ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html
301 Moved Permanently 355 B URL HTTP/1.1 ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 61c03986bc1bc2ca15b6ff58d496ef9d
b0e3cc850d81da99327a1c48fc2b163818f28e8c
8f377c2734b5ec3849304fac11ba8146fd3f29b5e89997b87a1f59e4a3c18abc
Analyzer Verdict Alert fortinet Malware
GET /retsepty/shashlychki-iz-pomidorov-i-syra.html HTTP/1.1
Host: ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 24 Nov 2022 02:50:16 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mDsYXDeoWsM05O9aIGLTRkeuvd%2Fylo%2BqG2hbZZUVgYz9vAo6sj8cfR2JRZSMi40oihF1whrjTEYwku2B1bOLvmKSkWmCPnVYDK0kgUscZqlfhQpDTHRUSMIxbmehf5Rc"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76eed60bdc92fac0-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1456357aecbd23f21ad98da57e0127eb
7074815b39fa8da9013883971d665e4c1b0797ea
f3eba265ee64870b2f822f1511b36c747d763c382557789cdad8be1d3b52d1f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3EBA265EE64870B2F822F1511B36C747D763C382557789CDAD8BE1D3B52D1F5"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3695
Expires: Thu, 24 Nov 2022 03:51:51 GMT
Date: Thu, 24 Nov 2022 02:50:16 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 770d09773b5f304acf141fd66a4862b4
5ddc46ab75de26c858a9a6f6d1beaaec9bb181f5
c7bcc6928fa1c0bb225ce8a2f6badd6cb1bd6ea002fb808ed34e8dafbd7b3b26
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4504
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 02:50:16 GMT
Last-Modified: Thu, 24 Nov 2022 01:35:12 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8c63b226725ca6e92e3ef586ac19e603
d21ae42a1927501e5293ff3564f52b49f6b0decc
141ac47acc3800e5d35a82012fa4b044277abad3a95dc24415f66fb72c972ae6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3577
Expires: Thu, 24 Nov 2022 03:49:53 GMT
Date: Thu, 24 Nov 2022 02:50:16 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 24 Nov 2022 02:17:13 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1983
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: NsNN5eHFIXLfUPbVHJk1qI+n9VIEZXkk/BJDAJF+rxqg7VoKQbtgH0B6QFhRkmRDgGid/XOAksQ=
x-amz-request-id: XX5AT7DB7Z7DSAVZ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 24 Nov 2022 02:40:14 GMT
age: 602
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 02:50:16 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 24 Nov 2022 02:11:11 GMT
cache-control: public,max-age=3600
age: 2346
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html
200 OK 7.3 kB URL HTTP/1.1 www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2239), with CRLF, CR, LF line terminators
Hash a46cf61fb6525bafcff7da422c40cf61
9f9013a8c1ee4ca65a207086f692e15a19f27e3a
5662536f757f8fc24d156d4f325584ec9645b692293c1f8eb3b816b601316ab3
Analyzer Verdict Alert fortinet Malware
GET /retsepty/shashlychki-iz-pomidorov-i-syra.html HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.6.40
Set-Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0; path=/
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Status: 200 OK
Expires: Mon, 1 Jan 2001 00:00:00 GMT
Last-Modified: Thu, 24 Nov 2022 02:50:17 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PlWbD1cj7eL0eJuQtce9p425dSej%2Ff%2FB41SexR6FC3PqL0HcZUvR3HBQTidcANFV3JcpjV1x1%2BycdIv5rdGjPV9b1ET3WCPnDtYDhuKeSkdQNBlQDGJFE4q9cMMRK1TqyWu8fQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76eed60d8aa6fac4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 471 B IP
Hash eb52164d651f5f45416e873aec29eb04
405b29bb7e7cd4367cf82988f8603e53db65f139
ed885e05db822ff30fe951e10b6d4f21e574d053939afca792992a1549a15301
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6114
Cache-Control: max-age=115110
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 02:50:17 GMT
Etag: "637de2ad-1d7"
Expires: Fri, 25 Nov 2022 10:48:47 GMT
Last-Modified: Wed, 23 Nov 2022 09:06:53 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
vk.com/js/api/openapi.js?75
301 Moved Permanently 164 B URL HTTP/1.1 vk.com/js/api/openapi.js?75
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 6d359f551ba4cb27d59e94a6cddaec09
d230318bd921ad8167c2eb9dfdc7b1d7d2c7373f
9ecd8531025e89f5e1ca23d81203a9feddbd5b4b75ca79c9868cb53762293bc8
GET /js/api/openapi.js?75 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
HTTP/1.1 301 Moved Permanently
Server: kittenx
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: text/html
Content-Length: 164
Connection: keep-alive
Location: https://vk.com/js/api/openapi.js?75
X-Frontend: front225207
Access-Control-Expose-Headers: X-Frontend
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 065495ec7a963a205abd9c8dbc75cb5d
ea416d0df4f6706150bda5da2077174f5cdd986b
1b2a2afee887651b23a849f14ace89b330329f6bf61c331545a3f6d12037aee5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 02:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.ogorodniky.ru/cache/template/css-3930cf64d3158e41b31e22fb832e2994.css
200 OK 9.6 kB URL HTTP/1.1 www.ogorodniky.ru/cache/template/css-3930cf64d3158e41b31e22fb832e2994.css
IP
File type ASCII text, with very long lines (1064)
Hash 9697cac1aeb6ce94e678cfad7c574f4e
5717b2aff473bdf2a7bccd901517e79afa726aa8
b07ebd2c57de44f5ebeee70d49f9a89dfc1c0d658dea47fb311a5949a6e233de
GET /cache/template/css-3930cf64d3158e41b31e22fb832e2994.css HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html
Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Nov 2022 02:42:12 GMT
Vary: Accept-Encoding
ETag: W/"637eda04-cebf"
Expires: Thu, 01 Dec 2022 02:50:17 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=83OYnYq1I1v%2BL2o5%2FuUEHGX1NND5mcljH4tFdrxG4d5cLN0YSpLvbVTEY4PUanQDhsT7kL2ngvgUmp0id276NNNYci1tOhNHPwp41bWGFLvQ7HEaarwCc4BaT%2BQFYZ2B4i1%2BKw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76eed611bc03fac4-OSL
alt-svc: h2=":443"; ma=60
mc.yandex.ru/metrika/watch.js
302 Moved temporarily 0 B URL HTTP/1.1 mc.yandex.ru/metrika/watch.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
HTTP/1.1 302 Moved temporarily
Content-Length: 0
Location: https://mc.yandex.ru/metrika/watch.js
www.ogorodniky.ru/media/system/js/caption.js
200 OK 924 B URL HTTP/1.1 www.ogorodniky.ru/media/system/js/caption.js
IP
Hash 7c3e6a59b48e840c11578cb9c1cfc387
d4da18eefde2a106cee1d4971d68d1672fcddce2
88084ba6940137fe92512079dd78d87c092a0b79315fbf6e960e132c8fae2e32
GET /media/system/js/caption.js HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html
Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 04 Aug 2021 06:48:26 GMT
Vary: Accept-Encoding
ETag: W/"610a383a-7c6"
Expires: Thu, 01 Dec 2022 02:50:17 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BRaJ30nr%2FQYlYV6Er5YtEsjtsqImrHJnKdWprIDM8MoxOu3DjTpqYTcasmp%2BnrH%2FUw%2Ffa4sT3nFE8eo6QAS%2BilEuYqMzTU7XyzJHhSJew5Y1KoFu2eS5OzTSc30%2B1QeC%2BIKiEg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76eed611bbe3b4eb-OSL
alt-svc: h2=":443"; ma=60
www.ogorodniky.ru/cache/template/js-1f5045f13a6d8298a9019a793cb1774a.js
200 OK 3.4 kB URL HTTP/1.1 www.ogorodniky.ru/cache/template/js-1f5045f13a6d8298a9019a793cb1774a.js
IP
File type C source, ASCII text, with very long lines (1858)
Hash 160bf3ca26fef687d95853b11ffbeb98
33d56622d9a99db3fe14be1637d9b278abfd1254
fd5021ee00a060c19f7fdcd093b68e2d99c8b6bac569db8fbdd8ed915c42ba43
GET /cache/template/js-1f5045f13a6d8298a9019a793cb1774a.js HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html
Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Nov 2022 02:42:12 GMT
Vary: Accept-Encoding
ETag: W/"637eda04-3309"
Expires: Thu, 01 Dec 2022 02:50:17 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qLl1i38iIZDWODK70ZYFiPigVnAwg5Lm1xfXksZ7ik31mBMIxuL8OaP8V%2FCoS7SLC9bAmVuJMOkGWdXg4RyepUXaaBYHBJKiNsQrzg9fvhsgz6simrC0otq0p%2F5zXo4EXPYb3A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76eed611cc92b511-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b2b92f1110c82662bfa1addc9bab3130
d6f86300cbfd5b21b3d505c08ffd6edef34b654a
6914944644172d563d0d7c2a5084690fce86ead13949ff29f42842d4bb6e0734
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 02:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.ogorodniky.ru/media/system/js/mootools.js
200 OK 20 kB URL HTTP/1.1 www.ogorodniky.ru/media/system/js/mootools.js
IP
File type ASCII text, with very long lines (3691)
Hash ccd642bfb2ea78347c6a01cc4e892313
d7477c985e2d96535d43af710841f38b349cd274
1c2d8106e10acc662bb7549a2ad0fe2f65f06917946675c7a50f5587c7777e3f
GET /media/system/js/mootools.js HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html
Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 04 Aug 2021 06:48:26 GMT
Vary: Accept-Encoding
ETag: W/"610a383a-122dd"
Expires: Thu, 01 Dec 2022 02:50:17 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HtS8hqRvMFI8yVLPHP4eQB%2FD7gcsUVYs3mIE6RkBYjUQ7aSlQpesVZpVuD0sjXvuS5yldufhNYMOIvK3VEjMjrmwb7AXrNxCdE1KQX2Zdo0rZi%2BE3WGdbzMNY8f9UuUHhKVjJw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76eed611b8ddb50c-OSL
alt-svc: h2=":443"; ma=60
pagead2.googlesyndication.com/pagead/show_ads.js
200 OK 34 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/show_ads.js
IP
File type ASCII text, with very long lines (3577)
Hash 4f87b04aa3f4faece198a499740768b3
255229af867ad566abb9d2f9a6d2897c7e49bef4
a790fe7109e4fd7f057aa3303c7325a25afcb8bc1df7df442bde1ecfe4a52a73
GET /pagead/show_ads.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Thu, 24 Nov 2022 02:50:17 GMT
expires: Thu, 24 Nov 2022 02:50:17 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 8962313245118592339
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 34258
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Yanone+Kaffeesatz:regular,light|Lobster
200 OK 1.1 kB URL HTTP/2 fonts.googleapis.com/css?family=Yanone+Kaffeesatz:regular,light|Lobster
IP
Hash 7a472fea4b32327f0408cbb83b9c110a
5184d31a280a8e866a2d1883ea6284550cb565cd
349145e44b7465e2db3bad9cb1c83d3cf57a860bdc5fa8728c9666e872a600fd
GET /css?family=Yanone+Kaffeesatz:regular,light|Lobster HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 24 Nov 2022 02:50:17 GMT
date: Thu, 24 Nov 2022 02:50:17 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn-rtb.sape.ru/rtb-b/js/074/2/24074.js
200 OK 38 kB URL HTTP/1.1 cdn-rtb.sape.ru/rtb-b/js/074/2/24074.js
IP
File type ASCII text, with very long lines (5871)
Hash d1482187f9b6131db6f38990e90d1746
0c278e0c4967db4fea4e2605eae86c494df8411b
fd6c88a3045b3cf8829cfe740f21a038e3942e24a47753953ad0e085014f7fc2
GET /rtb-b/js/074/2/24074.js HTTP/1.1
Host: cdn-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: W/"10fe1bd67570cf01b6fc13bd0ebaa9e0"
Last-Modified: Sun, 20 Nov 2022 02:09:00 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 172A63EC8F6973D5
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Encoding: gzip
Expires: Thu, 24 Nov 2022 03:50:17 GMT
Cache-Control: max-age=3600
X-Cache-Status: REVALIDATED
giosany.com/c7f/8e582471655af425fc.js
200 OK 6.9 kB URL HTTP/1.1 giosany.com/c7f/8e582471655af425fc.js
IP
ASN #49981 WorldStream B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (16445)
Hash 85bb95bab6f45efd4866a2f2388dcf1a
92e3ca9410b8118c0a4697d58e25ae946dab83cc
6534f0da75d6543042d8bf2784f2902e3ce5c593d32af582777f4ec05abf899b
Analyzer Verdict Alert fortinet Malware
GET /c7f/8e582471655af425fc.js HTTP/1.1
Host: giosany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/7.2.34
Content-Encoding: gzip
www.ogorodniky.ru/images/img/88x31_11.gif
200 OK 2.2 kB URL HTTP/1.1 www.ogorodniky.ru/images/img/88x31_11.gif
IP
File type GIF image data, version 89a, 88 x 31\012- data
Hash 8ff5193a6d14d941b63b8d03beb11b70
1175f6b1167e8cea7fab3173128ecb2f7c33f247
bb1daf9a3013ba34c0e0aa228bb7f34482439c714b046ef5ab48ce370585318a
GET /images/img/88x31_11.gif HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html
Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: image/gif
Content-Length: 2238
Connection: keep-alive
Last-Modified: Wed, 04 Aug 2021 06:48:03 GMT
ETag: "610a3823-8be"
Expires: Sat, 24 Dec 2022 02:50:17 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zxn4exKWZfPDuxomcXJTE%2F4WYhwcqxHWVhsdsS%2Fqc0F3%2ByIYJMPfLFvdsVn8o0l6FxIT%2FMx6sjQaR14Cjl5edmT%2BPjhsG0vu%2F%2BEL19xtJKmN7Buq6PYDIE38EIauPoAlVSHW0A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed6128c46b4eb-OSL
alt-svc: h2=":443"; ma=60
www.ogorodniky.ru/images/toolbar_feed.png
200 OK 898 B URL HTTP/1.1 www.ogorodniky.ru/images/toolbar_feed.png
IP
File type PNG image data, 25 x 25, 8-bit colormap, non-interlaced\012- data
Hash eb946766459da65ed6fcfe0dc2f2e393
41e880f4d4d376e43ec51372b1825cc3a1c51abf
a1ac976db7b52995937521c9b8356eb948979cbbb2864f6c952d3c918299c493
GET /images/toolbar_feed.png HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html
Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: image/png
Content-Length: 898
Connection: keep-alive
Last-Modified: Wed, 04 Aug 2021 06:48:03 GMT
ETag: "610a3823-382"
Expires: Sat, 24 Dec 2022 02:50:17 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ITrI0jFUOalY%2BHFKENW66vBA6gKKBH2lJOdEUXDmb3uM8wozJZFx4tA1m4anzwOXEfsRW%2Bv%2FF7TZMEThLAFuYf6dxHrc0bhYRfNqeZe6GLZVeUi0WFVFPm5ju4uOLIRQZs4CLA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed6128d05b511-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b2b92f1110c82662bfa1addc9bab3130
d6f86300cbfd5b21b3d505c08ffd6edef34b654a
6914944644172d563d0d7c2a5084690fce86ead13949ff29f42842d4bb6e0734
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 02:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 02:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash 467d7a3faedc08c1ee76ea691a195590
e4bd6e9bddb18880dea0ad32578e69ddeb3b8985
fc78fb49da84244a4223cf2f5b566f5809821e19a63a8f5e57329ee6c39f87b4
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Mon, 28 Nov 2022 01:00:17 GMT
ETag: "e4bd6e9bddb18880dea0ad32578e69ddeb3b8985"
Last-Modified: Thu, 24 Nov 2022 01:00:18 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2494
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed6138e8ab4fa-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f22437494cab8f3b1de6d48c3677f43
42461557365b59e300ae356c37b95f652e10dacd
420bc8cc7c6624d9201c6e12fb6478f4a9cf77e90aad033b4d12687968003ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 02:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/yanonekaffeesatz/v24/3y976aknfjLm_3lMKjiMgmUUYBs04Y8fH-qVHQ.woff2
200 OK 18 kB URL HTTP/2 fonts.gstatic.com/s/yanonekaffeesatz/v24/3y976aknfjLm_3lMKjiMgmUUYBs04Y8fH-qVHQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 18004, version 1.0\012- data
Hash 8c9790e2cd53b8e8f69be62b3bd1fcfd
bf23d20f0fab58985631118ae2d704ae314ce772
f4d08baa3d63a273477292d322343d5869d8a667ed2175af7fbd44b3075643c0
GET /s/yanonekaffeesatz/v24/3y976aknfjLm_3lMKjiMgmUUYBs04Y8fH-qVHQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.ogorodniky.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18004
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 15:05:55 GMT
expires: Wed, 22 Nov 2023 15:05:55 GMT
cache-control: public, max-age=31536000
age: 128662
last-modified: Tue, 23 Aug 2022 18:12:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/yanonekaffeesatz/v24/3y976aknfjLm_3lMKjiMgmUUYBs04Y8bH-o.woff2
200 OK 26 kB URL HTTP/2 fonts.gstatic.com/s/yanonekaffeesatz/v24/3y976aknfjLm_3lMKjiMgmUUYBs04Y8bH-o.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 25540, version 1.0\012- data
Hash 3dc72cae1a32e87b38144a702ba627e0
bfbc729a34b987cd06d20842c5049ac275ea4139
1c57101bb57275c8c8cafc5d6216131a378c4388a52656ed3770068cd0ab10b9
GET /s/yanonekaffeesatz/v24/3y976aknfjLm_3lMKjiMgmUUYBs04Y8bH-o.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.ogorodniky.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 25540
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 20:47:49 GMT
expires: Wed, 22 Nov 2023 20:47:49 GMT
cache-control: public, max-age=31536000
age: 108148
last-modified: Tue, 23 Aug 2022 18:11:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.ogorodniky.ru/templates/www.ogorodniky.ru/images/variations/retropaper/menubar_bg.png
200 OK 291 B URL HTTP/1.1 www.ogorodniky.ru/templates/www.ogorodniky.ru/images/variations/retropaper/menubar_bg.png
IP
File type PNG image data, 20 x 45, 8-bit/color RGBA, non-interlaced\012- data
Hash 6a4f06c5d9b24a76fcc5d046eb2ba6ed
23d1d57ff0f796b3d8e482b4daa70b78a8337b19
2643aef50692efb140da9b83469ae65a6b47fcfbbc008b702e0ec4d553d4c0ea
GET /templates/www.ogorodniky.ru/images/variations/retropaper/menubar_bg.png HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/cache/template/css-3930cf64d3158e41b31e22fb832e2994.css
Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: image/png
Content-Length: 291
Connection: keep-alive
Last-Modified: Wed, 04 Aug 2021 06:49:23 GMT
ETag: "610a3873-123"
Expires: Sat, 24 Dec 2022 02:50:17 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gVkw92sKqY9HAs1%2BeJlARutG%2BjAkNtjG%2FLWev1JEa4I1vEDR5Aq1RjVV59zycb2tHgvBKnvakXcZwSoVDIVAej9ofCM65X5erWUKMXBY2wezErcbqTHfNVTJYei9mKRgL9UYBA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed6132c6cfac4-OSL
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0ovAFQHw+N7d0JRfKPiYoA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: wbWVm3if6XOIo9rvtRRkr+SCy2E=
www.ogorodniky.ru/templates/www.ogorodniky.ru/images/variations/retro/wrapper_corners.png
200 OK 337 B URL HTTP/1.1 www.ogorodniky.ru/templates/www.ogorodniky.ru/images/variations/retro/wrapper_corners.png
IP
File type PNG image data, 14 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash e2da2c503c9e6f81f56e45ae02f646c3
fa2cad788ef98e598d2ea2413965c62bf6b00d95
c0222fd7ec6e1961ab4c51698725505ac7ed9fb90ffc9fa5808c27e74557bf90
GET /templates/www.ogorodniky.ru/images/variations/retro/wrapper_corners.png HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/cache/template/css-3930cf64d3158e41b31e22fb832e2994.css
Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: image/png
Content-Length: 337
Connection: keep-alive
Last-Modified: Wed, 04 Aug 2021 06:49:23 GMT
ETag: "610a3873-151"
Expires: Sat, 24 Dec 2022 02:50:17 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v%2FcU%2FDR8%2F0O0KYb9u2DNa%2FC42yhgqV56Gtkbdhx%2FS3RSthdfFo4IyeIBsfy8YSUHQeupurrJjqeBghchN2ho5xKSQ2e5jP00Dsss3DG1Qmd%2BE1JW7zyQloG5kCzZuoNbT2dLWA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed6132c8eb4eb-OSL
alt-svc: h2=":443"; ma=60
fonts.gstatic.com/s/lobster/v28/neILzCirqoswsqX9zoKmMw.woff2
200 OK 33 kB URL HTTP/2 fonts.gstatic.com/s/lobster/v28/neILzCirqoswsqX9zoKmMw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 33436, version 1.0\012- data
Hash b9b4c932ef89c39525bfe1b604cda3a1
767246e4c7df1b6c32f590c16c135808382b1aba
9a932e49823b59769330d1ce8ef9f1b90e5ae8ecd5f2bb388d19bf684cdb7ebd
GET /s/lobster/v28/neILzCirqoswsqX9zoKmMw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.ogorodniky.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33436
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 17:58:14 GMT
expires: Wed, 22 Nov 2023 17:58:14 GMT
cache-control: public, max-age=31536000
age: 118323
last-modified: Tue, 26 Apr 2022 15:01:13 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lobster/v28/neILzCirqoswsqX9zoamM5Ez.woff2
200 OK 40 kB URL HTTP/2 fonts.gstatic.com/s/lobster/v28/neILzCirqoswsqX9zoamM5Ez.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 39628, version 1.0\012- data
Hash b17e8d97e4daffa7e845da126506d0f7
52a82ee6ee48bc11ed4527d9a809e3698673223e
2f03586441eab76ecf5d95b018e480bc50bd799bf7c7b639f190fa3633fc1247
GET /s/lobster/v28/neILzCirqoswsqX9zoamM5Ez.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.ogorodniky.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 39628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 18:02:30 GMT
expires: Wed, 22 Nov 2023 18:02:30 GMT
cache-control: public, max-age=31536000
age: 118067
last-modified: Tue, 26 Apr 2022 15:12:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.ogorodniky.ru/templates/www.ogorodniky.ru/images/topmenu_item_bg.png
200 OK 188 B URL HTTP/1.1 www.ogorodniky.ru/templates/www.ogorodniky.ru/images/topmenu_item_bg.png
IP
File type PNG image data, 1 x 10, 8-bit/color RGBA, non-interlaced\012- data
Hash 77b0ce93a176555131e6ac6a1d22a281
81d02d3d0b77a2a39769a8498ba67e56b195d73e
bdc623945c843718cafc8c62fd523b6891376edbc95729859b8dca5b3c6d3851
GET /templates/www.ogorodniky.ru/images/topmenu_item_bg.png HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/cache/template/css-3930cf64d3158e41b31e22fb832e2994.css
Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: image/png
Content-Length: 188
Connection: keep-alive
Last-Modified: Wed, 04 Aug 2021 06:49:16 GMT
ETag: "610a386c-bc"
Expires: Sat, 24 Dec 2022 02:50:17 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l%2BSq0afb6uizYo9dPDs%2Bhgxuyw%2FyekDmpWz7wt4wDlNmBLEKLSCh%2F7Fb%2Fzf46IXEoTe3n1NIMe4sjw%2BvUx7J%2BfYp4Y7QeY1I0%2B%2F6FhJgMJyRzRRvHwfDGXmhkqXI3gz7bZbIWw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed6132e58b4fa-OSL
alt-svc: h2=":443"; ma=60
www.ogorodniky.ru/templates/www.ogorodniky.ru/images/breadcrumbs.png
200 OK 239 B URL HTTP/1.1 www.ogorodniky.ru/templates/www.ogorodniky.ru/images/breadcrumbs.png
IP
File type PNG image data, 6 x 9, 8-bit/color RGBA, non-interlaced\012- data
Hash c35f4f84d8c1fcb8f6c5cc6732798f06
c3d6361181553694b61a20ee5c950a9dfef8f8c4
f43ae6065fac8ee2d402e2dffa2707fb836e28a06f82d1d67ad61a6cef998d16
GET /templates/www.ogorodniky.ru/images/breadcrumbs.png HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/cache/template/css-3930cf64d3158e41b31e22fb832e2994.css
Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: image/png
Content-Length: 239
Connection: keep-alive
Last-Modified: Wed, 04 Aug 2021 06:49:16 GMT
ETag: "610a386c-ef"
Expires: Sat, 24 Dec 2022 02:50:17 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fP%2F0Hg9sFwFrBpsZRn50YeC54ACx5O4HSNkQIkt2wUcUTSQKnuFyRloMjjVMI7xAy%2FT748%2FIni3I8b7QZQduZLpM%2Bs4l%2FVybFGRYa9F9unSPJ9cqQOhsEmKVSKy0VqbUsjJ0SA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed6132a880b02-OSL
alt-svc: h2=":443"; ma=60
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 3c95984872fdff1be5ea1e99793679c4
bf11536919832c54ec52f5a15c11d5a3f76adf60
f5209f5ea4f65550b46536f2d8cd500bdb93000179aab714213f20efad47699d
