Overview

URL heli-ski.su/
IP45.84.226.24
ASNBeget LLC
Location Russia
Report completed2022-10-04 02:07:46 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-10-04 2 heli-ski.su/ Malware
2022-10-04 2 proyaichniki.ru/ Malware
2022-10-04 2 proyaichniki.ru/sys.js Malware
2022-10-04 2 proyaichniki.ru/wp-content/cache/min/1/b4598cb16e871468ce5b32cb5906fa0c.js Malware
2022-10-04 2 proyaichniki.ru/wp-content/cache/min/1/fa0bbba482f8285e6118763557e1f50b.js Malware
mnemonic secure dns  No alerts detected
Quad9 DNS
Scan Date Severity Indicator Comment
2022-10-04 2 hybrid.ai Sinkholed


Files

No files detected



Passive DNS (64)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS tag.digitaltarget.ru (2) 98193 2015-07-21 14:24:58 UTC 2022-10-03 17:35:26 UTC 185.15.175.159
mnemonic passive DNS cs.agency2.ru (1) 0 2022-04-29 14:24:02 UTC 2022-10-03 17:35:26 UTC 23.111.107.44 Unknown ranking
mnemonic passive DNS x01.aidata.io (2) 12188 2016-03-31 15:36:46 UTC 2022-10-03 17:35:26 UTC 89.108.120.76
mnemonic passive DNS sync.upravel.com (2) 28097 2017-05-29 09:13:46 UTC 2022-10-03 17:35:26 UTC 148.251.237.106
mnemonic passive DNS match.new-programmatic.com (1) 33613 2020-02-18 20:50:06 UTC 2022-10-03 17:35:26 UTC 217.65.2.150
mnemonic passive DNS fcgi4.gnezdo.ru (1) 69027 2020-06-11 12:55:54 UTC 2022-10-03 17:35:26 UTC 93.95.102.105
mnemonic passive DNS ocsp.usertrust.com (1) 899 2012-05-21 15:43:18 UTC 2022-10-03 07:10:33 UTC 172.64.155.188
mnemonic passive DNS status.thawte.com (1) 5123 2017-11-27 12:33:51 UTC 2022-10-03 09:28:25 UTC 93.184.220.29
mnemonic passive DNS ocsp.godaddy.com (2) 698 2012-05-20 19:28:57 UTC 2022-10-03 06:33:58 UTC 192.124.249.36
mnemonic passive DNS googleads.g.doubleclick.net (1) 42 2021-02-20 15:43:32 UTC 2022-10-03 20:53:50 UTC 142.250.74.98
mnemonic passive DNS yastatic.net (4) 72282 2014-03-11 07:15:28 UTC 2022-10-03 09:35:02 UTC 178.154.131.216
mnemonic passive DNS redirect.frontend.weborama.fr (2) 8348 2017-05-04 15:00:27 UTC 2022-10-03 22:26:13 UTC 35.190.24.218
mnemonic passive DNS dmg.digitaltarget.ru (4) 21471 2015-04-23 14:50:51 UTC 2022-10-03 17:35:28 UTC 185.15.175.145
mnemonic passive DNS exchange.buzzoola.com (1) 18389 2014-10-17 15:20:27 UTC 2022-10-04 00:33:56 UTC 116.202.236.171
mnemonic passive DNS an.yandex.ru (2) 2577 No data No data 213.180.193.90
mnemonic passive DNS ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-10-03 20:32:42 UTC 93.184.220.29
mnemonic passive DNS ut.rktch.com (1) 41215 2018-06-04 10:29:18 UTC 2022-10-03 17:35:26 UTC 89.108.97.2
mnemonic passive DNS tech.rtb.mts.ru (1) 27360 2017-04-17 12:41:30 UTC 2022-10-04 00:33:57 UTC 213.87.44.187
mnemonic passive DNS ocsp.globalsign.com (10) 2075 2012-05-25 06:20:55 UTC 2022-10-03 09:28:50 UTC 151.101.86.133
mnemonic passive DNS ssp-rtb.sape.ru (1) 31166 2016-02-02 17:01:03 UTC 2022-10-04 00:33:57 UTC 193.3.184.218
mnemonic passive DNS stat.adlabs.ru (1) 200922 2012-07-23 15:58:30 UTC 2022-10-03 17:35:26 UTC 109.248.237.37
mnemonic passive DNS ocsp2.globalsign.com (2) 1544 2012-05-21 07:12:19 UTC 2022-10-03 09:25:21 UTC 151.101.86.133
mnemonic passive DNS sync.dmp.otm-r.com (1) 19534 2017-02-03 07:19:51 UTC 2022-10-03 17:35:26 UTC 148.251.9.22
mnemonic passive DNS c26fbfad-43e2-437c-8a16-880899f16933.sync.upravel.com (1) 0 No data No data 144.76.138.28 Domain (upravel.com) ranked at: 27764
mnemonic passive DNS ssp.bidvol.com (1) 31817 2020-02-22 12:37:29 UTC 2022-10-03 17:35:26 UTC 65.109.23.99
mnemonic passive DNS heli-ski.su (1) 0 2021-02-03 20:59:33 UTC 2022-10-03 12:20:18 UTC 45.84.226.24 Unknown ranking
mnemonic passive DNS fonts.gstatic.com (4) 0 2014-08-29 13:43:22 UTC 2022-10-03 19:40:13 UTC 172.217.21.163 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-10-03 09:28:24 UTC 52.41.253.170
mnemonic passive DNS ssp.adriver.ru (2) 12439 2014-01-10 13:39:33 UTC 2022-10-03 22:26:13 UTC 195.209.111.4
mnemonic passive DNS dm-eu.hybrid.ai (1) 28847 2021-01-25 11:48:59 UTC 2022-10-03 17:35:26 UTC 37.18.103.21
mnemonic passive DNS adservice.google.no (1) 96969 2017-09-26 14:23:08 UTC 2022-10-03 06:02:11 UTC 216.58.207.194
mnemonic passive DNS ssp.bestssp.com (1) 90974 2017-06-10 08:55:20 UTC 2022-10-03 17:35:26 UTC 185.147.80.35
mnemonic passive DNS acint.net (2) 22962 2014-02-14 21:23:16 UTC 2022-10-04 00:33:56 UTC 46.4.114.109
mnemonic passive DNS proyaichniki.ru (34) 0 2017-03-15 04:23:10 UTC 2022-09-29 23:13:21 UTC 45.84.226.24 Unknown ranking
mnemonic passive DNS fonts.googleapis.com (1) 8877 2013-06-10 20:14:26 UTC 2022-10-03 17:32:53 UTC 216.58.211.10
mnemonic passive DNS pagead2.googlesyndication.com (2) 101 2021-02-20 15:52:05 UTC 2022-10-03 22:07:36 UTC 142.250.74.34
mnemonic passive DNS mc.yandex.ru (6) 2672 2017-01-29 05:34:36 UTC 2022-10-03 09:35:02 UTC 87.250.250.119
mnemonic passive DNS ads.adlook.me (1) 43352 2018-11-28 12:50:19 UTC 2022-10-03 17:35:26 UTC 5.101.76.186
mnemonic passive DNS sync.adkernel.com (1) 4993 2017-04-19 09:25:22 UTC 2022-10-03 17:35:26 UTC 77.245.57.72
mnemonic passive DNS ads.betweendigital.com (4) 1571 2012-10-30 05:08:04 UTC 2022-10-03 22:40:24 UTC 188.42.196.115
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-10-03 08:07:24 UTC 34.160.144.191
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-03 09:28:24 UTC 34.117.237.239
mnemonic passive DNS s.uuidksinc.net (1) 3423 2015-07-20 12:00:35 UTC 2022-10-03 17:35:26 UTC 31.220.27.155
mnemonic passive DNS ocsp.sectigo.com (4) 487 2018-12-17 11:31:55 UTC 2022-10-03 20:30:55 UTC 172.64.155.188
mnemonic passive DNS px.adhigh.net (2) 10272 2013-01-03 21:02:08 UTC 2022-10-03 17:35:24 UTC 193.232.150.45
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-10-03 14:02:45 UTC 34.120.237.76
mnemonic passive DNS ajax.googleapis.com (1) 12905 2013-08-16 09:51:31 UTC 2022-10-03 20:59:30 UTC 142.250.74.106
mnemonic passive DNS ocsp.pki.goog (8) 175 2017-06-14 07:23:31 UTC 2022-10-03 07:14:52 UTC 142.250.74.3
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-10-03 17:23:50 UTC 143.204.55.35
mnemonic passive DNS mediatoday.ru (1) 136083 2013-05-20 20:53:32 UTC 2022-10-03 17:35:26 UTC 139.45.228.111
mnemonic passive DNS ad.adriver.ru (1) 19548 2012-08-31 17:10:27 UTC 2022-10-03 17:35:25 UTC 195.209.108.37
mnemonic passive DNS ad.mail.ru (1) 7643 2012-06-22 19:38:09 UTC 2022-10-03 17:35:24 UTC 95.163.41.56
mnemonic passive DNS sm.rtb.mts.ru (2) 27154 2019-03-26 14:10:01 UTC 2022-10-04 00:33:57 UTC 217.66.147.35
mnemonic passive DNS www.acint.net (17) 29072 2014-02-14 21:23:16 UTC 2022-10-03 17:35:26 UTC 46.4.114.109
mnemonic passive DNS 0a0909b066953b63fd0093ba02a438a4-sp.ops.beeline.ru (1) 0 No data No data 37.9.245.57 Domain (beeline.ru) ranked at: 20964
mnemonic passive DNS cm.g.doubleclick.net (1) 202 2013-05-30 23:19:45 UTC 2022-10-03 23:27:31 UTC 216.58.211.2
mnemonic passive DNS adservice.google.com (1) 76 2021-02-20 16:10:48 UTC 2022-10-04 00:57:12 UTC 142.250.74.162
mnemonic passive DNS sync.bumlam.com (2) 3243 2015-08-10 21:04:25 UTC 2022-10-03 17:35:26 UTC 31.172.81.159
mnemonic passive DNS r3.o.lencr.org (18) 344 2020-12-02 08:52:13 UTC 2022-10-03 07:33:36 UTC 23.36.76.226
mnemonic passive DNS nr.bidderstack.com (1) 352019 2019-02-11 14:43:50 UTC 2022-10-03 17:35:26 UTC 148.251.217.100
mnemonic passive DNS adlmerge.com (1) 146521 2017-04-06 07:10:27 UTC 2022-10-03 17:35:26 UTC 95.211.66.35
mnemonic passive DNS sape-sync.rutarget.ru (1) 173587 2018-08-07 14:11:47 UTC 2022-10-03 17:35:26 UTC 87.242.93.112
mnemonic passive DNS a.utraff.com (1) 39874 2020-01-25 04:23:15 UTC 2022-10-03 17:35:26 UTC 172.67.217.151
mnemonic passive DNS sync.1dmp.io (2) 10017 2016-02-09 11:52:58 UTC 2022-10-03 17:35:26 UTC 95.216.101.186


Recent reports on same IP/ASN/Domain/Screenshot

Last 2 reports on IP: 45.84.226.24

Date UQ / IDS / BL URL IP
2022-10-25 07:05:00 +0000
0 - 0 - 13 new-sims4.ru/skachat_sims_4/the-sims-4-vremen (...) 45.84.226.24
2022-10-04 02:07:46 +0000
0 - 0 - 6 heli-ski.su/ 45.84.226.24

Last 5 reports on ASN: Beget LLC

Date UQ / IDS / BL URL IP
2022-12-02 13:08:25 +0000
0 - 0 - 8 se-bot.ru/dashboard/auth 45.147.178.126
2022-12-02 10:13:36 +0000
0 - 0 - 2 loskutova.site/wp-content/plugins/super-forms (...) 45.130.41.36
2022-12-02 06:23:18 +0000
0 - 0 - 3 www-pinksale.su/ 45.130.41.47
2022-12-02 05:15:10 +0000
0 - 0 - 1 rebornloader.fun/rebornloader.exe 45.130.41.87
2022-12-02 04:06:23 +0000
0 - 0 - 1 josifm3c.beget.tech/ 5.101.152.68

Last 1 reports on domain: heli-ski.su

Date UQ / IDS / BL URL IP
2022-10-04 02:07:46 +0000
0 - 0 - 6 heli-ski.su/ 45.84.226.24

No other reports with similar screenshot



JavaScript

Executed Scripts (29)


Executed Evals (1)

#1 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 6e4c074bba968f3a2899edcbccf9e893ebdad7a5a533463e4d9630f28f3baed1

