 15:48:52 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b95fe9821c389eba2d2098a6d7948cf3
45993c9e4443423f19ce01f8b1e975bc092da80b
9fd6e1996f8b6371fc517b3c2826f5696e4a27be65fe1510c2132700d2827bc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9FD6E1996F8B6371FC517B3C2826F5696E4A27BE65FE1510C2132700D2827BC1"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16010
Expires: Sun, 04 Dec 2022 20:15:42 GMT
Date: Sun, 04 Dec 2022 15:48:52 GMT
Connection: keep-alive
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 27b8d77e9f4932ad42883c5d735ccf20
676fa748552a5c10d19ab8cb551934cbb285fdb9
a801294cbba4539bc9c4c9ee964a56a3d342a11f7c0cf55596711507f95c277c
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 15:48:52 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Thu, 08 Dec 2022 13:24:15 GMT
ETag: "676fa748552a5c10d19ab8cb551934cbb285fdb9"
Last-Modified: Sun, 04 Dec 2022 13:24:16 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1884
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7745b055ce37fab8-OSL
acint.net/match?dp=110&euid=9381052d250048b3af127578dd466653
200 OK 43 B URL HTTP/2 acint.net/match?dp=110&euid=9381052d250048b3af127578dd466653
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=110&euid=9381052d250048b3af127578dd466653 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2OMwWSScgNXVoFwAjJhdcsWWvI7ivEU5FeBjLSBOQ9U; cSyncDp7v2=1670168932; cSyncDp14v3=1670168932; cSyncDp17=1670168932; cSyncDp32=1670168932; cSyncDp45v3=1670168932; cSyncDp53=1670168932; cSyncDp54v2=1670168932; cSyncDp62=1670168932; cSyncDp67v2=1670168932; cSyncDp68=1670168932; cSyncDp71=1670168932; cSyncDp77=1670168932; cSyncDp84=1670168932; cSyncDp85=1670168932; cSyncDp95v3=1670168932; cSyncDp101=1670168932; cSyncDp104v2=1670168932; cSyncDp107=1670168932; cSyncDp110=1670168932; cSyncDp111v2=1670168932; cSyncDp112v2=1670168932; cSyncDp125v2=1670168932; cSyncDp126=1670168932; cSyncDp127=1670168932; cSyncDp129=1670168932; cSyncDp136v2=1670168932; cSyncDp138=1670168932; cSyncDp146=1670168932; cSyncDp148=1670168932; cSyncDp149v2=1670168932; cSyncDp151=1670168932; cSyncDp178=1670168932; cSyncDp179=1670168932; cSyncDp186=1670168932; cSyncDp221=1670168932
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 04 Dec 2022 15:48:52 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 4811b4c31ad6d8965ffb747669ed4cd6
d3385a9eef4ce372ff273c40e9646aaf4539aa5a
31805f7ab3ad7f673198203c95a87416d362dab642d589efe0ac5449e9cde104
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 15:48:52 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Thu, 08 Dec 2022 12:34:17 GMT
ETag: "d3385a9eef4ce372ff273c40e9646aaf4539aa5a"
Last-Modified: Sun, 04 Dec 2022 12:34:18 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1352
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7745b055e8b6b4ee-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cf11376fd7db2026776bcb2ee493826f
f1da8fbda4d1e81b8e0a4cf41e0dfb66a69360dc
6a309d299ef7d4acc468c5bb7a23f001434212cf8e91a2d9d8ed1309442ce22b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A309D299EF7D4ACC468C5BB7A23F001434212CF8E91A2D9D8ED1309442CE22B"
Last-Modified: Fri, 02 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10145
Expires: Sun, 04 Dec 2022 18:37:57 GMT
Date: Sun, 04 Dec 2022 15:48:52 GMT
Connection: keep-alive
ut.rktch.com/matchspm?pi=1000005&pui=1303420A64C18C6354036892027D3F2D
302 Found 0 B URL HTTP/1.1 ut.rktch.com/matchspm?pi=1000005&pui=1303420A64C18C6354036892027D3F2D
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /matchspm?pi=1000005&pui=1303420A64C18C6354036892027D3F2D HTTP/1.1
Host: ut.rktch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Sun, 04 Dec 2022 15:48:52 GMT
Content-Length: 0
Connection: keep-alive
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
Set-Cookie: b_uid=7cf5808d1bb4c92a8bbd0198d783199fe20a; Max-Age=2592000; Expires=Tue, 03 Jan 2023 15:48:52 GMT; Domain=rktch.com; Secure; SameSite=None
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Access-Control-Allow-Headers: Content-Type, Accept, Authorization
Access-Control-Allow-Credentials: true
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0dda8859a75702929a672c60490c7ae2
cf6c280c1e840b6f99dec337acd1c431a88f6dff
312333eba6b44389e82edd5df250bdc1b310602b4132ad72c3cf7e60d219d7df
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "312333EBA6B44389E82EDD5DF250BDC1B310602B4132AD72C3CF7E60D219D7DF"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2937
Expires: Sun, 04 Dec 2022 16:37:49 GMT
Date: Sun, 04 Dec 2022 15:48:52 GMT
Connection: keep-alive
sync.dmp.otm-r.com/match/sape?id=1303420A64C18C6354036892027D3F2D
204 No Content 0 B URL HTTP/2 sync.dmp.otm-r.com/match/sape?id=1303420A64C18C6354036892027D3F2D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=1303420A64C18C6354036892027D3F2D HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.23.2
date: Sun, 04 Dec 2022 15:48:52 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.acint.net/match?dp=95&euid=LYGPSFDT
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=95&euid=LYGPSFDT
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=95&euid=LYGPSFDT HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2OMwWSScgNXVoFwAjJhdcsWWvI7ivEU5FeBjLSBOQ9U; cSyncDp7v2=1670168932; cSyncDp14v3=1670168932; cSyncDp17=1670168932; cSyncDp32=1670168932; cSyncDp45v3=1670168932; cSyncDp53=1670168932; cSyncDp54v2=1670168932; cSyncDp62=1670168932; cSyncDp67v2=1670168932; cSyncDp68=1670168932; cSyncDp71=1670168932; cSyncDp77=1670168932; cSyncDp84=1670168932; cSyncDp85=1670168932; cSyncDp95v3=1670168932; cSyncDp101=1670168932; cSyncDp104v2=1670168932; cSyncDp107=1670168932; cSyncDp110=1670168932; cSyncDp111v2=1670168932; cSyncDp112v2=1670168932; cSyncDp125v2=1670168932; cSyncDp126=1670168932; cSyncDp127=1670168932; cSyncDp129=1670168932; cSyncDp136v2=1670168932; cSyncDp138=1670168932; cSyncDp146=1670168932; cSyncDp148=1670168932; cSyncDp149v2=1670168932; cSyncDp151=1670168932; cSyncDp178=1670168932; cSyncDp179=1670168932; cSyncDp186=1670168932; cSyncDp221=1670168932
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 04 Dec 2022 15:48:52 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 937 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 5a263c0b3ce5127415dda068d3577273
043aef7ed4f1c5d84a44e9ad8546f7f6ee392b30
9a21f310d7382d824db60bedd76a75973fa352afe5c942f03c0ab63158b58842
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 15:48:52 GMT
Content-Type: application/ocsp-response
Content-Length: 937
Connection: keep-alive
Expires: Thu, 08 Dec 2022 14:33:48 GMT
ETag: "043aef7ed4f1c5d84a44e9ad8546f7f6ee392b30"
Last-Modified: Sun, 04 Dec 2022 14:33:49 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1578
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7745b0561917b4ee-OSL
1303420a64c18c6354036892027d3f2d-sp.ops.beeline.ru/p?ssp=sp&id=1303420A64C18C6354036892027D3F2D
301 Moved Permanently 0 B URL HTTP/2 1303420a64c18c6354036892027d3f2d-sp.ops.beeline.ru/p?ssp=sp&id=1303420A64C18C6354036892027D3F2D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&id=1303420A64C18C6354036892027D3F2D HTTP/1.1
Host: 1303420a64c18c6354036892027d3f2d-sp.ops.beeline.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Sun, 04 Dec 2022 15:48:52 GMT
content-length: 0
location: https://www.acint.net/match?dp=111&euid=e0beb565-d357-4819-aa20-59d6547bf68a
access-control-allow-origin: *
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: BeeAID=e0beb565-d357-4819-aa20-59d6547bf68a; expires=Sat, 25 Nov 2023 15:48:52 GMT; domain=ops.beeline.ru; path=/; secure; SameSite=None
access-control-allow-credentials: true, true
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS, GET, HEAD, POST, OPTIONS, PUT, DELETE
access-control-allow-headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
x-route: http://upstream_cookiesync
x-host: 192.168.152.30
X-Firefox-Spdy: h2
ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
302 Moved Temporarily 142 B URL HTTP/1.1 ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Sun, 04 Dec 2022 15:48:52 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/match?dp=14&euid=4102420A64C18C63A600EA450281F859
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=CkICQWOMwWRF6gCmWfiBAr1jXVyL39YDUzE3PVn3aUBEKx6i; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8cf17c83d1019d490dd809e816fb3ac4
d98cfc3241898e503f5d639fdcadf08b0861d000
dbc0b19544308fc129eea66d495a6d658ac85a30d8816bda5d5d79ed1535af7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DBC0B19544308FC129EEA66D495A6D658AC85A30D8816BDA5D5D79ED1535AF7F"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13870
Expires: Sun, 04 Dec 2022 19:40:02 GMT
Date: Sun, 04 Dec 2022 15:48:52 GMT
Connection: keep-alive
sync.republer.com/match?dsp=sape
204 No Content 0 B URL HTTP/2 sync.republer.com/match?dsp=sape
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?dsp=sape HTTP/1.1
Host: sync.republer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sun, 04 Dec 2022 15:48:52 GMT
strict-transport-security: max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 25fa4050586359401bc3e2691d320d83
2bc936e0f52a078b9f5222e7c3d8cf8efcdf21e9
90687cf991acefbc24003f5c48a29cf9ca2fbb553b761eae58b301fb636cbcc0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "90687CF991ACEFBC24003F5C48A29CF9CA2FBB553B761EAE58B301FB636CBCC0"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19846
Expires: Sun, 04 Dec 2022 21:19:38 GMT
Date: Sun, 04 Dec 2022 15:48:52 GMT
Connection: keep-alive
www.acint.net/mc/?dp=10&tc=1
200 OK 1.5 kB URL HTTP/2 www.acint.net/mc/?dp=10&tc=1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 10da76fd3f18c93cc4090a3f41abe282
458548f1d4992b7638013571707c623ec1e0e04c
b1d2148f8ef82af9ffb22105c3ed1137293529a11471c4723a8f5ae1a0de1556
GET /mc/?dp=10&tc=1 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://softreview.com.ua/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2OMwWSSaANULT99AipwP13vE3WqVss4bok7mwH4wb2j
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 04 Dec 2022 15:48:52 GMT
content-type: text/html
