Report - lordserialx.xyz/146-kasl-81.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html

Report Overview

Visited public
2023-12-01 20:55:14
Tags
URL
lordserialx.xyz/146-kasl-81.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html
Finishing URL
hd.3lordserial.xyz/146-kasl-sv-13.html
IP / ASN
188.114.96.1
#13335 CLOUDFLARENET
Title
Касл (сериал, 1,2,3,4,5,6,7,8 сезон) смотреть онлайн в HD качестве бесплатно

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
yandex.ru	671	1997-09-23	2012-05-21 23:15:36	2023-11-30 20:10:40	851 B	455 kB	77.88.55.88
yastatic.net	72282	2013-11-28	2014-03-11 08:15:28	2023-12-01 05:14:13	4.5 kB	240 kB	178.154.131.217
ssp.bestssp.com	90974	2016-05-05	2017-06-10 10:55:20	2023-12-01 21:47:55	489 B	355 B	83.222.96.170
cdn5.playmatic.video	unknown	2023-04-06	2023-06-09 22:21:49	2023-11-28 21:54:27	441 B	41 kB	5.101.37.37
kimberlite.io	166512	2017-03-16	2017-09-14 07:18:59	2023-11-30 13:22:39	2.2 kB	2.1 kB	217.199.220.44
s.ccsyncuuid.net	unknown	2023-02-28	2023-06-17 23:18:29	2023-11-29 06:06:30	474 B	311 B	78.40.218.117
miradres.com	unknown	2022-09-10	2022-09-12 21:08:08	2023-11-20 07:47:57	527 B	716 B	5.61.53.63
match.new-programmatic.com	33613	2020-02-18	2020-02-18 21:50:06	2023-11-29 15:19:21	984 B	478 B	217.65.2.150
img.zcvh.net	unknown	2019-02-05	2022-08-26 01:21:05	2023-11-27 13:01:05	445 B	213 kB	144.76.108.50
s.uuidksinc.net	3423	2015-05-05	2015-07-20 14:00:35	2023-11-30 18:09:13	1.0 kB	687 B	31.220.27.155
pbs.alfasense.com	153997	2019-01-29	2019-04-04 17:19:31	2023-11-30 11:03:34	552 B	741 B	23.111.119.60
api.strvid.ws	unknown	2021-09-17	2023-03-02 02:22:45	2023-10-14 02:58:05	1.4 kB	41 kB	146.59.111.187
logger.moviead55.ru	81149	2017-02-15	2020-11-24 11:53:30	2023-11-29 06:27:22	2.7 kB	10 kB	193.200.65.146
t8.zcvh.net	286181	2019-02-05	2021-11-03 12:36:42	2023-11-16 18:22:58	1.1 kB	360 B	46.4.80.144
sync.dmp.otm-r.com	19534	2014-01-16	2017-02-03 08:19:51	2023-11-30 08:42:43	1.9 kB	536 B	148.251.9.22
a.utraff.com	39874	2016-09-27	2019-02-27 11:01:37	2023-12-01 15:14:37	976 B	2.5 kB	172.64.99.14
sync.upravel.com	28097	2017-03-25	2017-05-29 11:13:46	2023-12-01 17:31:01	1.6 kB	2.5 kB	136.243.48.22
nr.bidderstack.com	352019	2017-04-25	2019-02-11 15:43:50	2023-11-29 06:06:30	951 B	873 B	142.132.211.137
cs.agency2.ru	unknown	2008-10-06	2022-04-29 16:24:02	2023-12-01 15:14:37	1.5 kB	1.9 kB	23.111.107.44
videotoday.site	unknown	2021-10-08	2021-10-08 08:44:40	2023-11-30 11:03:36	1.2 kB	34 kB	172.67.218.218
adx.com.ru	43296	2017-05-19	2017-06-05 16:30:42	2023-11-29 07:28:39	462 B	324 B	83.222.116.186
static.filmskino.site	259134	2021-05-11	2021-07-15 12:03:41	2023-11-19 23:49:53	1.9 kB	804 kB	193.200.65.230
a.videohead.tech	unknown	2023-05-30	2023-06-07 22:20:13	2023-11-28 13:58:48	944 B	2.1 kB	188.114.97.1
acint.net	22962	2014-02-06	2014-02-14 22:23:16	2023-12-01 07:59:53	4.5 kB	1.3 kB	193.3.184.135
cdn.alfasense.net	159398	2019-06-04	2019-06-30 01:29:43	2023-11-26 13:52:32	1.3 kB	452 kB	136.144.31.36
ssp.otm-r.com	61076	2014-01-16	2018-12-28 10:44:39	2023-12-01 16:44:20	734 B	457 B	116.202.236.228
ads.alfasense.net	unknown	2019-06-04	2022-05-31 00:37:10	2023-11-27 10:49:48	2.4 kB	36 kB	136.144.31.29
img.imgilall.me	unknown	2020-11-16	2021-07-22 03:24:15	2023-11-19 19:35:23	487 B	28 kB	104.21.41.144
pix.bumlam.com	92002	2015-08-10	2022-03-29 11:19:43	2023-11-29 20:05:08	1.5 kB	2.1 kB	31.172.81.158
sync.gonet-ads.com	unknown	2022-04-05	2023-02-03 12:32:31	2023-11-30 19:59:40	971 B	686 B	188.42.105.236
api.stiven-king.com	181039	2019-09-28	2020-06-14 14:52:00	2023-11-19 23:48:44	529 B	666 B	5.183.209.191
e13833ce-908b-11ee-86e0-002590c0647c.n2.sync.bumlam.com	unknown	unknown	No data	No data	539 B	247 B	80.87.198.24
code.moviead55.ru	83359	2017-02-15	2017-02-18 05:38:39	2023-11-26 08:51:39	12 kB	170 kB	193.200.65.150
exchange.buzzoola.com	18389	2010-08-11	2014-10-17 17:20:27	2023-11-30 18:39:30	2.9 kB	2.4 kB	138.201.34.238
sync.adspend.space	unknown	2022-02-11	2022-10-20 08:12:42	2023-11-30 05:41:09	1.6 kB	1.4 kB	5.189.234.229
s.alfasrv.com	unknown	2017-03-23	2022-10-14 18:14:26	2023-12-01 08:54:53	949 B	1.1 kB	130.193.42.23
cdn.jsdelivr.net	439	2012-05-16	2012-09-30 02:15:09	2023-12-01 05:10:14	1.9 kB	151 kB	151.101.193.229
user91471.clients-cdnnow.ru	148184	2015-10-14	2020-01-13 12:19:03	2023-11-30 13:22:39	1.3 kB	101 kB	185.40.155.13
otclick-adv.ru	71115	2011-01-17	2015-09-17 13:20:30	2023-12-01 12:25:25	536 B	713 B	139.45.228.135
ssp.afp.ai	141816	2020-04-23	2021-02-04 11:14:28	2023-12-01 00:27:13	1.1 kB	1.2 kB	45.139.25.121
sync.dsp.solta.io	unknown	2022-07-19	2022-09-21 18:47:56	2023-11-28 07:34:40	904 B	496 B	185.40.31.213
hd.3lordserial.xyz	unknown	unknown	No data	No data	15 kB	624 kB	104.21.60.176
vast.playmatic.video	unknown	2023-04-06	2023-04-17 23:34:08	2023-11-20 16:32:41	672 B	567 B	94.103.11.164
yhb.p.otm-r.com	43560	2014-01-16	2020-08-13 03:39:20	2023-11-30 16:33:31	488 B	387 B	194.55.244.186
ads.digitalcaramel.com	108138	2017-09-17	2019-02-17 18:30:06	2023-11-27 10:49:44	451 B	3.8 kB	88.99.234.26
www.acint.net	29072	2014-02-06	2014-02-14 22:23:16	2023-11-30 17:54:33	18 kB	16 kB	193.3.184.135
hye1eaipby4w.takedwn.ws	unknown	2021-09-16	2022-06-10 18:06:17	2023-12-01 10:15:23	494 B	42 kB	50.7.233.42
const.uno	unknown	2022-06-09	2022-06-20 12:12:07	2023-11-20 07:47:59	468 B	255 B	95.163.84.7
ssp.hybrid.ai	60903	2017-12-19	2018-04-30 00:13:49	2023-11-27 20:11:18	1.1 kB	696 B	37.230.131.17
match.qtarget.tech	unknown	2022-12-26	2023-01-28 18:26:52	2023-11-28 11:48:00	491 B	213 B	95.163.92.180
sync.programmatica.com	unknown	2016-10-12	2022-12-17 02:18:07	2023-12-01 15:14:37	938 B	496 B	167.235.117.42
a.adsource.tech	unknown	2023-06-23	2023-06-27 19:57:47	2023-11-27 20:11:18	484 B	951 B	188.114.96.1
sync.bumlam.com	3243	2015-08-10	2015-08-10 23:04:25	2023-11-27 18:15:17	2.1 kB	2.5 kB	31.172.81.159
ads.adlook.me	43352	2016-07-15	2018-11-28 13:50:19	2023-12-01 05:14:14	539 B	189 B	5.101.76.186
dm-eu.hybrid.ai	28847	2017-12-19	2021-01-25 12:48:59	2023-11-28 08:14:51	1.0 kB	1.1 kB	37.230.131.16
v.alfasrv.com	179175	2017-03-23	2017-10-23 20:42:41	2023-11-26 13:52:32	933 B	784 B	84.201.179.252
lordserialx.xyz	unknown	2022-09-06	2022-09-06 08:43:33	2023-12-01 00:17:06	3.7 kB	62 kB	188.114.96.1
static.moviead55.ru	unknown	2017-02-15	2017-03-10 18:37:59	2023-11-28 14:29:15	442 B	171 kB	172.67.159.129
cs.alfasense.com	unknown	2019-01-29	2022-04-13 15:39:50	2023-11-30 13:35:38	5.6 kB	12 kB	23.111.100.20
match.ohmy.bid	unknown	2022-06-09	2023-05-23 11:17:10	2023-12-01 12:26:48	1.1 kB	685 B	167.235.9.235
ssp-rtb.sape.ru	31166	2006-06-19	2016-02-02 18:01:03	2023-11-30 08:16:18	2.3 kB	2.4 kB	193.3.184.218
ssp.bidvol.com	31817	2019-09-24	2020-02-22 13:37:29	2023-12-01 08:45:07	1.5 kB	2.1 kB	65.109.65.188
vak345.com	115474	2019-07-11	2019-07-12 07:59:47	2023-11-26 09:35:30	917 B	69 kB	172.67.204.19
sync.opendsp.ru	unknown	2022-08-24	2022-09-01 13:01:38	2023-11-19 23:28:47	453 B	250 B	82.148.20.186
s.myangular.life	unknown	2020-09-14	2023-03-21 18:21:49	2023-12-01 16:44:16	6.0 kB	2.2 kB	116.202.233.126

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-01 20:54:58	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-12-01 20:54:58	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-12-01 20:54:58	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-12-01 20:54:58	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-12-01 20:54:58	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-12-01 20:54:58	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-12-01 20:54:59	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD
2023-12-01 20:55:00	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .life TLD

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (77)

	URL	From	Size	First Seen	Last Seen
	vak345.com/s.js?v=647a534f9f5fb9ced25ee7db57ef9c72	ScriptElement	3.7 kB	2024-08-20	2024-08-20
Pretty URL vak345.com/s.js?v=647a534f9f5fb9ced25ee7db57ef9c72 IP 172.67.204.19 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-20 17:08 Last Seen2024-08-20 17:08 Times Seen1 Hash 983b0dd20851aca1f318824ac20b8485 41446e9754bebdc2c504d45c38094578251470b5 b90196a13cb18b1bd826f2467e53b263bd1fbe8de665b365a4287a2753af96f2 Loading...

	api.strvid.ws/js/listen-player.js	ScriptElement	2.1 kB	2023-03-07	2024-10-26
Pretty URL api.strvid.ws/js/listen-player.js IP 146.59.111.187 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 18:12 Last Seen2024-10-26 15:27 Times Seen333 Hash 0c0c3ebb01863cdbdf9e28b04ea6dbf1 ed4ec6ff3f636ec975ffef955f9aca9dd748bb1d 897015208642232bd542da553dadd5104e30f4a106a3e7bfb522d85569575155 Loading...

	hd.3lordserial.xyz/146-kasl-sv-13.html	ScriptElement	192 B	2023-11-26	2024-08-20
Pretty URL hd.3lordserial.xyz/146-kasl-sv-13.html IP 104.21.60.176 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-26 01:17 Last Seen2024-08-20 17:55 Times Seen9 Hash cf4da772ff6426a389a8fd1d0f7e67ae 97b0e817b5996aefdde48c5f651d359d6fad8ef2 a824f61b3960abf7ec4bdb4a46a0fbc15a7cef0fac1213be2984f1c2548bbafc Loading...

	yastatic.net/safeframe-bundles/0.83/host.js	ScriptElement	34 kB	2023-03-07	2025-05-11
Pretty URL yastatic.net/safeframe-bundles/0.83/host.js IP 178.154.131.217 ASN #13238 YANDEX LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-11 18:10 Times Seen7083 Hash 2435549eac66915d7464ee7b9efce038 e390598fb192583622a8ea079d5c96dffdb34fb5 34806ef573086241dd1a596a860b0295b51c24f1c37eab36eb9d0665683abb55 Loading...

	yastatic.net/partner-code-bundles/920174/dfa824eba677c14973d6.js	ScriptElement	120 kB	2023-12-01	2023-12-04
Pretty URL yastatic.net/partner-code-bundles/920174/dfa824eba677c14973d6.js IP 178.154.131.217 ASN #13238 YANDEX LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-01 08:55 Last Seen2023-12-04 08:04 Times Seen127 Hash 0115b6aefb895f1182ce8df245cba2c4 03a88ad9027b95fde2ceef83527e96664bd361e9 196b63b4562684970d0086e596b078a626fc7a04c588bfeffdd2e6ee441054b7 Loading...

	cs.alfasense.com/pixeljs	ScriptElement	5.5 kB	2023-12-01	2023-12-01
Pretty URL cs.alfasense.com/pixeljs IP 23.111.100.20 ASN #7979 SERVERS-COM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-01 21:55 Last Seen2023-12-01 21:55 Times Seen1 Hash 9b2e8925020b6030ca86b1d6cfc1acc5 9c7c0bbc4c4b22541c6d9ba57ba5c352d2ea6b7b efed13ab86b3d36fb4ce08c5a11c0c26fedcbb502e742ab013e9c04111512e0e Loading...

	hd.3lordserial.xyz/146-kasl-sv-13.html	ScriptElement	46 B	2023-03-08	2025-05-11
Pretty URL hd.3lordserial.xyz/146-kasl-sv-13.html IP 104.21.60.176 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 08:12 Last Seen2025-05-11 01:14 Times Seen653 Hash 0bef5d85ac5e1807113bdd4bc12a0b3f 1f6977f25a4ae34145ba1cff0ded6a56e752c51a b6a0b8a1a3a65994a30934c12ef315a9ef7ba9c616a6fc26549519bf7a3fed7e Loading...

	hd.3lordserial.xyz/146-kasl-sv-13.html	ScriptElement	1.7 kB	2023-09-23	2024-08-21
Pretty URL hd.3lordserial.xyz/146-kasl-sv-13.html IP 104.21.60.176 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-09-23 01:15 Last Seen2024-08-21 06:01 Times Seen32 Hash e15c1cc78bdcfa6760721efb87819bc3 4c28903f5402b56a727b8763563b0a253f9f0886 a60f02a916cbf2398b882cecfacf840eaa6158e76270a7a8cc62b18c5fe0c458 Loading...

	unknown	Function	37 B	2023-04-11	2025-05-11
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:31 Last Seen2025-05-11 17:32 Times Seen263704 Hash 29d0c84b9d1d8da446a6062c6a840ad9 6d6b3a6065667c7c50d92f3889c85ed65a9ad784 3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1 Loading...

	hd.3lordserial.xyz/templates/lordfun/js/libs.js?v=1.3	ScriptElement	12 kB	2023-10-28	2024-08-20
Pretty URL hd.3lordserial.xyz/templates/lordfun/js/libs.js?v=1.3 IP 104.21.60.176 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-28 19:25 Last Seen2024-08-20 22:02 Times Seen19 Hash e07b058db46a9fa727772a8b4ff4d323 4029197679d1b7f874ea2c41554d6d66c7d7d824 8ce153b05bd479a236abc466a1a5d23e0b43a4a644a908c9022141f4929bd522 Loading...

	yastatic.net/partner-code-bundles/920174/ca82583607ca89ec068d.js	ScriptElement	9.2 kB	2023-12-01	2023-12-04
Pretty URL yastatic.net/partner-code-bundles/920174/ca82583607ca89ec068d.js IP 178.154.131.217 ASN #13238 YANDEX LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-01 08:55 Last Seen2023-12-04 07:51 Times Seen59 Hash 33d0c2943e43a53c0362eab1f1c43c49 e864129df73cfe9b6d749c491280ec7e5cf64b4f e75a9a840b03704c942ee6bcb80f99bdd2290bb2dd8d6ff63d985d560ddeb480 Loading...

	hd.3lordserial.xyz/146-kasl-sv-13.html	ScriptElement	318 B	2023-05-20	2024-08-21
Pretty URL hd.3lordserial.xyz/146-kasl-sv-13.html IP 104.21.60.176 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-20 18:40 Last Seen2024-08-21 08:43 Times Seen26 Hash 7e0a690610fd011d32ad521881349320 71591466bad7e1cd278eb5470ce8b63378909e9c 9d5057a033bd0a844eab8cd1c99c8edba3e3d22f9d34ce55d8bcb73354032dc9 Loading...

	hd.3lordserial.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	ScriptElement	1.2 kB	2023-03-07	2025-05-11
Pretty URL hd.3lordserial.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP 104.21.60.176 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-11 17:51 Times Seen68492 Hash 9e8f56e8e1806253ba01a95cfc3d392c a8af90d7482e1e99d03de6bf88fed2315c5dd728 2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8 Loading...

	unknown	ScriptElement	1.2 kB	2023-12-01	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-01 18:33 Last Seen2024-08-20 17:09 Times Seen15 Hash 5682b977883ed6b03d3c1987559f245b ca852ff471a2f007507ed70b38aecce094a491a7 3bd058ee79f5787d5acc1fcf36137217bc4f8a0dfe5436e22814d52fa51fdf92 Loading...

	yandex.ru/ads/system/context.js	ScriptElement	338 kB	2023-12-01	2023-12-01
Pretty URL yandex.ru/ads/system/context.js IP 77.88.55.88 ASN #13238 YANDEX LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-01 21:55 Last Seen2023-12-01 21:55 Times Seen1 Hash 82ac718a22a61160acc5991c4e0124d0 67c4ab56036cac8a9e4d860c23490f92735b3c03 10e65c872f3b3676db9fea4c93676792a17b5a574700fe74a517ddd99d4eea67 Loading...

	yastatic.net/partner-code-bundles/920174/5a7a526829132d8f111a.js	ScriptElement	14 kB	2023-12-01	2023-12-04
Pretty URL yastatic.net/partner-code-bundles/920174/5a7a526829132d8f111a.js IP 178.154.131.217 ASN #13238 YANDEX LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-01 08:55 Last Seen2023-12-04 08:04 Times Seen127 Hash e924479e4100d23e9ad37ae6d5213e90 3c27d4a750865971fc22a9035583cb54d21f0862 0fcd6527670f13a714d7afd7fed44abe22bdd841ecf4671977d1af457e09ab92 Loading...

	unknown	ScriptElement	2.3 kB	2023-11-30	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-30 11:04 Last Seen2024-08-20 17:21 Times Seen4 Hash 88b9347af391f22a41463878235e4fbf 87fbce4b6febaa24afa3dfb675d3fe6f234c6935 8c3499a72fbbb28b935630fe0dafbd2708743c8d0d33720a0f371440c602eae1 Loading...

	unknown	ScriptElement	656 B	2023-12-01	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-01 18:33 Last Seen2024-08-20 17:09 Times Seen23 Hash d3a3cdd1b3254d54d401e2338e5cb126 312650c61c67b64c6d69d3d82ecd93e60d6bf9b0 cae5c3ba50e9e73e62d4f09b8043a95af2cf32d90c75ef2e581eee821c7812b0 Loading...

	hd.3lordserial.xyz/engine/classes/min/index.php?f=engine/classes/js/jqueryui.js,engine/classes/js/dle_js.js,engine/classes/js/bbcodes.js&v=cbebf	ScriptElement	148 kB	2023-11-26	2023-12-04
Pretty URL hd.3lordserial.xyz/engine/classes/min/index.php?f=engine/classes/js/jqueryui.js,engine/classes/js/dle_js.js,engine/classes/js/bbcodes.js&v=cbebf IP 104.21.60.176 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-26 01:17 Last Seen2023-12-04 05:42 Times Seen9 Hash dfe48653114336364782f5ba29ac32c4 f2ba72145a4db4c00500e638f62be786dfd568e3 8f5510595ba5624489cfccaf984e38a77d7622c2c119b58fff3ae1c8e36456d6 Loading...

	cdn.jsdelivr.net/npm/venom-player@0.2.86/dist/dash.js	ScriptElement	113 B	2023-03-07	2025-05-09
Pretty URL cdn.jsdelivr.net/npm/venom-player@0.2.86/dist/dash.js IP 151.101.193.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:18 Last Seen2025-05-09 19:07 Times Seen322 Hash 84eee3ca3b339eebee1fa872f1ece64a ac28843b7fcdc5023f65c747e51f009562b1c478 94a1443f69cfc9942e6a9d2ed2fc644702e271683b2e703f9adf65113a430ed5 Loading...

	yastatic.net/partner-code-bundles/920174/8011efa9db4d1ab95316.js	ScriptElement	613 kB	2023-12-01	2023-12-04
Pretty URL yastatic.net/partner-code-bundles/920174/8011efa9db4d1ab95316.js IP 178.154.131.217 ASN #13238 YANDEX LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-01 08:55 Last Seen2023-12-04 08:04 Times Seen127 Hash 4f422f8bd2fc5044bebf9d30abc60126 45a06e666f8a5babfd6074acede5fd3218b11f40 166f03d2c873c38d857427c2bd2492844b8c906734dc4629eb1443c4ffc84361 Loading...

	hd.3lordserial.xyz/146-kasl-sv-13.html	ScriptElement	295 B	2024-08-20	2024-08-20
Pretty URL hd.3lordserial.xyz/146-kasl-sv-13.html IP 104.21.60.176 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-20 17:08 Last Seen2024-08-20 17:08 Times Seen1 Hash 549c7d78afe7c59e179139e4cde76143 1e7b346ba6dad6e60505b7c5118ecc85a7364024 05a89c380112fcff68b74b9e5092db02d84104e268ccbc037d407ba905306011 Loading...

	ads.digitalcaramel.com/js/lordserial2.me.js?ts=1701464097406	ScriptElement	3.4 kB	2023-11-26	2023-12-04
Pretty URL ads.digitalcaramel.com/js/lordserial2.me.js?ts=1701464097406 IP 88.99.234.26 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-26 01:17 Last Seen2023-12-04 05:42 Times Seen9 Hash daa1b1e45481203befdf14221f98d768 6e581a38d3f6fccf5d321338c8ca60d9f356345b 67df4341900fd03de677206c8a4a75c9c2f5fa561e208c5e180bc9040a66664a Loading...

	unknown	Function	35 B	2023-04-15	2025-05-09
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-15 15:39 Last Seen2025-05-09 19:07 Times Seen615 Hash 1c3f848866984f6c3d0c888614c853fb a58098643948070254c6a98023e5225fc5e113d6 f1b5a61f0c1d173204ac74e56a6c8dbb483ecce90cbeff0b1834d1816bde69d0 Loading...

	api.strvid.ws/embed/movie/455	ScriptElement	8.9 kB	2024-08-20	2024-08-20
Pretty URL api.strvid.ws/embed/movie/455 IP 146.59.111.187 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-20 17:08 Last Seen2024-08-20 17:08 Times Seen1 Hash a2f32f65398ceb9cfdf4f2125503aaa9 e85ee70d601e01d16234d7b6260d973fcda6b904 782cc8caaa7970c4e386f242e564b85acf07a44943984d753b529ba1a1897fbe Loading...

	api.strvid.ws/embed/movie/455	ScriptElement	1.3 kB	2023-03-14	2024-08-21
Pretty URL api.strvid.ws/embed/movie/455 IP 146.59.111.187 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-14 19:38 Last Seen2024-08-21 09:38 Times Seen8 Hash 028d3e6a3568be7bfd714a98768d4c76 3f03b522ae6157788841ba406e141c2d8e793308 b2715a1bfdbd1c7d277e8c8abd0ee91981239a38cec89c19455f2197bab8144b Loading...

	cdn.jsdelivr.net/npm/venom-player@0.2.86/dist/189.js	ScriptElement	522 kB	2023-03-07	2025-05-09
Pretty URL cdn.jsdelivr.net/npm/venom-player@0.2.86/dist/189.js IP 151.101.193.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:18 Last Seen2025-05-09 19:07 Times Seen322 Hash ea5b3848f4922f116f42e286c2a09ea2 8e3950a1b871be2027f3f9f5b4fe0fa30fe97f47 5b812741df3698efa4c953adc84499a05a572f7a6f2ab7731c8c7774aa51e57c Loading...

	sync.dmp.otm-r.com/match/aotm.js	ScriptElement	0 B	0001-01-01	2025-05-11
Pretty URL sync.dmp.otm-r.com/match/aotm.js IP 148.251.9.22 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen0001-01-01 00:00 Last Seen2025-05-11 18:13 Times Seen4656420 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	cdn.alfasense.net/lib/prebid.js	ScriptElement	182 kB	2023-03-14	2024-08-21
Pretty URL cdn.alfasense.net/lib/prebid.js IP 136.144.31.36 ASN #52000 Innovation IT Solutions LTD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-14 16:12 Last Seen2024-08-21 09:39 Times Seen152 Hash 873153e0c9ed294f3f464bd20b35036a 34225020cc9c672f8195a465a66837c516edb5ab b4d5cd59e626514d5a925245b6b73c5e9c3f626d01a91ac76bb52f658841fb85 Loading...

	hd.3lordserial.xyz/146-kasl-sv-13.html	ScriptElement	383 B	2023-11-26	2024-08-20
Pretty URL hd.3lordserial.xyz/146-kasl-sv-13.html IP 104.21.60.176 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-26 01:17 Last Seen2024-08-20 17:55 Times Seen9 Hash 87db70041465a97483587cc71c93aae1 f5a243c47f6225290a08a7d2a54939d8c2e8fe3c 9e035c026f7af8371c244b54bcd39378da42b70ec0a66d194bd7eea4a3e4c0a4 Loading...

	videotoday.site/frndnp.php?ver=1&autoplay=1&v=647a534f9f5fb9ced25ee7db57ef9c72&cb=805e1579-dbe0-4830-bffa-dd6b2459b8b3&fclose=false&sub_id=ap&fmt_id=1&testad=no&nomon=1&cdiv=221&r=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html&frnd=true	ScriptElement	42 kB	2023-12-01	2023-12-01
Pretty URL videotoday.site/frndnp.php?ver=1&autoplay=1&v=647a534f9f5fb9ced25ee7db57ef9c72&cb=805e1579-dbe0-4830-bffa-dd6b2459b8b3&fclose=false&sub_id=ap&fmt_id=1&testad=no&nomon=1&cdiv=221&r=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html&frnd=true IP 172.67.218.218 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-01 21:55 Last Seen2023-12-01 21:55 Times Seen1 Hash de7fe0949d471bc6a707a372d2a51830 421a5176bdb2096cff1aca9974bb9eecdf651d94 62a0f0ee9203fd1a3e8665cad892988cafbd65e238d6e687c704303ad9a267e6 Loading...

	unknown	ScriptElement	212 B	2023-07-22	2025-01-12
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-22 13:01 Last Seen2025-01-12 23:55 Times Seen162 Hash be97db99a01005f04988d74c156c3194 dc3ede3f0f807c3a7441284c1a89e53d6e0fb0bf 717382b6940423a159904bf9033d5dac09c2eebe2d56f7523465492b61a00759 Loading...

	hd.3lordserial.xyz/146-kasl-sv-13.html	ScriptElement	129 B	2023-11-26	2024-08-20
Pretty URL hd.3lordserial.xyz/146-kasl-sv-13.html IP 104.21.60.176 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-26 01:17 Last Seen2024-08-20 17:55 Times Seen9 Hash f08ca849eec2b43225ca3aa88dde9a1a 9ccf84b9bc6d30b0b72cb4691f56fb24122431b7 8d686d6d56670df9f85d0aba104f6d8ab4501c8fc10c3239e1e8bb2189d213bc Loading...

	unknown	ScriptElement	21 kB	2023-07-22	2024-08-21
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-22 13:01 Last Seen2024-08-21 09:38 Times Seen322 Hash c4b7a62e5d9f89b044f2de7e21224b28 99475b87b3bc1d9d72a440348e37575995b48d49 e8afbeb74d4b7719d927c7921f5ad69b539e9c42d0c1550859c77a14c04c21fa Loading...

	static.moviead55.ru/mp_dist/mstream2.js?v5646834026	ScriptElement	170 kB	2023-11-30	2023-12-04
Pretty URL static.moviead55.ru/mp_dist/mstream2.js?v5646834026 IP 172.67.159.129 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-30 03:51 Last Seen2023-12-04 08:04 Times Seen23 Hash c7d5b5794bf45bb133e6b9fe79637a88 eee0efa6cd4cb37ee528ea489d85df4355d571eb f05051f16c08c4fc2ef19ce15fe7e670849c120af75591fdea0b3e82f257308b Loading...

	unknown	ScriptElement	247 B	2024-08-20	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-20 17:08 Last Seen2024-08-20 17:08 Times Seen1 Hash f079b22f115f2200cf557f7659eb9bf2 aef447ee5f5416746fef249560c20a8b4a03c78d 51f0ae713ab2629000fca632560ca290a793bfac34f0317a4a783e55a96b1b73 Loading...

	hd.3lordserial.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js	ScriptElement	7.4 kB	2023-12-01	2023-12-01
Pretty URL hd.3lordserial.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 104.21.60.176 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-01 21:55 Last Seen2023-12-01 21:55 Times Seen1 Hash 90e662b082584d531825b53957dce61a e5dcfb30515606cb053c976c46c1560db3000459 ec0625ca374700cf49093d11da97702a896967f1156968c75523280e70dfdb81 Loading...

	videotoday.site/mp_dist/td/trhls.html?v5646834026	ScriptElement	0 B	0001-01-01	2025-05-11
Pretty URL videotoday.site/mp_dist/td/trhls.html?v5646834026 IP 172.67.218.218 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-11 18:13 Times Seen4656420 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	cdn.alfasense.net/js/ad_11072.js	ScriptElement	14 kB	2023-11-30	2023-12-01
Pretty URL cdn.alfasense.net/js/ad_11072.js IP 136.144.31.36 ASN #52000 Innovation IT Solutions LTD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-30 11:04 Last Seen2023-12-01 21:55 Times Seen3 Hash 94250cdae3740b53fe64168d08306ba2 1add58902ba0257cafc92faa055dbd0e2069b999 7011bfb282414ff18e81196de933cb80a939daf27df745baaff40cb05cb128cc Loading...

	cdn.jsdelivr.net/npm/venom-player@0.2.86	ScriptElement	724 kB	2023-10-13	2024-08-21
Pretty URL cdn.jsdelivr.net/npm/venom-player@0.2.86 IP 151.101.193.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-13 21:41 Last Seen2024-08-21 04:48 Times Seen244 Hash 4f15ede129f91144926117e63009acdd d413a21b2dde701fa5f35ef35c34a3573a3ccf5d 114e856b0d8358323f4b110f38c4bd84a75e68dac4c25724a55dd373c139197b Loading...

	hd.3lordserial.xyz/146-kasl-sv-13.html	ScriptElement	2.9 kB	2023-05-20	2025-05-09
Pretty URL hd.3lordserial.xyz/146-kasl-sv-13.html IP 104.21.60.176 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-20 18:40 Last Seen2025-05-09 19:07 Times Seen74 Hash 06cbc8f3e3888f9e97e596023cedb49d d537fd647a97aa17715d70f9dc8e4ee54b2e3c2d 436ccd2416e58e643675cc44cfbc4ff94f6df719d0c01d0fd30c6e07c1908d8f Loading...

	yastatic.net/partner-code-bundles/920174/7e4653f1bf11b767a289.js	ScriptElement	31 kB	2023-12-01	2023-12-04
Pretty URL yastatic.net/partner-code-bundles/920174/7e4653f1bf11b767a289.js IP 178.154.131.217 ASN #13238 YANDEX LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-01 08:55 Last Seen2023-12-04 05:51 Times Seen15 Hash 548355665c08b11c6ad620da58d5a0fc f7931159da9856a79a00c3aef388be4afff26bf5 aa7beee8e746579d9e1c779a08713b607ca5cd494e5e7004ae9a0e2004c14314 Loading...

	yastatic.net/partner-code-bundles/920174/37a64a473fd75f1d1e48.js	ScriptElement	60 kB	2023-12-01	2023-12-04
Pretty URL yastatic.net/partner-code-bundles/920174/37a64a473fd75f1d1e48.js IP 178.154.131.217 ASN #13238 YANDEX LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-01 08:55 Last Seen2023-12-04 08:04 Times Seen127 Hash 2746961d729829fa1e2db7982bc048c9 b53729f24d6c5f2a6aed0a178b168414b08e847e d3542e91cb8213b52b268d59498902610511da580d520d0f13270b483d95dc20 Loading...

	user91471.clients-cdnnow.ru/vp_dist/hls.js?v2	ScriptElement	337 kB	2023-03-12	2024-08-21
Pretty URL user91471.clients-cdnnow.ru/vp_dist/hls.js?v2 IP 185.40.155.13 ASN #21030 Docker LTD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 08:01 Last Seen2024-08-21 09:38 Times Seen291 Hash 1f56bcf2e207b3e19f63359ff6254eb8 954d05eccc4459523587c0f34fdacb0d454f3cdc 930118cf0cbea4fd3f9d87ea40c49272e91cee257433df70c8f9426a218fa750 Loading...

	hd.3lordserial.xyz/146-kasl-sv-13.html	ScriptElement	401 B	2023-10-28	2024-08-20
Pretty URL hd.3lordserial.xyz/146-kasl-sv-13.html IP 104.21.60.176 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-10-28 13:41 Last Seen2024-08-20 22:04 Times Seen32 Hash f116ac2f7fe5ffe91966972e01db879c 2da611ea4b3b90715ee2fdcfea7f4554a564877e 97531069f78b7646da083f5c429be7626e4cd87ee7a8951d4c5460111503102a Loading...

	vak345.com/cs/202312012354.js?v=647a534f9f5fb9ced25ee7db57ef9c72&_t=1701464097568.568	ScriptElement	63 kB	2024-08-20	2024-08-20
Pretty URL vak345.com/cs/202312012354.js?v=647a534f9f5fb9ced25ee7db57ef9c72&_t=1701464097568.568 IP 172.67.204.19 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-20 17:08 Last Seen2024-08-20 17:08 Times Seen1 Hash 693c92e35f24e042df5ff2a434657290 e6fe513eca450a6834b8d3688f8092fe61633404 6664099082f27fcbae4de3cc4e6749fb78dfc40dad4081a7e5be0ceeb395b75e Loading...

	api.strvid.ws/embed/movie/455	ScriptElement	1.4 kB	2023-03-07	2025-05-09
Pretty URL api.strvid.ws/embed/movie/455 IP 146.59.111.187 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 18:12 Last Seen2025-05-09 19:07 Times Seen131 Hash be6d4892239445924066a757b4fe350a 08866a9cc30f6a4ccc0e616bdbf755d612f6ac17 778d98422d563b6a33ed04d57d5f06b7cfec748a346a995fcdf88a8518605b4e Loading...

	unknown	ScriptElement	2.2 kB	2024-08-20	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-20 17:08 Last Seen2024-08-20 17:08 Times Seen1 Hash 44d8faa9fb4300c8381ff43be6655dd0 6115d5d9110b1911c9b2ae2035b84277704e39e1 f0632e1f16f44f1b60ec3cb4d1f4484048bd8e493c929b115bc38924f304abee Loading...

	unknown	ScriptElement	2.4 kB	2024-08-20	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-20 17:08 Last Seen2024-08-20 17:08 Times Seen1 Hash 752c2b0bb53681123f7fd9c097abab33 3f8bafd4fd3b10e20834d3dd6bb370eb186303c4 c962efcb3b6daa237b329c621af7dba36c5118e87c6fc47008dacd33a99517b3 Loading...

	unknown	Function	79 B	2023-04-11	2025-05-11
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:38 Last Seen2025-05-11 17:28 Times Seen112486 Hash aa049e2749b8531cb8f233c2f64fc2b2 b611a5a62c1813ae5b4763378b3a4a565556530a e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2 Loading...

	hd.3lordserial.xyz/engine/classes/min/index.php?g=general&v=cbebf	ScriptElement	86 kB	2023-03-07	2025-05-11
Pretty URL hd.3lordserial.xyz/engine/classes/min/index.php?g=general&v=cbebf IP 104.21.60.176 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2025-05-11 07:27 Times Seen7471 Hash 710458dd559c957714ac4a8e95357eb5 f694238d616f579a0690001f37984af430c19963 b409c14a10b4caad6b54844aa63a5faf748b83eecc2dd0d4fb1d913f8de55365 Loading...

	www.acint.net/mc/?dp=167&tc=1	ScriptElement	0 B	0001-01-01	2025-05-11
Pretty URL www.acint.net/mc/?dp=167&tc=1 IP 193.3.184.135 ASN #50214 QWARTA LLC Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-11 18:13 Times Seen4656420 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	data:text/javascript;charset=utf-8;base64,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	ScriptElement	7.7 kB	2023-07-22	2024-08-21
Pretty URL data:text/javascript;charset=utf-8;base64,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 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-22 13:01 Last Seen2024-08-21 09:38 Times Seen307 Hash 6c2c985f21ea178259c909e2f514dd1a 69d57db9638f235f109eb422c56a3329e6cc7885 b96aba049c7bf3c05364405b705811df4578a1c05d8fb30e410886b165b14d92 Loading...

	api.strvid.ws/embed/movie/455	ScriptElement	225 B	2023-03-07	2025-05-09
Pretty URL api.strvid.ws/embed/movie/455 IP 146.59.111.187 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:18 Last Seen2025-05-09 19:07 Times Seen123 Hash 8d5c1e9aef7238dab4aac49145d75b2a 0925118369d791dd0d15f6012a66b3da81a27009 d7e9a085fffa125b931505f97cbc06136ca6db974b0b577bbc3bfeb59c314428 Loading...

	yandex.ru/ads/system/header-bidding.js	ScriptElement	114 kB	2023-12-01	2023-12-04
Pretty URL yandex.ru/ads/system/header-bidding.js IP 77.88.55.88 ASN #13238 YANDEX LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-01 08:55 Last Seen2023-12-04 05:51 Times Seen20 Hash 6eb2010f1e842d03e7167914db48c26e 49fac5904a847b7f9cebc541d72261126289dc97 74410d6230a8d1db7fcd2110150d98bdc738f7a89d7c0efe8020a8815a83a386 Loading...

	api.stiven-king.com/storage.html	ScriptElement	0 B	0001-01-01	2025-05-11
Pretty URL api.stiven-king.com/storage.html IP 5.183.209.191 ASN #206264 Amarutu Technology Ltd Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-11 18:13 Times Seen4656420 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	ads.alfasense.net/adserver/www/delivery/asyncjs.php	ScriptElement	4.5 kB	2023-03-07	2025-05-11
Pretty URL ads.alfasense.net/adserver/www/delivery/asyncjs.php IP 136.144.31.29 ASN #52000 Innovation IT Solutions LTD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:04 Last Seen2025-05-11 14:23 Times Seen296 Hash 6a351e7a844e42f2970773e705eddf36 66cc3e2474cf7085d0bfd5112003b0b9f0f87dbf d3d5d8e3aaeec086ae00ad814b3adae7e41462e42a308a09dbce39aaa11572e3 Loading...

	hd.3lordserial.xyz/146-kasl-sv-13.html	ScriptElement	307 B	2023-11-26	2024-08-20
Pretty URL hd.3lordserial.xyz/146-kasl-sv-13.html IP 104.21.60.176 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-26 01:17 Last Seen2024-08-20 17:55 Times Seen9 Hash 0446ea2318d12d5fe43bc29ebf0fce10 fabcb0127b531f7f6c8d46582425c1cc75457945 5ef8edf06f7973faf817931e223eae41e693524775d18c2eec2aeeee581d0435 Loading...

	code.moviead55.ru/go/bmap?v=647a534f9f5fb9ced25ee7db57ef9c72&sub_id=ap&fmt_id=4&pl_key=banner&testad=no&r=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html	ScriptElement	162 kB	2023-12-01	2023-12-01
Pretty URL code.moviead55.ru/go/bmap?v=647a534f9f5fb9ced25ee7db57ef9c72&sub_id=ap&fmt_id=4&pl_key=banner&testad=no&r=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html IP 193.200.65.150 ASN #6681 Rozetka Sp. z o.o. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-01 21:55 Last Seen2023-12-01 21:55 Times Seen1 Hash 60ece98558c6ab4397737ba0d90293d7 931c41f9f9d479a66f1dbe61e2d418a8b3353f42 de318026b2f1a4c51b8d5e2cc2224c1ab0d9072a014257b3cb3cb32ed55ede35 Loading...

	api.strvid.ws/cdn.js	ScriptElement	14 kB	2023-05-17	2024-09-19
Pretty URL api.strvid.ws/cdn.js IP 146.59.111.187 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-17 06:53 Last Seen2024-09-19 23:09 Times Seen320 Hash a81f8cb9127ebc541cfe5d8fa444dadb be16ea0d77bd967771b6668970b9f66bb45daa21 71a2a5087e0df99887785f7890f0320446e336aa298211b5cf6ee5a151ef5091 Loading...

	hd.3lordserial.xyz/146-kasl-sv-13.html	ScriptElement	4.3 kB	2023-11-26	2024-08-20
Pretty URL hd.3lordserial.xyz/146-kasl-sv-13.html IP 104.21.60.176 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-26 01:17 Last Seen2024-08-20 17:55 Times Seen9 Hash b1d0cddb8175410eb5c863149d2ec993 eb1be639be905361c38e23c11895ad876e6ef570 5338d19b53b840934b3a78f926345637926cf484f1ade397a406052edbfe298b Loading...

	hd.3lordserial.xyz/146-kasl-sv-13.html	ScriptElement	679 B	2023-11-25	2024-08-20
Pretty URL hd.3lordserial.xyz/146-kasl-sv-13.html IP 104.21.60.176 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-25 16:30 Last Seen2024-08-20 17:57 Times Seen10 Hash 6d495600eefcd3c596189e37b9f6d376 a92309e135f866ad81bbec9a8d3f345e2b72760c f3fcbfbc61288e1e55c6bb17b1732210a7dd5cb74f79fe704c4f2036da7761de Loading...

	cdn5.playmatic.video/public/playmatic_union.min.js	ScriptElement	41 kB	2023-10-14	2024-08-21
Pretty URL cdn5.playmatic.video/public/playmatic_union.min.js IP 5.101.37.37 ASN #57416 LLC South Internet Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-14 20:43 Last Seen2024-08-21 04:42 Times Seen50 Hash 3e38f577a45db35665ad74555ffd6f94 60ad5732464a32206b780a9f6c6feecb97e46a43 fb280236afa98b95b9623cfde839d100960951f2ec20b70f39da7ba21446bf33 Loading...

	cdn.alfasense.net/lib/alfadart.lib.min.js	ScriptElement	37 kB	2023-10-21	2024-08-21
Pretty URL cdn.alfasense.net/lib/alfadart.lib.min.js IP 136.144.31.36 ASN #52000 Innovation IT Solutions LTD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-21 20:53 Last Seen2024-08-21 03:55 Times Seen80 Hash 09c5829b36979089330e8a52645e58fb fef8adb8ce799f63e66cb31ee3c9c591f572f75e 14932232a8eeb318ddd7e958118b6e9f8daf1a61e4d6726e63da896205c1ed4b Loading...

	unknown	Function	37 B	2023-04-13	2025-05-09
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-13 20:32 Last Seen2025-05-09 19:07 Times Seen373 Hash e32686f0d25279481ed5e0ab26da37e9 3691e0447f90b4d82957696408f8e20a5be0959b 3542ceead2b41196f073643e2bbeceedc1f63f329d349ac562d94596058def28 Loading...

	hd.3lordserial.xyz/146-kasl-sv-13.html	ScriptElement	1.1 kB	2024-08-20	2024-08-20
Pretty URL hd.3lordserial.xyz/146-kasl-sv-13.html IP 104.21.60.176 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-20 17:08 Last Seen2024-08-20 17:08 Times Seen1 Hash ef8a4a7e8c0aeb52f2ad9542250a8127 54a9456723e7489e1b26cd2b50b4083a9cf0d95c d2051674aa4c235dbb666e39ec17ccb300edf2ce5df1a67816968fcda048ddf6 Loading...

	cdn.jsdelivr.net/npm/venom-player@0.2.86/dist/theme-classic.js	ScriptElement	16 kB	2023-10-13	2024-08-21
Pretty URL cdn.jsdelivr.net/npm/venom-player@0.2.86/dist/theme-classic.js IP 151.101.193.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-13 21:41 Last Seen2024-08-21 04:48 Times Seen207 Hash 210c3f63bba6881ea3787a533af7cca0 5f3766edd39ae2502c8ee06bb3630cc447f6f216 b4e7dc4a29652ef34ede138da2d02209e51d9f3f2a8c07d5e891a85fca16a822 Loading...

	yastatic.net/partner-code-bundles/920174/e26b550151ba5774984e.js	ScriptElement	24 kB	2023-12-01	2023-12-04
Pretty URL yastatic.net/partner-code-bundles/920174/e26b550151ba5774984e.js IP 178.154.131.217 ASN #13238 YANDEX LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-01 08:55 Last Seen2023-12-04 08:04 Times Seen127 Hash 52682127d88b3c7670e41fb45f74046f 2b6fff0fefd384b822fb0cab1fa720d6cb7bd10b 894011b120e45e61fe56cdbce595ded18fe55eaa35c9dadf11e640c1eabce8bd Loading...

	api.strvid.ws/embed/movie/455	ScriptElement	1.6 kB	2023-12-01	2024-08-20
Pretty URL api.strvid.ws/embed/movie/455 IP 146.59.111.187 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-01 21:55 Last Seen2024-08-20 17:08 Times Seen2 Hash 9c32c2343cf901b4e8907fd74a94cb8b d980b256ba8a857adccacfdb3604c273710b7127 9cdac00efd590a18d2ba5f4e2fd754245128825ba483ee51d9b3a79f958c3f9c Loading...

	api.strvid.ws/embed/movie/455	ScriptElement	136 kB	2023-11-26	2024-08-20
Pretty URL api.strvid.ws/embed/movie/455 IP 146.59.111.187 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-26 01:17 Last Seen2024-08-20 17:55 Times Seen9 Hash 5445dba1a227a075b2fcbf8b0f1098ec 3f216ccebf4c65d870b0bbf5e4568bd617a837a4 4433766c1626381fd56bcc364e646809e257df205b22db4a9b5c7cfa45813864 Loading...