                                        (a = 0) => {
    let b;
    const c = class {};
}
                                    

Executed Writes (0)



HTTP Transactions (186)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: heli-ski.su
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         45.84.226.24
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:33 GMT
Content-Length: 231
Connection: keep-alive
Location: http://proyaichniki.ru/
Cache-Control: max-age=0
Expires: Tue, 04 Oct 2022 02:07:33 GMT


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   231
Md5:    2d18524599f57d1462885b33972febb6
Sha1:   08a33d4c45d0bfe3412d6921deed30a39c1a8895
Sha256: 9c37a84c5b7440b3ec2815f0d4ff54658644efda0b8196bb0035f92ac671a1a4

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 04 Oct 2022 01:33:39 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _xFHblNovmNvdAj7dVmLDY-1uwlmlLo6K-MxBmJFcYbUb5iecLiknQ==
Age: 2034


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    1b3053fa528e28810f8a2cc9284cc921
Sha1:   cca9eb471d941881a6b9a1793aecb6c281908f6a
Sha256: a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EB128AEC099DBF1919EE5D965221E904AD3A2162583683CEC44518640B505447"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4721
Expires: Tue, 04 Oct 2022 03:26:14 GMT
Date: Tue, 04 Oct 2022 02:07:33 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D681A4C2E20A6019C7E2D980CBFA77B34DB9356899099296C3B8B4263CA5FB5F"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2759
Expires: Tue, 04 Oct 2022 02:53:32 GMT
Date: Tue, 04 Oct 2022 02:07:33 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: x/jJhxp+uG4NfHrQyVM6QbHF6ZnhpDTIq8s9aNh460B+eojoW+5CzWFDokkIA3kGHYlg8R1C9IA=
x-amz-request-id: XNW9199D70451P0E
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 04 Oct 2022 01:50:56 GMT
age: 997
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 04 Oct 2022 02:07:33 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET / HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:33 GMT
Content-Length: 13823
Connection: keep-alive
Cache-Control: max-age=0
Expires: Tue, 04 Oct 2022 02:07:33 GMT
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (24189)
Size:   13823
Md5:    c9fb2f044f55b056d7b7be459674cf1b
Sha1:   280e89e487a7258567eb13145aa25c724f262bfe
Sha256: e86eae763f8b7a406527a5be81e194387af7f98ca04e51291eeb5ad5f1a00c19

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /css?family=Roboto:400,400i,500,700,700i&subset=cyrillic HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         216.58.211.10
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Tue, 04 Oct 2022 02:07:34 GMT
Date: Tue, 04 Oct 2022 02:07:34 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text
Size:   789
Md5:    643259f761190f2294005002fcd625ff
Sha1:   9084ef1f29b186a346e1b302ebae197180700423
Sha256: ef9cbc6559acf11d0459c658240a244ef78d9f3fa61e4e8fb903a8fcb3b05049
                                        
                                            GET /ajax/libs/jquery/1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         142.250.74.106
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 33434
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 28 Sep 2022 11:29:06 GMT
Expires: Thu, 28 Sep 2023 11:29:06 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 484708
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (32086)
Size:   33434
Md5:    430e927c980ad4079de727fa59dd93f2
Sha1:   891aaada9a55a91292999f6d50fd300439905982
Sha256: e8728df8617340bd8c10bc8d27d3a725a48871a269c850e8598689938ec6e2ed
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 04 Oct 2022 01:29:34 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Tue, 04 Oct 2022 02:09:33 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: hszGSG39JQn8PcqJ_Ws9mD1BLZy9unCqz8E7hSbF-Yy-57qTYz2NeA==
Age: 2281


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /wp-content/cache/min/1/4ddec0233fa7bf82cfe0d41193138983.css HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Last-Modified: Wed, 22 Jun 2022 10:32:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62b2efc2-24a03"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (3447)
Size:   29433
Md5:    fd23b0ec8f5227b7452e2855ba0556aa
Sha1:   b3f8beb76d96f7e394edea2e1f6bbb9ecd75866f
Sha256: 76b885efa7eea90ff7d568d33f8b41d79a4d9b6fd0b8dc8066670602c8be6936
                                        
                                            GET /sys.js HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Last-Modified: Thu, 05 Aug 2021 12:05:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"610bd420-435c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (984), with CRLF line terminators
Size:   3345
Md5:    3c5ba26f22a62de0de990dbffcd37ef6
Sha1:   72ee102ed9262be8d61756c61f47db4a076d5d55
Sha256: 2bf10150e94749302f86ca3e9d67ac4c073e1f2f8e6e119f0600f16c3ca0fc76

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/cache/min/1/b4598cb16e871468ce5b32cb5906fa0c.js HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Last-Modified: Wed, 22 Jun 2022 10:32:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62b2efc2-45ad"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (7763)
Size:   5252
Md5:    8afc80eeac4a15bec47e27bd6fb4ee85
Sha1:   cf7508fe7eb2eaac11cb7407bb75f03490673af3
Sha256: e31ffdead05a5cfc5273ea86e362633e504d7a5d2d8623d3005bfade2c10c443

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/cache/min/1/fa0bbba482f8285e6118763557e1f50b.js HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Last-Modified: Wed, 22 Jun 2022 10:32:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"62b2efc2-c8c9"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (46886)
Size:   15209
Md5:    ea44e8e55b61fcc5f475a8a74fabe152
Sha1:   0fe3eabb4c44fb9d9673a7f256f9da88fb64d5be
Sha256: 9115712b9a48a4caecf4f5d281b6e7672346382b5a3d32915fedfefbd068b499

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/wp-postratings/images/stars/rating_on.gif HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 386
Last-Modified: Sat, 22 Oct 2016 08:53:20 GMT
Connection: keep-alive
ETag: "580b2900-182"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 21 x 20, 8-bit/color RGBA, non-interlaced\012- data
Size:   386
Md5:    d1eab3ab7b4b70da6ffcda308f5d7e51
Sha1:   3f5793552520c8bf78eda4b44da591bf3d3a58e2
Sha256: b418212101815f6f4d3c9a8ee4e5ab3dcddb8aaedaca5dacf1111ee0e5080d5d
                                        
                                            GET /wp-content/cache/thumb/c53fb8f90_320x200.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 12386
Last-Modified: Thu, 29 Sep 2022 13:33:24 GMT
Connection: keep-alive
ETag: "63359ea4-3062"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80", baseline, precision 8, 320x200, components 3\012- data
Size:   12386
Md5:    77e58bc219b9c9db7fdc092e1e700a2e
Sha1:   7f5299aceb956df15e6e2045214e607094656f66
Sha256: 39d22b129cc39dbed6a50c217c3c9a5c1f097d5b598d053d2fb19509c2bc93d0
                                        
                                            GET /wp-content/cache/thumb/3a91dbe46_320x200.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 11300
Last-Modified: Thu, 29 Sep 2022 09:24:09 GMT
Connection: keep-alive
ETag: "63356439-2c24"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80", baseline, precision 8, 320x200, components 3\012- data
Size:   11300
Md5:    d00fb3bdf230323c8cb240bc8bd4c69e
Sha1:   482836e9ee99e230aa488952a5126a12b86ce35c
Sha256: 353dedad97374647507bf0e8b2782d32be930b9cb480781be32722030acd9f53
                                        
                                            GET /wp-content/themes/marafon/images/logo.png HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 7872
Last-Modified: Sat, 03 Dec 2016 10:11:04 GMT
Connection: keep-alive
ETag: "58429a38-1ec0"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 221 x 55, 8-bit/color RGBA, non-interlaced\012- data
Size:   7872
Md5:    9aff01617725daf19c8ef8ae0df76aa2
Sha1:   4c47f6da5537ce693350c24ee8a0b76b5881f9e0
Sha256: 1697cc2ed346bc18cb304a29cc2d715c4bf150256adf2b44faf66581486407f8
                                        
                                            GET /wp-content/cache/thumb/a750dfe2b_320x200.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 18624
Last-Modified: Sat, 01 Oct 2022 07:10:46 GMT
Connection: keep-alive
ETag: "6337e7f6-48c0"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80", baseline, precision 8, 320x200, components 3\012- data
Size:   18624
Md5:    2d0d98b662e70c9865c0d01eea30a0b5
Sha1:   f858f7586bbe9e718ea2974cf80a874cdd0fdb5a
Sha256: 492cc15ee8a0252054217d89df58f30c591761132a795bdb3e403da432c2df1b
                                        
                                            GET /wp-content/cache/thumb/19b575404_320x200.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 18465
Last-Modified: Sat, 01 Oct 2022 07:25:20 GMT
Connection: keep-alive
ETag: "6337eb60-4821"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80", baseline, precision 8, 320x200, components 3\012- data
Size:   18465
Md5:    d1829d0edb0a48bcb52a09bc31bfc557
Sha1:   3b2d3e5301c1e0c5f0ecf9ce9cf88607e2643b1d
Sha256: 7d85175979792b88717cfa08a0386338b41e73db0539849640fd12c460d6954b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6323
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 02:07:34 GMT
Last-Modified: Tue, 04 Oct 2022 00:22:12 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /wp-content/cache/thumb/b0dd8b34c_320x200.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 13355
Last-Modified: Wed, 28 Sep 2022 17:59:19 GMT
Connection: keep-alive
ETag: "63348b77-342b"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80", baseline, precision 8, 320x200, components 3\012- data
Size:   13355
Md5:    28c8996961d22d6aefaa9659dc30ceec
Sha1:   9bc0849e405486d485ffc36a1d53988ea0a57882
Sha256: 585b550cc6dc42476bc9516cbe8076d1de53b7acbfcd7fb548a30e59d2c46f5b
                                        
                                            GET /wp-content/cache/thumb/2488e1edf_320x200.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 13778
Last-Modified: Wed, 28 Sep 2022 10:30:30 GMT
Connection: keep-alive
ETag: "63342246-35d2"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80", baseline, precision 8, 320x200, components 3\012- data
Size:   13778
Md5:    4eec60dd92b6cb34369ef9bc8784f1be
Sha1:   1e1dbcffd55dc3068f6c6529f837b624f50fa466
Sha256: fb8de95e9506f1368d2fe52a5967392a16584bb19a15ea22d6176ff0e6ac3bb4
                                        
                                            GET /wp-content/cache/thumb/7b7328d8c_320x200.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 24239
Last-Modified: Tue, 27 Sep 2022 12:57:47 GMT
Connection: keep-alive
ETag: "6332f34b-5eaf"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80", baseline, precision 8, 320x200, components 3\012- data
Size:   24239
Md5:    294d5e6136b7a6995669604c0b8c570f
Sha1:   87531ee59d0872486250cc240a11d99882d34540
Sha256: 05c31b9d3136fdad538938ace1e456cb53a11905940e613647cbab4ef330bcd5
                                        
                                            GET /wp-content/cache/thumb/e9f17a0de_320x200.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 11578
Last-Modified: Mon, 26 Sep 2022 04:36:41 GMT
Connection: keep-alive
ETag: "63312c59-2d3a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80", baseline, precision 8, 320x200, components 3\012- data
Size:   11578
Md5:    4fd1a6cf21d9c480fd584c5ea62a22cd
Sha1:   c17c65eeba7e9cfd0562632ed83a212253b31f4c
Sha256: a38c78ff2a4136948746efdd241c82b4e9570cfea49873cab66a95abbcbdba23
                                        
                                            GET /wp-content/cache/thumb/36dc00cd0_320x200.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 5654
Last-Modified: Tue, 27 Sep 2022 12:55:12 GMT
Connection: keep-alive
ETag: "6332f2b0-1616"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80", baseline, precision 8, 320x200, components 3\012- data
Size:   5654
Md5:    0f9ca8e7bc283fab73b5c553cff77d0c
Sha1:   762f5ee07effe4d0db37a3466ebd5f7a98c441d3
Sha256: a67b3e7213d0e4950569bc7d54ad673591ce45b332f972a59c8fb90c2c2f7165
                                        
                                            GET /wp-content/cache/thumb/147c46b11_210x131.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 5079
Last-Modified: Tue, 05 Jul 2022 16:21:17 GMT
Connection: keep-alive
ETag: "62c464fd-13d7"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80", baseline, precision 8, 210x131, components 3\012- data
Size:   5079
Md5:    d8f0ef569fc73d775710058987107fe8
Sha1:   0fee88265f8a8e27ce0e7c9cafa3b06d9c7614b3
Sha256: 5f143309c49cd928a741cf22dd815392f8c5a8fb7402484248edd751f223b398
                                        