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sun, 27 Nov 2022 22:46:11 GMT
ETag: "bf11536919832c54ec52f5a15c11d5a3f76adf60"
Last-Modified: Wed, 23 Nov 2022 22:46:12 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3487
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed613cabeb51b-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f22437494cab8f3b1de6d48c3677f43
42461557365b59e300ae356c37b95f652e10dacd
420bc8cc7c6624d9201c6e12fb6478f4a9cf77e90aad033b4d12687968003ccf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 02:50:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
counter.24log.ru/buttons/25/bg25-10_2.gif
301 Moved Permanently 162 B URL HTTP/1.1 counter.24log.ru/buttons/25/bg25-10_2.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /buttons/25/bg25-10_2.gif HTTP/1.1
Host: counter.24log.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://counter.24log.ru/buttons/25/bg25-10_2.gif
counter.24log.ru/buttons/25/bg25-10_3.gif
301 Moved Permanently 162 B URL HTTP/1.1 counter.24log.ru/buttons/25/bg25-10_3.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /buttons/25/bg25-10_3.gif HTTP/1.1
Host: counter.24log.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://counter.24log.ru/buttons/25/bg25-10_3.gif
counter.24log.ru/buttons/25/bg25-10_1.gif
301 Moved Permanently 162 B URL HTTP/1.1 counter.24log.ru/buttons/25/bg25-10_1.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /buttons/25/bg25-10_1.gif HTTP/1.1
Host: counter.24log.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://counter.24log.ru/buttons/25/bg25-10_1.gif
vk.com/js/api/openapi.js?75
200 OK 23 kB URL HTTP/2 vk.com/js/api/openapi.js?75
IP
File type ASCII text, with very long lines (3849)
Hash b33ff213862515e45744517b207d77db
7d69b309a9c1d918d8dc7b42c510d08321207b9c
a5cd610dc23e643864c8827d58736c15b955328124bfd95661c88a7b96eaed47
GET /js/api/openapi.js?75 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ogorodniky.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: application/x-javascript
content-length: 23322
last-modified: Wed, 10 Aug 2022 14:44:17 GMT
etag: "62f3c441-5b1a"
content-encoding: br
expires: Mon, 28 Nov 2022 02:50:17 GMT
cache-control: max-age=345600
x-frontend: front226205
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
www.ogorodniky.ru/templates/www.ogorodniky.ru/images/variations/retro/submenu_level1_item.png
200 OK 296 B URL HTTP/1.1 www.ogorodniky.ru/templates/www.ogorodniky.ru/images/variations/retro/submenu_level1_item.png
IP
File type PNG image data, 15 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 6d54803924df17bbf974829dc5d76372
8280412756549a4b334cc3523d06d430cc12693a
09c138c0e66540250c53353ca88a55aa32e700140985217b22f139e37e29cbc9
GET /templates/www.ogorodniky.ru/images/variations/retro/submenu_level1_item.png HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/cache/template/css-3930cf64d3158e41b31e22fb832e2994.css
Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: image/png
Content-Length: 296
Connection: keep-alive
Last-Modified: Wed, 04 Aug 2021 06:49:23 GMT
ETag: "610a3873-128"
Expires: Sat, 24 Dec 2022 02:50:17 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uPnXpJSff%2BJREkcGaCk6QHFeF2J43NfqWu8rwZbWCFMGJHEfPWyHSGEpZL7MTuq0lVQuxGzI6XIxUU12qboE9mhjwuvSag6Flplb%2Fm8Qoup%2FeDo%2B0DaBxZE5gX2xQL4UN1%2BCMA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed613dcc2b4eb-OSL
alt-svc: h2=":443"; ma=60
www.ogorodniky.ru/templates/www.ogorodniky.ru/images/submenu_level1_parent.png
200 OK 314 B URL HTTP/1.1 www.ogorodniky.ru/templates/www.ogorodniky.ru/images/submenu_level1_parent.png
IP
File type PNG image data, 20 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 72f63ded6d6712973d72a7ed6e280fa5
57df192b1b49765af539a6cbb4451ac1b7737372
51a8521e0be90068c141553115017f93eebac43a576d392286966e8fce49a6e7
GET /templates/www.ogorodniky.ru/images/submenu_level1_parent.png HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/cache/template/css-3930cf64d3158e41b31e22fb832e2994.css
Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: image/png
Content-Length: 314
Connection: keep-alive
Last-Modified: Wed, 04 Aug 2021 06:49:16 GMT
ETag: "610a386c-13a"
Expires: Sat, 24 Dec 2022 02:50:17 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9kUufdNLzq%2Bsuwb9loUSg2wWX2GhrvvpkQx%2FRzdtbAuV3%2FvPSlvMiBdbRU95wbBS9eZGxiSLopn1wOtzu1oGWBIYcCbqgZzA4WesyDmXyQAR5FNXb3T3PgM9tPB7%2BjoVX82NFA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed613eaae0b02-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e670c3b29b791645f747cb483519a87
43af346709674f34322127c1d2885868f2145d69
a613b7418bf845d353bc0b1a3d9f9d75a1d64559cb6f4590ee016d63e04634cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A613B7418BF845D353BC0B1A3D9F9D75A1D64559CB6F4590EE016D63E04634CB"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10757
Expires: Thu, 24 Nov 2022 05:49:34 GMT
Date: Thu, 24 Nov 2022 02:50:17 GMT
Connection: keep-alive
www.ogorodniky.ru/templates/www.ogorodniky.ru/images/variations/retropaper/submenu_level2_item.png
200 OK 265 B URL HTTP/1.1 www.ogorodniky.ru/templates/www.ogorodniky.ru/images/variations/retropaper/submenu_level2_item.png
IP
File type PNG image data, 10 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash c7ca3d663661186111cfaa787894c766
ed3cf0bc39cc66511811876d673926ad76264110
aaeb3a615004cd8efcabae6c7bb05032fe967f1f65dab792d809956a931f870b
GET /templates/www.ogorodniky.ru/images/variations/retropaper/submenu_level2_item.png HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/cache/template/css-3930cf64d3158e41b31e22fb832e2994.css
Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: image/png
Content-Length: 265
Connection: keep-alive
Last-Modified: Wed, 04 Aug 2021 06:49:23 GMT
ETag: "610a3873-109"
Expires: Sat, 24 Dec 2022 02:50:17 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U2kJkmBKN%2BK6qccDhaYKlqCiwAIKJYXb2Fewj70Raya0V2PCfZPRPp9iCMnMW1VBoNehkPlvdgsKWu1Pd4RCK4gM5vDINXtgI5UoB3d3ldBKOZkrUqSFO2gMwpt%2BdSPpKpdAug%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed613fec7b4fa-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e670c3b29b791645f747cb483519a87
43af346709674f34322127c1d2885868f2145d69
a613b7418bf845d353bc0b1a3d9f9d75a1d64559cb6f4590ee016d63e04634cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A613B7418BF845D353BC0B1A3D9F9D75A1D64559CB6F4590EE016D63E04634CB"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10757
Expires: Thu, 24 Nov 2022 05:49:34 GMT
Date: Thu, 24 Nov 2022 02:50:17 GMT
Connection: keep-alive
www.ogorodniky.ru/templates/www.ogorodniky.ru/images/module_line.png
200 OK 191 B URL HTTP/1.1 www.ogorodniky.ru/templates/www.ogorodniky.ru/images/module_line.png
IP
File type PNG image data, 15 x 2, 8-bit/color RGBA, non-interlaced\012- data
Hash ec6449879ce26e91b1203f1f1e3f913d
1e9e52b10867a26af0ab66e8fed7f7e7b0e61ab4
8e5fd5222e07a716018c6758c899400559bc18b2768c83b084fae071098179e2
GET /templates/www.ogorodniky.ru/images/module_line.png HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/cache/template/css-3930cf64d3158e41b31e22fb832e2994.css
Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: image/png
Content-Length: 191
Connection: keep-alive
Last-Modified: Wed, 04 Aug 2021 06:49:16 GMT
ETag: "610a386c-bf"
Expires: Sat, 24 Dec 2022 02:50:17 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=60cRNwSM10XoRaK7NGmHHa7U6J723cpFWmnFcoDBd3MQkxcHtRHc3zkdkr9GveqjHUw3rIhyr9Z2SZzYYJUMU9LiEFZip6ootNzdhSXFOrxFvpLxIDLT5pZ9uXQLNyUSkz7UBA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed6141ceefac4-OSL
alt-svc: h2=":443"; ma=60
www.ogorodniky.ru/templates/www.ogorodniky.ru/images/green_grass.png
200 OK 656 kB URL HTTP/1.1 www.ogorodniky.ru/templates/www.ogorodniky.ru/images/green_grass.png
IP
File type PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced\012- data
Size 656 kB (655794 bytes)
Hash 39e556ee499a4c6c40da91a9d9eb211c
0aeb76f110470fca2fb4e7b8a58ca5cde1eb9b64
28d2df0c6d045520b8dcdeba81916e94f9ad31e7b6d6ad0609528c481a192624
GET /templates/www.ogorodniky.ru/images/green_grass.png HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/cache/template/css-3930cf64d3158e41b31e22fb832e2994.css
Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: image/png
Content-Length: 655794
Connection: keep-alive
Last-Modified: Wed, 04 Aug 2021 06:49:16 GMT
ETag: "610a386c-a01b2"
Expires: Sat, 24 Dec 2022 02:50:17 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aaoIhvZDJKBSdXBJnQoIA2AB55EpI%2FQBZ%2B9sy9ajeMup484Ddwbs11frpwBld7mfdDA2LtcP96H243tCHDxyuDw8qa%2FpmqlajEVr2bzMwOCdhbXjLQ2D1K0Sr7%2F0Twqq4BEYiQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed6130975b50c-OSL
alt-svc: h2=":443"; ma=60
www.ogorodniky.ru/templates/www.ogorodniky.ru/images/variations/retropaper/page_bg_img.png
200 OK 656 kB URL HTTP/1.1 www.ogorodniky.ru/templates/www.ogorodniky.ru/images/variations/retropaper/page_bg_img.png
IP
File type PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced\012- data
Size 656 kB (655794 bytes)
Hash 39e556ee499a4c6c40da91a9d9eb211c
0aeb76f110470fca2fb4e7b8a58ca5cde1eb9b64
28d2df0c6d045520b8dcdeba81916e94f9ad31e7b6d6ad0609528c481a192624
GET /templates/www.ogorodniky.ru/images/variations/retropaper/page_bg_img.png HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/cache/template/css-3930cf64d3158e41b31e22fb832e2994.css
Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: image/png
Content-Length: 655794
Connection: keep-alive
Last-Modified: Wed, 04 Aug 2021 06:49:23 GMT
ETag: "610a3873-a01b2"
Expires: Sat, 24 Dec 2022 02:50:17 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VdJLYz4Wg%2FR2m3zux%2BE%2BbaTd531qLzjt%2FNhS5yDTHENHOr3ulmJ2hACUSUp%2FFtinmx34nogwaIOIYh85FO5GG6SydtRquUy14EYOWMWU7QjzP7nNOJ4vdXzaZEB8czPLoVLFeg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed6132d51b511-OSL
alt-svc: h2=":443"; ma=60
mc.yandex.ru/metrika/watch.js
200 OK 58 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (586)
Hash 89185e037b366ee6c6b5d55bd893c11d
6a0e2cd6189b890da76b827beaeeca41097e8cf1
2b46f64d745301de1b0f94206157e0373db1e5db20e7725794fb34adaab08423
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ogorodniky.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 57741
date: Thu, 24 Nov 2022 02:50:17 GMT
access-control-allow-origin: *
etag: "637b3777-e18d"
expires: Thu, 24 Nov 2022 03:50:17 GMT
last-modified: Mon, 21 Nov 2022 11:31:51 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
www.acint.net/aci.js
200 OK 7.5 kB IP
File type ASCII text, with very long lines (1408)
Hash ae0aab6c5a2ae2e1168e74f6e6ae4741
2c00f69ee4bbe2ec96c0f7bb33b5f827a6195af8
a47a88a9b6c7635e5074c25c6e3c92f399fdf8772376e94f077167241e59f9de
GET /aci.js HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: application/x-javascript
content-length: 7461
last-modified: Mon, 16 May 2022 07:14:50 GMT
etag: "6281f9ea-1d25"
content-encoding: gzip
expires: Thu, 24 Nov 2022 14:50:17 GMT
cache-control: max-age=43200
X-Firefox-Spdy: h2
vk.com/widget_community.php?app=0&width=180px&_ver=1&gid=47871130&mode=0&color1=&color2=&color3=&class_name=&height=290&url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&referrer=&title=%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&184a78b080d
200 OK 11 kB URL HTTP/2 vk.com/widget_community.php?app=0&width=180px&_ver=1&gid=47871130&mode=0&color1=&color2=&color3=&class_name=&height=290&url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&referrer=&title=%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&184a78b080d
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Non-ISO extended-ASCII text, with very long lines (16185)
Hash 402ca1c0b5bfab4f348bdcda99cb210a
dfa9125f4825f2e64b16b2d644b0a84e23b93cab
9e97fb9479fdf30b3820e61723d4aa918bcd48a9145fefeaec2b9d2ab3509a99
GET /widget_community.php?app=0&width=180px&_ver=1&gid=47871130&mode=0&color1=&color2=&color3=&class_name=&height=290&url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&referrer=&title=%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&184a78b080d HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: text/html; charset=windows-1251
content-length: 11146
x-powered-by: KPHP/7.4.112728
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Wed, 22 Nov 2023 06:17:09 GMT; path=/; domain=.vk.com
remixstlid=9064846694495007724_y9FDy1gNM635Ax6owROzMllwxVNzcOMJeKLPtdIxR7s; expires=Fri, 24 Nov 2023 02:50:17 GMT; path=/; domain=.vk.com; secure
remixstid=869266777_bZ4v2KMdXZlDm2VbJ2KA9lBvAwgG9HXX3U82K24KjG8; expires=Wed, 29 Nov 2023 04:13:27 GMT; path=/; domain=.vk.com; secure
cache-control: no-store
content-security-policy: default-src * data: blob: about: vkcalls:;script-src 'self' https://vk.com https://*.vk.com https://vk.ru https://*.vk.ru https://static.vk.me https://*.mail.ru https://r.mradx.net https://s.ytimg.com https://platform.twitter.com https://cdn.syndication.twimg.com https://www.instagram.com https://connect.facebook.net https://telegram.org https://*.yandex.ru https://*.google-analytics.com https://*.youtube.com https://maps.googleapis.com https://translate.googleapis.com https://*.google.com https://google.com https://*.vkpartner.ru https://*.moatads.com https://*.adlooxtracking.ru https://*.serving-sys.ru https://*.weborama-tech.ru https://*.gstatic.com https://*.google.ru https://securepubads.g.doubleclick.net https://cdn.ampproject.org https://www.googletagmanager.com https://googletagmanager.com https://*.vk-cdn.net https://*.hit.gemius.pl https://yastatic.net https://analytics.tiktok.com 'unsafe-inline' 'unsafe-eval' blob:;style-src https://vk.com https://*.vk.com https://vk.ru https://*.vk.ru https://static.vk.me https://r.mradx.net https://ton.twimg.com https://tagmanager.google.com https://platform.twitter.com https://*.googleapis.com 'self' 'unsafe-inline';report-uri /csp
x-xss-protection: 1; report=/xss_reports
content-encoding: gzip
x-frontend: front226205
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
counter.24log.ru/counter?id=145381&t=25&st=10&r=&u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html&s=1280x1024x24&rnd=0.31118297706793974
301 Moved Permanently 162 B URL HTTP/1.1 counter.24log.ru/counter?id=145381&t=25&st=10&r=&u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html&s=1280x1024x24&rnd=0.31118297706793974
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /counter?id=145381&t=25&st=10&r=&u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html&s=1280x1024x24&rnd=0.31118297706793974 HTTP/1.1
Host: counter.24log.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://counter.24log.ru/counter?id=145381&t=25&st=10&r=&u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html&s=1280x1024x24&rnd=0.31118297706793974
www.ogorodniky.ru/templates/www.ogorodniky.ru/images/module_glow_bg.png
200 OK 3.5 kB URL HTTP/1.1 www.ogorodniky.ru/templates/www.ogorodniky.ru/images/module_glow_bg.png
IP
File type PNG image data, 110 x 170, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ff118619e8b8bd1048bfc434163183e
0ba72ef0eda246cf3bc688e21b98e14b6efc255d
b8659502873e2c9e99689646945d3e532676453cfa43d57fa06a06a510d82b20
GET /templates/www.ogorodniky.ru/images/module_glow_bg.png HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/cache/template/css-3930cf64d3158e41b31e22fb832e2994.css
Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: image/png
Content-Length: 3511
Connection: keep-alive
Last-Modified: Wed, 04 Aug 2021 06:49:16 GMT
ETag: "610a386c-db7"
Expires: Sat, 24 Dec 2022 02:50:17 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B6hlGxuDfbAx7JAw6UzmvaiJRn1MRJedsPUrjmKOoulG7PKg0O3gMeD8debM7rw3K71Cp9NxznOQqUUTWmuaoDko0EsK%2BqE3XSgXY35qV%2BUK70e0mYKGbRntaEZ4FFVZYw1l5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed6154d2bb4eb-OSL
alt-svc: h2=":443"; ma=60
www.ogorodniky.ru/templates/www.ogorodniky.ru/images/module_embedded_bg.png
200 OK 537 B URL HTTP/1.1 www.ogorodniky.ru/templates/www.ogorodniky.ru/images/module_embedded_bg.png
IP
File type PNG image data, 15 x 1500, 8-bit/color RGBA, non-interlaced\012- data
Hash 2b4cd125dc537496f3139c69aca87a1c
39b781f20aa52353be70d2d8aafb2e8c27f25b00
99a0ea57fd97ede6de5bfb6df559219339a0e5d49901d7718f61ef66ac6f16c3
GET /templates/www.ogorodniky.ru/images/module_embedded_bg.png HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/cache/template/css-3930cf64d3158e41b31e22fb832e2994.css
Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: image/png
Content-Length: 537
Connection: keep-alive
Last-Modified: Wed, 04 Aug 2021 06:49:16 GMT
ETag: "610a386c-219"
Expires: Sat, 24 Dec 2022 02:50:17 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YTFLISZirrprqkVY6H1rFFY2EUO1dpfSzzUkmIEjaSZXNyUjnXUjYy4FIhYHCi7138gt%2BloPSh8zKWe%2BZjoMaZcYbjTWJlaQwc9y9GpYNSkTl6iLGzrE9fc7XVvJCTKntGDQDA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed6150a47b50c-OSL
alt-svc: h2=":443"; ma=60
www.ogorodniky.ru/templates/www.ogorodniky.ru/images/module_glow_line_h.png
200 OK 476 B URL HTTP/1.1 www.ogorodniky.ru/templates/www.ogorodniky.ru/images/module_glow_line_h.png
IP
File type PNG image data, 15 x 1500, 8-bit/color RGBA, non-interlaced\012- data
Hash 759e4f1d74a7c7087c6a93484e845009
4b4c8fdb0cf54997153cb4e927e653493122249f
9f24d561234ffbc8560f636c1054d006e3c30791533fb8fadd5ee851d59fc4d4
GET /templates/www.ogorodniky.ru/images/module_glow_line_h.png HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/cache/template/css-3930cf64d3158e41b31e22fb832e2994.css
Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: image/png
Content-Length: 476
Connection: keep-alive
Last-Modified: Wed, 04 Aug 2021 06:49:16 GMT
ETag: "610a386c-1dc"
Expires: Sat, 24 Dec 2022 02:50:17 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7j6ONbjTqFBLnsxiiN%2BqZsI0xxExle0HfpyXU75SMc765Iiyg%2FJ85b0bG%2Bvqs2OXuhJZmiEDyNcZnpsjK%2Fka%2BeczAG2KTU1PLQuFLbXuj4xTeVGyih%2FAz19MJpHbGk1kBCh5uA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed6154ea7b511-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4465fe37a1af9047423cefb9892733ae
487b9bb2deb8c4bf2302aac122d54301d7622956
0361bd9db4baa8aa72156d48e65ac7704f52c2acfc4bc42c2ee78797034494cd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0361BD9DB4BAA8AA72156D48E65AC7704F52C2ACFC4BC42C2EE78797034494CD"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14909
Expires: Thu, 24 Nov 2022 06:58:46 GMT
Date: Thu, 24 Nov 2022 02:50:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 15688d3dd3a587665c9b0663626dc41e
a8b782ce5baa939c17c5d926aedebce2ba5027eb
850b15a34806395ea34061d0f1151617c1a6713cc4fd8ca44342b4a8722f1a37
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "850B15A34806395EA34061D0F1151617C1A6713CC4FD8CA44342B4A8722F1A37"
Last-Modified: Wed, 23 Nov 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5432
Expires: Thu, 24 Nov 2022 04:20:49 GMT
Date: Thu, 24 Nov 2022 02:50:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 15688d3dd3a587665c9b0663626dc41e
a8b782ce5baa939c17c5d926aedebce2ba5027eb
850b15a34806395ea34061d0f1151617c1a6713cc4fd8ca44342b4a8722f1a37
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "850B15A34806395EA34061D0F1151617C1A6713CC4FD8CA44342B4A8722F1A37"
Last-Modified: Wed, 23 Nov 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5432
Expires: Thu, 24 Nov 2022 04:20:49 GMT
Date: Thu, 24 Nov 2022 02:50:17 GMT
Connection: keep-alive
www.acint.net/mc/?dp=10
302 Moved Temporarily 142 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /mc/?dp=10 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/mc/?dp=10
vk.com/js/al/lite.js?105
200 OK 62 kB IP
File type ISO-8859 text, with very long lines (2839)
Hash 00c96d99eacaf6182b2b6f4df9af8035
8f26de3f62e0f18662b5bf3a814e1426de52d8ed
32d9fae1a16e2721c76d503f2fc7c5ab0874bbda4533070e6b3681e337363271
GET /js/al/lite.js?105 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/widget_community.php?app=0&width=180px&_ver=1&gid=47871130&mode=0&color1=&color2=&color3=&class_name=&height=290&url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&referrer=&title=%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&184a78b080d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: application/x-javascript
content-length: 61848
last-modified: Tue, 22 Nov 2022 13:47:46 GMT
etag: "637cd302-f198"
content-encoding: br
expires: Mon, 28 Nov 2022 02:50:17 GMT
cache-control: max-age=345600
x-frontend: front226205
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 15688d3dd3a587665c9b0663626dc41e
a8b782ce5baa939c17c5d926aedebce2ba5027eb
850b15a34806395ea34061d0f1151617c1a6713cc4fd8ca44342b4a8722f1a37
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "850B15A34806395EA34061D0F1151617C1A6713CC4FD8CA44342B4A8722F1A37"
Last-Modified: Wed, 23 Nov 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5432
Expires: Thu, 24 Nov 2022 04:20:49 GMT
Date: Thu, 24 Nov 2022 02:50:17 GMT
Connection: keep-alive
vk.com/js/lang3_0.js?27820970
200 OK 22 kB URL HTTP/2 vk.com/js/lang3_0.js?27820970
IP
File type ISO-8859 text, with very long lines (50863), with LF, NEL line terminators
Hash 28eb907725604dffece68ab83f52909b
7f1d26d1b1992f3023f4eeee74efe07b6dd5a91a
93dbe241e82b41fce4fe7e29d019256aada6f9f3cfa63ac7c79596eb13bfb23c
GET /js/lang3_0.js?27820970 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/widget_community.php?app=0&width=180px&_ver=1&gid=47871130&mode=0&color1=&color2=&color3=&class_name=&height=290&url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&referrer=&title=%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&184a78b080d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: text/javascript; charset=windows-1251
content-length: 21542
x-powered-by: KPHP/7.4.112728
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Thu, 30 Nov 2023 08:58:19 GMT; path=/; domain=.vk.com
remixstlid=9078498230865625268_XGZEbBK2gebXWWwgSbtQdJPf59BFj5NYX6TD0X3jFgk; expires=Fri, 24 Nov 2023 02:50:17 GMT; path=/; domain=.vk.com; secure
cache-control: max-age=345600
content-encoding: gzip
x-frontend: front226205
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
cleverjump.org/counter.js
200 OK 5.6 kB URL HTTP/1.1 cleverjump.org/counter.js
IP
ASN #49981 WorldStream B.V.