		Size	First Seen	Last Seen
	#1 Eval - ba6a367197e5efa050bf70b7a649dd51	4.0 kB	2024-08-20 17:08	2024-08-20 17:08
Pretty Observations First Seen2024-08-20 17:08 Last Seen2024-08-20 17:08 Times Seen1 Hash ba6a367197e5efa050bf70b7a649dd51 76acfd176ca91f22921c51435e7c58b6305a4101 c3d1cb1836efbf0ef11d3fe94618129d7c15e2ad859da3466ba40d111ebbef98 Loading...

	#2 Eval - 7464088d4933eb38977bd2a0273a265b	61 B	2023-07-22 13:01	2025-05-11 10:55
Pretty Observations First Seen2023-07-22 13:01 Last Seen2025-05-11 10:55 Times Seen1713 Hash 7464088d4933eb38977bd2a0273a265b 81fe49787f478964fc2b55b9dfe64102365e0162 9f72754a7ecd6f8eb8ddcba2d59883c96b8a8fed2a833dc0e0b653d876b385b1 Loading...

	#3 Eval - a7ce8bf7c544f76eb89926b3ca618f43	12 B	2023-03-07 01:07	2025-04-29 21:47
Pretty Observations First Seen2023-03-07 01:07 Last Seen2025-04-29 21:47 Times Seen1414 Hash a7ce8bf7c544f76eb89926b3ca618f43 313d20acfe186ea3594870fc6d56c119f658fef2 4ab4edee422a7a6e621718d1ae7180b13ba13f18c0ce3e7e3e26fd68e57e119c Loading...

		Size	First Seen	Last Seen
	#1 Write - adef8de5e6b588b1d18e9b0938f04603	578 B	2024-08-20 17:08	2024-08-20 17:08
Pretty Observations First Seen2024-08-20 17:08 Last Seen2024-08-20 17:08 Times Seen1 Hash adef8de5e6b588b1d18e9b0938f04603 61966054017b033dd8b50cbbfc9fcfffd2d399e1 9ce258f29213c9ff7df14d31143aeabb3e832d7b12df7aeda78284ed9628d1c8 Loading...

	#2 Write - 64c4ef52b3a25c93eaa0ca08896b963f	517 B	2023-12-01 21:55	2024-08-20 17:08
Pretty Observations First Seen2023-12-01 21:55 Last Seen2024-08-20 17:08 Times Seen2 Hash 64c4ef52b3a25c93eaa0ca08896b963f 398e068440caac26b105f7a8f18fb59dffd3cbdf f5899d65aa662a5f2d1daa8f8e1e3f7454a8fa37d0c26f94f1d008c85d4accce Loading...

	#3 Write - 48fbc1d1b84fedac6ff048a42a9295d5	485 B	2023-07-22 13:01	2024-08-21 09:38
Pretty Observations First Seen2023-07-22 13:01 Last Seen2024-08-21 09:38 Times Seen218 Hash 48fbc1d1b84fedac6ff048a42a9295d5 ecb6e76b134369c9c37e0decb1bc8f07caa80713 afd06070b94338e415debd96b809aedb66c5f68c9498fa4e7f177ce145f26ae1 Loading...

	#4 Write - ded9700ab1277340d15147c2ca36d5d0	31 kB	2024-08-20 17:08	2024-08-20 17:08
Pretty Observations First Seen2024-08-20 17:08 Last Seen2024-08-20 17:08 Times Seen1 Hash ded9700ab1277340d15147c2ca36d5d0 4df1b5aa9873cd8527b6417dbc85b3c28f58f953 e1301b6724ecda5bf33ab71bd3de2154b3deade215f5e409b40111b258cbd2c9 Loading...

HTTP Transactions (211)

	URL	IP	Response	Size
	hd.3lordserial.xyz/templates/lordfun/fonts/fontawesome-webfont.woff2?v=4.7.0	104.21.60.176	200 OK	77 kB
URL GET HTTP/3 hd.3lordserial.xyz/templates/lordfun/fonts/fontawesome-webfont.woff2?v=4.7.0 IP 104.21.60.176:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject3lordserial.xyz Fingerprint55:F3:EC:F8:C5:A9:65:3A:AD:8F:B2:1A:59:6B:1A:41:7E:A0:65:DF ValidityWed, 29 Nov 2023 21:49:20 GMT - Tue, 27 Feb 2024 21:49:19 GMT File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data Size 77 kB (77160 bytes) Hash af7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe HTTP Headers GET /templates/lordfun/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 Host: hd.3lordserial.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://hd.3lordserial.xyz/146-kasl-sv-13.html DNT: 1 Connection: keep-alive Cookie: PHPSESSID=c0506767ddef664786c878030c4f8c6b Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 01 Dec 2023 20:54:52 GMT content-type: font/woff2 content-length: 77160 last-modified: Tue, 06 Sep 2022 06:42:38 GMT etag: "6316ebde-12d68" cache-control: max-age=31536000 cf-cache-status: HIT age: 4185 accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QxaVpB%2B0L3pBJbs5w4IyCaeot%2FGVlUQBf4gOx7CmrMesXa80Gi05KpPa7Kc0PEh6yrB10e8s8GC70gEQzI36S%2FQPDuGuEe2yZGQPno9Acmp33xQ%2FDtam73GMBROVMbosVXhuzKY%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 82ee3a520e6656a8-OSL alt-svc: h3=":443"; ma=86400

	api.strvid.ws/embed/movie/455	146.59.111.187	200 OK	24 kB
URL GET HTTP/1.1 api.strvid.ws/embed/movie/455 IP 146.59.111.187:443 ASN #16276 OVH SAS Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerSectigo Limited Subjectapi.strvid.ws Fingerprint03:16:4D:D3:51:3C:A4:93:A0:13:B4:36:B9:25:19:E7:D3:48:65:81 ValidityThu, 02 Mar 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (49346) Size 24 kB (23936 bytes) Hash b4587f93833f00a75dbdead1bb56b5c4 1476d91c13c972d49a9139928d0e35eb7dcfd711 79390349f86e8a4384ae0ccd5d15fe741dc006b4f7e3d5f763805c72d31c349b HTTP Headers GET /embed/movie/455 HTTP/1.1 Host: api.strvid.ws User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:52 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: 1970-01-01 00:00:00 Pragma: no-cache Set-Cookie: _uid=24ac65fe-0584-46c3-9a78-42947ff42283; Path=/; Domain=strvid.ws; Max-Age=31104000; Secure Vary: * Content-Encoding: gzip`

	videotoday.site/frndnp.php?ver=1&autoplay=1&v=647a534f9f5fb9ced25ee7db57ef9c72&cb=805e1579-dbe0-4830-bffa-dd6b2459b8b3&fclose=false&sub_id=ap&fmt_id=1&testad=no&nomon=1&cdiv=221&r=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html&frnd=true	172.67.218.218		23 kB
URL GET videotoday.site/frndnp.php?ver=1&autoplay=1&v=647a534f9f5fb9ced25ee7db57ef9c72&cb=805e1579-dbe0-4830-bffa-dd6b2459b8b3&fclose=false&sub_id=ap&fmt_id=1&testad=no&nomon=1&cdiv=221&r=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html&frnd=true IP 172.67.218.218:0 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGoogle Trust Services LLC Subjectvideotoday.site FingerprintA8:0A:0C:FF:C9:74:01:DA:F2:F4:6F:1A:46:B4:A3:2D:53:73:57:62 ValidityFri, 06 Oct 2023 02:55:12 GMT - Thu, 04 Jan 2024 02:55:11 GMT File type ASCII text, with very long lines (41685) Size 23 kB (23052 bytes) Hash de7fe0949d471bc6a707a372d2a51830 421a5176bdb2096cff1aca9974bb9eecdf651d94 62a0f0ee9203fd1a3e8665cad892988cafbd65e238d6e687c704303ad9a267e6 HTTP Headers GET /frndnp.php?ver=1&autoplay=1&v=647a534f9f5fb9ced25ee7db57ef9c72&cb=805e1579-dbe0-4830-bffa-dd6b2459b8b3&fclose=false&sub_id=ap&fmt_id=1&testad=no&nomon=1&cdiv=221&r=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html&frnd=true HTTP/1.1 Host: videotoday.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Fri, 01 Dec 2023 20:54:53 GMT content-type: text/html; charset=UTF-8 vary: Accept-Encoding x-cache: Yac x-movieads-country: NO cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rJ5pGFHzgIk16mU2mSZlBNY3jCWmFjq8n3ZVSQ6KdLSYl0nbOJhX%2BbP1zVSVVePy5DwYrG4%2FThOC3dJQp86FBxGXeD3YIFI2wN59y2YrGfnF7%2Bo2PqhJ%2BR4AUuVOdJogST8%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a550d51b529-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	s.myangular.life/player?cat=support&hit=async&description=yes	116.202.233.126	200 OK	0 B
URL GET HTTP/1.1 s.myangular.life/player?cat=support&hit=async&description=yes IP 116.202.233.126:443 ASN #24940 Hetzner Online GmbH Requested by https://api.strvid.ws/embed/movie/455 Certificate IssuerSectigo Limited Subjects.myangular.life Fingerprint3A:21:0F:72:24:43:49:14:06:28:C6:D0:A6:10:6B:D7:B2:EA:5A:66 ValidityTue, 04 Apr 2023 00:00:00 GMT - Sat, 04 May 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /player?cat=support&hit=async&description=yes HTTP/1.1 Host: s.myangular.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://api.strvid.ws/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:53 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: keep-alive Access-Control-Allow-Origin: *`

	s.myangular.life/player?cat=support&hit=wasm&description=wasm%20dc	116.202.233.126	200 OK	0 B
URL GET HTTP/1.1 s.myangular.life/player?cat=support&hit=wasm&description=wasm%20dc IP 116.202.233.126:443 ASN #24940 Hetzner Online GmbH Requested by https://api.strvid.ws/embed/movie/455 Certificate IssuerSectigo Limited Subjects.myangular.life Fingerprint3A:21:0F:72:24:43:49:14:06:28:C6:D0:A6:10:6B:D7:B2:EA:5A:66 ValidityTue, 04 Apr 2023 00:00:00 GMT - Sat, 04 May 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /player?cat=support&hit=wasm&description=wasm%20dc HTTP/1.1 Host: s.myangular.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://api.strvid.ws/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:53 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: keep-alive Access-Control-Allow-Origin: *`

	hd.3lordserial.xyz/uploads/posts/2022-03/409640_1646822003.jpg	104.21.60.176	200 OK	15 kB
URL GET HTTP/3 hd.3lordserial.xyz/uploads/posts/2022-03/409640_1646822003.jpg IP 104.21.60.176:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject3lordserial.xyz Fingerprint55:F3:EC:F8:C5:A9:65:3A:AD:8F:B2:1A:59:6B:1A:41:7E:A0:65:DF ValidityWed, 29 Nov 2023 21:49:20 GMT - Tue, 27 Feb 2024 21:49:19 GMT File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", baseline, precision 8, 200x300, components 3\012- data Size 15 kB (15221 bytes) Hash 496462d18d3b4430dc289b2ad59c2545 aa2cbbb70eac86c03758bf4b287c6e9e2da6afd3 19c097200128c36fecdc47736998f11bebd99b1c91aecceebb70ec29725e5d57 HTTP Headers GET /uploads/posts/2022-03/409640_1646822003.jpg HTTP/1.1 Host: hd.3lordserial.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/146-kasl-sv-13.html Cookie: PHPSESSID=c0506767ddef664786c878030c4f8c6b Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 01 Dec 2023 20:54:52 GMT content-type: image/jpeg last-modified: Tue, 06 Sep 2022 06:42:38 GMT vary: Accept-Encoding etag: W/"6316ebde-3af7" cache-control: max-age=31536000 cf-cache-status: HIT age: 4205 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7VeCsnzYrnbIIWqjnp7nrfMfRhOKDj5FbVs%2FmRIdh5hYr4OPiSNWVu01eC4jaXXFxXUYD0%2BC5M7%2BZ6qXYbA%2FeEhbp4APkN4QWg98JojLyeHOxGCjgWD8o9WoSBsQLcHifDIKbaQ%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a521e7256a8-OSL alt-svc: h3=":443"; ma=86400

	s.myangular.life/player?cat=support&hit=opus&description=true	116.202.233.126	200 OK	0 B
URL GET HTTP/1.1 s.myangular.life/player?cat=support&hit=opus&description=true IP 116.202.233.126:443 ASN #24940 Hetzner Online GmbH Requested by https://api.strvid.ws/embed/movie/455 Certificate IssuerSectigo Limited Subjects.myangular.life Fingerprint3A:21:0F:72:24:43:49:14:06:28:C6:D0:A6:10:6B:D7:B2:EA:5A:66 ValidityTue, 04 Apr 2023 00:00:00 GMT - Sat, 04 May 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /player?cat=support&hit=opus&description=true HTTP/1.1 Host: s.myangular.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://api.strvid.ws/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:53 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: keep-alive Access-Control-Allow-Origin: *`

	logger.moviead55.ru/logger.php?t=target_country_load&c=805e1579-dbe0-4830-bffa-dd6b2459b8b3&a=&m=%7B%22browser%22%3A%22%7B%5C%22name%5C%22%3A%5C%22firefox%5C%22%2C%5C%22version%5C%22%3A%5C%22105%5C%22%7D%22%2C%22isMobile%22%3Afalse%2C%22format%22%3A%22new%22%7D&v=647a534f9f5fb9ced25ee7db57ef9c72&o=undefined	193.200.65.146	200 OK	933 B
URL GET HTTP/2 logger.moviead55.ru/logger.php?t=target_country_load&c=805e1579-dbe0-4830-bffa-dd6b2459b8b3&a=&m=%7B%22browser%22%3A%22%7B%5C%22name%5C%22%3A%5C%22firefox%5C%22%2C%5C%22version%5C%22%3A%5C%22105%5C%22%7D%22%2C%22isMobile%22%3Afalse%2C%22format%22%3A%22new%22%7D&v=647a534f9f5fb9ced25ee7db57ef9c72&o=undefined IP 193.200.65.146:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data Size 933 B (933 bytes) Hash ed375e7c1dc0846cf94200e340142f25 01dc17f98a4954af096ce0ff9fbd69cd7165d42c 1ef9aedc924dc68a25b43c46b75eb6d787489707237da8cd8fd0102cf9520895 HTTP Headers GET /logger.php?t=target_country_load&c=805e1579-dbe0-4830-bffa-dd6b2459b8b3&a=&m=%7B%22browser%22%3A%22%7B%5C%22name%5C%22%3A%5C%22firefox%5C%22%2C%5C%22version%5C%22%3A%5C%22105%5C%22%7D%22%2C%22isMobile%22%3Afalse%2C%22format%22%3A%22new%22%7D&v=647a534f9f5fb9ced25ee7db57ef9c72&o=undefined HTTP/1.1 Host: logger.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:52 GMT content-type: Content-Type: image/png vary: Accept-Encoding x-movieads-le: true x-movieads-country: NO content-encoding: gzip X-Firefox-Spdy: h2`

	code.moviead55.ru/go/cinit?cn=vhd&rnd=1701464093	193.200.65.150	301 Moved Permanently	0 B
URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=vhd&rnd=1701464093 IP 193.200.65.150:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /go/cinit?cn=vhd&rnd=1701464093 HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 301 Moved Permanently server: nginx date: Fri, 01 Dec 2023 20:54:53 GMT content-length: 0 location: https://a.videohead.tech/sync?ssp=44 set-cookie: sky_uuid=41b0ba00-2ac8-c3cc-87a0-6106da3a8756; max-age=157680000; path=/; HttpOnly; secure; SameSite=None x-movieads-country: NO X-Firefox-Spdy: h2`

	code.moviead55.ru/go/cinit?cn=gtnt&rnd=1701464093	193.200.65.150	301 Moved Permanently	0 B
URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=gtnt&rnd=1701464093 IP 193.200.65.150:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /go/cinit?cn=gtnt&rnd=1701464093 HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 301 Moved Permanently server: nginx date: Fri, 01 Dec 2023 20:54:53 GMT content-length: 0 location: https://px.adhigh.net/p/cm/skyadvert?u=a2f3a78f-94cb-25a7-57bb-6399b931b786 set-cookie: sky_uuid=a2f3a78f-94cb-25a7-57bb-6399b931b786; max-age=157680000; path=/; HttpOnly; secure; SameSite=None x-movieads-country: NO X-Firefox-Spdy: h2`

	code.moviead55.ru/go/cinit?cn=btwcookie&rnd=1701464093	193.200.65.150	301 Moved Permanently	0 B
URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=btwcookie&rnd=1701464093 IP 193.200.65.150:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /go/cinit?cn=btwcookie&rnd=1701464093 HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 301 Moved Permanently server: nginx date: Fri, 01 Dec 2023 20:54:53 GMT content-length: 0 location: https://ads.betweendigital.com/match?bidder_id=34348&callback_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbtwcookie%26bid%3D%24%7BUSER_ID%7D set-cookie: sky_uuid=d4ea809b-5154-c658-90a3-ca56a57416ab; max-age=157680000; path=/; HttpOnly; secure; SameSite=None x-movieads-country: NO X-Firefox-Spdy: h2`

	s.myangular.life/player?cat=frame&hit=sub&host=api	116.202.233.126	200 OK	0 B
URL GET HTTP/1.1 s.myangular.life/player?cat=frame&hit=sub&host=api IP 116.202.233.126:443 ASN #24940 Hetzner Online GmbH Requested by https://api.strvid.ws/embed/movie/455 Certificate IssuerSectigo Limited Subjects.myangular.life Fingerprint3A:21:0F:72:24:43:49:14:06:28:C6:D0:A6:10:6B:D7:B2:EA:5A:66 ValidityTue, 04 Apr 2023 00:00:00 GMT - Sat, 04 May 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /player?cat=frame&hit=sub&host=api HTTP/1.1 Host: s.myangular.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://api.strvid.ws/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:53 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: keep-alive Access-Control-Allow-Origin: *`

	hd.3lordserial.xyz/engine/classes/min/index.php?f=engine/classes/js/jqueryui.js,engine/classes/js/dle_js.js,engine/classes/js/bbcodes.js&v=cbebf	104.21.60.176	200 OK	40 kB
URL GET HTTP/3 hd.3lordserial.xyz/engine/classes/min/index.php?f=engine/classes/js/jqueryui.js,engine/classes/js/dle_js.js,engine/classes/js/bbcodes.js&v=cbebf IP 104.21.60.176:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject3lordserial.xyz Fingerprint55:F3:EC:F8:C5:A9:65:3A:AD:8F:B2:1A:59:6B:1A:41:7E:A0:65:DF ValidityWed, 29 Nov 2023 21:49:20 GMT - Tue, 27 Feb 2024 21:49:19 GMT File type ASCII text, with very long lines (18446), with CRLF line terminators Size 40 kB (39687 bytes) Hash dfe48653114336364782f5ba29ac32c4 f2ba72145a4db4c00500e638f62be786dfd568e3 8f5510595ba5624489cfccaf984e38a77d7622c2c119b58fff3ae1c8e36456d6 HTTP Headers GET /engine/classes/min/index.php?f=engine/classes/js/jqueryui.js,engine/classes/js/dle_js.js,engine/classes/js/bbcodes.js&v=cbebf HTTP/1.1 Host: hd.3lordserial.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/146-kasl-sv-13.html Cookie: PHPSESSID=c0506767ddef664786c878030c4f8c6b Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 01 Dec 2023 20:54:52 GMT content-type: application/x-javascript; charset=utf-8 x-powered-by: PHP/7.4.33 expires: Sat, 30 Nov 2024 20:54:52 GMT vary: Accept-Encoding cache-control: max-age=31536000 last-modified: Thu, 06 Jul 2023 21:06:23 GMT etag: W/"pub1688677583;gz" cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cdmWXDVXgkMkQIL%2F8lbQ%2FRQCjy9Y4Aoqh5B3XIdKqODqkpQxsw1Z4CNagrD50BlszfaPrbXBqudPQCmg8uxgxYemQY5QOlWGjSsaSyPufqsf6%2BO65gvrBAhTy8TVHQ%2FoJcea0ns%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a521e7956a8-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	code.moviead55.ru/go/cinit?cn=sapecookie&rnd=1701464093	193.200.65.150	301 Moved Permanently	0 B
URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=sapecookie&rnd=1701464093 IP 193.200.65.150:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /go/cinit?cn=sapecookie&rnd=1701464093 HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 301 Moved Permanently server: nginx date: Fri, 01 Dec 2023 20:54:53 GMT content-length: 0 location: https://www.acint.net/rmatch?dp=167&euid=30dd7735-cf40-e7d8-96a0-75795845c1ef&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D set-cookie: sky_uuid=30dd7735-cf40-e7d8-96a0-75795845c1ef; max-age=157680000; path=/; HttpOnly; secure; SameSite=None x-movieads-country: NO X-Firefox-Spdy: h2`

	hd.3lordserial.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	104.21.60.176	200 OK	2.5 kB
URL GET HTTP/3 hd.3lordserial.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP 104.21.60.176:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject3lordserial.xyz Fingerprint55:F3:EC:F8:C5:A9:65:3A:AD:8F:B2:1A:59:6B:1A:41:7E:A0:65:DF ValidityWed, 29 Nov 2023 21:49:20 GMT - Tue, 27 Feb 2024 21:49:19 GMT File type gzip compressed data, from Unix\012- data Size 2.5 kB (2526 bytes) Hash 167b21121ebf2e2886b73eb6cfa98651 0694b9e27fc17d327cb6df6d78009b618c03f14d 421608256239a5e7a940f5ad45cbe272f64c20f113cc052c80592ef174a1fce6 HTTP Headers GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: hd.3lordserial.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/146-kasl-sv-13.html Cookie: PHPSESSID=c0506767ddef664786c878030c4f8c6b Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 01 Dec 2023 20:54:52 GMT content-type: application/javascript last-modified: Tue, 28 Nov 2023 16:06:21 GMT etag: W/"65660ffd-4d7" report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dAOwkXY%2BQ%2BuUJVuj5cBMOLku4T2YweFNNyGcE5ywiBQAPvjGt5S2UWLtrpPNxld3U7%2F9ACic9h39vyKjXsZwmvO2l54wyFt8F4tWRxQQssM9H32kRhZuMK4fK03%2BMSaoyte8MrM%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 82ee3a521e7656a8-OSL x-frame-options: DENY x-content-type-options: nosniff expires: Sun, 03 Dec 2023 20:54:52 GMT cache-control: max-age=172800, public content-encoding: gzip

	cdn.jsdelivr.net/npm/venom-player@0.2.86	151.101.193.229	200 OK	0 B
URL GET HTTP/2 cdn.jsdelivr.net/npm/venom-player@0.2.86 IP 151.101.193.229:443 ASN #54113 FASTLY Requested by https://api.strvid.ws/embed/movie/455 Certificate IssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /npm/venom-player@0.2.86 HTTP/1.1 Host: cdn.jsdelivr.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://api.strvid.ws DNT: 1 Connection: keep-alive Referer: https://api.strvid.ws/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * cache-control: public, max-age=31536000, s-maxage=31536000, immutable cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload content-type: application/javascript; charset=utf-8 x-jsd-version: 0.2.86 x-jsd-version-type: version etag: W/"b0a89-1BOiGy3ecB+l817zXDSjVzo8z10" content-encoding: br accept-ranges: bytes date: Fri, 01 Dec 2023 20:54:53 GMT age: 4996005 x-served-by: cache-fra-eddf8230080-FRA, cache-bma1677-BMA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 content-length: 198514 X-Firefox-Spdy: h2

	code.moviead55.ru/go/cinit?cn=dgm&rnd=1701464093	193.200.65.150	301 Moved Permanently	0 B
URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=dgm&rnd=1701464093 IP 193.200.65.150:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /go/cinit?cn=dgm&rnd=1701464093 HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 301 Moved Permanently server: nginx date: Fri, 01 Dec 2023 20:54:53 GMT content-length: 0 location: https://sync.opendsp.ru/match/Movieads?id=${UUID} set-cookie: sky_uuid=69783509-6531-2301-4b08-c3f0bf2e359a; max-age=157680000; path=/; HttpOnly; secure; SameSite=None x-movieads-country: NO X-Firefox-Spdy: h2`

	code.moviead55.ru/go/cinit?cn=hbrdcookie2&rnd=1701464093	193.200.65.150	301 Moved Permanently	0 B
URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=hbrdcookie2&rnd=1701464093 IP 193.200.65.150:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /go/cinit?cn=hbrdcookie2&rnd=1701464093 HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 301 Moved Permanently server: nginx date: Fri, 01 Dec 2023 20:54:53 GMT content-length: 0 location: https://dm-eu.hybrid.ai/match?id=185&burl=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dhbrdcookie2%26bid%3D%24%7BVID%7D set-cookie: sky_uuid=472bbd7c-26d3-c837-3bf6-13c5970217f9; max-age=157680000; path=/; HttpOnly; secure; SameSite=None x-movieads-country: NO X-Firefox-Spdy: h2`

	code.moviead55.ru/go/cinit?cn=solta&rnd=1701464093	193.200.65.150	301 Moved Permanently	0 B
URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=solta&rnd=1701464093 IP 193.200.65.150:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /go/cinit?cn=solta&rnd=1701464093 HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 301 Moved Permanently server: nginx date: Fri, 01 Dec 2023 20:54:53 GMT content-length: 0 location: https://kimberlite.io/rtb/sync/skyadvert?u=b11f561f-9141-e7c6-4889-17625eb811c6 set-cookie: sky_uuid=b11f561f-9141-e7c6-4889-17625eb811c6; max-age=157680000; path=/; HttpOnly; secure; SameSite=None x-movieads-country: NO X-Firefox-Spdy: h2`

	code.moviead55.ru/go/cinit?cn=bzcookie&rnd=1701464093	193.200.65.150	301 Moved Permanently	0 B
URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=bzcookie&rnd=1701464093 IP 193.200.65.150:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /go/cinit?cn=bzcookie&rnd=1701464093 HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 301 Moved Permanently server: nginx date: Fri, 01 Dec 2023 20:54:53 GMT content-length: 0 location: https://exchange.buzzoola.com/cookiesync/redirect/skyadvert?redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbzcookie%26bid%3D%24%7BUUID%7D set-cookie: sky_uuid=f7cb13de-5f9c-0dde-ad3f-972479021d3d; max-age=157680000; path=/; HttpOnly; secure; SameSite=None x-movieads-country: NO X-Firefox-Spdy: h2`

	code.moviead55.ru/go/cinit?cn=otmbid&rnd=1701464093	193.200.65.150	301 Moved Permanently	0 B
URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=otmbid&rnd=1701464093 IP 193.200.65.150:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /go/cinit?cn=otmbid&rnd=1701464093 HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 301 Moved Permanently server: nginx date: Fri, 01 Dec 2023 20:54:53 GMT content-length: 0 location: https://sync.dmp.otm-r.com/match/skyadvert set-cookie: sky_uuid=8843e40b-35d2-1ff5-81f3-0030f0f5e75d; max-age=157680000; path=/; HttpOnly; secure; SameSite=None x-movieads-country: NO X-Firefox-Spdy: h2`

	hd.3lordserial.xyz/templates/lordfun/style/full.css?v=2.6	104.21.60.176	200 OK	35 kB
URL GET HTTP/3 hd.3lordserial.xyz/templates/lordfun/style/full.css?v=2.6 IP 104.21.60.176:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject3lordserial.xyz Fingerprint55:F3:EC:F8:C5:A9:65:3A:AD:8F:B2:1A:59:6B:1A:41:7E:A0:65:DF ValidityWed, 29 Nov 2023 21:49:20 GMT - Tue, 27 Feb 2024 21:49:19 GMT File type Unicode text, UTF-8 text, with very long lines (65512), with no line terminators Size 35 kB (35449 bytes) Hash c358cfd9c6b65d1301c3e98a57eeaf54 ba34025c0ca5c2f1435d551b1318830b5134b989 199e8e582afe0a43c6f973d82653d122b636c06d816219e8f41df532b6aaaa4d HTTP Headers GET /templates/lordfun/style/full.css?v=2.6 HTTP/1.1 Host: hd.3lordserial.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/146-kasl-sv-13.html Cookie: PHPSESSID=c0506767ddef664786c878030c4f8c6b Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 01 Dec 2023 20:54:52 GMT content-type: text/css cf-bgj: minify cf-polished: origSize=127503 etag: W/"654a170f-1f20f" last-modified: Tue, 07 Nov 2023 10:53:03 GMT cache-control: max-age=31536000 cf-cache-status: HIT age: 4205 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m5DbiFlzHgj98BmKeqrenzlqjjelICFe8vymeD4FrmuvXQgIYDe3GAoMosK67KStk4wzH6hUpbK3lvaUJKM88LB9V%2BtibM%2FNgVMSDVkBGm3ScpAP%2FMUdJkkBpPO%2BR2np1ZV2jgU%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 82ee3a520e6556a8-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	code.moviead55.ru/go/cinit?cn=gonetbid&rnd=1701464093	193.200.65.150	301 Moved Permanently	0 B
URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=gonetbid&rnd=1701464093 IP 193.200.65.150:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /go/cinit?cn=gonetbid&rnd=1701464093 HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 301 Moved Permanently server: nginx date: Fri, 01 Dec 2023 20:54:53 GMT content-length: 0 location: https://sync.gonet-ads.com/match/SkyAdvert?id=be9fe05e-bd8f-fcbd-c0df-d3b5691c6bb7 set-cookie: sky_uuid=be9fe05e-bd8f-fcbd-c0df-d3b5691c6bb7; max-age=157680000; path=/; HttpOnly; secure; SameSite=None x-movieads-country: NO X-Firefox-Spdy: h2`

	www.acint.net/mc/?dp=167	193.3.184.135	302 Found	154 B
URL GET HTTP/2 www.acint.net/mc/?dp=167 IP 193.3.184.135:443 ASN #50214 QWARTA LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.acint.net FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1 ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 154 B (154 bytes) Hash cfbeaf604823f038b8b46f0ac862b98c 7b9eb1dac48e74fa5f418bc456cb410f88b81d98 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319 HTTP Headers GET /mc/?dp=167 HTTP/1.1 Host: www.acint.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 302 Found server: openresty date: Fri, 01 Dec 2023 20:54:53 GMT content-type: text/html content-length: 154 location: /mc/?dp=167&tc=1 set-cookie: test_cookie=CheckForPermission; path=/; Secure; SameSite=None; domain=.acint.net; expires=Fri, 01-Dec-23 21:04:53 GMT aid=fwAAAWVqSB0n/jbru+FxAnBO9uArXikJ9bP7KWs+DcG51+8Z; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None X-Firefox-Spdy: h2`

	www.acint.net/rmatch?dp=167&euid=30dd7735-cf40-e7d8-96a0-75795845c1ef&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D	193.3.184.135	302 Found	154 B
URL GET HTTP/2 www.acint.net/rmatch?dp=167&euid=30dd7735-cf40-e7d8-96a0-75795845c1ef&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D IP 193.3.184.135:443 ASN #50214 QWARTA LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.acint.net FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1 ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 154 B (154 bytes) Hash cfbeaf604823f038b8b46f0ac862b98c 7b9eb1dac48e74fa5f418bc456cb410f88b81d98 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319 HTTP Headers GET /rmatch?dp=167&euid=30dd7735-cf40-e7d8-96a0-75795845c1ef&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D HTTP/1.1 Host: www.acint.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: test_cookie=CheckForPermission; aid=fwAAAWVqSB0n/jbru+FxAnBO9uArXikJ9bP7KWs+DcG51+8Z Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 302 Found server: openresty date: Fri, 01 Dec 2023 20:54:53 GMT content-type: text/html content-length: 154 location: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcode.moviead55.ru%252Fgo%252Fcsync%253Fcn%253Dsapecookie%2526bid%253D%2524%257BUSER_ID%257D&dp=14 p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" set-cookie: cSyncDp14v4=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net expires: Wed, 19 Apr 2000 11:43:00 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 X-Firefox-Spdy: h2

	cdn.jsdelivr.net/npm/venom-player@0.2.86/dist/theme-classic.js	151.101.193.229	200 OK	5.7 kB
URL GET HTTP/2 cdn.jsdelivr.net/npm/venom-player@0.2.86/dist/theme-classic.js IP 151.101.193.229:443 ASN #54113 FASTLY Requested by https://api.strvid.ws/embed/movie/455 Certificate IssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT File type ASCII text, with very long lines (15451), with no line terminators Size 5.7 kB (5651 bytes) Hash 210c3f63bba6881ea3787a533af7cca0 5f3766edd39ae2502c8ee06bb3630cc447f6f216 b4e7dc4a29652ef34ede138da2d02209e51d9f3f2a8c07d5e891a85fca16a822 HTTP Headers `GET /npm/venom-player@0.2.86/dist/theme-classic.js HTTP/1.1 Host: cdn.jsdelivr.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://api.strvid.ws DNT: 1 Connection: keep-alive Referer: https://api.strvid.ws/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * cache-control: public, max-age=31536000, s-maxage=31536000, immutable cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload content-type: application/javascript; charset=utf-8 x-jsd-version: 0.2.86 x-jsd-version-type: version etag: W/"3c5b-Xzdm7dOa4lAsjuBrs2MMxEf28hY" content-encoding: br accept-ranges: bytes date: Fri, 01 Dec 2023 20:54:53 GMT age: 4996005 x-served-by: cache-fra-eddf8230100-FRA, cache-bma1677-BMA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 content-length: 5651 X-Firefox-Spdy: h2

	s.myangular.life/ws?cdn	116.202.233.126		0 B
URL s.myangular.life/ws?cdn IP 116.202.233.126:0 ASN #24940 Hetzner Online GmbH Certificate IssuerSectigo Limited Subjects.myangular.life Fingerprint3A:21:0F:72:24:43:49:14:06:28:C6:D0:A6:10:6B:D7:B2:EA:5A:66 ValidityTue, 04 Apr 2023 00:00:00 GMT - Sat, 04 May 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /ws?cdn HTTP/1.1 Host: s.myangular.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: https://api.strvid.ws Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: gAK2lKKrkYYsTTz7YifqKQ== DNT: 1 Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols Server: nginx Date: Fri, 01 Dec 2023 20:54:53 GMT Connection: upgrade Upgrade: websocket Sec-WebSocket-Accept: tIrwdE+qj23Wa1hJaqKf58sj1B0=`

	logger.moviead55.ru/logger.php?t=cdiv&c=805e1579-dbe0-4830-bffa-dd6b2459b8b3&a=&m=221&v=647a534f9f5fb9ced25ee7db57ef9c72&o=	193.200.65.146	200 OK	81 B
URL GET HTTP/2 logger.moviead55.ru/logger.php?t=cdiv&c=805e1579-dbe0-4830-bffa-dd6b2459b8b3&a=&m=221&v=647a534f9f5fb9ced25ee7db57ef9c72&o= IP 193.200.65.146:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data Size 81 B (81 bytes) Hash b357a19c87624c7c4d131aeeb4ae677f c7a9c45fd419815a5ab1998503a9f03514c0e229 497790947d4666760ce38f3c00e852c71fdb66cae849bae8e9ede352719e1581 HTTP Headers GET /logger.php?t=cdiv&c=805e1579-dbe0-4830-bffa-dd6b2459b8b3&a=&m=221&v=647a534f9f5fb9ced25ee7db57ef9c72&o= HTTP/1.1 Host: logger.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:53 GMT content-type: Content-Type: image/png vary: Accept-Encoding x-movieads-le: true x-movieads-country: NO content-encoding: gzip X-Firefox-Spdy: h2`

	user91471.clients-cdnnow.ru/yasdk/vw.js?v3	185.40.155.13		1.4 kB
URL user91471.clients-cdnnow.ru/yasdk/vw.js?v3 IP 185.40.155.13:0 ASN #21030 Docker LTD File type gzip compressed data, from Unix\012- data Size 1.4 kB (1399 bytes) Hash 26be30e7f79fe70bc6fb32d0ead8853c 5ece4a7728972a402883b277248365ec7046ea66 0f20ba4a2e44b13c48aa10b0cae5ba38df53d239c3a862ba47e46cf7bd822ca4 HTTP Headers `GET /yasdk/vw.js?v3 HTTP/1.1 Host: user91471.clients-cdnnow.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:53 GMT content-type: application/javascript last-modified: Fri, 21 Jul 2023 13:34:19 GMT vary: Accept-Encoding etag: W/"64ba895b-12fc" x-movieads-country: RU content-encoding: gzip x-edge-cache: HIT x-edge-ip: 172.19.32.3 X-Firefox-Spdy: h2`

	otclick-adv.ru/core/match.gif?s=30&reference=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dotclkbid%26bid%3D%23%7BUID%7D	139.45.228.135	302 Found	124 B
URL GET HTTP/2 otclick-adv.ru/core/match.gif?s=30&reference=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dotclkbid%26bid%3D%23%7BUID%7D IP 139.45.228.135:443 ASN #9002 RETN Limited Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subjectotclick.ru Fingerprint3A:7D:83:98:7E:DD:BF:D7:8A:A8:6E:FB:B0:9E:9F:DF:A9:37:C8:54 ValidityMon, 02 Oct 2023 16:11:22 GMT - Sun, 31 Dec 2023 16:11:21 GMT File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 124 B (124 bytes) Hash c73e35f73ed5c795c70cf66e99088b7c 63a9ffe5d0e5b4070819b95ef564a58d8a3a3a1c 80034a9712f07e6b0577c7e5bf6d5d718736593e7d21c81dd1a3cbdb4eb860de HTTP Headers GET /core/match.gif?s=30&reference=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dotclkbid%26bid%3D%23%7BUID%7D HTTP/1.1 Host: otclick-adv.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 302 Found server: nginx/1.24.0 date: Fri, 01 Dec 2023 20:54:53 GMT content-length: 124 location: https://code.moviead55.ru/go/csync?cn=otclkbid&bid=VUG31mKFfTelneA p3p: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA cache-control: no-cache, max-age=0, must-revalidate, no-store pragma: no-cache expires: Thursday, 01-Jan-1970 00:00:00 GMT set-cookie: idntfy=VUG31mKFfTelneA; expires=Mon, 28-Nov-2033 20:54:53 GMT; domain=otclick-adv.ru; path=/core; SameSite=None; Secure alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400 X-Firefox-Spdy: h2

	dm-eu.hybrid.ai/match?id=185&burl=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dhbrdcookie2%26bid%3D%24%7BVID%7D	37.230.131.16	302 Found	0 B
URL GET HTTP/2 dm-eu.hybrid.ai/match?id=185&burl=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dhbrdcookie2%26bid%3D%24%7BVID%7D IP 37.230.131.16:443 ASN #58272 LeaderTelecom B.V. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerSectigo Limited Subject.hybrid.ai Fingerprint40:F9:88:C5:EF:2B:26:9C:61:DC:CC:ED:B1:67:03:F4:E2:CC:B7:C8 ValidityThu, 14 Sep 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /match?id=185&burl=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dhbrdcookie2%26bid%3D%24%7BVID%7D HTTP/1.1 Host: dm-eu.hybrid.ai User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 302 Found date: Fri, 01 Dec 2023 20:54:53 GMT content-length: 0 cache-control: no-cache, no-store pragma: no-cache expires: -1 location: https://code.moviead55.ru/go/csync?cn=hbrdcookie2&bid=86236e1e32982c274142 set-cookie: vid=86236e1e32982c274142; Expires=Sat, 30 Nov 2024 20:54:53 GMT; Domain=.hybrid.ai; Path=/; SameSite=None; Secure p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC" x-mode: 554 x-xss-protection: 1; mode=block access-control-allow-origin: https://hd.3lordserial.xyz access-control-allow-credentials: true server: Hybrid Web Server X-Firefox-Spdy: h2