                                            GET /wp-content/cache/thumb/3815dd1a7_320x200.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 16176
Last-Modified: Mon, 26 Sep 2022 04:33:04 GMT
Connection: keep-alive
ETag: "63312b80-3f30"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80", baseline, precision 8, 320x200, components 3\012- data
Size:   16176
Md5:    23c7897b65c5054522a16d85aaba267e
Sha1:   5b57031aed3a8106270ac73ab1a7a04171773a27
Sha256: 7ad5c23a42f31691006f8d61825cddc7c2431a20e67759d5057be4c037492f4b
                                        
                                            GET /wp-content/cache/thumb/d02772700_210x131.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 8443
Last-Modified: Fri, 08 Jul 2022 13:52:12 GMT
Connection: keep-alive
ETag: "62c8368c-20fb"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80", baseline, precision 8, 210x131, components 3\012- data
Size:   8443
Md5:    eb5aff25d865271bdf738f16372c5162
Sha1:   9c139afcb40d03d76d207c51cafdbb3ff8bd88e1
Sha256: 6f5ea9bcef26cdf65f3fffb3aeb391acf3005deb4542ad63f70743c9c45f272c
                                        
                                            GET /wp-content/cache/thumb/20471cc57_210x131.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 6514
Last-Modified: Thu, 07 Jul 2022 10:22:56 GMT
Connection: keep-alive
ETag: "62c6b400-1972"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80", baseline, precision 8, 210x131, components 3\012- data
Size:   6514
Md5:    969c00b72763eda6d3344be3287d09fb
Sha1:   7f60552482c4d791be6dadd456153e2b36b35548
Sha256: ab5aa056f0b3a3523b74f692f059a207da0ced35ced75c8b900f51e015474a98
                                        
                                            GET /wp-content/cache/thumb/81ad984d6_210x131.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 8447
Last-Modified: Tue, 12 Feb 2019 11:03:54 GMT
Connection: keep-alive
ETag: "5c62a81a-20ff"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 210x131, components 3\012- data
Size:   8447
Md5:    fc6b8521d22be708c38b0ba8bdbb7316
Sha1:   544de52a5abca2bcf2fcf95c385327d13fd5ed99
Sha256: 5619a89cfab5a98d62013dc678e3d3e94cd8bf2b84e61488cbee9b09891ce2a4
                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://proyaichniki.ru
Connection: keep-alive
Referer: http://fonts.googleapis.com/

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15744
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 28 Sep 2022 20:16:31 GMT
Expires: Thu, 28 Sep 2023 20:16:31 GMT
Cache-Control: public, max-age=31536000
Age: 453063
Last-Modified: Wed, 11 May 2022 19:24:48 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://proyaichniki.ru
Connection: keep-alive
Referer: http://fonts.googleapis.com/

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 9628
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 17:19:53 GMT
Expires: Fri, 29 Sep 2023 17:19:53 GMT
Cache-Control: public, max-age=31536000
Age: 377261
Last-Modified: Wed, 11 May 2022 19:24:42 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 9628, version 1.0\012- data
Size:   9628
Md5:    d9ac47c7e500fb7083b8d595eaf6fe12
Sha1:   112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933
Sha256: 495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://proyaichniki.ru
Connection: keep-alive
Referer: http://fonts.googleapis.com/

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15860
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 28 Sep 2022 20:16:31 GMT
Expires: Thu, 28 Sep 2023 20:16:31 GMT
Cache-Control: public, max-age=31536000
Age: 453063
Last-Modified: Wed, 11 May 2022 19:24:42 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Size:   15860
Md5:    e9f5aaf547f165386cd313b995dddd8e
Sha1:   acdef5603c2387b0e5bffd744b679a24a8bc1968
Sha256: f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
                                        
                                            GET /wp-content/cache/thumb/63319529b_210x131.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 5548
Last-Modified: Sat, 09 Jul 2022 18:18:50 GMT
Connection: keep-alive
ETag: "62c9c68a-15ac"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80", baseline, precision 8, 210x131, components 3\012- data
Size:   5548
Md5:    ff9c8569222d88dc7c76d096def9c490
Sha1:   dd0a56e482734ed9794735e78b0b5c6e8a982ac6
Sha256: 210badba7d6d4f1371e4ac0cf85f81a6d7abf76962cff691e46f104e6190c552
                                        
                                            GET /wp-content/cache/thumb/8890124bf_210x131.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 5019
Last-Modified: Thu, 05 Apr 2018 13:58:20 GMT
Connection: keep-alive
ETag: "5ac62b7c-139b"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 210x131, components 3\012- data
Size:   5019
Md5:    ce3ce3444ec680984742a380897e19a1
Sha1:   f09d8efd310f44cb447e809cf379d49a96445d68
Sha256: ef6109bd6a6e13ea9f1f0606517feab76a91c1bedeb4a1310ac4607c810861a7
                                        
                                            GET /wp-content/cache/thumb/d18d89e3d_210x131.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 5943
Last-Modified: Sat, 26 Nov 2016 12:47:56 GMT
Connection: keep-alive
ETag: "5839847c-1737"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 210x131, components 3\012- data
Size:   5943
Md5:    e341a6159a3dadcaee47fa0dc528949f
Sha1:   42ee75e806347250b27cbc5f1c528154b15a25b6
Sha256: 8273d780fd422df47d16dcbeb5a7f6e7799287aea8c2d4349bbc74930f320ec0
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://proyaichniki.ru
Connection: keep-alive
Referer: http://fonts.googleapis.com/

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 9644
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 28 Sep 2022 20:20:08 GMT
Expires: Thu, 28 Sep 2023 20:20:08 GMT
Cache-Control: public, max-age=31536000
Age: 452846
Last-Modified: Wed, 11 May 2022 19:24:50 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 9644, version 1.0\012- data
Size:   9644
Md5:    6f112ec2b932ee12379442c42853244e
Sha1:   b2e73c8c70d6261e1d187f41693c43ac4fe0809d
Sha256: 6a84eeee6a25e7c9a8a03191007a6720566b5a2aa2384d36168fb07f49e97e9e
                                        
                                            GET /wp-content/cache/thumb/33fda48a6_210x131.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 10517
Last-Modified: Tue, 27 Sep 2022 10:10:35 GMT
Connection: keep-alive
ETag: "6332cc1b-2915"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80", baseline, precision 8, 210x131, components 3\012- data
Size:   10517
Md5:    aa181d938c0a4a7d6f472a5b39e7c525
Sha1:   936e729f3386bfa6b0e997b29581bdef3db79675
Sha256: 8dd68659726671cbc09dc1aa55c034c27196b4a8c689b052eec31c8c2c397670
                                        
                                            GET /wp-content/cache/thumb/6c75199ff_210x131.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 8900
Last-Modified: Sat, 25 Jun 2022 19:57:04 GMT
Connection: keep-alive
ETag: "62b76890-22c4"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80", baseline, precision 8, 210x131, components 3\012- data
Size:   8900
Md5:    ff7fe737ed48a6e174d84d66e07a1f4e
Sha1:   6be11f0d854cca7de0e3c4104b963256d2c535f3
Sha256: 053a0903249b0937179ef235a80d971e231f78f302d324b5f310d5e83af6c8da
                                        
                                            GET /wp-content/plugins/wp-postratings/images/stars/rating_over.gif HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 386
Last-Modified: Sat, 22 Oct 2016 08:53:20 GMT
Connection: keep-alive
ETag: "580b2900-182"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 21 x 20, 8-bit/color RGBA, non-interlaced\012- data
Size:   386
Md5:    d1eab3ab7b4b70da6ffcda308f5d7e51
Sha1:   3f5793552520c8bf78eda4b44da591bf3d3a58e2
Sha256: b418212101815f6f4d3c9a8ee4e5ab3dcddb8aaedaca5dacf1111ee0e5080d5d
                                        
                                            GET /wp-content/cache/thumb/31a7d7ae1_210x131.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 6220
Last-Modified: Sat, 23 Sep 2017 14:08:40 GMT
Connection: keep-alive
ETag: "59c66ae8-184c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 210x131, components 3\012- data
Size:   6220
Md5:    0dd737880bc32454fbfb4f1ed67cbfbf
Sha1:   86c54222ceb361413ce779c7bffa848f48baad0e
Sha256: 90ff42cfedb31b3bc18cbff005d4af218694e414413e7aaf10f13fa41127d940
                                        
                                            GET /wp-content/cache/thumb/9d3b09de3_210x131.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 8100
Last-Modified: Sat, 06 Jan 2018 08:11:06 GMT
Connection: keep-alive
ETag: "5a50849a-1fa4"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 210x131, components 3\012- data
Size:   8100
Md5:    97df3997a58283b5bfed18f6e3ae37b5
Sha1:   87d0f7d0fe588e1b2216aec48ba3bd7f3d2dad9f
Sha256: b63ac57a6ad42afd5af62b2ce7b83b5789b3d88dbac2b40a1d30b97610f32e1e
                                        
                                            GET /wp-content/cache/thumb/8334bce25_210x131.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 5971
Last-Modified: Thu, 05 Oct 2017 11:54:02 GMT
Connection: keep-alive
ETag: "59d61d5a-1753"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 210x131, components 3\012- data
Size:   5971
Md5:    9a6d341fdc090dc63fb3540a3afa85f3
Sha1:   23c23699124911dec470ca0cdff7a109ece18cf3
Sha256: f7cced71fb56b34d70547a7bf024c30e68bf835650bb2bd72a674aa8725d68de
                                        
                                            GET /wp-content/cache/thumb/ca5613202_210x131.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 6495
Last-Modified: Sat, 05 Feb 2022 11:12:50 GMT
Connection: keep-alive
ETag: "61fe5bb2-195f"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80", baseline, precision 8, 210x131, components 3\012- data
Size:   6495
Md5:    b8bc64277041a7bb6d63f8f7688dddbb
Sha1:   0b5d395603a5130088e7f72c792c4e06f59c57b6
Sha256: 666604e9c0090592e805064722ceca471baf82b83d4880ba43249e89154b3d66
                                        
                                            GET /wp-content/cache/thumb/923646983_210x131.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 6515
Last-Modified: Sat, 26 Nov 2016 12:47:56 GMT
Connection: keep-alive
ETag: "5839847c-1973"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 210x131, components 3\012- data
Size:   6515
Md5:    00e1676d0854f686ebac0a88ef3e9212
Sha1:   73cc61274b051b43d03fa7aa7f6d70ff3016bf14
Sha256: 6e50cc32625b07dd4179bd40000f06bb6e8a74c055ea6edf1f10fe278489e78a
                                        
                                            GET /wp-content/cache/thumb/3d874e3a8_210x131.jpg HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 5545
Last-Modified: Sat, 26 Nov 2016 12:47:56 GMT
Connection: keep-alive
ETag: "5839847c-15a9"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 210x131, components 3\012- data
Size:   5545
Md5:    0d66f0875db43db094b2b61e9713fa81
Sha1:   843b09197bfa55465957280c045eb247490318d6
Sha256: cef333f7038ea80b7dcce2839c6c89d0fa603a803ea4e042676870d6177402d3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4793996FD1B011F7407BA5352CAF03E0B71B01EDD3D5C6416A65946336D23693"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10482
Expires: Tue, 04 Oct 2022 05:02:16 GMT
Date: Tue, 04 Oct 2022 02:07:34 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3ZMD7mF1i86R6TcpdTeRZw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         52.41.253.170
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: cxg+wh9Cqz0hfsPq7NS4s3nFTRY=

                                        
                                            GET /aci.js HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://proyaichniki.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         46.4.114.109
HTTP/2 200 OK
content-type: application/x-javascript
                                        
server: openresty
date: Tue, 04 Oct 2022 02:07:34 GMT
content-length: 7461
last-modified: Mon, 15 Aug 2022 08:25:14 GMT
etag: "62fa02ea-1d25"
content-encoding: gzip
expires: Tue, 04 Oct 2022 14:07:34 GMT
cache-control: max-age=43200
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1408)
Size:   7461
Md5:    ae0aab6c5a2ae2e1168e74f6e6ae4741
Sha1:   2c00f69ee4bbe2ec96c0f7bb33b5f827a6195af8
Sha256: a47a88a9b6c7635e5074c25c6e3c92f399fdf8772376e94f077167241e59f9de
                                        
                                            GET /wp-content/uploads/2016/10/favicon.ico HTTP/1.1 
Host: proyaichniki.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         45.84.226.24
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 1150
Last-Modified: Sat, 22 Oct 2016 12:23:58 GMT
Connection: keep-alive
ETag: "580b5a5e-47e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size:   1150
Md5:    f85bf8ac3b5343b372e1b99408ae00bc
Sha1:   6993bd3f5b127361a2388f822baeeab69c5debea
Sha256: 75d6dcd257d9cf1d3b2bcd33133656521b897b44432ee30ee09d609d3c06bf95
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         142.250.74.34
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Date: Tue, 04 Oct 2022 02:07:34 GMT
Expires: Tue, 04 Oct 2022 02:07:34 GMT
Cache-Control: private, max-age=3600
ETag: 6138880994078636972
Vary: Accept-Encoding, Origin
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 57917
X-XSS-Protection: 0