File type ASCII text, with CRLF line terminators
Hash 83126dc4af783a2179ab362a5bbec530
b1fe91477d92ab09066f28ddda5b31a4bf0f1689
cb1ef4607e93916a5dd30beae4617069924cb5f10edb65d8f93468c3fbdc1dc4
GET /counter.js HTTP/1.1
Host: cleverjump.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: application/javascript
Content-Length: 5571
Last-Modified: Wed, 20 Jan 2021 12:50:32 GMT
Connection: keep-alive
ETag: "60082718-15c3"
Expires: Fri, 25 Nov 2022 02:50:17 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
www.acint.net/hit/?v=0.4.0&uid=023e18cd-56f1-4510-8fc9-7ae848d112ba&dp=10&tz=%2B00%3A00&nc=65539476&u=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=&rs=1280x1024&t=%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&oE=1&oP=1&dT=2022-11-24T02%3A50%3A17.637&fu=46dc5646-a4a0-44e1-9431-89437e4b8cb5
302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/hit/?v=0.4.0&uid=023e18cd-56f1-4510-8fc9-7ae848d112ba&dp=10&tz=%2B00%3A00&nc=65539476&u=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=&rs=1280x1024&t=%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&oE=1&oP=1&dT=2022-11-24T02%3A50%3A17.637&fu=46dc5646-a4a0-44e1-9431-89437e4b8cb5
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /hit/?v=0.4.0&uid=023e18cd-56f1-4510-8fc9-7ae848d112ba&dp=10&tz=%2B00%3A00&nc=65539476&u=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=&rs=1280x1024&t=%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&oE=1&oP=1&dT=2022-11-24T02%3A50%3A17.637&fu=46dc5646-a4a0-44e1-9431-89437e4b8cb5 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/hit/?v=0.4.0&uid=023e18cd-56f1-4510-8fc9-7ae848d112ba&dp=10&tz=%2B00%3A00&nc=65539476&u=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=&rs=1280x1024&t=%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&oE=1&oP=1&dT=2022-11-24T02%3A50%3A17.637&fu=46dc5646-a4a0-44e1-9431-89437e4b8cb5
vk.com/js/loader_nav20714676376_3.js
200 OK 50 kB URL HTTP/2 vk.com/js/loader_nav20714676376_3.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4845f5e5366f622ad382b6667563bd60
24e2d7e7051388524f1737616e9573978d3071dc
f3d99cc16830ab8880e5e2686c0348c17db2472227712c045950878e3d56b1c3
GET /js/loader_nav20714676376_3.js HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/widget_community.php?app=0&width=180px&_ver=1&gid=47871130&mode=0&color1=&color2=&color3=&class_name=&height=290&url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&referrer=&title=%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&184a78b080d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: text/javascript; charset=windows-1251
content-length: 50033
x-powered-by: KPHP/7.4.112728
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Thu, 23 Nov 2023 11:53:59 GMT; path=/; domain=.vk.com
remixstlid=9053587695426724964_kvTymQRVFXmSR7HxJrYLn5gDJNSsGzN0uNmqDLJXaRw; expires=Fri, 24 Nov 2023 02:50:17 GMT; path=/; domain=.vk.com; secure
cache-control: no-store
content-encoding: gzip
x-frontend: front226205
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/css/al/lite.767433f9d8f76d21bc7a.css
200 OK 36 kB URL HTTP/2 st.vk.com/css/al/lite.767433f9d8f76d21bc7a.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Hash 0eb6868bdd0818265b30fbf0bcdbec0b
c72ba4ff0e47aa68b1a8a27cec4686175aac9ce9
ad0433c0a66e513398ec2cc8a4d3b8b5ec741a34d138695046c04e7ffa8052cc
GET /css/al/lite.767433f9d8f76d21bc7a.css HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: text/css
content-length: 35746
last-modified: Wed, 02 Nov 2022 08:24:06 GMT
etag: "63622926-8ba2"
content-encoding: br
expires: Mon, 28 Nov 2022 02:50:17 GMT
cache-control: max-age=345600
x-frontend: front226205
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/js/api/xdm.js?9
200 OK 2.8 kB URL HTTP/2 st.vk.com/js/api/xdm.js?9
IP
Hash 3621f21a6215d1660754d2a2d1947af5
6480e04e1e4a82bf63c1322fe17dbff2037f3e06
3ffe8143f00123797a9a41d9444fce19a8935e6f34378293cb22b8b0705df6ea
GET /js/api/xdm.js?9 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: application/x-javascript
content-length: 2846
last-modified: Tue, 22 Sep 2020 20:30:00 GMT
etag: "5f6a5ec8-b1e"
content-encoding: br
expires: Mon, 28 Nov 2022 02:50:17 GMT
cache-control: max-age=345600
x-frontend: front226205
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/css/al/ui_common.c0faeed934ef6c709718.css
200 OK 14 kB URL HTTP/2 st.vk.com/css/al/ui_common.c0faeed934ef6c709718.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Hash f32ed1e014ac4e73153ceaf91e07e547
b1b20504c432aa31ff71a3425f3d17fb810d8e0a
4f0e4361ff2a00485aa7ffc1676bfe6adfbe28b3ee4d71418a05c71c82f69fec
GET /css/al/ui_common.c0faeed934ef6c709718.css HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: text/css
content-length: 14135
last-modified: Fri, 14 Oct 2022 08:53:48 GMT
etag: "6349239c-3737"
content-encoding: br
expires: Mon, 28 Nov 2022 02:50:17 GMT
cache-control: max-age=345600
x-frontend: front226205
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/polyfills.9d6916e19429a42923a3.js?2feba6508fe573be8f43
200 OK 21 kB URL HTTP/2 st.vk.com/dist/polyfills.9d6916e19429a42923a3.js?2feba6508fe573be8f43
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (36001), with NEL line terminators
Hash 3f038a4aff61fa279cda09597c56f236
08306f582674e176ef5df8110a7d2a3974643942
b0b4f33381041b7ba66705ff64c36b36e502b4ddb108f78adbdec603613aecc2
GET /dist/polyfills.9d6916e19429a42923a3.js?2feba6508fe573be8f43 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: application/x-javascript
content-length: 20615
last-modified: Wed, 16 Nov 2022 08:32:40 GMT
etag: "6374a028-5087"
content-encoding: br
expires: Mon, 28 Nov 2022 02:50:17 GMT
cache-control: max-age=345600
x-frontend: front226205
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/react.aa0593255e5f9d5c3793.js?f3b31b6ba5c144b93f84
200 OK 44 kB URL HTTP/2 st.vk.com/dist/react.aa0593255e5f9d5c3793.js?f3b31b6ba5c144b93f84
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65449)
Hash 16185700d96cafadac13a93a10e4d1f1
97d4dbfb1151e1d5ee22e3920f0039a3899d130e
cbe5b2d6de6b5bb9753252d47defd3f87533891575ed163f31cd4d6e0ca0b059
GET /dist/react.aa0593255e5f9d5c3793.js?f3b31b6ba5c144b93f84 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: application/x-javascript
content-length: 43803
last-modified: Thu, 17 Nov 2022 10:34:27 GMT
etag: "63760e33-ab1b"
content-encoding: br
expires: Mon, 28 Nov 2022 02:50:17 GMT
cache-control: max-age=345600
x-frontend: front226205
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/palette.c0fabca8c19959215c76.js?d356fc5b85769eff9841
200 OK 24 kB URL HTTP/2 st.vk.com/dist/palette.c0fabca8c19959215c76.js?d356fc5b85769eff9841
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65531), with no line terminators
Hash dbc9af7296855a36e20fbbaae999da87
54f3f45db490413a97c1012b349266436bc1cd01
e60f356fd99ea83e6c996e7fee8fd52e8a87586865f23531e98eee8790c1caca
GET /dist/palette.c0fabca8c19959215c76.js?d356fc5b85769eff9841 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: application/x-javascript
content-length: 24299
last-modified: Tue, 22 Nov 2022 10:58:00 GMT
etag: "637cab38-5eeb"
content-encoding: br
expires: Mon, 28 Nov 2022 02:50:17 GMT
cache-control: max-age=345600
x-frontend: front226205
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/audioplayer.dd92c1010d87279d6d61.js?300585bb74d83dc020e4d6f
200 OK 36 kB URL HTTP/2 st.vk.com/dist/audioplayer.dd92c1010d87279d6d61.js?300585bb74d83dc020e4d6f
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Hash 47645925eea379a19bcb4d9632c8a4c8
5389e16e120eea37e78cb5a0bd9ba58771808eaa
2dd6522f89e04c8d1acd98aeebc11debb3a2b87915133afcb66a69ad19c319f8
GET /dist/audioplayer.dd92c1010d87279d6d61.js?300585bb74d83dc020e4d6f HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: application/x-javascript
content-length: 35632
last-modified: Wed, 23 Nov 2022 15:33:42 GMT
etag: "637e3d56-8b30"
content-encoding: br
expires: Mon, 28 Nov 2022 02:50:17 GMT
cache-control: max-age=345600
x-frontend: front226205
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/web/ui_common.6ec3b5fbd39d37b27575.js?e76485d6654f5bc9f89f9651b0fed7cd
200 OK 21 kB URL HTTP/2 st.vk.com/dist/web/ui_common.6ec3b5fbd39d37b27575.js?e76485d6654f5bc9f89f9651b0fed7cd
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Hash cc4e276391281c4063fc3a6578d28a5d
218ab4ee7b401dbb521ca0b886b3660b720400dd
fd32b546b3708fe0d703248ca1e2843469145be7ee75bb37a98cdd85e65d5c54
GET /dist/web/ui_common.6ec3b5fbd39d37b27575.js?e76485d6654f5bc9f89f9651b0fed7cd HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: application/x-javascript
content-length: 21272
last-modified: Wed, 23 Nov 2022 09:59:31 GMT
etag: "637def03-5318"
content-encoding: br
expires: Mon, 28 Nov 2022 02:50:17 GMT
cache-control: max-age=345600
x-frontend: front226205
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/css/al/fonts_cnt.2ed2de7040c5dd011574.css
200 OK 360 kB URL HTTP/2 st.vk.com/css/al/fonts_cnt.2ed2de7040c5dd011574.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Size 360 kB (359450 bytes)
Hash f75a9a4d043d53dd8646e9716629ed1b
ddf6f46e45f78158e015bf41e62034249f62cd9d
9a09104f3720485bcf81733f44e4ea86f4fc681365a73c68edc9888c23624dc6
GET /css/al/fonts_cnt.2ed2de7040c5dd011574.css HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: text/css
content-length: 359450
last-modified: Wed, 12 Oct 2022 10:52:08 GMT
etag: "63469c58-57c1a"
content-encoding: br
expires: Mon, 28 Nov 2022 02:50:17 GMT
cache-control: max-age=345600
x-frontend: front226205
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/web/audioplayer.be35dbb88551ccbfb226.js?d01a0e6a34209b18a90c379cadcb74f2
200 OK 2.1 kB URL HTTP/2 st.vk.com/dist/web/audioplayer.be35dbb88551ccbfb226.js?d01a0e6a34209b18a90c379cadcb74f2
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (4473), with no line terminators
Hash a7058e7a2a6c7bde39b367401a52e1f0
63bc65c0d6652df8d0e81c204b452209cbe6ecdb
91a3b82aace14648aef8c44006e7e9ed3a84be2d33ea0ad722e084f1519af4dd
GET /dist/web/audioplayer.be35dbb88551ccbfb226.js?d01a0e6a34209b18a90c379cadcb74f2 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: application/x-javascript
content-length: 2077
last-modified: Wed, 23 Nov 2022 09:59:31 GMT
etag: "637def03-81d"
content-encoding: br
expires: Mon, 28 Nov 2022 02:50:17 GMT
cache-control: max-age=345600
x-frontend: front226205
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/css/al/widget_community.d04e156c74bcaae7f546.css
200 OK 2.4 kB URL HTTP/2 st.vk.com/css/al/widget_community.d04e156c74bcaae7f546.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (13140)
Hash a3024ccfd04a8181a432cb6fbdc0a7dc
9a40cb6747d80d6594c3349c77ecc2f70e0a216f
e80372326326d19e651c982fab9ce1558875670b288fe9caff4ca5e0320c1286
GET /css/al/widget_community.d04e156c74bcaae7f546.css HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: text/css
content-length: 2407
last-modified: Wed, 12 Oct 2022 10:52:08 GMT
etag: "63469c58-967"
content-encoding: br
expires: Mon, 28 Nov 2022 02:50:17 GMT
cache-control: max-age=345600
x-frontend: front226205
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/web/likes.9bdf0febe4d3e7a80bc9.js?cefd8b8f8feee3dbd452e8eb707abfeb
200 OK 7.2 kB URL HTTP/2 st.vk.com/dist/web/likes.9bdf0febe4d3e7a80bc9.js?cefd8b8f8feee3dbd452e8eb707abfeb
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (19066), with no line terminators
Hash b77380cd0bdb98b0bb8a084a97af851b
8af2586038ce64367ae7d3004f8896e2af952447
53b7c6403efa2ca4cec16651410d3a4ebb59927586cada169134496f49cf7292
GET /dist/web/likes.9bdf0febe4d3e7a80bc9.js?cefd8b8f8feee3dbd452e8eb707abfeb HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: application/x-javascript
content-length: 7200
last-modified: Wed, 23 Nov 2022 09:59:31 GMT
etag: "637def03-1c20"
content-encoding: br
expires: Mon, 28 Nov 2022 02:50:17 GMT
cache-control: max-age=345600
x-frontend: front226205
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/css/al/base.4d336a216a9f1d8bfb22.css
200 OK 19 kB URL HTTP/2 st.vk.com/css/al/base.4d336a216a9f1d8bfb22.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Hash 162006248dcb0aa7e01ef85492e5e17f
f1422e7faccf8da228076f25cec8b35d80c8d778
61b37a00a6c6d0dff644329d826320f8d7af464a2e0dad5baebfae9ecdd6ee30
GET /css/al/base.4d336a216a9f1d8bfb22.css HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: text/css
content-length: 19282
last-modified: Tue, 15 Nov 2022 08:24:47 GMT
etag: "63734ccf-4b52"
content-encoding: br
expires: Mon, 28 Nov 2022 02:50:17 GMT
cache-control: max-age=345600
x-frontend: front226205
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
counter.24log.ru/buttons/25/bg25-10_1.gif
200 OK 178 B URL HTTP/1.1 counter.24log.ru/buttons/25/bg25-10_1.gif
IP
File type GIF image data, version 89a, 38 x 10\012- data
Hash 6f5b5b79f8cacef6d180d9fbb06754f2
2f0988f20997fa4ac4c77d301eaa2682ff35dca9
dc3643a5bc45c606a7b2621e917d53753f0ed3416a6d4c55e9c1ff07dad4cfc2
GET /buttons/25/bg25-10_1.gif HTTP/1.1
Host: counter.24log.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ogorodniky.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: image/gif
Content-Length: 178
Last-Modified: Wed, 17 Aug 2011 20:03:22 GMT
Connection: keep-alive
ETag: "4e4c1e8a-b2"
Accept-Ranges: bytes
counter.24log.ru/buttons/25/bg25-10_3.gif
200 OK 150 B URL HTTP/1.1 counter.24log.ru/buttons/25/bg25-10_3.gif
IP
File type GIF image data, version 89a, 50 x 10\012- data
Hash 9b4866409a4c3e75c230b165465e722f
db682000092bbeeb5d2d78864d36b17ef4272529
77bfa49e794e61f3c155aecba91ddf8d080a4732a355b6a61c63b7340fc0cc81
GET /buttons/25/bg25-10_3.gif HTTP/1.1
Host: counter.24log.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ogorodniky.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 24 Nov 2022 02:50:17 GMT
Content-Type: image/gif
Content-Length: 150
Last-Modified: Wed, 17 Aug 2011 20:03:26 GMT
Connection: keep-alive
ETag: "4e4c1e8e-96"
Accept-Ranges: bytes
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1119%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1119%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1119%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A64060%2C%22ev%22%3A%22loadFree%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A64060%2C%22ev%22%3A%22loadFree%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A64060%2C%22ev%22%3A%22loadFree%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/pxl/1?dp=16&id=24074.64060.161334013.0.0.0&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/pxl/1?dp=16&id=24074.64060.161334013.0.0.0&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/1?dp=16&id=24074.64060.161334013.0.0.0&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A64060%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A64060%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A64060%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235296%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235296%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235296%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235296%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235296%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235296%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/pxl/1?dp=16&id=24074.235296.161334023.0.0.0&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/pxl/1?dp=16&id=24074.235296.161334023.0.0.0&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/1?dp=16&id=24074.235296.161334023.0.0.0&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235296%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235296%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235296%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235297%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235297%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235297%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235297%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235297%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235297%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/pxl/1?dp=16&id=24074.235297.161334033.0.0.0&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/pxl/1?dp=16&id=24074.235297.161334033.0.0.0&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/1?dp=16&id=24074.235297.161334033.0.0.0&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
st.vk.com/dist/common.e134f572677e23ce0d04.js?300b6f084c7510604302829
200 OK 43 B URL HTTP/2 st.vk.com/dist/common.e134f572677e23ce0d04.js?300b6f084c7510604302829
IP
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /dist/common.e134f572677e23ce0d04.js?300b6f084c7510604302829 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: application/x-javascript
content-length: 228260
last-modified: Wed, 23 Nov 2022 15:33:42 GMT
etag: "637e3d56-37ba4"
content-encoding: br
expires: Mon, 28 Nov 2022 02:50:17 GMT
cache-control: max-age=345600
x-frontend: front226205
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235297%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235297%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235297%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
counter.24log.ru/counter?id=145381&t=25&st=10&r=&u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html&s=1280x1024x24&rnd=0.31118297706793974
307 Temporary Redirect 32 B URL HTTP/1.1 counter.24log.ru/counter?id=145381&t=25&st=10&r=&u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html&s=1280x1024x24&rnd=0.31118297706793974
IP
File type HTML document, ASCII text
Hash 3e9c09a8c5a87f266e047a596f48578c
07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
GET /counter?id=145381&t=25&st=10&r=&u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html&s=1280x1024x24&rnd=0.31118297706793974 HTTP/1.1
Host: counter.24log.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ogorodniky.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: text/html; charset=ISO-8859-1
Content-Length: 32
Connection: keep-alive
X-Powered-By: PHP/5.6.40
Location: http://counter.24log.ru/counter?redir=1&id=145381&t=25&st=10&r=&u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html&s=1280x1024x24&rnd=0.31118297706793974
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: VSID=f078550e5b3f88de1cf22795b727a06a%2F89b00177%2F1832abb6%2F4; expires=Sat, 02-Oct-2032 02:50:18 GMT; Max-Age=311040000; path=/; domain=24log.ru
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 49508c4a0acb68bd3694a60dfd757505
c9103ff5c366c5ba71c02a5a8da7857e4f1ad371
587b0735c3a9e07d72071b55d3a822ad053fd9540aa9032759ffb3286b5fcdca
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "587B0735C3A9E07D72071B55D3A822AD053FD9540AA9032759FFB3286B5FCDCA"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16129
Expires: Thu, 24 Nov 2022 07:19:07 GMT
Date: Thu, 24 Nov 2022 02:50:18 GMT
Connection: keep-alive
cleverjump.org/hit/get-uid.php
200 OK 0 B URL HTTP/1.1 cleverjump.org/hit/get-uid.php
IP
ASN #49981 WorldStream B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /hit/get-uid.php HTTP/1.1
Host: cleverjump.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.ogorodniky.ru
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
Access-Control-Allow-Origin: http://www.ogorodniky.ru
Access-Control-Allow-Credentials: true
ssp-rtb.sape.ru/data/?callback=sapeRTB_637edbe9d_97138420&srtbid=24074&scids=161334013,161334023,161334033&sx=1268&sy=939&ref=&u=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&allimps=1&fl=0&v=3&tz=%2B00%3A00
200 OK 50 B URL HTTP/1.1 ssp-rtb.sape.ru/data/?callback=sapeRTB_637edbe9d_97138420&srtbid=24074&scids=161334013,161334023,161334033&sx=1268&sy=939&ref=&u=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&allimps=1&fl=0&v=3&tz=%2B00%3A00
IP
File type ASCII text, with no line terminators
Hash f0f61d2127187c1606d01b6ec37cec4b
105ef35ad2d78b0bd847a3db55417d2ffd70a491
8bb3c59985e03dda4b45390f456cfd6845d192340c127062c867c47dee302916
GET /data/?callback=sapeRTB_637edbe9d_97138420&srtbid=24074&scids=161334013,161334023,161334033&sx=1268&sy=939&ref=&u=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&allimps=1&fl=0&v=3&tz=%2B00%3A00 HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 50
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Content-Encoding: gzip
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=CkICQ2N+2+pn4AAbWXiRAlg+UmetN6Fl9kcbKu1Upa0Ulkga; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
dm-eu.hybrid.ai/match?id=106&vid=0100007FE9DB7E6378021E2C025FDB49
204 No Content 0 B URL HTTP/2 dm-eu.hybrid.ai/match?id=106&vid=0100007FE9DB7E6378021E2C025FDB49
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?id=106&vid=0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: dm-eu.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Thu, 24 Nov 2022 02:50:18 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
set-cookie: vid=4319f3054582bc198140; expires=Fri, 24 Nov 2023 02:50:16 GMT; domain=.hybrid.ai; path=/; samesite=none
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 522
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: Hybrid Web Server
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a3ed658c3d85e20f659e76f5229ef40e
9fea32af015c5b155ddc7cdbcc770769522e57c9
230b8b1f3fe15eefac71f5df6e783bc9d9b327ea8db4db7588caab099759006c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "230B8B1F3FE15EEFAC71F5DF6E783BC9D9B327EA8DB4DB7588CAAB099759006C"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18611
Expires: Thu, 24 Nov 2022 08:00:29 GMT
Date: Thu, 24 Nov 2022 02:50:18 GMT
Connection: keep-alive
ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
302 Moved Temporarily 142 B URL HTTP/1.1 ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/match?dp=14&euid=4002420AEADB7E631B00012D022D7358
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=CkICQGN+2+otAQAbWHMtAsvxMFjZ5e6bswq8EmpRmEjjFi4H; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
ocsp.digicert.com/
200 OK 280 B IP
Hash a10319ff1a79756d69002667de431da1
8ce88a2567dfd4278654aeca12ba50d9f7240da8
47785816790a17c39684d11f8ec46b3b278102626c549e4c7a3e9e0c7373c644
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2408
Cache-Control: max-age=134813
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 02:50:18 GMT
Etag: "637e3e1f-118"
Expires: Fri, 25 Nov 2022 16:17:11 GMT
Last-Modified: Wed, 23 Nov 2022 15:37:03 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 280
sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0100007FE9DB7E6378021E2C025FDB49
302 Found 0 B URL HTTP/2 sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0100007FE9DB7E6378021E2C025FDB49
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: sync.1dmp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Thu, 24 Nov 2022 02:50:18 GMT
content-length: 0
expires: 0
cache-control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
set-cookie: uid=bb01e150-6ba2-11ed-8ff0-f832e4719dd9; Version=1; Path=/; Domain=.1dmp.io; Expires=Fri, 24 Nov 2023 02:50:18 GMT; SameSite=None; Secure
uid-legacy=bb01e150-6ba2-11ed-8ff0-f832e4719dd9; Version=1; Path=/; Domain=.1dmp.io; Expires=Fri, 24 Nov 2023 02:50:18 GMT
location: /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0100007FE9DB7E6378021E2C025FDB49&cs=1
X-Firefox-Spdy: h2
www.acint.net/mc/?dp=10&tc=1
200 OK 1.5 kB URL HTTP/2 www.acint.net/mc/?dp=10&tc=1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash a6a1214b3cc5e4cfb17b998ee9b62771
f25fc38a9a7c3b7804d192bb8ae969a04a454c87
ce7430f12b9a92983ee9b21a2a349d3afaa4b33a76a53fd61e2d8d4760617a91
GET /mc/?dp=10&tc=1 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ogorodniky.ru/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: text/html
set-cookie: cSyncDp7v2=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp14v3=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp17=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp32=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp45v3=1669258217; expires=Fri, 25-Nov-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp53=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp54v2=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp62=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp67v2=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp68=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp71=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp77=1669258217; expires=Thu, 08-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp84=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp85=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp95v3=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp101=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp104v2=1669258217; expires=Thu, 08-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp107=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp110=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp111v2=1669258217; expires=Thu, 08-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp112v2=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp125v2=1669258217; expires=Fri, 09-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp126=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp127=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp129=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp136v2=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp138=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp144=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp146=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp148=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp149v2=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp151=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp178=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp179=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp186=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp221=1669258217; expires=Sat, 24-Dec-22 02:50:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
content-encoding: gzip
X-Firefox-Spdy: h2
cleverjump.org/hit?z0;s1280*1024*24;fil0v3pUgQpVbY7sUr0lHVct0u3ybhX;cshb2;r;uhttp%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html;h%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.;0.2490040036092902
200 OK 0 B URL HTTP/1.1 cleverjump.org/hit?z0;s1280*1024*24;fil0v3pUgQpVbY7sUr0lHVct0u3ybhX;cshb2;r;uhttp%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html;h%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.;0.2490040036092902
IP
ASN #49981 WorldStream B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hit?z0;s1280*1024*24;fil0v3pUgQpVbY7sUr0lHVct0u3ybhX;cshb2;r;uhttp%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html;h%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.;0.2490040036092902 HTTP/1.1
Host: cleverjump.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
P3P: CP=CleverJump
Set-Cookie: _cjuh=q0b5ac4QRHzHtq6b0DgqQPARlpxlgE; expires=Fri, 24-Nov-2023 02:50:18 GMT; Max-Age=31536000; path=/hit; httponly; SameSite=None; Secure
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 025bb36f064193305cd5634d2809fab2
ecb5b196de564edcfb93427ba45338df6cc3a303
2c80b98eb64e6150f0f810784f30395fc16d1c842c5f118a77ceb766c289a938
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2C80B98EB64E6150F0F810784F30395FC16D1C842C5F118A77CEB766C289A938"
Last-Modified: Mon, 21 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2570
Expires: Thu, 24 Nov 2022 03:33:08 GMT
Date: Thu, 24 Nov 2022 02:50:18 GMT
Connection: keep-alive
sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0100007FE9DB7E6378021E2C025FDB49&cs=1
200 OK 35 B URL HTTP/2 sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0100007FE9DB7E6378021E2C025FDB49&cs=1
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0100007FE9DB7E6378021E2C025FDB49&cs=1 HTTP/1.1
Host: sync.1dmp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: uid=bb01e150-6ba2-11ed-8ff0-f832e4719dd9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 35
expires: 0
cache-control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
set-cookie: uid=bb01e150-6ba2-11ed-8ff0-f832e4719dd9; Version=1; Path=/; Domain=.1dmp.io; Expires=Fri, 24 Nov 2023 02:50:18 GMT; SameSite=None; Secure
uid-legacy=bb01e150-6ba2-11ed-8ff0-f832e4719dd9; Version=1; Path=/; Domain=.1dmp.io; Expires=Fri, 24 Nov 2023 02:50:18 GMT
X-Firefox-Spdy: h2
vk.com/images/camera_50.png
200 OK 570 B URL HTTP/2 vk.com/images/camera_50.png
IP
File type PNG image data, 50 x 50, 8-bit/color RGB, non-interlaced\012- data
Hash b17a9dcdcc1e5028061e3c769a736e0d
55a0cff39baf55044b77888f5503925319279b38
e3b9c102be54a21fc534271c42ff116be61325240fac9649023cc6adf41d8e72
GET /images/camera_50.png HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/widget_community.php?app=0&width=180px&_ver=1&gid=47871130&mode=0&color1=&color2=&color3=&class_name=&height=290&url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&referrer=&title=%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&184a78b080d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/png
content-length: 570
last-modified: Tue, 22 Sep 2020 20:29:55 GMT
etag: "5f6a5ec3-23a"
expires: Thu, 01 Dec 2022 02:50:18 GMT
cache-control: max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2
stat.adlabs.ru/merge_gpsid/?sid=50&id=0100007FE9DB7E6378021E2C025FDB49
302 Found 0 B URL HTTP/2 stat.adlabs.ru/merge_gpsid/?sid=50&id=0100007FE9DB7E6378021E2C025FDB49
IP
ASN #201009 Centre of server systems Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /merge_gpsid/?sid=50&id=0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: stat.adlabs.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Thu, 24 Nov 2022 02:36:31 GMT
content-length: 0