	api.stiven-king.com/storage.html	5.183.209.191	200 OK	426 B
URL GET HTTP/1.1 api.stiven-king.com/storage.html IP 5.183.209.191:443 ASN #206264 Amarutu Technology Ltd Requested by https://api.strvid.ws/embed/movie/455 Certificate IssuerLet's Encrypt Subject.stiven-king.com FingerprintA5:D2:DD:E9:E4:81:45:1B:AD:29:61:50:C3:6A:18:61:28:DE:6F:8A ValidityFri, 29 Sep 2023 04:00:49 GMT - Thu, 28 Dec 2023 04:00:48 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 426 B (426 bytes) Hash 6f0af5eceb02df06d9771a821c7f1c03 e3fadc9c79be329c255348417a56bc438ad27810 0a92085060d2e4bffd6140b5f99fcec79ec0f82eaf5a41d16873d9c19ce00b7b HTTP Headers GET /storage.html HTTP/1.1 Host: api.stiven-king.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://api.strvid.ws/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:53 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 13 Sep 2023 09:52:22 GMT ETag: W/"65018656-369" Content-Encoding: gzip`

	exchange.buzzoola.com/cookiesync/redirect/skyadvert?redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbzcookie%26bid%3D%24%7BUUID%7D	138.201.34.238	301 Moved Permanently	126 B
URL GET HTTP/2 exchange.buzzoola.com/cookiesync/redirect/skyadvert?redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbzcookie%26bid%3D%24%7BUUID%7D IP 138.201.34.238:443 ASN #24940 Hetzner Online GmbH Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerSectigo Limited Subject.buzzoola.com FingerprintE6:7F:94:98:CF:E4:CF:88:C7:8C:FC:16:A3:D7:D0:10:4E:EC:AB:F1 ValidityMon, 04 Sep 2023 00:00:00 GMT - Fri, 04 Oct 2024 23:59:59 GMT File type HTML document, ASCII text Size 126 B (126 bytes) Hash 95d8deb55bddd69145e5e0a59cd04b94 90edcfc4c247b09f24dfd5c7f18d6e9c3082cf85 11a152cd6ed82a47a6d39a1d4b8aa423b99df60931efd12b5f41258278ff5bf4 HTTP Headers GET /cookiesync/redirect/skyadvert?redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbzcookie%26bid%3D%24%7BUUID%7D HTTP/1.1 Host: exchange.buzzoola.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 301 Moved Permanently server: nginx date: Fri, 01 Dec 2023 20:54:53 GMT content-type: text/html; charset=utf-8 content-length: 126 location: https://code.moviead55.ru/go/csync?cn=bzcookie&bid=62702512-19f3-4f1f-709f-f1701214a947 serverid: TODO X-Firefox-Spdy: h2`

	match.ohmy.bid/cm?ssp=skyadv&redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dohmybid%26bid%3D%24%7BUUID%7D	167.235.9.235	302 Found	0 B
URL GET HTTP/2 match.ohmy.bid/cm?ssp=skyadv&redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dohmybid%26bid%3D%24%7BUUID%7D IP 167.235.9.235:443 ASN #24940 Hetzner Online GmbH Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subjectmatch.ohmy.bid Fingerprint9E:80:FE:F1:53:4B:43:82:19:E2:9C:5A:93:AF:43:96:5D:6C:7B:69 ValidityFri, 24 Nov 2023 20:06:51 GMT - Thu, 22 Feb 2024 20:06:50 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /cm?ssp=skyadv&redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dohmybid%26bid%3D%24%7BUUID%7D HTTP/1.1 Host: match.ohmy.bid User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 302 Found server: nginx date: Fri, 01 Dec 2023 20:54:53 GMT content-length: 0 bidder: bid-01 location: https://code.moviead55.ru/go/csync?cn=ohmybid&bid=8ff58d1b-9d36-4f21-a30f-e57ae193aeac set-cookie: uid=8ff58d1b-9d36-4f21-a30f-e57ae193aeac.656a481d.d1f4aba5648db48c; domain=.ohmy.bid; path=/; expires=Sun, 31-Dec-2023 20:54:53 GMT; SameSite=None; Secure; access-control-allow-credentials: true X-Firefox-Spdy: h2`

	t8.zcvh.net/v1/ws	46.4.80.144		0 B
URL t8.zcvh.net/v1/ws IP 46.4.80.144:0 ASN #24940 Hetzner Online GmbH File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /v1/ws HTTP/1.1 Host: t8.zcvh.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: https://api.strvid.ws Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: G/DHEiNaweyvBHvAV7ngLQ== DNT: 1 Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols Server: nginx Date: Fri, 01 Dec 2023 20:54:54 GMT Connection: upgrade Upgrade: websocket Sec-WebSocket-Accept: aWXqBQCj3HLjCCZrnPacfedp4wE=`

	kimberlite.io/rtb/sync/skyadvert?u=b11f561f-9141-e7c6-4889-17625eb811c6	217.199.220.44	307 Temporary Redirect	0 B
URL GET HTTP/1.1 kimberlite.io/rtb/sync/skyadvert?u=b11f561f-9141-e7c6-4889-17625eb811c6 IP 217.199.220.44:443 ASN #0 Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.kimberlite.io Fingerprint94:44:D9:27:EE:9B:5F:DE:36:07:ED:BA:1A:1D:62:2A:31:B6:43:72 ValidityFri, 10 Mar 2023 07:40:01 GMT - Wed, 10 Apr 2024 07:40:00 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /rtb/sync/skyadvert?u=b11f561f-9141-e7c6-4889-17625eb811c6 HTTP/1.1 Host: kimberlite.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 307 Temporary Redirect Server: nginx Date: Fri, 01 Dec 2023 20:54:54 GMT Content-Length: 0 Connection: keep-alive cache-control: no-store access-control-allow-credentials: true access-control-allow-origin: * location: https://code.moviead55.ru/go/csync?cn=solta&bid=ZWpIHhCxuEg set-cookie: u=ZWpIHhCxuEg~3ibymx4COHG4rgC8hbNf8i9N5n8; path=/; max-age=7776000; samesite=none; httponly; secure n=; max-age=0; samesite=none; httponly; secure referrer-policy: no-referrer server-timing: app;srv=8;dur=0.0002

	sync.gonet-ads.com/match/SkyAdvert?id=be9fe05e-bd8f-fcbd-c0df-d3b5691c6bb7	188.42.105.236	200 OK	43 B
URL GET HTTP/2 sync.gonet-ads.com/match/SkyAdvert?id=be9fe05e-bd8f-fcbd-c0df-d3b5691c6bb7 IP 188.42.105.236:443 ASN #0 Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerSectigo Limited Subject.gonet-ads.com Fingerprint2B:BE:BF:75:0A:67:AA:2D:FA:0A:7F:92:F4:37:AE:9B:DD:47:68:2D ValidityWed, 07 Jun 2023 00:00:00 GMT - Tue, 11 Jun 2024 23:59:59 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash 07fff40b5dd495aca2ac4e1c3fbc60aa e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4 a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7 HTTP Headers `GET /match/SkyAdvert?id=be9fe05e-bd8f-fcbd-c0df-d3b5691c6bb7 HTTP/1.1 Host: sync.gonet-ads.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:54 GMT content-type: image/gif content-length: 43 strict-transport-security: max-age=31536000; includeSubDomains; preload x-frame-options: SAMEORIGIN x-content-type-options: nosniff x-xss-protection: 1; mode=block X-Firefox-Spdy: h2`

	cdn.jsdelivr.net/npm/venom-player@0.2.86/dist/189.js	151.101.193.229	200 OK	143 kB
URL GET HTTP/3 cdn.jsdelivr.net/npm/venom-player@0.2.86/dist/189.js IP 151.101.193.229:443 ASN #54113 FASTLY Requested by https://api.strvid.ws/embed/movie/455 Certificate IssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT File type ASCII text, with very long lines (65536), with no line terminators Size 143 kB (142555 bytes) Hash ea5b3848f4922f116f42e286c2a09ea2 8e3950a1b871be2027f3f9f5b4fe0fa30fe97f47 5b812741df3698efa4c953adc84499a05a572f7a6f2ab7731c8c7774aa51e57c HTTP Headers `GET /npm/venom-player@0.2.86/dist/189.js HTTP/1.1 Host: cdn.jsdelivr.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://api.strvid.ws DNT: 1 Connection: keep-alive Referer: https://api.strvid.ws/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK content-length: 142555 access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * cache-control: public, max-age=31536000, s-maxage=31536000, immutable cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload content-type: application/javascript; charset=utf-8 x-jsd-version: 0.2.86 x-jsd-version-type: version etag: W/"7f90d-jjlQobhxviAn8/n1tP4Pow/pf0c" content-encoding: br accept-ranges: bytes date: Fri, 01 Dec 2023 20:54:54 GMT age: 2744310 x-served-by: cache-fra-etou8220077-FRA, cache-bma1632-BMA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

	cdn.jsdelivr.net/npm/venom-player@0.2.86/dist/dash.js	151.101.193.229	200 OK	84 B
URL GET HTTP/3 cdn.jsdelivr.net/npm/venom-player@0.2.86/dist/dash.js IP 151.101.193.229:443 ASN #54113 FASTLY Requested by https://api.strvid.ws/embed/movie/455 Certificate IssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT File type ASCII text, with no line terminators Size 84 B (84 bytes) Hash 84eee3ca3b339eebee1fa872f1ece64a ac28843b7fcdc5023f65c747e51f009562b1c478 94a1443f69cfc9942e6a9d2ed2fc644702e271683b2e703f9adf65113a430ed5 HTTP Headers `GET /npm/venom-player@0.2.86/dist/dash.js HTTP/1.1 Host: cdn.jsdelivr.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://api.strvid.ws DNT: 1 Connection: keep-alive Referer: https://api.strvid.ws/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK content-length: 84 access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * cache-control: public, max-age=31536000, s-maxage=31536000, immutable cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload content-type: application/javascript; charset=utf-8 x-jsd-version: 0.2.86 x-jsd-version-type: version etag: W/"71-rCiEO3/NxQI/ZcdH5R8AlWKxxHg" content-encoding: br accept-ranges: bytes date: Fri, 01 Dec 2023 20:54:54 GMT age: 4996006 x-served-by: cache-fra-etou8220030-FRA, cache-bma1632-BMA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

	vast.playmatic.video/vast.php?format=7&jsv=1.0&partner_id=8459371	94.103.11.164	200 OK	80 B
URL POST HTTP/1.1 vast.playmatic.video/vast.php?format=7&jsv=1.0&partner_id=8459371 IP 94.103.11.164:443 ASN #200904 Foxcloud Llp Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subjectvast.playmatic.video Fingerprint74:F3:80:77:BE:73:B2:65:AA:35:3E:A8:10:8F:B4:C8:B7:19:35:C2 ValiditySat, 28 Oct 2023 13:51:28 GMT - Fri, 26 Jan 2024 13:51:27 GMT File type HTML document, ASCII text, with no line terminators Size 80 B (80 bytes) Hash f68e1549c6af686623fe6854fc863dde ec80575f0562498fc197dc7148c4384050ef2298 9feb7b830608e95374df9ce7b85e99edc9544f595308c85d543b3d860fd3645f HTTP Headers POST /vast.php?format=7&jsv=1.0&partner_id=8459371 HTTP/1.1 Host: vast.playmatic.video User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/x-www-form-urlencoded Content-Length: 0 Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 01 Dec 2023 20:54:54 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/8.2.11 Set-Cookie: cookie_work=1701464094; expires=Mon, 28 Nov 2033 20:54:54 GMT; Max-Age=315360000; path=/; domain=playmatic.video; secure; SameSite=None Access-Control-Allow-Origin: https://hd.3lordserial.xyz Access-Control-Allow-Credentials: true Content-Encoding: gzip`

	sync.dmp.otm-r.com/match/skyadvert	148.251.9.22	204 No Content	0 B
URL GET HTTP/2 sync.dmp.otm-r.com/match/skyadvert IP 148.251.9.22:443 ASN #24940 Hetzner Online GmbH Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.dmp.otm-r.com FingerprintC6:A2:9D:82:0D:D1:C1:2D:A4:ED:7F:05:13:52:5B:94:6B:10:58:D6 ValidityMon, 19 Jun 2023 10:50:51 GMT - Sat, 20 Jul 2024 10:50:50 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /match/skyadvert HTTP/1.1 Host: sync.dmp.otm-r.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 204 No Content server: nginx/1.17.2 date: Fri, 01 Dec 2023 20:54:54 GMT access-control-allow-origin: * X-Firefox-Spdy: h2`

	hd.3lordserial.xyz/templates/lordfun/images/favicon.png	104.21.60.176	200 OK	3.1 kB
URL GET HTTP/3 hd.3lordserial.xyz/templates/lordfun/images/favicon.png IP 104.21.60.176:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject3lordserial.xyz Fingerprint55:F3:EC:F8:C5:A9:65:3A:AD:8F:B2:1A:59:6B:1A:41:7E:A0:65:DF ValidityWed, 29 Nov 2023 21:49:20 GMT - Tue, 27 Feb 2024 21:49:19 GMT File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data Size 3.1 kB (3114 bytes) Hash 51ed3314ca236d302b7a4c229b216a84 a3bd7ccc45f54b7f2a0c1a572bb628ebb2142270 ca732814bb0b1808000642169d9ea4616a6b0ffcc480cbdd01c3ebe60b871780 HTTP Headers GET /templates/lordfun/images/favicon.png HTTP/1.1 Host: hd.3lordserial.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/146-kasl-sv-13.html Cookie: PHPSESSID=c0506767ddef664786c878030c4f8c6b; _ma=96c8bcbc-89b2-47f3-b910-3f5529571cb5; viewed_ids=146 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 01 Dec 2023 20:54:54 GMT content-type: image/png last-modified: Tue, 06 Sep 2022 06:42:38 GMT vary: Accept-Encoding etag: W/"6316ebde-c2a" cache-control: max-age=31536000 cf-cache-status: HIT age: 4192 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eArE7M2PBw8DkjTWrUBFiAkZ1QzC5DfRNeUcm4Y%2FYTfKIoTwe9xdBds%2FjNs9p3Exig18buMHbAWeiwYnI3d4jVWYDMcep7ITjPQHcH%2FvCd4dGlji3vYzFi542yhHKMRdnAgFhBI%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a5c5a3356a8-OSL alt-svc: h3=":443"; ma=86400

	code.moviead55.ru/go/csync?cn=otclkbid&bid=VUG31mKFfTelneA	193.200.65.150	200 OK	0 B
URL GET HTTP/2 code.moviead55.ru/go/csync?cn=otclkbid&bid=VUG31mKFfTelneA IP 193.200.65.150:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /go/csync?cn=otclkbid&bid=VUG31mKFfTelneA HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: sky_uuid=be9fe05e-bd8f-fcbd-c0df-d3b5691c6bb7 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:54 GMT content-type: image/jpeg content-length: 0 set-cookie: otclkbid=VUG31mKFfTelneA; max-age=86400; path=/; HttpOnly; secure; SameSite=None x-movieads-country: NO X-Firefox-Spdy: h2`

	code.moviead55.ru/go/csync?cn=bzcookie&bid=62702512-19f3-4f1f-709f-f1701214a947	193.200.65.150	200 OK	0 B
URL GET HTTP/2 code.moviead55.ru/go/csync?cn=bzcookie&bid=62702512-19f3-4f1f-709f-f1701214a947 IP 193.200.65.150:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /go/csync?cn=bzcookie&bid=62702512-19f3-4f1f-709f-f1701214a947 HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: sky_uuid=be9fe05e-bd8f-fcbd-c0df-d3b5691c6bb7 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:54 GMT content-type: image/jpeg content-length: 0 set-cookie: bzcookie=62702512-19f3-4f1f-709f-f1701214a947; max-age=86400; path=/; HttpOnly; secure; SameSite=None x-movieads-country: NO X-Firefox-Spdy: h2`

	code.moviead55.ru/go/csync?cn=ohmybid&bid=8ff58d1b-9d36-4f21-a30f-e57ae193aeac	193.200.65.150	200 OK	0 B
URL GET HTTP/2 code.moviead55.ru/go/csync?cn=ohmybid&bid=8ff58d1b-9d36-4f21-a30f-e57ae193aeac IP 193.200.65.150:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /go/csync?cn=ohmybid&bid=8ff58d1b-9d36-4f21-a30f-e57ae193aeac HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: sky_uuid=be9fe05e-bd8f-fcbd-c0df-d3b5691c6bb7 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:54 GMT content-type: image/jpeg content-length: 0 set-cookie: ohmybid=8ff58d1b-9d36-4f21-a30f-e57ae193aeac; max-age=86400; path=/; HttpOnly; secure; SameSite=None x-movieads-country: NO X-Firefox-Spdy: h2`

	code.moviead55.ru/go/csync?cn=hbrdcookie2&bid=86236e1e32982c274142	193.200.65.150	200 OK	0 B
URL GET HTTP/2 code.moviead55.ru/go/csync?cn=hbrdcookie2&bid=86236e1e32982c274142 IP 193.200.65.150:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /go/csync?cn=hbrdcookie2&bid=86236e1e32982c274142 HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: sky_uuid=be9fe05e-bd8f-fcbd-c0df-d3b5691c6bb7 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:54 GMT content-type: image/jpeg content-length: 0 set-cookie: hbrdcookie2=86236e1e32982c274142; max-age=86400; path=/; HttpOnly; secure; SameSite=None x-movieads-country: NO X-Firefox-Spdy: h2`

	ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcode.moviead55.ru%252Fgo%252Fcsync%253Fcn%253Dsapecookie%2526bid%253D%2524%257BUSER_ID%257D&dp=14	193.3.184.218	302 Moved Temporarily	142 B
URL GET HTTP/1.1 ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcode.moviead55.ru%252Fgo%252Fcsync%253Fcn%253Dsapecookie%2526bid%253D%2524%257BUSER_ID%257D&dp=14 IP 193.3.184.218:443 ASN #50214 QWARTA LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.sape.ru FingerprintF9:61:5C:64:81:FD:57:C2:4A:BD:6B:12:D4:7E:02:5E:83:8E:3E:40 ValiditySun, 08 Oct 2023 01:41:50 GMT - Sat, 06 Jan 2024 01:41:49 GMT File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 142 B (142 bytes) Hash 82c98e8e012b79c922655461171cc2fa 0828d79135573276005b04be42d79a8a3291292b 745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c HTTP Headers GET /rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcode.moviead55.ru%252Fgo%252Fcsync%253Fcn%253Dsapecookie%2526bid%253D%2524%257BUSER_ID%257D&dp=14 HTTP/1.1 Host: ssp-rtb.sape.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 01 Dec 2023 20:54:54 GMT Content-Type: text/html Content-Length: 142 Connection: keep-alive P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Location: https://acint.net/rmatch?dp=14&euid=1A03420A1E486A651C00FF7C02ED3582&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D Expires: Wed, 19 Apr 2000 11:43:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Set-Cookie: sspuid=CkIDGmVqSB58/wAcgjXtAgE3p9toolFP37V7HmgJRdulaXHU; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None

	ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D	193.3.184.218	302 Moved Temporarily	142 B
URL GET HTTP/1.1 ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D IP 193.3.184.218:443 ASN #50214 QWARTA LLC Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subject.sape.ru FingerprintF9:61:5C:64:81:FD:57:C2:4A:BD:6B:12:D4:7E:02:5E:83:8E:3E:40 ValiditySun, 08 Oct 2023 01:41:50 GMT - Sat, 06 Jan 2024 01:41:49 GMT File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 142 B (142 bytes) Hash 82c98e8e012b79c922655461171cc2fa 0828d79135573276005b04be42d79a8a3291292b 745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c HTTP Headers GET /rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D HTTP/1.1 Host: ssp-rtb.sape.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Cookie: sspuid=CkIDGmVqSB58/wAcgjXtAgE3p9toolFP37V7HmgJRdulaXHU Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 01 Dec 2023 20:54:54 GMT Content-Type: text/html Content-Length: 142 Connection: keep-alive P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Location: https://acint.net/match?dp=14&euid=1A03420A1E486A651C00FF7C02ED3582 Expires: Wed, 19 Apr 2000 11:43:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0`

	dm-eu.hybrid.ai/match?id=106&vid=0100007F1D486A65EB36FE270271E1BB	37.230.131.16	302 Found	0 B
URL GET HTTP/2 dm-eu.hybrid.ai/match?id=106&vid=0100007F1D486A65EB36FE270271E1BB IP 37.230.131.16:443 ASN #58272 LeaderTelecom B.V. Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerSectigo Limited Subject.hybrid.ai Fingerprint40:F9:88:C5:EF:2B:26:9C:61:DC:CC:ED:B1:67:03:F4:E2:CC:B7:C8 ValidityThu, 14 Sep 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /match?id=106&vid=0100007F1D486A65EB36FE270271E1BB HTTP/1.1 Host: dm-eu.hybrid.ai User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Cookie: vid=86236e1e32982c274142 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 302 Found date: Fri, 01 Dec 2023 20:54:54 GMT content-length: 0 cache-control: no-cache, no-store pragma: no-cache expires: -1 location: https://pixel.onaudience.com/?partner=207&mapped=86236e1e32982c274142&noredirect=1 p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC" x-mode: 564 x-xss-protection: 1; mode=block access-control-allow-origin: https://www.acint.net access-control-allow-credentials: true server: Hybrid Web Server X-Firefox-Spdy: h2`

	sync.gonet-ads.com/match/sape.js?id=0100007F1D486A65EB36FE270271E1BB	188.42.105.236	200 OK	43 B
URL GET HTTP/2 sync.gonet-ads.com/match/sape.js?id=0100007F1D486A65EB36FE270271E1BB IP 188.42.105.236:443 ASN #0 Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerSectigo Limited Subject.gonet-ads.com Fingerprint2B:BE:BF:75:0A:67:AA:2D:FA:0A:7F:92:F4:37:AE:9B:DD:47:68:2D ValidityWed, 07 Jun 2023 00:00:00 GMT - Tue, 11 Jun 2024 23:59:59 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash 07fff40b5dd495aca2ac4e1c3fbc60aa e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4 a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7 HTTP Headers `GET /match/sape.js?id=0100007F1D486A65EB36FE270271E1BB HTTP/1.1 Host: sync.gonet-ads.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:54 GMT content-type: image/gif content-length: 43 strict-transport-security: max-age=31536000; includeSubDomains; preload x-frame-options: SAMEORIGIN x-content-type-options: nosniff x-xss-protection: 1; mode=block X-Firefox-Spdy: h2`

	exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D	138.201.34.238	301 Moved Permanently	115 B
URL GET HTTP/2 exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D IP 138.201.34.238:443 ASN #24940 Hetzner Online GmbH Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerSectigo Limited Subject.buzzoola.com FingerprintE6:7F:94:98:CF:E4:CF:88:C7:8C:FC:16:A3:D7:D0:10:4E:EC:AB:F1 ValidityMon, 04 Sep 2023 00:00:00 GMT - Fri, 04 Oct 2024 23:59:59 GMT File type HTML document, ASCII text Size 115 B (115 bytes) Hash 43be07fca70e6d57a19e4274d0193143 fdff03cfc2f311ecb58eb5f3b6096de6bbc9cd51 584eecc9ef827c38b9e19f99ab9768c11efcb770949d533a3240b4f821f6ff64 HTTP Headers GET /cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D HTTP/1.1 Host: exchange.buzzoola.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 301 Moved Permanently server: nginx date: Fri, 01 Dec 2023 20:54:47 GMT content-type: text/html; charset=utf-8 content-length: 115 location: https://www.acint.net/match?dp=126&euid=2a86ad72-5358-44b7-43fb-493fbc1fd47f serverid: TODO X-Firefox-Spdy: h2`

	match.ohmy.bid/cm?ssp=sape&redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D	167.235.9.235	302 Found	0 B
URL GET HTTP/2 match.ohmy.bid/cm?ssp=sape&redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D IP 167.235.9.235:443 ASN #24940 Hetzner Online GmbH Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subjectmatch.ohmy.bid Fingerprint9E:80:FE:F1:53:4B:43:82:19:E2:9C:5A:93:AF:43:96:5D:6C:7B:69 ValidityFri, 24 Nov 2023 20:06:51 GMT - Thu, 22 Feb 2024 20:06:50 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /cm?ssp=sape&redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D HTTP/1.1 Host: match.ohmy.bid User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Cookie: uid=8ff58d1b-9d36-4f21-a30f-e57ae193aeac.656a481d.d1f4aba5648db48c Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 302 Found server: nginx date: Fri, 01 Dec 2023 20:54:54 GMT content-length: 0 bidder: bid-23 location: https://www.acint.net/match?dp=217&euid=8ff58d1b-9d36-4f21-a30f-e57ae193aeac access-control-allow-credentials: true X-Firefox-Spdy: h2`

	code.moviead55.ru/go/csync?cn=solta&bid=ZWpIHhCxuEg	193.200.65.150	200 OK	0 B
URL GET HTTP/2 code.moviead55.ru/go/csync?cn=solta&bid=ZWpIHhCxuEg IP 193.200.65.150:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /go/csync?cn=solta&bid=ZWpIHhCxuEg HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: sky_uuid=be9fe05e-bd8f-fcbd-c0df-d3b5691c6bb7; otclkbid=VUG31mKFfTelneA; bzcookie=62702512-19f3-4f1f-709f-f1701214a947; ohmybid=8ff58d1b-9d36-4f21-a30f-e57ae193aeac; hbrdcookie2=86236e1e32982c274142 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:54 GMT content-type: image/jpeg content-length: 0 set-cookie: solta=ZWpIHhCxuEg; max-age=86400; path=/; HttpOnly; secure; SameSite=None x-movieads-country: NO X-Firefox-Spdy: h2`

	sync.dmp.otm-r.com/match/sape?id=0100007F1D486A65EB36FE270271E1BB	148.251.9.22	204 No Content	0 B
URL GET HTTP/2 sync.dmp.otm-r.com/match/sape?id=0100007F1D486A65EB36FE270271E1BB IP 148.251.9.22:443 ASN #24940 Hetzner Online GmbH Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerGlobalSign nv-sa Subject.dmp.otm-r.com FingerprintC6:A2:9D:82:0D:D1:C1:2D:A4:ED:7F:05:13:52:5B:94:6B:10:58:D6 ValidityMon, 19 Jun 2023 10:50:51 GMT - Sat, 20 Jul 2024 10:50:50 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /match/sape?id=0100007F1D486A65EB36FE270271E1BB HTTP/1.1 Host: sync.dmp.otm-r.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 204 No Content server: nginx/1.17.2 date: Fri, 01 Dec 2023 20:54:54 GMT access-control-allow-origin: * X-Firefox-Spdy: h2`

	kimberlite.io/rtb/sync/sape2?u=0100007F1D486A65EB36FE270271E1BB	217.199.220.44	307 Temporary Redirect	0 B
URL GET HTTP/1.1 kimberlite.io/rtb/sync/sape2?u=0100007F1D486A65EB36FE270271E1BB IP 217.199.220.44:443 ASN #0 Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerGlobalSign nv-sa Subject.kimberlite.io Fingerprint94:44:D9:27:EE:9B:5F:DE:36:07:ED:BA:1A:1D:62:2A:31:B6:43:72 ValidityFri, 10 Mar 2023 07:40:01 GMT - Wed, 10 Apr 2024 07:40:00 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /rtb/sync/sape2?u=0100007F1D486A65EB36FE270271E1BB HTTP/1.1 Host: kimberlite.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Cookie: u=ZWpIHhCxuEg~3ibymx4COHG4rgC8hbNf8i9N5n8 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 307 Temporary Redirect Server: nginx Date: Fri, 01 Dec 2023 20:54:54 GMT Content-Length: 0 Connection: keep-alive cache-control: no-store access-control-allow-credentials: true access-control-allow-origin: * set-cookie: u=ZWpIHhCxuEg~3ibymx4COHG4rgC8hbNf8i9N5n8; path=/; max-age=7776000; samesite=none; httponly; secure as=hPJ_CGVqSB4; max-age=604800; samesite=none; httponly; secure f=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D243%26euid%3DZWpIHhCxuEg; max-age=30; samesite=none; httponly; secure n=1; max-age=30; samesite=none; httponly; secure location: https://sync.dsp.solta.io/match/kimberlite?id=ZWpIHhCxuEg referrer-policy: no-referrer server-timing: app;srv=9;dur=0.0003

	sync.adspend.space/sape?uid=0100007F1D486A65EB36FE270271E1BB	5.189.234.229	302 Found	149 B
URL GET HTTP/2 sync.adspend.space/sape?uid=0100007F1D486A65EB36FE270271E1BB IP 5.189.234.229:443 ASN #50340 OOO Network of data-centers Selectel Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subjectadspend.space Fingerprint25:A8:18:8F:99:5E:81:77:EE:CC:A2:7D:B9:A4:65:C6:29:9B:72:AF ValidityMon, 27 Nov 2023 12:15:31 GMT - Sun, 25 Feb 2024 12:15:30 GMT File type HTML document, ASCII text Size 149 B (149 bytes) Hash 23bd1456d4ba9c04e26440e66b98de64 968d894f96e6f3c55748296c31abf5f3d2252563 5174242e249e9e89af39452aa4ca18aea1d1535e0a8673f446fb6ab2d8d7c74c HTTP Headers `GET /sape?uid=0100007F1D486A65EB36FE270271E1BB HTTP/1.1 Host: sync.adspend.space User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 302 Found server: nginx/1.22.1 date: Fri, 01 Dec 2023 20:54:54 GMT content-type: text/html; charset=utf-8 content-length: 149 location: https://sync.adspend.space/check?r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D98%26euid%3D1c931d12-853d-4d5f-a5e5-985f2066ed0f set-cookie: as-user=1c931d12-853d-4d5f-a5e5-985f2066ed0f; Path=/; Max-Age=31536000; HttpOnly; Secure; SameSite=None strict-transport-security: max-age=15724800; includeSubDomains X-Firefox-Spdy: h2`

	code.moviead55.ru/go/bn?key=647a534f9f5fb9ced25ee7db57ef9c72&cp.adsource=Sw_cr_br&vt=[vt]&w=300&h=250&cp.referer=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html&fid=ab2f6a4f615f90cc&cp.tanc=	193.200.65.150		100 B
URL code.moviead55.ru/go/bn?key=647a534f9f5fb9ced25ee7db57ef9c72&cp.adsource=Sw_cr_br&vt=[vt]&w=300&h=250&cp.referer=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html&fid=ab2f6a4f615f90cc&cp.tanc= IP 193.200.65.150:0 ASN #6681 Rozetka Sp. z o.o. Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type ASCII text, with no line terminators Size 100 B (100 bytes) Hash a4069b95ec72159e5c70fe4b1b962bfc 36c057dfc913d129dbf6df7392eb745db56f08d2 feb5a5960148b3ff3b34f883c84075a8158d8475539676699b2428cd7d0f0ec7 HTTP Headers GET /go/bn?key=647a534f9f5fb9ced25ee7db57ef9c72&cp.adsource=Sw_cr_br&vt=[vt]&w=300&h=250&cp.referer=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html&fid=ab2f6a4f615f90cc&cp.tanc= HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: sky_uuid=be9fe05e-bd8f-fcbd-c0df-d3b5691c6bb7 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:53 GMT content-type: text/javascript;charset=UTF-8 vary: Accept-Encoding x-movieads-path: / x-movieads-referrer: https://hd.3lordserial.xyz/ access-control-allow-credentials: true access-control-allow-origin: https://hd.3lordserial.xyz x-movieads-udata: cache,parsed,27966 x-cache-source: Yac x-movieads-mrc: no x-movieads-ref: {"Scheme":"https","Opaque":"","User":null,"Host":"hd.3lordserial.xyz","Path":"/","RawPath":"","OmitHost":false,"ForceQuery":false,"RawQuery":"","Fragment":"","RawFragment":""} x-movieads-country: NO content-encoding: gzip X-Firefox-Spdy: h2

	match.new-programmatic.com/userbind?src=sape&id=0100007F1D486A65EB36FE270271E1BB	217.65.2.150	204 No Content	0 B
URL GET HTTP/1.1 match.new-programmatic.com/userbind?src=sape&id=0100007F1D486A65EB36FE270271E1BB IP 217.65.2.150:443 ASN #3175 Filanco LLC Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subjectad.ad-blast.ru FingerprintF3:B7:15:BC:2F:A8:7D:5A:73:CB:BC:43:B8:4C:EA:11:17:2B:7A:34 ValiditySat, 07 Oct 2023 18:59:50 GMT - Fri, 05 Jan 2024 18:59:49 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /userbind?src=sape&id=0100007F1D486A65EB36FE270271E1BB HTTP/1.1 Host: match.new-programmatic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 204 No Content Server: nginx/1.22.1 Date: Fri, 01 Dec 2023 20:54:54 GMT Content-Length: 0 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Vary: Origin`

	pix.bumlam.com/sync/sape/check?sspuid=0100007F1D486A65EB36FE270271E1BB	31.172.81.158	302 Found	0 B
URL GET HTTP/1.1 pix.bumlam.com/sync/sape/check?sspuid=0100007F1D486A65EB36FE270271E1BB IP 31.172.81.158:443 ASN #44066 diva-e Datacenters GmbH Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subject.bumlam.com Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0 ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /sync/sape/check?sspuid=0100007F1D486A65EB36FE270271E1BB HTTP/1.1 Host: pix.bumlam.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 302 Found Server: nginx Date: Fri, 01 Dec 2023 20:54:54 GMT Content-Type: image/gif Content-Length: 0 Connection: keep-alive Access-Control-Allow-Origin: https://www.acint.net Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Pragma: no-cache Expires: 05-Jun-2005 22:00:00 GMT X-Xss-Protection: 0 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://sync.bumlam.com/?src=sape

	sync.bumlam.com/?src=sap1&uid=0100007F1D486A65EB36FE270271E1BB	31.172.81.159	302 Moved Temporarily	0 B
URL GET HTTP/1.1 sync.bumlam.com/?src=sap1&uid=0100007F1D486A65EB36FE270271E1BB IP 31.172.81.159:443 ASN #44066 diva-e Datacenters GmbH Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subject.bumlam.com Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0 ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /?src=sap1&uid=0100007F1D486A65EB36FE270271E1BB HTTP/1.1 Host: sync.bumlam.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 01 Dec 2023 20:54:54 GMT Content-Length: 0 Connection: keep-alive Set-Cookie: suuid3=IiRlMTM4MzNjZS05MDhiLTExZWUtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Thu, 26 Nov 2043 20:54:54 GMT; Domain=bumlam.com; SameSite=None; Secure P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Location: //sync.bumlam.com/?src=sap1&s_data=CAIQARiekKmrBmIgMDEwMDAwN0YxRDQ4NkE2NUVCMzZGRTI3MDI3MUUxQkKiARDhODPOkIsR7obgACWQwGR8 ETag: e13833ce-908b-11ee-86e0-002590c0647c Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0

	a.utraff.com/sync?ssp=8&id=0100007F1D486A65EB36FE270271E1BB	172.64.99.14	204 No Content	0 B
URL GET HTTP/2 a.utraff.com/sync?ssp=8&id=0100007F1D486A65EB36FE270271E1BB IP 172.64.99.14:443 ASN #13335 CLOUDFLARENET Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerGoogle Trust Services LLC Subjectutraff.com Fingerprint65:F0:CB:A7:9C:1E:18:8C:D9:DE:5B:4C:46:9E:79:3E:78:F1:B0:CD ValidityThu, 12 Oct 2023 03:40:45 GMT - Wed, 10 Jan 2024 03:40:44 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /sync?ssp=8&id=0100007F1D486A65EB36FE270271E1BB HTTP/1.1 Host: a.utraff.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 204 No Content date: Fri, 01 Dec 2023 20:54:54 GMT content-type: text/plain set-cookie: preutid=1; Expires=Sun, 31 Dec 2023 23:54:54 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/ preutid=1; Expires=Sun, 31 Dec 2023 23:54:54 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/ access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization access-control-expose-headers: Content-Length,Content-Range vary: Origin cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=geMx5J6mOAEazdcG89W9hrtxswKop8aP84MI8N0WQw31%2FzzzAos0JECh7CsRu3iAT9W9YvHDm8zY5uQmBhyXk25biu4vRaWv%2FOFf3DmGOhxPgZkmy3m6BBQ%2B8xlICpE%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a60987b3696-LHR alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	sync.upravel.com/sape/sync	136.243.48.22	302 Found	0 B
URL GET HTTP/2 sync.upravel.com/sape/sync IP 136.243.48.22:443 ASN #24940 Hetzner Online GmbH Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerGlobalSign nv-sa Subject.upravel.com Fingerprint4C:ED:03:57:58:43:18:2C:CC:41:F3:3B:19:72:75:BD:29:C1:04:08 ValiditySat, 29 Apr 2023 07:48:21 GMT - Thu, 30 May 2024 07:48:20 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /sape/sync HTTP/1.1 Host: sync.upravel.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 302 Found server: nginx date: Fri, 01 Dec 2023 20:54:54 GMT content-type: image/png content-length: 0 location: https://sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0 set-cookie: session_tptc=1701464094871;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=180 session_tptc-legacy=1701464094871;Version=1;Domain=.upravel.com;Path=/;Max-Age=180 p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range access-control-expose-headers: Content-Length,Content-Range access-control-allow-credentials: false X-Firefox-Spdy: h2

	ads.adlook.me/csync?pid=sape&uid=0100007F1D486A65EB36FE270271E1BB&url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D	5.101.76.186	503 Service Unavailable	27 B
URL GET HTTP/2 ads.adlook.me/csync?pid=sape&uid=0100007F1D486A65EB36FE270271E1BB&url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D IP 5.101.76.186:443 ASN #48096 Enterprise Cloud Ltd. Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerGlobalSign nv-sa Subject.adlook.me FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32 ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT File type ASCII text, with no line terminators Size 27 B (27 bytes) Hash 435b48c70aca2dc80f8b34b5fdeb2789 ffe2c8567607568f939fa1a6f9888639b98b400c 6468ac9f9bca964f3910fc967b80781c1c8634300e36f95ae49056d91a2734bf HTTP Headers GET /csync?pid=sape&uid=0100007F1D486A65EB36FE270271E1BB&url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D HTTP/1.1 Host: ads.adlook.me User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 503 Service Unavailable content-type: text/html server: Microsoft-IIS/10.0 date: Fri, 01 Dec 2023 20:54:54 GMT content-length: 27 X-Firefox-Spdy: h2`

	nr.bidderstack.com/sape/cm?user_id=0100007F1D486A65EB36FE270271E1BB	142.132.211.137	302 Found	0 B
URL GET HTTP/1.1 nr.bidderstack.com/sape/cm?user_id=0100007F1D486A65EB36FE270271E1BB IP 142.132.211.137:443 ASN #24940 Hetzner Online GmbH Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerGoDaddy.com, Inc. Subject.bidderstack.com Fingerprint7A:83:29:BF:37:01:78:02:DF:C1:07:D8:A2:10:AB:0A:DD:11:66:B0 ValidityTue, 21 Nov 2023 08:57:57 GMT - Sun, 22 Dec 2024 08:57:57 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /sape/cm?user_id=0100007F1D486A65EB36FE270271E1BB HTTP/1.1 Host: nr.bidderstack.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Found Server: nginx Date: Fri, 01 Dec 2023 20:54:54 GMT Content-Length: 0 Connection: keep-alive Location: /sape/cm?user_id=0100007F1D486A65EB36FE270271E1BB&pupa=1 Set-Cookie: pupa=d6979f52-2616-aa83-4667-870fd419f06c; domain=.bidderstack.com; path=/; expires=Sat, 30-Nov-2024 20:54:54 GMT; Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true`

	ssp.afp.ai/api/sync/sape	45.139.25.121	302 Found	0 B
URL GET HTTP/1.1 ssp.afp.ai/api/sync/sape IP 45.139.25.121:443 ASN #34959 Kviktel LLC Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerSectigo Limited Subject.afp.ai Fingerprint6D:78:55:60:8D:74:D7:2E:9F:A5:B1:56:72:76:A6:20:F9:7E:E4:4F ValidityMon, 23 Oct 2023 00:00:00 GMT - Tue, 24 Sep 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /api/sync/sape HTTP/1.1 Host: ssp.afp.ai User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 302 Found Server: nginx/1.20.1 Date: Fri, 01 Dec 2023 20:54:54 GMT Content-Length: 0 Connection: keep-alive Vary: Origin Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Location: https://www.acint.net/match?dp=261&euid=1b977199-607e-4479-8f7c-7ffe43e102a6 Set-Cookie: afp_cookie=gAAAAABlakgeRPGA6h94i8MvgZ-8z9rn5id0rOXnsktRldr255bgxHlWLd-cfBwWKqGveq95tgLOYQ77CUQY7kWBIFElaj7rZgZp0hY-XmZDA1T1L7GTAzpsDA_Z6jcKn2c4MAph4pe04Z_ffzheAp7Tv0woI5z_GJH8voR7o5HZsTy7pMPP1_4hBkvvOmQUhxsCNMyDx2iS$; expires=Mon, 01 Jan 2024 20:54:54 GMT; path=/; secure; SameSite=None

	yastatic.net/partner-code-bundles/920174/ca82583607ca89ec068d.js	178.154.131.217	200 OK	3.6 kB
URL GET HTTP/2 yastatic.net/partner-code-bundles/920174/ca82583607ca89ec068d.js IP 178.154.131.217:443 ASN #13238 YANDEX LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.yastatic-net.ru FingerprintD9:64:E0:F2:39:AC:36:DB:9A:A3:3D:E4:27:E4:0B:F5:5B:5B:E3:A0 ValidityMon, 10 Jul 2023 13:25:28 GMT - Sun, 07 Jan 2024 20:59:59 GMT File type ASCII text, with very long lines (9173) Size 3.6 kB (3559 bytes) Hash 33d0c2943e43a53c0362eab1f1c43c49 e864129df73cfe9b6d749c491280ec7e5cf64b4f e75a9a840b03704c942ee6bcb80f99bdd2290bb2dd8d6ff63d985d560ddeb480 HTTP Headers `GET /partner-code-bundles/920174/ca82583607ca89ec068d.js HTTP/1.1 Host: yastatic.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx/1.17.9 date: Fri, 01 Dec 2023 20:54:54 GMT content-type: text/javascript; charset=utf-8 content-length: 3559 access-control-allow-origin: * cache-control: public, max-age=946708560 content-encoding: br etag: "c9bfc5aaeaf38b832984cf74810c88f8" expires: Mon, 01 Dec 2053 03:28:23 GMT last-modified: Thu, 30 Nov 2023 18:32:44 GMT nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} strict-transport-security: max-age=43200000; includeSubDomains; timing-allow-origin: * vary: Accept-Encoding x-robots-tag: noindex, noarchive, nofollow accept-ranges: bytes X-Firefox-Spdy: h2