set-cookie: cSyncDp7v2=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp14v3=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp17=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp32=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp45v3=1670168932; expires=Mon, 05-Dec-22 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp53=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp54v2=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp62=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp67v2=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp68=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp71=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp77=1670168932; expires=Sun, 18-Dec-22 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp84=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp85=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp95v3=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp101=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp104v2=1670168932; expires=Sun, 18-Dec-22 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp107=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp110=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp111v2=1670168932; expires=Sun, 18-Dec-22 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp112v2=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp125v2=1670168932; expires=Mon, 19-Dec-22 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp126=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp127=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp129=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp136v2=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp138=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp146=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp148=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp149v2=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp151=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp178=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp179=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp186=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp221=1670168932; expires=Tue, 03-Jan-23 15:48:52 GMT; path=/; Secure; SameSite=None; domain=.acint.net
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 948fe44693cfebb81a1cf9a38bbff366
99f388de175a9e1e9ac4f8dc4dd3356f9a87ac0f
45cc07ec7237c70f1ebc27f3a84cf154af0d19d3a3901171a06de874891ba5de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "45CC07EC7237C70F1EBC27F3A84CF154AF0D19D3A3901171A06DE874891BA5DE"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5810
Expires: Sun, 04 Dec 2022 17:25:42 GMT
Date: Sun, 04 Dec 2022 15:48:52 GMT
Connection: keep-alive
s.uuidksinc.net/match/396/?remote_uid=1303420A64C18C6354036892027D3F2D
302 Found 0 B URL HTTP/2 s.uuidksinc.net/match/396/?remote_uid=1303420A64C18C6354036892027D3F2D
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/396/?remote_uid=1303420A64C18C6354036892027D3F2D HTTP/1.1
Host: s.uuidksinc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.19.0
date: Sun, 04 Dec 2022 15:48:52 GMT
content-length: 0
location: https://www.acint.net/match?dp=127&euid=GwsgMgWKMlPvTYqYJqh3
set-cookie: jcsuuid=GwsgMgWKMlPvTYqYJqh3; expires=Mon, 04 Dec 2023 15:48:52 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b47c0c89cacbd9d2c00c5afd2714385
9b7e464b367352229f3b88208eead3aa2cdbdf31
3460bf43303cf17b67ae0bfb950082170f0cf29c501a3142d49661f653501154
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3460BF43303CF17B67AE0BFB950082170F0CF29C501A3142D49661F653501154"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14759
Expires: Sun, 04 Dec 2022 19:54:51 GMT
Date: Sun, 04 Dec 2022 15:48:52 GMT
Connection: keep-alive
www.acint.net/match?dp=111&euid=e0beb565-d357-4819-aa20-59d6547bf68a
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=111&euid=e0beb565-d357-4819-aa20-59d6547bf68a
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=111&euid=e0beb565-d357-4819-aa20-59d6547bf68a HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2OMwWSScgNXVoFwAjJhdcsWWvI7ivEU5FeBjLSBOQ9U; cSyncDp7v2=1670168932; cSyncDp14v3=1670168932; cSyncDp17=1670168932; cSyncDp32=1670168932; cSyncDp45v3=1670168932; cSyncDp53=1670168932; cSyncDp54v2=1670168932; cSyncDp62=1670168932; cSyncDp67v2=1670168932; cSyncDp68=1670168932; cSyncDp71=1670168932; cSyncDp77=1670168932; cSyncDp84=1670168932; cSyncDp85=1670168932; cSyncDp95v3=1670168932; cSyncDp101=1670168932; cSyncDp104v2=1670168932; cSyncDp107=1670168932; cSyncDp110=1670168932; cSyncDp111v2=1670168932; cSyncDp112v2=1670168932; cSyncDp125v2=1670168932; cSyncDp126=1670168932; cSyncDp127=1670168932; cSyncDp129=1670168932; cSyncDp136v2=1670168932; cSyncDp138=1670168932; cSyncDp146=1670168932; cSyncDp148=1670168932; cSyncDp149v2=1670168932; cSyncDp151=1670168932; cSyncDp178=1670168932; cSyncDp179=1670168932; cSyncDp186=1670168932; cSyncDp221=1670168932
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 04 Dec 2022 15:48:52 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
acint.net/match?dp=14&euid=4102420A64C18C63A600EA450281F859
200 OK 43 B URL HTTP/2 acint.net/match?dp=14&euid=4102420A64C18C63A600EA450281F859
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=14&euid=4102420A64C18C63A600EA450281F859 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2OMwWSScgNXVoFwAjJhdcsWWvI7ivEU5FeBjLSBOQ9U; cSyncDp7v2=1670168932; cSyncDp14v3=1670168932; cSyncDp17=1670168932; cSyncDp32=1670168932; cSyncDp45v3=1670168932; cSyncDp53=1670168932; cSyncDp54v2=1670168932; cSyncDp62=1670168932; cSyncDp67v2=1670168932; cSyncDp68=1670168932; cSyncDp71=1670168932; cSyncDp77=1670168932; cSyncDp84=1670168932; cSyncDp85=1670168932; cSyncDp95v3=1670168932; cSyncDp101=1670168932; cSyncDp104v2=1670168932; cSyncDp107=1670168932; cSyncDp110=1670168932; cSyncDp111v2=1670168932; cSyncDp112v2=1670168932; cSyncDp125v2=1670168932; cSyncDp126=1670168932; cSyncDp127=1670168932; cSyncDp129=1670168932; cSyncDp136v2=1670168932; cSyncDp138=1670168932; cSyncDp146=1670168932; cSyncDp148=1670168932; cSyncDp149v2=1670168932; cSyncDp151=1670168932; cSyncDp178=1670168932; cSyncDp179=1670168932; cSyncDp186=1670168932; cSyncDp221=1670168932
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 04 Dec 2022 15:48:52 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b47c0c89cacbd9d2c00c5afd2714385
9b7e464b367352229f3b88208eead3aa2cdbdf31
3460bf43303cf17b67ae0bfb950082170f0cf29c501a3142d49661f653501154
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3460BF43303CF17B67AE0BFB950082170F0CF29C501A3142D49661F653501154"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14759
Expires: Sun, 04 Dec 2022 19:54:51 GMT
Date: Sun, 04 Dec 2022 15:48:52 GMT
Connection: keep-alive
www.acint.net/match?dp=129&euid=j628j5qauf
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=129&euid=j628j5qauf
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=129&euid=j628j5qauf HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2OMwWSScgNXVoFwAjJhdcsWWvI7ivEU5FeBjLSBOQ9U; cSyncDp7v2=1670168932; cSyncDp14v3=1670168932; cSyncDp17=1670168932; cSyncDp32=1670168932; cSyncDp45v3=1670168932; cSyncDp53=1670168932; cSyncDp54v2=1670168932; cSyncDp62=1670168932; cSyncDp67v2=1670168932; cSyncDp68=1670168932; cSyncDp71=1670168932; cSyncDp77=1670168932; cSyncDp84=1670168932; cSyncDp85=1670168932; cSyncDp95v3=1670168932; cSyncDp101=1670168932; cSyncDp104v2=1670168932; cSyncDp107=1670168932; cSyncDp110=1670168932; cSyncDp111v2=1670168932; cSyncDp112v2=1670168932; cSyncDp125v2=1670168932; cSyncDp126=1670168932; cSyncDp127=1670168932; cSyncDp129=1670168932; cSyncDp136v2=1670168932; cSyncDp138=1670168932; cSyncDp146=1670168932; cSyncDp148=1670168932; cSyncDp149v2=1670168932; cSyncDp151=1670168932; cSyncDp178=1670168932; cSyncDp179=1670168932; cSyncDp186=1670168932; cSyncDp221=1670168932
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 04 Dec 2022 15:48:52 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cf397beeea078b8113e466a479dea6fa
b9f887309c84a109ac0eb960f1306f46429a1885
a1038bd010cc6208aae9f5ce445c679df4de74161f1648d8c198668bb1aede4e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A1038BD010CC6208AAE9F5CE445C679DF4DE74161F1648D8C198668BB1AEDE4E"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8754
Expires: Sun, 04 Dec 2022 18:14:46 GMT
Date: Sun, 04 Dec 2022 15:48:52 GMT
Connection: keep-alive
sync.bumlam.com/?src=sap1&uid=1303420A64C18C6354036892027D3F2D
302 Moved Temporarily 0 B URL HTTP/1.1 sync.bumlam.com/?src=sap1&uid=1303420A64C18C6354036892027D3F2D
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&uid=1303420A64C18C6354036892027D3F2D HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sun, 04 Dec 2022 15:48:52 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQyNzFiMjlhMC03M2ViLTExZWQtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Sat, 29 Nov 2042 15:48:52 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync.bumlam.com/?src=sap1&s_data=CAIQARjkgrOcBmIgMTMwMzQyMEE2NEMxOEM2MzU0MDM2ODkyMDI3RDNGMkSiARAnGymgc-sR7YbgACWQwGR8
ETag: 271b29a0-73eb-11ed-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
mediatoday.ru/core/match.gif?s=32&id=1303420A64C18C6354036892027D3F2D
200 OK 43 B URL HTTP/2 mediatoday.ru/core/match.gif?s=32&id=1303420A64C18C6354036892027D3F2D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /core/match.gif?s=32&id=1303420A64C18C6354036892027D3F2D HTTP/1.1
Host: mediatoday.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.22.0
date: Sun, 04 Dec 2022 15:48:52 GMT
content-type: image/gif
content-length: 43
p3p: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
cache-control: no-cache, max-age=0, must-revalidate, no-store
pragma: no-cache
expires: Thursday, 01-Jan-1970 00:00:00 GMT
set-cookie: idntfy=VU1onK3XtJojgVs; expires=Wed, 01-Dec-2032 15:48:52 GMT; domain=mediatoday.ru; path=/core; SameSite=None; Secure
X-Firefox-Spdy: h2
stat.adlabs.ru/merge_gpsid/?sid=50&id=1303420A64C18C6354036892027D3F2D
302 Found 0 B URL HTTP/2 stat.adlabs.ru/merge_gpsid/?sid=50&id=1303420A64C18C6354036892027D3F2D
IP
ASN #201009 Centre of server systems Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /merge_gpsid/?sid=50&id=1303420A64C18C6354036892027D3F2D HTTP/1.1
Host: stat.adlabs.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sun, 04 Dec 2022 15:34:49 GMT
content-length: 0
location: //adlmerge.com/merge_gpsid/?sid=50&id=1303420A64C18C6354036892027D3F2D
X-Firefox-Spdy: h2
cs.agency2.ru/p?ssp=sp&uid=1303420A64C18C6354036892027D3F2D
301 Moved Permanently 0 B URL HTTP/1.1 cs.agency2.ru/p?ssp=sp&uid=1303420A64C18C6354036892027D3F2D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&uid=1303420A64C18C6354036892027D3F2D HTTP/1.1
Host: cs.agency2.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Date: Sun, 04 Dec 2022 15:48:52 GMT
Content-Length: 0
Connection: keep-alive
Server: fasthttp
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.acint.net/match?dp=186&euid=4be378df-dbbe-46fa-82ab-4cced10ce517