location: //adlmerge.com/merge_gpsid/?sid=50&id=0100007FE9DB7E6378021E2C025FDB49
X-Firefox-Spdy: h2
st.vk.com/images/icons/post_widget.png
200 OK 981 B URL HTTP/2 st.vk.com/images/icons/post_widget.png
IP
File type PNG image data, 16 x 106, 8-bit/color RGBA, non-interlaced\012- data
Hash 53c541440c1c235dc990caa768db5146
72135fa7e27edd2f2ff46335e0fe47ce8eb08cc1
33c22d62b4d9b60d8ac8b010f4e19da452eb17484e66c581c5f4184dd8152d90
GET /images/icons/post_widget.png HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.vk.com/css/al/lite.767433f9d8f76d21bc7a.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/png
content-length: 981
last-modified: Tue, 22 Sep 2020 20:29:56 GMT
etag: "5f6a5ec4-3d5"
expires: Mon, 28 Nov 2022 02:50:18 GMT
cache-control: max-age=345600
x-frontend: front226205
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 7da30dd8180169d33dc538aca5b77dc9
2a870e07bc0c530f7e0cd10d19a16ea31046942e
b9a9dc966bdab7c9f10229a8a83611e33c2a4f9d53d12097f9ce994887b06116
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Mon, 28 Nov 2022 00:28:16 GMT
ETag: "2a870e07bc0c530f7e0cd10d19a16ea31046942e"
Last-Modified: Thu, 24 Nov 2022 00:28:17 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2601
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed619d914b4fa-OSL
sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
302 Found 0 B URL HTTP/2 sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0 HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: session_tptc=1669258218472
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/png
content-length: 0
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: user_id=af57d65b-b11a-4f2b-80bc-69216ae949ad;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
user_id-legacy=af57d65b-b11a-4f2b-80bc-69216ae949ad;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
location: https://www.acint.net/match?dp=71&euid=af57d65b-b11a-4f2b-80bc-69216ae949ad
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
sync.republer.com/match?dsp=sape
204 No Content 0 B URL HTTP/2 sync.republer.com/match?dsp=sape
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?dsp=sape HTTP/1.1
Host: sync.republer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Thu, 24 Nov 2022 02:50:18 GMT
strict-transport-security: max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8762919ef00d402c1e6a669addf24c59
d4f882a5640246b9b3fe2aebd692587cfefc6404
a096d053d7a0c785ff6437b1ffe70ad0ea417ed813bc906d60be92a7dd56213d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A096D053D7A0C785FF6437B1FFE70AD0EA417ED813BC906D60BE92A7DD56213D"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15543
Expires: Thu, 24 Nov 2022 07:09:21 GMT
Date: Thu, 24 Nov 2022 02:50:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 842e00a9ac2763110de6c619929b45d8
bb96737123608fe32100ec99c62b2af3e2a58098
81e0c993c22a10fe183292248959ed8a28bfc42111d8d9419bf5b747b40943e1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "81E0C993C22A10FE183292248959ED8A28BFC42111D8D9419BF5B747B40943E1"
Last-Modified: Mon, 21 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16106
Expires: Thu, 24 Nov 2022 07:18:44 GMT
Date: Thu, 24 Nov 2022 02:50:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 774a6ca238640d7456d09523e90eb0b0
e73722136f436c9d1600de6c8886de678aa7cc49
18df86dabed81e28e514ea2078d10d7bb854ea3eb0446f445659e107da50f8c1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18DF86DABED81E28E514EA2078D10D7BB854EA3EB0446F445659E107DA50F8C1"
Last-Modified: Tue, 22 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6825
Expires: Thu, 24 Nov 2022 04:44:03 GMT
Date: Thu, 24 Nov 2022 02:50:18 GMT
Connection: keep-alive
a.utraff.com/sync?ssp=sape
204 No Content 0 B URL HTTP/2 a.utraff.com/sync?ssp=sape
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?ssp=sape HTTP/1.1
Host: a.utraff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: text/plain
set-cookie: preutid=1; Expires=Sat, 24 Dec 2022 05:50:18 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/
preutid=1; Expires=Sat, 24 Dec 2022 05:50:18 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-expose-headers: Content-Length,Content-Range
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9rA%2F5%2FguEU3FTLQ2j7JLEJYEiDVnreMCcvAxGZ4rwI7CRvmCV1GbJHksuXUyWUx9uqnM2UG07Bhnw%2FVCzA9I2K9BeKjCk7ceyTKV0nqJJ5h2%2F%2F8Xq1HMMEyOoFo%2Biqg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76eed6198b56b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.acint.net/pxl/3?dp=16&id=24074.64060.161334013.0.0.0&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/pxl/3?dp=16&id=24074.64060.161334013.0.0.0&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/3?dp=16&id=24074.64060.161334013.0.0.0&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D; cSyncDp7v2=1669258217; cSyncDp14v3=1669258217; cSyncDp17=1669258217; cSyncDp32=1669258217; cSyncDp45v3=1669258217; cSyncDp53=1669258217; cSyncDp54v2=1669258217; cSyncDp62=1669258217; cSyncDp67v2=1669258217; cSyncDp68=1669258217; cSyncDp71=1669258217; cSyncDp77=1669258217; cSyncDp84=1669258217; cSyncDp85=1669258217; cSyncDp95v3=1669258217; cSyncDp101=1669258217; cSyncDp104v2=1669258217; cSyncDp107=1669258217; cSyncDp110=1669258217; cSyncDp111v2=1669258217; cSyncDp112v2=1669258217; cSyncDp125v2=1669258217; cSyncDp126=1669258217; cSyncDp127=1669258217; cSyncDp129=1669258217; cSyncDp136v2=1669258217; cSyncDp138=1669258217; cSyncDp144=1669258217; cSyncDp146=1669258217; cSyncDp148=1669258217; cSyncDp149v2=1669258217; cSyncDp151=1669258217; cSyncDp178=1669258217; cSyncDp179=1669258217; cSyncDp186=1669258217; cSyncDp221=1669258217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.dmp.otm-r.com/match/sape?id=0100007FE9DB7E6378021E2C025FDB49
204 No Content 0 B URL HTTP/2 sync.dmp.otm-r.com/match/sape?id=0100007FE9DB7E6378021E2C025FDB49
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.17.0
date: Thu, 24 Nov 2022 02:50:18 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A64060%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A64060%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A64060%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D; cSyncDp7v2=1669258217; cSyncDp14v3=1669258217; cSyncDp17=1669258217; cSyncDp32=1669258217; cSyncDp45v3=1669258217; cSyncDp53=1669258217; cSyncDp54v2=1669258217; cSyncDp62=1669258217; cSyncDp67v2=1669258217; cSyncDp68=1669258217; cSyncDp71=1669258217; cSyncDp77=1669258217; cSyncDp84=1669258217; cSyncDp85=1669258217; cSyncDp95v3=1669258217; cSyncDp101=1669258217; cSyncDp104v2=1669258217; cSyncDp107=1669258217; cSyncDp110=1669258217; cSyncDp111v2=1669258217; cSyncDp112v2=1669258217; cSyncDp125v2=1669258217; cSyncDp126=1669258217; cSyncDp127=1669258217; cSyncDp129=1669258217; cSyncDp136v2=1669258217; cSyncDp138=1669258217; cSyncDp144=1669258217; cSyncDp146=1669258217; cSyncDp148=1669258217; cSyncDp149v2=1669258217; cSyncDp151=1669258217; cSyncDp178=1669258217; cSyncDp179=1669258217; cSyncDp186=1669258217; cSyncDp221=1669258217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A64060%2C%22ev%22%3A%22stub%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A64060%2C%22ev%22%3A%22stub%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A64060%2C%22ev%22%3A%22stub%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D; cSyncDp7v2=1669258217; cSyncDp14v3=1669258217; cSyncDp17=1669258217; cSyncDp32=1669258217; cSyncDp45v3=1669258217; cSyncDp53=1669258217; cSyncDp54v2=1669258217; cSyncDp62=1669258217; cSyncDp67v2=1669258217; cSyncDp68=1669258217; cSyncDp71=1669258217; cSyncDp77=1669258217; cSyncDp84=1669258217; cSyncDp85=1669258217; cSyncDp95v3=1669258217; cSyncDp101=1669258217; cSyncDp104v2=1669258217; cSyncDp107=1669258217; cSyncDp110=1669258217; cSyncDp111v2=1669258217; cSyncDp112v2=1669258217; cSyncDp125v2=1669258217; cSyncDp126=1669258217; cSyncDp127=1669258217; cSyncDp129=1669258217; cSyncDp136v2=1669258217; cSyncDp138=1669258217; cSyncDp144=1669258217; cSyncDp146=1669258217; cSyncDp148=1669258217; cSyncDp149v2=1669258217; cSyncDp151=1669258217; cSyncDp178=1669258217; cSyncDp179=1669258217; cSyncDp186=1669258217; cSyncDp221=1669258217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c730a692a408e87f683efed163ce458c
5c1b063ff7d612d63c72b48760a8927c73f6ffc2
1078e155af59d0c97e5293562e26b3f24bc5bd295581a905643ec9a73021e40f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1078E155AF59D0C97E5293562E26B3F24BC5BD295581A905643EC9A73021E40F"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8894
Expires: Thu, 24 Nov 2022 05:18:32 GMT
Date: Thu, 24 Nov 2022 02:50:18 GMT
Connection: keep-alive
counter.24log.ru/counter?redir=1&id=145381&t=25&st=10&r=&u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html&s=1280x1024x24&rnd=0.31118297706793974
301 Moved Permanently 162 B URL HTTP/1.1 counter.24log.ru/counter?redir=1&id=145381&t=25&st=10&r=&u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html&s=1280x1024x24&rnd=0.31118297706793974
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /counter?redir=1&id=145381&t=25&st=10&r=&u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html&s=1280x1024x24&rnd=0.31118297706793974 HTTP/1.1
Host: counter.24log.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.ogorodniky.ru/
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://counter.24log.ru/counter?redir=1&id=145381&t=25&st=10&r=&u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html&s=1280x1024x24&rnd=0.31118297706793974
s.uuidksinc.net/match/396/?remote_uid=0100007FE9DB7E6378021E2C025FDB49
302 Found 0 B URL HTTP/2 s.uuidksinc.net/match/396/?remote_uid=0100007FE9DB7E6378021E2C025FDB49
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/396/?remote_uid=0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: s.uuidksinc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.19.0
date: Thu, 24 Nov 2022 02:50:18 GMT
content-length: 0
location: https://www.acint.net/match?dp=127&euid=j666LOQDu7NtkpRuYgfz
set-cookie: jcsuuid=j666LOQDu7NtkpRuYgfz; expires=Fri, 24 Nov 2023 02:50:18 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/match?dp=71&euid=af57d65b-b11a-4f2b-80bc-69216ae949ad
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=71&euid=af57d65b-b11a-4f2b-80bc-69216ae949ad
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=71&euid=af57d65b-b11a-4f2b-80bc-69216ae949ad HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D; cSyncDp7v2=1669258217; cSyncDp14v3=1669258217; cSyncDp17=1669258217; cSyncDp32=1669258217; cSyncDp45v3=1669258217; cSyncDp53=1669258217; cSyncDp54v2=1669258217; cSyncDp62=1669258217; cSyncDp67v2=1669258217; cSyncDp68=1669258217; cSyncDp71=1669258217; cSyncDp77=1669258217; cSyncDp84=1669258217; cSyncDp85=1669258217; cSyncDp95v3=1669258217; cSyncDp101=1669258217; cSyncDp104v2=1669258217; cSyncDp107=1669258217; cSyncDp110=1669258217; cSyncDp111v2=1669258217; cSyncDp112v2=1669258217; cSyncDp125v2=1669258217; cSyncDp126=1669258217; cSyncDp127=1669258217; cSyncDp129=1669258217; cSyncDp136v2=1669258217; cSyncDp138=1669258217; cSyncDp144=1669258217; cSyncDp146=1669258217; cSyncDp148=1669258217; cSyncDp149v2=1669258217; cSyncDp151=1669258217; cSyncDp178=1669258217; cSyncDp179=1669258217; cSyncDp186=1669258217; cSyncDp221=1669258217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sap1&uid=0100007FE9DB7E6378021E2C025FDB49
302 Moved Temporarily 0 B URL HTTP/1.1 sync.bumlam.com/?src=sap1&uid=0100007FE9DB7E6378021E2C025FDB49
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&uid=0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiRiYjE1NjYxMi02YmEyLTExZWQtYWIxNS0wMDI1OTBjODI0Mzc*; Path=/; Expires=Wed, 19 Nov 2042 02:50:18 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync.bumlam.com/?src=sap1&s_data=CAIQARjqt_ubBmIgMDEwMDAwN0ZFOURCN0U2Mzc4MDIxRTJDMDI1RkRCNDmiARC7FWYSa6IR7asVACWQyCQ3
ETag: bb156612-6ba2-11ed-ab15-002590c82437
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
www.acint.net/pxl/3?dp=16&id=24074.235296.161334023.0.0.0&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/pxl/3?dp=16&id=24074.235296.161334023.0.0.0&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/3?dp=16&id=24074.235296.161334023.0.0.0&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D; cSyncDp7v2=1669258217; cSyncDp14v3=1669258217; cSyncDp17=1669258217; cSyncDp32=1669258217; cSyncDp45v3=1669258217; cSyncDp53=1669258217; cSyncDp54v2=1669258217; cSyncDp62=1669258217; cSyncDp67v2=1669258217; cSyncDp68=1669258217; cSyncDp71=1669258217; cSyncDp77=1669258217; cSyncDp84=1669258217; cSyncDp85=1669258217; cSyncDp95v3=1669258217; cSyncDp101=1669258217; cSyncDp104v2=1669258217; cSyncDp107=1669258217; cSyncDp110=1669258217; cSyncDp111v2=1669258217; cSyncDp112v2=1669258217; cSyncDp125v2=1669258217; cSyncDp126=1669258217; cSyncDp127=1669258217; cSyncDp129=1669258217; cSyncDp136v2=1669258217; cSyncDp138=1669258217; cSyncDp144=1669258217; cSyncDp146=1669258217; cSyncDp148=1669258217; cSyncDp149v2=1669258217; cSyncDp151=1669258217; cSyncDp178=1669258217; cSyncDp179=1669258217; cSyncDp186=1669258217; cSyncDp221=1669258217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
302 Found 0 B URL HTTP/1.1 ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D HTTP/1.1
Host: ssp.bestssp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.16.1
Date: Thu, 24 Nov 2022 02:50:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.acint.net/match?dp=95&euid=ZQGSMPEF
Set-Cookie: uid=ZQGSMPEF; Expires=Thu, 24 Nov 2032 00:00:00 GMT; mf2=1; Expires=Sat, 24 Dec 2022 00:00:00 GMT;
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235296%2C%22ev%22%3A%22stub%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235296%2C%22ev%22%3A%22stub%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235296%2C%22ev%22%3A%22stub%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D; cSyncDp7v2=1669258217; cSyncDp14v3=1669258217; cSyncDp17=1669258217; cSyncDp32=1669258217; cSyncDp45v3=1669258217; cSyncDp53=1669258217; cSyncDp54v2=1669258217; cSyncDp62=1669258217; cSyncDp67v2=1669258217; cSyncDp68=1669258217; cSyncDp71=1669258217; cSyncDp77=1669258217; cSyncDp84=1669258217; cSyncDp85=1669258217; cSyncDp95v3=1669258217; cSyncDp101=1669258217; cSyncDp104v2=1669258217; cSyncDp107=1669258217; cSyncDp110=1669258217; cSyncDp111v2=1669258217; cSyncDp112v2=1669258217; cSyncDp125v2=1669258217; cSyncDp126=1669258217; cSyncDp127=1669258217; cSyncDp129=1669258217; cSyncDp136v2=1669258217; cSyncDp138=1669258217; cSyncDp144=1669258217; cSyncDp146=1669258217; cSyncDp148=1669258217; cSyncDp149v2=1669258217; cSyncDp151=1669258217; cSyncDp178=1669258217; cSyncDp179=1669258217; cSyncDp186=1669258217; cSyncDp221=1669258217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235296%2C%22ev%22%3A%22vis100%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235296%2C%22ev%22%3A%22vis100%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235296%2C%22ev%22%3A%22vis100%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D; cSyncDp7v2=1669258217; cSyncDp14v3=1669258217; cSyncDp17=1669258217; cSyncDp32=1669258217; cSyncDp45v3=1669258217; cSyncDp53=1669258217; cSyncDp54v2=1669258217; cSyncDp62=1669258217; cSyncDp67v2=1669258217; cSyncDp68=1669258217; cSyncDp71=1669258217; cSyncDp77=1669258217; cSyncDp84=1669258217; cSyncDp85=1669258217; cSyncDp95v3=1669258217; cSyncDp101=1669258217; cSyncDp104v2=1669258217; cSyncDp107=1669258217; cSyncDp110=1669258217; cSyncDp111v2=1669258217; cSyncDp112v2=1669258217; cSyncDp125v2=1669258217; cSyncDp126=1669258217; cSyncDp127=1669258217; cSyncDp129=1669258217; cSyncDp136v2=1669258217; cSyncDp138=1669258217; cSyncDp144=1669258217; cSyncDp146=1669258217; cSyncDp148=1669258217; cSyncDp149v2=1669258217; cSyncDp151=1669258217; cSyncDp178=1669258217; cSyncDp179=1669258217; cSyncDp186=1669258217; cSyncDp221=1669258217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/pxl/3?dp=16&id=24074.235297.161334033.0.0.0&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/pxl/3?dp=16&id=24074.235297.161334033.0.0.0&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/3?dp=16&id=24074.235297.161334033.0.0.0&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D; cSyncDp7v2=1669258217; cSyncDp14v3=1669258217; cSyncDp17=1669258217; cSyncDp32=1669258217; cSyncDp45v3=1669258217; cSyncDp53=1669258217; cSyncDp54v2=1669258217; cSyncDp62=1669258217; cSyncDp67v2=1669258217; cSyncDp68=1669258217; cSyncDp71=1669258217; cSyncDp77=1669258217; cSyncDp84=1669258217; cSyncDp85=1669258217; cSyncDp95v3=1669258217; cSyncDp101=1669258217; cSyncDp104v2=1669258217; cSyncDp107=1669258217; cSyncDp110=1669258217; cSyncDp111v2=1669258217; cSyncDp112v2=1669258217; cSyncDp125v2=1669258217; cSyncDp126=1669258217; cSyncDp127=1669258217; cSyncDp129=1669258217; cSyncDp136v2=1669258217; cSyncDp138=1669258217; cSyncDp144=1669258217; cSyncDp146=1669258217; cSyncDp148=1669258217; cSyncDp149v2=1669258217; cSyncDp151=1669258217; cSyncDp178=1669258217; cSyncDp179=1669258217; cSyncDp186=1669258217; cSyncDp221=1669258217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235297%2C%22ev%22%3A%22stub%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235297%2C%22ev%22%3A%22stub%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235297%2C%22ev%22%3A%22stub%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D; cSyncDp7v2=1669258217; cSyncDp14v3=1669258217; cSyncDp17=1669258217; cSyncDp32=1669258217; cSyncDp45v3=1669258217; cSyncDp53=1669258217; cSyncDp54v2=1669258217; cSyncDp62=1669258217; cSyncDp67v2=1669258217; cSyncDp68=1669258217; cSyncDp71=1669258217; cSyncDp77=1669258217; cSyncDp84=1669258217; cSyncDp85=1669258217; cSyncDp95v3=1669258217; cSyncDp101=1669258217; cSyncDp104v2=1669258217; cSyncDp107=1669258217; cSyncDp110=1669258217; cSyncDp111v2=1669258217; cSyncDp112v2=1669258217; cSyncDp125v2=1669258217; cSyncDp126=1669258217; cSyncDp127=1669258217; cSyncDp129=1669258217; cSyncDp136v2=1669258217; cSyncDp138=1669258217; cSyncDp144=1669258217; cSyncDp146=1669258217; cSyncDp148=1669258217; cSyncDp149v2=1669258217; cSyncDp151=1669258217; cSyncDp178=1669258217; cSyncDp179=1669258217; cSyncDp186=1669258217; cSyncDp221=1669258217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235297%2C%22ev%22%3A%22vis100%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235297%2C%22ev%22%3A%22vis100%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A24074%2C%22sc%22%3A0%2C%22pl%22%3A235297%2C%22ev%22%3A%22vis100%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=637edbe9-5893-74xi-mzib-c84goot8ujqb&ref=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&r=1669258218 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D; cSyncDp7v2=1669258217; cSyncDp14v3=1669258217; cSyncDp17=1669258217; cSyncDp32=1669258217; cSyncDp45v3=1669258217; cSyncDp53=1669258217; cSyncDp54v2=1669258217; cSyncDp62=1669258217; cSyncDp67v2=1669258217; cSyncDp68=1669258217; cSyncDp71=1669258217; cSyncDp77=1669258217; cSyncDp84=1669258217; cSyncDp85=1669258217; cSyncDp95v3=1669258217; cSyncDp101=1669258217; cSyncDp104v2=1669258217; cSyncDp107=1669258217; cSyncDp110=1669258217; cSyncDp111v2=1669258217; cSyncDp112v2=1669258217; cSyncDp125v2=1669258217; cSyncDp126=1669258217; cSyncDp127=1669258217; cSyncDp129=1669258217; cSyncDp136v2=1669258217; cSyncDp138=1669258217; cSyncDp144=1669258217; cSyncDp146=1669258217; cSyncDp148=1669258217; cSyncDp149v2=1669258217; cSyncDp151=1669258217; cSyncDp178=1669258217; cSyncDp179=1669258217; cSyncDp186=1669258217; cSyncDp221=1669258217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ut.rktch.com/matchspm?pi=1000005&pui=0100007FE9DB7E6378021E2C025FDB49
302 Found 0 B URL HTTP/1.1 ut.rktch.com/matchspm?pi=1000005&pui=0100007FE9DB7E6378021E2C025FDB49
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /matchspm?pi=1000005&pui=0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: ut.rktch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Length: 0
Connection: keep-alive
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
Set-Cookie: b_uid=a7388f4d07a11886ec2c03e46277afa3b52f; Max-Age=2592000; Expires=Sat, 24 Dec 2022 02:50:18 GMT; Domain=rktch.com; Secure; SameSite=None
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Access-Control-Allow-Headers: Content-Type, Accept, Authorization
Access-Control-Allow-Credentials: true
ocsp.sectigo.com/
200 OK 471 B IP
Hash 005e2d2ab93b34abed96b20e3113c169
267fe944740b1a70b70f3aa77f4ad6f3013c7b12
d9075649a65b509a04a4f98b7ba81b569639ec2b929784f7b72cb3eb5bc993c5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 15:41:03 GMT
Expires: Tue, 29 Nov 2022 15:41:02 GMT
Etag: "267fe944740b1a70b70f3aa77f4ad6f3013c7b12"
Cache-Control: max-age=477643,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76eed619ce370b49-OSL
www.acint.net/match?dp=127&euid=j666LOQDu7NtkpRuYgfz
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=127&euid=j666LOQDu7NtkpRuYgfz
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=127&euid=j666LOQDu7NtkpRuYgfz HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D; cSyncDp7v2=1669258217; cSyncDp14v3=1669258217; cSyncDp17=1669258217; cSyncDp32=1669258217; cSyncDp45v3=1669258217; cSyncDp53=1669258217; cSyncDp54v2=1669258217; cSyncDp62=1669258217; cSyncDp67v2=1669258217; cSyncDp68=1669258217; cSyncDp71=1669258217; cSyncDp77=1669258217; cSyncDp84=1669258217; cSyncDp85=1669258217; cSyncDp95v3=1669258217; cSyncDp101=1669258217; cSyncDp104v2=1669258217; cSyncDp107=1669258217; cSyncDp110=1669258217; cSyncDp111v2=1669258217; cSyncDp112v2=1669258217; cSyncDp125v2=1669258217; cSyncDp126=1669258217; cSyncDp127=1669258217; cSyncDp129=1669258217; cSyncDp136v2=1669258217; cSyncDp138=1669258217; cSyncDp144=1669258217; cSyncDp146=1669258217; cSyncDp148=1669258217; cSyncDp149v2=1669258217; cSyncDp151=1669258217; cSyncDp178=1669258217; cSyncDp179=1669258217; cSyncDp186=1669258217; cSyncDp221=1669258217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/match?dp=95&euid=ZQGSMPEF
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=95&euid=ZQGSMPEF
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=95&euid=ZQGSMPEF HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D; cSyncDp7v2=1669258217; cSyncDp14v3=1669258217; cSyncDp17=1669258217; cSyncDp32=1669258217; cSyncDp45v3=1669258217; cSyncDp53=1669258217; cSyncDp54v2=1669258217; cSyncDp62=1669258217; cSyncDp67v2=1669258217; cSyncDp68=1669258217; cSyncDp71=1669258217; cSyncDp77=1669258217; cSyncDp84=1669258217; cSyncDp85=1669258217; cSyncDp95v3=1669258217; cSyncDp101=1669258217; cSyncDp104v2=1669258217; cSyncDp107=1669258217; cSyncDp110=1669258217; cSyncDp111v2=1669258217; cSyncDp112v2=1669258217; cSyncDp125v2=1669258217; cSyncDp126=1669258217; cSyncDp127=1669258217; cSyncDp129=1669258217; cSyncDp136v2=1669258217; cSyncDp138=1669258217; cSyncDp144=1669258217; cSyncDp146=1669258217; cSyncDp148=1669258217; cSyncDp149v2=1669258217; cSyncDp151=1669258217; cSyncDp178=1669258217; cSyncDp179=1669258217; cSyncDp186=1669258217; cSyncDp221=1669258217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
301 Moved Permanently 115 B URL HTTP/2 exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
IP
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text
Hash 859cda8209bf4bb305ea425267119972
2d505cdc0f97fb9fd0959954e838642401f631e1
82b599adfa6cc864de19f86af76b930be5d635699d79b86dce74fb0779b79281
GET /cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: text/html; charset=utf-8
content-length: 115
location: https://www.acint.net/match?dp=126&euid=d87dda22-3352-450a-5fe5-b116a7cfca0b
serverid: TODO
X-Firefox-Spdy: h2
www.acint.net/match?dp=129&euid=961sw0fwun
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=129&euid=961sw0fwun
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=129&euid=961sw0fwun HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D; cSyncDp7v2=1669258217; cSyncDp14v3=1669258217; cSyncDp17=1669258217; cSyncDp32=1669258217; cSyncDp45v3=1669258217; cSyncDp53=1669258217; cSyncDp54v2=1669258217; cSyncDp62=1669258217; cSyncDp67v2=1669258217; cSyncDp68=1669258217; cSyncDp71=1669258217; cSyncDp77=1669258217; cSyncDp84=1669258217; cSyncDp85=1669258217; cSyncDp95v3=1669258217; cSyncDp101=1669258217; cSyncDp104v2=1669258217; cSyncDp107=1669258217; cSyncDp110=1669258217; cSyncDp111v2=1669258217; cSyncDp112v2=1669258217; cSyncDp125v2=1669258217; cSyncDp126=1669258217; cSyncDp127=1669258217; cSyncDp129=1669258217; cSyncDp136v2=1669258217; cSyncDp138=1669258217; cSyncDp144=1669258217; cSyncDp146=1669258217; cSyncDp148=1669258217; cSyncDp149v2=1669258217; cSyncDp151=1669258217; cSyncDp178=1669258217; cSyncDp179=1669258217; cSyncDp186=1669258217; cSyncDp221=1669258217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
nr.bidderstack.com/sape/cm?user_id=0100007FE9DB7E6378021E2C025FDB49
200 OK 44 B URL HTTP/1.1 nr.bidderstack.com/sape/cm?user_id=0100007FE9DB7E6378021E2C025FDB49
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash f9d60352c70a2ba15616d1c9421f3844
e9abc8bea7721a4b6a50295850d13c515006a95c
82cb517a8f80c91dfcec543c6d140deb3baaf463ea9e77655475096eba7bc7d9
GET /sape/cm?user_id=0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: nr.bidderstack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: image/gif
Content-Length: 44
Connection: keep-alive
Set-Cookie: uid=5ae0da99-3a8d-480d-9e04-6f7906e025c9; domain=.bidderstack.com; path=/; expires=Fri, 24-Nov-2023 02:50:18 GMT;
Access-Control-Allow-Credentials: true
cleverjump.org/hit/get-uid.php
200 OK 30 B URL HTTP/1.1 cleverjump.org/hit/get-uid.php
IP
ASN #49981 WorldStream B.V.
File type ASCII text, with no line terminators
Hash 6fd7b58eeb918ceace14449f2c13f6a9
545b0a4f8a8aeaeff0fbc5c68be2de84c7bb07ba
699424158502f0013dc4926f83133f87d091b99599b667bfd973fe2e4afc7191
Analyzer Verdict Alert fortinet Malware
GET /hit/get-uid.php HTTP/1.1
Host: cleverjump.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.ogorodniky.ru
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Cookie: _cjuh=q0b5ac4QRHzHtq6b0DgqQPARlpxlgE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
Access-Control-Allow-Origin: http://www.ogorodniky.ru
Access-Control-Allow-Credentials: true
counter.24log.ru/counter?redir=1&id=145381&t=25&st=10&r=&u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html&s=1280x1024x24&rnd=0.31118297706793974
200 OK 233 B URL HTTP/1.1 counter.24log.ru/counter?redir=1&id=145381&t=25&st=10&r=&u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html&s=1280x1024x24&rnd=0.31118297706793974
IP
File type PNG image data, 50 x 21, 4-bit colormap, non-interlaced\012- data
Hash 4a3bf948eac776da5aa572c1b6c51f2a
8fa3c1a396cbbdab338296234bad00becf696ed4
e4d65e60712a34142b02303b9fa52860d6c764c46da79276bd574b752b130beb
GET /counter?redir=1&id=145381&t=25&st=10&r=&u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html&s=1280x1024x24&rnd=0.31118297706793974 HTTP/1.1
Host: counter.24log.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ogorodniky.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: image/png
Content-Length: 233
Connection: keep-alive
X-Powered-By: PHP/5.6.40
Cache-Control: no-cache, must-revalidate
Expires: Mon, 26 Jul 1990 05:00:00 GMT
www.acint.net/match?dp=126&euid=d87dda22-3352-450a-5fe5-b116a7cfca0b
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=126&euid=d87dda22-3352-450a-5fe5-b116a7cfca0b
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=126&euid=d87dda22-3352-450a-5fe5-b116a7cfca0b HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D; cSyncDp7v2=1669258217; cSyncDp14v3=1669258217; cSyncDp17=1669258217; cSyncDp32=1669258217; cSyncDp45v3=1669258217; cSyncDp53=1669258217; cSyncDp54v2=1669258217; cSyncDp62=1669258217; cSyncDp67v2=1669258217; cSyncDp68=1669258217; cSyncDp71=1669258217; cSyncDp77=1669258217; cSyncDp84=1669258217; cSyncDp85=1669258217; cSyncDp95v3=1669258217; cSyncDp101=1669258217; cSyncDp104v2=1669258217; cSyncDp107=1669258217; cSyncDp110=1669258217; cSyncDp111v2=1669258217; cSyncDp112v2=1669258217; cSyncDp125v2=1669258217; cSyncDp126=1669258217; cSyncDp127=1669258217; cSyncDp129=1669258217; cSyncDp136v2=1669258217; cSyncDp138=1669258217; cSyncDp144=1669258217; cSyncDp146=1669258217; cSyncDp148=1669258217; cSyncDp149v2=1669258217; cSyncDp151=1669258217; cSyncDp178=1669258217; cSyncDp179=1669258217; cSyncDp186=1669258217; cSyncDp221=1669258217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 1193d295eb24e414bba49cb5344551b1
ff43c427e5b9479c2fb40d33cec63c2ab8435acc
1262efc830630904c636cbf91a2edbb4d2b36a9d014f0302f5288d9cf41270f4
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Mon, 28 Nov 2022 00:03:43 GMT
ETag: "ff43c427e5b9479c2fb40d33cec63c2ab8435acc"
Last-Modified: Thu, 24 Nov 2022 00:03:44 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed619fd37b51b-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 774a6ca238640d7456d09523e90eb0b0
e73722136f436c9d1600de6c8886de678aa7cc49
18df86dabed81e28e514ea2078d10d7bb854ea3eb0446f445659e107da50f8c1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18DF86DABED81E28E514EA2078D10D7BB854EA3EB0446F445659E107DA50F8C1"
Last-Modified: Tue, 22 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6825
Expires: Thu, 24 Nov 2022 04:44:03 GMT
Date: Thu, 24 Nov 2022 02:50:18 GMT
Connection: keep-alive
openstat.net/cnt.js
200 OK 298 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (394)
Hash e0ac2d7887d64f5f8c84a4e8f86c0a8b
9a422f1310864cee441eb2cbbf17068fea8356c6
a1f2594303c12fc1893251382cf6f1991e72c186e6db8631156c47da71da1475
GET /cnt.js HTTP/1.1
Host: openstat.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Sun, 25 Dec 2022 02:50:18 GMT
Cache-Control: max-age=2678400
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 40ed68a8b461186c726ec5d92c379f6a
92b3ed7a82a5709ad00cdfc24ab1d944c7365e93