--- Additional Info ---
Magic:  ASCII text, with very long lines (2910)
Size:   57917
Md5:    d01d4fe3bc1c3f4fae09b878b59877bb
Sha1:   2ae8c612ee42b3584e83c6c7b2306ff3eb243eb8
Sha256: bbd0d1a98d63192d30d11c9b19639ae3f6d70044466939adbf9114efd2e59f3b
                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         151.101.86.133
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Connection: keep-alive
Content-Length: 938
Server: nginx
Expires: Fri, 07 Oct 2022 23:59:04 GMT
ETag: "6e3a4af71de965bdee5c0c273721898b312d5ec0"
Last-Modified: Mon, 03 Oct 2022 23:59:05 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 02:07:34 GMT
Age: 507
X-Served-By: cache-qpg1241-QPG, cache-bma1635-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 2, 33
X-Timer: S1664849255.635100,VS0,VE0

                                        
                                            GET /mc/?dp=10 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/
Upgrade-Insecure-Requests: 1

                                         
                                         46.4.114.109
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: openresty
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/mc/?dp=10


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   142
Md5:    82c98e8e012b79c922655461171cc2fa
Sha1:   0828d79135573276005b04be42d79a8a3291292b
Sha256: 745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
                                        
                                            GET /hit/?v=0.4.0&uid=5fc2d85a-6dda-4e21-b3e9-f061c011603d&dp=10&tz=%2B00%3A00&nc=98087076&u=http%3A%2F%2Fproyaichniki.ru%2F&r=&rs=1280x1024&t=%D0%AF%D0%B8%D1%87%D0%BD%D0%B8%D0%BA%D0%B8%20%7C%20%D0%9E%D0%BF%D0%B8%D1%81%D0%B0%D0%BD%D0%B8%D0%B5%2C%20%D0%A1%D0%B8%D0%BC%D0%BF%D1%82%D0%BE%D0%BC%D1%8B%2C%20%D0%91%D0%BE%D0%BB%D0%B5%D0%B7%D0%BD%D0%B8%2C%20%D0%9B%D0%B5%D1%87%D0%B5%D0%BD%D0%B8%D0%B5%2C%20%D0%A5%D0%B8%D1%80%D1%83%D1%80%D0%B3%D0%B8%D1%8F.&oE=1&oP=1&dT=2022-10-04T02%3A07%3A34.256&fu=65d009b6-a7b8-4ecb-9e05-0a3f1b712bb1 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://proyaichniki.ru/

                                         
                                         46.4.114.109
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: openresty
Date: Tue, 04 Oct 2022 02:07:34 GMT
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/hit/?v=0.4.0&uid=5fc2d85a-6dda-4e21-b3e9-f061c011603d&dp=10&tz=%2B00%3A00&nc=98087076&u=http%3A%2F%2Fproyaichniki.ru%2F&r=&rs=1280x1024&t=%D0%AF%D0%B8%D1%87%D0%BD%D0%B8%D0%BA%D0%B8%20%7C%20%D0%9E%D0%BF%D0%B8%D1%81%D0%B0%D0%BD%D0%B8%D0%B5%2C%20%D0%A1%D0%B8%D0%BC%D0%BF%D1%82%D0%BE%D0%BC%D1%8B%2C%20%D0%91%D0%BE%D0%BB%D0%B5%D0%B7%D0%BD%D0%B8%2C%20%D0%9B%D0%B5%D1%87%D0%B5%D0%BD%D0%B8%D0%B5%2C%20%D0%A5%D0%B8%D1%80%D1%83%D1%80%D0%B3%D0%B8%D1%8F.&oE=1&oP=1&dT=2022-10-04T02%3A07%3A34.256&fu=65d009b6-a7b8-4ecb-9e05-0a3f1b712bb1


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   142
Md5:    82c98e8e012b79c922655461171cc2fa
Sha1:   0828d79135573276005b04be42d79a8a3291292b
Sha256: 745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
                                        
                                            GET /mc/?dp=10 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://proyaichniki.ru/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         46.4.114.109
HTTP/2 302 Found
content-type: text/html
                                        
server: openresty
date: Tue, 04 Oct 2022 02:07:34 GMT
content-length: 154
location: /mc/?dp=10&tc=1
set-cookie: test_cookie=CheckForPermission; path=/; Secure; SameSite=None; domain=.acint.net; expires=Tue, 04-Oct-22 02:17:34 GMT aid=fwAAAWM7lWYBegDtE62pAiSn5TBKZ55yjh/wX85icLQ03u7l; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            GET /hit/?v=0.4.0&uid=5fc2d85a-6dda-4e21-b3e9-f061c011603d&dp=10&tz=%2B00%3A00&nc=98087076&u=http%3A%2F%2Fproyaichniki.ru%2F&r=&rs=1280x1024&t=%D0%AF%D0%B8%D1%87%D0%BD%D0%B8%D0%BA%D0%B8%20%7C%20%D0%9E%D0%BF%D0%B8%D1%81%D0%B0%D0%BD%D0%B8%D0%B5%2C%20%D0%A1%D0%B8%D0%BC%D0%BF%D1%82%D0%BE%D0%BC%D1%8B%2C%20%D0%91%D0%BE%D0%BB%D0%B5%D0%B7%D0%BD%D0%B8%2C%20%D0%9B%D0%B5%D1%87%D0%B5%D0%BD%D0%B8%D0%B5%2C%20%D0%A5%D0%B8%D1%80%D1%83%D1%80%D0%B3%D0%B8%D1%8F.&oE=1&oP=1&dT=2022-10-04T02%3A07%3A34.256&fu=65d009b6-a7b8-4ecb-9e05-0a3f1b712bb1 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://proyaichniki.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         46.4.114.109
HTTP/2 200 OK
content-type: image/gif
                                        
server: openresty
date: Tue, 04 Oct 2022 02:07:34 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=sAkJCmM7lWa6kwD9pDikAutUQqdQmG+ZrpD8FAF/JRWu2dsv; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 02:07:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /metrika/watch.js HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://proyaichniki.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         87.250.250.119
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 57285
date: Tue, 04 Oct 2022 02:07:34 GMT
access-control-allow-origin: *
etag: "633583ac-dfc5"
expires: Tue, 04 Oct 2022 03:07:34 GMT
last-modified: Thu, 29 Sep 2022 14:38:20 GMT
cache-control: max-age=3600
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (570)
Size:   57285
Md5:    44366cc385a5c0f49df4f22b71434b42
Sha1:   3f56349f8a3fff52e28a3300052bdc2bde97371c
Sha256: 485ba52769d75db2ed79f65318d37070d09ce3441680aa22caa10ae3cdcb45cd
                                        
                                            GET /pagead/html/r20220928/r20190131/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://proyaichniki.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.98
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 4420
x-xss-protection: 0
date: Mon, 03 Oct 2022 13:35:27 GMT
expires: Mon, 17 Oct 2022 13:35:27 GMT
cache-control: public, max-age=1209600
age: 45127
etag: 9671129459699598864
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1731)
Size:   4420
Md5:    682bf699cccbc0ff817e1fcb7b95262a
Sha1:   11ad3edf0008f52b733c2d6d7199e1f052318d58
Sha256: bd42f773d589f85cf6884d7893746d5d4e0c082f78e1c80511cf3aefa1c69a0f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 02:07:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/managed/js/adsense/m202209270101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-6726240211963603&plah=proyaichniki.ru&bust=31070009 HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://proyaichniki.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.34
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Tue, 04 Oct 2022 02:07:34 GMT
expires: Tue, 04 Oct 2022 02:07:34 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
etag: 15459166098252866955
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 117170
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6002)
Size:   117170
Md5:    2788503f53259ff5990e351f865e3356
Sha1:   328cdac094e6ca4baee542fb937f63ecb6735c8f
Sha256: 892b31b933e8238837d1d2288c6ae015220ac8ad8b1a55e27849330255d355cf
                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         151.101.86.133
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Connection: keep-alive
Content-Length: 939
Server: nginx
Expires: Sat, 08 Oct 2022 02:07:01 GMT
ETag: "7c2d2111e08dc4488b4fd2eaa19250ec21142fa0"
Last-Modified: Tue, 04 Oct 2022 02:07:02 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 02:07:34 GMT
Age: 33
X-Served-By: cache-qpg1243-QPG, cache-bma1635-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 8
X-Timer: S1664849255.882340,VS0,VE0

                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         151.101.86.133
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Connection: keep-alive
Content-Length: 939
Server: nginx
Expires: Sat, 08 Oct 2022 02:07:01 GMT
ETag: "7c2d2111e08dc4488b4fd2eaa19250ec21142fa0"
Last-Modified: Tue, 04 Oct 2022 02:07:02 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 02:07:34 GMT
Age: 33
X-Served-By: cache-qpg1243-QPG, cache-bma1635-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 9
X-Timer: S1664849255.898599,VS0,VE0

                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         151.101.86.133
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Connection: keep-alive
Content-Length: 939
Server: nginx
Expires: Sat, 08 Oct 2022 02:07:01 GMT
ETag: "7c2d2111e08dc4488b4fd2eaa19250ec21142fa0"
Last-Modified: Tue, 04 Oct 2022 02:07:02 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 02:07:34 GMT
Age: 33
X-Served-By: cache-qpg1243-QPG, cache-bma1635-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 10
X-Timer: S1664849255.909162,VS0,VE0

                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         151.101.86.133
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Connection: keep-alive
Content-Length: 939
Server: nginx
Expires: Sat, 08 Oct 2022 02:07:01 GMT
ETag: "7c2d2111e08dc4488b4fd2eaa19250ec21142fa0"
Last-Modified: Tue, 04 Oct 2022 02:07:02 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 02:07:34 GMT
Age: 33
X-Served-By: cache-qpg1243-QPG, cache-bma1658-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 8
X-Timer: S1664849255.910638,VS0,VE0

                                        
                                            GET /safeframe-bundles/0.83/host.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://proyaichniki.ru
Connection: keep-alive
Referer: http://proyaichniki.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         178.154.131.216
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: nginx/1.17.9
date: Tue, 04 Oct 2022 02:07:34 GMT
content-length: 8878
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "f80882bf67cf261aa08d636da095149a"
expires: Thu, 03 Oct 2052 08:39:41 GMT
last-modified: Wed, 03 Nov 2021 13:42:58 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (33703), with no line terminators
Size:   8878
Md5:    f80882bf67cf261aa08d636da095149a
Sha1:   3e5bf3fbdb45c9696f9b925d3e71b2e9777c82cd
Sha256: 4794febaad77bf94edba1c860dbcf9612722ad0a18b95831dad359b0bba4bed6
                                        
                                            GET /partner-code-bundles/659937/38e7494e9c17cd75b77c.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://proyaichniki.ru
Connection: keep-alive
Referer: http://proyaichniki.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         178.154.131.216
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: nginx/1.17.9
date: Tue, 04 Oct 2022 02:07:34 GMT
content-length: 18875
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "866dbd784bf4918e987a1375099c09d1"
expires: Thu, 03 Oct 2052 08:40:58 GMT
last-modified: Fri, 30 Sep 2022 17:01:00 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (65494)
Size:   18875
Md5:    866dbd784bf4918e987a1375099c09d1
Sha1:   45e52f8dcc29f00866faa58bfb92a1b7246aef2e
Sha256: c01e0296b298f159e2cb92a0a82b750275f6feaaedd315b6c633a669a162af43
                                        
                                            GET /partner-code-bundles/659937/4a3049b518097d5b59b1.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://proyaichniki.ru
Connection: keep-alive
Referer: http://proyaichniki.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         178.154.131.216
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: nginx/1.17.9
date: Tue, 04 Oct 2022 02:07:34 GMT
content-length: 4452
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "16cd708feec720641341c22e23f3ac60"
expires: Thu, 03 Oct 2052 08:40:58 GMT
last-modified: Fri, 30 Sep 2022 17:01:00 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13242)
Size:   4452
Md5:    16cd708feec720641341c22e23f3ac60
Sha1:   9b35a13306eafc260c3e0140beee6d011c5a267e
Sha256: d0aa5c500003f35c25508028b4d7b356edb3bb8e867bc42b17849f5673460dcc
                                        