Set-Cookie: uuid=4be378df-dbbe-46fa-82ab-4cced10ce517; expires=Sat, 25 Nov 2023 15:48:52 GMT; domain=agency2.ru; path=/; secure; SameSite=None
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.107.44
pix.bumlam.com/sync/sape/check?sspuid=1303420A64C18C6354036892027D3F2D
302 Found 0 B URL HTTP/1.1 pix.bumlam.com/sync/sape/check?sspuid=1303420A64C18C6354036892027D3F2D
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/sape/check?sspuid=1303420A64C18C6354036892027D3F2D HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 04 Dec 2022 15:48:52 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://sync.bumlam.com/?src=sape
sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
302 Found 0 B URL HTTP/2 sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0 HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: session_tptc=1670168932824
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Sun, 04 Dec 2022 15:48:52 GMT
content-type: image/png
content-length: 0
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: user_id=35156cc8-3434-47f3-8a58-a885ca401588;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
user_id-legacy=35156cc8-3434-47f3-8a58-a885ca401588;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
location: https://www.acint.net/match?dp=71&euid=35156cc8-3434-47f3-8a58-a885ca401588
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
www.acint.net/match?dp=127&euid=GwsgMgWKMlPvTYqYJqh3
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=127&euid=GwsgMgWKMlPvTYqYJqh3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=127&euid=GwsgMgWKMlPvTYqYJqh3 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2OMwWSScgNXVoFwAjJhdcsWWvI7ivEU5FeBjLSBOQ9U; cSyncDp7v2=1670168932; cSyncDp14v3=1670168932; cSyncDp17=1670168932; cSyncDp32=1670168932; cSyncDp45v3=1670168932; cSyncDp53=1670168932; cSyncDp54v2=1670168932; cSyncDp62=1670168932; cSyncDp67v2=1670168932; cSyncDp68=1670168932; cSyncDp71=1670168932; cSyncDp77=1670168932; cSyncDp84=1670168932; cSyncDp85=1670168932; cSyncDp95v3=1670168932; cSyncDp101=1670168932; cSyncDp104v2=1670168932; cSyncDp107=1670168932; cSyncDp110=1670168932; cSyncDp111v2=1670168932; cSyncDp112v2=1670168932; cSyncDp125v2=1670168932; cSyncDp126=1670168932; cSyncDp127=1670168932; cSyncDp129=1670168932; cSyncDp136v2=1670168932; cSyncDp138=1670168932; cSyncDp146=1670168932; cSyncDp148=1670168932; cSyncDp149v2=1670168932; cSyncDp151=1670168932; cSyncDp178=1670168932; cSyncDp179=1670168932; cSyncDp186=1670168932; cSyncDp221=1670168932
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 04 Dec 2022 15:48:52 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sap1&s_data=CAIQARjkgrOcBmIgMTMwMzQyMEE2NEMxOEM2MzU0MDM2ODkyMDI3RDNGMkSiARAnGymgc-sR7YbgACWQwGR8
200 OK 0 B URL HTTP/1.1 sync.bumlam.com/?src=sap1&s_data=CAIQARjkgrOcBmIgMTMwMzQyMEE2NEMxOEM2MzU0MDM2ODkyMDI3RDNGMkSiARAnGymgc-sR7YbgACWQwGR8
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&s_data=CAIQARjkgrOcBmIgMTMwMzQyMEE2NEMxOEM2MzU0MDM2ODkyMDI3RDNGMkSiARAnGymgc-sR7YbgACWQwGR8 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQyNzFiMjlhMC03M2ViLTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 15:48:52 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQyNzFiMjlhMC03M2ViLTExZWQtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Sat, 29 Nov 2042 15:48:52 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
match.new-programmatic.com/userbind?src=sape&id=1303420A64C18C6354036892027D3F2D
204 No Content 0 B URL HTTP/1.1 match.new-programmatic.com/userbind?src=sape&id=1303420A64C18C6354036892027D3F2D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=sape&id=1303420A64C18C6354036892027D3F2D HTTP/1.1
Host: match.new-programmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.22.1
Date: Sun, 04 Dec 2022 15:48:52 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
www.acint.net/match?dp=186&euid=4be378df-dbbe-46fa-82ab-4cced10ce517
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=186&euid=4be378df-dbbe-46fa-82ab-4cced10ce517
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=186&euid=4be378df-dbbe-46fa-82ab-4cced10ce517 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2OMwWSScgNXVoFwAjJhdcsWWvI7ivEU5FeBjLSBOQ9U; cSyncDp7v2=1670168932; cSyncDp14v3=1670168932; cSyncDp17=1670168932; cSyncDp32=1670168932; cSyncDp45v3=1670168932; cSyncDp53=1670168932; cSyncDp54v2=1670168932; cSyncDp62=1670168932; cSyncDp67v2=1670168932; cSyncDp68=1670168932; cSyncDp71=1670168932; cSyncDp77=1670168932; cSyncDp84=1670168932; cSyncDp85=1670168932; cSyncDp95v3=1670168932; cSyncDp101=1670168932; cSyncDp104v2=1670168932; cSyncDp107=1670168932; cSyncDp110=1670168932; cSyncDp111v2=1670168932; cSyncDp112v2=1670168932; cSyncDp125v2=1670168932; cSyncDp126=1670168932; cSyncDp127=1670168932; cSyncDp129=1670168932; cSyncDp136v2=1670168932; cSyncDp138=1670168932; cSyncDp146=1670168932; cSyncDp148=1670168932; cSyncDp149v2=1670168932; cSyncDp151=1670168932; cSyncDp178=1670168932; cSyncDp179=1670168932; cSyncDp186=1670168932; cSyncDp221=1670168932
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 04 Dec 2022 15:48:52 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sape
302 Moved Temporarily 0 B URL HTTP/1.1 sync.bumlam.com/?src=sape
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sape HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQyNzFiMjlhMC03M2ViLTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sun, 04 Dec 2022 15:48:52 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQyNzFiMjlhMC03M2ViLTExZWQtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Sat, 29 Nov 2042 15:48:52 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: https://pix.bumlam.com/sync/sape/sync_ok?guid=271b29a0-73eb-11ed-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
Access-Control-Allow-Origin: https://acint.net
Access-Control-Allow-Credentials: true
www.acint.net/match?dp=71&euid=35156cc8-3434-47f3-8a58-a885ca401588
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=71&euid=35156cc8-3434-47f3-8a58-a885ca401588
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=71&euid=35156cc8-3434-47f3-8a58-a885ca401588 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2OMwWSScgNXVoFwAjJhdcsWWvI7ivEU5FeBjLSBOQ9U; cSyncDp7v2=1670168932; cSyncDp14v3=1670168932; cSyncDp17=1670168932; cSyncDp32=1670168932; cSyncDp45v3=1670168932; cSyncDp53=1670168932; cSyncDp54v2=1670168932; cSyncDp62=1670168932; cSyncDp67v2=1670168932; cSyncDp68=1670168932; cSyncDp71=1670168932; cSyncDp77=1670168932; cSyncDp84=1670168932; cSyncDp85=1670168932; cSyncDp95v3=1670168932; cSyncDp101=1670168932; cSyncDp104v2=1670168932; cSyncDp107=1670168932; cSyncDp110=1670168932; cSyncDp111v2=1670168932; cSyncDp112v2=1670168932; cSyncDp125v2=1670168932; cSyncDp126=1670168932; cSyncDp127=1670168932; cSyncDp129=1670168932; cSyncDp136v2=1670168932; cSyncDp138=1670168932; cSyncDp146=1670168932; cSyncDp148=1670168932; cSyncDp149v2=1670168932; cSyncDp151=1670168932; cSyncDp178=1670168932; cSyncDp179=1670168932; cSyncDp186=1670168932; cSyncDp221=1670168932
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 04 Dec 2022 15:48:52 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4dce257e5f662b522ed0ee51eb9a0438
dc97b5856ad1887468f13ecb0e2840bf734464b9
28597eff92671a54dfe64313350b5cd19765bbb91947418ce87bd539fca76f39
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "28597EFF92671A54DFE64313350B5CD19765BBB91947418CE87BD539FCA76F39"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7088
Expires: Sun, 04 Dec 2022 17:47:00 GMT
Date: Sun, 04 Dec 2022 15:48:52 GMT
Connection: keep-alive
pix.bumlam.com/sync/sape/sync_ok?guid=271b29a0-73eb-11ed-86e0-002590c0647c
302 Found 0 B URL HTTP/1.1 pix.bumlam.com/sync/sape/sync_ok?guid=271b29a0-73eb-11ed-86e0-002590c0647c
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/sape/sync_ok?guid=271b29a0-73eb-11ed-86e0-002590c0647c HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQyNzFiMjlhMC03M2ViLTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 04 Dec 2022 15:48:52 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://271b29a0-73eb-11ed-86e0-002590c0647c.n5.sync.bumlam.com/?src=sape
mc.yandex.ru/metrika/watch.js
200 OK 58 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (553)
Hash 69d8fb977b5f11ff2f42caaf9acae0f5
c68a1a8a921d9ca906a20a838458b48d33f0a6b1
197becd55ad37f6cdbdd1b1fc334a34a795359b805639f8311d42ac0abeedf34
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://softreview.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 57635
date: Sun, 04 Dec 2022 15:48:52 GMT
access-control-allow-origin: *
etag: "6388ac0c-e123"
expires: Sun, 04 Dec 2022 16:48:52 GMT
last-modified: Thu, 01 Dec 2022 16:28:44 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash e15176433ab00b65892fc45abf22bd0b
4ad8d801f1b03266ea777ce3dcc83ad3c3a1d065
7b531efcc72507d89789145da9dc39062fdb9d574c97dc0d5834fbd84dc19c45
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 03 Dec 2022 03:41:03 GMT
Expires: Sat, 10 Dec 2022 03:41:02 GMT
Etag: "4ad8d801f1b03266ea777ce3dcc83ad3c3a1d065"
Cache-Control: max-age=474128,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7745b0565f91b51e-OSL
exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
301 Moved Permanently 115 B URL HTTP/2 exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
IP
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text
Hash 989aa696d72eb832678ebaab281df8df
b3351c4e83cb88fcb46d1e437207e9f6a52381d9
a4bd8ec5456dfc892c4d1750edef94320398b514d1938c4f11800f83fbb84146
GET /cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Sun, 04 Dec 2022 15:48:53 GMT
content-type: text/html; charset=utf-8
content-length: 115
location: https://www.acint.net/match?dp=126&euid=dfdad3b2-7389-4ff9-6058-a7857d71c87e
serverid: TODO
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e7ad09917ec89b585081e83a2ad7cb53
bef223cf3c787d296062e1c9a303dc6fa6bac925
38d03c035f09cdb49207e0e942aca073039079de705478bd3b2060428450a600
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "38D03C035F09CDB49207E0E942ACA073039079DE705478BD3B2060428450A600"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4448
Expires: Sun, 04 Dec 2022 17:03:01 GMT
Date: Sun, 04 Dec 2022 15:48:53 GMT
Connection: keep-alive
271b29a0-73eb-11ed-86e0-002590c0647c.n5.sync.bumlam.com/?src=sape
302 Moved Temporarily 0 B URL HTTP/1.1 271b29a0-73eb-11ed-86e0-002590c0647c.n5.sync.bumlam.com/?src=sape
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sape HTTP/1.1
Host: 271b29a0-73eb-11ed-86e0-002590c0647c.n5.sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQyNzFiMjlhMC03M2ViLTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Length: 0