b1c9a2c57bcba9976396687736942a6112db0a8a9a657db08ec2c9411b4435e5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B1C9A2C57BCBA9976396687736942A6112DB0A8A9A657DB08EC2C9411B4435E5"
Last-Modified: Mon, 21 Nov 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15247
Expires: Thu, 24 Nov 2022 07:04:25 GMT
Date: Thu, 24 Nov 2022 02:50:18 GMT
Connection: keep-alive
st.vk.com/dist/api/widgets/community.js?1
200 OK 0 B URL HTTP/2 st.vk.com/dist/api/widgets/community.js?1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dist/api/widgets/community.js?1 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:17 GMT
content-type: application/x-javascript
content-length: 257825
last-modified: Wed, 23 Nov 2022 22:49:15 GMT
etag: "637ea36b-3ef21"
content-encoding: br
expires: Mon, 28 Nov 2022 02:50:17 GMT
cache-control: max-age=345600
x-frontend: front226205
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
acint.net/match?dp=110&euid=d83bd0fa68eb4447af23b73650006839
200 OK 43 B URL HTTP/2 acint.net/match?dp=110&euid=d83bd0fa68eb4447af23b73650006839
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=110&euid=d83bd0fa68eb4447af23b73650006839 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D; cSyncDp7v2=1669258217; cSyncDp14v3=1669258217; cSyncDp17=1669258217; cSyncDp32=1669258217; cSyncDp45v3=1669258217; cSyncDp53=1669258217; cSyncDp54v2=1669258217; cSyncDp62=1669258217; cSyncDp67v2=1669258217; cSyncDp68=1669258217; cSyncDp71=1669258217; cSyncDp77=1669258217; cSyncDp84=1669258217; cSyncDp85=1669258217; cSyncDp95v3=1669258217; cSyncDp101=1669258217; cSyncDp104v2=1669258217; cSyncDp107=1669258217; cSyncDp110=1669258217; cSyncDp111v2=1669258217; cSyncDp112v2=1669258217; cSyncDp125v2=1669258217; cSyncDp126=1669258217; cSyncDp127=1669258217; cSyncDp129=1669258217; cSyncDp136v2=1669258217; cSyncDp138=1669258217; cSyncDp144=1669258217; cSyncDp146=1669258217; cSyncDp148=1669258217; cSyncDp149v2=1669258217; cSyncDp151=1669258217; cSyncDp178=1669258217; cSyncDp179=1669258217; cSyncDp186=1669258217; cSyncDp221=1669258217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ads.adlook.me/csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
302 Found 43 B URL HTTP/2 ads.adlook.me/csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
IP
ASN #48096 Enterprise Cloud Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://acint.net/match?dp=110&euid=d83bd0fa68eb4447af23b73650006839
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=d83bd0fa68eb4447af23b73650006839; expires=Thu, 23 Nov 2023 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
date: Thu, 24 Nov 2022 02:50:17 GMT
X-Firefox-Spdy: h2
pix.bumlam.com/sync/sape/check?sspuid=0100007FE9DB7E6378021E2C025FDB49
302 Found 0 B URL HTTP/1.1 pix.bumlam.com/sync/sape/check?sspuid=0100007FE9DB7E6378021E2C025FDB49
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/sape/check?sspuid=0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://sync.bumlam.com/?src=sape
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash 4b734fcaf2c11054e248451d659b84d9
c457a7376ef7fe9e8c940eaa76bc7bdaa54129eb
f078a77e3a6408aeb09807064bfc3023160259baea55b7f92997d4fbdd0ad234
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Mon, 28 Nov 2022 00:04:02 GMT
ETag: "c457a7376ef7fe9e8c940eaa76bc7bdaa54129eb"
Last-Modified: Thu, 24 Nov 2022 00:04:03 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1337
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed61b89f0b4fa-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash b253c30462608b623827e4c3f3af2050
2ca6225f36d1ed1e0904a172a5ca1135dbd5518c
c58f15c47876674a4b31dfb5d9e7587c4375998950b8d496dac87751527ca1ca
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sun, 27 Nov 2022 23:54:38 GMT
ETag: "2ca6225f36d1ed1e0904a172a5ca1135dbd5518c"
Last-Modified: Wed, 23 Nov 2022 23:54:39 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2761
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed61b8df6b51b-OSL
www.google-analytics.com/ga.js
200 OK 17 kB URL HTTP/1.1 www.google-analytics.com/ga.js
IP
File type ASCII text, with very long lines (1305)
Hash 01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 17168
Date: Thu, 24 Nov 2022 01:05:57 GMT
Expires: Thu, 24 Nov 2022 03:05:57 GMT
Cache-Control: public, max-age=7200
Age: 6261
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT
Content-Type: text/javascript
vk.com/images/upload.gif
200 OK 230 B IP
File type GIF image data, version 89a, 32 x 8\012- data
Hash 59cd625f8c2ce03663123d59416378a1
b8d103133aadcdbe532e5642ddce9159b7385e4e
0d7e358637c1b1caa66949aefc529c1e4488923f99e499d6be09eb8cdd0b4202
GET /images/upload.gif HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 230
last-modified: Tue, 22 Sep 2020 20:30:00 GMT
etag: "5f6a5ec8-e6"
expires: Thu, 01 Dec 2022 02:50:18 GMT
cache-control: max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fc4d50c2caa18a97c5e1f17b720c6999
9a45f37f6351080f4806cf2cd1c7e4407b052467
efa0ceeca8286f287410584a55ea4c39247a6bdaa9d6d3b5bb8b7533a7d44941
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EFA0CEECA8286F287410584A55EA4C39247A6BDAA9D6D3B5BB8B7533A7D44941"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11008
Expires: Thu, 24 Nov 2022 05:53:46 GMT
Date: Thu, 24 Nov 2022 02:50:18 GMT
Connection: keep-alive
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 24 Nov 2022 02:50:18 GMT
access-control-allow-origin: *
etag: "637b3777-2b"
expires: Thu, 24 Nov 2022 03:50:18 GMT
accept-ranges: bytes
last-modified: Mon, 21 Nov 2022 11:31:51 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
sun9-29.userapi.com/s/v1/if2/TtJsJxc0BASuZIh293SUjEz4EbzXOoK1GBKlaU8iWhwU4RZxqFqSJeucymaSumwBU4wHcmjEygj_5qksSfXg9G-U.jpg?size=50x50&quality=96&crop=21,0,311,311&ava=1
200 OK 2.5 kB URL HTTP/2 sun9-29.userapi.com/s/v1/if2/TtJsJxc0BASuZIh293SUjEz4EbzXOoK1GBKlaU8iWhwU4RZxqFqSJeucymaSumwBU4wHcmjEygj_5qksSfXg9G-U.jpg?size=50x50&quality=96&crop=21,0,311,311&ava=1
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash af0aa390782d94bbe26cdd51926d17e8
eef276fb290e2e4de89136d440499315c3e607ae
0dd0842be73c4542d226babb0623894fa329601202caa89be4d35454b3f74227
GET /s/v1/if2/TtJsJxc0BASuZIh293SUjEz4EbzXOoK1GBKlaU8iWhwU4RZxqFqSJeucymaSumwBU4wHcmjEygj_5qksSfXg9G-U.jpg?size=50x50&quality=96&crop=21,0,311,311&ava=1 HTTP/1.1
Host: sun9-29.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/jpeg
content-length: 2516
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 525600
expires: Sat, 24 Dec 2022 02:50:18 GMT
cache-control: max-age=2592000
x-frontend: front501720
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sap1&s_data=CAIQARjqt_ubBmIgMDEwMDAwN0ZFOURCN0U2Mzc4MDIxRTJDMDI1RkRCNDmiARC7FWYSa6IR7asVACWQyCQ3
200 OK 0 B URL HTTP/1.1 sync.bumlam.com/?src=sap1&s_data=CAIQARjqt_ubBmIgMDEwMDAwN0ZFOURCN0U2Mzc4MDIxRTJDMDI1RkRCNDmiARC7FWYSa6IR7asVACWQyCQ3
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&s_data=CAIQARjqt_ubBmIgMDEwMDAwN0ZFOURCN0U2Mzc4MDIxRTJDMDI1RkRCNDmiARC7FWYSa6IR7asVACWQyCQ3 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiRiYjE1NjYxMi02YmEyLTExZWQtYWIxNS0wMDI1OTBjODI0Mzc*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiRiYjE1NjYxMi02YmEyLTExZWQtYWIxNS0wMDI1OTBjODI0Mzc*; Path=/; Expires=Wed, 19 Nov 2042 02:50:18 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
match.new-programmatic.com/userbind?src=sape&id=0100007FE9DB7E6378021E2C025FDB49
204 No Content 0 B URL HTTP/1.1 match.new-programmatic.com/userbind?src=sape&id=0100007FE9DB7E6378021E2C025FDB49
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=sape&id=0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: match.new-programmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
ocsp.digicert.com/
200 OK 280 B IP
Hash a10319ff1a79756d69002667de431da1
8ce88a2567dfd4278654aeca12ba50d9f7240da8
47785816790a17c39684d11f8ec46b3b278102626c549e4c7a3e9e0c7373c644
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2408
Cache-Control: max-age=134813
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 02:50:18 GMT
Etag: "637e3e1f-118"
Expires: Fri, 25 Nov 2022 16:17:11 GMT
Last-Modified: Wed, 23 Nov 2022 15:37:03 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 280
www.acint.net/match?dp=111&euid=3645cea6-eee6-4eb1-9a24-749550101950
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=111&euid=3645cea6-eee6-4eb1-9a24-749550101950
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=111&euid=3645cea6-eee6-4eb1-9a24-749550101950 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D; cSyncDp7v2=1669258217; cSyncDp14v3=1669258217; cSyncDp17=1669258217; cSyncDp32=1669258217; cSyncDp45v3=1669258217; cSyncDp53=1669258217; cSyncDp54v2=1669258217; cSyncDp62=1669258217; cSyncDp67v2=1669258217; cSyncDp68=1669258217; cSyncDp71=1669258217; cSyncDp77=1669258217; cSyncDp84=1669258217; cSyncDp85=1669258217; cSyncDp95v3=1669258217; cSyncDp101=1669258217; cSyncDp104v2=1669258217; cSyncDp107=1669258217; cSyncDp110=1669258217; cSyncDp111v2=1669258217; cSyncDp112v2=1669258217; cSyncDp125v2=1669258217; cSyncDp126=1669258217; cSyncDp127=1669258217; cSyncDp129=1669258217; cSyncDp136v2=1669258217; cSyncDp138=1669258217; cSyncDp144=1669258217; cSyncDp146=1669258217; cSyncDp148=1669258217; cSyncDp149v2=1669258217; cSyncDp151=1669258217; cSyncDp178=1669258217; cSyncDp179=1669258217; cSyncDp186=1669258217; cSyncDp221=1669258217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mediatoday.ru/core/match.gif?s=32&id=0100007FE9DB7E6378021E2C025FDB49
200 OK 43 B URL HTTP/2 mediatoday.ru/core/match.gif?s=32&id=0100007FE9DB7E6378021E2C025FDB49
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /core/match.gif?s=32&id=0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: mediatoday.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
p3p: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
cache-control: no-cache, max-age=0, must-revalidate, no-store
pragma: no-cache
expires: Thursday, 01-Jan-1970 00:00:00 GMT
set-cookie: idntfy=VU4FJ9vIJeIRCZU; expires=Sun, 21-Nov-2032 02:50:19 GMT; domain=mediatoday.ru; path=/core; SameSite=None; Secure
X-Firefox-Spdy: h2
sun9-19.userapi.com/s/v1/ig2/OnRuH_Iq3KX1OtAC-Av2nDzWmjShHLg47ySV36a0faaxqZwGStdiH-duoEMTm36U3XYtQtuET4TCFwnuH8NGJg6I.jpg?size=50x50&quality=95&crop=5,92,1914,1914&ava=1
200 OK 2.7 kB URL HTTP/2 sun9-19.userapi.com/s/v1/ig2/OnRuH_Iq3KX1OtAC-Av2nDzWmjShHLg47ySV36a0faaxqZwGStdiH-duoEMTm36U3XYtQtuET4TCFwnuH8NGJg6I.jpg?size=50x50&quality=95&crop=5,92,1914,1914&ava=1
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash e12e2cf2115c6c9564331bce98bdde18
7810a10cd6bc01552cd2ae185e71e8c4bd737c4e
3c7cb97f95f279cbeb1b5376fbfd10452bbec854d8633dfeaac4d7566e87255a
GET /s/v1/ig2/OnRuH_Iq3KX1OtAC-Av2nDzWmjShHLg47ySV36a0faaxqZwGStdiH-duoEMTm36U3XYtQtuET4TCFwnuH8NGJg6I.jpg?size=50x50&quality=95&crop=5,92,1914,1914&ava=1 HTTP/1.1
Host: sun9-19.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/jpeg
content-length: 2719
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 804601
expires: Sat, 24 Dec 2022 02:50:18 GMT
cache-control: max-age=2592000
x-frontend: front504109
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
sun9-18.userapi.com/s/v1/if1/iZzjMgqMt---BT45kWJWO35J6vQVKjC6S0s6BoqgnWJcmZu71F_WfTviVUoVFipt-9hkyZ1C.jpg?size=50x50&quality=96&crop=118,0,432,432&ava=1
200 OK 3.0 kB URL HTTP/2 sun9-18.userapi.com/s/v1/if1/iZzjMgqMt---BT45kWJWO35J6vQVKjC6S0s6BoqgnWJcmZu71F_WfTviVUoVFipt-9hkyZ1C.jpg?size=50x50&quality=96&crop=118,0,432,432&ava=1
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 9be24bc3ca0ea8dd36288082e08d9cc2
7d32c89b4be819053186e5e43bc10f465f2d4eb9
87f130077d2bafe6a99f111648ad1db176ed6b97ffedaecb7b4057f1fa1ea4a1
GET /s/v1/if1/iZzjMgqMt---BT45kWJWO35J6vQVKjC6S0s6BoqgnWJcmZu71F_WfTviVUoVFipt-9hkyZ1C.jpg?size=50x50&quality=96&crop=118,0,432,432&ava=1 HTTP/1.1
Host: sun9-18.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/jpeg
content-length: 3010
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 850206
expires: Sat, 24 Dec 2022 02:50:18 GMT
cache-control: max-age=2592000
x-frontend: front504108
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
sun9-85.userapi.com/s/v1/if1/01ZeTLv4_feEHg1GvWB9PodTIJNlHizBrCYZA2vDobCULkNS3v5bwJMMJZS8cETu8uWpRB7b.jpg?size=50x50&quality=96&crop=0,0,225,225&ava=1
200 OK 2.1 kB URL HTTP/2 sun9-85.userapi.com/s/v1/if1/01ZeTLv4_feEHg1GvWB9PodTIJNlHizBrCYZA2vDobCULkNS3v5bwJMMJZS8cETu8uWpRB7b.jpg?size=50x50&quality=96&crop=0,0,225,225&ava=1
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash d3bd4bbe1b7dbb46a5f6245c9ade8725
c9765383d2d75c725cdcb4547fdc3ba37b66675a
14a56c9b715c6ccc4b52f7d70c6005ee088e1b6e412482ff2030821511b51412
GET /s/v1/if1/01ZeTLv4_feEHg1GvWB9PodTIJNlHizBrCYZA2vDobCULkNS3v5bwJMMJZS8cETu8uWpRB7b.jpg?size=50x50&quality=96&crop=0,0,225,225&ava=1 HTTP/1.1
Host: sun9-85.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/jpeg
content-length: 2069
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 226212
expires: Sat, 24 Dec 2022 02:50:18 GMT
cache-control: max-age=2592000
x-frontend: front831002
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
cs.agency2.ru/p?ssp=sp&uid=0100007FE9DB7E6378021E2C025FDB49
301 Moved Permanently 0 B URL HTTP/1.1 cs.agency2.ru/p?ssp=sp&uid=0100007FE9DB7E6378021E2C025FDB49
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&uid=0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: cs.agency2.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Length: 0
Connection: keep-alive
Server: fasthttp
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.acint.net/match?dp=186&euid=61b71fe7-bcf6-4d64-937b-40ebf384e0c0
Set-Cookie: uuid=61b71fe7-bcf6-4d64-937b-40ebf384e0c0; expires=Wed, 15 Nov 2023 02:50:18 GMT; domain=agency2.ru; path=/; secure; SameSite=None
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.107.44
ocsp.sectigo.com/
200 OK 471 B IP
Hash d9f517ca8355b8a1b559eaf22c3978ef
85791303068c54ce3a3459bf789c49769ceb5805
886d75d1690af5aa934d4a37e7284e85d94893ef5d0865151b44487ef908eb0b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 23 Nov 2022 23:26:43 GMT
Expires: Wed, 30 Nov 2022 23:26:42 GMT
Etag: "85791303068c54ce3a3459bf789c49769ceb5805"
Cache-Control: max-age=591983,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76eed61bef390b49-OSL
sun9-87.userapi.com/s/v1/ig2/XKE7CmtBf9lmpb8ae3SJYH8heK3r43MGGPys4COR47kzZIbqbDe5bd6P4fBeMAlTct4KfKpBjDumn44j78TtFJXg.jpg?size=50x50&quality=96&crop=17,541,960,960&ava=1
200 OK 2.7 kB URL HTTP/2 sun9-87.userapi.com/s/v1/ig2/XKE7CmtBf9lmpb8ae3SJYH8heK3r43MGGPys4COR47kzZIbqbDe5bd6P4fBeMAlTct4KfKpBjDumn44j78TtFJXg.jpg?size=50x50&quality=96&crop=17,541,960,960&ava=1
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 064714247dff002aee0229d6a017b1d5
f900eacd5f40808f8eadab752b824be124b776cf
193fce26d02e12bbb01fb9c50bf5d3d0cae8954ed5592bdfb24926cb58693710
GET /s/v1/ig2/XKE7CmtBf9lmpb8ae3SJYH8heK3r43MGGPys4COR47kzZIbqbDe5bd6P4fBeMAlTct4KfKpBjDumn44j78TtFJXg.jpg?size=50x50&quality=96&crop=17,541,960,960&ava=1 HTTP/1.1
Host: sun9-87.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/jpeg
content-length: 2660
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 838215
expires: Sat, 24 Dec 2022 02:50:18 GMT
cache-control: max-age=2592000
x-frontend: front831004
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
counter.rambler.ru/top100.cnt?2355948
307 Temporary Redirect 171 B URL HTTP/1.1 counter.rambler.ru/top100.cnt?2355948
IP
ASN #24638 Rambler Internet Holding LLC
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash dd35c5be446e8b57583fcd73a23c529c
d29afc0f3c58349452d60d01e2877bab336c22dd
3a04f06f1f4e502d8b5f53f01acd3c7c6c0a1dad68b77525780b917164608a0f
GET /top100.cnt?2355948 HTTP/1.1
Host: counter.rambler.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.4
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: text/html
Content-Length: 171
Connection: keep-alive
Location: https://counter.rambler.ru/top100.cnt?2355948
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Credentials: true
Set-Cookie: proto_uid=1CIAAOrbfmM+LektAV+pdQB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
P3P: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 882358859b890a77df3270f6674cf334
12c427c52f8ef3e23c3c6f258143b494328e13d3
087487e06043a8c0eba9f4e28cc5f5576f26d5c17d5901c05190ca8f6235dae9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "087487E06043A8C0EBA9F4E28CC5F5576F26D5C17D5901C05190CA8F6235DAE9"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7133
Expires: Thu, 24 Nov 2022 04:49:11 GMT
Date: Thu, 24 Nov 2022 02:50:18 GMT
Connection: keep-alive
counter.yadro.ru/hit?t41.7;r;s1280*1024*24;uhttp%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html;0.9860409838328394
302 Moved Temporarily 32 B URL HTTP/1.1 counter.yadro.ru/hit?t41.7;r;s1280*1024*24;uhttp%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html;0.9860409838328394
IP
ASN #39134 United Network LLC
File type HTML document, ASCII text
Hash 3e9c09a8c5a87f266e047a596f48578c
07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
GET /hit?t41.7;r;s1280*1024*24;uhttp%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html;0.9860409838328394 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
HTTP/1.1 302 Moved Temporarily
Date: Thu, 24 Nov 2022 02:50:18 GMT
Server: 0W/0.8c
Content-Type: text/html
Location: https://counter.yadro.ru/hit?t41.7;r;s1280*1024*24;uhttp%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html;0.9860409838328394
Content-Length: 32
Expires: Tue, 23 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
sun9-41.userapi.com/c132/u7512048/e_13c08e2b.jpg
200 OK 2.2 kB URL HTTP/2 sun9-41.userapi.com/c132/u7512048/e_13c08e2b.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 93", baseline, precision 8, 50x50, components 3\012- data
Hash 5f57b07ec4d20102e631266ff7a44e4b
fa4b204a8ba528f090ff8219aa2caf843ced99d8
000af62668db48a5b88e34e1d0cd4bae2a8ae18cc095664e13b2983c68f6fdb8
GET /c132/u7512048/e_13c08e2b.jpg HTTP/1.1
Host: sun9-41.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/jpeg
content-length: 2191
last-modified: Sun, 31 Oct 2010 12:20:41 GMT
etag: "4ccd5f19-88f"
expires: Sat, 24 Dec 2022 02:50:18 GMT
cache-control: max-age=2592000
x-frontend: front632928
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
sun9-23.userapi.com/s/v1/ig2/PF2uw2K7J2mamExrV0DERDnj-oh0qneHx6eAxanZMNjJN_zyDlMa0d5SGrW6owm7Et1t8OPnCw2WvgDhOKOMoHYj.jpg?size=50x50&quality=95&crop=0,0,962,962&ava=1
200 OK 2.9 kB URL HTTP/2 sun9-23.userapi.com/s/v1/ig2/PF2uw2K7J2mamExrV0DERDnj-oh0qneHx6eAxanZMNjJN_zyDlMa0d5SGrW6owm7Et1t8OPnCw2WvgDhOKOMoHYj.jpg?size=50x50&quality=95&crop=0,0,962,962&ava=1
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 99142996cb549ca67263c3c48bf77b8d
cecaf7431a2a6eb48963d73e03814700a8763891
260a20311ff20249d900de13c075568a1f5c2f24f51094453b96802c1258ca0c
GET /s/v1/ig2/PF2uw2K7J2mamExrV0DERDnj-oh0qneHx6eAxanZMNjJN_zyDlMa0d5SGrW6owm7Et1t8OPnCw2WvgDhOKOMoHYj.jpg?size=50x50&quality=95&crop=0,0,962,962&ava=1 HTTP/1.1
Host: sun9-23.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/jpeg
content-length: 2921
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 838515
expires: Sat, 24 Dec 2022 02:50:18 GMT
cache-control: max-age=2592000
x-frontend: front504113
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sape
302 Moved Temporarily 0 B URL HTTP/1.1 sync.bumlam.com/?src=sape
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sape HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiRiYjE1NjYxMi02YmEyLTExZWQtYWIxNS0wMDI1OTBjODI0Mzc*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiRiYjE1NjYxMi02YmEyLTExZWQtYWIxNS0wMDI1OTBjODI0Mzc*; Path=/; Expires=Wed, 19 Nov 2042 02:50:18 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: https://pix.bumlam.com/sync/sape/sync_ok?guid=bb156612-6ba2-11ed-ab15-002590c82437
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
Access-Control-Allow-Origin: https://acint.net
Access-Control-Allow-Credentials: true
www.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1818930229&utmhn=www.ogorodniky.ru&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&utmhid=338518240&utmr=-&utmp=%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&utmht=1669258218736&utmac=UA-19364211-3&utmcc=__utma%3D154149286.1205672230.1669258219.1669258219.1669258219.1%3B%2B__utmz%3D154149286.1669258219.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=273434532&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
200 OK 35 B URL HTTP/1.1 www.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1818930229&utmhn=www.ogorodniky.ru&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&utmhid=338518240&utmr=-&utmp=%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&utmht=1669258218736&utmac=UA-19364211-3&utmcc=__utma%3D154149286.1205672230.1669258219.1669258219.1669258219.1%3B%2B__utmz%3D154149286.1669258219.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=273434532&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1818930229&utmhn=www.ogorodniky.ru&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&utmhid=338518240&utmr=-&utmp=%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&utmht=1669258218736&utmac=UA-19364211-3&utmcc=__utma%3D154149286.1205672230.1669258219.1669258219.1669258219.1%3B%2B__utmz%3D154149286.1669258219.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=273434532&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Date: Thu, 24 Nov 2022 02:50:18 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Content-Type: image/gif
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35
sun9-15.userapi.com/s/v1/ig2/XpmTRz9Nskp-lD_lNLJZJT7aBUR11-35MZnmfM2g0BzNS7IJ1j-9nxxiMOJ0o217AszQVctIhMp-xZ_sLTkglG-B.jpg?size=50x50&quality=96&crop=216,216,1728,1728&ava=1
200 OK 3.2 kB URL HTTP/2 sun9-15.userapi.com/s/v1/ig2/XpmTRz9Nskp-lD_lNLJZJT7aBUR11-35MZnmfM2g0BzNS7IJ1j-9nxxiMOJ0o217AszQVctIhMp-xZ_sLTkglG-B.jpg?size=50x50&quality=96&crop=216,216,1728,1728&ava=1
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 02be7496185f01ff780bd7c0c7174d74
77914cac8ecf30127421e7c9d832d53a0ac97c5c
3c84652b15e720d62800681f1ceaa8deb0920eebf931bef70bd14d30e7f41c5a
GET /s/v1/ig2/XpmTRz9Nskp-lD_lNLJZJT7aBUR11-35MZnmfM2g0BzNS7IJ1j-9nxxiMOJ0o217AszQVctIhMp-xZ_sLTkglG-B.jpg?size=50x50&quality=96&crop=216,216,1728,1728&ava=1 HTTP/1.1
Host: sun9-15.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/jpeg
content-length: 3196
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 816319
expires: Sat, 24 Dec 2022 02:50:18 GMT
cache-control: max-age=2592000
x-frontend: front224306
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
d1.c3.be.a1.top.mail.ru/counter?id=1978695;t=79;js=13;s=1280*1024;_=0.8574119781733884
302 Moved Temporarily 0 B URL HTTP/1.1 d1.c3.be.a1.top.mail.ru/counter?id=1978695;t=79;js=13;s=1280*1024;_=0.8574119781733884
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?id=1978695;t=79;js=13;s=1280*1024;_=0.8574119781733884 HTTP/1.1
Host: d1.c3.be.a1.top.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=60
Location: https://top-fwz1.mail.ru/counter?id=1978695;t=79;js=13;s=1280*1024;_=0.8574119781733884
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: *
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: private, no-cache, no-store, max-age=0
Pragma: no-cache
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
sun9-21.userapi.com/s/v1/ig2/rT3t280r74t0R7dycOiA2EHPY8FYgq0nv73SpC3i-kavxWdC4_gaHjsrNzXBuTbDRxdD-nqS1-ad3Ay6GV3mdcKl.jpg?size=50x50&quality=96&crop=634,618,280,280&ava=1
200 OK 2.6 kB URL HTTP/2 sun9-21.userapi.com/s/v1/ig2/rT3t280r74t0R7dycOiA2EHPY8FYgq0nv73SpC3i-kavxWdC4_gaHjsrNzXBuTbDRxdD-nqS1-ad3Ay6GV3mdcKl.jpg?size=50x50&quality=96&crop=634,618,280,280&ava=1
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 1e8d373d2ca72d00b6cfbfccd121535d
e0f8d73823f9558929d874c1a9d00431194391e4
a3af5cd5cf86b18b0a3e4eaa74c206a2a5b5a0f94d3c0e39ed464fd6d7371393
GET /s/v1/ig2/rT3t280r74t0R7dycOiA2EHPY8FYgq0nv73SpC3i-kavxWdC4_gaHjsrNzXBuTbDRxdD-nqS1-ad3Ay6GV3mdcKl.jpg?size=50x50&quality=96&crop=634,618,280,280&ava=1 HTTP/1.1
Host: sun9-21.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/jpeg
content-length: 2627
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 816215
expires: Sat, 24 Dec 2022 02:50:18 GMT
cache-control: max-age=2592000
x-frontend: front504111
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
sun9-83.userapi.com/s/v1/if2/xrgNUJT72_AWwNPGi54R55vJWeWjkxdJIntGBdp7PWEqgX3dYtccd-uVsdXOplirVyU2akFV0u0tFmXg5l7IauRI.jpg?size=50x50&quality=96&crop=0,248,640,640&ava=1
200 OK 2.9 kB URL HTTP/2 sun9-83.userapi.com/s/v1/if2/xrgNUJT72_AWwNPGi54R55vJWeWjkxdJIntGBdp7PWEqgX3dYtccd-uVsdXOplirVyU2akFV0u0tFmXg5l7IauRI.jpg?size=50x50&quality=96&crop=0,248,640,640&ava=1
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 3337d1e2b1f8e304bcdf66009c889414
7c200b610adfd135ce489ceb21dae345ea2d9769
c090e6e103ec3588977850bf9561cda7981999e87cb09b8296abfe9d26566970
GET /s/v1/if2/xrgNUJT72_AWwNPGi54R55vJWeWjkxdJIntGBdp7PWEqgX3dYtccd-uVsdXOplirVyU2akFV0u0tFmXg5l7IauRI.jpg?size=50x50&quality=96&crop=0,248,640,640&ava=1 HTTP/1.1
Host: sun9-83.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/jpeg
content-length: 2879
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 849404
expires: Sat, 24 Dec 2022 02:50:18 GMT
cache-control: max-age=2592000
x-frontend: front831000
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
dmp.gotechnology.io/match/sape?id=0100007FE9DB7E6378021E2C025FDB49
302 Found 0 B URL HTTP/2 dmp.gotechnology.io/match/sape?id=0100007FE9DB7E6378021E2C025FDB49
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: dmp.gotechnology.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Thu, 24 Nov 2022 02:50:18 GMT
content-length: 0
location: https://dmp.gotechnology.io/match/sape?id=0100007FE9DB7E6378021E2C025FDB49&chk=1
set-cookie: chk=1; path=/; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
hit37.hotlog.ru/cgi-bin/hotlog/count?0.16227504144853355&s=2123931&im=50&r=&pg=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html&j=N&wh=1280x1024&px=24&js=1.3
404 Not Found 19 B URL HTTP/1.1 hit37.hotlog.ru/cgi-bin/hotlog/count?0.16227504144853355&s=2123931&im=50&r=&pg=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html&j=N&wh=1280x1024&px=24&js=1.3
IP
ASN #12695 LLC Digital Network
Hash 595e88012a6521aae3e12cbebe76eb9e
da3968197e7bf67aa45a77515b52ba2710c5fc34
b16e15764b8bc06c5c3f9f19bc8b99fa48e7894aa5a6ccdad65da49bbf564793
GET /cgi-bin/hotlog/count?0.16227504144853355&s=2123931&im=50&r=&pg=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html&j=N&wh=1280x1024&px=24&js=1.3 HTTP/1.1
Host: hit37.hotlog.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Length: 19
pix.bumlam.com/sync/sape/sync_ok?guid=bb156612-6ba2-11ed-ab15-002590c82437
302 Found 0 B URL HTTP/1.1 pix.bumlam.com/sync/sape/sync_ok?guid=bb156612-6ba2-11ed-ab15-002590c82437
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/sape/sync_ok?guid=bb156612-6ba2-11ed-ab15-002590c82437 HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiRiYjE1NjYxMi02YmEyLTExZWQtYWIxNS0wMDI1OTBjODI0Mzc*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://bb156612-6ba2-11ed-ab15-002590c82437.n4.sync.bumlam.com/?src=sape
www.ogorodniky.ru/favicon.ico
200 OK 717 B URL HTTP/1.1 www.ogorodniky.ru/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel\012- data
Hash 4a99030b72ab152aa0570e11b109863f
e3b5b9365002e6f3c54bbcf11dd81ee314cf3f2a
7ebf7f540c38cf10ad5449a6b3d4662195ad859e20791d3258260bf8c4203e5c
GET /favicon.ico HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html
Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0; fid=46dc5646-a4a0-44e1-9431-89437e4b8cb5; _ym_uid=1669258218467400046; _ym_d=1669258218; cj_uid=
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 04 Aug 2021 06:47:04 GMT
ETag: W/"610a37e8-57e"
Expires: Sat, 24 Dec 2022 02:50:18 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9cpuvRnwPXBeIiIzy%2F%2BqCfcEzoXZw7kFCImCcZ%2BAUJ%2BaJsUf8VR8UpaMI0Iz54QYfHgj96G9XGeoeDwbg7IQRivwbm5QQTxv8lVywb%2BoLi1B3ARMeOFFl9s7TEBg2gUoKcIkUA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed61c3d96b50c-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.ogorodniky.ru/templates/www.ogorodniky.ru/apple_touch_icon.png
200 OK 3.2 kB URL HTTP/1.1 www.ogorodniky.ru/templates/www.ogorodniky.ru/apple_touch_icon.png
IP
File type PNG image data, 57 x 57, 8-bit/color RGB, non-interlaced\012- data
Hash 3edca8c2bda6aa4f0c8f859fced7730b
1d89792567fe6bb0f2a996f38ae1909fddfb6b1c
6d8c224b5ef1a0abe2674269addfb4d1672eb34d36ee43816b3334abc67311fe
GET /templates/www.ogorodniky.ru/apple_touch_icon.png HTTP/1.1
Host: www.ogorodniky.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html
Cookie: 37e56e8863231936c4d248eb7b6bb23c=582871c90b4ef8907f0878a9180e95a0; fid=46dc5646-a4a0-44e1-9431-89437e4b8cb5; _ym_uid=1669258218467400046; _ym_d=1669258218; cj_uid=
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:18 GMT
Content-Type: image/png
Content-Length: 3199
Connection: keep-alive
Last-Modified: Wed, 04 Aug 2021 06:49:14 GMT
ETag: "610a386a-c7f"
Expires: Sat, 24 Dec 2022 02:50:18 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TQsk3vwfM2GNGogNttbGdS0v4fZnB%2FZmnsl03JaZbnn06N%2BcSwY%2FHXVTvGOEwpwXNT7n8WkD%2BoPW%2FbK%2B%2FWqviiJtqjD5vSISezONh%2B0LNjC0pZDgf98WzM2bcsFAQx2H90zHFw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed61c39e7b511-OSL
alt-svc: h2=":443"; ma=60
www.acint.net/match?dp=186&euid=61b71fe7-bcf6-4d64-937b-40ebf384e0c0
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=186&euid=61b71fe7-bcf6-4d64-937b-40ebf384e0c0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=186&euid=61b71fe7-bcf6-4d64-937b-40ebf384e0c0 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D; cSyncDp7v2=1669258217; cSyncDp14v3=1669258217; cSyncDp17=1669258217; cSyncDp32=1669258217; cSyncDp45v3=1669258217; cSyncDp53=1669258217; cSyncDp54v2=1669258217; cSyncDp62=1669258217; cSyncDp67v2=1669258217; cSyncDp68=1669258217; cSyncDp71=1669258217; cSyncDp77=1669258217; cSyncDp84=1669258217; cSyncDp85=1669258217; cSyncDp95v3=1669258217; cSyncDp101=1669258217; cSyncDp104v2=1669258217; cSyncDp107=1669258217; cSyncDp110=1669258217; cSyncDp111v2=1669258217; cSyncDp112v2=1669258217; cSyncDp125v2=1669258217; cSyncDp126=1669258217; cSyncDp127=1669258217; cSyncDp129=1669258217; cSyncDp136v2=1669258217; cSyncDp138=1669258217; cSyncDp144=1669258217; cSyncDp146=1669258217; cSyncDp148=1669258217; cSyncDp149v2=1669258217; cSyncDp151=1669258217; cSyncDp178=1669258217; cSyncDp179=1669258217; cSyncDp186=1669258217; cSyncDp221=1669258217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mc.yandex.ru/watch/2433115/1?wmode=7&page-url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1279%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A39344501817%3Ahid%3A1048405681%3Az%3A0%3Ai%3A20221124025017%3Aet%3A1669258218%3Ac%3A1%3Arn%3A39484585%3Arqn%3A1%3Au%3A1669258218467400046%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C556%2C1%2C317%2C0%2C%2C642%2C%2C%2C%2C%2C%3Ans%3A1669258216064%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669258218%3At%3A%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 407 B URL HTTP/2 mc.yandex.ru/watch/2433115/1?wmode=7&page-url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1279%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A39344501817%3Ahid%3A1048405681%3Az%3A0%3Ai%3A20221124025017%3Aet%3A1669258218%3Ac%3A1%3Arn%3A39484585%3Arqn%3A1%3Au%3A1669258218467400046%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C556%2C1%2C317%2C0%2C%2C642%2C%2C%2C%2C%2C%3Ans%3A1669258216064%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669258218%3At%3A%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash 34d73d0d95bc57801b890d6afbd5bd15
8211348a1a6e65b54866f6e5bbb56c2a38f9c488
efe13239e40868e57e6b049c6df91e8c5cd676c95fd823309e1b815d6e53b1e4
GET /watch/2433115/1?wmode=7&page-url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1279%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A39344501817%3Ahid%3A1048405681%3Az%3A0%3Ai%3A20221124025017%3Aet%3A1669258218%3Ac%3A1%3Arn%3A39484585%3Arqn%3A1%3Au%3A1669258218467400046%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C556%2C1%2C317%2C0%2C%2C642%2C%2C%2C%2C%2C%3Ans%3A1669258216064%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669258218%3At%3A%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.ogorodniky.ru
Referer: http://www.ogorodniky.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 407
date: Thu, 24 Nov 2022 02:50:18 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://www.ogorodniky.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 24-Nov-2022 02:50:18 GMT
last-modified: Thu, 24-Nov-2022 02:50:18 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13103
Expires: Thu, 24 Nov 2022 06:28:42 GMT
Date: Thu, 24 Nov 2022 02:50:19 GMT
Connection: keep-alive
dmp.gotechnology.io/match/sape?id=0100007FE9DB7E6378021E2C025FDB49&chk=1
302 Found 0 B URL HTTP/2 dmp.gotechnology.io/match/sape?id=0100007FE9DB7E6378021E2C025FDB49&chk=1
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=0100007FE9DB7E6378021E2C025FDB49&chk=1 HTTP/1.1
Host: dmp.gotechnology.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: chk=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Thu, 24 Nov 2022 02:50:19 GMT
content-length: 0
location: https://ads.betweendigital.com/match?bidder_id=98&external_user_id=NGZiNTMwY2E4NTdmY2VjMw
set-cookie: pid=NGZiNTMwY2E4NTdmY2VjMw; expires=Fri, 24 Nov 2023 02:50:19 GMT; domain=.gotechnology.io; path=/; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter?js=13;id=2685520;u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html;st=1669258218314;pid=0;title=%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.;s=1280*1024;vp=180*290;touch=0;hds=1;frame=1;flash=;sid=c94291ea3ebb4c35;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669258218786%3A1669258218791%3A0%3A790441c855357a2af756b8a997e02924;visible=true;_=0.7696328783450671
302 Found 0 B URL HTTP/2 top-fwz1.mail.ru/counter?js=13;id=2685520;u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html;st=1669258218314;pid=0;title=%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.;s=1280*1024;vp=180*290;touch=0;hds=1;frame=1;flash=;sid=c94291ea3ebb4c35;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669258218786%3A1669258218791%3A0%3A790441c855357a2af756b8a997e02924;visible=true;_=0.7696328783450671
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?js=13;id=2685520;u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html;st=1669258218314;pid=0;title=%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.;s=1280*1024;vp=180*290;touch=0;hds=1;frame=1;flash=;sid=c94291ea3ebb4c35;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669258218786%3A1669258218791%3A0%3A790441c855357a2af756b8a997e02924;visible=true;_=0.7696328783450671 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Thu, 24 Nov 2022 02:50:19 GMT
content-length: 0
location: https://top-fwz1.mail.ru/counter2?js=13;id=2685520;u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html;st=1669258218314;pid=0;title=%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.;s=1280*1024;vp=180*290;touch=0;hds=1;frame=1;flash=;sid=c94291ea3ebb4c35;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669258218786%3A1669258218791%3A0%3A790441c855357a2af756b8a997e02924;visible=true;_=0.7696328783450671
set-cookie: FTID=1RMYgQ0tkIID:1669258219:2685520:::; path=/; expires=Sat, 25-Nov-23 02:50:19 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter?id=1978695;t=79;js=13;s=1280*1024;_=0.8574119781733884
302 Found 0 B URL HTTP/2 top-fwz1.mail.ru/counter?id=1978695;t=79;js=13;s=1280*1024;_=0.8574119781733884
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?id=1978695;t=79;js=13;s=1280*1024;_=0.8574119781733884 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ogorodniky.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Thu, 24 Nov 2022 02:50:19 GMT
content-length: 0
location: https://top-fwz1.mail.ru/counter2?id=1978695;t=79;js=13;s=1280*1024;_=0.8574119781733884
set-cookie: FTID=1RMYgQ0tkIID:1669258219:1978695:::; path=/; expires=Sat, 25-Nov-23 02:50:19 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13103
Expires: Thu, 24 Nov 2022 06:28:42 GMT
Date: Thu, 24 Nov 2022 02:50:19 GMT
Connection: keep-alive
mc.yandex.ru/watch/71281900/1?wmode=7&page-url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&charset=utf-8&site-info=%7B%22site_id%22%3A24074%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1279%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A1319645501355%3Ahid%3A1048405681%3Az%3A0%3Ai%3A20221124025018%3Aet%3A1669258219%3Ac%3A1%3Arn%3A591939453%3Arqn%3A1%3Au%3A1669258218467400046%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C556%2C1%2C317%2C0%2C%2C642%2C46%2C%2C%2C%2C1759%3Ans%3A1669258216064%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669258219%3At%3A%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&t=gdpr%2814%29mc%28cm-1-tl-1%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/71281900/1?wmode=7&page-url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&charset=utf-8&site-info=%7B%22site_id%22%3A24074%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1279%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A1319645501355%3Ahid%3A1048405681%3Az%3A0%3Ai%3A20221124025018%3Aet%3A1669258219%3Ac%3A1%3Arn%3A591939453%3Arqn%3A1%3Au%3A1669258218467400046%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C556%2C1%2C317%2C0%2C%2C642%2C46%2C%2C%2C%2C1759%3Ans%3A1669258216064%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669258219%3At%3A%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&t=gdpr%2814%29mc%28cm-1-tl-1%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 1d36d28f8bc289eb04598034fbbd83c1
2489a80223ec6b443f40c3d81e87a5e5ab48d139
35bafaa7c0637f0b6d217b58bf8d5f5a1a5851eb81f1f75ee263771212e1521b
GET /watch/71281900/1?wmode=7&page-url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&charset=utf-8&site-info=%7B%22site_id%22%3A24074%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1279%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A1319645501355%3Ahid%3A1048405681%3Az%3A0%3Ai%3A20221124025018%3Aet%3A1669258219%3Ac%3A1%3Arn%3A591939453%3Arqn%3A1%3Au%3A1669258218467400046%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C556%2C1%2C317%2C0%2C%2C642%2C46%2C%2C%2C%2C1759%3Ans%3A1669258216064%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669258219%3At%3A%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&t=gdpr%2814%29mc%28cm-1-tl-1%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.ogorodniky.ru
Referer: http://www.ogorodniky.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Thu, 24 Nov 2022 02:50:19 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://www.ogorodniky.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 24-Nov-2022 02:50:19 GMT
last-modified: Thu, 24-Nov-2022 02:50:19 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13103
Expires: Thu, 24 Nov 2022 06:28:42 GMT
Date: Thu, 24 Nov 2022 02:50:19 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd52586ca-ed31-419d-866f-7a7d8c034cc2.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd52586ca-ed31-419d-866f-7a7d8c034cc2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dcdebbc7d6d2f262afe69e6f2d97d58b
e62b4e08c2813f67fa0f466b4f66d5d4c609526f
decdfd76f2b382026f13ba2cd07fceae8a8964b4157c0f4dcef6bcd061817b61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd52586ca-ed31-419d-866f-7a7d8c034cc2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6404
x-amzn-requestid: 5a69edc8-b240-4c21-ba0d-dc175b8ff3b5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvY6HfnoAMFQag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5d2-4fd0613627b92d636337cbad;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: wzNSs-zgv7QbI0QdFg7Qa3y_PA_40oy5LjVs_I4P8exfQFdPjvYB4Q==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 07:21:37 GMT
age: 70122
etag: "e62b4e08c2813f67fa0f466b4f66d5d4c609526f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mc.yandex.ru/watch/87642277?wmode=7&page-url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%22637edbe9-5893-74xi-mzib-c84goot8ujqb%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1279%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A3%3Adp%3A0%3Als%3A1646619967924%3Ahid%3A1048405681%3Az%3A0%3Ai%3A20221124025018%3Aet%3A1669258219%3Ac%3A1%3Arn%3A81915067%3Arqn%3A1%3Au%3A1669258218467400046%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C556%2C1%2C317%2C0%2C%2C642%2C46%2C%2C%2C%2C1759%3Ans%3A1669258216064%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669258219%3At%3A%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&t=gdpr(14)mc(cm-1-tl-1)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
302 Found 6.8 kB URL HTTP/2 mc.yandex.ru/watch/87642277?wmode=7&page-url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%22637edbe9-5893-74xi-mzib-c84goot8ujqb%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1279%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A3%3Adp%3A0%3Als%3A1646619967924%3Ahid%3A1048405681%3Az%3A0%3Ai%3A20221124025018%3Aet%3A1669258219%3Ac%3A1%3Arn%3A81915067%3Arqn%3A1%3Au%3A1669258218467400046%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C556%2C1%2C317%2C0%2C%2C642%2C46%2C%2C%2C%2C1759%3Ans%3A1669258216064%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669258219%3At%3A%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&t=gdpr(14)mc(cm-1-tl-1)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d9d93b2a6875d446c3467eb49767eef5
303c571b13b05fcf27ee1159d8fdf6369aaef0a2
2a2345a925e0187979930a7f2de8548957ad9f2baae77364dcb157286e2b3fcf
GET /watch/87642277?wmode=7&page-url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%22637edbe9-5893-74xi-mzib-c84goot8ujqb%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1279%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A3%3Adp%3A0%3Als%3A1646619967924%3Ahid%3A1048405681%3Az%3A0%3Ai%3A20221124025018%3Aet%3A1669258219%3Ac%3A1%3Arn%3A81915067%3Arqn%3A1%3Au%3A1669258218467400046%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C556%2C1%2C317%2C0%2C%2C642%2C46%2C%2C%2C%2C1759%3Ans%3A1669258216064%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669258219%3At%3A%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&t=gdpr(14)mc(cm-1-tl-1)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.ogorodniky.ru
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/87642277/1?wmode=7&page-url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%22637edbe9-5893-74xi-mzib-c84goot8ujqb%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1279%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A3%3Adp%3A0%3Als%3A1646619967924%3Ahid%3A1048405681%3Az%3A0%3Ai%3A20221124025018%3Aet%3A1669258219%3Ac%3A1%3Arn%3A81915067%3Arqn%3A1%3Au%3A1669258218467400046%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C556%2C1%2C317%2C0%2C%2C642%2C46%2C%2C%2C%2C1759%3Ans%3A1669258216064%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669258219%3At%3A%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&t=gdpr%2814%29mc%28cm-1-tl-1%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Thu, 24 Nov 2022 02:50:18 GMT
access-control-allow-origin: http://www.ogorodniky.ru
set-cookie: yandexuid=2762336421669258218; Expires=Fri, 24-Nov-2023 02:50:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=2762336421669258218; Expires=Fri, 24-Nov-2023 02:50:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=593759671669258218; Path=/; SameSite=None; Secure
i=dew4mqJcA/nDmmPEuRXnTmkgR2u8cVVjjZVbNNzcJGVcCzauQobJlB0BWj92OztJNUdyvhb5E5luJuNUCDIc06y8seY=; Expires=Sun, 21-Nov-2032 02:50:15 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1700794218.yc.1669258218#1700794218.yrts.1669258218#1700794218.yrtsi.1669258218; Expires=Fri, 24-Nov-2023 02:50:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 24-Nov-2022 02:50:18 GMT
last-modified: Thu, 24-Nov-2022 02:50:18 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/87642277/1?wmode=7&page-url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%22637edbe9-5893-74xi-mzib-c84goot8ujqb%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1279%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A3%3Adp%3A0%3Als%3A1646619967924%3Ahid%3A1048405681%3Az%3A0%3Ai%3A20221124025018%3Aet%3A1669258219%3Ac%3A1%3Arn%3A81915067%3Arqn%3A1%3Au%3A1669258218467400046%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C556%2C1%2C317%2C0%2C%2C642%2C46%2C%2C%2C%2C1759%3Ans%3A1669258216064%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669258219%3At%3A%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&t=gdpr%2814%29mc%28cm-1-tl-1%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/87642277/1?wmode=7&page-url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%22637edbe9-5893-74xi-mzib-c84goot8ujqb%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1279%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A3%3Adp%3A0%3Als%3A1646619967924%3Ahid%3A1048405681%3Az%3A0%3Ai%3A20221124025018%3Aet%3A1669258219%3Ac%3A1%3Arn%3A81915067%3Arqn%3A1%3Au%3A1669258218467400046%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C556%2C1%2C317%2C0%2C%2C642%2C46%2C%2C%2C%2C1759%3Ans%3A1669258216064%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669258219%3At%3A%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&t=gdpr%2814%29mc%28cm-1-tl-1%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 3645c73186254c1840f2b7b9f2ea329e
03374e2918df8768cd74e3d8dfdadc076ee61d74
0eaf27c5a1d2c1b8c64eaa0c11b82955993c9f2cead4cfd0ff70f3a102fb18eb
GET /watch/87642277/1?wmode=7&page-url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%22637edbe9-5893-74xi-mzib-c84goot8ujqb%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1279%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A3%3Adp%3A0%3Als%3A1646619967924%3Ahid%3A1048405681%3Az%3A0%3Ai%3A20221124025018%3Aet%3A1669258219%3Ac%3A1%3Arn%3A81915067%3Arqn%3A1%3Au%3A1669258218467400046%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C556%2C1%2C317%2C0%2C%2C642%2C46%2C%2C%2C%2C1759%3Ans%3A1669258216064%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669258219%3At%3A%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&t=gdpr%2814%29mc%28cm-1-tl-1%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.ogorodniky.ru
Referer: http://www.ogorodniky.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Thu, 24 Nov 2022 02:50:19 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://www.ogorodniky.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 24-Nov-2022 02:50:19 GMT
last-modified: Thu, 24-Nov-2022 02:50:19 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71281900?wmode=7&page-url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&charset=utf-8&site-info=%7B%22site_id%22%3A24074%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1279%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A1319645501355%3Ahid%3A1048405681%3Az%3A0%3Ai%3A20221124025018%3Aet%3A1669258219%3Ac%3A1%3Arn%3A591939453%3Arqn%3A1%3Au%3A1669258218467400046%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C556%2C1%2C317%2C0%2C%2C642%2C46%2C%2C%2C%2C1759%3Ans%3A1669258216064%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669258219%3At%3A%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&t=gdpr(14)mc(cm-1-tl-1)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
302 Found 14 kB URL HTTP/2 mc.yandex.ru/watch/71281900?wmode=7&page-url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&charset=utf-8&site-info=%7B%22site_id%22%3A24074%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1279%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A1319645501355%3Ahid%3A1048405681%3Az%3A0%3Ai%3A20221124025018%3Aet%3A1669258219%3Ac%3A1%3Arn%3A591939453%3Arqn%3A1%3Au%3A1669258218467400046%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C556%2C1%2C317%2C0%2C%2C642%2C46%2C%2C%2C%2C1759%3Ans%3A1669258216064%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669258219%3At%3A%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&t=gdpr(14)mc(cm-1-tl-1)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 64d79191f005c9876b952c5f948aa0f7
1102dbdcbcabf5c25d17840f8f00d5b55b9b8f0a
00fb36c3d322e8302c5ce202d6d4119d637510cd6f3b63e1347781ec3bb9d7fc
GET /watch/71281900?wmode=7&page-url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&charset=utf-8&site-info=%7B%22site_id%22%3A24074%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1279%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A1319645501355%3Ahid%3A1048405681%3Az%3A0%3Ai%3A20221124025018%3Aet%3A1669258219%3Ac%3A1%3Arn%3A591939453%3Arqn%3A1%3Au%3A1669258218467400046%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C556%2C1%2C317%2C0%2C%2C642%2C46%2C%2C%2C%2C1759%3Ans%3A1669258216064%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669258219%3At%3A%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&t=gdpr(14)mc(cm-1-tl-1)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.ogorodniky.ru
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/71281900/1?wmode=7&page-url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&charset=utf-8&site-info=%7B%22site_id%22%3A24074%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1279%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A1319645501355%3Ahid%3A1048405681%3Az%3A0%3Ai%3A20221124025018%3Aet%3A1669258219%3Ac%3A1%3Arn%3A591939453%3Arqn%3A1%3Au%3A1669258218467400046%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C556%2C1%2C317%2C0%2C%2C642%2C46%2C%2C%2C%2C1759%3Ans%3A1669258216064%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669258219%3At%3A%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&t=gdpr%2814%29mc%28cm-1-tl-1%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Thu, 24 Nov 2022 02:50:18 GMT
access-control-allow-origin: http://www.ogorodniky.ru
set-cookie: yandexuid=616462961669258218; Expires=Fri, 24-Nov-2023 02:50:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=616462961669258218; Expires=Fri, 24-Nov-2023 02:50:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2133126181669258218; Path=/; SameSite=None; Secure
i=pA1VIFroSmhOH/tSFpsyDqwM6veazcYcxl7a022uYByGi+o4sUPDJWEGWWxKlPHWH6b1o9GJm/r3mvK8Xz/vhp1jWoE=; Expires=Sun, 21-Nov-2032 02:50:17 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1700794218.yc.1669258218#1700794218.yrts.1669258218#1700794218.yrtsi.1669258218; Expires=Fri, 24-Nov-2023 02:50:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 24-Nov-2022 02:50:18 GMT
last-modified: Thu, 24-Nov-2022 02:50:18 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b4157f2c5c3c77ce699324ecb08f47c7
a7d9135f9d01ba13c3cdaf8b038c70212f159297
2305f7afee95bb34d9e8dbff571c6b146ba7b694be96e9e925c32d1f41785916
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7462
x-amzn-requestid: 1f6fb14d-83e0-43d3-9dab-5bc83af1a7c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEwV3HV9oAMFs9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9425-634d43db6308e0be596aa5a0;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:44:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GW5UTfY7-TwPWTno9z1e21a2cA9fmU7GfHFYWdL-zQvMLxeq-S9Trg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 22:08:16 GMT
age: 16923
etag: "a7d9135f9d01ba13c3cdaf8b038c70212f159297"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13103
Expires: Thu, 24 Nov 2022 06:28:42 GMT
Date: Thu, 24 Nov 2022 02:50:19 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff189dcee-7158-4549-abef-95dc2b7f7ca4.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff189dcee-7158-4549-abef-95dc2b7f7ca4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 037c0f19435a955d7ed58f65911e8f21
51a54b639617e113bb941d28b59c2571c0ca2e63
c2b15ed9257f220ed83845e1d0b343d21b7df9104c21162ea76b889609b8a404
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff189dcee-7158-4549-abef-95dc2b7f7ca4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9992
x-amzn-requestid: a16f614c-5a5b-4f8b-97cb-c248e0b50753
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvcYEa0IAMFm_w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e92b5-3b65b1b17c2a20b44a31aa9f;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:37:57 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: OC0uEwrEKZ6UEEg_mpvYcoVBEUSEA_qTttmyRp1xptCRD4Vi4pFbCg==
via: 1.1 946b9edb2009c5508a0fbbd636f95014.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 22:13:55 GMT
etag: "51a54b639617e113bb941d28b59c2571c0ca2e63"
content-type: image/jpeg
age: 16584
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
adlmerge.com/merge_gpsid/?sid=50&id=0100007FE9DB7E6378021E2C025FDB49
200 OK 8.1 kB URL HTTP/2 adlmerge.com/merge_gpsid/?sid=50&id=0100007FE9DB7E6378021E2C025FDB49
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 76466d3621f8cd02de1e8f76eb73129e
1f75e749d764c2ef10bd7d038192e0ec9e1bc4cd
95f339d5c5bd7d0a9c6c01f771948ede9cdb5bc0449370a65180e5a316d44164
GET /merge_gpsid/?sid=50&id=0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: adlmerge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.0
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: image/gif
iseu: eu
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 0612cb285cee65a0e63f5eeed91dcb7b
bc2c3e86803cd92ba0dbddd398c7d718e59a1aa3
a578a9818da59ae2f3fa7ce5fe78f1c22a9e5213c9562d58b88dfea9925f89d8
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Mon, 28 Nov 2022 01:42:38 GMT
ETag: "bc2c3e86803cd92ba0dbddd398c7d718e59a1aa3"
Last-Modified: Thu, 24 Nov 2022 01:42:39 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1069
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed61d2a9bb4fa-OSL
mc.yandex.ru/watch/2433115?wmode=7&page-url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1279%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A39344501817%3Ahid%3A1048405681%3Az%3A0%3Ai%3A20221124025017%3Aet%3A1669258218%3Ac%3A1%3Arn%3A39484585%3Arqn%3A1%3Au%3A1669258218467400046%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C556%2C1%2C317%2C0%2C%2C642%2C%2C%2C%2C%2C%3Ans%3A1669258216064%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669258218%3At%3A%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
302 Found 503 B URL HTTP/2 mc.yandex.ru/watch/2433115?wmode=7&page-url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1279%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A39344501817%3Ahid%3A1048405681%3Az%3A0%3Ai%3A20221124025017%3Aet%3A1669258218%3Ac%3A1%3Arn%3A39484585%3Arqn%3A1%3Au%3A1669258218467400046%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C556%2C1%2C317%2C0%2C%2C642%2C%2C%2C%2C%2C%3Ans%3A1669258216064%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669258218%3At%3A%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
GET /watch/2433115?wmode=7&page-url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1279%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A39344501817%3Ahid%3A1048405681%3Az%3A0%3Ai%3A20221124025017%3Aet%3A1669258218%3Ac%3A1%3Arn%3A39484585%3Arqn%3A1%3Au%3A1669258218467400046%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C556%2C1%2C317%2C0%2C%2C642%2C%2C%2C%2C%2C%3Ans%3A1669258216064%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669258218%3At%3A%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.ogorodniky.ru
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/2433115/1?wmode=7&page-url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1279%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A39344501817%3Ahid%3A1048405681%3Az%3A0%3Ai%3A20221124025017%3Aet%3A1669258218%3Ac%3A1%3Arn%3A39484585%3Arqn%3A1%3Au%3A1669258218467400046%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A7%2C1%2C556%2C1%2C317%2C0%2C%2C642%2C%2C%2C%2C%2C%3Ans%3A1669258216064%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669258218%3At%3A%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Thu, 24 Nov 2022 02:50:18 GMT
access-control-allow-origin: http://www.ogorodniky.ru
set-cookie: yandexuid=8056005791669258218; Expires=Fri, 24-Nov-2023 02:50:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=8056005791669258218; Expires=Fri, 24-Nov-2023 02:50:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=1569946551669258218; Path=/; SameSite=None; Secure
i=nlXMk9Luy+nm7xMs35O0VlVsyqdEHiPQV95CjMlGARGhjqCMGzXY5KcXKAC6J11ZChbn9Uvhx9Lt6eWO3a68p+7S4Xc=; Expires=Sun, 21-Nov-2032 02:50:02 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1700794218.yc.1669258218#1700794218.yrts.1669258218#1700794218.yrtsi.1669258218; Expires=Fri, 24-Nov-2023 02:50:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 24-Nov-2022 02:50:18 GMT
last-modified: Thu, 24-Nov-2022 02:50:18 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash acb18663f6c932ea461989fd9b7f43a4
0a31cea9f27c03de0918351b49cb169a2a406c8c
dc3e63f387a53d00b948777bf86301e661a79b1f42b81a9d5e9c68aea3e3ced8
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Mon, 28 Nov 2022 00:57:53 GMT
ETag: "0a31cea9f27c03de0918351b49cb169a2a406c8c"
Last-Modified: Thu, 24 Nov 2022 00:57:54 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1992
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed61d5ea4b51b-OSL
counter.yadro.ru/hit?t41.7;r;s1280*1024*24;uhttp%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html;0.9860409838328394
200 OK 104 B URL HTTP/1.1 counter.yadro.ru/hit?t41.7;r;s1280*1024*24;uhttp%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html;0.9860409838328394
IP
ASN #39134 United Network LLC
File type GIF image data, version 87a, 31 x 31\012- data
Hash 9969fa512da17807d7d7bbfee9a291c8
d4ac525ed9a1ede0fc0d862f0843151fe9234f55
ab9da59c4e6b379ab136b4f4e7b8273c02c09ccce1db3dbb61b163b221df7394
GET /hit?t41.7;r;s1280*1024*24;uhttp%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html;0.9860409838328394 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ogorodniky.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Type: image/gif
Content-Length: 104
Connection: keep-alive
Expires: Tue, 23 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c04aed338f8610ba6b0acc4ab749c52e
9cce76bf45ca7cb7e101d6c5c8013ecc83f188a4
4d4e0d35a6f2357ff749b146e4f0fdff7f5f8631b3e6efee952f5c82fb256fbd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 02:50:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 942e48a42959a84a8fb01744fd2caf86
a3659e206ba81e8549afa2d9138060148883ba90
7b84fbd99ebee52b8eb3b3d506ffc4ff9d15bd2bd211fc4003a20fe3ef171501
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 02:50:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8069f5e67c25fc0b7388ba5d4decd8c9
64a85ba44c80ea206f4382f573c3d61e4f607ccf
7587cd04333ddf1cff15ae219cb8fca0618786a9fe4cee989975f4d50889e72a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 02:50:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
top-fwz1.mail.ru/counter2?js=13;id=2685520;u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html;st=1669258218314;pid=0;title=%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.;s=1280*1024;vp=180*290;touch=0;hds=1;frame=1;flash=;sid=c94291ea3ebb4c35;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669258218786%3A1669258218791%3A0%3A790441c855357a2af756b8a997e02924;visible=true;_=0.7696328783450671