	cs.agency2.ru/p?ssp=sp&uid=0100007F1D486A65EB36FE270271E1BB	23.111.107.44	301 Moved Permanently	0 B
URL GET HTTP/1.1 cs.agency2.ru/p?ssp=sp&uid=0100007F1D486A65EB36FE270271E1BB IP 23.111.107.44:443 ASN #7979 SERVERS-COM Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subjectapi.agency2.ru Fingerprint50:48:39:D7:EB:8F:8E:E7:36:A3:F3:08:25:93:84:7F:6B:36:24:95 ValidityMon, 16 Oct 2023 23:38:04 GMT - Sun, 14 Jan 2024 23:38:03 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /p?ssp=sp&uid=0100007F1D486A65EB36FE270271E1BB HTTP/1.1 Host: cs.agency2.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 301 Moved Permanently Date: Fri, 01 Dec 2023 20:54:54 GMT Content-Length: 0 Connection: keep-alive Server: fasthttp Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://www.acint.net/match?dp=186&euid=e6bd85b4-44d0-493f-8c6d-4ce8e9152d79 Set-Cookie: uuid=e6bd85b4-44d0-493f-8c6d-4ce8e9152d79; expires=Thu, 21 Nov 2024 20:54:54 GMT; domain=agency2.ru; path=/; secure; SameSite=None Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.107.44

	yastatic.net/partner-code-bundles/920174/5a7a526829132d8f111a.js	178.154.131.217	200 OK	4.8 kB
URL GET HTTP/2 yastatic.net/partner-code-bundles/920174/5a7a526829132d8f111a.js IP 178.154.131.217:443 ASN #13238 YANDEX LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.yastatic-net.ru FingerprintD9:64:E0:F2:39:AC:36:DB:9A:A3:3D:E4:27:E4:0B:F5:5B:5B:E3:A0 ValidityMon, 10 Jul 2023 13:25:28 GMT - Sun, 07 Jan 2024 20:59:59 GMT File type ASCII text, with very long lines (14270) Size 4.8 kB (4774 bytes) Hash e924479e4100d23e9ad37ae6d5213e90 3c27d4a750865971fc22a9035583cb54d21f0862 0fcd6527670f13a714d7afd7fed44abe22bdd841ecf4671977d1af457e09ab92 HTTP Headers `GET /partner-code-bundles/920174/5a7a526829132d8f111a.js HTTP/1.1 Host: yastatic.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx/1.17.9 date: Fri, 01 Dec 2023 20:54:54 GMT content-type: text/javascript; charset=utf-8 content-length: 4774 access-control-allow-origin: * cache-control: public, max-age=946708560 content-encoding: br etag: "cc445302cf6de8d966f36fb269e69f5a" expires: Mon, 01 Dec 2053 03:26:51 GMT last-modified: Thu, 30 Nov 2023 18:32:43 GMT nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} strict-transport-security: max-age=43200000; includeSubDomains; timing-allow-origin: * vary: Accept-Encoding x-robots-tag: noindex, noarchive, nofollow accept-ranges: bytes X-Firefox-Spdy: h2

	sync.programmatica.com/match/01	167.235.117.42	200 OK	43 B
URL GET HTTP/2 sync.programmatica.com/match/01 IP 167.235.117.42:443 ASN #24940 Hetzner Online GmbH Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerGlobalSign nv-sa Subject.programmatica.com FingerprintE4:B6:ED:A7:02:18:8C:3F:D0:A3:8D:04:EE:40:21:0A:0E:83:D1:D6 ValidityThu, 15 Dec 2022 17:05:13 GMT - Tue, 16 Jan 2024 17:05:12 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash 07fff40b5dd495aca2ac4e1c3fbc60aa e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4 a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7 HTTP Headers `GET /match/01 HTTP/1.1 Host: sync.programmatica.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:54 GMT content-type: image/gif content-length: 43 strict-transport-security: max-age=31536000; includeSubDomains; preload X-Firefox-Spdy: h2`

	logger.moviead55.ru/logger.php?v=647a534f9f5fb9ced25ee7db57ef9c72&c=805e1579-dbe0-4830-bffa-dd6b2459b8b3&t=player_loaded&a=&m=%7B%22sub_id%22%3A%22ap%22%2C%22loadTime%22%3A1.088%2C%22version%22%3A%221701285253729%22%2C%22vt%22%3A100%2C%22dh%22%3Afalse%2C%22l%22%3A%22https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html%22%2C%22scr%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22c%22%3A24%2C%22iw%22%3A1060%2C%22ih%22%3A330%7D%7D&o=	193.200.65.146	200 OK	8.0 kB
URL GET HTTP/2 logger.moviead55.ru/logger.php?v=647a534f9f5fb9ced25ee7db57ef9c72&c=805e1579-dbe0-4830-bffa-dd6b2459b8b3&t=player_loaded&a=&m=%7B%22sub_id%22%3A%22ap%22%2C%22loadTime%22%3A1.088%2C%22version%22%3A%221701285253729%22%2C%22vt%22%3A100%2C%22dh%22%3Afalse%2C%22l%22%3A%22https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html%22%2C%22scr%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22c%22%3A24%2C%22iw%22%3A1060%2C%22ih%22%3A330%7D%7D&o= IP 193.200.65.146:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type gzip compressed data, from Unix\012- data Size 8.0 kB (8032 bytes) Hash edcfe0d7b2e78441a6cd32a43c6dd1b2 3d5162ade4c08737683277f9ad01eb72ddcee984 9ccdf409cf38d8a4dbf164dc4bcbeb74b479880d7487df98932cd03c9f397968 HTTP Headers GET /logger.php?v=647a534f9f5fb9ced25ee7db57ef9c72&c=805e1579-dbe0-4830-bffa-dd6b2459b8b3&t=player_loaded&a=&m=%7B%22sub_id%22%3A%22ap%22%2C%22loadTime%22%3A1.088%2C%22version%22%3A%221701285253729%22%2C%22vt%22%3A100%2C%22dh%22%3Afalse%2C%22l%22%3A%22https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html%22%2C%22scr%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22c%22%3A24%2C%22iw%22%3A1060%2C%22ih%22%3A330%7D%7D&o= HTTP/1.1 Host: logger.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:54 GMT content-type: Content-Type: image/png vary: Accept-Encoding x-movieads-le: true x-movieads-country: NO content-encoding: gzip X-Firefox-Spdy: h2`

	yastatic.net/partner-code-bundles/920174/dfa824eba677c14973d6.js	178.154.131.217	200 OK	25 kB
URL GET HTTP/2 yastatic.net/partner-code-bundles/920174/dfa824eba677c14973d6.js IP 178.154.131.217:443 ASN #13238 YANDEX LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.yastatic-net.ru FingerprintD9:64:E0:F2:39:AC:36:DB:9A:A3:3D:E4:27:E4:0B:F5:5B:5B:E3:A0 ValidityMon, 10 Jul 2023 13:25:28 GMT - Sun, 07 Jan 2024 20:59:59 GMT File type ASCII text, with very long lines (65494) Size 25 kB (24553 bytes) Hash 0115b6aefb895f1182ce8df245cba2c4 03a88ad9027b95fde2ceef83527e96664bd361e9 196b63b4562684970d0086e596b078a626fc7a04c588bfeffdd2e6ee441054b7 HTTP Headers `GET /partner-code-bundles/920174/dfa824eba677c14973d6.js HTTP/1.1 Host: yastatic.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx/1.17.9 date: Fri, 01 Dec 2023 20:54:54 GMT content-type: text/javascript; charset=utf-8 content-length: 24553 access-control-allow-origin: * cache-control: public, max-age=946708560 content-encoding: br etag: "3b4c127e66bba4cbc2ea76df23f922d3" expires: Mon, 01 Dec 2053 03:26:51 GMT last-modified: Thu, 30 Nov 2023 18:32:44 GMT nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} strict-transport-security: max-age=43200000; includeSubDomains; timing-allow-origin: * vary: Accept-Encoding x-robots-tag: noindex, noarchive, nofollow accept-ranges: bytes X-Firefox-Spdy: h2

	yastatic.net/safeframe-bundles/0.83/host.js	178.154.131.217	200 OK	8.9 kB
URL GET HTTP/2 yastatic.net/safeframe-bundles/0.83/host.js IP 178.154.131.217:443 ASN #13238 YANDEX LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.yastatic-net.ru FingerprintD9:64:E0:F2:39:AC:36:DB:9A:A3:3D:E4:27:E4:0B:F5:5B:5B:E3:A0 ValidityMon, 10 Jul 2023 13:25:28 GMT - Sun, 07 Jan 2024 20:59:59 GMT File type ASCII text, with very long lines (33703), with no line terminators Size 8.9 kB (8878 bytes) Hash 2435549eac66915d7464ee7b9efce038 e390598fb192583622a8ea079d5c96dffdb34fb5 34806ef573086241dd1a596a860b0295b51c24f1c37eab36eb9d0665683abb55 HTTP Headers `GET /safeframe-bundles/0.83/host.js HTTP/1.1 Host: yastatic.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx/1.17.9 date: Fri, 01 Dec 2023 20:54:54 GMT content-type: text/javascript; charset=utf-8 content-length: 8878 access-control-allow-origin: * cache-control: public, max-age=946708560 content-encoding: br etag: "f80882bf67cf261aa08d636da095149a" expires: Mon, 01 Dec 2053 03:28:55 GMT last-modified: Wed, 03 Nov 2021 13:42:58 GMT nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} strict-transport-security: max-age=43200000; includeSubDomains; timing-allow-origin: * vary: Accept-Encoding x-robots-tag: noindex, noarchive, nofollow accept-ranges: bytes X-Firefox-Spdy: h2

	yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2	178.154.131.217	200 OK	26 kB
URL GET HTTP/2 yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2 IP 178.154.131.217:443 ASN #13238 YANDEX LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.yastatic-net.ru FingerprintD9:64:E0:F2:39:AC:36:DB:9A:A3:3D:E4:27:E4:0B:F5:5B:5B:E3:A0 ValidityMon, 10 Jul 2023 13:25:28 GMT - Sun, 07 Jan 2024 20:59:59 GMT File type Web Open Font Format (Version 2), TrueType, length 26004, version 1.0\012- data Size 26 kB (26004 bytes) Hash 7f0cdaf91230f9789ca4162aedff612e 965de571aa794dab64076c3cc64dc8894b843f23 033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9 HTTP Headers GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1 Host: yastatic.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://hd.3lordserial.xyz/ Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK server: nginx/1.17.9 date: Fri, 01 Dec 2023 20:54:54 GMT content-type: font/woff2 content-length: 26004 access-control-allow-origin: cache-control: public, max-age=31556952 etag: "7f0cdaf91230f9789ca4162aedff612e" expires: Sun, 01 Dec 2024 02:42:00 GMT last-modified: Mon, 25 Apr 2022 14:02:39 GMT nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} strict-transport-security: max-age=43200000; includeSubDomains; timing-allow-origin: * vary: Accept-Encoding x-amz-meta-owner: {"role":"admin","login":"4eb0da"} x-nginx-request-id: 585fd5893cfe8e5e accept-ranges: bytes X-Firefox-Spdy: h2

	yastatic.net/partner-code-bundles/920174/7e4653f1bf11b767a289.js	178.154.131.217	200 OK	8.7 kB
URL GET HTTP/2 yastatic.net/partner-code-bundles/920174/7e4653f1bf11b767a289.js IP 178.154.131.217:443 ASN #13238 YANDEX LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.yastatic-net.ru FingerprintD9:64:E0:F2:39:AC:36:DB:9A:A3:3D:E4:27:E4:0B:F5:5B:5B:E3:A0 ValidityMon, 10 Jul 2023 13:25:28 GMT - Sun, 07 Jan 2024 20:59:59 GMT File type ASCII text, with very long lines (31080) Size 8.7 kB (8707 bytes) Hash 548355665c08b11c6ad620da58d5a0fc f7931159da9856a79a00c3aef388be4afff26bf5 aa7beee8e746579d9e1c779a08713b607ca5cd494e5e7004ae9a0e2004c14314 HTTP Headers `GET /partner-code-bundles/920174/7e4653f1bf11b767a289.js HTTP/1.1 Host: yastatic.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx/1.17.9 date: Fri, 01 Dec 2023 20:54:54 GMT content-type: text/javascript; charset=utf-8 content-length: 8707 access-control-allow-origin: * cache-control: public, max-age=946708560 content-encoding: br etag: "12eea2ead88ffba95a08644e650d3f41" expires: Mon, 01 Dec 2053 03:28:23 GMT last-modified: Thu, 30 Nov 2023 18:32:43 GMT nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} strict-transport-security: max-age=43200000; includeSubDomains; timing-allow-origin: * vary: Accept-Encoding x-robots-tag: noindex, noarchive, nofollow accept-ranges: bytes X-Firefox-Spdy: h2

	s.ccsyncuuid.net/match/5/?remote_uid=0100007F1D486A65EB36FE270271E1BB	78.40.218.117	302 Found	0 B
URL GET HTTP/2 s.ccsyncuuid.net/match/5/?remote_uid=0100007F1D486A65EB36FE270271E1BB IP 78.40.218.117:443 ASN #9123 TimeWeb Ltd. Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subjectccsyncuuid.net Fingerprint05:93:D2:3F:39:41:DF:CE:18:E5:65:94:78:1D:8A:7F:24:58:17:98 ValidityMon, 13 Nov 2023 06:10:33 GMT - Sun, 11 Feb 2024 06:10:32 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /match/5/?remote_uid=0100007F1D486A65EB36FE270271E1BB HTTP/1.1 Host: s.ccsyncuuid.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 302 Found server: nginx date: Fri, 01 Dec 2023 20:54:54 GMT content-length: 0 location: https://acint.net/match?dp=80&euid=SWOP2Gg9V9Y5yS85gWSL set-cookie: jcsuuid=SWOP2Gg9V9Y5yS85gWSL; expires=Sat, 30 Nov 2024 20:54:54 GMT; domain=ccsyncuuid.net; path=/; secure; SameSite=None X-Firefox-Spdy: h2`

	yastatic.net/partner-code-bundles/920174/37a64a473fd75f1d1e48.js	178.154.131.217	200 OK	15 kB
URL GET HTTP/2 yastatic.net/partner-code-bundles/920174/37a64a473fd75f1d1e48.js IP 178.154.131.217:443 ASN #13238 YANDEX LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.yastatic-net.ru FingerprintD9:64:E0:F2:39:AC:36:DB:9A:A3:3D:E4:27:E4:0B:F5:5B:5B:E3:A0 ValidityMon, 10 Jul 2023 13:25:28 GMT - Sun, 07 Jan 2024 20:59:59 GMT File type ASCII text, with very long lines (60313) Size 15 kB (14842 bytes) Hash 2746961d729829fa1e2db7982bc048c9 b53729f24d6c5f2a6aed0a178b168414b08e847e d3542e91cb8213b52b268d59498902610511da580d520d0f13270b483d95dc20 HTTP Headers `GET /partner-code-bundles/920174/37a64a473fd75f1d1e48.js HTTP/1.1 Host: yastatic.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx/1.17.9 date: Fri, 01 Dec 2023 20:54:55 GMT content-type: text/javascript; charset=utf-8 content-length: 14842 access-control-allow-origin: * cache-control: public, max-age=946708560 content-encoding: br etag: "59d99a410ec348ec6bce8f4a74a3688c" expires: Mon, 01 Dec 2053 03:26:51 GMT last-modified: Thu, 30 Nov 2023 18:32:42 GMT nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} strict-transport-security: max-age=43200000; includeSubDomains; timing-allow-origin: * vary: Accept-Encoding x-robots-tag: noindex, noarchive, nofollow accept-ranges: bytes X-Firefox-Spdy: h2

	hye1eaipby4w.takedwn.ws/x-en-x/khqakvL5Ya8cky8aRn8akn8cka81nESBnEObyn83khQ5kBEuMWlw	50.7.233.42	200 OK	42 kB
URL GET HTTP/1.1 hye1eaipby4w.takedwn.ws/x-en-x/khqakvL5Ya8cky8aRn8akn8cka81nESBnEObyn83khQ5kBEuMWlw IP 50.7.233.42:443 ASN #174 COGENT-174 Requested by https://api.strvid.ws/embed/movie/455 Certificate IssuerSectigo Limited Subject.takedwn.ws Fingerprint10:FE:92:D9:53:67:C4:4D:D3:64:8C:31:29:59:C5:F4:1A:DC:AC:92 ValidityTue, 26 Sep 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT File type XML 1.0 document text\012- XML document, ASCII text Size 42 kB (42148 bytes) Hash efdd36e6f1e4a1b07e54be47acc57537 b7b49818c5685035ebac66b8aa244a9605ce70ff d78b8742449581d9891cdd79f72c9b5449c48ea32c7476a7f2b720311bc45f87 HTTP Headers `GET /x-en-x/khqakvL5Ya8cky8aRn8akn8cka81nESBnEObyn83khQ5kBEuMWlw HTTP/1.1 Host: hye1eaipby4w.takedwn.ws User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://api.strvid.ws/ Origin: https://api.strvid.ws DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:54 GMT Content-Type: application/dash+xml Content-Length: 42148 Connection: keep-alive Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Vary: * Expires: 1970-01-01 00:00:00 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Accept-Ranges: bytes`

	yastatic.net/partner-code-bundles/920174/8011efa9db4d1ab95316.js	178.154.131.217	200 OK	118 kB
URL GET HTTP/2 yastatic.net/partner-code-bundles/920174/8011efa9db4d1ab95316.js IP 178.154.131.217:443 ASN #13238 YANDEX LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.yastatic-net.ru FingerprintD9:64:E0:F2:39:AC:36:DB:9A:A3:3D:E4:27:E4:0B:F5:5B:5B:E3:A0 ValidityMon, 10 Jul 2023 13:25:28 GMT - Sun, 07 Jan 2024 20:59:59 GMT File type ASCII text, with very long lines (65497) Size 118 kB (117475 bytes) Hash 4f422f8bd2fc5044bebf9d30abc60126 45a06e666f8a5babfd6074acede5fd3218b11f40 166f03d2c873c38d857427c2bd2492844b8c906734dc4629eb1443c4ffc84361 HTTP Headers `GET /partner-code-bundles/920174/8011efa9db4d1ab95316.js HTTP/1.1 Host: yastatic.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx/1.17.9 date: Fri, 01 Dec 2023 20:54:55 GMT content-type: text/javascript; charset=utf-8 content-length: 117475 access-control-allow-origin: * cache-control: public, max-age=946708560 content-encoding: br etag: "4201e101909068813da4e5b3a3d44d10" expires: Mon, 01 Dec 2053 03:26:51 GMT last-modified: Thu, 30 Nov 2023 18:32:43 GMT nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} strict-transport-security: max-age=43200000; includeSubDomains; timing-allow-origin: * vary: Accept-Encoding x-robots-tag: noindex, noarchive, nofollow accept-ranges: bytes X-Firefox-Spdy: h2

	acint.net/rmatch?dp=14&euid=1A03420A1E486A651C00FF7C02ED3582&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D	193.3.184.135	302 Found	154 B
URL GET HTTP/2 acint.net/rmatch?dp=14&euid=1A03420A1E486A651C00FF7C02ED3582&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D IP 193.3.184.135:443 ASN #50214 QWARTA LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.acint.net FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1 ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 154 B (154 bytes) Hash cfbeaf604823f038b8b46f0ac862b98c 7b9eb1dac48e74fa5f418bc456cb410f88b81d98 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319 HTTP Headers GET /rmatch?dp=14&euid=1A03420A1E486A651C00FF7C02ED3582&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D HTTP/1.1 Host: acint.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: test_cookie=CheckForPermission; aid=fwAAAWVqSB0n/jbru+FxAnBO9uArXikJ9bP7KWs+DcG51+8Z; cSyncDp14v4=1701464093; cSyncDp14v6=1701464093; cSyncDp17v2=1701464093; cSyncDp45v5=1701464093; cSyncDp53v5=1701464093; cSyncDp62v2=1701464093; cSyncDp67v3=1701464093; cSyncDp68v2=1701464093; cSyncDp71v2=1701464093; cSyncDp80v2=1701464093; cSyncDp85v2=1701464093; cSyncDp95v4=1701464093; cSyncDp98v3=1701464093; cSyncDp104v2=1701464093; cSyncDp107v2=1701464093; cSyncDp110v3=1701464093; cSyncDp125v4=1701464093; cSyncDp126v2=1701464093; cSyncDp127v2=1701464093; cSyncDp129v2=1701464093; cSyncDp136v3=1701464093; cSyncDp146v2=1701464093; cSyncDp148v2=1701464093; cSyncDp149v3=1701464093; cSyncDp151v2=1701464093; cSyncDp251v1=1701464093; cSyncDp186v2=1701464093; cSyncDp217v2=1701464093; cSyncDp221v2=1701464093; cSyncDp235v2=1701464093; cSyncDp239v2=1701464093; cSyncDp243v2=1701464093; cSyncDp260v2=1701464093; cSyncDp244v2=1701464093; cSyncDp248v2=1701464093; cSyncDp261v1=1701464093 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 302 Found server: openresty date: Fri, 01 Dec 2023 20:54:55 GMT content-type: text/html content-length: 154 location: https://code.moviead55.ru/go/csync?cn=sapecookie&bid=0100007F1D486A65EB36FE270271E1BB p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" expires: Wed, 19 Apr 2000 11:43:00 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 X-Firefox-Spdy: h2`

	sync.dsp.solta.io/match/sape?id=0100007F1D486A65EB36FE270271E1BB	185.40.31.213	200 OK	43 B
URL GET HTTP/2 sync.dsp.solta.io/match/sape?id=0100007F1D486A65EB36FE270271E1BB IP 185.40.31.213:443 ASN #61400 Start LLC Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerGlobalSign nv-sa Subject.dsp.solta.io Fingerprint6D:7F:91:92:30:E1:6A:A0:9B:86:49:7A:21:7F:5B:A4:23:8F:92:BC ValidityWed, 02 Aug 2023 16:38:38 GMT - Mon, 02 Sep 2024 16:38:37 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash 07fff40b5dd495aca2ac4e1c3fbc60aa e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4 a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7 HTTP Headers `GET /match/sape?id=0100007F1D486A65EB36FE270271E1BB HTTP/1.1 Host: sync.dsp.solta.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:55 GMT content-type: image/gif content-length: 43 strict-transport-security: max-age=31536000; includeSubDomains; preload X-Firefox-Spdy: h2`

	adx.com.ru/sape-sync?uid=0100007F1D486A65EB36FE270271E1BB	83.222.116.186	429 Too Many Requests	169 B
URL GET HTTP/2 adx.com.ru/sape-sync?uid=0100007F1D486A65EB36FE270271E1BB IP 83.222.116.186:443 ASN #42632 MnogoByte LLC Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerGlobalSign nv-sa Subject.adx.com.ru FingerprintB6:86:21:C8:F9:AF:00:9E:42:EC:E3:77:AC:A3:5B:2B:E7:C4:46:B3 ValidityFri, 26 May 2023 11:44:59 GMT - Wed, 26 Jun 2024 11:44:58 GMT File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 169 B (169 bytes) Hash 3456231c174fb2d76d51f73b828635a7 49c43f133ee881851becd78c2e9e885ebaad005e 02a097cad2b1a9db6797fdb73c0dcd0d66d8ae7d4b5f906658bb45a502c2c106 HTTP Headers `GET /sape-sync?uid=0100007F1D486A65EB36FE270271E1BB HTTP/1.1 Host: adx.com.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 429 Too Many Requests server: nginx/1.22.0 date: Fri, 01 Dec 2023 20:54:55 GMT content-type: text/html content-length: 169 X-Firefox-Spdy: h2`

	ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D	83.222.96.170	302 Found	74 B
URL GET HTTP/2 ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D IP 83.222.96.170:443 ASN #42632 MnogoByte LLC Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerGlobalSign nv-sa Subject.bestssp.com Fingerprint25:15:42:2E:1C:54:0F:74:CF:89:02:5A:5E:AC:98:DA:1C:34:B3:B3 ValidityMon, 24 Jul 2023 17:15:54 GMT - Sat, 24 Aug 2024 17:15:53 GMT File type HTML document, ASCII text Size 74 B (74 bytes) Hash aa7ad316f060626ef8afe1c92eb8b8ff 24bbe3047ec3823e872743186577b34d5ea3e6d1 bdf339f26b92d97896ce7a21cf6654f1d0ee87a5f165ce6bc1f16284a88df8bb HTTP Headers `GET /sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D HTTP/1.1 Host: ssp.bestssp.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 302 Found server: nginx/1.22.0 date: Fri, 01 Dec 2023 20:54:55 GMT content-type: text/html; charset=utf-8 content-length: 74 location: https://www.acint.net/match?dp=95&euid=KIAJAIUK set-cookie: uid=KIAJAIUK; Expires=Mon, 28 Nov 2033 20:54:55 GMT X-Firefox-Spdy: h2`

	acint.net/match?dp=14&euid=1A03420A1E486A651C00FF7C02ED3582	193.3.184.135	200 OK	43 B
URL GET HTTP/2 acint.net/match?dp=14&euid=1A03420A1E486A651C00FF7C02ED3582 IP 193.3.184.135:443 ASN #50214 QWARTA LLC Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subject.acint.net FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1 ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash ad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda HTTP Headers GET /match?dp=14&euid=1A03420A1E486A651C00FF7C02ED3582 HTTP/1.1 Host: acint.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.acint.net/ DNT: 1 Connection: keep-alive Cookie: test_cookie=CheckForPermission; aid=fwAAAWVqSB0n/jbru+FxAnBO9uArXikJ9bP7KWs+DcG51+8Z; cSyncDp14v4=1701464093; cSyncDp14v6=1701464093; cSyncDp17v2=1701464093; cSyncDp45v5=1701464093; cSyncDp53v5=1701464093; cSyncDp62v2=1701464093; cSyncDp67v3=1701464093; cSyncDp68v2=1701464093; cSyncDp71v2=1701464093; cSyncDp80v2=1701464093; cSyncDp85v2=1701464093; cSyncDp95v4=1701464093; cSyncDp98v3=1701464093; cSyncDp104v2=1701464093; cSyncDp107v2=1701464093; cSyncDp110v3=1701464093; cSyncDp125v4=1701464093; cSyncDp126v2=1701464093; cSyncDp127v2=1701464093; cSyncDp129v2=1701464093; cSyncDp136v3=1701464093; cSyncDp146v2=1701464093; cSyncDp148v2=1701464093; cSyncDp149v3=1701464093; cSyncDp151v2=1701464093; cSyncDp251v1=1701464093; cSyncDp186v2=1701464093; cSyncDp217v2=1701464093; cSyncDp221v2=1701464093; cSyncDp235v2=1701464093; cSyncDp239v2=1701464093; cSyncDp243v2=1701464093; cSyncDp260v2=1701464093; cSyncDp244v2=1701464093; cSyncDp248v2=1701464093; cSyncDp261v1=1701464093 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: openresty date: Fri, 01 Dec 2023 20:54:55 GMT content-type: image/gif content-length: 43 last-modified: Mon, 28 Sep 1970 06:00:00 GMT p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" expires: Wed, 19 Apr 2000 11:43:00 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 X-Firefox-Spdy: h2`

	www.acint.net/match?dp=126&euid=2a86ad72-5358-44b7-43fb-493fbc1fd47f	193.3.184.135	200 OK	43 B
URL GET HTTP/2 www.acint.net/match?dp=126&euid=2a86ad72-5358-44b7-43fb-493fbc1fd47f IP 193.3.184.135:443 ASN #50214 QWARTA LLC Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subject.acint.net FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1 ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash ad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda HTTP Headers GET /match?dp=126&euid=2a86ad72-5358-44b7-43fb-493fbc1fd47f HTTP/1.1 Host: www.acint.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.acint.net/ DNT: 1 Connection: keep-alive Cookie: test_cookie=CheckForPermission; aid=fwAAAWVqSB0n/jbru+FxAnBO9uArXikJ9bP7KWs+DcG51+8Z; cSyncDp14v4=1701464093; cSyncDp14v6=1701464093; cSyncDp17v2=1701464093; cSyncDp45v5=1701464093; cSyncDp53v5=1701464093; cSyncDp62v2=1701464093; cSyncDp67v3=1701464093; cSyncDp68v2=1701464093; cSyncDp71v2=1701464093; cSyncDp80v2=1701464093; cSyncDp85v2=1701464093; cSyncDp95v4=1701464093; cSyncDp98v3=1701464093; cSyncDp104v2=1701464093; cSyncDp107v2=1701464093; cSyncDp110v3=1701464093; cSyncDp125v4=1701464093; cSyncDp126v2=1701464093; cSyncDp127v2=1701464093; cSyncDp129v2=1701464093; cSyncDp136v3=1701464093; cSyncDp146v2=1701464093; cSyncDp148v2=1701464093; cSyncDp149v3=1701464093; cSyncDp151v2=1701464093; cSyncDp251v1=1701464093; cSyncDp186v2=1701464093; cSyncDp217v2=1701464093; cSyncDp221v2=1701464093; cSyncDp235v2=1701464093; cSyncDp239v2=1701464093; cSyncDp243v2=1701464093; cSyncDp260v2=1701464093; cSyncDp244v2=1701464093; cSyncDp248v2=1701464093; cSyncDp261v1=1701464093 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: openresty date: Fri, 01 Dec 2023 20:54:55 GMT content-type: image/gif content-length: 43 last-modified: Mon, 28 Sep 1970 06:00:00 GMT p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" expires: Wed, 19 Apr 2000 11:43:00 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 X-Firefox-Spdy: h2`

	www.acint.net/match?dp=217&euid=8ff58d1b-9d36-4f21-a30f-e57ae193aeac	193.3.184.135	200 OK	43 B
URL GET HTTP/2 www.acint.net/match?dp=217&euid=8ff58d1b-9d36-4f21-a30f-e57ae193aeac IP 193.3.184.135:443 ASN #50214 QWARTA LLC Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subject.acint.net FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1 ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash ad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda HTTP Headers GET /match?dp=217&euid=8ff58d1b-9d36-4f21-a30f-e57ae193aeac HTTP/1.1 Host: www.acint.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.acint.net/ DNT: 1 Connection: keep-alive Cookie: test_cookie=CheckForPermission; aid=fwAAAWVqSB0n/jbru+FxAnBO9uArXikJ9bP7KWs+DcG51+8Z; cSyncDp14v4=1701464093; cSyncDp14v6=1701464093; cSyncDp17v2=1701464093; cSyncDp45v5=1701464093; cSyncDp53v5=1701464093; cSyncDp62v2=1701464093; cSyncDp67v3=1701464093; cSyncDp68v2=1701464093; cSyncDp71v2=1701464093; cSyncDp80v2=1701464093; cSyncDp85v2=1701464093; cSyncDp95v4=1701464093; cSyncDp98v3=1701464093; cSyncDp104v2=1701464093; cSyncDp107v2=1701464093; cSyncDp110v3=1701464093; cSyncDp125v4=1701464093; cSyncDp126v2=1701464093; cSyncDp127v2=1701464093; cSyncDp129v2=1701464093; cSyncDp136v3=1701464093; cSyncDp146v2=1701464093; cSyncDp148v2=1701464093; cSyncDp149v3=1701464093; cSyncDp151v2=1701464093; cSyncDp251v1=1701464093; cSyncDp186v2=1701464093; cSyncDp217v2=1701464093; cSyncDp221v2=1701464093; cSyncDp235v2=1701464093; cSyncDp239v2=1701464093; cSyncDp243v2=1701464093; cSyncDp260v2=1701464093; cSyncDp244v2=1701464093; cSyncDp248v2=1701464093; cSyncDp261v1=1701464093 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: openresty date: Fri, 01 Dec 2023 20:54:55 GMT content-type: image/gif content-length: 43 last-modified: Mon, 28 Sep 1970 06:00:00 GMT p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" expires: Wed, 19 Apr 2000 11:43:00 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 X-Firefox-Spdy: h2`

	sync.adspend.space/check?r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D98%26euid%3D1c931d12-853d-4d5f-a5e5-985f2066ed0f	5.189.234.229	302 Found	102 B
URL GET HTTP/2 sync.adspend.space/check?r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D98%26euid%3D1c931d12-853d-4d5f-a5e5-985f2066ed0f IP 5.189.234.229:443 ASN #50340 OOO Network of data-centers Selectel Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subjectadspend.space Fingerprint25:A8:18:8F:99:5E:81:77:EE:CC:A2:7D:B9:A4:65:C6:29:9B:72:AF ValidityMon, 27 Nov 2023 12:15:31 GMT - Sun, 25 Feb 2024 12:15:30 GMT File type HTML document, ASCII text Size 102 B (102 bytes) Hash 048a25a778c971a664c292983b2a88c0 b33ab49ad2a4d80cd3604ea20f8f5fdb4a193538 eb7808334f17f602faaed29213cb96d56a3a8b4ac45abfd3ccb001122056c26d HTTP Headers GET /check?r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D98%26euid%3D1c931d12-853d-4d5f-a5e5-985f2066ed0f HTTP/1.1 Host: sync.adspend.space User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.acint.net/ DNT: 1 Connection: keep-alive Cookie: as-user=1c931d12-853d-4d5f-a5e5-985f2066ed0f Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 302 Found server: nginx/1.22.1 date: Fri, 01 Dec 2023 20:54:55 GMT content-type: text/html; charset=utf-8 content-length: 102 location: https://www.acint.net/match?dp=98&euid=1c931d12-853d-4d5f-a5e5-985f2066ed0f strict-transport-security: max-age=15724800; includeSubDomains access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: PUT, GET, POST, OPTIONS access-control-allow-headers: Content-Type, authorization access-control-max-age: 1728000 X-Firefox-Spdy: h2

	www.acint.net/match?dp=127&euid=35MxOgkIKPcQzAWGlJYG	193.3.184.135	200 OK	43 B
URL GET HTTP/2 www.acint.net/match?dp=127&euid=35MxOgkIKPcQzAWGlJYG IP 193.3.184.135:443 ASN #50214 QWARTA LLC Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subject.acint.net FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1 ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash ad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda HTTP Headers GET /match?dp=127&euid=35MxOgkIKPcQzAWGlJYG HTTP/1.1 Host: www.acint.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.acint.net/ DNT: 1 Connection: keep-alive Cookie: test_cookie=CheckForPermission; aid=fwAAAWVqSB0n/jbru+FxAnBO9uArXikJ9bP7KWs+DcG51+8Z; cSyncDp14v4=1701464093; cSyncDp14v6=1701464093; cSyncDp17v2=1701464093; cSyncDp45v5=1701464093; cSyncDp53v5=1701464093; cSyncDp62v2=1701464093; cSyncDp67v3=1701464093; cSyncDp68v2=1701464093; cSyncDp71v2=1701464093; cSyncDp80v2=1701464093; cSyncDp85v2=1701464093; cSyncDp95v4=1701464093; cSyncDp98v3=1701464093; cSyncDp104v2=1701464093; cSyncDp107v2=1701464093; cSyncDp110v3=1701464093; cSyncDp125v4=1701464093; cSyncDp126v2=1701464093; cSyncDp127v2=1701464093; cSyncDp129v2=1701464093; cSyncDp136v3=1701464093; cSyncDp146v2=1701464093; cSyncDp148v2=1701464093; cSyncDp149v3=1701464093; cSyncDp151v2=1701464093; cSyncDp251v1=1701464093; cSyncDp186v2=1701464093; cSyncDp217v2=1701464093; cSyncDp221v2=1701464093; cSyncDp235v2=1701464093; cSyncDp239v2=1701464093; cSyncDp243v2=1701464093; cSyncDp260v2=1701464093; cSyncDp244v2=1701464093; cSyncDp248v2=1701464093; cSyncDp261v1=1701464093 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: openresty date: Fri, 01 Dec 2023 20:54:55 GMT content-type: image/gif content-length: 43 last-modified: Mon, 28 Sep 1970 06:00:00 GMT p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" expires: Wed, 19 Apr 2000 11:43:00 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 X-Firefox-Spdy: h2`

	sync.bumlam.com/?src=sape	31.172.81.159	302 Moved Temporarily	0 B
URL GET HTTP/1.1 sync.bumlam.com/?src=sape IP 31.172.81.159:443 ASN #44066 diva-e Datacenters GmbH Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subject.bumlam.com Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0 ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /?src=sape HTTP/1.1 Host: sync.bumlam.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.acint.net/ DNT: 1 Connection: keep-alive Cookie: suuid3=IiRlMTM4MzNjZS05MDhiLTExZWUtODZlMC0wMDI1OTBjMDY0N2M* Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 01 Dec 2023 20:54:55 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: keep-alive Set-Cookie: suuid3=IiRlMTM4MzNjZS05MDhiLTExZWUtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Thu, 26 Nov 2043 20:54:55 GMT; Domain=bumlam.com; SameSite=None; Secure P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Location: https://pix.bumlam.com/sync/sape/sync_ok?guid=e13833ce-908b-11ee-86e0-002590c0647c Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0 Access-Control-Allow-Origin: https://acint.net Access-Control-Allow-Credentials: true

	exchange.buzzoola.com/ssp/adfox	138.201.34.238	307 Temporary Redirect	0 B
URL POST HTTP/2 exchange.buzzoola.com/ssp/adfox IP 138.201.34.238:443 ASN #24940 Hetzner Online GmbH Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerSectigo Limited Subject.buzzoola.com FingerprintE6:7F:94:98:CF:E4:CF:88:C7:8C:FC:16:A3:D7:D0:10:4E:EC:AB:F1 ValidityMon, 04 Sep 2023 00:00:00 GMT - Fri, 04 Oct 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `POST /ssp/adfox HTTP/1.1 Host: exchange.buzzoola.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 362 Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 307 Temporary Redirect server: nginx date: Fri, 01 Dec 2023 20:54:55 GMT content-length: 0 access-control-allow-credentials: true access-control-allow-headers: Set-Cookie, X-Alt-Referer, X-First-Party-Cookie, X-Aidata-FP, If-None-Match access-control-allow-origin: https://hd.3lordserial.xyz access-control-expose-headers: Set-Cookie, Etag location: /ssp/adfox?set_buzzoola_cookie=t set-cookie: uuid=9ec21319-5e24-4b88-6e86-87b40e4ff5bc; Path=/; Domain=exchange.buzzoola.com; Expires=Sun, 31 Dec 2023 20:54:55 GMT; Max-Age=2592000; Secure; SameSite=None serverid: TODO X-Firefox-Spdy: h2

	sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0	136.243.48.22	302 Found	0 B
URL GET HTTP/2 sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0 IP 136.243.48.22:443 ASN #24940 Hetzner Online GmbH Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerGlobalSign nv-sa Subject.upravel.com Fingerprint4C:ED:03:57:58:43:18:2C:CC:41:F3:3B:19:72:75:BD:29:C1:04:08 ValiditySat, 29 Apr 2023 07:48:21 GMT - Thu, 30 May 2024 07:48:20 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0 HTTP/1.1 Host: sync.upravel.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.acint.net/ DNT: 1 Connection: keep-alive Cookie: session_tptc=1701464094871 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 302 Found server: nginx date: Fri, 01 Dec 2023 20:54:55 GMT content-type: image/png content-length: 0 p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: user_id=8b57f7b8-ff6f-434c-b65e-0d51403ce371;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000 user_id-legacy=8b57f7b8-ff6f-434c-b65e-0d51403ce371;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000 location: https://www.acint.net/match?dp=71&euid=8b57f7b8-ff6f-434c-b65e-0d51403ce371 access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range access-control-expose-headers: Content-Length,Content-Range access-control-allow-credentials: false X-Firefox-Spdy: h2

	ssp-rtb.sape.ru/adfoxhb	193.3.184.218	200 OK	11 B
URL POST HTTP/1.1 ssp-rtb.sape.ru/adfoxhb IP 193.3.184.218:443 ASN #50214 QWARTA LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.sape.ru FingerprintF9:61:5C:64:81:FD:57:C2:4A:BD:6B:12:D4:7E:02:5E:83:8E:3E:40 ValiditySun, 08 Oct 2023 01:41:50 GMT - Sat, 06 Jan 2024 01:41:49 GMT File type JSON data\012- , ASCII text, with no line terminators Size 11 B (11 bytes) Hash 9cc989d2e211083e0a170316914f1d06 392cd18d051f72b887529ac2998da54749f1338f 846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b HTTP Headers POST /adfoxhb HTTP/1.1 Host: ssp-rtb.sape.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 360 Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: sspuid=CkIDGmVqSB58/wAcgjXtAgE3p9toolFP37V7HmgJRdulaXHU Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Server: openresty Date: Fri, 01 Dec 2023 20:54:55 GMT Content-Type: application/json Content-Length: 11 Connection: keep-alive Access-Control-Allow-Origin: https://hd.3lordserial.xyz Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST X-YaRequestId: 18e76877d59747ffa3e30c37e7e069ea X-YaSpanId: 504d02813ac6d0d5 X-YaTraceId: d14f648e1e834ddc97b10b829fb05756`

	www.acint.net/match?dp=261&euid=1b977199-607e-4479-8f7c-7ffe43e102a6	193.3.184.135	200 OK	43 B
URL GET HTTP/2 www.acint.net/match?dp=261&euid=1b977199-607e-4479-8f7c-7ffe43e102a6 IP 193.3.184.135:443 ASN #50214 QWARTA LLC Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subject.acint.net FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1 ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash ad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda HTTP Headers GET /match?dp=261&euid=1b977199-607e-4479-8f7c-7ffe43e102a6 HTTP/1.1 Host: www.acint.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.acint.net/ DNT: 1 Connection: keep-alive Cookie: test_cookie=CheckForPermission; aid=fwAAAWVqSB0n/jbru+FxAnBO9uArXikJ9bP7KWs+DcG51+8Z; cSyncDp14v4=1701464093; cSyncDp14v6=1701464093; cSyncDp17v2=1701464093; cSyncDp45v5=1701464093; cSyncDp53v5=1701464093; cSyncDp62v2=1701464093; cSyncDp67v3=1701464093; cSyncDp68v2=1701464093; cSyncDp71v2=1701464093; cSyncDp80v2=1701464093; cSyncDp85v2=1701464093; cSyncDp95v4=1701464093; cSyncDp98v3=1701464093; cSyncDp104v2=1701464093; cSyncDp107v2=1701464093; cSyncDp110v3=1701464093; cSyncDp125v4=1701464093; cSyncDp126v2=1701464093; cSyncDp127v2=1701464093; cSyncDp129v2=1701464093; cSyncDp136v3=1701464093; cSyncDp146v2=1701464093; cSyncDp148v2=1701464093; cSyncDp149v3=1701464093; cSyncDp151v2=1701464093; cSyncDp251v1=1701464093; cSyncDp186v2=1701464093; cSyncDp217v2=1701464093; cSyncDp221v2=1701464093; cSyncDp235v2=1701464093; cSyncDp239v2=1701464093; cSyncDp243v2=1701464093; cSyncDp260v2=1701464093; cSyncDp244v2=1701464093; cSyncDp248v2=1701464093; cSyncDp261v1=1701464093 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: openresty date: Fri, 01 Dec 2023 20:54:55 GMT content-type: image/gif content-length: 43 last-modified: Mon, 28 Sep 1970 06:00:00 GMT p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" expires: Wed, 19 Apr 2000 11:43:00 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 X-Firefox-Spdy: h2`