Connection: close
Location: https://pix.bumlam.com/sync/sape/done
pix.bumlam.com/sync/sape/done
200 OK 43 B URL HTTP/1.1 pix.bumlam.com/sync/sape/done
IP
ASN #44066 diva-e Datacenters GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /sync/sape/done HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQyNzFiMjlhMC03M2ViLTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
www.acint.net/match?dp=126&euid=dfdad3b2-7389-4ff9-6058-a7857d71c87e
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=126&euid=dfdad3b2-7389-4ff9-6058-a7857d71c87e
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=126&euid=dfdad3b2-7389-4ff9-6058-a7857d71c87e HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2OMwWSScgNXVoFwAjJhdcsWWvI7ivEU5FeBjLSBOQ9U; cSyncDp7v2=1670168932; cSyncDp14v3=1670168932; cSyncDp17=1670168932; cSyncDp32=1670168932; cSyncDp45v3=1670168932; cSyncDp53=1670168932; cSyncDp54v2=1670168932; cSyncDp62=1670168932; cSyncDp67v2=1670168932; cSyncDp68=1670168932; cSyncDp71=1670168932; cSyncDp77=1670168932; cSyncDp84=1670168932; cSyncDp85=1670168932; cSyncDp95v3=1670168932; cSyncDp101=1670168932; cSyncDp104v2=1670168932; cSyncDp107=1670168932; cSyncDp110=1670168932; cSyncDp111v2=1670168932; cSyncDp112v2=1670168932; cSyncDp125v2=1670168932; cSyncDp126=1670168932; cSyncDp127=1670168932; cSyncDp129=1670168932; cSyncDp136v2=1670168932; cSyncDp138=1670168932; cSyncDp146=1670168932; cSyncDp148=1670168932; cSyncDp149v2=1670168932; cSyncDp151=1670168932; cSyncDp178=1670168932; cSyncDp179=1670168932; cSyncDp186=1670168932; cSyncDp221=1670168932
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 04 Dec 2022 15:48:53 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://softreview.com.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 04 Dec 2022 15:48:53 GMT
access-control-allow-origin: *
etag: "6388ac0c-2b"
expires: Sun, 04 Dec 2022 16:48:53 GMT
accept-ranges: bytes
last-modified: Thu, 01 Dec 2022 16:28:44 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/23414332/1?wmode=7&page-url=http%3A%2F%2Fsoftreview.com.ua%2Ftag%2Fnotepad%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aslhejhys9ytpnba8eugac%3Afp%3A1293%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A881461929329%3Ahid%3A18834975%3Az%3A0%3Ai%3A20221204154850%3Aet%3A1670168931%3Ac%3A1%3Arn%3A594191159%3Arqn%3A1%3Au%3A1670168931297896411%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A10%2C41%2C71%2C90%2C-6%2C0%2C%2C1103%2C37%2C%2C%2C%2C1397%3Aco%3A0%3Ans%3A1670168928401%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670168931%3At%3A%D0%9D%D0%B0%20%D1%81%D0%B2%D0%BE%D0%B5%D0%B9%20%D0%BD%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%D1%83%D1%85%D0%BD%D0%B8%20%D0%BF%D1%80%D0%B8%D0%B3%D0%BE%D1%82%D0%BE%D0%B2%D1%8C%D1%82%D0%B5%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%BB%D1%8E%D0%B1%D0%B8%D0%BC%D1%8B%D0%B5%20%D0%B1%D0%BB%D1%8E%D0%B4%D0%B0&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 407 B URL HTTP/2 mc.yandex.ru/watch/23414332/1?wmode=7&page-url=http%3A%2F%2Fsoftreview.com.ua%2Ftag%2Fnotepad%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aslhejhys9ytpnba8eugac%3Afp%3A1293%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A881461929329%3Ahid%3A18834975%3Az%3A0%3Ai%3A20221204154850%3Aet%3A1670168931%3Ac%3A1%3Arn%3A594191159%3Arqn%3A1%3Au%3A1670168931297896411%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A10%2C41%2C71%2C90%2C-6%2C0%2C%2C1103%2C37%2C%2C%2C%2C1397%3Aco%3A0%3Ans%3A1670168928401%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670168931%3At%3A%D0%9D%D0%B0%20%D1%81%D0%B2%D0%BE%D0%B5%D0%B9%20%D0%BD%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%D1%83%D1%85%D0%BD%D0%B8%20%D0%BF%D1%80%D0%B8%D0%B3%D0%BE%D1%82%D0%BE%D0%B2%D1%8C%D1%82%D0%B5%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%BB%D1%8E%D0%B1%D0%B8%D0%BC%D1%8B%D0%B5%20%D0%B1%D0%BB%D1%8E%D0%B4%D0%B0&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash da11693ec73e92b75165ae900cd8cb40
bdc276d30cfc7895e9d88d1a95215d23e50cb370
677ccfd2d1f2d60666edcb414adbb89f3d611b873ada0cb9c6e2b7bdda8e220a
GET /watch/23414332/1?wmode=7&page-url=http%3A%2F%2Fsoftreview.com.ua%2Ftag%2Fnotepad%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aslhejhys9ytpnba8eugac%3Afp%3A1293%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A881461929329%3Ahid%3A18834975%3Az%3A0%3Ai%3A20221204154850%3Aet%3A1670168931%3Ac%3A1%3Arn%3A594191159%3Arqn%3A1%3Au%3A1670168931297896411%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A10%2C41%2C71%2C90%2C-6%2C0%2C%2C1103%2C37%2C%2C%2C%2C1397%3Aco%3A0%3Ans%3A1670168928401%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670168931%3At%3A%D0%9D%D0%B0%20%D1%81%D0%B2%D0%BE%D0%B5%D0%B9%20%D0%BD%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%D1%83%D1%85%D0%BD%D0%B8%20%D0%BF%D1%80%D0%B8%D0%B3%D0%BE%D1%82%D0%BE%D0%B2%D1%8C%D1%82%D0%B5%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%BB%D1%8E%D0%B1%D0%B8%D0%BC%D1%8B%D0%B5%20%D0%B1%D0%BB%D1%8E%D0%B4%D0%B0&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://softreview.com.ua
Referer: http://softreview.com.ua/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 407
date: Sun, 04 Dec 2022 15:48:53 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://softreview.com.ua
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 04-Dec-2022 15:48:53 GMT
last-modified: Sun, 04-Dec-2022 15:48:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2243
Expires: Sun, 04 Dec 2022 16:26:16 GMT
Date: Sun, 04 Dec 2022 15:48:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2243
Expires: Sun, 04 Dec 2022 16:26:16 GMT
Date: Sun, 04 Dec 2022 15:48:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2243
Expires: Sun, 04 Dec 2022 16:26:16 GMT
Date: Sun, 04 Dec 2022 15:48:53 GMT
Connection: keep-alive
ssp.bidvol.com/usersync?dspcsid=8&redirect=1
302 Found 503 B URL HTTP/2 ssp.bidvol.com/usersync?dspcsid=8&redirect=1
IP
ASN #24940 Hetzner Online GmbH
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
GET /usersync?dspcsid=8&redirect=1 HTTP/1.1
Host: ssp.bidvol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.22.0
date: Sun, 04 Dec 2022 15:48:52 GMT
x-request-id: d49a9d16-7f89-48df-a4ff-fc486b437926
set-cookie: bvuid=j628j5qauf; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None
bvuid2=j628j5qauf; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT
vary: Origin
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
surrogate-control: no-store
location: https://www.acint.net/match?dp=129&euid=j628j5qauf
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2243
Expires: Sun, 04 Dec 2022 16:26:16 GMT
Date: Sun, 04 Dec 2022 15:48:53 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f00caab-057c-4cc2-a163-fd0bb4d0b5f7.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f00caab-057c-4cc2-a163-fd0bb4d0b5f7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1521243a6fc065bb631bfbde22886fa2
527220e4e8cd1065ce05fcd0694d0d703d817e2e
b83ebf768bbfb34f49d5467f3dfb43ceb3ca3d30d3454e6f37db9aef72d7689a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f00caab-057c-4cc2-a163-fd0bb4d0b5f7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11482
x-amzn-requestid: d1db05ab-bd5d-4ad4-96b4-8f439152e435
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clssNEeAoAMFh_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc181-0221c53842a2f5ef071e8071;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:37:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UZ5kblxfN8fkp55YeSpUA55GzDxZgsLpFZrYTsdJBihf53HLCN0hTA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 22:17:35 GMT
age: 63078
etag: "527220e4e8cd1065ce05fcd0694d0d703d817e2e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ads.adlook.me/csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
302 Found 8.3 kB URL HTTP/2 ads.adlook.me/csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
IP
ASN #48096 Enterprise Cloud Ltd.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash db1701b7b9d161a0c935bb6e10b17893
22a8c4bd58c729c1abcf794466e8f3231dfb034b
b495524a33e5b1d3ba34cfbe867ada0da956c061370b1fcde06b23a6194a9787
GET /csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://acint.net/match?dp=110&euid=9381052d250048b3af127578dd466653
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=9381052d250048b3af127578dd466653; expires=Sun, 03 Dec 2023 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
date: Sun, 04 Dec 2022 15:48:52 GMT
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2636f91bb8fa4d9bb7bef114c248a9ae
8637105f41058bc0d2b259d462b560881928adb6
3d93fd8fcf1af31d00ccbd453142dbea5f2b91d7f58373095943ed40a31ed1f7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10431
x-amzn-requestid: f79ab5e7-8c1b-4827-a531-aaa19c1d80aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsCGEwxIAMF34g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc073-6358d2950955884c470c0a89;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PQ7xh995cd1UVi3z42EVZGjQjHLLvtAP5BBC-xLEEGr4mEiXS6fC-w==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:47:06 GMT
age: 64907
etag: "8637105f41058bc0d2b259d462b560881928adb6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c01fe1cccdb3b672bbade6d98217ffe9
a9a529dc9894827f6243a1bf57f81caa4fe88fc2
c43da6212c79a08e22e78e04e99e8f5422e64b4b0a87f30b7907f1b4bc675c71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4666
x-amzn-requestid: 850d341f-5ccb-453c-8adf-a8194f8fbdad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clr_-GiboAMFwww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-766293f2526e637235067aca;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: z5uqgjB-Bsl0U55a8aFi37cpJ65Vnbjm6bJ2GnMpaO7RXsMZsOCbPQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:44:01 GMT
age: 65092
etag: "a9a529dc9894827f6243a1bf57f81caa4fe88fc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14dcca2a9c4792d835ee709bcd947402
1d702df3a64258628f4124eafd580695f2d350af
da01dcd8fef7c50bdb6f7a8a6a4955694092f479df3dba72f7fa69d7280d07b2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16143
x-amzn-requestid: dc86fad4-4e53-42c9-9b0a-5e4d2cfcd087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGyLGqmoAMFnaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851a7-0ea324b31e8c6578098b8ab9;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KHd4ajJWl-8TDH5HGbkuJXI4NL6I83IwSUBKzfq85cxpyRH_LGl6OA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 05:55:20 GMT
age: 35613
etag: "1d702df3a64258628f4124eafd580695f2d350af"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43309032a892c486f9985ef520df696e