                                            GET /partner-code-bundles/659937/cba9330fbdd5f317ee69.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://proyaichniki.ru
Connection: keep-alive
Referer: http://proyaichniki.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         178.154.131.216
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: nginx/1.17.9
date: Tue, 04 Oct 2022 02:07:34 GMT
content-length: 96099
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "781898f957d94e8bb801546adddca6d2"
expires: Thu, 03 Oct 2052 08:40:52 GMT
last-modified: Fri, 30 Sep 2022 17:01:00 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65497)
Size:   96099
Md5:    781898f957d94e8bb801546adddca6d2
Sha1:   4641f9607ea7fc48e1b1a986c0ff99aa6eb4c838
Sha256: 9d80a09f8f1f29ac77342a803fee0f096531d28b5b2616c3d55ecb7d833a41f3
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 02:07:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /match?id=106&vid=0A0909B066953B63FD0093BA02A438A4 HTTP/1.1 
Host: dm-eu.hybrid.ai
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         37.18.103.21
HTTP/2 204 No Content
                                        
date: Tue, 04 Oct 2022 02:07:35 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
set-cookie: vid=64c454d6490d4a786945; expires=Wed, 04 Oct 2023 02:07:34 GMT; domain=.hybrid.ai; path=/; samesite=none
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 518
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: Hybrid Web Server
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /sync?ssp=sape HTTP/1.1 
Host: a.utraff.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         172.67.217.151
HTTP/2 204 No Content
content-type: text/plain
                                        
date: Tue, 04 Oct 2022 02:07:35 GMT
set-cookie: preutid=1; Expires=Thu, 03 Nov 2022 05:07:35 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/ preutid=1; Expires=Thu, 03 Nov 2022 05:07:35 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-expose-headers: Content-Length,Content-Range
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ts7csjD4c%2Frebm%2FZ%2BR98vLnTbx5REEj7swmX%2FVVwn2Y7JXr1b%2F4mFx88%2BGFUEu4rRgh4N5JPa7GxT06CpMj%2FfMh4hbVa5qAmaozueoDi%2BDwwlFS1bgYkOHr8o67Cnv8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754a5d64fa75b517-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 02:07:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D HTTP/1.1 
Host: ads.adlook.me
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         5.101.76.186
HTTP/2 302 Found
                                        
location: https://acint.net/match?dp=110&euid=139913a4538342c6911a5b47a69f8978
server: Kestrel
set-cookie: adlm_userId=139913a4538342c6911a5b47a69f8978; expires=Tue, 03 Oct 2023 21:00:00 GMT; path=/; SameSite=None; secure
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "07BC4D4B532BF6D2A40A61BCE7ED1F653D2122CD64DD4E1EA80B476290AB59ED"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16950
Expires: Tue, 04 Oct 2022 06:50:05 GMT
Date: Tue, 04 Oct 2022 02:07:35 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "2B1C469F70EF758E999E2765D3C478CD1B26D948712144CD309BEB930DD32784"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4826
Expires: Tue, 04 Oct 2022 03:28:01 GMT
Date: Tue, 04 Oct 2022 02:07:35 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 02:07:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "557A2BFF65BD067A9DC45E25EDBC16BD95BA87672D9904F8F7ACBC2E47E8E8E7"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17853
Expires: Tue, 04 Oct 2022 07:05:08 GMT
Date: Tue, 04 Oct 2022 02:07:35 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 02:07:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D HTTP/1.1 
Host: ssp-rtb.sape.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         193.3.184.218
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: openresty
Date: Tue, 04 Oct 2022 02:07:35 GMT
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/match?dp=14&euid=CEB803C167953B636D008864021C9F43
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=wQO4zmM7lWdkiABtQ58cAmMcWBoyfIuw8ikgqWwDWd80vOTN; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   142
Md5:    82c98e8e012b79c922655461171cc2fa
Sha1:   0828d79135573276005b04be42d79a8a3291292b
Sha256: 745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "66D0D40BC235921DFF33B8B8C336A41CC59F9CDF2A81933ADF22B642379B3374"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18022
Expires: Tue, 04 Oct 2022 07:07:57 GMT
Date: Tue, 04 Oct 2022 02:07:35 GMT
Connection: keep-alive

                                        
                                            GET /sape/sync HTTP/1.1 
Host: sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         148.251.237.106
HTTP/2 302 Found
content-type: image/png
                                        
server: nginx
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 0
location: https://sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
set-cookie: session_tptc=1664849255373;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=180 session_tptc-legacy=1664849255373;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2

                                        
                                            GET /adsid/integrator.js?domain=proyaichniki.ru HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://proyaichniki.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.207.194
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 04 Oct 2022 02:07:35 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   100
Md5:    917951a58be8c6c6f3680159550ba3c2
Sha1:   21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
Sha256: cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
                                        
                                            GET /metrika/advert.gif HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://proyaichniki.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         87.250.250.119
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 43
date: Tue, 04 Oct 2022 02:07:35 GMT
access-control-allow-origin: *
etag: "633583ac-2b"
expires: Tue, 04 Oct 2022 03:07:35 GMT
accept-ranges: bytes
last-modified: Thu, 29 Sep 2022 14:38:20 GMT
cache-control: max-age=3600
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /adsid/integrator.js?domain=proyaichniki.ru HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://proyaichniki.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.162
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 04 Oct 2022 02:07:35 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   100
Md5:    917951a58be8c6c6f3680159550ba3c2
Sha1:   21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
Sha256: cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
                                        
                                            GET /mc/?dp=10&tc=1 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://proyaichniki.ru/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=sAkJCmM7lWa6kwD9pDikAutUQqdQmG+ZrpD8FAF/JRWu2dsv
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         46.4.114.109
HTTP/2 200 OK
content-type: text/html
                                        
server: openresty
date: Tue, 04 Oct 2022 02:07:34 GMT
set-cookie: cSyncDp7v2=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp14v3=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp17=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp32=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp45v3=1664849254; expires=Wed, 05-Oct-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp53=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp54v2=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp62=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp67v2=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp68=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp71=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp77=1664849254; expires=Tue, 18-Oct-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp84=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp85=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp95v3=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp101=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp104v2=1664849254; expires=Tue, 18-Oct-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp107=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp110=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp111v2=1664849254; expires=Tue, 18-Oct-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp112v2=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp125v2=1664849254; expires=Wed, 19-Oct-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp126=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp127=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp129=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp136v2=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp138=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp144=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp146=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp148=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp149=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp151=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp178=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp179=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp186=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp221=1664849254; expires=Thu, 03-Nov-22 02:07:34 GMT; path=/; Secure; SameSite=None; domain=.acint.net
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size:   1468
Md5:    07e0c981377a50a990708a522b930fc0
Sha1:   50f7a36dbeb4b58940c82a33e54795f73ee040c3
Sha256: fd45dafbd06c37be0c6baef58ff4274b8d2979bcc93390cfa7a38e453a9d2bd4
                                        
                                            GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0A0909B066953B63FD0093BA02A438A4 HTTP/1.1 
Host: sync.1dmp.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         95.216.101.186
HTTP/2 302 Found
                                        
server: nginx
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 0
expires: 0
cache-control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
set-cookie: uid=503a4510-4389-11ed-8ff0-f832e4719dd9; Version=1; Path=/; Domain=.1dmp.io; Expires=Wed, 04 Oct 2023 02:07:35 GMT; SameSite=None; Secure uid-legacy=503a4510-4389-11ed-8ff0-f832e4719dd9; Version=1; Path=/; Domain=.1dmp.io; Expires=Wed, 04 Oct 2023 02:07:35 GMT
location: /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0A0909B066953B63FD0093BA02A438A4&cs=1
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F3507054E91E89A459ED3D334F892918A8A6930293CA3320E08793E3C65363F3"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4336
Expires: Tue, 04 Oct 2022 03:19:51 GMT
Date: Tue, 04 Oct 2022 02:07:35 GMT
Connection: keep-alive

                                        
                                            GET /watch/41320099/1?wmode=7&page-url=http%3A%2F%2Fproyaichniki.ru%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1123%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A945248099314%3Ahid%3A106615381%3Az%3A0%3Ai%3A20221004020734%3Aet%3A1664849255%3Ac%3A1%3Arn%3A613508124%3Arqn%3A1%3Au%3A1664849255754690959%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A59%2C36%2C256%2C2%2C414%2C0%2C%2C353%2C39%2C%2C%2C%2C1169%3Ans%3A1664849252870%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664849255%3At%3A%D0%AF%D0%B8%D1%87%D0%BD%D0%B8%D0%BA%D0%B8%20%7C%20%D0%9E%D0%BF%D0%B8%D1%81%D0%B0%D0%BD%D0%B8%D0%B5%2C%20%D0%A1%D0%B8%D0%BC%D0%BF%D1%82%D0%BE%D0%BC%D1%8B%2C%20%D0%91%D0%BE%D0%BB%D0%B5%D0%B7%D0%BD%D0%B8%2C%20%D0%9B%D0%B5%D1%87%D0%B5%D0%BD%D0%B8%D0%B5%2C%20%D0%A5%D0%B8%D1%80%D1%83%D1%80%D0%B3%D0%B8%D1%8F.&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://proyaichniki.ru
Referer: http://proyaichniki.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         87.250.250.119
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
content-length: 426
date: Tue, 04 Oct 2022 02:07:35 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://proyaichniki.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 04-Oct-2022 02:07:35 GMT
last-modified: Tue, 04-Oct-2022 02:07:35 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (426), with no line terminators
Size:   426
Md5:    b6e59bcce9d2f3b83c8e477755a7d641
Sha1:   27ca81e51bbf9fcff0fbb7b279349f4d692770cd
Sha256: 06b3e67ce5c5e76498b82eef88d7cae4fdba3384a17a651a01c0094f45157d1e
                                        
                                            GET /sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D HTTP/1.1 
Host: ssp.bestssp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.147.80.35
HTTP/1.1 302 Found
                                        
Server: nginx/1.16.1
Date: Tue, 04 Oct 2022 02:07:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.acint.net/match?dp=95&euid=GWETKLRF
Set-Cookie: uid=GWETKLRF; Expires=Tue, 04 Oct 2032 00:00:00 GMT; mf2=1; Expires=Thu, 03 Nov 2022 00:00:00 GMT;

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "70A11FD722AC239EE1BF9672226662DA89B6B86C9CD04D961FB313A7A7860B5E"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6370
Expires: Tue, 04 Oct 2022 03:53:45 GMT
Date: Tue, 04 Oct 2022 02:07:35 GMT
Connection: keep-alive

                                        
                                            GET /merge_gpsid/?sid=50&id=0A0909B066953B63FD0093BA02A438A4 HTTP/1.1 
Host: stat.adlabs.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         109.248.237.37
HTTP/2 302 Found
                                        
server: nginx
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 0
location: //adlmerge.com/merge_gpsid/?sid=50&id=0A0909B066953B63FD0093BA02A438A4
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5449CA64E1C9DBECC0FDAB614225F77A82CFD6168EA99F31454A98CB49E8641E"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16559
Expires: Tue, 04 Oct 2022 06:43:34 GMT
Date: Tue, 04 Oct 2022 02:07:35 GMT
Connection: keep-alive

                                        
                                            GET /match?dp=14&euid=CEB803C167953B636D008864021C9F43 HTTP/1.1 
Host: acint.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=sAkJCmM7lWa6kwD9pDikAutUQqdQmG+ZrpD8FAF/JRWu2dsv; cSyncDp7v2=1664849254; cSyncDp14v3=1664849254; cSyncDp17=1664849254; cSyncDp32=1664849254; cSyncDp45v3=1664849254; cSyncDp53=1664849254; cSyncDp54v2=1664849254; cSyncDp62=1664849254; cSyncDp67v2=1664849254; cSyncDp68=1664849254; cSyncDp71=1664849254; cSyncDp77=1664849254; cSyncDp84=1664849254; cSyncDp85=1664849254; cSyncDp95v3=1664849254; cSyncDp101=1664849254; cSyncDp104v2=1664849254; cSyncDp107=1664849254; cSyncDp110=1664849254; cSyncDp111v2=1664849254; cSyncDp112v2=1664849254; cSyncDp125v2=1664849254; cSyncDp126=1664849254; cSyncDp127=1664849254; cSyncDp129=1664849254; cSyncDp136v2=1664849254; cSyncDp138=1664849254; cSyncDp144=1664849254; cSyncDp146=1664849254; cSyncDp148=1664849254; cSyncDp149=1664849254; cSyncDp151=1664849254; cSyncDp178=1664849254; cSyncDp179=1664849254; cSyncDp186=1664849254; cSyncDp221=1664849254
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         46.4.114.109
HTTP/2 200 OK
content-type: image/gif
                                        
server: openresty
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0 HTTP/1.1 
Host: sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: session_tptc=1664849255373
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         148.251.237.106
HTTP/2 302 Found
content-type: image/png
                                        
server: nginx
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 0
location: https://c26fbfad-43e2-437c-8a16-880899f16933.sync.upravel.com/sape/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyIsImh0dHBzOi8vd3d3LmFjaW50Lm5ldC8iXX19
set-cookie: user_id=c26fbfad-43e2-437c-8a16-880899f16933;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000 user_id-legacy=c26fbfad-43e2-437c-8a16-880899f16933;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2