	sync.dsp.solta.io/match/kimberlite?id=ZWpIHhCxuEg	185.40.31.213	200 OK	43 B
URL GET HTTP/2 sync.dsp.solta.io/match/kimberlite?id=ZWpIHhCxuEg IP 185.40.31.213:443 ASN #61400 Start LLC Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerGlobalSign nv-sa Subject.dsp.solta.io Fingerprint6D:7F:91:92:30:E1:6A:A0:9B:86:49:7A:21:7F:5B:A4:23:8F:92:BC ValidityWed, 02 Aug 2023 16:38:38 GMT - Mon, 02 Sep 2024 16:38:37 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash 07fff40b5dd495aca2ac4e1c3fbc60aa e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4 a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7 HTTP Headers `GET /match/kimberlite?id=ZWpIHhCxuEg HTTP/1.1 Host: sync.dsp.solta.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:55 GMT content-type: image/gif content-length: 43 strict-transport-security: max-age=31536000; includeSubDomains; preload X-Firefox-Spdy: h2`

	ssp.bidvol.com/rtb/pl999	65.109.65.188	200 OK	11 B
URL POST HTTP/2 ssp.bidvol.com/rtb/pl999 IP 65.109.65.188:443 ASN #24940 Hetzner Online GmbH Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subjectssp.bidvol.com Fingerprint40:DB:53:6B:41:DC:4B:32:C0:EE:F6:09:5C:13:AF:5C:EF:90:56:90 ValidityThu, 09 Nov 2023 10:21:37 GMT - Wed, 07 Feb 2024 10:21:36 GMT File type JSON data\012- , ASCII text, with no line terminators Size 11 B (11 bytes) Hash 9cc989d2e211083e0a170316914f1d06 392cd18d051f72b887529ac2998da54749f1338f 846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b HTTP Headers `POST /rtb/pl999 HTTP/1.1 Host: ssp.bidvol.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 358 Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx/1.22.0 date: Fri, 01 Dec 2023 20:54:55 GMT content-type: application/json; charset=utf-8 content-length: 11 x-request-id: 43bc0d07-b29b-4422-85f6-3d494c71c0c3 access-control-allow-origin: https://hd.3lordserial.xyz access-control-allow-credentials: true cache-control: no-store, no-cache, must-revalidate, proxy-revalidate pragma: no-cache expires: 0 surrogate-control: no-store set-cookie: bvuid=3veqvg2yeg; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None bvuid2=3veqvg2yeg; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT vary: Accept-Encoding X-Firefox-Spdy: h2

	nr.bidderstack.com/sape/cm?user_id=0100007F1D486A65EB36FE270271E1BB&pupa=1	142.132.211.137	302 Found	0 B
URL GET HTTP/1.1 nr.bidderstack.com/sape/cm?user_id=0100007F1D486A65EB36FE270271E1BB&pupa=1 IP 142.132.211.137:443 ASN #24940 Hetzner Online GmbH Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerGoDaddy.com, Inc. Subject.bidderstack.com Fingerprint7A:83:29:BF:37:01:78:02:DF:C1:07:D8:A2:10:AB:0A:DD:11:66:B0 ValidityTue, 21 Nov 2023 08:57:57 GMT - Sun, 22 Dec 2024 08:57:57 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /sape/cm?user_id=0100007F1D486A65EB36FE270271E1BB&pupa=1 HTTP/1.1 Host: nr.bidderstack.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.acint.net/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Found Server: nginx Date: Fri, 01 Dec 2023 20:54:55 GMT Content-Length: 0 Connection: keep-alive Location: https://www.acint.net/match?dp=251&euid=d6979f52-2616-aa83-4667-870fd419f06c Set-Cookie: pupa=d6979f52-2616-aa83-4667-870fd419f06c; domain=.bidderstack.com; path=/; expires=Sat, 30-Nov-2024 20:54:55 GMT; csorigin2=244; domain=.bidderstack.com; path=/; expires=Fri, 01-Dec-2023 20:59:55 GMT; Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true`

	sync.bumlam.com/?src=sap1&s_data=CAIQARiekKmrBmIgMDEwMDAwN0YxRDQ4NkE2NUVCMzZGRTI3MDI3MUUxQkKiARDhODPOkIsR7obgACWQwGR8	31.172.81.159	200 OK	0 B
URL GET HTTP/1.1 sync.bumlam.com/?src=sap1&s_data=CAIQARiekKmrBmIgMDEwMDAwN0YxRDQ4NkE2NUVCMzZGRTI3MDI3MUUxQkKiARDhODPOkIsR7obgACWQwGR8 IP 31.172.81.159:443 ASN #44066 diva-e Datacenters GmbH Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subject.bumlam.com Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0 ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /?src=sap1&s_data=CAIQARiekKmrBmIgMDEwMDAwN0YxRDQ4NkE2NUVCMzZGRTI3MDI3MUUxQkKiARDhODPOkIsR7obgACWQwGR8 HTTP/1.1 Host: sync.bumlam.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.acint.net/ DNT: 1 Connection: keep-alive Cookie: suuid3=IiRlMTM4MzNjZS05MDhiLTExZWUtODZlMC0wMDI1OTBjMDY0N2M* Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:55 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: keep-alive Set-Cookie: suuid3=IiRlMTM4MzNjZS05MDhiLTExZWUtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Thu, 26 Nov 2043 20:54:55 GMT; Domain=bumlam.com; SameSite=None; Secure P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0

	www.acint.net/match?dp=186&euid=e6bd85b4-44d0-493f-8c6d-4ce8e9152d79	193.3.184.135	200 OK	43 B
URL GET HTTP/2 www.acint.net/match?dp=186&euid=e6bd85b4-44d0-493f-8c6d-4ce8e9152d79 IP 193.3.184.135:443 ASN #50214 QWARTA LLC Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subject.acint.net FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1 ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash ad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda HTTP Headers GET /match?dp=186&euid=e6bd85b4-44d0-493f-8c6d-4ce8e9152d79 HTTP/1.1 Host: www.acint.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.acint.net/ DNT: 1 Connection: keep-alive Cookie: test_cookie=CheckForPermission; aid=fwAAAWVqSB0n/jbru+FxAnBO9uArXikJ9bP7KWs+DcG51+8Z; cSyncDp14v4=1701464093; cSyncDp14v6=1701464093; cSyncDp17v2=1701464093; cSyncDp45v5=1701464093; cSyncDp53v5=1701464093; cSyncDp62v2=1701464093; cSyncDp67v3=1701464093; cSyncDp68v2=1701464093; cSyncDp71v2=1701464093; cSyncDp80v2=1701464093; cSyncDp85v2=1701464093; cSyncDp95v4=1701464093; cSyncDp98v3=1701464093; cSyncDp104v2=1701464093; cSyncDp107v2=1701464093; cSyncDp110v3=1701464093; cSyncDp125v4=1701464093; cSyncDp126v2=1701464093; cSyncDp127v2=1701464093; cSyncDp129v2=1701464093; cSyncDp136v3=1701464093; cSyncDp146v2=1701464093; cSyncDp148v2=1701464093; cSyncDp149v3=1701464093; cSyncDp151v2=1701464093; cSyncDp251v1=1701464093; cSyncDp186v2=1701464093; cSyncDp217v2=1701464093; cSyncDp221v2=1701464093; cSyncDp235v2=1701464093; cSyncDp239v2=1701464093; cSyncDp243v2=1701464093; cSyncDp260v2=1701464093; cSyncDp244v2=1701464093; cSyncDp248v2=1701464093; cSyncDp261v1=1701464093 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: openresty date: Fri, 01 Dec 2023 20:54:55 GMT content-type: image/gif content-length: 43 last-modified: Mon, 28 Sep 1970 06:00:00 GMT p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" expires: Wed, 19 Apr 2000 11:43:00 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 X-Firefox-Spdy: h2`

	acint.net/match?dp=80&euid=SWOP2Gg9V9Y5yS85gWSL	193.3.184.135	200 OK	43 B
URL GET HTTP/2 acint.net/match?dp=80&euid=SWOP2Gg9V9Y5yS85gWSL IP 193.3.184.135:443 ASN #50214 QWARTA LLC Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subject.acint.net FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1 ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash ad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda HTTP Headers GET /match?dp=80&euid=SWOP2Gg9V9Y5yS85gWSL HTTP/1.1 Host: acint.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.acint.net/ DNT: 1 Connection: keep-alive Cookie: test_cookie=CheckForPermission; aid=fwAAAWVqSB0n/jbru+FxAnBO9uArXikJ9bP7KWs+DcG51+8Z; cSyncDp14v4=1701464093; cSyncDp14v6=1701464093; cSyncDp17v2=1701464093; cSyncDp45v5=1701464093; cSyncDp53v5=1701464093; cSyncDp62v2=1701464093; cSyncDp67v3=1701464093; cSyncDp68v2=1701464093; cSyncDp71v2=1701464093; cSyncDp80v2=1701464093; cSyncDp85v2=1701464093; cSyncDp95v4=1701464093; cSyncDp98v3=1701464093; cSyncDp104v2=1701464093; cSyncDp107v2=1701464093; cSyncDp110v3=1701464093; cSyncDp125v4=1701464093; cSyncDp126v2=1701464093; cSyncDp127v2=1701464093; cSyncDp129v2=1701464093; cSyncDp136v3=1701464093; cSyncDp146v2=1701464093; cSyncDp148v2=1701464093; cSyncDp149v3=1701464093; cSyncDp151v2=1701464093; cSyncDp251v1=1701464093; cSyncDp186v2=1701464093; cSyncDp217v2=1701464093; cSyncDp221v2=1701464093; cSyncDp235v2=1701464093; cSyncDp239v2=1701464093; cSyncDp243v2=1701464093; cSyncDp260v2=1701464093; cSyncDp244v2=1701464093; cSyncDp248v2=1701464093; cSyncDp261v1=1701464093 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: openresty date: Fri, 01 Dec 2023 20:54:55 GMT content-type: image/gif content-length: 43 last-modified: Mon, 28 Sep 1970 06:00:00 GMT p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" expires: Wed, 19 Apr 2000 11:43:00 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 X-Firefox-Spdy: h2`

	www.acint.net/match?dp=95&euid=KIAJAIUK	193.3.184.135	200 OK	43 B
URL GET HTTP/2 www.acint.net/match?dp=95&euid=KIAJAIUK IP 193.3.184.135:443 ASN #50214 QWARTA LLC Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subject.acint.net FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1 ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash ad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda HTTP Headers GET /match?dp=95&euid=KIAJAIUK HTTP/1.1 Host: www.acint.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.acint.net/ DNT: 1 Connection: keep-alive Cookie: test_cookie=CheckForPermission; aid=fwAAAWVqSB0n/jbru+FxAnBO9uArXikJ9bP7KWs+DcG51+8Z; cSyncDp14v4=1701464093; cSyncDp14v6=1701464093; cSyncDp17v2=1701464093; cSyncDp45v5=1701464093; cSyncDp53v5=1701464093; cSyncDp62v2=1701464093; cSyncDp67v3=1701464093; cSyncDp68v2=1701464093; cSyncDp71v2=1701464093; cSyncDp80v2=1701464093; cSyncDp85v2=1701464093; cSyncDp95v4=1701464093; cSyncDp98v3=1701464093; cSyncDp104v2=1701464093; cSyncDp107v2=1701464093; cSyncDp110v3=1701464093; cSyncDp125v4=1701464093; cSyncDp126v2=1701464093; cSyncDp127v2=1701464093; cSyncDp129v2=1701464093; cSyncDp136v3=1701464093; cSyncDp146v2=1701464093; cSyncDp148v2=1701464093; cSyncDp149v3=1701464093; cSyncDp151v2=1701464093; cSyncDp251v1=1701464093; cSyncDp186v2=1701464093; cSyncDp217v2=1701464093; cSyncDp221v2=1701464093; cSyncDp235v2=1701464093; cSyncDp239v2=1701464093; cSyncDp243v2=1701464093; cSyncDp260v2=1701464093; cSyncDp244v2=1701464093; cSyncDp248v2=1701464093; cSyncDp261v1=1701464093 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: openresty date: Fri, 01 Dec 2023 20:54:55 GMT content-type: image/gif content-length: 43 last-modified: Mon, 28 Sep 1970 06:00:00 GMT p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" expires: Wed, 19 Apr 2000 11:43:00 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 X-Firefox-Spdy: h2`

	kimberlite.io/rtb/bid/hb/adfox	217.199.220.44	200 OK	11 B
URL POST HTTP/1.1 kimberlite.io/rtb/bid/hb/adfox IP 217.199.220.44:443 ASN #0 Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.kimberlite.io Fingerprint94:44:D9:27:EE:9B:5F:DE:36:07:ED:BA:1A:1D:62:2A:31:B6:43:72 ValidityFri, 10 Mar 2023 07:40:01 GMT - Wed, 10 Apr 2024 07:40:00 GMT File type JSON data\012- , ASCII text, with no line terminators Size 11 B (11 bytes) Hash 9cc989d2e211083e0a170316914f1d06 392cd18d051f72b887529ac2998da54749f1338f 846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b HTTP Headers POST /rtb/bid/hb/adfox HTTP/1.1 Host: kimberlite.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 364 Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: u=ZWpIHhCxuEg~3ibymx4COHG4rgC8hbNf8i9N5n8 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:55 GMT Content-Type: application/json Content-Length: 11 Connection: keep-alive access-control-allow-credentials: true access-control-allow-origin: https://hd.3lordserial.xyz set-cookie: u=ZWpIHhCxuEg~3ibymx4COHG4rgC8hbNf8i9N5n8; path=/; max-age=7776000; samesite=none; httponly; secure server-timing: app;srv=6;dur=0.0807`

	yhb.p.otm-r.com/yhb	194.55.244.186	200 OK	11 B
URL POST HTTP/2 yhb.p.otm-r.com/yhb IP 194.55.244.186:443 ASN #34959 Kviktel LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.p.otm-r.com FingerprintD6:A5:0F:D1:7C:BD:32:44:FA:DC:D7:1C:CE:C3:43:FB:5A:7B:F1:08 ValidityWed, 22 Feb 2023 14:51:57 GMT - Mon, 25 Mar 2024 14:51:56 GMT File type JSON data\012- , ASCII text, with no line terminators Size 11 B (11 bytes) Hash 9cc989d2e211083e0a170316914f1d06 392cd18d051f72b887529ac2998da54749f1338f 846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b HTTP Headers `POST /yhb HTTP/1.1 Host: yhb.p.otm-r.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 358 Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.23.2 date: Fri, 01 Dec 2023 20:54:55 GMT content-type: text/plain; charset=utf-8 content-length: 11 access-control-allow-credentials: true access-control-allow-origin: https://hd.3lordserial.xyz set-cookie: mpid=NjU2YTQ4MWYwNDc1NzJmNg==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None vary: Origin X-Firefox-Spdy: h2`

	s.myangular.life/ws?ref_id=13098	116.202.233.126		0 B
URL s.myangular.life/ws?ref_id=13098 IP 116.202.233.126:0 ASN #24940 Hetzner Online GmbH Certificate IssuerSectigo Limited Subjects.myangular.life Fingerprint3A:21:0F:72:24:43:49:14:06:28:C6:D0:A6:10:6B:D7:B2:EA:5A:66 ValidityTue, 04 Apr 2023 00:00:00 GMT - Sat, 04 May 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /ws?ref_id=13098 HTTP/1.1 Host: s.myangular.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: https://api.strvid.ws Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: 30bfXbUnEJKKDus5cJ+hbw== DNT: 1 Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols Server: nginx Date: Fri, 01 Dec 2023 20:54:55 GMT Connection: upgrade Upgrade: websocket Sec-WebSocket-Accept: TdrXL+QWaGwIB3Xg0Ym2N/dDyYg=`

	code.moviead55.ru/go/csync?cn=sapecookie&bid=0100007F1D486A65EB36FE270271E1BB	193.200.65.150	200 OK	0 B
URL GET HTTP/2 code.moviead55.ru/go/csync?cn=sapecookie&bid=0100007F1D486A65EB36FE270271E1BB IP 193.200.65.150:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /go/csync?cn=sapecookie&bid=0100007F1D486A65EB36FE270271E1BB HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: sky_uuid=be9fe05e-bd8f-fcbd-c0df-d3b5691c6bb7; otclkbid=VUG31mKFfTelneA; bzcookie=62702512-19f3-4f1f-709f-f1701214a947; ohmybid=8ff58d1b-9d36-4f21-a30f-e57ae193aeac; hbrdcookie2=86236e1e32982c274142; solta=ZWpIHhCxuEg Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:55 GMT content-type: image/jpeg content-length: 0 set-cookie: sapecookie=0100007F1D486A65EB36FE270271E1BB; max-age=86400; path=/; HttpOnly; secure; SameSite=None x-movieads-country: NO X-Firefox-Spdy: h2`

	www.acint.net/match?dp=98&euid=1c931d12-853d-4d5f-a5e5-985f2066ed0f	193.3.184.135	200 OK	43 B
URL GET HTTP/2 www.acint.net/match?dp=98&euid=1c931d12-853d-4d5f-a5e5-985f2066ed0f IP 193.3.184.135:443 ASN #50214 QWARTA LLC Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subject.acint.net FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1 ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash ad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda HTTP Headers GET /match?dp=98&euid=1c931d12-853d-4d5f-a5e5-985f2066ed0f HTTP/1.1 Host: www.acint.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.acint.net/ DNT: 1 Connection: keep-alive Cookie: test_cookie=CheckForPermission; aid=fwAAAWVqSB0n/jbru+FxAnBO9uArXikJ9bP7KWs+DcG51+8Z; cSyncDp14v4=1701464093; cSyncDp14v6=1701464093; cSyncDp17v2=1701464093; cSyncDp45v5=1701464093; cSyncDp53v5=1701464093; cSyncDp62v2=1701464093; cSyncDp67v3=1701464093; cSyncDp68v2=1701464093; cSyncDp71v2=1701464093; cSyncDp80v2=1701464093; cSyncDp85v2=1701464093; cSyncDp95v4=1701464093; cSyncDp98v3=1701464093; cSyncDp104v2=1701464093; cSyncDp107v2=1701464093; cSyncDp110v3=1701464093; cSyncDp125v4=1701464093; cSyncDp126v2=1701464093; cSyncDp127v2=1701464093; cSyncDp129v2=1701464093; cSyncDp136v3=1701464093; cSyncDp146v2=1701464093; cSyncDp148v2=1701464093; cSyncDp149v3=1701464093; cSyncDp151v2=1701464093; cSyncDp251v1=1701464093; cSyncDp186v2=1701464093; cSyncDp217v2=1701464093; cSyncDp221v2=1701464093; cSyncDp235v2=1701464093; cSyncDp239v2=1701464093; cSyncDp243v2=1701464093; cSyncDp260v2=1701464093; cSyncDp244v2=1701464093; cSyncDp248v2=1701464093; cSyncDp261v1=1701464093 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: openresty date: Fri, 01 Dec 2023 20:54:55 GMT content-type: image/gif content-length: 43 last-modified: Mon, 28 Sep 1970 06:00:00 GMT p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" expires: Wed, 19 Apr 2000 11:43:00 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 X-Firefox-Spdy: h2`

	code.moviead55.ru/go/jmap?v=647a534f9f5fb9ced25ee7db57ef9c72&sid=ap&cp.referer=https%253A%252F%252Fhd.3lordserial.xyz%252F146-kasl-sv-13.html&it=1&tq=2&cp.cb=36fff07f-45a2-8538-2327-e72340d68eb9&session=805e1579-dbe0-4830-bffa-dd6b2459b8b3&position=pre&vt=100&ostream=true&isp=0&suri=https%253A%252F%252Fhd.3lordserial.xyz%252F146-kasl-sv-13.html&rnd=1701464100448&raw=yes	193.200.65.150	200 OK	2 B
URL GET HTTP/2 code.moviead55.ru/go/jmap?v=647a534f9f5fb9ced25ee7db57ef9c72&sid=ap&cp.referer=https%253A%252F%252Fhd.3lordserial.xyz%252F146-kasl-sv-13.html&it=1&tq=2&cp.cb=36fff07f-45a2-8538-2327-e72340d68eb9&session=805e1579-dbe0-4830-bffa-dd6b2459b8b3&position=pre&vt=100&ostream=true&isp=0&suri=https%253A%252F%252Fhd.3lordserial.xyz%252F146-kasl-sv-13.html&rnd=1701464100448&raw=yes IP 193.200.65.150:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject*.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type JSON data\012- , ASCII text, with no line terminators Size 2 B (2 bytes) Hash d751713988987e9331980363e24189ce 97d170e1550eee4afc0af065b78cda302a97674c 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945 HTTP Headers GET /go/jmap?v=647a534f9f5fb9ced25ee7db57ef9c72&sid=ap&cp.referer=https%253A%252F%252Fhd.3lordserial.xyz%252F146-kasl-sv-13.html&it=1&tq=2&cp.cb=36fff07f-45a2-8538-2327-e72340d68eb9&session=805e1579-dbe0-4830-bffa-dd6b2459b8b3&position=pre&vt=100&ostream=true&isp=0&suri=https%253A%252F%252Fhd.3lordserial.xyz%252F146-kasl-sv-13.html&rnd=1701464100448&raw=yes HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: sky_uuid=be9fe05e-bd8f-fcbd-c0df-d3b5691c6bb7; otclkbid=VUG31mKFfTelneA; bzcookie=62702512-19f3-4f1f-709f-f1701214a947; ohmybid=8ff58d1b-9d36-4f21-a30f-e57ae193aeac; hbrdcookie2=86236e1e32982c274142; solta=ZWpIHhCxuEg Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:55 GMT content-type: application/json;charset=UTF-8 content-length: 2 x-movieads-cors-qex: Referer x-movieads-path: / access-control-allow-credentials: true access-control-allow-origin: https://hd.3lordserial.xyz x-go-country: NO x-movieads-udata: cache,parsed,14388 x-movieads-plc: 0 x-movieads-ark: true x-movieads-qmc: NO x-movieads-alc: 2 x-movieads-ctvs: 2 server-timing: buildTagsQueue;dur=0.0000, range_links;dur=0.0000, qManager;dur=0.0000, initBuilder;dur=0.0000, getLinks;dur=0.0000, queuesMerge;dur=0.0000, attachTracking;dur=0.0000, queueSort;dur=0.0000, getJson;dur=0.0000, jmapParams;dur=0.0000, keyValidation;dur=0.0000, uData;dur=0.0000, getAnyQueue;dur=0.0000, corsParams;dur=0.0000, wmData;dur=0.0000, optProc;dur=0.0000 x-movieads-country: NO X-Firefox-Spdy: h2

	img.zcvh.net/748951/desktop/thumb-1.webp	144.76.108.50	200 OK	213 kB
URL GET HTTP/1.1 img.zcvh.net/748951/desktop/thumb-1.webp IP 144.76.108.50:443 ASN #24940 Hetzner Online GmbH Requested by https://api.strvid.ws/embed/movie/455 Certificate IssuerLet's Encrypt Subject.zcvh.net Fingerprint9F:09:BF:B0:10:B8:43:CC:8F:29:36:BC:BD:D2:2C:71:A7:7E:CA:9A ValidityWed, 27 Sep 2023 04:02:29 GMT - Tue, 26 Dec 2023 04:02:28 GMT File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x900, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Size 213 kB (212626 bytes) Hash ec8ce9030289ceacccd38bd5a3dca384 42e791a20cf4e6547a62f1f88b4d2c3f9ae8dcf6 fb3018fa704be9d53225b392301cbecd847c3b1843ed77b11920cf7ec8e46581 HTTP Headers `GET /748951/desktop/thumb-1.webp HTTP/1.1 Host: img.zcvh.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://api.strvid.ws/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:55 GMT Content-Type: image/webp Content-Length: 212626 Last-Modified: Mon, 12 Sep 2022 02:36:41 GMT Connection: keep-alive ETag: "631e9b39-33e92" Access-Control-Allow-Origin: * Accept-Ranges: bytes`

	www.acint.net/match?dp=71&euid=8b57f7b8-ff6f-434c-b65e-0d51403ce371	193.3.184.135	200 OK	43 B
URL GET HTTP/2 www.acint.net/match?dp=71&euid=8b57f7b8-ff6f-434c-b65e-0d51403ce371 IP 193.3.184.135:443 ASN #50214 QWARTA LLC Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subject.acint.net FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1 ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash ad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda HTTP Headers GET /match?dp=71&euid=8b57f7b8-ff6f-434c-b65e-0d51403ce371 HTTP/1.1 Host: www.acint.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.acint.net/ DNT: 1 Connection: keep-alive Cookie: test_cookie=CheckForPermission; aid=fwAAAWVqSB0n/jbru+FxAnBO9uArXikJ9bP7KWs+DcG51+8Z; cSyncDp14v4=1701464093; cSyncDp14v6=1701464093; cSyncDp17v2=1701464093; cSyncDp45v5=1701464093; cSyncDp53v5=1701464093; cSyncDp62v2=1701464093; cSyncDp67v3=1701464093; cSyncDp68v2=1701464093; cSyncDp71v2=1701464093; cSyncDp80v2=1701464093; cSyncDp85v2=1701464093; cSyncDp95v4=1701464093; cSyncDp98v3=1701464093; cSyncDp104v2=1701464093; cSyncDp107v2=1701464093; cSyncDp110v3=1701464093; cSyncDp125v4=1701464093; cSyncDp126v2=1701464093; cSyncDp127v2=1701464093; cSyncDp129v2=1701464093; cSyncDp136v3=1701464093; cSyncDp146v2=1701464093; cSyncDp148v2=1701464093; cSyncDp149v3=1701464093; cSyncDp151v2=1701464093; cSyncDp251v1=1701464093; cSyncDp186v2=1701464093; cSyncDp217v2=1701464093; cSyncDp221v2=1701464093; cSyncDp235v2=1701464093; cSyncDp239v2=1701464093; cSyncDp243v2=1701464093; cSyncDp260v2=1701464093; cSyncDp244v2=1701464093; cSyncDp248v2=1701464093; cSyncDp261v1=1701464093 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: openresty date: Fri, 01 Dec 2023 20:54:55 GMT content-type: image/gif content-length: 43 last-modified: Mon, 28 Sep 1970 06:00:00 GMT p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" expires: Wed, 19 Apr 2000 11:43:00 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 X-Firefox-Spdy: h2`

	exchange.buzzoola.com/ssp/adfox?set_buzzoola_cookie=t	138.201.34.238	200 OK	11 B
URL POST HTTP/2 exchange.buzzoola.com/ssp/adfox?set_buzzoola_cookie=t IP 138.201.34.238:443 ASN #24940 Hetzner Online GmbH Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerSectigo Limited Subject.buzzoola.com FingerprintE6:7F:94:98:CF:E4:CF:88:C7:8C:FC:16:A3:D7:D0:10:4E:EC:AB:F1 ValidityMon, 04 Sep 2023 00:00:00 GMT - Fri, 04 Oct 2024 23:59:59 GMT File type JSON data\012- , ASCII text, with no line terminators Size 11 B (11 bytes) Hash 9cc989d2e211083e0a170316914f1d06 392cd18d051f72b887529ac2998da54749f1338f 846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b HTTP Headers POST /ssp/adfox?set_buzzoola_cookie=t HTTP/1.1 Host: exchange.buzzoola.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 362 Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: uuid=9ec21319-5e24-4b88-6e86-87b40e4ff5bc Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:57 GMT content-type: text/plain; charset=utf-8 content-length: 11 access-control-allow-credentials: true access-control-allow-headers: Set-Cookie, X-Alt-Referer, X-First-Party-Cookie, X-Aidata-FP, If-None-Match access-control-allow-origin: https://hd.3lordserial.xyz access-control-expose-headers: Set-Cookie, Etag set-cookie: cookiesyncs=000000000000000000000000d93dab9edf0912baf9008f35866978f1; Path=/; Domain=exchange.buzzoola.com; Expires=Sat, 02 Dec 2023 08:54:57 GMT; Max-Age=43200; Secure; SameSite=None serverid: TODO X-Firefox-Spdy: h2

	pix.bumlam.com/sync/sape/sync_ok?guid=e13833ce-908b-11ee-86e0-002590c0647c	31.172.81.158	302 Found	0 B
URL GET HTTP/1.1 pix.bumlam.com/sync/sape/sync_ok?guid=e13833ce-908b-11ee-86e0-002590c0647c IP 31.172.81.158:443 ASN #44066 diva-e Datacenters GmbH Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subject.bumlam.com Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0 ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /sync/sape/sync_ok?guid=e13833ce-908b-11ee-86e0-002590c0647c HTTP/1.1 Host: pix.bumlam.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.acint.net/ DNT: 1 Connection: keep-alive Cookie: suuid3=IiRlMTM4MzNjZS05MDhiLTExZWUtODZlMC0wMDI1OTBjMDY0N2M* Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 302 Found Server: nginx Date: Fri, 01 Dec 2023 20:54:55 GMT Content-Type: image/gif Content-Length: 0 Connection: keep-alive Access-Control-Allow-Origin: https://www.acint.net Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Pragma: no-cache Expires: 05-Jun-2005 22:00:00 GMT X-Xss-Protection: 0 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://e13833ce-908b-11ee-86e0-002590c0647c.n2.sync.bumlam.com/?src=sape

	www.acint.net/match?dp=251&euid=d6979f52-2616-aa83-4667-870fd419f06c	193.3.184.135	200 OK	43 B
URL GET HTTP/2 www.acint.net/match?dp=251&euid=d6979f52-2616-aa83-4667-870fd419f06c IP 193.3.184.135:443 ASN #50214 QWARTA LLC Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subject.acint.net FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1 ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash ad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda HTTP Headers GET /match?dp=251&euid=d6979f52-2616-aa83-4667-870fd419f06c HTTP/1.1 Host: www.acint.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.acint.net/ DNT: 1 Connection: keep-alive Cookie: test_cookie=CheckForPermission; aid=fwAAAWVqSB0n/jbru+FxAnBO9uArXikJ9bP7KWs+DcG51+8Z; cSyncDp14v4=1701464093; cSyncDp14v6=1701464093; cSyncDp17v2=1701464093; cSyncDp45v5=1701464093; cSyncDp53v5=1701464093; cSyncDp62v2=1701464093; cSyncDp67v3=1701464093; cSyncDp68v2=1701464093; cSyncDp71v2=1701464093; cSyncDp80v2=1701464093; cSyncDp85v2=1701464093; cSyncDp95v4=1701464093; cSyncDp98v3=1701464093; cSyncDp104v2=1701464093; cSyncDp107v2=1701464093; cSyncDp110v3=1701464093; cSyncDp125v4=1701464093; cSyncDp126v2=1701464093; cSyncDp127v2=1701464093; cSyncDp129v2=1701464093; cSyncDp136v3=1701464093; cSyncDp146v2=1701464093; cSyncDp148v2=1701464093; cSyncDp149v3=1701464093; cSyncDp151v2=1701464093; cSyncDp251v1=1701464093; cSyncDp186v2=1701464093; cSyncDp217v2=1701464093; cSyncDp221v2=1701464093; cSyncDp235v2=1701464093; cSyncDp239v2=1701464093; cSyncDp243v2=1701464093; cSyncDp260v2=1701464093; cSyncDp244v2=1701464093; cSyncDp248v2=1701464093; cSyncDp261v1=1701464093 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: openresty date: Fri, 01 Dec 2023 20:54:55 GMT content-type: image/gif content-length: 43 last-modified: Mon, 28 Sep 1970 06:00:00 GMT p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" expires: Wed, 19 Apr 2000 11:43:00 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 X-Firefox-Spdy: h2`

	e13833ce-908b-11ee-86e0-002590c0647c.n2.sync.bumlam.com/?src=sape	80.87.198.24	302 Found	0 B
URL GET HTTP/2 e13833ce-908b-11ee-86e0-002590c0647c.n2.sync.bumlam.com/?src=sape IP 80.87.198.24:443 ASN #29182 JSC IOT Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subject.n0.sync.bumlam.com Fingerprint99:77:61:BD:7C:71:52:75:4C:35:19:FA:21:42:A9:2E:BF:93:81:BF ValidityTue, 19 Sep 2023 05:05:41 GMT - Mon, 18 Dec 2023 05:05:40 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /?src=sape HTTP/1.1 Host: e13833ce-908b-11ee-86e0-002590c0647c.n2.sync.bumlam.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.acint.net/ DNT: 1 Connection: keep-alive Cookie: suuid3=IiRlMTM4MzNjZS05MDhiLTExZWUtODZlMC0wMDI1OTBjMDY0N2M* Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 302 Found server: nginx/1.24.0 date: Fri, 01 Dec 2023 20:54:56 GMT content-length: 0 location: https://pix.bumlam.com/sync/sape/done access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS X-Firefox-Spdy: h2`

	user91471.clients-cdnnow.ru/yasdk/vw.js?v3	185.40.155.13		1.4 kB
URL user91471.clients-cdnnow.ru/yasdk/vw.js?v3 IP 185.40.155.13:0 ASN #21030 Docker LTD File type gzip compressed data, from Unix\012- data Size 1.4 kB (1399 bytes) Hash 215acb4e51d71be68eaeb0243feb78ab dcc640c5e95a42b67aa4839a4aef77e02e7f3b4c 1ccbd9b926fbb3f58d5d96fd8e34d58a37c8b15ff1b56dba697ed7d651195cc3 HTTP Headers `GET /yasdk/vw.js?v3 HTTP/1.1 Host: user91471.clients-cdnnow.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:55 GMT content-type: application/javascript last-modified: Fri, 21 Jul 2023 13:34:19 GMT vary: Accept-Encoding etag: W/"64ba895b-12fc" x-movieads-country: RU content-encoding: gzip x-edge-cache: HIT x-edge-ip: 172.19.32.3 X-Firefox-Spdy: h2`

	user91471.clients-cdnnow.ru/vp_dist/hls.js?v2	185.40.155.13	200 OK	97 kB
URL GET HTTP/2 user91471.clients-cdnnow.ru/vp_dist/hls.js?v2 IP 185.40.155.13:443 ASN #21030 Docker LTD Requested by https://videotoday.site/mp_dist/td/trhls.html?v5646834026 Certificate IssuerLet's Encrypt Subject.clients-cdnnow.ru Fingerprint7E:E4:04:34:49:F5:F1:E6:2A:83:55:F6:8A:EF:64:0A:9D:DB:88:53 ValidityTue, 07 Nov 2023 22:34:52 GMT - Mon, 05 Feb 2024 22:34:51 GMT File type ASCII text, with very long lines (65536), with no line terminators Size 97 kB (97181 bytes) Hash 05a1b55a4d7828b9fcfb4a2a43f1ded8 f06fa60dd1e0c60d590d8cfccc82823bdd67ee25 a209e611d60a9f94a32a91cd925d1918a11ae38476c13499c0e71a33b9c8d4d3 HTTP Headers `GET /vp_dist/hls.js?v2 HTTP/1.1 Host: user91471.clients-cdnnow.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://videotoday.site/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:56 GMT content-type: application/javascript last-modified: Tue, 14 Feb 2023 08:10:38 GMT vary: Accept-Encoding etag: W/"63eb41fe-52302" x-movieads-country: RU content-encoding: gzip x-edge-cache: HIT x-edge-ip: 172.19.32.3 X-Firefox-Spdy: h2`

	static.filmskino.site/hls/trailers/arJIA_8cyT0.mp4/seg-1-v1-a1.ts	193.200.65.230	200 OK	238 kB
URL GET HTTP/1.1 static.filmskino.site/hls/trailers/arJIA_8cyT0.mp4/seg-1-v1-a1.ts IP 193.200.65.230:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://videotoday.site/mp_dist/td/trhls.html?v5646834026 Certificate IssuerLet's Encrypt Subjectstatic.filmskino.site Fingerprint6E:8F:8F:89:03:E1:65:6F:AE:73:8A:6F:6B:A2:B1:02:C1:FE:D3:C7 ValidityMon, 02 Oct 2023 16:05:08 GMT - Sun, 31 Dec 2023 16:05:07 GMT File type MPEG transport stream data\012- data Size 238 kB (238008 bytes) Hash 98616065fd379d384eb2f9e097653403 75cdf38589191b963badcf808f565cd705cf2b3a 5c43a81c639cea66bc1c0aaa5a7b2c334ad522c910b085d83c25e216d9c536a7 HTTP Headers `GET /hls/trailers/arJIA_8cyT0.mp4/seg-1-v1-a1.ts HTTP/1.1 Host: static.filmskino.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://videotoday.site DNT: 1 Connection: keep-alive Referer: https://videotoday.site/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:57 GMT Content-Type: video/MP2T Content-Length: 238008 Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT Connection: keep-alive ETag: "3a1794b0-3a1b8" Expires: Sun, 10 Mar 2024 20:54:57 GMT Cache-Control: max-age=8640000 Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Origin: * Accept-Ranges: bytes`

	sync.dmp.otm-r.com/match/aotm.js	148.251.9.22	204 No Content	0 B
URL GET HTTP/2 sync.dmp.otm-r.com/match/aotm.js IP 148.251.9.22:443 ASN #24940 Hetzner Online GmbH Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.dmp.otm-r.com FingerprintC6:A2:9D:82:0D:D1:C1:2D:A4:ED:7F:05:13:52:5B:94:6B:10:58:D6 ValidityMon, 19 Jun 2023 10:50:51 GMT - Sat, 20 Jul 2024 10:50:50 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /match/aotm.js HTTP/1.1 Host: sync.dmp.otm-r.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: mpid=NjU2YTQ4MWYwNDc1NzJmNg== Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 204 No Content server: nginx/1.17.2 date: Fri, 01 Dec 2023 20:54:57 GMT access-control-allow-origin: * X-Firefox-Spdy: h2`

	static.filmskino.site/hls/trailers/arJIA_8cyT0.mp4/seg-2-v1-a1.ts	193.200.65.230	200 OK	226 kB
URL GET HTTP/1.1 static.filmskino.site/hls/trailers/arJIA_8cyT0.mp4/seg-2-v1-a1.ts IP 193.200.65.230:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://videotoday.site/mp_dist/td/trhls.html?v5646834026 Certificate IssuerLet's Encrypt Subjectstatic.filmskino.site Fingerprint6E:8F:8F:89:03:E1:65:6F:AE:73:8A:6F:6B:A2:B1:02:C1:FE:D3:C7 ValidityMon, 02 Oct 2023 16:05:08 GMT - Sun, 31 Dec 2023 16:05:07 GMT File type MPEG transport stream data\012- TeX font metric data (\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377)\012- data Size 226 kB (225976 bytes) Hash 023aed136f0161337a6541e5eeb24d70 d2fc4342a9668b0a1fe2b86f2383b8f6a7cc5887 001d1cce503c2f072d35e13f148520c407541e6bc0ac8c8f66e5f64537684663 HTTP Headers `GET /hls/trailers/arJIA_8cyT0.mp4/seg-2-v1-a1.ts HTTP/1.1 Host: static.filmskino.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://videotoday.site DNT: 1 Connection: keep-alive Referer: https://videotoday.site/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:57 GMT Content-Type: video/MP2T Content-Length: 225976 Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT Connection: keep-alive ETag: "3a1794b0-372b8" Expires: Sun, 10 Mar 2024 20:54:57 GMT Cache-Control: max-age=8640000 Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Origin: * Accept-Ranges: bytes`

	cdn.alfasense.net/lib/prebid.js	136.144.31.36	200 OK	399 kB
URL GET HTTP/2 cdn.alfasense.net/lib/prebid.js IP 136.144.31.36:443 ASN #52000 Innovation IT Solutions LTD Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasense.net Fingerprint15:61:D7:BD:E9:E1:37:36:5F:FD:47:F7:69:F7:5E:53:CD:95:A9:59 ValidityWed, 22 Nov 2023 16:23:03 GMT - Mon, 23 Dec 2024 16:23:02 GMT File type gzip compressed data, max speed, from Unix\012- data Size 399 kB (398994 bytes) Hash defdd4da629dc989a6c72d7efdd4a318 39fac2e88ffef7dfeb5eef0bc26c975e4b0d64de 8ba94786b255f6547e03cf910dc4e4ac43545c8b258c5392b4eb64c540971b0a HTTP Headers `GET /lib/prebid.js HTTP/1.1 Host: cdn.alfasense.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:57 GMT content-type: application/javascript last-modified: Mon, 27 Feb 2023 15:51:14 GMT etag: W/"63fcd172-2c53e" content-security-policy: frame-ancestors 'none';frame-src 'self'; cross-origin-embedder-policy: unsafe-none cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: cross-origin access-control-allow-origin: * permissions-policy: geolocation=(self), payment=(self) referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block; cache-control: public, max-age=60 content-encoding: gzip set-cookie: route=dd92c318b574e2af8018c0207c5098f9; Path=/ SRVGROUP=common; path=/; Secure; HttpOnly X-Firefox-Spdy: h2

	cs.alfasense.com/pixeljs	23.111.100.20	200 OK	5.5 kB
URL GET HTTP/1.1 cs.alfasense.com/pixeljs IP 23.111.100.20:443 ASN #7979 SERVERS-COM Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasense.com Fingerprint92:58:B8:97:87:98:3A:5B:01:DA:24:13:D3:B2:D4:AF:F5:07:AE:9E ValiditySat, 10 Dec 2022 23:58:10 GMT - Thu, 11 Jan 2024 23:58:09 GMT File type ASCII text, with very long lines (5490), with no line terminators Size 5.5 kB (5490 bytes) Hash 9b2e8925020b6030ca86b1d6cfc1acc5 9c7c0bbc4c4b22541c6d9ba57ba5c352d2ea6b7b efed13ab86b3d36fb4ce08c5a11c0c26fedcbb502e742ab013e9c04111512e0e HTTP Headers `GET /pixeljs HTTP/1.1 Host: cs.alfasense.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Fri, 01 Dec 2023 20:54:57 GMT Content-Type: application/javascript Content-Length: 5490 Connection: keep-alive Server: fasthttp Set-Cookie: uuid=76165f9c-19c5-44f9-a939-d74d6f307d13; expires=Thu, 21 Nov 2024 20:54:57 GMT; domain=alfasense.com; path=/; secure; SameSite=None Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.100.20 Accept-Ranges: bytes

	v.alfasrv.com/stats/2x2.png?s=104707&e=r&t=p	84.201.179.252	200 OK	95 B
URL GET HTTP/1.1 v.alfasrv.com/stats/2x2.png?s=104707&e=r&t=p IP 84.201.179.252:443 ASN #200350 Yandex.Cloud LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasrv.com Fingerprint4B:8A:22:65:23:10:74:25:5D:40:3B:78:20:8D:F8:82:A4:50:44:90 ValidityTue, 10 Oct 2023 09:20:49 GMT - Sun, 10 Nov 2024 09:20:48 GMT File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data Size 95 B (95 bytes) Hash 9591c410148e6883727c5339fd1c02cd 3442a95fe890ce4769b36b2ecc611b801a54cfb5 cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323 HTTP Headers `GET /stats/2x2.png?s=104707&e=r&t=p HTTP/1.1 Host: v.alfasrv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.14.1 Date: Fri, 01 Dec 2023 20:54:57 GMT Content-Type: image/png Content-Length: 95 Connection: keep-alive Last-Modified: Friday, 01-Dec-2023 20:54:57 GMT Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0 Accept-Ranges: bytes`