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/counter2?js=13;id=2685520;u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html;st=1669258218314;pid=0;title=%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.;s=1280*1024;vp=180*290;touch=0;hds=1;frame=1;flash=;sid=c94291ea3ebb4c35;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669258218786%3A1669258218791%3A0%3A790441c855357a2af756b8a997e02924;visible=true;_=0.7696328783450671
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /counter2?js=13;id=2685520;u=http%3A//www.ogorodniky.ru/retsepty/shashlychki-iz-pomidorov-i-syra.html;st=1669258218314;pid=0;title=%D0%A8%D0%B0%D1%88%D0%BB%D1%8B%D1%87%D0%BA%D0%B8%20%D0%B8%D0%B7%20%D0%BF%D0%BE%D0%BC%D0%B8%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%20%D0%B8%20%D1%81%D1%8B%D1%80%D0%B0.;s=1280*1024;vp=180*290;touch=0;hds=1;frame=1;flash=;sid=c94291ea3ebb4c35;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1669258218786%3A1669258218791%3A0%3A790441c855357a2af756b8a997e02924;visible=true;_=0.7696328783450671 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vk.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 02:50:19 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIID:1669258219:2685520:::; path=/; expires=Sat, 25-Nov-23 02:50:19 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
counter.rambler.ru/top100.cnt?2355948
200 OK 595 B URL HTTP/2 counter.rambler.ru/top100.cnt?2355948
IP
ASN #24638 Rambler Internet Holding LLC
File type GIF image data, version 87a, 88 x 31\012- data
Hash 16c73e9773299b4355bbfeed6dc57a6c
d84045c198bf7f8eda69c695e7f60c6f3dcc29a6
d55d80dda4ca1c3c956a0f62504bc7d196c6ebf98dcbde30aa337e6b7179fc7b
GET /top100.cnt?2355948 HTTP/1.1
Host: counter.rambler.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ogorodniky.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.19.4
date: Thu, 24 Nov 2022 02:50:19 GMT
content-type: image/gif
content-length: 595
last-modified: Tue, 12 Nov 2019 12:50:59 GMT
etag: "5dcaaab3-253"
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: content-type
access-control-allow-credentials: true
x-srv: 2kraken-prod0003.ad.rambler.tech
set-cookie: ruid=1CIAAOvbfmNJLacvAeDLdgB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
proto_uid=1CIAAOvbfmNJLacvAeDLdgB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
p3p: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
accept-ranges: bytes
X-Firefox-Spdy: h2
partner.googleadservices.com/gampad/cookie.js?domain=www.ogorodniky.ru&callback=_gfp_s_&client=ca-pub-5983622240414035&gpid_exp=1
200 OK 254 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=www.ogorodniky.ru&callback=_gfp_s_&client=ca-pub-5983622240414035&gpid_exp=1
IP
File type ASCII text, with very long lines (393), with no line terminators
Hash e4a2ee6d6d0b2d34ab9ae7746c496fc4
53f0bea451be38d0fd0915809bcd36eb1ba32e88
59f551c1d0eef55ac2dcfe9663774051af6859f4bbe47ac18213744ed6c76f7c
GET /gampad/cookie.js?domain=www.ogorodniky.ru&callback=_gfp_s_&client=ca-pub-5983622240414035&gpid_exp=1 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 24 Nov 2022 02:50:19 GMT
server: cafe
cache-control: private
content-length: 254
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=www.ogorodniky.ru
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=www.ogorodniky.ru
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.ogorodniky.ru HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 24 Nov 2022 02:50:19 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=www.ogorodniky.ru
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=www.ogorodniky.ru
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.ogorodniky.ru HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Thu, 24 Nov 2022 02:50:19 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 942e48a42959a84a8fb01744fd2caf86
a3659e206ba81e8549afa2d9138060148883ba90
7b84fbd99ebee52b8eb3b3d506ffc4ff9d15bd2bd211fc4003a20fe3ef171501
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 02:50:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
top-fwz1.mail.ru/counter2?id=1978695;t=79;js=13;s=1280*1024;_=0.8574119781733884
200 OK 862 B URL HTTP/2 top-fwz1.mail.ru/counter2?id=1978695;t=79;js=13;s=1280*1024;_=0.8574119781733884
IP
File type GIF image data, version 87a, 38 x 31\012- data
Hash 181216fc94b3f274595588d0d9acc847
14772cde7a8889184eac635993f709d0c8330e60
fb34d0a005915da515f2288a78151fdfd0b77b841d8eb7846fcc91cf74607cc7
GET /counter2?id=1978695;t=79;js=13;s=1280*1024;_=0.8574119781733884 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ogorodniky.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 02:50:19 GMT
content-type: image/gif
content-length: 862
set-cookie: FTID=1RMYgQ0tkIID:1669258219:1978695:::; path=/; expires=Sat, 25-Nov-23 02:50:19 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8069f5e67c25fc0b7388ba5d4decd8c9
64a85ba44c80ea206f4382f573c3d61e4f607ccf
7587cd04333ddf1cff15ae219cb8fca0618786a9fe4cee989975f4d50889e72a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 02:50:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f9c317bc34b288f5c966d8cad22a5536
66b9423a02a03e0a7f66f589e2d9fbd7bf1d93a1
3ec750d957e40c6ac26d9b26670abbd62b4fd58110eceffe0db093b4465be682
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3EC750D957E40C6AC26D9B26670ABBD62B4FD58110ECEFFE0DB093B4465BE682"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10148
Expires: Thu, 24 Nov 2022 05:39:27 GMT
Date: Thu, 24 Nov 2022 02:50:19 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b6a795cdfedb5c954b3000dbb2dc7f90
b17bb97d224d89bc8227cddf5a8386e100751cda
78c411d16c1be2d8da51fc409cb45ec2aca8d32b77ab4d1a1a1fe5d1a33552e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 02:50:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5983622240414035&output=html&h=90&slotname=7403411579&adk=95136831&adf=3795008738&pi=t.ma~as.7403411579&w=728&lmt=1669258217&url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&wgl=1&dt=1669258217585&bpp=8&bdt=606&idt=1300&shv=r20221110&mjsv=m202211100101&ptt=5&saldr=sa&abxe=1&cookie=ID%3D7e30844197405ced-2253ea6281d700f7%3AT%3D1669258219%3ART%3D1669258219%3AS%3DALNI_MZNneR9O4kv9_JSCgLoHoj8U7p2GQ&gpic=UID%3D00000b866e7c329e%3AT%3D1669258219%3ART%3D1669258219%3AS%3DALNI_MY4KflsuwjD7V0xbUpfZE2KCj62mQ&prev_slotnames=7952916495%2C4317778340&correlator=3498284737075&frm=20&pv=1&ga_vid=1205672230.1669258219&ga_sid=1669258219&ga_hid=338518240&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=270&ady=1633&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759842%2C44777877%2C42531706&oid=2&pvsid=2456102140424357&nvt=1&eae=0&fc=640&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7C%7CoEebr%7C&abl=CS&pfx=0&fu=0&bc=23&ifi=3&uci=a!3&btvi=1&fsb=1&xpc=JFOxz5WaeV&p=http%3A//www.ogorodniky.ru&dtd=1434
200 OK 206 B URL HTTP/2 googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5983622240414035&output=html&h=90&slotname=7403411579&adk=95136831&adf=3795008738&pi=t.ma~as.7403411579&w=728&lmt=1669258217&url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&wgl=1&dt=1669258217585&bpp=8&bdt=606&idt=1300&shv=r20221110&mjsv=m202211100101&ptt=5&saldr=sa&abxe=1&cookie=ID%3D7e30844197405ced-2253ea6281d700f7%3AT%3D1669258219%3ART%3D1669258219%3AS%3DALNI_MZNneR9O4kv9_JSCgLoHoj8U7p2GQ&gpic=UID%3D00000b866e7c329e%3AT%3D1669258219%3ART%3D1669258219%3AS%3DALNI_MY4KflsuwjD7V0xbUpfZE2KCj62mQ&prev_slotnames=7952916495%2C4317778340&correlator=3498284737075&frm=20&pv=1&ga_vid=1205672230.1669258219&ga_sid=1669258219&ga_hid=338518240&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=270&ady=1633&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759842%2C44777877%2C42531706&oid=2&pvsid=2456102140424357&nvt=1&eae=0&fc=640&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7C%7CoEebr%7C&abl=CS&pfx=0&fu=0&bc=23&ifi=3&uci=a!3&btvi=1&fsb=1&xpc=JFOxz5WaeV&p=http%3A//www.ogorodniky.ru&dtd=1434
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (430), with no line terminators
Hash 341bd88c855c35880a5e80438b6d4b00
81b2e0e932364dca57c1c50b362ea64603b6b8c9
78d0d1e949423f73147af64e1e90b6e2ef4c25d340bd57a6f1c9120cffda6147
GET /pagead/ads?client=ca-pub-5983622240414035&output=html&h=90&slotname=7403411579&adk=95136831&adf=3795008738&pi=t.ma~as.7403411579&w=728&lmt=1669258217&url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&wgl=1&dt=1669258217585&bpp=8&bdt=606&idt=1300&shv=r20221110&mjsv=m202211100101&ptt=5&saldr=sa&abxe=1&cookie=ID%3D7e30844197405ced-2253ea6281d700f7%3AT%3D1669258219%3ART%3D1669258219%3AS%3DALNI_MZNneR9O4kv9_JSCgLoHoj8U7p2GQ&gpic=UID%3D00000b866e7c329e%3AT%3D1669258219%3ART%3D1669258219%3AS%3DALNI_MY4KflsuwjD7V0xbUpfZE2KCj62mQ&prev_slotnames=7952916495%2C4317778340&correlator=3498284737075&frm=20&pv=1&ga_vid=1205672230.1669258219&ga_sid=1669258219&ga_hid=338518240&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=270&ady=1633&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759842%2C44777877%2C42531706&oid=2&pvsid=2456102140424357&nvt=1&eae=0&fc=640&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7C%7CoEebr%7C&abl=CS&pfx=0&fu=0&bc=23&ifi=3&uci=a!3&btvi=1&fsb=1&xpc=JFOxz5WaeV&p=http%3A//www.ogorodniky.ru&dtd=1434 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Thu, 24 Nov 2022 02:50:19 GMT
server: cafe
content-length: 206
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 24-Nov-2022 03:05:19 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Thu, 24 Nov 2022 02:50:19 GMT
cache-control: private
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=agentstvo_sape_limited&google_hm=AQAAf-nbfmN4Ah4sAl_bSQ
200 OK 170 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=agentstvo_sape_limited&google_hm=AQAAf-nbfmN4Ah4sAl_bSQ
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash e7673c60af825466f83d46da72ca1635
fc0fcbee0835709ba2d28798a612bfd687903fb5
0b8a20373c6dd04e091902226d922b3688143a8938afb9d283d889de7b55ceb5
GET /pixel?google_nid=agentstvo_sape_limited&google_hm=AQAAf-nbfmN4Ah4sAl_bSQ HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
date: Thu, 24 Nov 2022 02:50:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: HTTP server (unknown)
content-length: 170
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5983622240414035&output=html&h=60&slotname=7952916495&adk=1277605347&adf=2417016833&pi=t.ma~as.7952916495&w=468&lmt=1669258217&url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&wgl=1&dt=1669258217585&bpp=25&bdt=607&idt=1261&shv=r20221110&mjsv=m202211100101&ptt=5&saldr=sa&abxe=1&cookie=ID%3D7e30844197405ced-2253ea6281d700f7%3AT%3D1669258219%3ART%3D1669258219%3AS%3DALNI_MZNneR9O4kv9_JSCgLoHoj8U7p2GQ&gpic=UID%3D00000b866e7c329e%3AT%3D1669258219%3ART%3D1669258219%3AS%3DALNI_MY4KflsuwjD7V0xbUpfZE2KCj62mQ&correlator=3498284737075&frm=20&pv=2&ga_vid=1205672230.1669258219&ga_sid=1669258219&ga_hid=338518240&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=430&ady=351&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759842%2C44777877%2C42531706&oid=2&pvsid=2456102140424357&nvt=1&eae=0&fc=640&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7C%7CoEe%7C&abl=CS&pfx=0&fu=0&bc=23&ifi=1&uci=a!1&fsb=1&xpc=j5wS8IYLsw&p=http%3A//www.ogorodniky.ru&dtd=1421
200 OK 206 B URL HTTP/2 googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5983622240414035&output=html&h=60&slotname=7952916495&adk=1277605347&adf=2417016833&pi=t.ma~as.7952916495&w=468&lmt=1669258217&url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&wgl=1&dt=1669258217585&bpp=25&bdt=607&idt=1261&shv=r20221110&mjsv=m202211100101&ptt=5&saldr=sa&abxe=1&cookie=ID%3D7e30844197405ced-2253ea6281d700f7%3AT%3D1669258219%3ART%3D1669258219%3AS%3DALNI_MZNneR9O4kv9_JSCgLoHoj8U7p2GQ&gpic=UID%3D00000b866e7c329e%3AT%3D1669258219%3ART%3D1669258219%3AS%3DALNI_MY4KflsuwjD7V0xbUpfZE2KCj62mQ&correlator=3498284737075&frm=20&pv=2&ga_vid=1205672230.1669258219&ga_sid=1669258219&ga_hid=338518240&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=430&ady=351&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759842%2C44777877%2C42531706&oid=2&pvsid=2456102140424357&nvt=1&eae=0&fc=640&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7C%7CoEe%7C&abl=CS&pfx=0&fu=0&bc=23&ifi=1&uci=a!1&fsb=1&xpc=j5wS8IYLsw&p=http%3A//www.ogorodniky.ru&dtd=1421
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (430), with no line terminators
Hash 559e4c05d293ab9b704ba4e8b5bae9ac
a7848a4256137abb85f9cfb48f5873f1bd0f12fd
3bf0dc6068c160246ab3f7835a4b27e6ed94509dd4043e0283e106abc2858675
GET /pagead/ads?client=ca-pub-5983622240414035&output=html&h=60&slotname=7952916495&adk=1277605347&adf=2417016833&pi=t.ma~as.7952916495&w=468&lmt=1669258217&url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&wgl=1&dt=1669258217585&bpp=25&bdt=607&idt=1261&shv=r20221110&mjsv=m202211100101&ptt=5&saldr=sa&abxe=1&cookie=ID%3D7e30844197405ced-2253ea6281d700f7%3AT%3D1669258219%3ART%3D1669258219%3AS%3DALNI_MZNneR9O4kv9_JSCgLoHoj8U7p2GQ&gpic=UID%3D00000b866e7c329e%3AT%3D1669258219%3ART%3D1669258219%3AS%3DALNI_MY4KflsuwjD7V0xbUpfZE2KCj62mQ&correlator=3498284737075&frm=20&pv=2&ga_vid=1205672230.1669258219&ga_sid=1669258219&ga_hid=338518240&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=430&ady=351&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759842%2C44777877%2C42531706&oid=2&pvsid=2456102140424357&nvt=1&eae=0&fc=640&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7C%7CoEe%7C&abl=CS&pfx=0&fu=0&bc=23&ifi=1&uci=a!1&fsb=1&xpc=j5wS8IYLsw&p=http%3A//www.ogorodniky.ru&dtd=1421 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Thu, 24 Nov 2022 02:50:19 GMT
server: cafe
content-length: 206
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 24-Nov-2022 03:05:19 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Thu, 24 Nov 2022 02:50:19 GMT
cache-control: private
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5983622240414035&output=html&h=600&slotname=4317778340&adk=4203288554&adf=1249957043&pi=t.ma~as.4317778340&w=120&lmt=1669258217&url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&wgl=1&dt=1669258217585&bpp=8&bdt=607&idt=1295&shv=r20221110&mjsv=m202211100101&ptt=5&saldr=sa&abxe=1&cookie=ID%3D7e30844197405ced-2253ea6281d700f7%3AT%3D1669258219%3ART%3D1669258219%3AS%3DALNI_MZNneR9O4kv9_JSCgLoHoj8U7p2GQ&gpic=UID%3D00000b866e7c329e%3AT%3D1669258219%3ART%3D1669258219%3AS%3DALNI_MY4KflsuwjD7V0xbUpfZE2KCj62mQ&prev_slotnames=7952916495&correlator=3498284737075&frm=20&pv=1&ga_vid=1205672230.1669258219&ga_sid=1669258219&ga_hid=338518240&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=974&ady=869&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759842%2C44777877%2C42531706&oid=2&pvsid=2456102140424357&nvt=1&eae=0&fc=640&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7C%7CoEe%7C&abl=CS&pfx=0&fu=0&bc=23&ifi=2&uci=a!2&fsb=1&xpc=MHHFJEvRfe&p=http%3A//www.ogorodniky.ru&dtd=1428
200 OK 207 B URL HTTP/2 googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5983622240414035&output=html&h=600&slotname=4317778340&adk=4203288554&adf=1249957043&pi=t.ma~as.4317778340&w=120&lmt=1669258217&url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&wgl=1&dt=1669258217585&bpp=8&bdt=607&idt=1295&shv=r20221110&mjsv=m202211100101&ptt=5&saldr=sa&abxe=1&cookie=ID%3D7e30844197405ced-2253ea6281d700f7%3AT%3D1669258219%3ART%3D1669258219%3AS%3DALNI_MZNneR9O4kv9_JSCgLoHoj8U7p2GQ&gpic=UID%3D00000b866e7c329e%3AT%3D1669258219%3ART%3D1669258219%3AS%3DALNI_MY4KflsuwjD7V0xbUpfZE2KCj62mQ&prev_slotnames=7952916495&correlator=3498284737075&frm=20&pv=1&ga_vid=1205672230.1669258219&ga_sid=1669258219&ga_hid=338518240&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=974&ady=869&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759842%2C44777877%2C42531706&oid=2&pvsid=2456102140424357&nvt=1&eae=0&fc=640&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7C%7CoEe%7C&abl=CS&pfx=0&fu=0&bc=23&ifi=2&uci=a!2&fsb=1&xpc=MHHFJEvRfe&p=http%3A//www.ogorodniky.ru&dtd=1428
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (430), with no line terminators
Hash d9047c42a7c669132ad814e44bb80650
8584eb1da0fe5d5e1e78d57a15e8469e7b2f9455
55469a24dfbc59b126c7508017696860b65c8896949026ad26e9de7e60ce3c16
GET /pagead/ads?client=ca-pub-5983622240414035&output=html&h=600&slotname=4317778340&adk=4203288554&adf=1249957043&pi=t.ma~as.4317778340&w=120&lmt=1669258217&url=http%3A%2F%2Fwww.ogorodniky.ru%2Fretsepty%2Fshashlychki-iz-pomidorov-i-syra.html&wgl=1&dt=1669258217585&bpp=8&bdt=607&idt=1295&shv=r20221110&mjsv=m202211100101&ptt=5&saldr=sa&abxe=1&cookie=ID%3D7e30844197405ced-2253ea6281d700f7%3AT%3D1669258219%3ART%3D1669258219%3AS%3DALNI_MZNneR9O4kv9_JSCgLoHoj8U7p2GQ&gpic=UID%3D00000b866e7c329e%3AT%3D1669258219%3ART%3D1669258219%3AS%3DALNI_MY4KflsuwjD7V0xbUpfZE2KCj62mQ&prev_slotnames=7952916495&correlator=3498284737075&frm=20&pv=1&ga_vid=1205672230.1669258219&ga_sid=1669258219&ga_hid=338518240&ga_fc=1&u_tz=0&u_his=1&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_sd=1&adx=974&ady=869&biw=1268&bih=939&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759842%2C44777877%2C42531706&oid=2&pvsid=2456102140424357&nvt=1&eae=0&fc=640&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1280%2C939&vis=1&rsz=%7C%7CoEe%7C&abl=CS&pfx=0&fu=0&bc=23&ifi=2&uci=a!2&fsb=1&xpc=MHHFJEvRfe&p=http%3A//www.ogorodniky.ru&dtd=1428 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
date: Thu, 24 Nov 2022 02:50:19 GMT
server: cafe
content-length: 207
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 24-Nov-2022 03:05:19 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Thu, 24 Nov 2022 02:50:19 GMT
cache-control: private
X-Firefox-Spdy: h2
bb156612-6ba2-11ed-ab15-002590c82437.n4.sync.bumlam.com/?src=sape
302 Moved Temporarily 0 B URL HTTP/1.1 bb156612-6ba2-11ed-ab15-002590c82437.n4.sync.bumlam.com/?src=sape
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sape HTTP/1.1
Host: bb156612-6ba2-11ed-ab15-002590c82437.n4.sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiRiYjE1NjYxMi02YmEyLTExZWQtYWIxNS0wMDI1OTBjODI0Mzc*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Length: 0
Connection: close
Location: https://pix.bumlam.com/sync/sape/done
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d7509af40e51a74ff5e039e4be01c831
efc655b2e441c58f0423020af9eed171ed98cb50
3cf221c3e25132b87dac5827d9d6fd7f1d729a4e774b02093a67a4e2cdcee2b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3CF221C3E25132B87DAC5827D9D6FD7F1D729A4E774B02093A67A4E2CDCEE2B0"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1963
Expires: Thu, 24 Nov 2022 03:23:02 GMT
Date: Thu, 24 Nov 2022 02:50:19 GMT
Connection: keep-alive
ad.mail.ru/cm.gif?p=48&id=0100007FE9DB7E6378021E2C025FDB49
200 OK 43 B URL HTTP/2 ad.mail.ru/cm.gif?p=48&id=0100007FE9DB7E6378021E2C025FDB49
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /cm.gif?p=48&id=0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: ad.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 02:50:19 GMT
content-type: image/gif
content-length: 43
set-cookie: VID=2dop7m3YagYD0025Tj3VeBYD:::0-0-0-89934ab:CAASEDRJU946Y-zMNcr9AntQ3QQaYBHdgdv8YYwM50B3-oo_i9xOwa6uci5yzd2sj-WyB83YfKgZBVfrBY6LrABgIvQ2MLh9pO9ShaW96DMBWSVshcz69bIHzqobm5dDGn85PVWRMxpzLZxNRrWHXK9OJ_aW_w; path=/; expires=Sat, 25-Nov-23 02:50:19 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
expires: Thu, 24 Nov 2022 08:50:19 GMT
cache-control: max-age=21600
last-modified: Thu, 24 Nov 2022 02:50:19 GMT
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: require-corp
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash cecc5d216805b2650577ed708804b643
ca0acc76169acc643bf45c84184a0f87a5f399d0
a4721c9847a950860165094200428dad82d1a925c2b5353983983d7c47d8f6ae
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 23 Nov 2022 21:32:18 GMT
Expires: Thu, 24 Nov 2022 21:32:18 GMT
ETag: "ca0acc76169acc643bf45c84184a0f87a5f399d0"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 39d773c5fe0db19db1af7a30741d942e
310945397db57dab3723cf74fe667dcd200bffc5
749fa1e15fbd3ddfcf6113d48834fe3cbc9ac9cddd46a70043fbc37081ef2116
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 28 Nov 2022 01:17:37 GMT
ETag: "310945397db57dab3723cf74fe667dcd200bffc5"
Last-Modified: Thu, 24 Nov 2022 01:17:38 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 930
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed61f8ae9b4f3-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash acc6cb1ec398d4c8ac0997d0a3d2652c
7c07f66b52edadd2b9f1d2f5c6437723fc70f75c
c383fa1ce4e54aa8b0c9fdaed3408a43b896b77d80dca4a499827915d0d178bf
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 04:09:18 GMT
Expires: Tue, 29 Nov 2022 04:09:17 GMT
Etag: "7c07f66b52edadd2b9f1d2f5c6437723fc70f75c"
Cache-Control: max-age=436137,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76eed61f585e0b49-OSL
pix.bumlam.com/sync/sape/done
200 OK 43 B URL HTTP/1.1 pix.bumlam.com/sync/sape/done
IP
ASN #44066 diva-e Datacenters GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /sync/sape/done HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiRiYjE1NjYxMi02YmEyLTExZWQtYWIxNS0wMDI1OTBjODI0Mzc*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
tag.digitaltarget.ru/adcm.js
200 OK 3.1 kB URL HTTP/1.1 tag.digitaltarget.ru/adcm.js
IP
File type ASCII text, with very long lines (3051), with no line terminators
Hash e7097284185069f52fc736bcd50cda13
1cdfdf2d869841202079ddf91e0a00a8610812e6
40f2a96f78f4c8484e9da6e172f5ddd3e4d7786ca29e04b96e1067a365190e80
GET /adcm.js HTTP/1.1
Host: tag.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Type: application/javascript
Content-Length: 3051
Last-Modified: Thu, 24 Nov 2022 02:34:25 GMT
Connection: keep-alive
ETag: "637ed831-beb"
Accept-Ranges: bytes
fcgi4.gnezdo.ru/cookie_matching_ssp/Sape-dsp/0100007FE9DB7E6378021E2C025FDB49
204 No Content 0 B URL HTTP/2 fcgi4.gnezdo.ru/cookie_matching_ssp/Sape-dsp/0100007FE9DB7E6378021E2C025FDB49
IP
ASN #48347 JSC Mediasoft ekspert
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookie_matching_ssp/Sape-dsp/0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: fcgi4.gnezdo.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Thu, 24 Nov 2022 02:50:19 GMT
set-cookie: uid=XV9maWN+2+scqyF9nTXYAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=gnezdo.ru; path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
X-Firefox-Spdy: h2
redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
302 Found 0 B URL HTTP/2 redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect HTTP/1.1
Host: redirect.frontend.weborama.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: Weborama Collect Frontend
date: Thu, 24 Nov 2022 02:50:19 GMT
content-length: 0
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=1233210897
access-control-allow-origin: *
p3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM"
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: Tue, 03 Jul 2001 06:00:00 GMT
last-modified: Thu, 24 Nov 2022 02:50:19 GMT
set-cookie: AFFICHE_W=Ngyu8KzLlGs219; expires=Fri, 22 Dec 2023 02:50:19 GMT; domain=.weborama.fr; path=/; secure; SameSite=None
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=73&external_user_id=0100007FE9DB7E6378021E2C025FDB49
302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=73&external_user_id=0100007FE9DB7E6378021E2C025FDB49
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=73&external_user_id=0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /match?bidder_id=73&external_user_id=0100007FE9DB7E6378021E2C025FDB49&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Fri, 24 Nov 2023 02:50:19 GMT; Path=/; Domain=.betweendigital.com
tuuid=683bf7ee-13b3-5248-a4d1-76dbc7afad30; Max-Age=31536000; Expires=Fri, 24 Nov 2023 02:50:19 GMT; Path=/; Domain=.betweendigital.com
ut=Y37b6wAGJjhk-1NhNpdmMvvf6Bn_N-QxZc48Mw==; Max-Age=31536000; Expires=Fri, 24 Nov 2023 02:50:19 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
ocsp.usertrust.com/
200 OK 472 B IP
Hash 983dca996fc12d33eeab85f7725c4b84
4c3fc9a8e41ab14f7720459c8e62f18dcb17534e
db536a6c31c160e2e3c8ed56afc08f1bd2725d495d434ae989184cf3d866d052
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 21 Nov 2022 04:18:22 GMT
Expires: Mon, 28 Nov 2022 04:18:21 GMT
Etag: "4c3fc9a8e41ab14f7720459c8e62f18dcb17534e"
Cache-Control: max-age=602471,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 639
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed61fd9751c0e-OSL
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash c2fa2384516175a6739ed207b79db73d
3acd5cf854df41835b81bcf88b89d280bfc4e884
96706d2736cda4d68d7675ffb86bea7677950246a3fda22226cb9dd20cd15809
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Mon, 28 Nov 2022 00:17:31 GMT
ETag: "3acd5cf854df41835b81bcf88b89d280bfc4e884"
Last-Modified: Thu, 24 Nov 2022 00:17:32 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3136
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed61fdc30b4fa-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash acc6cb1ec398d4c8ac0997d0a3d2652c
7c07f66b52edadd2b9f1d2f5c6437723fc70f75c
c383fa1ce4e54aa8b0c9fdaed3408a43b896b77d80dca4a499827915d0d178bf
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 04:09:18 GMT
Expires: Tue, 29 Nov 2022 04:09:17 GMT
Etag: "7c07f66b52edadd2b9f1d2f5c6437723fc70f75c"
Cache-Control: max-age=436137,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76eed61fa8700b49-OSL
status.thawte.com/
200 OK 471 B IP
Hash 18c7533b7c73d319c8d5d6b3c7960d4c
3816ffb6c0a25ce622001f7ae03fc87136df8eb5
a058a255e5da6ee00019456455c82540c35e8665d92f906ea0608057e7fa0c68
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6256
Cache-Control: max-age=162067
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 02:50:19 GMT
Etag: "637e998e-1d7"
Expires: Fri, 25 Nov 2022 23:51:26 GMT
Last-Modified: Wed, 23 Nov 2022 22:07:10 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
px.adhigh.net/p/cm/sape?u=0100007FE9DB7E6378021E2C025FDB49
302 Found 0 B URL HTTP/2 px.adhigh.net/p/cm/sape?u=0100007FE9DB7E6378021E2C025FDB49
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/cm/sape?u=0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Thu, 24 Nov 2022 02:50:19 GMT
content-length: 0
x-backend-id: f12-ru
access-control-allow-origin: *
access-control-allow-credentials: true
set-cookie: gi_u=6A84pz6fL0z.AikABlGEp4sP6A;Path=/;Domain=.adhigh.net;Expires=Fri, 24-Nov-2023 02:50:19 GMT;Secure;SameSite=None
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
location: https://px.adhigh.net/p/cm/sape?u=0100007FE9DB7E6378021E2C025FDB49&bounced=1
X-Firefox-Spdy: h2
redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=1233210897
204 No Content 0 B URL HTTP/2 redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=1233210897
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=1233210897 HTTP/1.1
Host: redirect.frontend.weborama.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: Weborama Collect Frontend
date: Thu, 24 Nov 2022 02:50:19 GMT
access-control-allow-origin: *
p3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM"
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: Tue, 03 Jul 2001 06:00:00 GMT
last-modified: Thu, 24 Nov 2022 02:50:19 GMT
set-cookie: AFFICHE_W=; expires=Tue, 10 Nov 2009 23:00:00 GMT; domain=.weborama.fr; path=/; secure; SameSite=None
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash e9a1c3a865f9266003bc058e6a45d253
770fc379797604ca40e77d04be7f7370171208ff
689f9ce34a9b0ff9b80eb86bb661fc65b8f890ea5df5c6a60b0913fbef0d2b6f
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Mon, 28 Nov 2022 02:16:01 GMT
ETag: "770fc379797604ca40e77d04be7f7370171208ff"
Last-Modified: Thu, 24 Nov 2022 02:16:02 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 663
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed6200b03b4f3-OSL
ads.betweendigital.com/match?bidder_id=73&external_user_id=0100007FE9DB7E6378021E2C025FDB49&crf=1
200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=73&external_user_id=0100007FE9DB7E6378021E2C025FDB49&crf=1
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=73&external_user_id=0100007FE9DB7E6378021E2C025FDB49&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Fri, 24 Nov 2023 02:50:19 GMT; Path=/; Domain=.betweendigital.com
tuuid=6e603c3a-c2e4-5248-b741-354ad43feea1; Max-Age=31536000; Expires=Fri, 24 Nov 2023 02:50:19 GMT; Path=/; Domain=.betweendigital.com
ut=Y37b6wAK6PjsDR582g1xxUutjuYLBalqIHP3oQ==; Max-Age=31536000; Expires=Fri, 24 Nov 2023 02:50:19 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
sync.adkernel.com/user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D
200 OK 0 B URL HTTP/1.1 sync.adkernel.com/user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D
IP
ASN #36057 WEBAIR-INTERNET-MTL
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D HTTP/1.1
Host: sync.adkernel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Length: 0
Connection: close
ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D
302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Fri, 24 Nov 2023 02:50:19 GMT; Path=/; Domain=.betweendigital.com
tuuid=02672735-deec-5248-9d00-7a0afe7ea1e1; Max-Age=31536000; Expires=Fri, 24 Nov 2023 02:50:19 GMT; Path=/; Domain=.betweendigital.com
ut=Y37b6wAG9UA-bBHsirzQ4E4suEtlHApZaPHMLg==; Max-Age=31536000; Expires=Fri, 24 Nov 2023 02:50:19 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
sape-sync.rutarget.ru/sync
302 Moved Temporarily 0 B URL HTTP/1.1 sape-sync.rutarget.ru/sync
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync HTTP/1.1
Host: sape-sync.rutarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Length: 0
Connection: close
Location: https://www.acint.net/match?dp=104&euid=HFvWDXiU-ip3
P3P: CP="This is not a P3P policy. Please visit http://rutarget.ru/p3p/ to get more information."