36f4682ca6a33ff80ee02129c77e6f27e996ede0
24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5681
x-amzn-requestid: 8f0d66b8-d532-48d9-9a29-74540cd6ab3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltXnEotIAMFqkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc296-27349a376ff819ab63b04a81;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:41:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vNP2rQwmWTntetjJyjonO8N_YOBqvQuZUm42BWX7c1GoX7jASOIpCg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:49:42 GMT
age: 64751
etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 24f939666f99a41c1e0306ca093a77a4
cee1b80ce2d7772f505221c6d41a92982f5ad67b
9a5ed8b2939264325790d55d3384f28329e1ca3d5b9e290a2731a57a5fd3b952
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Thu, 08 Dec 2022 14:20:25 GMT
ETag: "cee1b80ce2d7772f505221c6d41a92982f5ad67b"
Last-Modified: Sun, 04 Dec 2022 14:20:26 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1082
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7745b05adfd7b4ee-OSL
ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=153&external_id=1303420A64C18C6354036892027D3F2D
200 OK 42 B URL HTTP/1.1 ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=153&external_id=1303420A64C18C6354036892027D3F2D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cgi-bin/sync.cgi?dsp_id=153&external_id=1303420A64C18C6354036892027D3F2D HTTP/1.1
Host: ssp.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dabd839729e9b0fb2558253d850126b
64f617aa0afb52168ef3519a4cf9829ac61ee007
1a47e4d0efdac6fbec990e3e168bfdfe615ff8953158773e8b1940d4d91eee18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:48:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 24f939666f99a41c1e0306ca093a77a4
cee1b80ce2d7772f505221c6d41a92982f5ad67b
9a5ed8b2939264325790d55d3384f28329e1ca3d5b9e290a2731a57a5fd3b952
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Thu, 08 Dec 2022 14:20:25 GMT
ETag: "cee1b80ce2d7772f505221c6d41a92982f5ad67b"
Last-Modified: Sun, 04 Dec 2022 14:20:26 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1082
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7745b05b388db4ee-OSL
cm.g.doubleclick.net/pixel?google_nid=agentstvo_sape_limited&google_hm=EwNCCmTBjGNUA2iSAn0_LQ
200 OK 170 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=agentstvo_sape_limited&google_hm=EwNCCmTBjGNUA2iSAn0_LQ
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash e7673c60af825466f83d46da72ca1635
fc0fcbee0835709ba2d28798a612bfd687903fb5
0b8a20373c6dd04e091902226d922b3688143a8938afb9d283d889de7b55ceb5
GET /pixel?google_nid=agentstvo_sape_limited&google_hm=EwNCCmTBjGNUA2iSAn0_LQ HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
date: Sun, 04 Dec 2022 15:48:53 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: HTTP server (unknown)
content-length: 170
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 08420a5a124dc37e3c5e0fc739e6fe26
260b7a6428f5e7253b8cfa89225c117576e636df
9125c0c7560a5d6472c80291cbf4a80317e1258487a5c71807a0176657528ef8
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Thu, 08 Dec 2022 13:13:10 GMT
ETag: "260b7a6428f5e7253b8cfa89225c117576e636df"
Last-Modified: Sun, 04 Dec 2022 13:13:11 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2013
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7745b05b68b1b4ee-OSL
ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691
302 Moved Temporarily 0 B URL HTTP/1.1 ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691 HTTP/1.1
Host: ad.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-control: no-cache, max-age=0, must-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
Set-Cookie: cid=-5384456175; expires=Tue, 03 Dec 2024 15:48:53 GMT; path=/; domain=.adriver.ru; SameSite=None; Secure
Location: /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-5384456175
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a1586dee9ebacb7c8828dd0f643dafd4
50367ff8e320f8423c918ef69febaa35b6644b1c
d3b107154132876e1ca14d8365557417f34f3df74b58d5de47695577d979391f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D3B107154132876E1CA14D8365557417F34F3DF74B58D5DE47695577D979391F"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2757
Expires: Sun, 04 Dec 2022 16:34:50 GMT
Date: Sun, 04 Dec 2022 15:48:53 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 472 B IP
Hash ccd0403a573158475fa8b9fa1bd3faa0
2fc47b151e9c32ce0e345a01886f8f842719d468
4ee259e0c86bc54e5c9c72cdf0c735f10a18942f1c5d558e876e01a9662d046f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 16:09:17 GMT
Expires: Fri, 09 Dec 2022 16:09:16 GMT
Etag: "2fc47b151e9c32ce0e345a01886f8f842719d468"
Cache-Control: max-age=432622,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7745b05b4dbeb51e-OSL
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 223fd7f1f7bb1b89b4de32b4e37129ad
92f75fe445a7c355cedeb915669ce9d611fc44d2
3c35bdf0c0890175cb2add65215f4accc69e4894ab963c95c99dd71caeb14319
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Thu, 08 Dec 2022 14:20:53 GMT
ETag: "92f75fe445a7c355cedeb915669ce9d611fc44d2"
Last-Modified: Sun, 04 Dec 2022 14:20:54 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 520
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7745b05b88d5b4ee-OSL
ocsp.usertrust.com/
200 OK 472 B IP
Hash 153dd5a5276a3445d22209a861993bf9
516f65ea2fba9bce0c21e2d2284442cda28d1168
66b9807a7769711550f93cef1df1648522a2ce6390fbc2fcb6830c8dc65f36f4
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 16:18:18 GMT
Expires: Thu, 08 Dec 2022 16:18:17 GMT
Etag: "516f65ea2fba9bce0c21e2d2284442cda28d1168"
Cache-Control: max-age=602537,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 734
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7745b05baeb3b4f1-OSL
ads.betweendigital.com/match?bidder_id=73&external_user_id=1303420A64C18C6354036892027D3F2D
302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=73&external_user_id=1303420A64C18C6354036892027D3F2D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=73&external_user_id=1303420A64C18C6354036892027D3F2D HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /match?bidder_id=73&external_user_id=1303420A64C18C6354036892027D3F2D&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Mon, 04 Dec 2023 15:48:53 GMT; Path=/; Domain=.betweendigital.com
tuuid=8e50698c-aad7-5252-9ae5-76d0f969b7b5; Max-Age=31536000; Expires=Mon, 04 Dec 2023 15:48:53 GMT; Path=/; Domain=.betweendigital.com
ut=Y4zBZQANI0gG6KtFY3UfSSRDlhP7zQFTAXreOQ==; Max-Age=31536000; Expires=Mon, 04 Dec 2023 15:48:53 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
ad.mail.ru/cm.gif?p=48&id=1303420A64C18C6354036892027D3F2D
200 OK 43 B URL HTTP/2 ad.mail.ru/cm.gif?p=48&id=1303420A64C18C6354036892027D3F2D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /cm.gif?p=48&id=1303420A64C18C6354036892027D3F2D HTTP/1.1
Host: ad.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:48:53 GMT
content-type: image/gif
content-length: 43
set-cookie: VID=1H1aN_3xfzoE00275S2_eDYE:::0-0-0-8a71a25:CAASEDuGNlLoiN5bFmxCaCAVrpQaYK10-mFdxrgymgjEHR1XAif7ho4n75bVmNjNJTPyD5pW78ifMGxR0n4zAxs1nfluTy3NqDvej9F4UMAFCHuAZK0QW8z8MzCTQkBnwW2kMAC6l7OtQK-YoWn0x1BuTQkmvg; path=/; expires=Tue, 05-Dec-23 15:48:53 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
expires: Sun, 04 Dec 2022 21:48:53 GMT
cache-control: max-age=21600
last-modified: Sun, 04 Dec 2022 15:48:53 GMT
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: require-corp
X-Firefox-Spdy: h2
tag.digitaltarget.ru/adcm.js
200 OK 3.1 kB URL HTTP/1.1 tag.digitaltarget.ru/adcm.js
IP
File type ASCII text, with very long lines (3051), with no line terminators
Hash e7097284185069f52fc736bcd50cda13
1cdfdf2d869841202079ddf91e0a00a8610812e6
40f2a96f78f4c8484e9da6e172f5ddd3e4d7786ca29e04b96e1067a365190e80
GET /adcm.js HTTP/1.1
Host: tag.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Type: application/javascript
Content-Length: 3051
Last-Modified: Sun, 04 Dec 2022 15:34:46 GMT
Connection: keep-alive
ETag: "638cbe16-beb"
Accept-Ranges: bytes
ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-5384456175
302 Moved Temporarily 40 B URL HTTP/1.1 ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-5384456175
IP
File type ASCII text, with CRLF line terminators
Hash 251630b588179b239e8fab1ac9ef6d3a
91b91a97bc481dd2bbd5e0f3fea6ba1c4e843882
c95661e0ef6975b1df5361695a439f71a021d72c345023c3e668e84f35b3c38b
GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-5384456175 HTTP/1.1
Host: ad.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-control: no-cache, no-cache=Set-Cookie, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref="//adriver.ru/w3c/p3p.xml", CP="NON DSP COR CURa ADMa DEVa OUR BUS UNI COM NAV INT STA"
Set-Cookie: cid=0; expires=Tue, 03 Dec 2024 15:48:53 GMT; path=/; domain=.adriver.ru;
uid=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain=.adriver.ru
Location: https://www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 3046ecaf4160ea8d4000e27927f9b17a
c4d2e3dc58ab61761df51c16d35fd382903ba8a4
ba95636447e8227d48d391ab1195a850d3feda295b6a4a4e276a59d52a671df7
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Thu, 08 Dec 2022 13:01:23 GMT
ETag: "c4d2e3dc58ab61761df51c16d35fd382903ba8a4"
Last-Modified: Sun, 04 Dec 2022 13:01:24 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2551
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7745b05beac0fab8-OSL
ads.betweendigital.com/match?bidder_id=73&external_user_id=1303420A64C18C6354036892027D3F2D&crf=1
200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=73&external_user_id=1303420A64C18C6354036892027D3F2D&crf=1
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=73&external_user_id=1303420A64C18C6354036892027D3F2D&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Mon, 04 Dec 2023 15:48:53 GMT; Path=/; Domain=.betweendigital.com
tuuid=6ebef45e-225c-5252-a4dc-a9ebc750688e; Max-Age=31536000; Expires=Mon, 04 Dec 2023 15:48:53 GMT; Path=/; Domain=.betweendigital.com
ut=Y4zBZQANACA312kZsI3GTgHZGzFT4j8wCAsqqg==; Max-Age=31536000; Expires=Mon, 04 Dec 2023 15:48:53 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
sape-sync.rutarget.ru/sync
302 Moved Temporarily 0 B URL HTTP/1.1 sape-sync.rutarget.ru/sync
IP
ASN #208677 Cloud technology Limited (Ltd.)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync HTTP/1.1
Host: sape-sync.rutarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Length: 0
Connection: close
Location: https://www.acint.net/match?dp=104&euid=HnT_aJfZZlD1
P3P: CP="This is not a P3P policy. Please visit http://rutarget.ru/p3p/ to get more information."