                                        
                                            GET /match/396/?remote_uid=0A0909B066953B63FD0093BA02A438A4 HTTP/1.1 
Host: s.uuidksinc.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         31.220.27.155
HTTP/2 302 Found
                                        
server: nginx/1.19.0
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 0
location: https://www.acint.net/match?dp=127&euid=eppSdwzcu1urUdNxZ2aw
set-cookie: jcsuuid=eppSdwzcu1urUdNxZ2aw; expires=Wed, 04 Oct 2023 02:07:35 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2

                                        
                                            GET /match?dp=110&euid=139913a4538342c6911a5b47a69f8978 HTTP/1.1 
Host: acint.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=sAkJCmM7lWa6kwD9pDikAutUQqdQmG+ZrpD8FAF/JRWu2dsv; cSyncDp7v2=1664849254; cSyncDp14v3=1664849254; cSyncDp17=1664849254; cSyncDp32=1664849254; cSyncDp45v3=1664849254; cSyncDp53=1664849254; cSyncDp54v2=1664849254; cSyncDp62=1664849254; cSyncDp67v2=1664849254; cSyncDp68=1664849254; cSyncDp71=1664849254; cSyncDp77=1664849254; cSyncDp84=1664849254; cSyncDp85=1664849254; cSyncDp95v3=1664849254; cSyncDp101=1664849254; cSyncDp104v2=1664849254; cSyncDp107=1664849254; cSyncDp110=1664849254; cSyncDp111v2=1664849254; cSyncDp112v2=1664849254; cSyncDp125v2=1664849254; cSyncDp126=1664849254; cSyncDp127=1664849254; cSyncDp129=1664849254; cSyncDp136v2=1664849254; cSyncDp138=1664849254; cSyncDp144=1664849254; cSyncDp146=1664849254; cSyncDp148=1664849254; cSyncDp149=1664849254; cSyncDp151=1664849254; cSyncDp178=1664849254; cSyncDp179=1664849254; cSyncDp186=1664849254; cSyncDp221=1664849254
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         46.4.114.109
HTTP/2 200 OK
content-type: image/gif
                                        
server: openresty
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0A0909B066953B63FD0093BA02A438A4&cs=1 HTTP/1.1 
Host: sync.1dmp.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: uid=503a4510-4389-11ed-8ff0-f832e4719dd9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         95.216.101.186
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 35
expires: 0
cache-control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
set-cookie: uid=503a4510-4389-11ed-8ff0-f832e4719dd9; Version=1; Path=/; Domain=.1dmp.io; Expires=Wed, 04 Oct 2023 02:07:35 GMT; SameSite=None; Secure uid-legacy=503a4510-4389-11ed-8ff0-f832e4719dd9; Version=1; Path=/; Domain=.1dmp.io; Expires=Wed, 04 Oct 2023 02:07:35 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /matchspm?pi=1000005&pui=0A0909B066953B63FD0093BA02A438A4 HTTP/1.1 
Host: ut.rktch.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         89.108.97.2
HTTP/1.1 302 Found
                                        
Server: nginx/1.22.0
Date: Tue, 04 Oct 2022 02:07:35 GMT
Content-Length: 0
Connection: keep-alive
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
Set-Cookie: b_uid=eaf2c139071a329dbffcb138d8c4bb15608f; Max-Age=2592000; Expires=Thu, 03 Nov 2022 02:07:35 GMT; Domain=rktch.com; Secure; SameSite=None
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Access-Control-Allow-Headers: Content-Type, Accept, Authorization
Access-Control-Allow-Credentials: true

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 02:07:35 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 01 Oct 2022 03:41:05 GMT
Expires: Sat, 08 Oct 2022 03:41:04 GMT
Etag: "671e5633ab489f6fee44f15b999909882c578bc4"
Cache-Control: max-age=350608,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754a5d6668900b39-OSL

                                        
                                            POST /gsgccr3dvtlsca2020 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         151.101.86.133
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Connection: keep-alive
Content-Length: 1414
Server: nginx
Expires: Sat, 08 Oct 2022 00:41:47 GMT
ETag: "e3d3bbce0b6478ca829eed5bc2a4dfecf667facf"
Last-Modified: Tue, 04 Oct 2022 00:41:48 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 02:07:35 GMT
Age: 1539
X-Served-By: cache-qpg1264-QPG, cache-bma1635-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 4
X-Timer: S1664849255.469823,VS0,VE0


--- Additional Info ---
Magic:  data
Size:   1414
Md5:    476092f27f774a32d96e362b38b408dd
Sha1:   e3d3bbce0b6478ca829eed5bc2a4dfecf667facf
Sha256: acbbd3cec8fcefeb71b99de92566d486058f7be36adde346c2112251002ae9ac
                                        
                                            GET /match?dp=95&euid=GWETKLRF HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=sAkJCmM7lWa6kwD9pDikAutUQqdQmG+ZrpD8FAF/JRWu2dsv; cSyncDp7v2=1664849254; cSyncDp14v3=1664849254; cSyncDp17=1664849254; cSyncDp32=1664849254; cSyncDp45v3=1664849254; cSyncDp53=1664849254; cSyncDp54v2=1664849254; cSyncDp62=1664849254; cSyncDp67v2=1664849254; cSyncDp68=1664849254; cSyncDp71=1664849254; cSyncDp77=1664849254; cSyncDp84=1664849254; cSyncDp85=1664849254; cSyncDp95v3=1664849254; cSyncDp101=1664849254; cSyncDp104v2=1664849254; cSyncDp107=1664849254; cSyncDp110=1664849254; cSyncDp111v2=1664849254; cSyncDp112v2=1664849254; cSyncDp125v2=1664849254; cSyncDp126=1664849254; cSyncDp127=1664849254; cSyncDp129=1664849254; cSyncDp136v2=1664849254; cSyncDp138=1664849254; cSyncDp144=1664849254; cSyncDp146=1664849254; cSyncDp148=1664849254; cSyncDp149=1664849254; cSyncDp151=1664849254; cSyncDp178=1664849254; cSyncDp179=1664849254; cSyncDp186=1664849254; cSyncDp221=1664849254
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         46.4.114.109
HTTP/2 200 OK
content-type: image/gif
                                        
server: openresty
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /?src=sap1&uid=0A0909B066953B63FD0093BA02A438A4 HTTP/1.1 
Host: sync.bumlam.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         31.172.81.159
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:35 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQ1MDQ2OTQwYS00Mzg5LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Mon, 29 Sep 2042 02:07:35 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync.bumlam.com/?src=sap1&s_data=CAIQARjnqu6ZBmIgMEEwOTA5QjA2Njk1M0I2M0ZEMDA5M0JBMDJBNDM4QTSiARBQRpQKQ4kR7YbgACWQwGR8
ETag: 5046940a-4389-11ed-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "86F2458EB777AD84C76265E8FF4630508573D5BAACA62F3BE33D1BD712660AB3"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5430
Expires: Tue, 04 Oct 2022 03:38:05 GMT
Date: Tue, 04 Oct 2022 02:07:35 GMT
Connection: keep-alive

                                        
                                            GET /sape/cm?user_id=0A0909B066953B63FD0093BA02A438A4 HTTP/1.1 
Host: nr.bidderstack.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         148.251.217.100
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:35 GMT
Content-Length: 44
Connection: keep-alive
Set-Cookie: uid=1ab9fe60-d5d0-4b71-a6e8-f239a2889224; domain=.bidderstack.com; path=/; expires=Wed, 04-Oct-2023 02:07:35 GMT;
Access-Control-Allow-Credentials: true


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   44
Md5:    f9d60352c70a2ba15616d1c9421f3844
Sha1:   e9abc8bea7721a4b6a50295850d13c515006a95c
Sha256: 82cb517a8f80c91dfcec543c6d140deb3baaf463ea9e77655475096eba7bc7d9
                                        
                                            GET /match?dp=127&euid=eppSdwzcu1urUdNxZ2aw HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=sAkJCmM7lWa6kwD9pDikAutUQqdQmG+ZrpD8FAF/JRWu2dsv; cSyncDp7v2=1664849254; cSyncDp14v3=1664849254; cSyncDp17=1664849254; cSyncDp32=1664849254; cSyncDp45v3=1664849254; cSyncDp53=1664849254; cSyncDp54v2=1664849254; cSyncDp62=1664849254; cSyncDp67v2=1664849254; cSyncDp68=1664849254; cSyncDp71=1664849254; cSyncDp77=1664849254; cSyncDp84=1664849254; cSyncDp85=1664849254; cSyncDp95v3=1664849254; cSyncDp101=1664849254; cSyncDp104v2=1664849254; cSyncDp107=1664849254; cSyncDp110=1664849254; cSyncDp111v2=1664849254; cSyncDp112v2=1664849254; cSyncDp125v2=1664849254; cSyncDp126=1664849254; cSyncDp127=1664849254; cSyncDp129=1664849254; cSyncDp136v2=1664849254; cSyncDp138=1664849254; cSyncDp144=1664849254; cSyncDp146=1664849254; cSyncDp148=1664849254; cSyncDp149=1664849254; cSyncDp151=1664849254; cSyncDp178=1664849254; cSyncDp179=1664849254; cSyncDp186=1664849254; cSyncDp221=1664849254
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         46.4.114.109
HTTP/2 200 OK
content-type: image/gif
                                        
server: openresty
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            POST /gsalphasha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         151.101.86.133
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Connection: keep-alive
Content-Length: 1423
Server: nginx
Expires: Sat, 08 Oct 2022 02:05:23 GMT
ETag: "4e7f9add8d9acb7fffe865704dc7889f8a3d387f"
Last-Modified: Tue, 04 Oct 2022 02:05:24 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 02:07:35 GMT
Age: 130
X-Served-By: cache-qpg1242-QPG, cache-bma1625-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 1
X-Timer: S1664849256.510681,VS0,VE1


--- Additional Info ---
Magic:  data
Size:   1423
Md5:    adbd201868cc74776069930a44108e35
Sha1:   4e7f9add8d9acb7fffe865704dc7889f8a3d387f
Sha256: 96b0f76fbb587ed78267673c22c68c68c7116bbe0fe1e397be8380a07e703fd2
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B51BF458292B0789C73E8CA5A966DB73D4BAC842B1B9B639824F7C8AD33B215A"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7797
Expires: Tue, 04 Oct 2022 04:17:32 GMT
Date: Tue, 04 Oct 2022 02:07:35 GMT
Connection: keep-alive

                                        
                                            GET /cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D HTTP/1.1 
Host: exchange.buzzoola.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         116.202.236.171
HTTP/2 301 Moved Permanently
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 115
location: https://www.acint.net/match?dp=126&euid=2359980b-dbae-43e7-6a09-165d299f8437
serverid: TODO
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   115
Md5:    693f624d7488c6d4f733cc0807b163d2
Sha1:   6783f0e074cee0fac523d739ca664594e90409d4
Sha256: 20c34c331b0206df347312dca3a9e2caa58d8f0745d953dde99f965191f9b96e
                                        
                                            GET /p?ssp=sp&id=0A0909B066953B63FD0093BA02A438A4 HTTP/1.1 
Host: 0a0909b066953b63fd0093ba02a438a4-sp.ops.beeline.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         37.9.245.57
HTTP/2 301 Moved Permanently
                                        
server: nginx
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 0
location: https://www.acint.net/match?dp=111&euid=dd79d712-46ab-4649-9fca-d1774055d6f1
access-control-allow-origin: *
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: BeeAID=dd79d712-46ab-4649-9fca-d1774055d6f1; expires=Mon, 25 Sep 2023 02:07:35 GMT; domain=ops.beeline.ru; path=/; secure; SameSite=None
access-control-allow-credentials: true, true
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS, GET, HEAD, POST, OPTIONS, PUT, DELETE
access-control-allow-headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
x-route: http://upstream_cookiesync
x-host: 192.168.152.38
X-Firefox-Spdy: h2