	s.alfasrv.com/events/1x1.png?s=104707&e=r&t=p	130.193.42.23	200 OK	95 B
URL GET HTTP/2 s.alfasrv.com/events/1x1.png?s=104707&e=r&t=p IP 130.193.42.23:443 ASN #200350 Yandex.Cloud LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasrv.com Fingerprint4B:8A:22:65:23:10:74:25:5D:40:3B:78:20:8D:F8:82:A4:50:44:90 ValidityTue, 10 Oct 2023 09:20:49 GMT - Sun, 10 Nov 2024 09:20:48 GMT File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data Size 95 B (95 bytes) Hash 9591c410148e6883727c5339fd1c02cd 3442a95fe890ce4769b36b2ecc611b801a54cfb5 cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323 HTTP Headers `GET /events/1x1.png?s=104707&e=r&t=p HTTP/1.1 Host: s.alfasrv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx/1.24.0 date: Fri, 01 Dec 2023 20:54:57 GMT content-type: image/png content-length: 95 access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-Original-Referer access-control-allow-credentials: true cache-control: no-cache,no-store expires: Tue, 01 Jan 1980 1:00:00 GMT accept-ranges: bytes X-Firefox-Spdy: h2`

	sync.programmatica.com/match/Alfasense?id=76165f9c-19c5-44f9-a939-d74d6f307d13	167.235.117.42	200 OK	43 B
URL GET HTTP/2 sync.programmatica.com/match/Alfasense?id=76165f9c-19c5-44f9-a939-d74d6f307d13 IP 167.235.117.42:443 ASN #24940 Hetzner Online GmbH Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.programmatica.com FingerprintE4:B6:ED:A7:02:18:8C:3F:D0:A3:8D:04:EE:40:21:0A:0E:83:D1:D6 ValidityThu, 15 Dec 2022 17:05:13 GMT - Tue, 16 Jan 2024 17:05:12 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash 07fff40b5dd495aca2ac4e1c3fbc60aa e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4 a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7 HTTP Headers `GET /match/Alfasense?id=76165f9c-19c5-44f9-a939-d74d6f307d13 HTTP/1.1 Host: sync.programmatica.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:57 GMT content-type: image/gif content-length: 43 strict-transport-security: max-age=31536000; includeSubDomains; preload X-Firefox-Spdy: h2`

	kimberlite.io/rtb/sync/alfasense?u=76165f9c-19c5-44f9-a939-d74d6f307d13	217.199.220.44	307 Temporary Redirect	0 B
URL GET HTTP/1.1 kimberlite.io/rtb/sync/alfasense?u=76165f9c-19c5-44f9-a939-d74d6f307d13 IP 217.199.220.44:443 ASN #0 Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.kimberlite.io Fingerprint94:44:D9:27:EE:9B:5F:DE:36:07:ED:BA:1A:1D:62:2A:31:B6:43:72 ValidityFri, 10 Mar 2023 07:40:01 GMT - Wed, 10 Apr 2024 07:40:00 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /rtb/sync/alfasense?u=76165f9c-19c5-44f9-a939-d74d6f307d13 HTTP/1.1 Host: kimberlite.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: as=hPJ_CGVqSB4; f=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D243%26euid%3DZWpIHhCxuEg; n=1; u=ZWpIHhCxuEg~3ibymx4COHG4rgC8hbNf8i9N5n8 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 307 Temporary Redirect Server: nginx Date: Fri, 01 Dec 2023 20:54:57 GMT Content-Length: 0 Connection: keep-alive cache-control: no-store access-control-allow-credentials: true access-control-allow-origin: * set-cookie: as=-WrUeGVqSCGE8n8IZWpIHg; max-age=604800; samesite=none; httponly; secure n=2; max-age=30; samesite=none; httponly; secure location: https://solta-sync.rutarget.ru/sync referrer-policy: no-referrer server-timing: app;srv=0;dur=0.0001`

	ssp.afp.ai/api/sync/alfadart?skipme=76165f9c-19c5-44f9-a939-d74d6f307d13	45.139.25.121	302 Found	0 B
URL GET HTTP/1.1 ssp.afp.ai/api/sync/alfadart?skipme=76165f9c-19c5-44f9-a939-d74d6f307d13 IP 45.139.25.121:443 ASN #34959 Kviktel LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerSectigo Limited Subject.afp.ai Fingerprint6D:78:55:60:8D:74:D7:2E:9F:A5:B1:56:72:76:A6:20:F9:7E:E4:4F ValidityMon, 23 Oct 2023 00:00:00 GMT - Tue, 24 Sep 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /api/sync/alfadart?skipme=76165f9c-19c5-44f9-a939-d74d6f307d13 HTTP/1.1 Host: ssp.afp.ai User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: afp_cookie=gAAAAABlakgeRPGA6h94i8MvgZ-8z9rn5id0rOXnsktRldr255bgxHlWLd-cfBwWKqGveq95tgLOYQ77CUQY7kWBIFElaj7rZgZp0hY-XmZDA1T1L7GTAzpsDA_Z6jcKn2c4MAph4pe04Z_ffzheAp7Tv0woI5z_GJH8voR7o5HZsTy7pMPP1_4hBkvvOmQUhxsCNMyDx2iS$ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 302 Found Server: nginx/1.20.1 Date: Fri, 01 Dec 2023 20:54:57 GMT Content-Length: 0 Connection: keep-alive Vary: Origin Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Location: https://cs.alfasense.com/p?ssp=al&id=1b977199-607e-4479-8f7c-7ffe43e102a6 Set-Cookie: afp_cookie=gAAAAABlakghRaD_6gjbZCkwWkVqsHE_UN_vfUkZObUcX0ePvobtyIrSZRNnsPKBRqtECRGs_q8HiqNVXwZVJhH_1hnchzjdAtpqmyaoHz38n6JkUicP_qEjaJp6vDCLLD4wUX5gGhhuIyZIedbQfVgp5O7hAICf_t2S892H_Ew6cYsF2XkSmLs9AMVdD_LpU587N6YUY7RJCqJ8TbW2dFEen7tzpfAfwvzbhHdnyN6mS7itlBzfjek=$; expires=Mon, 01 Jan 2024 20:54:57 GMT; path=/; secure; SameSite=None

	sync.adspend.space/alfasense?uid=76165f9c-19c5-44f9-a939-d74d6f307d13	5.189.234.229	204 No Content	0 B
URL GET HTTP/2 sync.adspend.space/alfasense?uid=76165f9c-19c5-44f9-a939-d74d6f307d13 IP 5.189.234.229:443 ASN #50340 OOO Network of data-centers Selectel Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subjectadspend.space Fingerprint25:A8:18:8F:99:5E:81:77:EE:CC:A2:7D:B9:A4:65:C6:29:9B:72:AF ValidityMon, 27 Nov 2023 12:15:31 GMT - Sun, 25 Feb 2024 12:15:30 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /alfasense?uid=76165f9c-19c5-44f9-a939-d74d6f307d13 HTTP/1.1 Host: sync.adspend.space User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: as-user=1c931d12-853d-4d5f-a5e5-985f2066ed0f Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 204 No Content server: nginx/1.22.1 date: Fri, 01 Dec 2023 20:54:57 GMT X-Firefox-Spdy: h2`

	www.acint.net/rmatch?dp=185&euid=76165f9c-19c5-44f9-a939-d74d6f307d13&r=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dsp%26uid%3D%24%7BUSER_ID%7D	193.3.184.135	302 Found	154 B
URL GET HTTP/2 www.acint.net/rmatch?dp=185&euid=76165f9c-19c5-44f9-a939-d74d6f307d13&r=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dsp%26uid%3D%24%7BUSER_ID%7D IP 193.3.184.135:443 ASN #50214 QWARTA LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.acint.net FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1 ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 154 B (154 bytes) Hash cfbeaf604823f038b8b46f0ac862b98c 7b9eb1dac48e74fa5f418bc456cb410f88b81d98 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319 HTTP Headers GET /rmatch?dp=185&euid=76165f9c-19c5-44f9-a939-d74d6f307d13&r=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dsp%26uid%3D%24%7BUSER_ID%7D HTTP/1.1 Host: www.acint.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: test_cookie=CheckForPermission; aid=fwAAAWVqSB0n/jbru+FxAnBO9uArXikJ9bP7KWs+DcG51+8Z; cSyncDp14v4=1701464093; cSyncDp14v6=1701464093; cSyncDp17v2=1701464093; cSyncDp45v5=1701464093; cSyncDp53v5=1701464093; cSyncDp62v2=1701464093; cSyncDp67v3=1701464093; cSyncDp68v2=1701464093; cSyncDp71v2=1701464093; cSyncDp80v2=1701464093; cSyncDp85v2=1701464093; cSyncDp95v4=1701464093; cSyncDp98v3=1701464093; cSyncDp104v2=1701464093; cSyncDp107v2=1701464093; cSyncDp110v3=1701464093; cSyncDp125v4=1701464093; cSyncDp126v2=1701464093; cSyncDp127v2=1701464093; cSyncDp129v2=1701464093; cSyncDp136v3=1701464093; cSyncDp146v2=1701464093; cSyncDp148v2=1701464093; cSyncDp149v3=1701464093; cSyncDp151v2=1701464093; cSyncDp251v1=1701464093; cSyncDp186v2=1701464093; cSyncDp217v2=1701464093; cSyncDp221v2=1701464093; cSyncDp235v2=1701464093; cSyncDp239v2=1701464093; cSyncDp243v2=1701464093; cSyncDp260v2=1701464093; cSyncDp244v2=1701464093; cSyncDp248v2=1701464093; cSyncDp261v1=1701464093 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 302 Found server: openresty date: Fri, 01 Dec 2023 20:54:57 GMT content-type: text/html content-length: 154 location: https://cs.alfasense.com/p?ssp=sp&uid=0100007F1D486A65EB36FE270271E1BB p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" expires: Wed, 19 Apr 2000 11:43:00 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 X-Firefox-Spdy: h2`

	sync.bumlam.com/?src=asense&uid=76165f9c-19c5-44f9-a939-d74d6f307d13	31.172.81.159	200 OK	43 B
URL GET HTTP/1.1 sync.bumlam.com/?src=asense&uid=76165f9c-19c5-44f9-a939-d74d6f307d13 IP 31.172.81.159:443 ASN #44066 diva-e Datacenters GmbH Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.bumlam.com Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0 ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash df3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87 HTTP Headers GET /?src=asense&uid=76165f9c-19c5-44f9-a939-d74d6f307d13 HTTP/1.1 Host: sync.bumlam.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: suuid3=IiRlMTM4MzNjZS05MDhiLTExZWUtODZlMC0wMDI1OTBjMDY0N2M* Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:57 GMT Content-Type: image/gif Content-Length: 43 Connection: keep-alive Set-Cookie: suuid3=IiRlMTM4MzNjZS05MDhiLTExZWUtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Thu, 26 Nov 2043 20:54:57 GMT; Domain=bumlam.com; SameSite=None; Secure P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0`

	cs.agency2.ru/p?ssp=ai&skipme=76165f9c-19c5-44f9-a939-d74d6f307d13	23.111.107.44	301 Moved Permanently	0 B
URL GET HTTP/1.1 cs.agency2.ru/p?ssp=ai&skipme=76165f9c-19c5-44f9-a939-d74d6f307d13 IP 23.111.107.44:443 ASN #7979 SERVERS-COM Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subjectapi.agency2.ru Fingerprint50:48:39:D7:EB:8F:8E:E7:36:A3:F3:08:25:93:84:7F:6B:36:24:95 ValidityMon, 16 Oct 2023 23:38:04 GMT - Sun, 14 Jan 2024 23:38:03 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /p?ssp=ai&skipme=76165f9c-19c5-44f9-a939-d74d6f307d13 HTTP/1.1 Host: cs.agency2.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: uuid=e6bd85b4-44d0-493f-8c6d-4ce8e9152d79 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 301 Moved Permanently Date: Fri, 01 Dec 2023 20:54:57 GMT Content-Length: 0 Connection: keep-alive Server: fasthttp Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://x01.aidata.io/0.gif?pid=7140034&id=e6bd85b4-44d0-493f-8c6d-4ce8e9152d79 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.107.44

	exchange.buzzoola.com/cookiesync/redirect?skip2=76165f9c-19c5-44f9-a939-d74d6f307d13&redirect_url=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dbz%26uid%3D%24%7BUUID%7D	138.201.34.238	301 Moved Permanently	113 B
URL GET HTTP/2 exchange.buzzoola.com/cookiesync/redirect?skip2=76165f9c-19c5-44f9-a939-d74d6f307d13&redirect_url=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dbz%26uid%3D%24%7BUUID%7D IP 138.201.34.238:443 ASN #24940 Hetzner Online GmbH Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerSectigo Limited Subject.buzzoola.com FingerprintE6:7F:94:98:CF:E4:CF:88:C7:8C:FC:16:A3:D7:D0:10:4E:EC:AB:F1 ValidityMon, 04 Sep 2023 00:00:00 GMT - Fri, 04 Oct 2024 23:59:59 GMT File type HTML document, ASCII text Size 113 B (113 bytes) Hash f9e0530c177be02d27ab06a824e9e680 64e12443053f594823e7bb8b0179535ae48a55d1 e6789b48f4bbf479bb711c7f5e112a9552c7c0c71a77013a50ce008a0d67f82e HTTP Headers GET /cookiesync/redirect?skip2=76165f9c-19c5-44f9-a939-d74d6f307d13&redirect_url=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dbz%26uid%3D%24%7BUUID%7D HTTP/1.1 Host: exchange.buzzoola.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: uuid=9ec21319-5e24-4b88-6e86-87b40e4ff5bc; cookiesyncs=000000000000000000000000d93dab9edf0912baf9008f35866978f1 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 301 Moved Permanently server: nginx date: Fri, 01 Dec 2023 20:54:57 GMT content-type: text/html; charset=utf-8 content-length: 113 location: https://cs.alfasense.com/p?ssp=bz&uid=9ec21319-5e24-4b88-6e86-87b40e4ff5bc serverid: TODO X-Firefox-Spdy: h2`

	sync.upravel.com/alfadart/sync?uid=76165f9c-19c5-44f9-a939-d74d6f307d13	136.243.48.22	302 Found	0 B
URL GET HTTP/2 sync.upravel.com/alfadart/sync?uid=76165f9c-19c5-44f9-a939-d74d6f307d13 IP 136.243.48.22:443 ASN #24940 Hetzner Online GmbH Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.upravel.com Fingerprint4C:ED:03:57:58:43:18:2C:CC:41:F3:3B:19:72:75:BD:29:C1:04:08 ValiditySat, 29 Apr 2023 07:48:21 GMT - Thu, 30 May 2024 07:48:20 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /alfadart/sync?uid=76165f9c-19c5-44f9-a939-d74d6f307d13 HTTP/1.1 Host: sync.upravel.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: session_tptc=1701464094871; user_id=8b57f7b8-ff6f-434c-b65e-0d51403ce371 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 302 Found server: nginx date: Fri, 01 Dec 2023 20:54:57 GMT content-type: image/png content-length: 0 p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: user_id=8b57f7b8-ff6f-434c-b65e-0d51403ce371;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000 user_id-legacy=8b57f7b8-ff6f-434c-b65e-0d51403ce371;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000 location: https://cs.alfasense.com/p?ssp=up&id=8b57f7b8-ff6f-434c-b65e-0d51403ce371 access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range access-control-expose-headers: Content-Length,Content-Range access-control-allow-credentials: false X-Firefox-Spdy: h2

	const.uno/id.json?p=5	95.163.84.7	200 OK	13 B
URL GET HTTP/1.1 const.uno/id.json?p=5 IP 95.163.84.7:443 ASN #12695 LLC Digital Network Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subjectconst.uno FingerprintF3:55:FF:DF:CF:D2:5B:10:0C:D3:01:CB:10:2A:F0:23:D4:D3:B1:04 ValidityFri, 13 Oct 2023 08:17:54 GMT - Thu, 11 Jan 2024 08:17:53 GMT File type JSON data\012- , ASCII text, with no line terminators Size 13 B (13 bytes) Hash f51f496a0658094e8eae3ee01c8c45ab 0f3ec02ab5185dfc13a4f1dc7ed01c6f400f39b6 d32acf592f7f63460ff06711e1a9d41fbf6327a03303ae840e83fa9ef278d8f1 HTTP Headers `GET /id.json?p=5 HTTP/1.1 Host: const.uno User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:57 GMT Content-Type: application/json Content-Length: 13 Connection: keep-alive Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://hd.3lordserial.xyz`

	a.adsource.tech/sync?id=76165f9c-19c5-44f9-a939-d74d6f307d13&ssp=Alfasense	188.114.96.1	204 No Content	0 B
URL GET HTTP/2 a.adsource.tech/sync?id=76165f9c-19c5-44f9-a939-d74d6f307d13&ssp=Alfasense IP 188.114.96.1:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGoogle Trust Services LLC Subjectadsource.tech FingerprintA9:D3:6F:42:9D:C2:CC:8A:47:59:1B:20:7F:7D:94:AF:9D:37:C4:86 ValidityThu, 19 Oct 2023 23:09:18 GMT - Wed, 17 Jan 2024 23:09:17 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /sync?id=76165f9c-19c5-44f9-a939-d74d6f307d13&ssp=Alfasense HTTP/1.1 Host: a.adsource.tech User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 204 No Content date: Fri, 01 Dec 2023 20:54:57 GMT content-type: text/plain set-cookie: adpreudid=1; Expires=Sun, 31 Dec 2023 20:54:57 GMT; Domain=adsource.tech; SameSite=None; Secure; Path=/ access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization access-control-expose-headers: Content-Length,Content-Range vary: Origin cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cOPRSBxgkgQaeCJve%2FxQpQT7qsmwuu%2B5gk2o9A6i0yoyo89SW4M4QoBSYjNDwlniOkfJEEpm94H9YkYiK%2FMyL%2BLCQ8Sqpef9gLiErUeCmGwpc1C18XYSY%2FYI4qSYZwCXJz4%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a728c3356b9-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	cs.agency2.ru/p?ssp=al&uid=76165f9c-19c5-44f9-a939-d74d6f307d13	23.111.107.44	301 Moved Permanently	0 B
URL GET HTTP/1.1 cs.agency2.ru/p?ssp=al&uid=76165f9c-19c5-44f9-a939-d74d6f307d13 IP 23.111.107.44:443 ASN #7979 SERVERS-COM Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subjectapi.agency2.ru Fingerprint50:48:39:D7:EB:8F:8E:E7:36:A3:F3:08:25:93:84:7F:6B:36:24:95 ValidityMon, 16 Oct 2023 23:38:04 GMT - Sun, 14 Jan 2024 23:38:03 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /p?ssp=al&uid=76165f9c-19c5-44f9-a939-d74d6f307d13 HTTP/1.1 Host: cs.agency2.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: uuid=e6bd85b4-44d0-493f-8c6d-4ce8e9152d79 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 301 Moved Permanently Date: Fri, 01 Dec 2023 20:54:57 GMT Content-Length: 0 Connection: keep-alive Server: fasthttp Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://cs.alfasense.com/p?ssp=a2&uid=e6bd85b4-44d0-493f-8c6d-4ce8e9152d79 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.107.44

	s.uuidksinc.net/match/1215/?remote_uid=76165f9c-19c5-44f9-a939-d74d6f307d13	31.220.27.155	302 Found	0 B
URL GET HTTP/2 s.uuidksinc.net/match/1215/?remote_uid=76165f9c-19c5-44f9-a939-d74d6f307d13 IP 31.220.27.155:443 ASN #39572 DataWeb Global Group B.V. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subjectuuidksinc.net Fingerprint24:9D:6D:A2:89:55:7D:CD:A6:BD:59:A3:21:F2:65:41:A8:9D:38:99 ValidityThu, 09 Nov 2023 23:20:21 GMT - Wed, 07 Feb 2024 23:20:20 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /match/1215/?remote_uid=76165f9c-19c5-44f9-a939-d74d6f307d13 HTTP/1.1 Host: s.uuidksinc.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: jcsuuid=35MxOgkIKPcQzAWGlJYG Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 302 Found server: nginx/1.23.2 date: Fri, 01 Dec 2023 20:54:57 GMT content-length: 0 location: https://cs.alfasense.com/p?ssp=kd&uid=35MxOgkIKPcQzAWGlJYG set-cookie: jcsuuid=35MxOgkIKPcQzAWGlJYG; expires=Sat, 30 Nov 2024 20:54:57 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None X-Firefox-Spdy: h2`

	match.new-programmatic.com/userbind?src=alfasense&id=76165f9c-19c5-44f9-a939-d74d6f307d13	217.65.2.150	302 Found	0 B
URL GET HTTP/1.1 match.new-programmatic.com/userbind?src=alfasense&id=76165f9c-19c5-44f9-a939-d74d6f307d13 IP 217.65.2.150:443 ASN #3175 Filanco LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subjectad.ad-blast.ru FingerprintF3:B7:15:BC:2F:A8:7D:5A:73:CB:BC:43:B8:4C:EA:11:17:2B:7A:34 ValiditySat, 07 Oct 2023 18:59:50 GMT - Fri, 05 Jan 2024 18:59:49 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /userbind?src=alfasense&id=76165f9c-19c5-44f9-a939-d74d6f307d13 HTTP/1.1 Host: match.new-programmatic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Found Server: nginx/1.22.1 Date: Fri, 01 Dec 2023 20:54:57 GMT Content-Length: 0 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Vary: Origin Location: https://cs.alfasense.com/p?ssp=tg&redir=0&id=`

	cs.alfasense.com/p?ssp=al&id=1b977199-607e-4479-8f7c-7ffe43e102a6	23.111.100.20	200 OK	35 B
URL GET HTTP/1.1 cs.alfasense.com/p?ssp=al&id=1b977199-607e-4479-8f7c-7ffe43e102a6 IP 23.111.100.20:443 ASN #7979 SERVERS-COM Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasense.com Fingerprint92:58:B8:97:87:98:3A:5B:01:DA:24:13:D3:B2:D4:AF:F5:07:AE:9E ValiditySat, 10 Dec 2022 23:58:10 GMT - Thu, 11 Jan 2024 23:58:09 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 35 B (35 bytes) Hash c2196de8ba412c60c22ab491af7b1409 5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992 HTTP Headers GET /p?ssp=al&id=1b977199-607e-4479-8f7c-7ffe43e102a6 HTTP/1.1 Host: cs.alfasense.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: uuid=76165f9c-19c5-44f9-a939-d74d6f307d13 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Date: Fri, 01 Dec 2023 20:54:57 GMT Content-Type: image/gif Content-Length: 35 Connection: keep-alive Server: fasthttp Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.100.20 Accept-Ranges: bytes

	ssp-rtb.sape.ru/prebid	193.3.184.218	204 No Content	0 B
URL POST HTTP/1.1 ssp-rtb.sape.ru/prebid IP 193.3.184.218:443 ASN #50214 QWARTA LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.sape.ru FingerprintF9:61:5C:64:81:FD:57:C2:4A:BD:6B:12:D4:7E:02:5E:83:8E:3E:40 ValiditySun, 08 Oct 2023 01:41:50 GMT - Sat, 06 Jan 2024 01:41:49 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /prebid HTTP/1.1 Host: ssp-rtb.sape.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 955 Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: sspuid=CkIDGmVqSB58/wAcgjXtAgE3p9toolFP37V7HmgJRdulaXHU Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 204 No Content Server: openresty Date: Fri, 01 Dec 2023 20:54:57 GMT Content-Type: text/html Connection: keep-alive Access-Control-Allow-Origin: https://hd.3lordserial.xyz Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST X-YaSpanId: 25b0d052e2d705e0 X-YaRequestId: 0cf17afcbdc4477c8f25c5782aed3c47 X-YaTraceId: 74545605c4424e3f95d511e2f6823acb Expires: Wed, 19 Apr 2000 11:43:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0`

	cs.alfasense.com/p?ssp=bz&uid=9ec21319-5e24-4b88-6e86-87b40e4ff5bc	23.111.100.20	200 OK	35 B
URL GET HTTP/1.1 cs.alfasense.com/p?ssp=bz&uid=9ec21319-5e24-4b88-6e86-87b40e4ff5bc IP 23.111.100.20:443 ASN #7979 SERVERS-COM Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasense.com Fingerprint92:58:B8:97:87:98:3A:5B:01:DA:24:13:D3:B2:D4:AF:F5:07:AE:9E ValiditySat, 10 Dec 2022 23:58:10 GMT - Thu, 11 Jan 2024 23:58:09 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 35 B (35 bytes) Hash c2196de8ba412c60c22ab491af7b1409 5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992 HTTP Headers GET /p?ssp=bz&uid=9ec21319-5e24-4b88-6e86-87b40e4ff5bc HTTP/1.1 Host: cs.alfasense.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: uuid=76165f9c-19c5-44f9-a939-d74d6f307d13 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Date: Fri, 01 Dec 2023 20:54:57 GMT Content-Type: image/gif Content-Length: 35 Connection: keep-alive Server: fasthttp Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.100.20 Accept-Ranges: bytes

	ssp.hybrid.ai/auction/prebid	37.230.131.17	204 No Content	0 B
URL POST HTTP/2 ssp.hybrid.ai/auction/prebid IP 37.230.131.17:443 ASN #58272 LeaderTelecom B.V. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerSectigo Limited Subject.hybrid.ai Fingerprint40:F9:88:C5:EF:2B:26:9C:61:DC:CC:ED:B1:67:03:F4:E2:CC:B7:C8 ValidityThu, 14 Sep 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers OPTIONS /auction/prebid HTTP/1.1 Host: ssp.hybrid.ai User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Referer: https://hd.3lordserial.xyz/ Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 204 No Content date: Fri, 01 Dec 2023 20:54:57 GMT access-control-allow-credentials: true access-control-allow-headers: content-type access-control-allow-methods: POST access-control-allow-origin: https://hd.3lordserial.xyz vary: Origin p3p: CP='NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC' server: Hybrid Web Server X-Firefox-Spdy: h2`

	match.qtarget.tech/userbind?src=alfasense&id=76165f9c-19c5-44f9-a939-d74d6f307d13	95.163.92.180	204 No Content	0 B
URL GET HTTP/1.1 match.qtarget.tech/userbind?src=alfasense&id=76165f9c-19c5-44f9-a939-d74d6f307d13 IP 95.163.92.180:443 ASN #12695 LLC Digital Network Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subjectdsp.qtarget.tech Fingerprint29:6F:E0:4A:F8:5E:3D:84:DF:96:EB:7F:EF:EC:D4:F8:16:19:3A:14 ValiditySun, 12 Nov 2023 07:12:31 GMT - Sat, 10 Feb 2024 07:12:30 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /userbind?src=alfasense&id=76165f9c-19c5-44f9-a939-d74d6f307d13 HTTP/1.1 Host: match.qtarget.tech User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 204 No Content Server: nginx/1.22.1 Date: Sat, 02 Dec 2023 01:57:32 GMT Content-Length: 0 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Vary: Origin`

	ssp.hybrid.ai/auction/prebid	37.230.131.17	204 No Content	0 B
URL POST HTTP/2 ssp.hybrid.ai/auction/prebid IP 37.230.131.17:443 ASN #58272 LeaderTelecom B.V. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerSectigo Limited Subject.hybrid.ai Fingerprint40:F9:88:C5:EF:2B:26:9C:61:DC:CC:ED:B1:67:03:F4:E2:CC:B7:C8 ValidityThu, 14 Sep 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /auction/prebid HTTP/1.1 Host: ssp.hybrid.ai User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Content-Length: 245 Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: vid=86236e1e32982c274142 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 204 No Content date: Fri, 01 Dec 2023 20:54:57 GMT access-control-allow-credentials: true access-control-allow-origin: https://hd.3lordserial.xyz vary: Origin p3p: CP='NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC' server: Hybrid Web Server X-Firefox-Spdy: h2`

	cs.alfasense.com/p?ssp=vh&id=2ffec98b-851b-4a0e-8702-67f9b8c52227	23.111.100.20	200 OK	35 B
URL GET HTTP/1.1 cs.alfasense.com/p?ssp=vh&id=2ffec98b-851b-4a0e-8702-67f9b8c52227 IP 23.111.100.20:443 ASN #7979 SERVERS-COM Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasense.com Fingerprint92:58:B8:97:87:98:3A:5B:01:DA:24:13:D3:B2:D4:AF:F5:07:AE:9E ValiditySat, 10 Dec 2022 23:58:10 GMT - Thu, 11 Jan 2024 23:58:09 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 35 B (35 bytes) Hash c2196de8ba412c60c22ab491af7b1409 5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992 HTTP Headers GET /p?ssp=vh&id=2ffec98b-851b-4a0e-8702-67f9b8c52227 HTTP/1.1 Host: cs.alfasense.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: uuid=76165f9c-19c5-44f9-a939-d74d6f307d13 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Date: Fri, 01 Dec 2023 20:54:57 GMT Content-Type: image/gif Content-Length: 35 Connection: keep-alive Server: fasthttp Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.100.20 Accept-Ranges: bytes

	a.utraff.com/sync?ssp=716&skipme=76165f9c-19c5-44f9-a939-d74d6f307d13	172.64.99.14	302 Found	35 B
URL GET HTTP/3 a.utraff.com/sync?ssp=716&skipme=76165f9c-19c5-44f9-a939-d74d6f307d13 IP 172.64.99.14:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGoogle Trust Services LLC Subjectutraff.com Fingerprint65:F0:CB:A7:9C:1E:18:8C:D9:DE:5B:4C:46:9E:79:3E:78:F1:B0:CD ValidityThu, 12 Oct 2023 03:40:45 GMT - Wed, 10 Jan 2024 03:40:44 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 35 B (35 bytes) Hash c2196de8ba412c60c22ab491af7b1409 5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992 HTTP Headers `GET /sync?ssp=716&skipme=76165f9c-19c5-44f9-a939-d74d6f307d13 HTTP/1.1 Host: a.utraff.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: preutid=1 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 302 Found date: Fri, 01 Dec 2023 20:54:57 GMT content-type: text/plain location: https://cs.alfasense.com/p?ssp=um&id=987241e1-373a-40cf-b173-7f7696f4e2de set-cookie: preutid=1; Max-Age=0; Domain=.itraff.net; SameSite=None; Secure; Path=/ preutid=1; Max-Age=0; Domain=.utraff.com; SameSite=None; Secure; Path=/ utid=cR-oJ26hV31iVIbDlm1EIRh68hOuWKLnh1W_8-uzEV39-Bd1EyzXIrUhZU0Sj37Fsjhp9fsL2Ilk9OyUrAiuIA; Expires=Mon, 28 Nov 2033 23:54:57 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/ utid=cR-oJ26hV31iVIbDlm1EIRh68hOuWKLnh1W_8-uzEV39-Bd1EyzXIrUhZU0Sj37Fsjhp9fsL2Ilk9OyUrAiuIA; Expires=Mon, 28 Nov 2033 23:54:57 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/ access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization access-control-expose-headers: Content-Length,Content-Range vary: Origin cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vb5hMEFuht1uXkA6h%2Fe1uZZiKrN9yv%2BfAN%2FVo8AsoSIPNU0JJfuObIep8Y7WnzSjFvQ7RFvpTvgGdsl58q5N6vXZJ0EdJOLACfYh8QtweTAu2j6j4hiHVtt6qaeY%2FTQ%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a725dc47772-LHR alt-svc: h3=":443"; ma=86400

	cs.alfasense.com/p?ssp=sp&uid=0100007F1D486A65EB36FE270271E1BB	23.111.100.20	200 OK	35 B
URL GET HTTP/1.1 cs.alfasense.com/p?ssp=sp&uid=0100007F1D486A65EB36FE270271E1BB IP 23.111.100.20:443 ASN #7979 SERVERS-COM Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasense.com Fingerprint92:58:B8:97:87:98:3A:5B:01:DA:24:13:D3:B2:D4:AF:F5:07:AE:9E ValiditySat, 10 Dec 2022 23:58:10 GMT - Thu, 11 Jan 2024 23:58:09 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 35 B (35 bytes) Hash c2196de8ba412c60c22ab491af7b1409 5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992 HTTP Headers GET /p?ssp=sp&uid=0100007F1D486A65EB36FE270271E1BB HTTP/1.1 Host: cs.alfasense.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: uuid=76165f9c-19c5-44f9-a939-d74d6f307d13 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Date: Fri, 01 Dec 2023 20:54:58 GMT Content-Type: image/gif Content-Length: 35 Connection: keep-alive Server: fasthttp Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.100.20 Accept-Ranges: bytes

	sync.dmp.otm-r.com/match/alfasensor?id=76165f9c-19c5-44f9-a939-d74d6f307d13	148.251.9.22	204 No Content	0 B
URL GET HTTP/2 sync.dmp.otm-r.com/match/alfasensor?id=76165f9c-19c5-44f9-a939-d74d6f307d13 IP 148.251.9.22:443 ASN #24940 Hetzner Online GmbH Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.dmp.otm-r.com FingerprintC6:A2:9D:82:0D:D1:C1:2D:A4:ED:7F:05:13:52:5B:94:6B:10:58:D6 ValidityMon, 19 Jun 2023 10:50:51 GMT - Sat, 20 Jul 2024 10:50:50 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /match/alfasensor?id=76165f9c-19c5-44f9-a939-d74d6f307d13 HTTP/1.1 Host: sync.dmp.otm-r.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: mpid=NjU2YTQ4MWYwNDc1NzJmNg== Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 204 No Content server: nginx/1.17.2 date: Fri, 01 Dec 2023 20:54:58 GMT access-control-allow-origin: * X-Firefox-Spdy: h2`

	pbs.alfasense.com/yandex/auction	23.111.119.60	200 OK	11 B
URL POST HTTP/1.1 pbs.alfasense.com/yandex/auction IP 23.111.119.60:443 ASN #7979 SERVERS-COM Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasense.com Fingerprint92:58:B8:97:87:98:3A:5B:01:DA:24:13:D3:B2:D4:AF:F5:07:AE:9E ValiditySat, 10 Dec 2022 23:58:10 GMT - Thu, 11 Jan 2024 23:58:09 GMT File type JSON data\012- , ASCII text, with no line terminators Size 11 B (11 bytes) Hash 9cc989d2e211083e0a170316914f1d06 392cd18d051f72b887529ac2998da54749f1338f 846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b HTTP Headers POST /yandex/auction HTTP/1.1 Host: pbs.alfasense.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 274 Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: uuid=76165f9c-19c5-44f9-a939-d74d6f307d13 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Date: Fri, 01 Dec 2023 20:54:58 GMT Content-Type: application/json Content-Length: 11 Connection: keep-alive x-dsp-24__status: 204 x-dsp-22__status: 204 expires: 0 x-geo-cityid: 4000000055 cache-control: no-cache, no-store, must-revalidate uuid: 7701f509-9448-47e5-bedf-f3e086a786ad pragma: no-cache x-dsp-4__status: 204 x-dsp-8__status: 204 access-control-max-age: 0 Access-Control-Allow-Origin: https://hd.3lordserial.xyz Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.119.60 Accept-Ranges: bytes

	cs.alfasense.com/p?ssp=up&id=8b57f7b8-ff6f-434c-b65e-0d51403ce371	23.111.100.20	200 OK	35 B
URL GET HTTP/1.1 cs.alfasense.com/p?ssp=up&id=8b57f7b8-ff6f-434c-b65e-0d51403ce371 IP 23.111.100.20:443 ASN #7979 SERVERS-COM Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasense.com Fingerprint92:58:B8:97:87:98:3A:5B:01:DA:24:13:D3:B2:D4:AF:F5:07:AE:9E ValiditySat, 10 Dec 2022 23:58:10 GMT - Thu, 11 Jan 2024 23:58:09 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 35 B (35 bytes) Hash c2196de8ba412c60c22ab491af7b1409 5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992 HTTP Headers GET /p?ssp=up&id=8b57f7b8-ff6f-434c-b65e-0d51403ce371 HTTP/1.1 Host: cs.alfasense.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: uuid=76165f9c-19c5-44f9-a939-d74d6f307d13 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Date: Fri, 01 Dec 2023 20:54:58 GMT Content-Type: image/gif Content-Length: 35 Connection: keep-alive Server: fasthttp Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.100.20 Accept-Ranges: bytes

	cs.alfasense.com/p?ssp=tg&redir=0&id=	23.111.100.20	200 OK	35 B
URL GET HTTP/1.1 cs.alfasense.com/p?ssp=tg&redir=0&id= IP 23.111.100.20:443 ASN #7979 SERVERS-COM Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasense.com Fingerprint92:58:B8:97:87:98:3A:5B:01:DA:24:13:D3:B2:D4:AF:F5:07:AE:9E ValiditySat, 10 Dec 2022 23:58:10 GMT - Thu, 11 Jan 2024 23:58:09 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 35 B (35 bytes) Hash c2196de8ba412c60c22ab491af7b1409 5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992 HTTP Headers `GET /p?ssp=tg&redir=0&id= HTTP/1.1 Host: cs.alfasense.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: uuid=76165f9c-19c5-44f9-a939-d74d6f307d13 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Fri, 01 Dec 2023 20:54:58 GMT Content-Type: image/gif Content-Length: 35 Connection: keep-alive Server: fasthttp Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.100.20 Accept-Ranges: bytes

	cs.alfasense.com/p?ssp=a2&uid=e6bd85b4-44d0-493f-8c6d-4ce8e9152d79	23.111.100.20	200 OK	35 B
URL GET HTTP/1.1 cs.alfasense.com/p?ssp=a2&uid=e6bd85b4-44d0-493f-8c6d-4ce8e9152d79 IP 23.111.100.20:443 ASN #7979 SERVERS-COM Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasense.com Fingerprint92:58:B8:97:87:98:3A:5B:01:DA:24:13:D3:B2:D4:AF:F5:07:AE:9E ValiditySat, 10 Dec 2022 23:58:10 GMT - Thu, 11 Jan 2024 23:58:09 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 35 B (35 bytes) Hash c2196de8ba412c60c22ab491af7b1409 5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992 HTTP Headers GET /p?ssp=a2&uid=e6bd85b4-44d0-493f-8c6d-4ce8e9152d79 HTTP/1.1 Host: cs.alfasense.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: uuid=76165f9c-19c5-44f9-a939-d74d6f307d13 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Date: Fri, 01 Dec 2023 20:54:58 GMT Content-Type: image/gif Content-Length: 35 Connection: keep-alive Server: fasthttp Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.100.20 Accept-Ranges: bytes

	ssp.otm-r.com/adjson?tz=0&w=970&h=250&domain=&l=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html&s=38014&cur=RUB&bidid=8b8a24d87cb55e&transactionid=174fbc57-75eb-41e9-8828-401afda20858&auctionid=0b739fa1-abe8-42a0-9492-065d4090cb56&bidfloor=0	116.202.236.228	200 OK	2 B
URL GET HTTP/2 ssp.otm-r.com/adjson?tz=0&w=970&h=250&domain=&l=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html&s=38014&cur=RUB&bidid=8b8a24d87cb55e&transactionid=174fbc57-75eb-41e9-8828-401afda20858&auctionid=0b739fa1-abe8-42a0-9492-065d4090cb56&bidfloor=0 IP 116.202.236.228:443 ASN #24940 Hetzner Online GmbH Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.otm-r.com FingerprintDE:D2:E7:8E:11:AC:D8:80:39:F5:5D:C2:86:9D:33:3F:95:71:FA:58 ValidityMon, 19 Jun 2023 10:49:55 GMT - Sat, 20 Jul 2024 10:49:54 GMT File type JSON data\012- , ASCII text, with no line terminators Size 2 B (2 bytes) Hash d751713988987e9331980363e24189ce 97d170e1550eee4afc0af065b78cda302a97674c 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945 HTTP Headers GET /adjson?tz=0&w=970&h=250&domain=&l=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html&s=38014&cur=RUB&bidid=8b8a24d87cb55e&transactionid=174fbc57-75eb-41e9-8828-401afda20858&auctionid=0b739fa1-abe8-42a0-9492-065d4090cb56&bidfloor=0 HTTP/1.1 Host: ssp.otm-r.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: mpid=NjU2YTQ4MWYwNDc1NzJmNg== Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx/1.17.10 date: Fri, 01 Dec 2023 20:54:58 GMT content-type: application/javascript content-length: 2 access-control-allow-credentials: true access-control-allow-origin: https://hd.3lordserial.xyz cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache set-cookie: mpid=NjU2YTQ4MWYwNDc1NzJmNg==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None vary: Origin X-Firefox-Spdy: h2`

	cs.alfasense.com/p?ssp=um&id=987241e1-373a-40cf-b173-7f7696f4e2de	23.111.100.20	200 OK	35 B
URL GET HTTP/1.1 cs.alfasense.com/p?ssp=um&id=987241e1-373a-40cf-b173-7f7696f4e2de IP 23.111.100.20:443 ASN #7979 SERVERS-COM Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasense.com Fingerprint92:58:B8:97:87:98:3A:5B:01:DA:24:13:D3:B2:D4:AF:F5:07:AE:9E ValiditySat, 10 Dec 2022 23:58:10 GMT - Thu, 11 Jan 2024 23:58:09 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 35 B (35 bytes) Hash c2196de8ba412c60c22ab491af7b1409 5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992 HTTP Headers GET /p?ssp=um&id=987241e1-373a-40cf-b173-7f7696f4e2de HTTP/1.1 Host: cs.alfasense.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: uuid=76165f9c-19c5-44f9-a939-d74d6f307d13 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Date: Fri, 01 Dec 2023 20:54:58 GMT Content-Type: image/gif Content-Length: 35 Connection: keep-alive Server: fasthttp Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.100.20 Accept-Ranges: bytes

	v.alfasrv.com/stats/2x2.png?s=104707&a=fallback&k1=1&k2=1&e=i&t=p&c=0	84.201.179.252	200 OK	95 B
URL GET HTTP/1.1 v.alfasrv.com/stats/2x2.png?s=104707&a=fallback&k1=1&k2=1&e=i&t=p&c=0 IP 84.201.179.252:443 ASN #200350 Yandex.Cloud LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasrv.com Fingerprint4B:8A:22:65:23:10:74:25:5D:40:3B:78:20:8D:F8:82:A4:50:44:90 ValidityTue, 10 Oct 2023 09:20:49 GMT - Sun, 10 Nov 2024 09:20:48 GMT File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data Size 95 B (95 bytes) Hash 9591c410148e6883727c5339fd1c02cd 3442a95fe890ce4769b36b2ecc611b801a54cfb5 cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323 HTTP Headers `GET /stats/2x2.png?s=104707&a=fallback&k1=1&k2=1&e=i&t=p&c=0 HTTP/1.1 Host: v.alfasrv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx/1.14.1 Date: Fri, 01 Dec 2023 20:54:58 GMT Content-Type: image/png Content-Length: 95 Connection: keep-alive Last-Modified: Friday, 01-Dec-2023 20:54:58 GMT Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0 Accept-Ranges: bytes`