Set-Cookie: userId=HnT_aJfZZlD1; Path=/; Domain=.rutarget.ru; Expires=Fri, 02 Jun 2023 15:48:53 GMT; SameSite=None; Secure
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 116451c96ef6a0efe04d133d4b45698d
015617e9ac2628993c20915ad823df933ed47e34
651c50b32bfb80a8a374c278cc58975de39de10bf1cf66ec0a30fdfc1264122a
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Thu, 08 Dec 2022 14:37:01 GMT
ETag: "015617e9ac2628993c20915ad823df933ed47e34"
Last-Modified: Sun, 04 Dec 2022 14:37:02 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2702
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7745b05c19bcb4ee-OSL
sync.adkernel.com/user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D
200 OK 0 B URL HTTP/1.1 sync.adkernel.com/user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D
IP
ASN #36057 WEBAIR-INTERNET-MTL
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D HTTP/1.1
Host: sync.adkernel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Length: 0
Connection: close
status.thawte.com/
200 OK 471 B IP
Hash 40058b66a370eeb994d7e291e086b384
bd66b185cc944532ab2ea09cef48214dcaabd200
bd976d52ab0774a69f6902b99a1f253f79b517b9adce916b2c838501f91baf24
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3856
Cache-Control: max-age=112941
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:48:53 GMT
Etag: "638bc882-1d7"
Expires: Mon, 05 Dec 2022 23:11:14 GMT
Last-Modified: Sat, 03 Dec 2022 22:06:58 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
px.adhigh.net/p/cm/sape?u=1303420A64C18C6354036892027D3F2D
302 Found 0 B URL HTTP/2 px.adhigh.net/p/cm/sape?u=1303420A64C18C6354036892027D3F2D
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/cm/sape?u=1303420A64C18C6354036892027D3F2D HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sun, 04 Dec 2022 15:48:53 GMT
content-length: 0
x-backend-id: f9-ru
access-control-allow-origin: *
access-control-allow-credentials: true
set-cookie: gi_u=uMCnYBgB8rWw.AikABlGE3dN1dg;Path=/;Domain=.adhigh.net;Expires=Mon, 04-Dec-2023 15:48:53 GMT;Secure;SameSite=None
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
location: https://px.adhigh.net/p/cm/sape?u=1303420A64C18C6354036892027D3F2D&bounced=1
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 93a3d81d1e5112a6911b75862d8b0b64
f78040e63948bd51cdc6366edeb5618bf1eed67b
4e8cfc2158ea93df4154826e2b0d0f6339af419f9b364f5cf049a241bebdc3c5
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 03 Dec 2022 21:58:43 GMT
Expires: Sun, 04 Dec 2022 21:58:43 GMT
ETag: "f78040e63948bd51cdc6366edeb5618bf1eed67b"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.sectigo.com/
200 OK 471 B IP
Hash b842d5465426137b4c494a6814f54fe2
3127fd02bbffadc4e00ea0c0c0e45eb865dbb2ba
4d7c130368ff61c166464de3c378ff2680817a1ad371ff3e1b5932fbf15189d9
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 03 Dec 2022 02:18:43 GMT
Expires: Sat, 10 Dec 2022 02:18:42 GMT
Etag: "3127fd02bbffadc4e00ea0c0c0e45eb865dbb2ba"
Cache-Control: max-age=469188,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7745b05bfe9e1c0e-OSL
www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
302 Found 154 B URL HTTP/2 www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2OMwWSScgNXVoFwAjJhdcsWWvI7ivEU5FeBjLSBOQ9U; cSyncDp7v2=1670168932; cSyncDp14v3=1670168932; cSyncDp17=1670168932; cSyncDp32=1670168932; cSyncDp45v3=1670168932; cSyncDp53=1670168932; cSyncDp54v2=1670168932; cSyncDp62=1670168932; cSyncDp67v2=1670168932; cSyncDp68=1670168932; cSyncDp71=1670168932; cSyncDp77=1670168932; cSyncDp84=1670168932; cSyncDp85=1670168932; cSyncDp95v3=1670168932; cSyncDp101=1670168932; cSyncDp104v2=1670168932; cSyncDp107=1670168932; cSyncDp110=1670168932; cSyncDp111v2=1670168932; cSyncDp112v2=1670168932; cSyncDp125v2=1670168932; cSyncDp126=1670168932; cSyncDp127=1670168932; cSyncDp129=1670168932; cSyncDp136v2=1670168932; cSyncDp138=1670168932; cSyncDp146=1670168932; cSyncDp148=1670168932; cSyncDp149v2=1670168932; cSyncDp151=1670168932; cSyncDp178=1670168932; cSyncDp179=1670168932; cSyncDp186=1670168932; cSyncDp221=1670168932
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sun, 04 Dec 2022 15:48:53 GMT
content-type: text/html
content-length: 154
location: https://ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=1303420A64C18C635703729202708156
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dabd839729e9b0fb2558253d850126b
64f617aa0afb52168ef3519a4cf9829ac61ee007
1a47e4d0efdac6fbec990e3e168bfdfe615ff8953158773e8b1940d4d91eee18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:48:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
302 Found 0 B URL HTTP/2 redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect HTTP/1.1
Host: redirect.frontend.weborama.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: Weborama Collect Frontend
date: Sun, 04 Dec 2022 15:48:53 GMT
content-length: 0
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=3830119464
access-control-allow-origin: *
p3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM"
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: Tue, 03 Jul 2001 06:00:00 GMT
last-modified: Sun, 04 Dec 2022 15:48:53 GMT
set-cookie: AFFICHE_W=YDmhzNtiiaNg78; expires=Mon, 01 Jan 2024 15:48:53 GMT; domain=.weborama.fr; path=/; secure; SameSite=None
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
x01.aidata.io/0.gif?pid=9401454&id=1303420A64C18C6354036892027D3F2D
302 Found 0 B URL HTTP/2 x01.aidata.io/0.gif?pid=9401454&id=1303420A64C18C6354036892027D3F2D
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0.gif?pid=9401454&id=1303420A64C18C6354036892027D3F2D HTTP/1.1
Host: x01.aidata.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sun, 04 Dec 2022 15:48:53 GMT
content-length: 0
location: https://x01.aidata.io/0.gif?pid=9401454&id=1303420A64C18C6354036892027D3F2D&bounce=1
expires: Sun, 04 Dec 2022 15:48:52 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Sun, 04 Dec 2022 15:48:52 GMT
set-cookie: __upin=25MFHb1Lbr25BMqcZrQGzw;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
__upints=1670168933;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2
sm.rtb.mts.ru/p?ssp=sape&id=1303420A64C18C6354036892027D3F2D
301 Moved Permanently 0 B URL HTTP/1.1 sm.rtb.mts.ru/p?ssp=sape&id=1303420A64C18C6354036892027D3F2D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sape&id=1303420A64C18C6354036892027D3F2D HTTP/1.1
Host: sm.rtb.mts.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin
Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
Vary: Origin
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://sm.rtb.mts.ru/match/second?ssp=30&exu=1303420A64C18C6354036892027D3F2D
Set-Cookie: dspid=e84ed448-dc38-4886-9d34-259ccb6c8b9f; expires=Sat, 25 Nov 2023 15:48:53 GMT; domain=.mts.ru; path=/; secure; SameSite=None
ocsp.sectigo.com/
200 OK 472 B IP
Hash ccd0403a573158475fa8b9fa1bd3faa0
2fc47b151e9c32ce0e345a01886f8f842719d468
4ee259e0c86bc54e5c9c72cdf0c735f10a18942f1c5d558e876e01a9662d046f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 16:09:17 GMT
Expires: Fri, 09 Dec 2022 16:09:16 GMT
Etag: "2fc47b151e9c32ce0e345a01886f8f842719d468"
Cache-Control: max-age=432622,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7745b05b9e28b51e-OSL
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 93a3d81d1e5112a6911b75862d8b0b64
f78040e63948bd51cdc6366edeb5618bf1eed67b
4e8cfc2158ea93df4154826e2b0d0f6339af419f9b364f5cf049a241bebdc3c5
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 03 Dec 2022 21:58:43 GMT
Expires: Sun, 04 Dec 2022 21:58:43 GMT
ETag: "f78040e63948bd51cdc6366edeb5618bf1eed67b"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D
302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Mon, 04 Dec 2023 15:48:54 GMT; Path=/; Domain=.betweendigital.com
tuuid=c8827e51-d77d-5252-b9e9-0eacda65cfca; Max-Age=31536000; Expires=Mon, 04 Dec 2023 15:48:54 GMT; Path=/; Domain=.betweendigital.com
ut=Y4zBZgADqYAFvNT3HD8PPIW5pIFwFP6s8UxGig==; Max-Age=31536000; Expires=Mon, 04 Dec 2023 15:48:54 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
nr.bidderstack.com/sape/cm?user_id=1303420A64C18C6354036892027D3F2D
200 OK 44 B URL HTTP/1.1 nr.bidderstack.com/sape/cm?user_id=1303420A64C18C6354036892027D3F2D
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash f9d60352c70a2ba15616d1c9421f3844
e9abc8bea7721a4b6a50295850d13c515006a95c
82cb517a8f80c91dfcec543c6d140deb3baaf463ea9e77655475096eba7bc7d9
GET /sape/cm?user_id=1303420A64C18C6354036892027D3F2D HTTP/1.1
Host: nr.bidderstack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Type: image/gif
Content-Length: 44
Connection: keep-alive
Set-Cookie: uid=ff17f1c1-384c-43a2-860b-b55f81c4ec01; domain=.bidderstack.com; path=/; expires=Mon, 04-Dec-2023 15:48:53 GMT;
Access-Control-Allow-Credentials: true
ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=1303420A64C18C635703729202708156
200 OK 42 B URL HTTP/1.1 ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=1303420A64C18C635703729202708156
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cgi-bin/sync.cgi?ssp_id=43&external_id=1303420A64C18C635703729202708156 HTTP/1.1
Host: ssp.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Mon, 04 Dec 2023 15:48:54 GMT; Path=/; Domain=.betweendigital.com
tuuid=bc4874dc-3da4-5252-99bd-3f7dfa31fe1b; Max-Age=31536000; Expires=Mon, 04 Dec 2023 15:48:54 GMT; Path=/; Domain=.betweendigital.com
ut=Y4zBZgACA6AfC51PLYGKJFsF4Jy6pu-KSE-MUw==; Max-Age=31536000; Expires=Mon, 04 Dec 2023 15:48:54 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
www.acint.net/match?dp=104&euid=HnT_aJfZZlD1
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=104&euid=HnT_aJfZZlD1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=104&euid=HnT_aJfZZlD1 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2OMwWSScgNXVoFwAjJhdcsWWvI7ivEU5FeBjLSBOQ9U; cSyncDp7v2=1670168932; cSyncDp14v3=1670168932; cSyncDp17=1670168932; cSyncDp32=1670168932; cSyncDp45v3=1670168932; cSyncDp53=1670168932; cSyncDp54v2=1670168932; cSyncDp62=1670168932; cSyncDp67v2=1670168932; cSyncDp68=1670168932; cSyncDp71=1670168932; cSyncDp77=1670168932; cSyncDp84=1670168932; cSyncDp85=1670168932; cSyncDp95v3=1670168932; cSyncDp101=1670168932; cSyncDp104v2=1670168932; cSyncDp107=1670168932; cSyncDp110=1670168932; cSyncDp111v2=1670168932; cSyncDp112v2=1670168932; cSyncDp125v2=1670168932; cSyncDp126=1670168932; cSyncDp127=1670168932; cSyncDp129=1670168932; cSyncDp136v2=1670168932; cSyncDp138=1670168932; cSyncDp146=1670168932; cSyncDp148=1670168932; cSyncDp149v2=1670168932; cSyncDp151=1670168932; cSyncDp178=1670168932; cSyncDp179=1670168932; cSyncDp186=1670168932; cSyncDp221=1670168932
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 04 Dec 2022 15:48:53 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
x01.aidata.io/0.gif?pid=9401454&id=1303420A64C18C6354036892027D3F2D&bounce=1
204 No Content 0 B URL HTTP/2 x01.aidata.io/0.gif?pid=9401454&id=1303420A64C18C6354036892027D3F2D&bounce=1
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0.gif?pid=9401454&id=1303420A64C18C6354036892027D3F2D&bounce=1 HTTP/1.1
Host: x01.aidata.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 04 Dec 2022 15:48:53 GMT
expires: Sun, 04 Dec 2022 15:48:52 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Sun, 04 Dec 2022 15:48:52 GMT
set-cookie: __upin=iLTsSkxMg4fwZjGxXUC3hg;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
__upints=1670168933;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2
sm.rtb.mts.ru/match/second?ssp=30&exu=1303420A64C18C6354036892027D3F2D
200 OK 0 B URL HTTP/1.1 sm.rtb.mts.ru/match/second?ssp=30&exu=1303420A64C18C6354036892027D3F2D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/second?ssp=30&exu=1303420A64C18C6354036892027D3F2D HTTP/1.1
Host: sm.rtb.mts.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin
Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
Vary: Origin
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
px.adhigh.net/p/cm/sape?u=1303420A64C18C6354036892027D3F2D&bounced=1
200 OK 49 B URL HTTP/2 px.adhigh.net/p/cm/sape?u=1303420A64C18C6354036892027D3F2D&bounced=1
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
File type GIF image data, version 89a, 1 x 1\012- data
Hash 889bc1fffc025af4685839fb516a0b8b
7f105137a4eafe93213ecd8cc34dd907c340467c
d0409a1b73dab4e29dc40f92fb431fa9133baa23b4a1ffae4897f39068110e32
GET /p/cm/sape?u=1303420A64C18C6354036892027D3F2D&bounced=1 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:48:53 GMT
content-type: image/gif
content-length: 49
x-backend-id: f9-ru
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
X-Firefox-Spdy: h2
tag.digitaltarget.ru/processor.js?i=933439165541827
200 OK 16 kB URL HTTP/1.1 tag.digitaltarget.ru/processor.js?i=933439165541827
IP
File type ASCII text, with very long lines (15897), with no line terminators
Hash c9571a7ce0a22f154c74bdc8e35523e0
101feba577e71fc076ea5bf3f4af08b5d3fe988d
51cf59da6b7e03337540ee3ab9f8e135ff2ead958475c1bacc8683df57823fb0
GET /processor.js?i=933439165541827 HTTP/1.1
Host: tag.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 15:48:53 GMT
Content-Type: application/javascript
Content-Length: 15897
Last-Modified: Sun, 04 Dec 2022 15:34:47 GMT
Connection: keep-alive
ETag: "638cbe17-3e19"
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff2e89363d3f8febe5238003bd6a0af2
0b6991c014021afd6917efbd2f7e485e3a8e6f98
6fa4c9e9f48a77330923c1bf1472c55277188c17547f14c59eea7f54ac383bd4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6FA4C9E9F48A77330923C1BF1472C55277188C17547F14C59EEA7F54AC383BD4"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2564
Expires: Sun, 04 Dec 2022 16:31:38 GMT
Date: Sun, 04 Dec 2022 15:48:54 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ff2e89363d3f8febe5238003bd6a0af2
0b6991c014021afd6917efbd2f7e485e3a8e6f98
6fa4c9e9f48a77330923c1bf1472c55277188c17547f14c59eea7f54ac383bd4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6FA4C9E9F48A77330923C1BF1472C55277188C17547F14C59EEA7F54AC383BD4"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2564
Expires: Sun, 04 Dec 2022 16:31:38 GMT
Date: Sun, 04 Dec 2022 15:48:54 GMT
Connection: keep-alive
dmg.digitaltarget.ru/1/1093/i/i?i=159590108356641.941920797196520&a=77&e=1303420A64C18C6354036892027D3F2D&pref=http%3A%2F%2Fsoftreview.com.ua%2F&c=ss:77.up:1303420A64C18C6354036892027D3F2D.sync:up.xdua:durDm9c3_kt4Bs_nQ4DNKx4N.xps:xpsODe24bk4GMBAFVmTFVtqO6.dn:acint__net.adcm:hit.tg:adcmjs_noorient
307 Temporary Redirect 0 B URL HTTP/1.1 dmg.digitaltarget.ru/1/1093/i/i?i=159590108356641.941920797196520&a=77&e=1303420A64C18C6354036892027D3F2D&pref=http%3A%2F%2Fsoftreview.com.ua%2F&c=ss:77.up:1303420A64C18C6354036892027D3F2D.sync:up.xdua:durDm9c3_kt4Bs_nQ4DNKx4N.xps:xpsODe24bk4GMBAFVmTFVtqO6.dn:acint__net.adcm:hit.tg:adcmjs_noorient
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/1093/i/i?i=159590108356641.941920797196520&a=77&e=1303420A64C18C6354036892027D3F2D&pref=http%3A%2F%2Fsoftreview.com.ua%2F&c=ss:77.up:1303420A64C18C6354036892027D3F2D.sync:up.xdua:durDm9c3_kt4Bs_nQ4DNKx4N.xps:xpsODe24bk4GMBAFVmTFVtqO6.dn:acint__net.adcm:hit.tg:adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Sun, 04 Dec 2022 15:48:54 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1670168934334&i=159590108356641.941920797196520&a=77&e=1303420A64C18C6354036892027D3F2D&pref=http%3A%2F%2Fsoftreview.com.ua%2F&c=ss:77.up:1303420A64C18C6354036892027D3F2D.sync:up.xdua:durDm9c3_kt4Bs_nQ4DNKx4N.xps:xpsODe24bk4GMBAFVmTFVtqO6.dn:acint__net.adcm:hit.tg:adcmjs_noorient
Set-Cookie: viuserid=R4ZZT31c42AxNkx7RM1o; Max-Age=93312000; Expires=Tue, 18 Nov 2025 15:48:54 GMT; SameSite=None; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly
Request-Time: 0
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/1/1093/i/i?i=159590108356641.850611795233671&a=77&e=1303420A64C18C6354036892027D3F2D&pref=http%3A%2F%2Fsoftreview.com.ua%2F&c=ss:77.up:1303420A64C18C6354036892027D3F2D.sync:up.xdua:durDm9c3_kt4Bs_nQ4DNKx4N.xps:xpsODe24bk4GMBAFVmTFVtqO6.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
307 Temporary Redirect 0 B URL HTTP/1.1 dmg.digitaltarget.ru/1/1093/i/i?i=159590108356641.850611795233671&a=77&e=1303420A64C18C6354036892027D3F2D&pref=http%3A%2F%2Fsoftreview.com.ua%2F&c=ss:77.up:1303420A64C18C6354036892027D3F2D.sync:up.xdua:durDm9c3_kt4Bs_nQ4DNKx4N.xps:xpsODe24bk4GMBAFVmTFVtqO6.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/1093/i/i?i=159590108356641.850611795233671&a=77&e=1303420A64C18C6354036892027D3F2D&pref=http%3A%2F%2Fsoftreview.com.ua%2F&c=ss:77.up:1303420A64C18C6354036892027D3F2D.sync:up.xdua:durDm9c3_kt4Bs_nQ4DNKx4N.xps:xpsODe24bk4GMBAFVmTFVtqO6.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Sun, 04 Dec 2022 15:48:54 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1670168934345&i=159590108356641.850611795233671&a=77&e=1303420A64C18C6354036892027D3F2D&pref=http%3A%2F%2Fsoftreview.com.ua%2F&c=ss:77.up:1303420A64C18C6354036892027D3F2D.sync:up.xdua:durDm9c3_kt4Bs_nQ4DNKx4N.xps:xpsODe24bk4GMBAFVmTFVtqO6.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
Set-Cookie: viuserid=BtvcE41ccbhxZsd7yuXG; Max-Age=93312000; Expires=Tue, 18 Nov 2025 15:48:54 GMT; SameSite=None; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly
Request-Time: 0
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1670168934345&i=159590108356641.850611795233671&a=77&e=1303420A64C18C6354036892027D3F2D&pref=http%3A%2F%2Fsoftreview.com.ua%2F&c=ss:77.up:1303420A64C18C6354036892027D3F2D.sync:up.xdua:durDm9c3_kt4Bs_nQ4DNKx4N.xps:xpsODe24bk4GMBAFVmTFVtqO6.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
200 OK 64 B URL HTTP/1.1 dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1670168934345&i=159590108356641.850611795233671&a=77&e=1303420A64C18C6354036892027D3F2D&pref=http%3A%2F%2Fsoftreview.com.ua%2F&c=ss:77.up:1303420A64C18C6354036892027D3F2D.sync:up.xdua:durDm9c3_kt4Bs_nQ4DNKx4N.xps:xpsODe24bk4GMBAFVmTFVtqO6.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ffd585dfb1ac6320633a0be46d579437
5a6033d23bc9cd5d1de9ee61de69a44428086dcb
df18d81deb0cc1c48ae87e6481bb4ee375b40cce0fec3d226e002704d49f6cc8
GET /awg/custom/1093/i/i?call_source=awg&ts=1670168934345&i=159590108356641.850611795233671&a=77&e=1303420A64C18C6354036892027D3F2D&pref=http%3A%2F%2Fsoftreview.com.ua%2F&c=ss:77.up:1303420A64C18C6354036892027D3F2D.sync:up.xdua:durDm9c3_kt4Bs_nQ4DNKx4N.xps:xpsODe24bk4GMBAFVmTFVtqO6.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 15:48:54 GMT
Content-Type: image/gif
Content-Length: 64
Connection: keep-alive
Vary: Accept-Encoding
Request-Time: 20
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1670168934334&i=159590108356641.941920797196520&a=77&e=1303420A64C18C6354036892027D3F2D&pref=http%3A%2F%2Fsoftreview.com.ua%2F&c=ss:77.up:1303420A64C18C6354036892027D3F2D.sync:up.xdua:durDm9c3_kt4Bs_nQ4DNKx4N.xps:xpsODe24bk4GMBAFVmTFVtqO6.dn:acint__net.adcm:hit.tg:adcmjs_noorient
200 OK 64 B URL HTTP/1.1 dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1670168934334&i=159590108356641.941920797196520&a=77&e=1303420A64C18C6354036892027D3F2D&pref=http%3A%2F%2Fsoftreview.com.ua%2F&c=ss:77.up:1303420A64C18C6354036892027D3F2D.sync:up.xdua:durDm9c3_kt4Bs_nQ4DNKx4N.xps:xpsODe24bk4GMBAFVmTFVtqO6.dn:acint__net.adcm:hit.tg:adcmjs_noorient
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ffd585dfb1ac6320633a0be46d579437
5a6033d23bc9cd5d1de9ee61de69a44428086dcb
df18d81deb0cc1c48ae87e6481bb4ee375b40cce0fec3d226e002704d49f6cc8
GET /awg/custom/1093/i/i?call_source=awg&ts=1670168934334&i=159590108356641.941920797196520&a=77&e=1303420A64C18C6354036892027D3F2D&pref=http%3A%2F%2Fsoftreview.com.ua%2F&c=ss:77.up:1303420A64C18C6354036892027D3F2D.sync:up.xdua:durDm9c3_kt4Bs_nQ4DNKx4N.xps:xpsODe24bk4GMBAFVmTFVtqO6.dn:acint__net.adcm:hit.tg:adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Dec 2022 15:48:54 GMT
Content-Type: image/gif
Content-Length: 64
Connection: keep-alive
Vary: Accept-Encoding
Request-Time: 20
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
www.acint.net/ping/?v=0.4.0&uid=36f6dcd7-0564-4542-8290-2b84cfa4e3b1&dp=10&tz=%2B00%3A00&nc=90971433&dT=2022-12-04T15%3A48%3A52.934
302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/ping/?v=0.4.0&uid=36f6dcd7-0564-4542-8290-2b84cfa4e3b1&dp=10&tz=%2B00%3A00&nc=90971433&dT=2022-12-04T15%3A48%3A52.934
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /ping/?v=0.4.0&uid=36f6dcd7-0564-4542-8290-2b84cfa4e3b1&dp=10&tz=%2B00%3A00&nc=90971433&dT=2022-12-04T15%3A48%3A52.934 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Sun, 04 Dec 2022 15:48:55 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/ping/?v=0.4.0&uid=36f6dcd7-0564-4542-8290-2b84cfa4e3b1&dp=10&tz=%2B00%3A00&nc=90971433&dT=2022-12-04T15%3A48%3A52.934
www.acint.net/ping/?v=0.4.0&uid=36f6dcd7-0564-4542-8290-2b84cfa4e3b1&dp=10&tz=%2B00%3A00&nc=90971433&dT=2022-12-04T15%3A48%3A52.934
200 OK 43 B URL HTTP/2 www.acint.net/ping/?v=0.4.0&uid=36f6dcd7-0564-4542-8290-2b84cfa4e3b1&dp=10&tz=%2B00%3A00&nc=90971433&dT=2022-12-04T15%3A48%3A52.934
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /ping/?v=0.4.0&uid=36f6dcd7-0564-4542-8290-2b84cfa4e3b1&dp=10&tz=%2B00%3A00&nc=90971433&dT=2022-12-04T15%3A48%3A52.934 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://softreview.com.ua/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2OMwWSScgNXVoFwAjJhdcsWWvI7ivEU5FeBjLSBOQ9U; cSyncDp7v2=1670168932; cSyncDp14v3=1670168932; cSyncDp17=1670168932; cSyncDp32=1670168932; cSyncDp45v3=1670168932; cSyncDp53=1670168932; cSyncDp54v2=1670168932; cSyncDp62=1670168932; cSyncDp67v2=1670168932; cSyncDp68=1670168932; cSyncDp71=1670168932; cSyncDp77=1670168932; cSyncDp84=1670168932; cSyncDp85=1670168932; cSyncDp95v3=1670168932; cSyncDp101=1670168932; cSyncDp104v2=1670168932; cSyncDp107=1670168932; cSyncDp110=1670168932; cSyncDp111v2=1670168932; cSyncDp112v2=1670168932; cSyncDp125v2=1670168932; cSyncDp126=1670168932; cSyncDp127=1670168932; cSyncDp129=1670168932; cSyncDp136v2=1670168932; cSyncDp138=1670168932; cSyncDp146=1670168932; cSyncDp148=1670168932; cSyncDp149v2=1670168932; cSyncDp151=1670168932; cSyncDp178=1670168932; cSyncDp179=1670168932; cSyncDp186=1670168932; cSyncDp221=1670168932
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 04 Dec 2022 15:48:55 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mc.yandex.ru/watch/23414332?wmode=7&page-url=http%3A%2F%2Fsoftreview.com.ua%2Ftag%2Fnotepad%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aslhejhys9ytpnba8eugac%3Afp%3A1293%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A881461929329%3Ahid%3A18834975%3Az%3A0%3Ai%3A20221204154850%3Aet%3A1670168931%3Ac%3A1%3Arn%3A594191159%3Arqn%3A1%3Au%3A1670168931297896411%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A10%2C41%2C71%2C90%2C-6%2C0%2C%2C1103%2C37%2C%2C%2C%2C1397%3Aco%3A0%3Ans%3A1670168928401%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670168931%3At%3A%D0%9D%D0%B0%20%D1%81%D0%B2%D0%BE%D0%B5%D0%B9%20%D0%BD%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%D1%83%D1%85%D0%BD%D0%B8%20%D0%BF%D1%80%D0%B8%D0%B3%D0%BE%D1%82%D0%BE%D0%B2%D1%8C%D1%82%D0%B5%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%BB%D1%8E%D0%B1%D0%B8%D0%BC%D1%8B%D0%B5%20%D0%B1%D0%BB%D1%8E%D0%B4%D0%B0&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/23414332?wmode=7&page-url=http%3A%2F%2Fsoftreview.com.ua%2Ftag%2Fnotepad%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aslhejhys9ytpnba8eugac%3Afp%3A1293%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A881461929329%3Ahid%3A18834975%3Az%3A0%3Ai%3A20221204154850%3Aet%3A1670168931%3Ac%3A1%3Arn%3A594191159%3Arqn%3A1%3Au%3A1670168931297896411%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A10%2C41%2C71%2C90%2C-6%2C0%2C%2C1103%2C37%2C%2C%2C%2C1397%3Aco%3A0%3Ans%3A1670168928401%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670168931%3At%3A%D0%9D%D0%B0%20%D1%81%D0%B2%D0%BE%D0%B5%D0%B9%20%D0%BD%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%D1%83%D1%85%D0%BD%D0%B8%20%D0%BF%D1%80%D0%B8%D0%B3%D0%BE%D1%82%D0%BE%D0%B2%D1%8C%D1%82%D0%B5%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%BB%D1%8E%D0%B1%D0%B8%D0%BC%D1%8B%D0%B5%20%D0%B1%D0%BB%D1%8E%D0%B4%D0%B0&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
GET /watch/23414332?wmode=7&page-url=http%3A%2F%2Fsoftreview.com.ua%2Ftag%2Fnotepad%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aslhejhys9ytpnba8eugac%3Afp%3A1293%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A881461929329%3Ahid%3A18834975%3Az%3A0%3Ai%3A20221204154850%3Aet%3A1670168931%3Ac%3A1%3Arn%3A594191159%3Arqn%3A1%3Au%3A1670168931297896411%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A10%2C41%2C71%2C90%2C-6%2C0%2C%2C1103%2C37%2C%2C%2C%2C1397%3Aco%3A0%3Ans%3A1670168928401%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670168931%3At%3A%D0%9D%D0%B0%20%D1%81%D0%B2%D0%BE%D0%B5%D0%B9%20%D0%BD%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%D1%83%D1%85%D0%BD%D0%B8%20%D0%BF%D1%80%D0%B8%D0%B3%D0%BE%D1%82%D0%BE%D0%B2%D1%8C%D1%82%D0%B5%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%BB%D1%8E%D0%B1%D0%B8%D0%BC%D1%8B%D0%B5%20%D0%B1%D0%BB%D1%8E%D0%B4%D0%B0&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://softreview.com.ua
Connection: keep-alive
Referer: http://softreview.com.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/23414332/1?wmode=7&page-url=http%3A%2F%2Fsoftreview.com.ua%2Ftag%2Fnotepad%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Aslhejhys9ytpnba8eugac%3Afp%3A1293%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A881461929329%3Ahid%3A18834975%3Az%3A0%3Ai%3A20221204154850%3Aet%3A1670168931%3Ac%3A1%3Arn%3A594191159%3Arqn%3A1%3Au%3A1670168931297896411%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A10%2C41%2C71%2C90%2C-6%2C0%2C%2C1103%2C37%2C%2C%2C%2C1397%3Aco%3A0%3Ans%3A1670168928401%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670168931%3At%3A%D0%9D%D0%B0%20%D1%81%D0%B2%D0%BE%D0%B5%D0%B9%20%D0%BD%D0%BE%D0%B2%D0%BE%D0%B9%20%D0%BA%D1%83%D1%85%D0%BD%D0%B8%20%D0%BF%D1%80%D0%B8%D0%B3%D0%BE%D1%82%D0%BE%D0%B2%D1%8C%D1%82%D0%B5%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%BB%D1%8E%D0%B1%D0%B8%D0%BC%D1%8B%D0%B5%20%D0%B1%D0%BB%D1%8E%D0%B4%D0%B0&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Sun, 04 Dec 2022 15:48:53 GMT
access-control-allow-origin: http://softreview.com.ua
set-cookie: yabs-sid=2170688001670168933; Path=/; SameSite=None; Secure
i=pc6EGvxfwKK0v5ulr9shAeyjfWFTLeeS9sdPEDeAtVuFWV5Olq/qPn6kc3xLBylmm3IdkbbrfCIKxDAh8SeW3uajs/s=; Expires=Wed, 01-Dec-2032 15:48:52 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=5212736351670168933; Expires=Mon, 04-Dec-2023 15:48:53 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=5212736351670168933; Expires=Mon, 04-Dec-2023 15:48:53 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1701704933.yc.1670168933#1701704933.yrts.1670168933#1701704933.yrtsi.1670168933; Expires=Mon, 04-Dec-2023 15:48:53 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 04-Dec-2022 15:48:53 GMT
last-modified: Sun, 04-Dec-2022 15:48:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
softreview.com.ua/skin/frontend/default/default/css/magestore/bannerslider/banner5.css
200 OK 0 B URL HTTP/1.1 softreview.com.ua/skin/frontend/default/default/css/magestore/bannerslider/banner5.css
IP
ASN #24940 Hetzner Online GmbH
GET /skin/frontend/default/default/css/magestore/bannerslider/banner5.css HTTP/1.1
Host: softreview.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://softreview.com.ua/tag/notepad/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Sun, 04 Dec 2022 15:48:51 GMT
Content-Type: text/css
Content-Length: 232
Last-Modified: Fri, 16 Mar 2018 11:14:43 GMT
Connection: keep-alive
ETag: "5aaba723-e8"
Accept-Ranges: bytes
an.yandex.ru/mapuid/sapeis/1303420A64C18C6354036892027D3F2D
302 Found 0 B URL HTTP/2 an.yandex.ru/mapuid/sapeis/1303420A64C18C6354036892027D3F2D
IP
GET /mapuid/sapeis/1303420A64C18C6354036892027D3F2D HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
timing-allow-origin: *
location: https://an.yandex.ru/mapuid/sapeis/1303420A64C18C6354036892027D3F2D?redir-setuniq=1
date: Sun, 04 Dec 2022 15:48:53 GMT
set-cookie: yandexuid=8502814031670168933; domain=.yandex.ru; path=/; expires=Wed, 01-Dec-2032 15:48:53 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 04 Dec 2022 15:48:53 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Sun, 04 Dec 2022 15:48:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
an.yandex.ru/mapuid/sapeis/1303420A64C18C6354036892027D3F2D?redir-setuniq=1
200 OK 0 B URL HTTP/2 an.yandex.ru/mapuid/sapeis/1303420A64C18C6354036892027D3F2D?redir-setuniq=1
IP
GET /mapuid/sapeis/1303420A64C18C6354036892027D3F2D?redir-setuniq=1 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Sun, 04 Dec 2022 15:48:53 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 04 Dec 2022 15:48:53 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Sun, 04 Dec 2022 15:48:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif; charset=utf-8
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
188.40.131.137
93.184.220.29
87.250.250.90
34.223.160.237
104.21.59.66
23.36.77.32
62.149.0.249
37.18.103.22
95.216.101.186
188.42.34.65