                                        
                                            GET /match?dp=129&euid=x5ogwh4fvf HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=sAkJCmM7lWa6kwD9pDikAutUQqdQmG+ZrpD8FAF/JRWu2dsv; cSyncDp7v2=1664849254; cSyncDp14v3=1664849254; cSyncDp17=1664849254; cSyncDp32=1664849254; cSyncDp45v3=1664849254; cSyncDp53=1664849254; cSyncDp54v2=1664849254; cSyncDp62=1664849254; cSyncDp67v2=1664849254; cSyncDp68=1664849254; cSyncDp71=1664849254; cSyncDp77=1664849254; cSyncDp84=1664849254; cSyncDp85=1664849254; cSyncDp95v3=1664849254; cSyncDp101=1664849254; cSyncDp104v2=1664849254; cSyncDp107=1664849254; cSyncDp110=1664849254; cSyncDp111v2=1664849254; cSyncDp112v2=1664849254; cSyncDp125v2=1664849254; cSyncDp126=1664849254; cSyncDp127=1664849254; cSyncDp129=1664849254; cSyncDp136v2=1664849254; cSyncDp138=1664849254; cSyncDp144=1664849254; cSyncDp146=1664849254; cSyncDp148=1664849254; cSyncDp149=1664849254; cSyncDp151=1664849254; cSyncDp178=1664849254; cSyncDp179=1664849254; cSyncDp186=1664849254; cSyncDp221=1664849254
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         46.4.114.109
HTTP/2 200 OK
content-type: image/gif
                                        
server: openresty
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /core/match.gif?s=32&id=0A0909B066953B63FD0093BA02A438A4 HTTP/1.1 
Host: mediatoday.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         139.45.228.111
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx/1.22.0
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 43
p3p: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
cache-control: no-cache, max-age=0, must-revalidate, no-store
pragma: no-cache
expires: Thursday, 01-Jan-1970 00:00:00 GMT
set-cookie: idntfy=VUZIfyIX2XLpSoR; expires=Fri, 01-Oct-2032 02:07:35 GMT; domain=mediatoday.ru; path=/core; SameSite=None; Secure
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /userbind?src=sape&id=0A0909B066953B63FD0093BA02A438A4 HTTP/1.1 
Host: match.new-programmatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         217.65.2.150
HTTP/1.1 204 No Content
                                        
Server: nginx/1.18.0
Date: Tue, 04 Oct 2022 02:07:35 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "416983F57A24826BAC9440315FA32329E9672B7B4FC3F1D6AB40DEEB8F9E45FD"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11558
Expires: Tue, 04 Oct 2022 05:20:13 GMT
Date: Tue, 04 Oct 2022 02:07:35 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 02:07:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /p?ssp=sp&uid=0A0909B066953B63FD0093BA02A438A4 HTTP/1.1 
Host: cs.agency2.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         23.111.107.44
HTTP/1.1 301 Moved Permanently
                                        
Date: Tue, 04 Oct 2022 02:07:35 GMT
Content-Length: 0
Connection: keep-alive
Server: fasthttp
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.acint.net/match?dp=186&euid=fa8d1199-7ad4-40e9-977e-ee6092601380
Set-Cookie: uuid=fa8d1199-7ad4-40e9-977e-ee6092601380; expires=Mon, 25 Sep 2023 02:07:35 GMT; domain=agency2.ru; path=/; secure; SameSite=None
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.107.44

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 02:07:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /match/sape?id=0A0909B066953B63FD0093BA02A438A4 HTTP/1.1 
Host: sync.dmp.otm-r.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         148.251.9.22
HTTP/2 204 No Content
                                        
server: nginx/1.17.2
date: Tue, 04 Oct 2022 02:07:35 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2

                                        
                                            GET /?src=sap1&s_data=CAIQARjnqu6ZBmIgMEEwOTA5QjA2Njk1M0I2M0ZEMDA5M0JBMDJBNDM4QTSiARBQRpQKQ4kR7YbgACWQwGR8 HTTP/1.1 
Host: sync.bumlam.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQ1MDQ2OTQwYS00Mzg5LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         31.172.81.159
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:35 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQ1MDQ2OTQwYS00Mzg5LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Mon, 29 Sep 2042 02:07:35 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0

                                        
                                            GET /match?dp=126&euid=2359980b-dbae-43e7-6a09-165d299f8437 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=sAkJCmM7lWa6kwD9pDikAutUQqdQmG+ZrpD8FAF/JRWu2dsv; cSyncDp7v2=1664849254; cSyncDp14v3=1664849254; cSyncDp17=1664849254; cSyncDp32=1664849254; cSyncDp45v3=1664849254; cSyncDp53=1664849254; cSyncDp54v2=1664849254; cSyncDp62=1664849254; cSyncDp67v2=1664849254; cSyncDp68=1664849254; cSyncDp71=1664849254; cSyncDp77=1664849254; cSyncDp84=1664849254; cSyncDp85=1664849254; cSyncDp95v3=1664849254; cSyncDp101=1664849254; cSyncDp104v2=1664849254; cSyncDp107=1664849254; cSyncDp110=1664849254; cSyncDp111v2=1664849254; cSyncDp112v2=1664849254; cSyncDp125v2=1664849254; cSyncDp126=1664849254; cSyncDp127=1664849254; cSyncDp129=1664849254; cSyncDp136v2=1664849254; cSyncDp138=1664849254; cSyncDp144=1664849254; cSyncDp146=1664849254; cSyncDp148=1664849254; cSyncDp149=1664849254; cSyncDp151=1664849254; cSyncDp178=1664849254; cSyncDp179=1664849254; cSyncDp186=1664849254; cSyncDp221=1664849254
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         46.4.114.109
HTTP/2 200 OK
content-type: image/gif
                                        
server: openresty
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /match?dp=111&euid=dd79d712-46ab-4649-9fca-d1774055d6f1 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=sAkJCmM7lWa6kwD9pDikAutUQqdQmG+ZrpD8FAF/JRWu2dsv; cSyncDp7v2=1664849254; cSyncDp14v3=1664849254; cSyncDp17=1664849254; cSyncDp32=1664849254; cSyncDp45v3=1664849254; cSyncDp53=1664849254; cSyncDp54v2=1664849254; cSyncDp62=1664849254; cSyncDp67v2=1664849254; cSyncDp68=1664849254; cSyncDp71=1664849254; cSyncDp77=1664849254; cSyncDp84=1664849254; cSyncDp85=1664849254; cSyncDp95v3=1664849254; cSyncDp101=1664849254; cSyncDp104v2=1664849254; cSyncDp107=1664849254; cSyncDp110=1664849254; cSyncDp111v2=1664849254; cSyncDp112v2=1664849254; cSyncDp125v2=1664849254; cSyncDp126=1664849254; cSyncDp127=1664849254; cSyncDp129=1664849254; cSyncDp136v2=1664849254; cSyncDp138=1664849254; cSyncDp144=1664849254; cSyncDp146=1664849254; cSyncDp148=1664849254; cSyncDp149=1664849254; cSyncDp151=1664849254; cSyncDp178=1664849254; cSyncDp179=1664849254; cSyncDp186=1664849254; cSyncDp221=1664849254
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         46.4.114.109
HTTP/2 200 OK
content-type: image/gif
                                        
server: openresty
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /match?dp=186&euid=fa8d1199-7ad4-40e9-977e-ee6092601380 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=sAkJCmM7lWa6kwD9pDikAutUQqdQmG+ZrpD8FAF/JRWu2dsv; cSyncDp7v2=1664849254; cSyncDp14v3=1664849254; cSyncDp17=1664849254; cSyncDp32=1664849254; cSyncDp45v3=1664849254; cSyncDp53=1664849254; cSyncDp54v2=1664849254; cSyncDp62=1664849254; cSyncDp67v2=1664849254; cSyncDp68=1664849254; cSyncDp71=1664849254; cSyncDp77=1664849254; cSyncDp84=1664849254; cSyncDp85=1664849254; cSyncDp95v3=1664849254; cSyncDp101=1664849254; cSyncDp104v2=1664849254; cSyncDp107=1664849254; cSyncDp110=1664849254; cSyncDp111v2=1664849254; cSyncDp112v2=1664849254; cSyncDp125v2=1664849254; cSyncDp126=1664849254; cSyncDp127=1664849254; cSyncDp129=1664849254; cSyncDp136v2=1664849254; cSyncDp138=1664849254; cSyncDp144=1664849254; cSyncDp146=1664849254; cSyncDp148=1664849254; cSyncDp149=1664849254; cSyncDp151=1664849254; cSyncDp178=1664849254; cSyncDp179=1664849254; cSyncDp186=1664849254; cSyncDp221=1664849254
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         46.4.114.109
HTTP/2 200 OK
content-type: image/gif
                                        
server: openresty
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /sape/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyIsImh0dHBzOi8vd3d3LmFjaW50Lm5ldC8iXX19 HTTP/1.1 
Host: c26fbfad-43e2-437c-8a16-880899f16933.sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: session_tptc=1664849255373; user_id=c26fbfad-43e2-437c-8a16-880899f16933
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         144.76.138.28
HTTP/2 302 Found
content-type: image/png
                                        
server: nginx
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 0
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: user_id=c26fbfad-43e2-437c-8a16-880899f16933;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000 user_id-legacy=c26fbfad-43e2-437c-8a16-880899f16933;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
location: https://www.acint.net/match?dp=71&euid=c26fbfad-43e2-437c-8a16-880899f16933
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2

                                        
                                            GET /match?dp=71&euid=c26fbfad-43e2-437c-8a16-880899f16933 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=sAkJCmM7lWa6kwD9pDikAutUQqdQmG+ZrpD8FAF/JRWu2dsv; cSyncDp7v2=1664849254; cSyncDp14v3=1664849254; cSyncDp17=1664849254; cSyncDp32=1664849254; cSyncDp45v3=1664849254; cSyncDp53=1664849254; cSyncDp54v2=1664849254; cSyncDp62=1664849254; cSyncDp67v2=1664849254; cSyncDp68=1664849254; cSyncDp71=1664849254; cSyncDp77=1664849254; cSyncDp84=1664849254; cSyncDp85=1664849254; cSyncDp95v3=1664849254; cSyncDp101=1664849254; cSyncDp104v2=1664849254; cSyncDp107=1664849254; cSyncDp110=1664849254; cSyncDp111v2=1664849254; cSyncDp112v2=1664849254; cSyncDp125v2=1664849254; cSyncDp126=1664849254; cSyncDp127=1664849254; cSyncDp129=1664849254; cSyncDp136v2=1664849254; cSyncDp138=1664849254; cSyncDp144=1664849254; cSyncDp146=1664849254; cSyncDp148=1664849254; cSyncDp149=1664849254; cSyncDp151=1664849254; cSyncDp178=1664849254; cSyncDp179=1664849254; cSyncDp186=1664849254; cSyncDp221=1664849254
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         46.4.114.109
HTTP/2 200 OK
content-type: image/gif
                                        
server: openresty
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /pixel?google_nid=agentstvo_sape_limited&google_hm=CgkJsGaVO2P9AJO6AqQ4pA HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.211.2
HTTP/2 200 OK
content-type: image/png
                                        
date: Tue, 04 Oct 2022 02:07:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: HTTP server (unknown)
content-length: 170
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Size:   170
Md5:    e7673c60af825466f83d46da72ca1635
Sha1:   fc0fcbee0835709ba2d28798a612bfd687903fb5
Sha256: 0b8a20373c6dd04e091902226d922b3688143a8938afb9d283d889de7b55ceb5
                                        
                                            POST /gsalphasha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         151.101.86.133
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Connection: keep-alive
Content-Length: 1423
Server: nginx
Expires: Sat, 08 Oct 2022 00:17:12 GMT
ETag: "17e0c88af042ec18a97ec4c0db5928d0e695da12"
Last-Modified: Tue, 04 Oct 2022 00:17:13 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 02:07:35 GMT
Age: 3786
X-Served-By: cache-qpg1231-QPG, cache-bma1625-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 3, 4
X-Timer: S1664849256.872513,VS0,VE0


--- Additional Info ---
Magic:  data
Size:   1423
Md5:    bbf58fba23d580e4728ad8063ee00304
Sha1:   17e0c88af042ec18a97ec4c0db5928d0e695da12
Sha256: b58fafa5260aed3707c2a27ff95b300be11586aabe7f4fc1f38ea340ff3d8424
                                        
                                            POST /gsgccr3dvtlsca2020 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         151.101.86.133
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Connection: keep-alive
Content-Length: 1414
Server: nginx
Expires: Sat, 08 Oct 2022 00:17:37 GMT
ETag: "2262ea3f5ab638da133732f7f87e0d185e071b06"
Last-Modified: Tue, 04 Oct 2022 00:17:38 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 02:07:35 GMT
Age: 2989
X-Served-By: cache-qpg1272-QPG, cache-bma1635-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 39
X-Timer: S1664849256.894402,VS0,VE0


--- Additional Info ---
Magic:  data
Size:   1414
Md5:    c0e082b3cb2dd85f39b48b86858ff9dd
Sha1:   2262ea3f5ab638da133732f7f87e0d185e071b06
Sha256: 5787dcabf8aa20931939e16e4c0131e0a8e84ca1dc44bc06036664ee3f733e64
                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         151.101.86.133
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Connection: keep-alive
Content-Length: 940
Server: nginx
Expires: Sat, 08 Oct 2022 01:51:31 GMT
ETag: "085aec5703c840b596fc0e76d1e432a3066d61ef"
Last-Modified: Tue, 04 Oct 2022 01:51:32 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 02:07:35 GMT
Age: 964
X-Served-By: cache-qpg1260-QPG, cache-bma1635-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 48
X-Timer: S1664849256.908978,VS0,VE0

                                        
                                            GET /user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D HTTP/1.1 
Host: sync.adkernel.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         77.245.57.72
HTTP/1.1 200 OK
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:35 GMT
Content-Length: 0
Connection: close

                                        
                                            POST /gsgccr3dvtlsca2020 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         151.101.86.133
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Connection: keep-alive
Content-Length: 1414
Server: nginx
Expires: Sat, 08 Oct 2022 00:17:37 GMT
ETag: "2262ea3f5ab638da133732f7f87e0d185e071b06"
Last-Modified: Tue, 04 Oct 2022 00:17:38 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 02:07:35 GMT
Age: 2989
X-Served-By: cache-qpg1272-QPG, cache-bma1658-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 38
X-Timer: S1664849256.920570,VS0,VE0


--- Additional Info ---
Magic:  data
Size:   1414
Md5:    c0e082b3cb2dd85f39b48b86858ff9dd
Sha1:   2262ea3f5ab638da133732f7f87e0d185e071b06
Sha256: 5787dcabf8aa20931939e16e4c0131e0a8e84ca1dc44bc06036664ee3f733e64
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 02:07:35 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 01 Oct 2022 02:18:45 GMT
Expires: Sat, 08 Oct 2022 02:18:44 GMT
Etag: "53a0563b4540dd0fb1cced84cb71bc683c24f42e"
Cache-Control: max-age=345668,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754a5d6949620b39-OSL

                                        
                                            GET /cookie_matching_ssp/Sape-dsp/0A0909B066953B63FD0093BA02A438A4 HTTP/1.1 
Host: fcgi4.gnezdo.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         93.95.102.105
HTTP/2 204 No Content
                                        
server: nginx
date: Tue, 04 Oct 2022 02:07:35 GMT
set-cookie: uid=XV9maWM7lWc6ZoY2zBO+Ag==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=gnezdo.ru; path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
X-Firefox-Spdy: h2

                                        
                                            GET /cgi-bin/sync.cgi?dsp_id=153&external_id=0A0909B066953B63FD0093BA02A438A4 HTTP/1.1 
Host: ssp.adriver.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         195.209.111.4
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /usersync?dspcsid=8&redirect=1 HTTP/1.1 
Host: ssp.bidvol.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         65.109.23.99
HTTP/2 302 Found
                                        
server: nginx/1.22.0
date: Tue, 04 Oct 2022 02:07:35 GMT
x-request-id: cb2b3b34-73cb-4453-bf9d-131a2e4a47ba
set-cookie: bvuid=x5ogwh4fvf; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None bvuid2=x5ogwh4fvf; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT
vary: Origin
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
surrogate-control: no-store
location: https://www.acint.net/match?dp=129&euid=x5ogwh4fvf
X-Firefox-Spdy: h2

                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         151.101.86.133
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Connection: keep-alive
Content-Length: 1432
Server: nginx
Expires: Fri, 07 Oct 2022 23:59:11 GMT
ETag: "87c69e5c623e7770907316216f2ae28eda5ecb16"
Last-Modified: Mon, 03 Oct 2022 23:59:12 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 04 Oct 2022 02:07:35 GMT
Age: 5098
X-Served-By: cache-qpg1256-QPG, cache-bma1635-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 15
X-Timer: S1664849256.957612,VS0,VE0


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    4435cbe2cb6e90229dcf5aa1c4fa41f7
Sha1:   87c69e5c623e7770907316216f2ae28eda5ecb16
Sha256: 2aa4d345a0ff68a49fa2f61d03b708f246570ec46ce3631283bdd39c797dcf41
                                        
                                            GET /0.gif?pid=9401454&id=0A0909B066953B63FD0093BA02A438A4 HTTP/1.1 
Host: x01.aidata.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         89.108.120.76
HTTP/2 302 Found
                                        
server: nginx
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 0
location: https://x01.aidata.io/0.gif?pid=9401454&id=0A0909B066953B63FD0093BA02A438A4&bounce=1
expires: Tue, 04 Oct 2022 02:07:34 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Tue, 04 Oct 2022 02:07:34 GMT
set-cookie: __upin=gGnibq9D8yuKXlislnuAGg;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure __upints=1664849255;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2

                                        
                                            GET /merge_gpsid/?sid=50&id=0A0909B066953B63FD0093BA02A438A4 HTTP/1.1 
Host: adlmerge.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         95.211.66.35
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx/1.16.0
date: Tue, 04 Oct 2022 02:07:35 GMT
iseu: eu
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "52FA92C0E7F65AE7FF2DCE9493DBD7EE290A2E9CE3116D8B30D721EC87B6DD79"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4488
Expires: Tue, 04 Oct 2022 03:22:23 GMT
Date: Tue, 04 Oct 2022 02:07:35 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 02:07:35 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 04:18:19 GMT
Expires: Mon, 10 Oct 2022 04:18:18 GMT
Etag: "64371dce45dc5640a50e0fe5ad8ab51f53e4a288"
Cache-Control: max-age=603090,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1221
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 754a5d69eb090afa-OSL

                                        
                                            POST / HTTP/1.1 
Host: status.thawte.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6462
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 02:07:35 GMT
Last-Modified: Tue, 04 Oct 2022 00:19:53 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         192.124.249.36
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Sucuri/Cloudproxy
Date: Tue, 04 Oct 2022 02:07:35 GMT
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 03 Oct 2022 23:44:07 GMT
Expires: Tue, 04 Oct 2022 23:44:07 GMT
ETag: "6d5b6a9c97c3dc8fa59e45cf36d26ecfc2ec0573"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1778
Md5:    22d899b7c19d90abd68c9f186aa09906
Sha1:   6d5b6a9c97c3dc8fa59e45cf36d26ecfc2ec0573
Sha256: 677022e21c11399c8e8da8bb8d121c1d4b7d3402853b418b71ec35133e7e27de
                                        
                                            GET /0.gif?pid=9401454&id=0A0909B066953B63FD0093BA02A438A4&bounce=1 HTTP/1.1 
Host: x01.aidata.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         89.108.120.76
HTTP/2 204 No Content
                                        
server: nginx
date: Tue, 04 Oct 2022 02:07:35 GMT
expires: Tue, 04 Oct 2022 02:07:34 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Tue, 04 Oct 2022 02:07:34 GMT
set-cookie: __upin=PGGMmqdOBeyuqoaSHejoSA;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure __upints=1664849256;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2

                                        
                                            GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-5540456410 HTTP/1.1 
Host: ad.adriver.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         195.209.108.37
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Date: Tue, 04 Oct 2022 02:07:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-control: no-cache, no-cache=Set-Cookie, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref="//adriver.ru/w3c/p3p.xml", CP="NON DSP COR CURa ADMa DEVa OUR BUS UNI COM NAV INT STA"
Set-Cookie: cid=0; expires=Thu, 03 Oct 2024 02:07:36 GMT; path=/; domain=.adriver.ru; uid=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain=.adriver.ru
Location: https://www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   40
Md5:    251630b588179b239e8fab1ac9ef6d3a
Sha1:   91b91a97bc481dd2bbd5e0f3fea6ba1c4e843882
Sha256: c95661e0ef6975b1df5361695a439f71a021d72c345023c3e668e84f35b3c38b
                                        
                                            GET /cm.gif?p=48&id=0A0909B066953B63FD0093BA02A438A4 HTTP/1.1 
Host: ad.mail.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         95.163.41.56
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 43
set-cookie: VID=1TuGl72FH7YC002Dib17y72C:::0-0-0-855ee27:CAASEFX6CpQuaCiO_VIXD9lEnRkaYGPbMK16lsNjIh2ZqflQQhDoGcoe5ahFaZpLwbuPe-R8MtynQQIc3wjIpVtjfoMN67bpUc2TlGrgGkcDKLdmzFzbReaUg11SGPJFKCe5BLePiLWI1CuLS0_lyn4VVIuwTg; path=/; expires=Thu, 05-Oct-23 02:07:35 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
expires: Tue, 04 Oct 2022 08:07:35 GMT
cache-control: max-age=21600
last-modified: Tue, 04 Oct 2022 02:07:35 GMT
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: require-corp
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect HTTP/1.1 
Host: redirect.frontend.weborama.fr
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         35.190.24.218
HTTP/2 302 Found
                                        
server: Weborama Collect Frontend
date: Tue, 04 Oct 2022 02:07:35 GMT
content-length: 0
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=2629192190
access-control-allow-origin: *
p3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM"
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: Tue, 03 Jul 2001 06:00:00 GMT
last-modified: Tue, 04 Oct 2022 02:07:36 GMT
set-cookie: AFFICHE_W=wwhT07j3Ih-D55; expires=Wed, 01 Nov 2023 02:07:36 GMT; domain=.weborama.fr; path=/; secure; SameSite=None
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            GET /sync HTTP/1.1 
Host: sape-sync.rutarget.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         87.242.93.112
HTTP/1.1 302 Moved Temporarily
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:36 GMT
Content-Length: 0
Connection: close
Location: https://www.acint.net/match?dp=104&euid=OhSlwSDegFXb
P3P: CP="This is not a P3P policy. Please visit http://rutarget.ru/p3p/ to get more information."
Set-Cookie: userId=OhSlwSDegFXb; Path=/; Domain=.rutarget.ru; Expires=Sun, 02 Apr 2023 02:07:36 GMT; SameSite=None; Secure

                                        
                                            GET /adcm.js HTTP/1.1 
Host: tag.digitaltarget.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.15.175.159
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:36 GMT
Content-Length: 3051
Last-Modified: Tue, 04 Oct 2022 02:04:30 GMT
Connection: keep-alive
ETag: "633b94ae-beb"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (3051), with no line terminators
Size:   3051
Md5:    e7097284185069f52fc736bcd50cda13
Sha1:   1cdfdf2d869841202079ddf91e0a00a8610812e6
Sha256: 40f2a96f78f4c8484e9da6e172f5ddd3e4d7786ca29e04b96e1067a365190e80
                                        
                                            GET /p?ssp=sape&id=0A0909B066953B63FD0093BA02A438A4 HTTP/1.1 
Host: sm.rtb.mts.ru
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         217.66.147.35
HTTP/1.1 301 Moved Permanently
                                        
Server: nginx
Date: Tue, 04 Oct 2022 02:07:36 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin
Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
Vary: Origin
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://sm.rtb.mts.ru/match/second?ssp=30&exu=0A0909B066953B63FD0093BA02A438A4
Set-Cookie: dspid=af16b2a8-bc08-42da-bad8-33dca309ef7b; expires=Mon, 25 Sep 2023 02:07:36 GMT; domain=.mts.ru; path=/; secure; SameSite=None

                                        
                                            GET /p/cm/sape?u=0A0909B066953B63FD0093BA02A438A4 HTTP/1.1 
Host: px.adhigh.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         193.232.150.45
HTTP/2 302 Found
                                        
server: nginx
date: Tue, 04 Oct 2022 02:07:36 GMT
content-length: 0
x-backend-id: f18-ru
access-control-allow-origin: *
access-control-allow-credentials: true
set-cookie: gi_u=P1PTPaIOQPi.AikABlGDoL-eXg;Path=/;Domain=.adhigh.net;Expires=Wed, 04-Oct-2023 02:07:36 GMT;Secure;SameSite=None
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
location: https://px.adhigh.net/p/cm/sape?u=0A0909B066953B63FD0093BA02A438A4&bounced=1
X-Firefox-Spdy: h2

                                        
                                            GET /rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D HTTP/1.1 
Host: www.acint.net