	s.alfasrv.com/events/1x1.png?s=104707&a=fallback&k1=1&k2=1&e=i&t=p&c=0	130.193.42.23	200 OK	95 B
URL GET HTTP/2 s.alfasrv.com/events/1x1.png?s=104707&a=fallback&k1=1&k2=1&e=i&t=p&c=0 IP 130.193.42.23:443 ASN #200350 Yandex.Cloud LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasrv.com Fingerprint4B:8A:22:65:23:10:74:25:5D:40:3B:78:20:8D:F8:82:A4:50:44:90 ValidityTue, 10 Oct 2023 09:20:49 GMT - Sun, 10 Nov 2024 09:20:48 GMT File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data Size 95 B (95 bytes) Hash 9591c410148e6883727c5339fd1c02cd 3442a95fe890ce4769b36b2ecc611b801a54cfb5 cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323 HTTP Headers `GET /events/1x1.png?s=104707&a=fallback&k1=1&k2=1&e=i&t=p&c=0 HTTP/1.1 Host: s.alfasrv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: nginx/1.24.0 date: Fri, 01 Dec 2023 20:54:58 GMT content-type: image/png content-length: 95 access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-Original-Referer access-control-allow-credentials: true cache-control: no-cache,no-store expires: Tue, 01 Jan 1980 1:00:00 GMT accept-ranges: bytes X-Firefox-Spdy: h2`

	ads.alfasense.net/adserver/www/delivery/asyncjs.php	136.144.31.29	200 OK	4.5 kB
URL GET HTTP/2 ads.alfasense.net/adserver/www/delivery/asyncjs.php IP 136.144.31.29:443 ASN #52000 Innovation IT Solutions LTD Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasense.net Fingerprint15:61:D7:BD:E9:E1:37:36:5F:FD:47:F7:69:F7:5E:53:CD:95:A9:59 ValidityWed, 22 Nov 2023 16:23:03 GMT - Mon, 23 Dec 2024 16:23:02 GMT File type data Size 4.5 kB (4486 bytes) Hash af3fd6ce3d0ba2a259bfea081b5061ac d6a606f0259c131ceb69f21d57de7b4100575bf8 5ebf91f1c831cb62d77394fbbd238067a10a97763a7b8d7096ee4ca1405078b6 HTTP Headers `GET /adserver/www/delivery/asyncjs.php HTTP/1.1 Host: ads.alfasense.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:58 GMT content-type: text/javascript;charset=UTF-8 etag: 1079f85a6f7f7d83640b17a26d3394d5 expire: Fri, 01 Dec 2023 21:54:58 GMT cache-control: private, max-age=3600 p3p: CP="CUR ADM OUR NOR STA NID" content-security-policy: frame-ancestors 'self';frame-src 'self'; cross-origin-embedder-policy: unsafe-none cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: cross-origin permissions-policy: geolocation=(self), payment=(self) referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block; set-cookie: SRVGROUP=common; path=/; Secure; HttpOnly X-Firefox-Spdy: h2

	www.acint.net/match?dp=129&euid=o17xs6vbph	193.3.184.135	200 OK	43 B
URL GET HTTP/2 www.acint.net/match?dp=129&euid=o17xs6vbph IP 193.3.184.135:443 ASN #50214 QWARTA LLC Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subject.acint.net FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1 ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash ad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda HTTP Headers GET /match?dp=129&euid=o17xs6vbph HTTP/1.1 Host: www.acint.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.acint.net/ DNT: 1 Connection: keep-alive Cookie: test_cookie=CheckForPermission; aid=fwAAAWVqSB0n/jbru+FxAnBO9uArXikJ9bP7KWs+DcG51+8Z; cSyncDp14v4=1701464093; cSyncDp14v6=1701464093; cSyncDp17v2=1701464093; cSyncDp45v5=1701464093; cSyncDp53v5=1701464093; cSyncDp62v2=1701464093; cSyncDp67v3=1701464093; cSyncDp68v2=1701464093; cSyncDp71v2=1701464093; cSyncDp80v2=1701464093; cSyncDp85v2=1701464093; cSyncDp95v4=1701464093; cSyncDp98v3=1701464093; cSyncDp104v2=1701464093; cSyncDp107v2=1701464093; cSyncDp110v3=1701464093; cSyncDp125v4=1701464093; cSyncDp126v2=1701464093; cSyncDp127v2=1701464093; cSyncDp129v2=1701464093; cSyncDp136v3=1701464093; cSyncDp146v2=1701464093; cSyncDp148v2=1701464093; cSyncDp149v3=1701464093; cSyncDp151v2=1701464093; cSyncDp251v1=1701464093; cSyncDp186v2=1701464093; cSyncDp217v2=1701464093; cSyncDp221v2=1701464093; cSyncDp235v2=1701464093; cSyncDp239v2=1701464093; cSyncDp243v2=1701464093; cSyncDp260v2=1701464093; cSyncDp244v2=1701464093; cSyncDp248v2=1701464093; cSyncDp261v1=1701464093 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: openresty date: Fri, 01 Dec 2023 20:54:59 GMT content-type: image/gif content-length: 43 last-modified: Mon, 28 Sep 1970 06:00:00 GMT p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" expires: Wed, 19 Apr 2000 11:43:00 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 X-Firefox-Spdy: h2`

	ads.alfasense.net/adserver/www/images/51832be0e461b298bd87a32e65215bee.jpg	136.144.31.29	200 OK	26 kB
URL GET HTTP/2 ads.alfasense.net/adserver/www/images/51832be0e461b298bd87a32e65215bee.jpg IP 136.144.31.29:443 ASN #52000 Innovation IT Solutions LTD Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasense.net Fingerprint15:61:D7:BD:E9:E1:37:36:5F:FD:47:F7:69:F7:5E:53:CD:95:A9:59 ValidityWed, 22 Nov 2023 16:23:03 GMT - Mon, 23 Dec 2024 16:23:02 GMT File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 970x250, components 3\012- data Size 26 kB (26410 bytes) Hash 51832be0e461b298bd87a32e65215bee f94e6e1bd4c7ccf06f09255011e4c94d8a0ed03f ed94f56fea851ac27164ed90dd404a9c3ad04530b6139b1c46bc8240b4321e56 HTTP Headers GET /adserver/www/images/51832be0e461b298bd87a32e65215bee.jpg HTTP/1.1 Host: ads.alfasense.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: OAID=01000111010001000101000001010010 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:58 GMT content-type: image/jpeg content-length: 26410 last-modified: Tue, 18 Jul 2023 14:36:01 GMT etag: "64b6a351-672a" content-security-policy: frame-ancestors 'self';frame-src 'self'; cross-origin-embedder-policy: unsafe-none cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: cross-origin permissions-policy: geolocation=(self), payment=(self) referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block; accept-ranges: bytes set-cookie: SRVGROUP=common; path=/; Secure; HttpOnly X-Firefox-Spdy: h2

	api.strvid.ws/js/listen-player.js	146.59.111.187	200 OK	2.1 kB
URL GET HTTP/1.1 api.strvid.ws/js/listen-player.js IP 146.59.111.187:443 ASN #16276 OVH SAS Requested by https://api.strvid.ws/embed/movie/455 Certificate IssuerSectigo Limited Subjectapi.strvid.ws Fingerprint03:16:4D:D3:51:3C:A4:93:A0:13:B4:36:B9:25:19:E7:D3:48:65:81 ValidityThu, 02 Mar 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT File type ASCII text, with very long lines (2282), with no line terminators Size 2.1 kB (2120 bytes) Hash dd228964deb72e0f6abf61ae20197b2f 4ef0421f17d9e38a3a847223821b7395a7f2578f d55dd4224d39f78271f4c48d938582cab053992f4aa2986e1d032385fcb53ca2 HTTP Headers `GET /js/listen-player.js HTTP/1.1 Host: api.strvid.ws User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://api.strvid.ws/embed/movie/455 Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:53 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: 1970-01-01 00:00:00 Last-Modified: Tue, 13 Sep 2022 16:24:06 GMT Pragma: no-cache Vary: * Content-Encoding: gzip`

	hd.3lordserial.xyz/templates/lordfun/images/bg.jpg	104.21.60.176	200 OK	195 kB
URL GET HTTP/3 hd.3lordserial.xyz/templates/lordfun/images/bg.jpg IP 104.21.60.176:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject3lordserial.xyz Fingerprint55:F3:EC:F8:C5:A9:65:3A:AD:8F:B2:1A:59:6B:1A:41:7E:A0:65:DF ValidityWed, 29 Nov 2023 21:49:20 GMT - Tue, 27 Feb 2024 21:49:19 GMT File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1400x488, components 3\012- data Size 195 kB (195125 bytes) Hash 2c6615789c683ee6f6018c445d2f002d 316e5bc3a50c2c8b302c7f9bce3420aa802c14ac 25cd2a918ff78890040a2c632b67914de4389fa33bf573b40f224293827b8259 HTTP Headers GET /templates/lordfun/images/bg.jpg HTTP/1.1 Host: hd.3lordserial.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/templates/lordfun/style/full.css?v=2.6 Cookie: PHPSESSID=c0506767ddef664786c878030c4f8c6b Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Fri, 01 Dec 2023 20:54:52 GMT content-type: image/jpeg last-modified: Tue, 06 Sep 2022 06:42:38 GMT vary: Accept-Encoding etag: W/"6316ebde-2fa35" cache-control: max-age=31536000 cf-cache-status: HIT age: 4204 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b%2F7GlJwurAwm5tWTLr%2FE7%2FyWJsOvFK%2F%2FyjDV2JYlYiDm3GuHO4CcsyZlkeQG90%2FamBA61jN%2FQO3hcyNDshYliZYXrhBXLQu9QmaHzA6xG5iwjpZ%2BDyW%2BxfYrFlto%2FvyYB9tsVrc%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a52ef1f56a8-OSL alt-svc: h3=":443"; ma=86400

	hd.3lordserial.xyz/engine/modules/antibot/antibot.php	104.21.60.176	200 OK	4.0 kB
URL GET HTTP/3 hd.3lordserial.xyz/engine/modules/antibot/antibot.php IP 104.21.60.176:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject3lordserial.xyz Fingerprint55:F3:EC:F8:C5:A9:65:3A:AD:8F:B2:1A:59:6B:1A:41:7E:A0:65:DF ValidityWed, 29 Nov 2023 21:49:20 GMT - Tue, 27 Feb 2024 21:49:19 GMT File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 160x80, components 3\012- data Size 4.0 kB (3996 bytes) Hash 47274914fea8e08070184c53e4355ef8 d5742c7016847d01dbc3c043d3078135f828f288 dd425496d89338f8990487a8192f5a2cf8e8ee91501738da8876a99a672c8424 HTTP Headers GET /engine/modules/antibot/antibot.php HTTP/1.1 Host: hd.3lordserial.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/146-kasl-sv-13.html Cookie: PHPSESSID=c0506767ddef664786c878030c4f8c6b Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Fri, 01 Dec 2023 20:54:52 GMT content-type: image/jpeg vary: Accept-Encoding x-powered-by: PHP/7.4.33 expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rLg%2BKK44DMiNeJlPpl1UySJdtJZSAzAJo2mKiWziIH3cQCGH4Ixbc8DNMBYHHtwCVh4PBpDWsMwMRmKLcfvegNYY7POo9iD6fWZvVmBFwAy%2FSSavPVqM%2BPbSYXsm%2BSUuQ2Uy4lU%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a521e7756a8-OSL alt-svc: h3=":443"; ma=86400

	code.moviead55.ru/go/bmap?v=647a534f9f5fb9ced25ee7db57ef9c72&sub_id=ap&fmt_id=4&pl_key=banner&testad=no&r=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html	193.200.65.150	200 OK	162 kB
URL GET HTTP/2 code.moviead55.ru/go/bmap?v=647a534f9f5fb9ced25ee7db57ef9c72&sub_id=ap&fmt_id=4&pl_key=banner&testad=no&r=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html IP 193.200.65.150:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type ASCII text, with very long lines (65536), with no line terminators Size 162 kB (161508 bytes) Hash 60ece98558c6ab4397737ba0d90293d7 931c41f9f9d479a66f1dbe61e2d418a8b3353f42 de318026b2f1a4c51b8d5e2cc2224c1ab0d9072a014257b3cb3cb32ed55ede35 HTTP Headers GET /go/bmap?v=647a534f9f5fb9ced25ee7db57ef9c72&sub_id=ap&fmt_id=4&pl_key=banner&testad=no&r=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:52 GMT content-type: text/javascript;charset=UTF-8 vary: Accept-Encoding x-movieads-udata: cache,parsed,8415 x-movieads-country: NO content-encoding: gzip X-Firefox-Spdy: h2`

	api.strvid.ws/cdn.js	146.59.111.187	200 OK	14 kB
URL GET HTTP/1.1 api.strvid.ws/cdn.js IP 146.59.111.187:443 ASN #16276 OVH SAS Requested by https://api.strvid.ws/embed/movie/455 Certificate IssuerSectigo Limited Subjectapi.strvid.ws Fingerprint03:16:4D:D3:51:3C:A4:93:A0:13:B4:36:B9:25:19:E7:D3:48:65:81 ValidityThu, 02 Mar 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT File type ASCII text, with very long lines (14026), with no line terminators Size 14 kB (14026 bytes) Hash a81f8cb9127ebc541cfe5d8fa444dadb be16ea0d77bd967771b6668970b9f66bb45daa21 71a2a5087e0df99887785f7890f0320446e336aa298211b5cf6ee5a151ef5091 HTTP Headers `GET /cdn.js HTTP/1.1 Host: api.strvid.ws User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://api.strvid.ws/embed/movie/455 Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:53 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Last-Modified: Tue, 16 May 2023 12:42:04 GMT Content-Encoding: gzip`

	vak345.com/cs/202312012354.js?v=647a534f9f5fb9ced25ee7db57ef9c72&_t=1701464097568.568	172.67.204.19	200 OK	63 kB
URL GET HTTP/3 vak345.com/cs/202312012354.js?v=647a534f9f5fb9ced25ee7db57ef9c72&_t=1701464097568.568 IP 172.67.204.19:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintF4:50:2C:D7:5C:84:E6:10:5D:32:80:62:FC:FE:E8:A0:40:4B:99:C4 ValidityFri, 10 Mar 2023 00:00:00 GMT - Sat, 09 Mar 2024 23:59:59 GMT File type Size 63 kB (63316 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /cs/202312012354.js?v=647a534f9f5fb9ced25ee7db57ef9c72&_t=1701464097568.568 HTTP/1.1 Host: vak345.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Fri, 01 Dec 2023 20:54:52 GMT content-type: application/javascript;charset=UTF-8 vary: Accept-Encoding cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 pragma: no-cache x-movieads-udata: cache x-yac-source: Yac x-movieads-setup: combo x-movieads-country: NO cf-cache-status: BYPASS set-cookie: sky_uuid=cd7d3bf6-47eb-4660-9e3e-e46e30bd98e3; expires=Sat, 30-Nov-2024 20:54:52 GMT; Max-Age=31536000; path=/; SameSite=None;Secure report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UmLQHx0VKuzX7lfMzRdRixq0N1dm4YMIy0LTtd01BsSRccBVUKpXb9QAx3CK0uVzIRDvE01JbdGPzDgk3TUbo7X%2BieBxOtEPW2YOtLQeFz1uK683DtaZRKFxF6Jm"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a537ec4712b-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	s.myangular.life/ws?cdn	116.202.233.126	101 Switching Protocols	0 B
URL GET HTTP/1.1 s.myangular.life/ws?cdn IP 116.202.233.126:443 ASN #24940 Hetzner Online GmbH Requested by https://api.strvid.ws/embed/movie/455 Certificate IssuerSectigo Limited Subjects.myangular.life Fingerprint3A:21:0F:72:24:43:49:14:06:28:C6:D0:A6:10:6B:D7:B2:EA:5A:66 ValidityTue, 04 Apr 2023 00:00:00 GMT - Sat, 04 May 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /ws?cdn HTTP/1.1 Host: s.myangular.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: https://api.strvid.ws Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: gAK2lKKrkYYsTTz7YifqKQ== DNT: 1 Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols Server: nginx Date: Fri, 01 Dec 2023 20:54:53 GMT Connection: upgrade Upgrade: websocket Sec-WebSocket-Accept: tIrwdE+qj23Wa1hJaqKf58sj1B0=`

	lordserialx.xyz/146-kasl-81.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html	188.114.96.1	302 Found	58 kB
URL User Request GET HTTP/2 lordserialx.xyz/146-kasl-81.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html IP 188.114.96.1:443 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subjectlordserialx.xyz FingerprintAB:4D:22:F6:A1:E7:8B:F1:F7:83:18:7C:D4:11:CE:43:E7:EF:46:20 ValidityTue, 24 Oct 2023 10:43:43 GMT - Mon, 22 Jan 2024 10:43:42 GMT File type Size 58 kB (57472 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /146-kasl-81.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html HTTP/1.1 Host: lordserialx.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 302 Found date: Fri, 01 Dec 2023 20:54:51 GMT content-type: text/html; charset=UTF-8 location: https://hd.3lordserial.xyz/146-kasl-81.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html x-powered-by: PHP/7.4.33 expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache set-cookie: PHPSESSID=d0db07d0d4faaad7d6ce49b579b1187a; path=/; secure; HttpOnly cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PmYK8zp5w3FJfAvUjXYiLMxsbBqSS8JCFe%2FnVypkze8%2FPRKO8nm%2FhO2BV%2FV%2FdaFmLUNnQjEMtX5%2FihvFoxCJOB6%2Bbu6zG11sK6P2qrmo2bSvDL940FCLElGdDT2CTILn7QQ%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a4c5b46b518-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	sync.opendsp.ru/match/Movieads?id=${UUID}	82.148.20.186	200 OK	43 B
URL GET HTTP/2 sync.opendsp.ru/match/Movieads?id=${UUID} IP 82.148.20.186:443 ASN #50340 OOO Network of data-centers Selectel Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.opendsp.ru Fingerprint8E:F7:66:17:C0:94:EA:58:01:39:E4:C7:14:85:F8:A2:C2:22:F3:BA ValidityFri, 14 Jul 2023 08:08:59 GMT - Wed, 14 Aug 2024 08:08:58 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash 07fff40b5dd495aca2ac4e1c3fbc60aa e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4 a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7 HTTP Headers `GET /match/Movieads?id=${UUID} HTTP/1.1 Host: sync.opendsp.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:53 GMT content-type: image/gif content-length: 43 strict-transport-security: max-age=31536000; includeSubDomains; preload X-Firefox-Spdy: h2`

	hd.3lordserial.xyz/templates/lordfun/images/ft-logo2.png	104.21.60.176	200 OK	1.7 kB
URL GET HTTP/3 hd.3lordserial.xyz/templates/lordfun/images/ft-logo2.png IP 104.21.60.176:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject3lordserial.xyz Fingerprint55:F3:EC:F8:C5:A9:65:3A:AD:8F:B2:1A:59:6B:1A:41:7E:A0:65:DF ValidityWed, 29 Nov 2023 21:49:20 GMT - Tue, 27 Feb 2024 21:49:19 GMT File type PNG image data, 180 x 70, 8-bit colormap, non-interlaced\012- data Size 1.7 kB (1739 bytes) Hash ef077755be2b48ef80cf8347a6d34405 60cac22bab1548eec86ee33aca2f10971128f204 4cc1ad38721d2a465b02ad8c9ad234ce2a9843dd8c56f79ceaece02b45df5e03 HTTP Headers GET /templates/lordfun/images/ft-logo2.png HTTP/1.1 Host: hd.3lordserial.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/templates/lordfun/style/full.css?v=2.6 Cookie: PHPSESSID=c0506767ddef664786c878030c4f8c6b Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Fri, 01 Dec 2023 20:54:52 GMT content-type: image/png last-modified: Fri, 07 Jul 2023 00:28:51 GMT vary: Accept-Encoding etag: W/"64a75c43-6cb" cache-control: max-age=31536000 cf-cache-status: HIT age: 4202 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wd7ntQ4Q9ifCEZt9%2FIJp4%2Fw2W%2BFEdf0B4H%2FLDNP7OWh8MUYpX8glsqRnduQYW6yUnXtMyMXELfx1YIB9f6XN2XtPtl%2B3vXlhaPbSsW3HXySvQMlyEpSk6HG1VwpPAgdrB1NlsqU%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a533f8756a8-OSL alt-svc: h3=":443"; ma=86400

	s.myangular.life/player?cat=support&hit=u8&description=yes	116.202.233.126	200 OK	0 B
URL GET HTTP/1.1 s.myangular.life/player?cat=support&hit=u8&description=yes IP 116.202.233.126:443 ASN #24940 Hetzner Online GmbH Requested by https://api.strvid.ws/embed/movie/455 Certificate IssuerSectigo Limited Subjects.myangular.life Fingerprint3A:21:0F:72:24:43:49:14:06:28:C6:D0:A6:10:6B:D7:B2:EA:5A:66 ValidityTue, 04 Apr 2023 00:00:00 GMT - Sat, 04 May 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /player?cat=support&hit=u8&description=yes HTTP/1.1 Host: s.myangular.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://api.strvid.ws/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:53 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: keep-alive Access-Control-Allow-Origin: *`

	static.moviead55.ru/mp_dist/mstream2.js?v5646834026	172.67.159.129	200 OK	170 kB
URL GET HTTP/2 static.moviead55.ru/mp_dist/mstream2.js?v5646834026 IP 172.67.159.129:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGoogle Trust Services LLC Subjectmoviead55.ru Fingerprint97:2B:AC:BC:2D:E4:7C:FC:61:B0:3F:37:04:D9:9A:96:E1:03:56:22 ValidityFri, 17 Nov 2023 16:01:17 GMT - Thu, 15 Feb 2024 16:01:16 GMT File type Size 170 kB (169672 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /mp_dist/mstream2.js?v5646834026 HTTP/1.1 Host: static.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Fri, 01 Dec 2023 20:54:53 GMT content-type: application/javascript last-modified: Wed, 29 Nov 2023 19:14:25 GMT vary: Accept-Encoding etag: W/"65678d91-296c8" x-movieads-country: LT access-control-allow-methods: GET, POST, OPTIONS access-control-allow-credentials: true access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range access-control-max-age: 1728000 cache-control: max-age=7200 cf-cache-status: HIT age: 6002 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9tbyykk5D23A2xcAkYYIKN3zyEpJ7PQSny3NE6%2FM6Hr4xlBLVs5NvySjZ1m0r33ug2kfAAQE8TLxVrs5uGiVDxoUR9GzaM6TdM6VoOgvkh1sK1nxtLhZPsS%2B9xSafwHS4i4aolGs"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a57ee22712a-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	hd.3lordserial.xyz/ccdn.php	104.21.60.176	200 OK	11 B
URL POST HTTP/3 hd.3lordserial.xyz/ccdn.php IP 104.21.60.176:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject3lordserial.xyz Fingerprint55:F3:EC:F8:C5:A9:65:3A:AD:8F:B2:1A:59:6B:1A:41:7E:A0:65:DF ValidityWed, 29 Nov 2023 21:49:20 GMT - Tue, 27 Feb 2024 21:49:19 GMT File type troff or preprocessor input, ASCII text, with no line terminators Size 11 B (11 bytes) Hash 023b66d077eec9336b21a3813defc22a 4d644f198bd706740dabf098ccf16a68f2c8a06d dd1ac68a937ed14636599279bc971a1b4fc20df9aed5f29bc51a0c7449472fb6 HTTP Headers POST /ccdn.php HTTP/1.1 Host: hd.3lordserial.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://hd.3lordserial.xyz/146-kasl-sv-13.html Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest Content-Length: 63 Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Cookie: PHPSESSID=c0506767ddef664786c878030c4f8c6b; _ma=96c8bcbc-89b2-47f3-b910-3f5529571cb5; viewed_ids=146; cf_clearance=SjvM46wFebm2OGS8wlR59lb_yUWbol9k9GkOmVkPp2M-1701464095-0-1-730ca2d2.73a07051.5b213570-0.2.1701464095; _pbjs_userid_consent_data=3524755945110770; "_pubcid"=ab26304a-9a68-40d3-8c6f-87110b8f5450; stableid=none; stableid_cd=1701464102612 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Fri, 01 Dec 2023 20:54:59 GMT content-type: application/json; charset=utf-8 vary: Accept-Encoding x-powered-by: PHP/7.4.33 expires: Thu, 19 Nov 1981 08:52:00 GMT pragma: no-cache cache-control: no-cache cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D%2BpSX0a3ze9qYtMk539cUcJKLqxuHxvhME1XqEL%2BVPJq%2B%2BKHbsONDxwLe1V%2Fk3NDt8I%2Fu%2BIEOMdezTROG%2FUX0SO2BjnKKE2UUxIcwrkCcOl2T7qjhZz3vgrdFBU5XceptXJMPTE%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a7b4fee56a8-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	hd.3lordserial.xyz/engine/classes/min/index.php?g=general&v=cbebf	104.21.60.176	200 OK	86 kB
URL GET HTTP/3 hd.3lordserial.xyz/engine/classes/min/index.php?g=general&v=cbebf IP 104.21.60.176:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject3lordserial.xyz Fingerprint55:F3:EC:F8:C5:A9:65:3A:AD:8F:B2:1A:59:6B:1A:41:7E:A0:65:DF ValidityWed, 29 Nov 2023 21:49:20 GMT - Tue, 27 Feb 2024 21:49:19 GMT File type ASCII text, with very long lines (32065), with CRLF line terminators Size 86 kB (85582 bytes) Hash 710458dd559c957714ac4a8e95357eb5 f694238d616f579a0690001f37984af430c19963 b409c14a10b4caad6b54844aa63a5faf748b83eecc2dd0d4fb1d913f8de55365 HTTP Headers GET /engine/classes/min/index.php?g=general&v=cbebf HTTP/1.1 Host: hd.3lordserial.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/146-kasl-sv-13.html Cookie: PHPSESSID=c0506767ddef664786c878030c4f8c6b Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Fri, 01 Dec 2023 20:54:53 GMT content-type: application/x-javascript; charset=utf-8 x-powered-by: PHP/7.4.33 expires: Sat, 30 Nov 2024 20:54:53 GMT vary: Accept-Encoding cache-control: max-age=31536000 last-modified: Fri, 09 Dec 2022 04:42:50 GMT etag: W/"pub1670560970;gz" cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5bfiV9nQ9k%2BbVECMWHyvUT7WaCiUN7gBemZcustRi9q%2FcYfnvHnubJIGEOlQuoxkFcEegcEOdjNNa7zhVsv2AoIzaEclsEsSTtrLlTnmLNfTp3yyKibm8VrB%2BLGgKlAbelGKj%2BM%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a521e7856a8-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	s.myangular.life/player?cat=support&hit=weak-ref&description=yes	116.202.233.126	200 OK	0 B
URL GET HTTP/1.1 s.myangular.life/player?cat=support&hit=weak-ref&description=yes IP 116.202.233.126:443 ASN #24940 Hetzner Online GmbH Requested by https://api.strvid.ws/embed/movie/455 Certificate IssuerSectigo Limited Subjects.myangular.life Fingerprint3A:21:0F:72:24:43:49:14:06:28:C6:D0:A6:10:6B:D7:B2:EA:5A:66 ValidityTue, 04 Apr 2023 00:00:00 GMT - Sat, 04 May 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /player?cat=support&hit=weak-ref&description=yes HTTP/1.1 Host: s.myangular.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://api.strvid.ws/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:53 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: keep-alive Access-Control-Allow-Origin: *`

	a.videohead.tech/sync?ssp=44	188.114.97.1	204 No Content	0 B
URL GET HTTP/2 a.videohead.tech/sync?ssp=44 IP 188.114.97.1:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGoogle Trust Services LLC Subjectvideohead.tech FingerprintAC:24:7F:38:6B:35:E3:94:CB:F9:41:85:4E:11:82:9B:AB:92:22:D2 ValiditySun, 26 Nov 2023 10:34:15 GMT - Sat, 24 Feb 2024 10:34:14 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /sync?ssp=44 HTTP/1.1 Host: a.videohead.tech User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 204 No Content date: Fri, 01 Dec 2023 20:54:53 GMT content-type: text/plain set-cookie: prevhead=1; Expires=Sun, 31 Dec 2023 20:54:53 GMT; Domain=videohead.tech; SameSite=None; Secure; Path=/ access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization access-control-expose-headers: Content-Length,Content-Range vary: Origin cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bc0UFpQOOWDrI0rtQ%2F%2BNR82KFcG%2FefUGsF15sAohrYgYaPVDhSgY%2BPZ1XA4vPUGapSY9EbPQlfbPkHBZmFYszZz6ZwytwSxeX0NOFrPM%2BcNufEYtacoEsg4DVdKiLXReYtNX"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a5a1ce05693-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	s.myangular.life/player?cat=support&hit=find&description=yes	116.202.233.126	200 OK	0 B
URL GET HTTP/1.1 s.myangular.life/player?cat=support&hit=find&description=yes IP 116.202.233.126:443 ASN #24940 Hetzner Online GmbH Requested by https://api.strvid.ws/embed/movie/455 Certificate IssuerSectigo Limited Subjects.myangular.life Fingerprint3A:21:0F:72:24:43:49:14:06:28:C6:D0:A6:10:6B:D7:B2:EA:5A:66 ValidityTue, 04 Apr 2023 00:00:00 GMT - Sat, 04 May 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /player?cat=support&hit=find&description=yes HTTP/1.1 Host: s.myangular.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://api.strvid.ws/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:53 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: keep-alive Access-Control-Allow-Origin: *`

	hd.3lordserial.xyz/engine/ajax/controller.php?mod=adminfunction&id=146&action=newsread&user_hash=39adc8963e756445da4a3d85a1c7e3f098593a1d	104.21.60.176	200 OK	2 B
URL GET HTTP/3 hd.3lordserial.xyz/engine/ajax/controller.php?mod=adminfunction&id=146&action=newsread&user_hash=39adc8963e756445da4a3d85a1c7e3f098593a1d IP 104.21.60.176:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject3lordserial.xyz Fingerprint55:F3:EC:F8:C5:A9:65:3A:AD:8F:B2:1A:59:6B:1A:41:7E:A0:65:DF ValidityWed, 29 Nov 2023 21:49:20 GMT - Tue, 27 Feb 2024 21:49:19 GMT File type ASCII text, with no line terminators Size 2 B (2 bytes) Hash 444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df HTTP Headers GET /engine/ajax/controller.php?mod=adminfunction&id=146&action=newsread&user_hash=39adc8963e756445da4a3d85a1c7e3f098593a1d HTTP/1.1 Host: hd.3lordserial.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://hd.3lordserial.xyz/146-kasl-sv-13.html X-Requested-With: XMLHttpRequest DNT: 1 Connection: keep-alive Cookie: PHPSESSID=c0506767ddef664786c878030c4f8c6b; _ma=96c8bcbc-89b2-47f3-b910-3f5529571cb5; viewed_ids=146; cf_clearance=SjvM46wFebm2OGS8wlR59lb_yUWbol9k9GkOmVkPp2M-1701464095-0-1-730ca2d2.73a07051.5b213570-0.2.1701464095; _pbjs_userid_consent_data=3524755945110770; "_pubcid"=ab26304a-9a68-40d3-8c6f-87110b8f5450; stableid=none; stableid_cd=1701464102612 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Fri, 01 Dec 2023 20:54:58 GMT content-type: text/html; charset=utf-8 vary: Accept-Encoding x-powered-by: PHP/7.4.33 expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6Y5E1KTnM1TP7FBnIjItX2wnvr%2BILFIvaZODORnulYlJY%2BQAJdWfp3RWEC1HP6NzeXw9HPMTh4NkkY2XsoLkUTFD0z2EiU%2BGfVPru8h4sjLelKXXwabNSjGPOswYoDIt9UVxEm0%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a7a3ef356a8-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	vak345.com/s.js?v=647a534f9f5fb9ced25ee7db57ef9c72	172.67.204.19	200 OK	3.7 kB
URL GET HTTP/2 vak345.com/s.js?v=647a534f9f5fb9ced25ee7db57ef9c72 IP 172.67.204.19:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintF4:50:2C:D7:5C:84:E6:10:5D:32:80:62:FC:FE:E8:A0:40:4B:99:C4 ValidityFri, 10 Mar 2023 00:00:00 GMT - Sat, 09 Mar 2024 23:59:59 GMT File type ASCII text, with very long lines (4106), with no line terminators Size 3.7 kB (3721 bytes) Hash fc6aa812e6664dca2b58a14b32508382 4bbeb2e29debe2c910250ddad661ea99d23f53f8 09039eeb3ce0f5a458c541608aeec8d754e7006476c6619860330f27763a1e27 HTTP Headers `GET /s.js?v=647a534f9f5fb9ced25ee7db57ef9c72 HTTP/1.1 Host: vak345.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Fri, 01 Dec 2023 20:54:52 GMT content-type: text/javascript;charset=UTF-8 vary: Accept-Encoding cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 pragma: no-cache x-movieads-country: NO cf-cache-status: BYPASS report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9r60l5nOH8URXSOTRO4ZXnG5jvqLrbMMLSD0q9WF9IYdgk%2BPOvKQk7jC8c1kT4R4B1X7MSucSSfpqGXwSjYfSYECWjqfOjDZnDEyCa148VuFGR7jVVyC76Fyrqok"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a522cab56ca-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	static.filmskino.site/hls/trailers/arJIA_8cyT0.mp4/index.m3u8	193.200.65.230	200 OK	4.1 kB
URL GET HTTP/1.1 static.filmskino.site/hls/trailers/arJIA_8cyT0.mp4/index.m3u8 IP 193.200.65.230:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://videotoday.site/mp_dist/td/trhls.html?v5646834026 Certificate IssuerLet's Encrypt Subjectstatic.filmskino.site Fingerprint6E:8F:8F:89:03:E1:65:6F:AE:73:8A:6F:6B:A2:B1:02:C1:FE:D3:C7 ValidityMon, 02 Oct 2023 16:05:08 GMT - Sun, 31 Dec 2023 16:05:07 GMT File type M3U playlist, ASCII text, with very long lines (4182), with no line terminators Size 4.1 kB (4087 bytes) Hash fd70b6d88d109c2dd9da13ed9e0ff0ab a6d9fd27588f1770c52b6c3e485eaecb7a824362 14637bb13c262b9980d0378784cc3a9336f935fa17d1d4dd61904cac2a62b0c9 HTTP Headers `GET /hls/trailers/arJIA_8cyT0.mp4/index.m3u8 HTTP/1.1 Host: static.filmskino.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://videotoday.site DNT: 1 Connection: keep-alive Referer: https://videotoday.site/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:57 GMT Content-Type: application/vnd.apple.mpegurl Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"3a1794b0-ff7" Expires: Sun, 10 Mar 2024 20:54:57 GMT Cache-Control: max-age=8640000 Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Origin: * Content-Encoding: gzip

	hd.3lordserial.xyz/cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js	104.21.60.176	200 OK	7.4 kB
URL GET HTTP/3 hd.3lordserial.xyz/cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js IP 104.21.60.176:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject3lordserial.xyz Fingerprint55:F3:EC:F8:C5:A9:65:3A:AD:8F:B2:1A:59:6B:1A:41:7E:A0:65:DF ValidityWed, 29 Nov 2023 21:49:20 GMT - Tue, 27 Feb 2024 21:49:19 GMT File type ASCII text, with very long lines (7380), with no line terminators Size 7.4 kB (7380 bytes) Hash 90e662b082584d531825b53957dce61a e5dcfb30515606cb053c976c46c1560db3000459 ec0625ca374700cf49093d11da97702a896967f1156968c75523280e70dfdb81 HTTP Headers GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js HTTP/1.1 Host: hd.3lordserial.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: PHPSESSID=c0506767ddef664786c878030c4f8c6b; _ma=96c8bcbc-89b2-47f3-b910-3f5529571cb5; viewed_ids=146 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Fri, 01 Dec 2023 20:54:54 GMT content-type: application/javascript; charset=UTF-8 x-content-type-options: nosniff vary: accept-encoding cache-control: max-age=14400, public report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fn5a4hyjPOqd0SuIkLmoE0JaK%2Bbk9gWsSM%2BSj%2Fe%2FBFb2ULjwHigUw1HpaPVM%2FhVSPeFCVG18M6mfQe6X0fq3u%2Fe1qmkSTANHKL7ys%2F6MKWyUyDzvkI37t25asGC0%2F5zMliFoR7o%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a604e1756a8-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	a.videohead.tech/sync?ssp=42&skipme=76165f9c-19c5-44f9-a939-d74d6f307d13	188.114.97.1	302 Found	35 B
URL GET HTTP/3 a.videohead.tech/sync?ssp=42&skipme=76165f9c-19c5-44f9-a939-d74d6f307d13 IP 188.114.97.1:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGoogle Trust Services LLC Subjectvideohead.tech FingerprintAC:24:7F:38:6B:35:E3:94:CB:F9:41:85:4E:11:82:9B:AB:92:22:D2 ValiditySun, 26 Nov 2023 10:34:15 GMT - Sat, 24 Feb 2024 10:34:14 GMT File type Size 35 B (35 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /sync?ssp=42&skipme=76165f9c-19c5-44f9-a939-d74d6f307d13 HTTP/1.1 Host: a.videohead.tech User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: prevhead=1 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/3 302 Found date: Fri, 01 Dec 2023 20:54:57 GMT content-type: text/plain location: https://cs.alfasense.com/p?ssp=vh&id=2ffec98b-851b-4a0e-8702-67f9b8c52227 set-cookie: prevhead=1; Max-Age=0; Domain=videohead.tech; SameSite=None; Secure; Path=/ vhead=4RH7ypXK2IddM_tU0Rs7jSqNX-kam66jI8uvDpJtF-dFG9cZjrPGO5KjopMgvrRspa8DKZEUqbS5KEDvncKCEw; Expires=Mon, 28 Nov 2033 20:54:57 GMT; Domain=videohead.tech; SameSite=None; Secure; Path=/ access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization access-control-expose-headers: Content-Length,Content-Range vary: Origin cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K2kdkyLhlletHTO4OJkX2YpOWz2W9FGIt0EFMeELSeHpkoNNWzoz%2FRHvxOIBN1Da2qrtDKqbyGwREe5xxXKGSAXBJDlkI4Fw1rFlEQWa9kvMCohKKpGLpRweIcEpqDacuw9n"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a724cfe5685-OSL alt-svc: h3=":443"; ma=86400

	yandex.ru/ads/system/context.js	77.88.55.88	200 OK	338 kB
URL GET HTTP/2 yandex.ru/ads/system/context.js IP 77.88.55.88:443 ASN #13238 YANDEX LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.xn--d1acpjx3f.xn--p1ai Fingerprint32:06:D7:FE:2B:30:18:07:53:C2:E3:A6:3D:59:A6:1F:72:9B:5B:7D ValidityThu, 26 Oct 2023 17:49:59 GMT - Wed, 24 Apr 2024 20:59:59 GMT File type ASCII text, with very long lines (65492) Size 338 kB (338141 bytes) Hash 82ac718a22a61160acc5991c4e0124d0 67c4ab56036cac8a9e4d860c23490f92735b3c03 10e65c872f3b3676db9fea4c93676792a17b5a574700fe74a517ddd99d4eea67 HTTP Headers `GET /ads/system/context.js HTTP/1.1 Host: yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK timing-allow-origin: * nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} x-content-type-options: nosniff access-control-allow-origin: * set-cookie: i=l9xckzu4kHN8aQZHeg04GWVEqz3WHDAsE/mTAU/gyGFfy9tH6YE5QDhN2y8P8947AXyDBModbn6b6g5A69torscGgiI=; Expires=Sun, 30-Nov-2025 20:54:54 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=7792233961701464094; Expires=Sun, 30-Nov-2025 20:54:54 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None yashr=7319738301701464094; Path=/; Domain=.yandex.ru; Expires=Sat, 30 Nov 2024 20:54:54 GMT; SameSite=None; Secure; HttpOnly expires: Fri, 01 Dec 2023 21:54:54 GMT x-yandex-req-id: 1701464094218563-6403295219179223396-balancer-l7leveler-kubr-yp-sas-77-BAL-2338 accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} cache-control: private, max-age=3600 content-encoding: br content-type: text/javascript; charset=utf-8 x-robots-tag: noindex, noarchive, nofollow X-Firefox-Spdy: h2

	hd.3lordserial.xyz/cdn-cgi/challenge-platform/h/b/jsd/r/82ee3a4f4a690b59	104.21.60.176	200 OK	0 B
URL POST HTTP/3 hd.3lordserial.xyz/cdn-cgi/challenge-platform/h/b/jsd/r/82ee3a4f4a690b59 IP 104.21.60.176:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject3lordserial.xyz Fingerprint55:F3:EC:F8:C5:A9:65:3A:AD:8F:B2:1A:59:6B:1A:41:7E:A0:65:DF ValidityWed, 29 Nov 2023 21:49:20 GMT - Tue, 27 Feb 2024 21:49:19 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /cdn-cgi/challenge-platform/h/b/jsd/r/82ee3a4f4a690b59 HTTP/1.1 Host: hd.3lordserial.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Content-Length: 12217 Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/146-kasl-sv-13.html Cookie: PHPSESSID=c0506767ddef664786c878030c4f8c6b; _ma=96c8bcbc-89b2-47f3-b910-3f5529571cb5; viewed_ids=146 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Fri, 01 Dec 2023 20:54:55 GMT content-type: text/plain; charset=UTF-8 set-cookie: cf_clearance=SjvM46wFebm2OGS8wlR59lb_yUWbol9k9GkOmVkPp2M-1701464095-0-1-730ca2d2.73a07051.5b213570-0.2.1701464095; path=/; expires=Sat, 30-Nov-24 20:54:55 GMT; domain=.3lordserial.xyz; HttpOnly; Secure; SameSite=None report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1GIb85bB5RXhn6A1UlJWOOAa7xMMz9SorSEpKmSeZz6B2ng7j5IXb%2FFG2g3JFmT8xAKO%2FtVaLeE6I%2FmUVKh5hTDesyPwdVwV2vQ5sMxN4fS3T5yTY7QZrmW4CkPjVj57shMXbLY%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a659b7356a8-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	img.imgilall.me/movies/video/3/9/0/3/9/6/0/0/0/0/800x450_390396.jpg?t=1648646685	104.21.41.144	200 OK	28 kB
URL GET HTTP/2 img.imgilall.me/movies/video/3/9/0/3/9/6/0/0/0/0/800x450_390396.jpg?t=1648646685 IP 104.21.41.144:443 ASN #13335 CLOUDFLARENET Requested by https://api.strvid.ws/embed/movie/455 Certificate IssuerLet's Encrypt Subjectimgilall.me Fingerprint98:E4:9B:8A:B0:87:12:C1:ED:11:CF:C5:25:B0:C9:44:46:81:F3:F5 ValiditySat, 14 Oct 2023 01:59:51 GMT - Fri, 12 Jan 2024 01:59:50 GMT File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 800x450, components 3\012- data Size 28 kB (27741 bytes) Hash 8f7677618651ffcaedee395638278613 95693404b713c983eb82b47e22fadc79ff07e53a e53c24c6b9664f1b712edc257f9344f9bad73d8c82ee1d33519cd5459d736f16 HTTP Headers `GET /movies/video/3/9/0/3/9/6/0/0/0/0/800x450_390396.jpg?t=1648646685 HTTP/1.1 Host: img.imgilall.me User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://api.strvid.ws/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Fri, 01 Dec 2023 20:54:54 GMT content-type: image/jpeg last-modified: Mon, 18 Jul 2022 12:20:27 GMT vary: Accept-Encoding etag: W/"62d5500b-6c5d" expires: Tue, 19 Nov 2024 05:20:00 GMT cache-control: max-age=31104000 access-control-allow-origin: * cf-cache-status: HIT age: 574494 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BLM1srJFwGJms9z0dxDu0mqJx7X3qA0sIOdKYQdkMIjV4WprrQmaLC7Sj6fHBizNAHEA%2BsTCA28s3FcjS4U0x6MnBLFfqPCHh9Y56IUCVXwcWatcKN8ZkNkxvWTavLSSdVw%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a5cbbb6b521-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	yastatic.net/partner-code-bundles/920174/e26b550151ba5774984e.js	178.154.131.217	200 OK	24 kB
URL GET HTTP/2 yastatic.net/partner-code-bundles/920174/e26b550151ba5774984e.js IP 178.154.131.217:443 ASN #13238 YANDEX LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.yastatic-net.ru FingerprintD9:64:E0:F2:39:AC:36:DB:9A:A3:3D:E4:27:E4:0B:F5:5B:5B:E3:A0 ValidityMon, 10 Jul 2023 13:25:28 GMT - Sun, 07 Jan 2024 20:59:59 GMT File type ASCII text, with very long lines (24505) Size 24 kB (24538 bytes) Hash 52682127d88b3c7670e41fb45f74046f 2b6fff0fefd384b822fb0cab1fa720d6cb7bd10b 894011b120e45e61fe56cdbce595ded18fe55eaa35c9dadf11e640c1eabce8bd HTTP Headers `GET /partner-code-bundles/920174/e26b550151ba5774984e.js HTTP/1.1 Host: yastatic.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx/1.17.9 date: Fri, 01 Dec 2023 20:54:54 GMT content-type: text/javascript; charset=utf-8 content-length: 7951 access-control-allow-origin: * cache-control: public, max-age=946708560 content-encoding: br etag: "e74fe6a1eeb60c78ae82450e12560661" expires: Mon, 01 Dec 2053 03:26:51 GMT last-modified: Thu, 30 Nov 2023 18:32:44 GMT nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} strict-transport-security: max-age=43200000; includeSubDomains; timing-allow-origin: * vary: Accept-Encoding x-robots-tag: noindex, noarchive, nofollow accept-ranges: bytes X-Firefox-Spdy: h2