Set-Cookie: userId=HFvWDXiU-ip3; Path=/; Domain=.rutarget.ru; Expires=Tue, 23 May 2023 02:50:19 GMT; SameSite=None; Secure
ads.betweendigital.com/match?bidder_id=98&external_user_id=NGZiNTMwY2E4NTdmY2VjMw
302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=98&external_user_id=NGZiNTMwY2E4NTdmY2VjMw
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=98&external_user_id=NGZiNTMwY2E4NTdmY2VjMw HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /match?bidder_id=98&external_user_id=NGZiNTMwY2E4NTdmY2VjMw&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Fri, 24 Nov 2023 02:50:19 GMT; Path=/; Domain=.betweendigital.com
tuuid=a0fcc6af-f7b7-5248-ae9f-cc5bcde117b0; Max-Age=31536000; Expires=Fri, 24 Nov 2023 02:50:19 GMT; Path=/; Domain=.betweendigital.com
ut=Y37b6wAJ-rC_k8-3LX-M74UCotilY1N0K1Pptw==; Max-Age=31536000; Expires=Fri, 24 Nov 2023 02:50:19 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 7880848492d486e535636f72eee9e642
1dd72ecef05c88bd6857ba142d4ed20afa806da2
97d4b5580e242c067ae1b765e23bd5fa31b06366307e337f4448b30e8e1136bb
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 14:18:45 GMT
Expires: Tue, 29 Nov 2022 14:18:44 GMT
Etag: "1dd72ecef05c88bd6857ba142d4ed20afa806da2"
Cache-Control: max-age=472704,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76eed62018920b49-OSL
sm.rtb.mts.ru/p?ssp=sape&id=0100007FE9DB7E6378021E2C025FDB49
301 Moved Permanently 0 B URL HTTP/1.1 sm.rtb.mts.ru/p?ssp=sape&id=0100007FE9DB7E6378021E2C025FDB49
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sape&id=0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: sm.rtb.mts.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin
Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
Vary: Origin
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://sm.rtb.mts.ru/match/second?ssp=30&exu=0100007FE9DB7E6378021E2C025FDB49
Set-Cookie: dspid=def86878-9800-4682-8ae9-ac4b67288380; expires=Wed, 15 Nov 2023 02:50:19 GMT; domain=.mts.ru; path=/; secure; SameSite=None
ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Fri, 24 Nov 2023 02:50:19 GMT; Path=/; Domain=.betweendigital.com
tuuid=93ec4cfc-cc57-5248-9839-016cfb47da87; Max-Age=31536000; Expires=Fri, 24 Nov 2023 02:50:19 GMT; Path=/; Domain=.betweendigital.com
ut=Y37b6wAL01iDVX3kfGh962dBwV2dwXtc_-17eA==; Max-Age=31536000; Expires=Fri, 24 Nov 2023 02:50:19 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash cecc5d216805b2650577ed708804b643
ca0acc76169acc643bf45c84184a0f87a5f399d0
a4721c9847a950860165094200428dad82d1a925c2b5353983983d7c47d8f6ae
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 23 Nov 2022 21:32:18 GMT
Expires: Thu, 24 Nov 2022 21:32:18 GMT
ETag: "ca0acc76169acc643bf45c84184a0f87a5f399d0"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ads.betweendigital.com/match?bidder_id=98&external_user_id=NGZiNTMwY2E4NTdmY2VjMw&crf=1
200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=98&external_user_id=NGZiNTMwY2E4NTdmY2VjMw&crf=1
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=98&external_user_id=NGZiNTMwY2E4NTdmY2VjMw&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Fri, 24 Nov 2023 02:50:19 GMT; Path=/; Domain=.betweendigital.com
tuuid=5b2765b6-b26a-5248-a489-f970c7f7229b; Max-Age=31536000; Expires=Fri, 24 Nov 2023 02:50:19 GMT; Path=/; Domain=.betweendigital.com
ut=Y37b6wAKd7DT_O0eTRQXmKXXmdfUOnDdycqNpQ==; Max-Age=31536000; Expires=Fri, 24 Nov 2023 02:50:19 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
px.adhigh.net/p/cm/sape?u=0100007FE9DB7E6378021E2C025FDB49&bounced=1
200 OK 49 B URL HTTP/2 px.adhigh.net/p/cm/sape?u=0100007FE9DB7E6378021E2C025FDB49&bounced=1
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
File type GIF image data, version 89a, 1 x 1\012- data
Hash 889bc1fffc025af4685839fb516a0b8b
7f105137a4eafe93213ecd8cc34dd907c340467c
d0409a1b73dab4e29dc40f92fb431fa9133baa23b4a1ffae4897f39068110e32
GET /p/cm/sape?u=0100007FE9DB7E6378021E2C025FDB49&bounced=1 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 02:50:19 GMT
content-type: image/gif
content-length: 49
x-backend-id: f12-ru
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 2089ed07cc139da9be8207689564a2b1
444c57a3c57eb5544f31d32031d64bcd5177c3df
05342736a030c4f93e2c3d2a6bfdd2f716daf4e6c4ac4503aca6b1f0fc53930a
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sun, 27 Nov 2022 23:50:08 GMT
ETag: "444c57a3c57eb5544f31d32031d64bcd5177c3df"
Last-Modified: Wed, 23 Nov 2022 23:50:09 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76eed61f6f5eb51b-OSL
www.acint.net/match?dp=104&euid=HFvWDXiU-ip3
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=104&euid=HFvWDXiU-ip3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=104&euid=HFvWDXiU-ip3 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D; cSyncDp7v2=1669258217; cSyncDp14v3=1669258217; cSyncDp17=1669258217; cSyncDp32=1669258217; cSyncDp45v3=1669258217; cSyncDp53=1669258217; cSyncDp54v2=1669258217; cSyncDp62=1669258217; cSyncDp67v2=1669258217; cSyncDp68=1669258217; cSyncDp71=1669258217; cSyncDp77=1669258217; cSyncDp84=1669258217; cSyncDp85=1669258217; cSyncDp95v3=1669258217; cSyncDp101=1669258217; cSyncDp104v2=1669258217; cSyncDp107=1669258217; cSyncDp110=1669258217; cSyncDp111v2=1669258217; cSyncDp112v2=1669258217; cSyncDp125v2=1669258217; cSyncDp126=1669258217; cSyncDp127=1669258217; cSyncDp129=1669258217; cSyncDp136v2=1669258217; cSyncDp138=1669258217; cSyncDp144=1669258217; cSyncDp146=1669258217; cSyncDp148=1669258217; cSyncDp149v2=1669258217; cSyncDp151=1669258217; cSyncDp178=1669258217; cSyncDp179=1669258217; cSyncDp186=1669258217; cSyncDp221=1669258217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:19 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
x01.aidata.io/0.gif?pid=9401454&id=0100007FE9DB7E6378021E2C025FDB49
302 Found 0 B URL HTTP/2 x01.aidata.io/0.gif?pid=9401454&id=0100007FE9DB7E6378021E2C025FDB49
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0.gif?pid=9401454&id=0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: x01.aidata.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Thu, 24 Nov 2022 02:50:19 GMT
content-length: 0
location: https://x01.aidata.io/0.gif?pid=9401454&id=0100007FE9DB7E6378021E2C025FDB49&bounce=1
expires: Thu, 24 Nov 2022 02:50:18 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Thu, 24 Nov 2022 02:50:18 GMT
set-cookie: __upin=3AfSIj1DMJkhhy2U9BHn8g;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
__upints=1669258219;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2
sm.rtb.mts.ru/match/second?ssp=30&exu=0100007FE9DB7E6378021E2C025FDB49
200 OK 0 B URL HTTP/1.1 sm.rtb.mts.ru/match/second?ssp=30&exu=0100007FE9DB7E6378021E2C025FDB49
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/second?ssp=30&exu=0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: sm.rtb.mts.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin
Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
Vary: Origin
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691
302 Moved Temporarily 0 B URL HTTP/1.1 ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691 HTTP/1.1
Host: ad.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-control: no-cache, max-age=0, must-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
Set-Cookie: cid=-6092651001; expires=Sat, 23 Nov 2024 02:50:19 GMT; path=/; domain=.adriver.ru; SameSite=None; Secure
Location: /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-6092651001
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
tag.digitaltarget.ru/processor.js?i=430610043480448
200 OK 16 kB URL HTTP/1.1 tag.digitaltarget.ru/processor.js?i=430610043480448
IP
File type ASCII text, with very long lines (15897), with no line terminators
Hash c9571a7ce0a22f154c74bdc8e35523e0
101feba577e71fc076ea5bf3f4af08b5d3fe988d
51cf59da6b7e03337540ee3ab9f8e135ff2ead958475c1bacc8683df57823fb0
GET /processor.js?i=430610043480448 HTTP/1.1
Host: tag.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Type: application/javascript
Content-Length: 15897
Last-Modified: Thu, 24 Nov 2022 02:34:26 GMT
Connection: keep-alive
ETag: "637ed832-3e19"
Accept-Ranges: bytes
x01.aidata.io/0.gif?pid=9401454&id=0100007FE9DB7E6378021E2C025FDB49&bounce=1
204 No Content 0 B URL HTTP/2 x01.aidata.io/0.gif?pid=9401454&id=0100007FE9DB7E6378021E2C025FDB49&bounce=1
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0.gif?pid=9401454&id=0100007FE9DB7E6378021E2C025FDB49&bounce=1 HTTP/1.1
Host: x01.aidata.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 24 Nov 2022 02:50:19 GMT
expires: Thu, 24 Nov 2022 02:50:18 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Thu, 24 Nov 2022 02:50:18 GMT
set-cookie: __upin=euU3fvNOuzoy+1SqU6p+JQ;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
__upints=1669258219;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2
ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-6092651001
302 Moved Temporarily 40 B URL HTTP/1.1 ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-6092651001
IP
File type ASCII text, with CRLF line terminators
Hash 251630b588179b239e8fab1ac9ef6d3a
91b91a97bc481dd2bbd5e0f3fea6ba1c4e843882
c95661e0ef6975b1df5361695a439f71a021d72c345023c3e668e84f35b3c38b
GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-6092651001 HTTP/1.1
Host: ad.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-control: no-cache, no-cache=Set-Cookie, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref="//adriver.ru/w3c/p3p.xml", CP="NON DSP COR CURa ADMa DEVa OUR BUS UNI COM NAV INT STA"
Set-Cookie: cid=0; expires=Sat, 23 Nov 2024 02:50:19 GMT; path=/; domain=.adriver.ru;
uid=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain=.adriver.ru
Location: https://www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
302 Found 154 B URL HTTP/2 www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D; cSyncDp7v2=1669258217; cSyncDp14v3=1669258217; cSyncDp17=1669258217; cSyncDp32=1669258217; cSyncDp45v3=1669258217; cSyncDp53=1669258217; cSyncDp54v2=1669258217; cSyncDp62=1669258217; cSyncDp67v2=1669258217; cSyncDp68=1669258217; cSyncDp71=1669258217; cSyncDp77=1669258217; cSyncDp84=1669258217; cSyncDp85=1669258217; cSyncDp95v3=1669258217; cSyncDp101=1669258217; cSyncDp104v2=1669258217; cSyncDp107=1669258217; cSyncDp110=1669258217; cSyncDp111v2=1669258217; cSyncDp112v2=1669258217; cSyncDp125v2=1669258217; cSyncDp126=1669258217; cSyncDp127=1669258217; cSyncDp129=1669258217; cSyncDp136v2=1669258217; cSyncDp138=1669258217; cSyncDp144=1669258217; cSyncDp146=1669258217; cSyncDp148=1669258217; cSyncDp149v2=1669258217; cSyncDp151=1669258217; cSyncDp178=1669258217; cSyncDp179=1669258217; cSyncDp186=1669258217; cSyncDp221=1669258217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Thu, 24 Nov 2022 02:50:19 GMT
content-type: text/html
content-length: 154
location: https://ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=0100007FE9DB7E6378021E2C025FDB49
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8eba0f09d7583f5ef58dd71d979d0995
22753c67e46b49ba4d303dfad3f129eee6f447ea
ad267c49ff6b2d2d32f4ccc84f1d7e0c0dd0d37676c78e3a3bfbc191e7697e7a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AD267C49FF6B2D2D32F4CCC84F1D7E0C0DD0D37676C78E3A3BFBC191E7697E7A"
Last-Modified: Tue, 22 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9930
Expires: Thu, 24 Nov 2022 05:35:49 GMT
Date: Thu, 24 Nov 2022 02:50:19 GMT
Connection: keep-alive
dmg.digitaltarget.ru/1/1093/i/i?i=403267404840126.426895568936519&a=77&e=0100007FE9DB7E6378021E2C025FDB49&pref=http%3A%2F%2Fwww.ogorodniky.ru%2F&c=ss:77.up:0100007FE9DB7E6378021E2C025FDB49.sync:up.xdua:duBTsWRzCQrXdpqZ7BM_tiBa.xps:xpshaa60nAYVb7DaxXpODatal.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
307 Temporary Redirect 0 B URL HTTP/1.1 dmg.digitaltarget.ru/1/1093/i/i?i=403267404840126.426895568936519&a=77&e=0100007FE9DB7E6378021E2C025FDB49&pref=http%3A%2F%2Fwww.ogorodniky.ru%2F&c=ss:77.up:0100007FE9DB7E6378021E2C025FDB49.sync:up.xdua:duBTsWRzCQrXdpqZ7BM_tiBa.xps:xpshaa60nAYVb7DaxXpODatal.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/1093/i/i?i=403267404840126.426895568936519&a=77&e=0100007FE9DB7E6378021E2C025FDB49&pref=http%3A%2F%2Fwww.ogorodniky.ru%2F&c=ss:77.up:0100007FE9DB7E6378021E2C025FDB49.sync:up.xdua:duBTsWRzCQrXdpqZ7BM_tiBa.xps:xpshaa60nAYVb7DaxXpODatal.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1669258219831&i=403267404840126.426895568936519&a=77&e=0100007FE9DB7E6378021E2C025FDB49&pref=http%3A%2F%2Fwww.ogorodniky.ru%2F&c=ss:77.up:0100007FE9DB7E6378021E2C025FDB49.sync:up.xdua:duBTsWRzCQrXdpqZ7BM_tiBa.xps:xpshaa60nAYVb7DaxXpODatal.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
Set-Cookie: viuserid=.fqHJ.rInDR.wux78cFq; Max-Age=93312000; Expires=Sat, 08 Nov 2025 02:50:19 GMT; SameSite=None; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly
Request-Time: 0
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/1/1093/i/i?i=403267404840126.529169720253621&a=77&e=0100007FE9DB7E6378021E2C025FDB49&pref=http%3A%2F%2Fwww.ogorodniky.ru%2F&c=ss:77.up:0100007FE9DB7E6378021E2C025FDB49.sync:up.xdua:duBTsWRzCQrXdpqZ7BM_tiBa.xps:xpshaa60nAYVb7DaxXpODatal.dn:acint__net.adcm:hit.tg:adcmjs_noorient
307 Temporary Redirect 0 B URL HTTP/1.1 dmg.digitaltarget.ru/1/1093/i/i?i=403267404840126.529169720253621&a=77&e=0100007FE9DB7E6378021E2C025FDB49&pref=http%3A%2F%2Fwww.ogorodniky.ru%2F&c=ss:77.up:0100007FE9DB7E6378021E2C025FDB49.sync:up.xdua:duBTsWRzCQrXdpqZ7BM_tiBa.xps:xpshaa60nAYVb7DaxXpODatal.dn:acint__net.adcm:hit.tg:adcmjs_noorient
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/1093/i/i?i=403267404840126.529169720253621&a=77&e=0100007FE9DB7E6378021E2C025FDB49&pref=http%3A%2F%2Fwww.ogorodniky.ru%2F&c=ss:77.up:0100007FE9DB7E6378021E2C025FDB49.sync:up.xdua:duBTsWRzCQrXdpqZ7BM_tiBa.xps:xpshaa60nAYVb7DaxXpODatal.dn:acint__net.adcm:hit.tg:adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1669258219836&i=403267404840126.529169720253621&a=77&e=0100007FE9DB7E6378021E2C025FDB49&pref=http%3A%2F%2Fwww.ogorodniky.ru%2F&c=ss:77.up:0100007FE9DB7E6378021E2C025FDB49.sync:up.xdua:duBTsWRzCQrXdpqZ7BM_tiBa.xps:xpshaa60nAYVb7DaxXpODatal.dn:acint__net.adcm:hit.tg:adcmjs_noorient
Set-Cookie: viuserid=VRL6z3qIvFnNn957IPrw; Max-Age=93312000; Expires=Sat, 08 Nov 2025 02:50:19 GMT; SameSite=None; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly
Request-Time: 1
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1669258219831&i=403267404840126.426895568936519&a=77&e=0100007FE9DB7E6378021E2C025FDB49&pref=http%3A%2F%2Fwww.ogorodniky.ru%2F&c=ss:77.up:0100007FE9DB7E6378021E2C025FDB49.sync:up.xdua:duBTsWRzCQrXdpqZ7BM_tiBa.xps:xpshaa60nAYVb7DaxXpODatal.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
200 OK 64 B URL HTTP/1.1 dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1669258219831&i=403267404840126.426895568936519&a=77&e=0100007FE9DB7E6378021E2C025FDB49&pref=http%3A%2F%2Fwww.ogorodniky.ru%2F&c=ss:77.up:0100007FE9DB7E6378021E2C025FDB49.sync:up.xdua:duBTsWRzCQrXdpqZ7BM_tiBa.xps:xpshaa60nAYVb7DaxXpODatal.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ffd585dfb1ac6320633a0be46d579437
5a6033d23bc9cd5d1de9ee61de69a44428086dcb
df18d81deb0cc1c48ae87e6481bb4ee375b40cce0fec3d226e002704d49f6cc8
GET /awg/custom/1093/i/i?call_source=awg&ts=1669258219831&i=403267404840126.426895568936519&a=77&e=0100007FE9DB7E6378021E2C025FDB49&pref=http%3A%2F%2Fwww.ogorodniky.ru%2F&c=ss:77.up:0100007FE9DB7E6378021E2C025FDB49.sync:up.xdua:duBTsWRzCQrXdpqZ7BM_tiBa.xps:xpshaa60nAYVb7DaxXpODatal.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Type: image/gif
Content-Length: 64
Connection: keep-alive
Vary: Accept-Encoding
Request-Time: 15
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1669258219836&i=403267404840126.529169720253621&a=77&e=0100007FE9DB7E6378021E2C025FDB49&pref=http%3A%2F%2Fwww.ogorodniky.ru%2F&c=ss:77.up:0100007FE9DB7E6378021E2C025FDB49.sync:up.xdua:duBTsWRzCQrXdpqZ7BM_tiBa.xps:xpshaa60nAYVb7DaxXpODatal.dn:acint__net.adcm:hit.tg:adcmjs_noorient
200 OK 64 B URL HTTP/1.1 dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1669258219836&i=403267404840126.529169720253621&a=77&e=0100007FE9DB7E6378021E2C025FDB49&pref=http%3A%2F%2Fwww.ogorodniky.ru%2F&c=ss:77.up:0100007FE9DB7E6378021E2C025FDB49.sync:up.xdua:duBTsWRzCQrXdpqZ7BM_tiBa.xps:xpshaa60nAYVb7DaxXpODatal.dn:acint__net.adcm:hit.tg:adcmjs_noorient
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ffd585dfb1ac6320633a0be46d579437
5a6033d23bc9cd5d1de9ee61de69a44428086dcb
df18d81deb0cc1c48ae87e6481bb4ee375b40cce0fec3d226e002704d49f6cc8
GET /awg/custom/1093/i/i?call_source=awg&ts=1669258219836&i=403267404840126.529169720253621&a=77&e=0100007FE9DB7E6378021E2C025FDB49&pref=http%3A%2F%2Fwww.ogorodniky.ru%2F&c=ss:77.up:0100007FE9DB7E6378021E2C025FDB49.sync:up.xdua:duBTsWRzCQrXdpqZ7BM_tiBa.xps:xpshaa60nAYVb7DaxXpODatal.dn:acint__net.adcm:hit.tg:adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 24 Nov 2022 02:50:19 GMT
Content-Type: image/gif
Content-Length: 64
Connection: keep-alive
Vary: Accept-Encoding
Request-Time: 8
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
www.acint.net/ping/?v=0.4.0&uid=023e18cd-56f1-4510-8fc9-7ae848d112ba&dp=10&tz=%2B00%3A00&nc=36093219&dT=2022-11-24T02%3A50%3A20.639
302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/ping/?v=0.4.0&uid=023e18cd-56f1-4510-8fc9-7ae848d112ba&dp=10&tz=%2B00%3A00&nc=36093219&dT=2022-11-24T02%3A50%3A20.639
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /ping/?v=0.4.0&uid=023e18cd-56f1-4510-8fc9-7ae848d112ba&dp=10&tz=%2B00%3A00&nc=36093219&dT=2022-11-24T02%3A50%3A20.639 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ogorodniky.ru/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Thu, 24 Nov 2022 02:50:20 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/ping/?v=0.4.0&uid=023e18cd-56f1-4510-8fc9-7ae848d112ba&dp=10&tz=%2B00%3A00&nc=36093219&dT=2022-11-24T02%3A50%3A20.639
www.acint.net/ping/?v=0.4.0&uid=023e18cd-56f1-4510-8fc9-7ae848d112ba&dp=10&tz=%2B00%3A00&nc=36093219&dT=2022-11-24T02%3A50%3A20.639
200 OK 43 B URL HTTP/2 www.acint.net/ping/?v=0.4.0&uid=023e18cd-56f1-4510-8fc9-7ae848d112ba&dp=10&tz=%2B00%3A00&nc=36093219&dT=2022-11-24T02%3A50%3A20.639
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /ping/?v=0.4.0&uid=023e18cd-56f1-4510-8fc9-7ae848d112ba&dp=10&tz=%2B00%3A00&nc=36093219&dT=2022-11-24T02%3A50%3A20.639 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ogorodniky.ru/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWN+2+ksHgJ4SdtfAh84HPfe/c/lGdtZj89ksZeVWL0D; cSyncDp7v2=1669258217; cSyncDp14v3=1669258217; cSyncDp17=1669258217; cSyncDp32=1669258217; cSyncDp45v3=1669258217; cSyncDp53=1669258217; cSyncDp54v2=1669258217; cSyncDp62=1669258217; cSyncDp67v2=1669258217; cSyncDp68=1669258217; cSyncDp71=1669258217; cSyncDp77=1669258217; cSyncDp84=1669258217; cSyncDp85=1669258217; cSyncDp95v3=1669258217; cSyncDp101=1669258217; cSyncDp104v2=1669258217; cSyncDp107=1669258217; cSyncDp110=1669258217; cSyncDp111v2=1669258217; cSyncDp112v2=1669258217; cSyncDp125v2=1669258217; cSyncDp126=1669258217; cSyncDp127=1669258217; cSyncDp129=1669258217; cSyncDp136v2=1669258217; cSyncDp138=1669258217; cSyncDp144=1669258217; cSyncDp146=1669258217; cSyncDp148=1669258217; cSyncDp149v2=1669258217; cSyncDp151=1669258217; cSyncDp178=1669258217; cSyncDp179=1669258217; cSyncDp186=1669258217; cSyncDp221=1669258217
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Thu, 24 Nov 2022 02:50:20 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ssp.bidvol.com/usersync?dspcsid=8&redirect=1
302 Found 0 B URL HTTP/2 ssp.bidvol.com/usersync?dspcsid=8&redirect=1
IP
ASN #24940 Hetzner Online GmbH
GET /usersync?dspcsid=8&redirect=1 HTTP/1.1
Host: ssp.bidvol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.23.0
date: Thu, 24 Nov 2022 02:50:18 GMT
x-request-id: 4a816f2b-b876-4c2c-a1c8-43ca88fea843
set-cookie: bvuid=961sw0fwun; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None
bvuid2=961sw0fwun; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT
vary: Origin
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
surrogate-control: no-store
location: https://www.acint.net/match?dp=129&euid=961sw0fwun
X-Firefox-Spdy: h2
top-fwz1.mail.ru/js/code.js
200 OK 0 B URL HTTP/2 top-fwz1.mail.ru/js/code.js
IP
GET /js/code.js HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 02:50:18 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 16:42:10 GMT
set-cookie: FTID=1RMYgQ0tkIID:1669258218:0:::; path=/; expires=Sat, 25-Nov-23 02:50:18 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
etag: W/"637e4d62-85c6"
expires: Thu, 24 Nov 2022 03:50:18 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: max-age=3600, private
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
content-encoding: gzip
X-Firefox-Spdy: h2
an.yandex.ru/mapuid/sapeis/0100007FE9DB7E6378021E2C025FDB49?redir-setuniq=1
200 OK 0 B URL HTTP/2 an.yandex.ru/mapuid/sapeis/0100007FE9DB7E6378021E2C025FDB49?redir-setuniq=1
IP
GET /mapuid/sapeis/0100007FE9DB7E6378021E2C025FDB49?redir-setuniq=1 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Thu, 24 Nov 2022 02:50:19 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 24 Nov 2022 02:50:19 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Thu, 24 Nov 2022 02:50:19 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif; charset=utf-8
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
an.yandex.ru/mapuid/sapeis/0100007FE9DB7E6378021E2C025FDB49
302 Found 0 B URL HTTP/2 an.yandex.ru/mapuid/sapeis/0100007FE9DB7E6378021E2C025FDB49
IP
GET /mapuid/sapeis/0100007FE9DB7E6378021E2C025FDB49 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
timing-allow-origin: *
location: https://an.yandex.ru/mapuid/sapeis/0100007FE9DB7E6378021E2C025FDB49?redir-setuniq=1
date: Thu, 24 Nov 2022 02:50:19 GMT
set-cookie: yandexuid=2671747671669258219; domain=.yandex.ru; path=/; expires=Sun, 21-Nov-2032 02:50:19 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 24 Nov 2022 02:50:19 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Thu, 24 Nov 2022 02:50:19 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
104.21.83.205
34.117.237.239
93.186.227.134
142.132.209.136
31.220.27.134
139.45.228.111
104.21.83.205
188.42.191.196
65.108.236.88
188.72.107.156
23.36.77.32