	hd.3lordserial.xyz/146-kasl-81.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html	104.21.60.176	301 Moved Permanently	58 kB
URL User Request GET HTTP/2 hd.3lordserial.xyz/146-kasl-81.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html IP 104.21.60.176:443 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subject3lordserial.xyz Fingerprint55:F3:EC:F8:C5:A9:65:3A:AD:8F:B2:1A:59:6B:1A:41:7E:A0:65:DF ValidityWed, 29 Nov 2023 21:49:20 GMT - Tue, 27 Feb 2024 21:49:19 GMT File type Size 58 kB (57472 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /146-kasl-81.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html/146-kasl-sv-13.html HTTP/1.1 Host: hd.3lordserial.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 301 Moved Permanently date: Fri, 01 Dec 2023 20:54:52 GMT content-type: text/html; charset=UTF-8 x-powered-by: PHP/7.4.33 expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache set-cookie: PHPSESSID=c0506767ddef664786c878030c4f8c6b; path=/; secure; HttpOnly location: /146-kasl-sv-13.html cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qKLmeaT71OBjqZMjen186SH8Cb%2BNZhNisXxABA28X1YP%2FQxWFujgTYTevkPq76qSssA3XnXr3uVHkTv%2BKMMPvcWGLbeZCSTPrkwyeKxBDIvxv1LStuiyVpsMLyFW%2B%2FjjDXKtFN4%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a4e29a10b59-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	cs.alfasense.com/p?ssp=bv&uid=3veqvg2yeg	23.111.100.20	200 OK	35 B
URL GET HTTP/1.1 cs.alfasense.com/p?ssp=bv&uid=3veqvg2yeg IP 23.111.100.20:443 ASN #7979 SERVERS-COM Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasense.com Fingerprint92:58:B8:97:87:98:3A:5B:01:DA:24:13:D3:B2:D4:AF:F5:07:AE:9E ValiditySat, 10 Dec 2022 23:58:10 GMT - Thu, 11 Jan 2024 23:58:09 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 35 B (35 bytes) Hash c2196de8ba412c60c22ab491af7b1409 5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992 HTTP Headers `GET /p?ssp=bv&uid=3veqvg2yeg HTTP/1.1 Host: cs.alfasense.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: uuid=76165f9c-19c5-44f9-a939-d74d6f307d13 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Fri, 01 Dec 2023 20:54:58 GMT Content-Type: image/gif Content-Length: 35 Connection: keep-alive Server: fasthttp Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.100.20 Accept-Ranges: bytes

	cdn5.playmatic.video/public/playmatic_union.min.js	5.101.37.37	200 OK	41 kB
URL GET HTTP/2 cdn5.playmatic.video/public/playmatic_union.min.js IP 5.101.37.37:443 ASN #57416 LLC South Internet Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subjectcdn5.playmatic.video Fingerprint83:D1:3D:F2:01:70:F1:21:98:AF:D2:CB:80:84:EF:F7:96:0A:E4:09 ValidityWed, 04 Oct 2023 07:49:05 GMT - Tue, 02 Jan 2024 07:49:04 GMT File type Size 41 kB (40975 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /public/playmatic_union.min.js HTTP/1.1 Host: cdn5.playmatic.video User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:52 GMT content-type: application/javascript vary: Accept-Encoding last-modified: Sat, 07 Oct 2023 08:15:12 GMT etag: W/"65211390-a00f" content-encoding: gzip cache: HIT x-cached-since: 2023-11-28T17:07:28+00:00 x-node: fr5-up-gc15 X-Firefox-Spdy: h2`

	pix.bumlam.com/sync/sape/done	31.172.81.158	200 OK	43 B
URL GET HTTP/1.1 pix.bumlam.com/sync/sape/done IP 31.172.81.158:443 ASN #44066 diva-e Datacenters GmbH Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subject.bumlam.com Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0 ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash ad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda HTTP Headers `GET /sync/sape/done HTTP/1.1 Host: pix.bumlam.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.acint.net/ DNT: 1 Connection: keep-alive Cookie: suuid3=IiRlMTM4MzNjZS05MDhiLTExZWUtODZlMC0wMDI1OTBjMDY0N2M* Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:56 GMT Content-Type: image/gif Content-Length: 43 Connection: keep-alive Access-Control-Allow-Origin: https://www.acint.net Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Pragma: no-cache Expires: 05-Jun-2005 22:00:00 GMT X-Xss-Protection: 0 P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"

	ads.digitalcaramel.com/js/lordserial2.me.js?ts=1701464097406	88.99.234.26	200 OK	3.4 kB
URL GET HTTP/2 ads.digitalcaramel.com/js/lordserial2.me.js?ts=1701464097406 IP 88.99.234.26:443 ASN #24940 Hetzner Online GmbH Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subjectdigitalcaramel.com Fingerprint2E:22:56:4A:B4:36:55:CF:F5:24:6A:BF:6F:90:8F:29:B8:E7:C1:89 ValiditySun, 22 Oct 2023 03:56:43 GMT - Sat, 20 Jan 2024 03:56:42 GMT File type ASCII text, with very long lines (3378), with no line terminators Size 3.4 kB (3378 bytes) Hash daa1b1e45481203befdf14221f98d768 6e581a38d3f6fccf5d321338c8ca60d9f356345b 67df4341900fd03de677206c8a4a75c9c2f5fa561e208c5e180bc9040a66664a HTTP Headers `GET /js/lordserial2.me.js?ts=1701464097406 HTTP/1.1 Host: ads.digitalcaramel.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:52 GMT content-type: application/javascript; charset=utf-8 last-modified: Wed, 01 Nov 2023 06:44:57 GMT vary: Accept-Encoding etag: W/"6541f3e9-d32" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 strict-transport-security: max-age=15724800; includeSubdomains; preload x-content-type-options: nosniff content-encoding: gzip X-Firefox-Spdy: h2`

	logger.moviead55.ru/logger.php?t=player_frame_loaded_new&c=805e1579-dbe0-4830-bffa-dd6b2459b8b3&a=&m=0&v=647a534f9f5fb9ced25ee7db57ef9c72&o=	193.200.65.146	200 OK	70 B
URL GET HTTP/2 logger.moviead55.ru/logger.php?t=player_frame_loaded_new&c=805e1579-dbe0-4830-bffa-dd6b2459b8b3&a=&m=0&v=647a534f9f5fb9ced25ee7db57ef9c72&o= IP 193.200.65.146:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data Size 70 B (70 bytes) Hash b357a19c87624c7c4d131aeeb4ae677f c7a9c45fd419815a5ab1998503a9f03514c0e229 497790947d4666760ce38f3c00e852c71fdb66cae849bae8e9ede352719e1581 HTTP Headers GET /logger.php?t=player_frame_loaded_new&c=805e1579-dbe0-4830-bffa-dd6b2459b8b3&a=&m=0&v=647a534f9f5fb9ced25ee7db57ef9c72&o= HTTP/1.1 Host: logger.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:53 GMT content-type: Content-Type: image/png vary: Accept-Encoding x-movieads-le: true x-movieads-country: NO content-encoding: gzip X-Firefox-Spdy: h2`

	hd.3lordserial.xyz/templates/lordfun/images/calendar.svg	104.21.60.176	200 OK	1.5 kB
URL GET HTTP/3 hd.3lordserial.xyz/templates/lordfun/images/calendar.svg IP 104.21.60.176:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject3lordserial.xyz Fingerprint55:F3:EC:F8:C5:A9:65:3A:AD:8F:B2:1A:59:6B:1A:41:7E:A0:65:DF ValidityWed, 29 Nov 2023 21:49:20 GMT - Tue, 27 Feb 2024 21:49:19 GMT File type HTML document text\012- exported SGML document, ASCII text, with very long lines (1547), with no line terminators Size 1.5 kB (1524 bytes) Hash afe20d6d7ce2f5ebc4475e27f8944250 a8324deeb02bde3cd492121d1b283a7242c9b6fd 535057257ba6206b89cd58f6abded23f7587fddd7ae854537e131a72ef4b7b81 HTTP Headers GET /templates/lordfun/images/calendar.svg HTTP/1.1 Host: hd.3lordserial.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/templates/lordfun/style/full.css?v=2.6 Cookie: PHPSESSID=c0506767ddef664786c878030c4f8c6b Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Fri, 01 Dec 2023 20:54:52 GMT content-type: image/svg+xml last-modified: Thu, 06 Jul 2023 23:57:54 GMT vary: Accept-Encoding etag: W/"64a75502-5f4" cache-control: max-age=31536000 cf-cache-status: HIT age: 4204 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=auXDC9FZo1mjmOxPDdsb%2FU%2F51h6%2F0XwpXmp5PSA2p%2FWLwF6S9Hm461aQejBbySm%2F9Lu4DOSoP%2Fczt1Ax0xJTwK9xY%2BbX%2BqLbcacjhCWETOk40GHp6zkLT8pHKRMR5KN5E3hzuoM%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a52ef2956a8-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	ads.alfasense.net/adserver/www/delivery/lg.php?bannerid=103&campaignid=15&zoneid=9&loc=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html&cb=aaf792d543&zones=9&xcampaigns=::between::getintent::vox::otm::alfasense::rtbsape::default-stub::&xsite=11072&xsitename=lordserial2.me	136.144.31.29	200 OK	43 B
URL GET HTTP/2 ads.alfasense.net/adserver/www/delivery/lg.php?bannerid=103&campaignid=15&zoneid=9&loc=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html&cb=aaf792d543&zones=9&xcampaigns=::between::getintent::vox::otm::alfasense::rtbsape::default-stub::&xsite=11072&xsitename=lordserial2.me IP 136.144.31.29:443 ASN #52000 Innovation IT Solutions LTD Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasense.net Fingerprint15:61:D7:BD:E9:E1:37:36:5F:FD:47:F7:69:F7:5E:53:CD:95:A9:59 ValidityWed, 22 Nov 2023 16:23:03 GMT - Mon, 23 Dec 2024 16:23:02 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash b4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49 HTTP Headers GET /adserver/www/delivery/lg.php?bannerid=103&campaignid=15&zoneid=9&loc=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html&cb=aaf792d543&zones=9&xcampaigns=::between::getintent::vox::otm::alfasense::rtbsape::default-stub::&xsite=11072&xsitename=lordserial2.me HTTP/1.1 Host: ads.alfasense.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: OAID=01000111010001000101000001010010 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:58 GMT content-type: image/gif pragma: no-cache cache-control: no-cache, no-store, must-revalidate expires: 0 access-control-allow-origin: * p3p: CP="CUR ADM OUR NOR STA NID" content-security-policy: frame-ancestors 'self';frame-src 'self'; cross-origin-embedder-policy: unsafe-none cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: cross-origin permissions-policy: geolocation=(self), payment=(self) referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block; set-cookie: OAID=01000111010001000101000001010010; expires=Sat, 30-Nov-2024 20:54:58 GMT; Max-Age=31536000; path=/; secure; SameSite=none SRVGROUP=common; path=/; Secure; HttpOnly X-Firefox-Spdy: h2

	hd.3lordserial.xyz/146-kasl-sv-13.html	104.21.60.176	200 OK	58 kB
URL User Request GET HTTP/2 hd.3lordserial.xyz/146-kasl-sv-13.html IP 104.21.60.176:443 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subject3lordserial.xyz Fingerprint55:F3:EC:F8:C5:A9:65:3A:AD:8F:B2:1A:59:6B:1A:41:7E:A0:65:DF ValidityWed, 29 Nov 2023 21:49:20 GMT - Tue, 27 Feb 2024 21:49:19 GMT File type Size 58 kB (57472 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /146-kasl-sv-13.html HTTP/1.1 Host: hd.3lordserial.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: PHPSESSID=c0506767ddef664786c878030c4f8c6b Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Fri, 01 Dec 2023 20:54:52 GMT content-type: text/html; charset=utf-8 x-powered-by: PHP/7.4.33 expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache x-frame-options: SAMEORIGIN cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hhdLRElCb4TeLnbjrxPg6tKvU4KM8gGdofmbKVv8VlRF9W6z2HDGcxBbQxKb0G3zohg6Zjl68j7na5XVc9URu7PMX6x9Rl%2BiuHQx0S6E2wfxsl9oVt8oUrnYIMxTWiT1Slc7%2B2E%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a4f4a690b59-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	cdn.alfasense.net/js/ad_11072.js	136.144.31.36	200 OK	14 kB
URL GET HTTP/2 cdn.alfasense.net/js/ad_11072.js IP 136.144.31.36:443 ASN #52000 Innovation IT Solutions LTD Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasense.net Fingerprint15:61:D7:BD:E9:E1:37:36:5F:FD:47:F7:69:F7:5E:53:CD:95:A9:59 ValidityWed, 22 Nov 2023 16:23:03 GMT - Mon, 23 Dec 2024 16:23:02 GMT File type ASCII text, with very long lines (2743) Size 14 kB (13816 bytes) Hash 94250cdae3740b53fe64168d08306ba2 1add58902ba0257cafc92faa055dbd0e2069b999 7011bfb282414ff18e81196de933cb80a939daf27df745baaff40cb05cb128cc HTTP Headers `GET /js/ad_11072.js HTTP/1.1 Host: cdn.alfasense.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:56 GMT content-type: application/javascript last-modified: Thu, 30 Nov 2023 04:12:57 GMT etag: W/"65680bc9-35f8" content-security-policy: frame-ancestors 'none';frame-src 'self'; cross-origin-embedder-policy: unsafe-none cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: cross-origin access-control-allow-origin: * permissions-policy: geolocation=(self), payment=(self) referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block; cache-control: public, max-age=60 content-encoding: gzip set-cookie: route=dd92c318b574e2af8018c0207c5098f9; Path=/ SRVGROUP=common; path=/; Secure; HttpOnly X-Firefox-Spdy: h2

	cs.alfasense.com/p?ssp=kd&uid=35MxOgkIKPcQzAWGlJYG	23.111.100.20	200 OK	35 B
URL GET HTTP/1.1 cs.alfasense.com/p?ssp=kd&uid=35MxOgkIKPcQzAWGlJYG IP 23.111.100.20:443 ASN #7979 SERVERS-COM Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasense.com Fingerprint92:58:B8:97:87:98:3A:5B:01:DA:24:13:D3:B2:D4:AF:F5:07:AE:9E ValiditySat, 10 Dec 2022 23:58:10 GMT - Thu, 11 Jan 2024 23:58:09 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 35 B (35 bytes) Hash c2196de8ba412c60c22ab491af7b1409 5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992 HTTP Headers `GET /p?ssp=kd&uid=35MxOgkIKPcQzAWGlJYG HTTP/1.1 Host: cs.alfasense.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: uuid=76165f9c-19c5-44f9-a939-d74d6f307d13 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Fri, 01 Dec 2023 20:54:57 GMT Content-Type: image/gif Content-Length: 35 Connection: keep-alive Server: fasthttp Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.100.20 Accept-Ranges: bytes

	hd.3lordserial.xyz/templates/lordfun/js/libs.js?v=1.3	104.21.60.176	200 OK	12 kB
URL GET HTTP/3 hd.3lordserial.xyz/templates/lordfun/js/libs.js?v=1.3 IP 104.21.60.176:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject3lordserial.xyz Fingerprint55:F3:EC:F8:C5:A9:65:3A:AD:8F:B2:1A:59:6B:1A:41:7E:A0:65:DF ValidityWed, 29 Nov 2023 21:49:20 GMT - Tue, 27 Feb 2024 21:49:19 GMT File type Size 12 kB (12330 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /templates/lordfun/js/libs.js?v=1.3 HTTP/1.1 Host: hd.3lordserial.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/146-kasl-sv-13.html Cookie: PHPSESSID=c0506767ddef664786c878030c4f8c6b Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Fri, 01 Dec 2023 20:54:52 GMT content-type: application/javascript cf-bgj: minify cf-polished: origSize=14169 etag: W/"64a4a6e1-3759" last-modified: Tue, 04 Jul 2023 23:10:25 GMT vary: Accept-Encoding cache-control: max-age=31536000 cf-cache-status: HIT age: 4205 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=80fTSgjo9UqjZa2YU1VVsspBHtf1KVmYFzTLgo0JYu9CUdVzhbYA7%2BxJM73ogvgtFfI4mClPZkCpJjp%2BG%2BEAb2VGSbNeHdCsb7fBtDSKT0HuLAXdnBv%2BBHgygH7XbiiHMTI9sus%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a521e7b56a8-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	hd.3lordserial.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js	104.21.60.176	302 Found	7.4 kB
URL GET HTTP/3 hd.3lordserial.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js IP 104.21.60.176:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject3lordserial.xyz Fingerprint55:F3:EC:F8:C5:A9:65:3A:AD:8F:B2:1A:59:6B:1A:41:7E:A0:65:DF ValidityWed, 29 Nov 2023 21:49:20 GMT - Tue, 27 Feb 2024 21:49:19 GMT File type Size 7.4 kB (7380 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: hd.3lordserial.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: PHPSESSID=c0506767ddef664786c878030c4f8c6b; _ma=96c8bcbc-89b2-47f3-b910-3f5529571cb5; viewed_ids=146 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 302 Found date: Fri, 01 Dec 2023 20:54:54 GMT vary: accept-encoding cache-control: max-age=300, public access-control-allow-origin: * location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vMgoMvYo8We5OIjBbvxu2PvIrA8SkoF2SmWTVOlZ9k6z4oSi8jyD6mbeGbDZgFtGUDFuUoDAMVsaAWOuIDusWSkQANKELJoxazYhP9IyeZeiFLCc30UXqi6sSiU%2FUjZXgPgl6%2FI%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a5cba8956a8-OSL alt-svc: h3=":443"; ma=86400

	code.moviead55.ru/go/cinit?cn=ohmybid&rnd=1701464093	193.200.65.150	301 Moved Permanently	0 B
URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=ohmybid&rnd=1701464093 IP 193.200.65.150:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /go/cinit?cn=ohmybid&rnd=1701464093 HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently server: nginx date: Fri, 01 Dec 2023 20:54:53 GMT content-length: 0 location: https://match.ohmy.bid/cm?ssp=skyadv&redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dohmybid%26bid%3D%24%7BUUID%7D set-cookie: sky_uuid=8adb6661-5908-d990-7b0e-176943d62c7d; max-age=157680000; path=/; HttpOnly; secure; SameSite=None x-movieads-country: NO X-Firefox-Spdy: h2`

	s.uuidksinc.net/match/396/?remote_uid=0100007F1D486A65EB36FE270271E1BB	185.98.54.153	302 Found	43 B
URL GET HTTP/2 s.uuidksinc.net/match/396/?remote_uid=0100007F1D486A65EB36FE270271E1BB IP 185.98.54.153:443 ASN #39572 DataWeb Global Group B.V. Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subjectuuidksinc.net Fingerprint24:9D:6D:A2:89:55:7D:CD:A6:BD:59:A3:21:F2:65:41:A8:9D:38:99 ValidityThu, 09 Nov 2023 23:20:21 GMT - Wed, 07 Feb 2024 23:20:20 GMT File type Size 43 B (43 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /match/396/?remote_uid=0100007F1D486A65EB36FE270271E1BB HTTP/1.1 Host: s.uuidksinc.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 302 Found server: nginx/1.23.2 date: Fri, 01 Dec 2023 20:54:54 GMT content-length: 0 location: https://www.acint.net/match?dp=127&euid=35MxOgkIKPcQzAWGlJYG set-cookie: jcsuuid=35MxOgkIKPcQzAWGlJYG; expires=Sat, 30 Nov 2024 20:54:54 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None X-Firefox-Spdy: h2`

	miradres.com/met/409640	5.61.53.63	200 OK	158 B
URL GET HTTP/2 miradres.com/met/409640 IP 5.61.53.63:443 ASN #58061 Scalaxy B.V. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subjectmiradres.com Fingerprint9C:FA:53:73:49:EB:CD:56:18:D7:6C:67:D4:AD:32:25:11:0A:6D:13 ValiditySat, 21 Oct 2023 07:24:42 GMT - Fri, 19 Jan 2024 07:24:41 GMT File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Size 158 B (158 bytes) Hash 4c9ea221577ac9d85e822737a07d4875 9a4f6fdd838434a83e9a72def2b0e10e8db006fe 11b8fcc98b8884ec4ccfd3510aa105860968be18575dbcf940babb258bba1077 HTTP Headers GET /met/409640 HTTP/1.1 Host: miradres.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:52 GMT content-type: text/html; charset=UTF-8 vary: Accept-Encoding set-cookie: PHPSESSID=ebe5v3fc35a33gco531c9s4td6; path=/ expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" access-control-allow-credentials: true access-control-allow-headers: * access-control-allow-methods: * access-control-allow-origin: * content-encoding: gzip X-Firefox-Spdy: h2

	ads.alfasense.net/adserver/www/delivery/asyncspc.php?zones=9&prefix=revive-0-&xcampaigns=%3A%3Abetween%3A%3Agetintent%3A%3Avox%3A%3Aotm%3A%3Aalfasense%3A%3Artbsape%3A%3Adefault-stub%3A%3A&xsite=11072&xsitename=lordserial2.me&loc=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html	136.144.31.29	200 OK	1.2 kB
URL GET HTTP/2 ads.alfasense.net/adserver/www/delivery/asyncspc.php?zones=9&prefix=revive-0-&xcampaigns=%3A%3Abetween%3A%3Agetintent%3A%3Avox%3A%3Aotm%3A%3Aalfasense%3A%3Artbsape%3A%3Adefault-stub%3A%3A&xsite=11072&xsitename=lordserial2.me&loc=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html IP 136.144.31.29:443 ASN #52000 Innovation IT Solutions LTD Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasense.net Fingerprint15:61:D7:BD:E9:E1:37:36:5F:FD:47:F7:69:F7:5E:53:CD:95:A9:59 ValidityWed, 22 Nov 2023 16:23:03 GMT - Mon, 23 Dec 2024 16:23:02 GMT File type HTML document text\012- troff or preprocessor input, ASCII text, with very long lines (1224), with no line terminators Size 1.2 kB (1186 bytes) Hash fc38e7f1accf3867d963817aa2a8a116 4ead31df45e7464c4d77cef199f424a02e06c0f7 5787765c93c74a437e516c71de8dcd5b24ef1b12fd8830d8c3bb231ee7cb0ee0 HTTP Headers GET /adserver/www/delivery/asyncspc.php?zones=9&prefix=revive-0-&xcampaigns=%3A%3Abetween%3A%3Agetintent%3A%3Avox%3A%3Aotm%3A%3Aalfasense%3A%3Artbsape%3A%3Adefault-stub%3A%3A&xsite=11072&xsitename=lordserial2.me&loc=https%3A%2F%2Fhd.3lordserial.xyz%2F146-kasl-sv-13.html HTTP/1.1 Host: ads.alfasense.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://hd.3lordserial.xyz DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:58 GMT content-type: application/json pragma: no-cache cache-control: no-cache, no-store, must-revalidate expires: 0 p3p: CP="CUR ADM OUR NOR STA NID" access-control-allow-origin: https://hd.3lordserial.xyz access-control-allow-credentials: true content-security-policy: frame-ancestors 'self';frame-src 'self'; cross-origin-embedder-policy: unsafe-none cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: cross-origin permissions-policy: geolocation=(self), payment=(self) referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block; set-cookie: OAID=01000111010001000101000001010010; expires=Sat, 30-Nov-2024 20:54:58 GMT; Max-Age=31536000; path=/; secure; SameSite=none SRVGROUP=common; path=/; Secure; HttpOnly X-Firefox-Spdy: h2

	code.moviead55.ru/go/cinit?cn=otclkbid&rnd=1701464093	193.200.65.150	301 Moved Permanently	0 B
URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=otclkbid&rnd=1701464093 IP 193.200.65.150:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /go/cinit?cn=otclkbid&rnd=1701464093 HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 301 Moved Permanently server: nginx date: Fri, 01 Dec 2023 20:54:53 GMT content-length: 0 location: https://otclick-adv.ru/core/match.gif?s=30&reference=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dotclkbid%26bid%3D%23%7BUID%7D set-cookie: sky_uuid=c8846d2a-25fa-d831-bb0f-268eff4509cc; max-age=157680000; path=/; HttpOnly; secure; SameSite=None x-movieads-country: NO X-Firefox-Spdy: h2`

	s.myangular.life/ws?ref_id=13098	116.202.233.126	101 Switching Protocols	0 B
URL GET HTTP/1.1 s.myangular.life/ws?ref_id=13098 IP 116.202.233.126:443 ASN #24940 Hetzner Online GmbH Requested by https://api.strvid.ws/embed/movie/455 Certificate IssuerSectigo Limited Subjects.myangular.life Fingerprint3A:21:0F:72:24:43:49:14:06:28:C6:D0:A6:10:6B:D7:B2:EA:5A:66 ValidityTue, 04 Apr 2023 00:00:00 GMT - Sat, 04 May 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /ws?ref_id=13098 HTTP/1.1 Host: s.myangular.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: https://api.strvid.ws Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: 30bfXbUnEJKKDus5cJ+hbw== DNT: 1 Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols Server: nginx Date: Fri, 01 Dec 2023 20:54:55 GMT Connection: upgrade Upgrade: websocket Sec-WebSocket-Accept: TdrXL+QWaGwIB3Xg0Ym2N/dDyYg=`

	ssp.bidvol.com/usersync?dspcsid=135&redirect=1&id=76165f9c-19c5-44f9-a939-d74d6f307d13	65.109.65.188	302 Found	35 B
URL GET HTTP/2 ssp.bidvol.com/usersync?dspcsid=135&redirect=1&id=76165f9c-19c5-44f9-a939-d74d6f307d13 IP 65.109.65.188:443 ASN #24940 Hetzner Online GmbH Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subjectssp.bidvol.com Fingerprint40:DB:53:6B:41:DC:4B:32:C0:EE:F6:09:5C:13:AF:5C:EF:90:56:90 ValidityThu, 09 Nov 2023 10:21:37 GMT - Wed, 07 Feb 2024 10:21:36 GMT File type Size 35 B (35 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /usersync?dspcsid=135&redirect=1&id=76165f9c-19c5-44f9-a939-d74d6f307d13 HTTP/1.1 Host: ssp.bidvol.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Cookie: bvuid=3veqvg2yeg Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 302 Found server: nginx/1.22.0 date: Fri, 01 Dec 2023 20:54:58 GMT x-request-id: 7ca978b0-8b0c-4722-ab4f-e0f9a4a78a83 vary: Origin access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-store, no-cache, must-revalidate, proxy-revalidate pragma: no-cache expires: 0 surrogate-control: no-store set-cookie: bvuid=3veqvg2yeg; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None bvuid2=3veqvg2yeg; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT location: https://cs.alfasense.com/p?ssp=bv&uid=3veqvg2yeg X-Firefox-Spdy: h2

	s.myangular.life/player?cat=frame&hit=embed&sub=embed&type=diff&label=other&host=3lordserial.xyz	116.202.233.126	200 OK	0 B
URL GET HTTP/1.1 s.myangular.life/player?cat=frame&hit=embed&sub=embed&type=diff&label=other&host=3lordserial.xyz IP 116.202.233.126:443 ASN #24940 Hetzner Online GmbH Requested by https://api.strvid.ws/embed/movie/455 Certificate IssuerSectigo Limited Subjects.myangular.life Fingerprint3A:21:0F:72:24:43:49:14:06:28:C6:D0:A6:10:6B:D7:B2:EA:5A:66 ValidityTue, 04 Apr 2023 00:00:00 GMT - Sat, 04 May 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /player?cat=frame&hit=embed&sub=embed&type=diff&label=other&host=3lordserial.xyz HTTP/1.1 Host: s.myangular.life User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://api.strvid.ws/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:54 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: keep-alive Access-Control-Allow-Origin: *`

	cdn.alfasense.net/lib/alfadart.lib.min.js	136.144.31.36	200 OK	37 kB
URL GET HTTP/2 cdn.alfasense.net/lib/alfadart.lib.min.js IP 136.144.31.36:443 ASN #52000 Innovation IT Solutions LTD Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.alfasense.net Fingerprint15:61:D7:BD:E9:E1:37:36:5F:FD:47:F7:69:F7:5E:53:CD:95:A9:59 ValidityWed, 22 Nov 2023 16:23:03 GMT - Mon, 23 Dec 2024 16:23:02 GMT File type Size 37 kB (37148 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /lib/alfadart.lib.min.js HTTP/1.1 Host: cdn.alfasense.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:56 GMT content-type: application/javascript last-modified: Thu, 19 Oct 2023 09:38:04 GMT etag: W/"6530f8fc-911c" content-security-policy: frame-ancestors 'none';frame-src 'self'; cross-origin-embedder-policy: unsafe-none cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: cross-origin access-control-allow-origin: * permissions-policy: geolocation=(self), payment=(self) referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block; cache-control: public, max-age=60 content-encoding: gzip set-cookie: route=e7a39e6e3385558e2f6a6a18cac7185b; Path=/ SRVGROUP=common; path=/; Secure; HttpOnly X-Firefox-Spdy: h2

	code.moviead55.ru/madstyle.css	193.200.65.150	200 OK	209 B
URL GET HTTP/2 code.moviead55.ru/madstyle.css IP 193.200.65.150:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.moviead55.ru FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT File type ASCII text, with no line terminators Size 209 B (209 bytes) Hash 5c3b6979f309ba563a9adc7b2283a03d d001e01a5b598cd4ad658e3d2181faca57828ab5 35ebbba68e6e9448d5cd60db423ce0b16456e85a0fdd70a2f4faf5bf98ef81ca HTTP Headers `GET /madstyle.css HTTP/1.1 Host: code.moviead55.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 20:54:52 GMT content-type: text/css; charset=utf-8 cache-control: public, max-age=31536000, s-maxage=31536000, immutable access-control-allow-origin: access-control-expose-headers: * access-control-max-age: 86400 cross-origin-resource-policy: cross-origin vary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method etag: W/"28021-7Ba9Gb9K6bwuIzasQJpQO7varK0" x-movieads-country: NO content-encoding: gzip X-Firefox-Spdy: h2

	t8.zcvh.net/v1/ws	46.4.80.144	101 Switching Protocols	0 B
URL GET HTTP/1.1 t8.zcvh.net/v1/ws IP 46.4.80.144:443 ASN #24940 Hetzner Online GmbH Requested by https://api.strvid.ws/embed/movie/455 Certificate IssuerLet's Encrypt Subject.zcvh.net Fingerprint9F:09:BF:B0:10:B8:43:CC:8F:29:36:BC:BD:D2:2C:71:A7:7E:CA:9A ValidityWed, 27 Sep 2023 04:02:29 GMT - Tue, 26 Dec 2023 04:02:28 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /v1/ws HTTP/1.1 Host: t8.zcvh.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: https://api.strvid.ws Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: G/DHEiNaweyvBHvAV7ngLQ== DNT: 1 Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols Server: nginx Date: Fri, 01 Dec 2023 20:54:54 GMT Connection: upgrade Upgrade: websocket Sec-WebSocket-Accept: aWXqBQCj3HLjCCZrnPacfedp4wE=`

	www.acint.net/mc/?dp=167&tc=1	193.3.184.135	200 OK	5.6 kB
URL GET HTTP/2 www.acint.net/mc/?dp=167&tc=1 IP 193.3.184.135:443 ASN #50214 QWARTA LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject.acint.net FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1 ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5817), with no line terminators Size 5.6 kB (5554 bytes) Hash 257c4fd4a844b29e17e3719e36b6775e d277638e64fe3375c73ba97e824fb4e0a220e1df 43c098f0b2036bf97a0eaef13a395f1f883c665cb0096b7dfdf2cd24e6601e90 HTTP Headers GET /mc/?dp=167&tc=1 HTTP/1.1 Host: www.acint.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://hd.3lordserial.xyz/ DNT: 1 Connection: keep-alive Cookie: test_cookie=CheckForPermission; aid=fwAAAWVqSB0n/jbru+FxAnBO9uArXikJ9bP7KWs+DcG51+8Z Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK server: openresty date: Fri, 01 Dec 2023 20:54:53 GMT content-type: text/html set-cookie: cSyncDp14v6=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp17v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp45v5=1701464093; expires=Sat, 02-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp53v5=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp62v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp67v3=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp68v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp71v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp80v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp85v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp95v4=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp98v3=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp104v2=1701464093; expires=Fri, 15-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp107v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp110v3=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp125v4=1701464093; expires=Sat, 16-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp126v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp127v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp129v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp136v3=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp146v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp148v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp149v3=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp151v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp251v1=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp186v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp217v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp221v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp235v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp239v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp243v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp260v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp244v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp248v2=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net cSyncDp261v1=1701464093; expires=Sun, 31-Dec-23 20:54:53 GMT; path=/; Secure; SameSite=None; domain=.acint.net p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" content-encoding: gzip X-Firefox-Spdy: h2

	yandex.ru/ads/system/header-bidding.js	77.88.55.88	200 OK	114 kB
URL GET HTTP/2 yandex.ru/ads/system/header-bidding.js IP 77.88.55.88:443 ASN #13238 YANDEX LLC Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGlobalSign nv-sa Subject.xn--d1acpjx3f.xn--p1ai Fingerprint32:06:D7:FE:2B:30:18:07:53:C2:E3:A6:3D:59:A6:1F:72:9B:5B:7D ValidityThu, 26 Oct 2023 17:49:59 GMT - Wed, 24 Apr 2024 20:59:59 GMT File type ASCII text, with very long lines (65479) Size 114 kB (113829 bytes) Hash 6eb2010f1e842d03e7167914db48c26e 49fac5904a847b7f9cebc541d72261126289dc97 74410d6230a8d1db7fcd2110150d98bdc738f7a89d7c0efe8020a8815a83a386 HTTP Headers `GET /ads/system/header-bidding.js HTTP/1.1 Host: yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK timing-allow-origin: * nel: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} x-content-type-options: nosniff access-control-allow-origin: * set-cookie: i=Khwmc9cfAH9+B7+n1ALJI1KHS9OuUyx9G4lud7fWKYIPKsmqoQ+clDUldTTWPitm9/mi/3kpSFvlwOCnJ2n5uZMCNqc=; Expires=Sun, 30-Nov-2025 20:54:54 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=2671924391701464094; Expires=Sun, 30-Nov-2025 20:54:54 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None yashr=8480241631701464094; Path=/; Domain=.yandex.ru; Expires=Sat, 30 Nov 2024 20:54:54 GMT; SameSite=None; Secure; HttpOnly expires: Fri, 01 Dec 2023 21:54:54 GMT x-yandex-req-id: 1701464094223023-8418455546567192439-balancer-l7leveler-kubr-yp-sas-77-BAL-6424 accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT report-to: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} cache-control: private, max-age=3600 content-encoding: br content-type: text/javascript; charset=utf-8 x-robots-tag: noindex, noarchive, nofollow X-Firefox-Spdy: h2

	ssp.bidvol.com/usersync?dspcsid=8&redirect=1	65.109.65.188	302 Found	43 B
URL GET HTTP/2 ssp.bidvol.com/usersync?dspcsid=8&redirect=1 IP 65.109.65.188:443 ASN #24940 Hetzner Online GmbH Requested by https://www.acint.net/mc/?dp=167&tc=1 Certificate IssuerLet's Encrypt Subjectssp.bidvol.com Fingerprint40:DB:53:6B:41:DC:4B:32:C0:EE:F6:09:5C:13:AF:5C:EF:90:56:90 ValidityThu, 09 Nov 2023 10:21:37 GMT - Wed, 07 Feb 2024 10:21:36 GMT File type Size 43 B (43 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /usersync?dspcsid=8&redirect=1 HTTP/1.1 Host: ssp.bidvol.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.acint.net/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 302 Found server: nginx/1.22.0 date: Fri, 01 Dec 2023 20:54:59 GMT x-request-id: acb02835-9b4c-44bd-9e52-2e39b1ac89bb vary: Origin access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-store, no-cache, must-revalidate, proxy-revalidate pragma: no-cache expires: 0 surrogate-control: no-store set-cookie: bvuid=o17xs6vbph; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None bvuid2=o17xs6vbph; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT location: https://www.acint.net/match?dp=129&euid=o17xs6vbph X-Firefox-Spdy: h2

	videotoday.site/mp_dist/td/trhls.html?v5646834026	172.67.218.218	200 OK	9.1 kB
URL GET HTTP/3 videotoday.site/mp_dist/td/trhls.html?v5646834026 IP 172.67.218.218:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerGoogle Trust Services LLC Subjectvideotoday.site FingerprintA8:0A:0C:FF:C9:74:01:DA:F2:F4:6F:1A:46:B4:A3:2D:53:73:57:62 ValidityFri, 06 Oct 2023 02:55:12 GMT - Thu, 04 Jan 2024 02:55:11 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9275), with no line terminators Size 9.1 kB (9119 bytes) Hash e21934971bc64f6ad77228cab1e49713 c2eb29bd30c99c05e9fa9ee57d5294324bb71a89 f96d688f61c0d77e2ab27a63cab738fb9e85f7041e5d5a91287e6fa5a4792f9e HTTP Headers GET /mp_dist/td/trhls.html?v5646834026 HTTP/1.1 Host: videotoday.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Fri, 01 Dec 2023 20:54:56 GMT content-type: text/html last-modified: Wed, 29 Nov 2023 19:14:25 GMT vary: Accept-Encoding x-movieads-country: NO access-control-allow-methods: GET, POST, OPTIONS access-control-allow-credentials: true access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range access-control-max-age: 1728000 cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ja7H0uUX4sOIjwzdCBGrRhph00EwoC3i3Im34vm9y57upSm6QRNfkF%2BsCirP8Rk1KjyEuPyX%2Bzn8kPfk7pfQW6xA2FDa%2Buvqn6SwWp3mBCLAEJVNgLLULfJK260TQ7zupVI%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a6b4a1b56ca-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	static.filmskino.site/hls/trailers/arJIA_8cyT0.mp4/seg-3-v1-a1.ts	193.200.65.230	200 OK	334 kB
URL GET HTTP/1.1 static.filmskino.site/hls/trailers/arJIA_8cyT0.mp4/seg-3-v1-a1.ts IP 193.200.65.230:443 ASN #6681 Rozetka Sp. z o.o. Requested by https://videotoday.site/mp_dist/td/trhls.html?v5646834026 Certificate IssuerLet's Encrypt Subjectstatic.filmskino.site Fingerprint6E:8F:8F:89:03:E1:65:6F:AE:73:8A:6F:6B:A2:B1:02:C1:FE:D3:C7 ValidityMon, 02 Oct 2023 16:05:08 GMT - Sun, 31 Dec 2023 16:05:07 GMT File type MPEG transport stream data\012- TeX font metric data (\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377)\012- data Size 334 kB (334264 bytes) Hash 2be0d0efd80daf6e4257c1c420cdffbc e99c8bd48ff01056fe04fa600ad52f894e51c6d1 9305f23a37ed24b85c3dbca47a88c4fad77773946047a2f34134fb0fd490da98 HTTP Headers `GET /hls/trailers/arJIA_8cyT0.mp4/seg-3-v1-a1.ts HTTP/1.1 Host: static.filmskino.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://videotoday.site DNT: 1 Connection: keep-alive Referer: https://videotoday.site/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Dec 2023 20:54:57 GMT Content-Type: video/MP2T Content-Length: 334264 Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT Connection: keep-alive ETag: "3a1794b0-519b8" Expires: Sun, 10 Mar 2024 20:54:57 GMT Cache-Control: max-age=8640000 Access-Control-Allow-Headers: * Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Origin: * Accept-Ranges: bytes`

	hd.3lordserial.xyz/templates/lordfun/images/logo.png	104.21.60.176	200 OK	6.4 kB
URL GET HTTP/3 hd.3lordserial.xyz/templates/lordfun/images/logo.png IP 104.21.60.176:443 ASN #13335 CLOUDFLARENET Requested by https://hd.3lordserial.xyz/146-kasl-sv-13.html Certificate IssuerLet's Encrypt Subject3lordserial.xyz Fingerprint55:F3:EC:F8:C5:A9:65:3A:AD:8F:B2:1A:59:6B:1A:41:7E:A0:65:DF ValidityWed, 29 Nov 2023 21:49:20 GMT - Tue, 27 Feb 2024 21:49:19 GMT File type PNG image data, 180 x 70, 8-bit/color RGB, non-interlaced\012- data Size 6.4 kB (6402 bytes) Hash 98ae1617c9fc8aabc9fee2c4621af925 e735de62235735ff34da9065b5e69fb83286ded5 9639944058fef1f0d34f7a9ccab2ccc55a4f7915860014138d3b9f425ba90587 HTTP Headers GET /templates/lordfun/images/logo.png HTTP/1.1 Host: hd.3lordserial.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://hd.3lordserial.xyz/146-kasl-sv-13.html Cookie: PHPSESSID=c0506767ddef664786c878030c4f8c6b Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Fri, 01 Dec 2023 20:54:52 GMT content-type: image/png last-modified: Tue, 06 Sep 2022 06:42:38 GMT vary: Accept-Encoding etag: W/"6316ebde-1902" cache-control: max-age=31536000 cf-cache-status: HIT age: 4205 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hebEp1MDC9rG%2BonqEJnbBo5PEysJ5jDvCahgI7b0H3APxePwUKfSxSNsc7otX20WtQ%2B46pfjaamAWyd5qe24zAhy1Zg628gBgM6gN2c1RMQOOI3yFjnmIvxAPcR%2FumCKXQpKN3o%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 82ee3a521e6e56a8-OSL alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (77)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash