faq7.ru/downloads/radar_aion.rar
302 Moved Temporarily 0 B URL HTTP/1.1 faq7.ru/downloads/radar_aion.rar
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /downloads/radar_aion.rar HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Tue, 29 Nov 2022 16:52:46 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
X-Powered-By: PHP/5.5.38
Location: http://faq7.ru/error.php?code=404
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a5daf4dc99951793ae2315d4795e8146
4427507ca4d3a5632cc8f598afbc85e2195d00bd
94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7173
Expires: Tue, 29 Nov 2022 18:52:20 GMT
Date: Tue, 29 Nov 2022 16:52:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1117b400ee2ac7fa1b3bdee7d30c844f
b69e56f5cafae748749f8f327eeb365be16d663e
96e44d184e1bcf86381a34daad2d9c51148cd60981eda5549271859d2a5fdddb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96E44D184E1BCF86381A34DAAD2D9C51148CD60981EDA5549271859D2A5FDDDB"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4313
Expires: Tue, 29 Nov 2022 18:04:40 GMT
Date: Tue, 29 Nov 2022 16:52:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6d9d34c96b9a826ae5676640c966469c
8052a16d41a637e420478b7de1ff5a2dc951fccd
f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12779
Expires: Tue, 29 Nov 2022 20:25:46 GMT
Date: Tue, 29 Nov 2022 16:52:47 GMT
Connection: keep-alive
getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
200 OK 43 kB URL HTTP/2 getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash dca2859f717a5b79e2d7d900f6d273f3
0799834987078c41f06d804b452ede5091abc761
b6dde965ba0dc36f0c0b90f16e880867a5fa5fe838f84fc3bc85d137695e6fb1
GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 HTTP/1.1
Host: getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding
content-location: global-recs.php
tcn: choice
x-frame-options: SAMEORIGIN
status: 200 OK
x-source: Pocket
pragma: cache
p3p: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa OUR IND UNI COM NAV INT STA PRE"
x-cache: Miss from cloudfront
x-amz-cf-pop: SEA73-P2
x-amz-cf-id: RYH-o_tUomAYHQdqBgnlMqG1OmLIFdERYVgVdUN8ZQmQieov-pOBvA==
content-encoding: gzip
via: 1.1 020978022b22df6352245f09cfbc410c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 16:37:48 GMT
content-type: application/json
content-length: 43412
age: 899
cache-control: s-maxage=900,public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 284xk8NRtodtx8WGwErRV2OF/YbrAyveUwbseLGB+RrjVG7Bj8931eKBMZMXEnFm0gPZk/9Qu+o=
x-amz-request-id: 6BQCFC9S9CJF3GDV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 29 Nov 2022 16:42:34 GMT
age: 613
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 16:52:47 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
faq7.ru/error.php?code=404
200 OK 14 kB URL HTTP/1.1 faq7.ru/error.php?code=404
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Non-ISO extended-ASCII text, with very long lines (18362), with CRLF, LF line terminators
Hash e1d13ae8c1a93dc01444c1ab65d6d859
ae5c1215c74925d5a79dc9926e19df03505637f8
8b58c60fb18f784002829ce43b075ee1b9ac9bad787acfe26e4128d9513ffc3f
GET /error.php?code=404 HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.5.38
Set-Cookie: fusionQC28M_visited=yes; expires=Wed, 29-Nov-2023 16:52:47 GMT; Max-Age=31536000; path=/
fusionQC28M_lastvisit=1669737167; expires=Tue, 29-Nov-2022 17:52:47 GMT; Max-Age=3600; path=/; domain=faq7.ru; httponly
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 471 B IP
Hash 4ed065cb23b5fca1a179dd73b3c5b7b2
4422eb24688f5e056fc1b18b127c7f63b1dbf5e0
b723d770d0dec7441d8505dc5a4e7d34f55c9f564ec52f20d9b70c7c3a0d9d35
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3903
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 16:52:47 GMT
Last-Modified: Tue, 29 Nov 2022 15:47:44 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 29 Nov 2022 16:17:55 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2092
alt-svc: clear
X-Firefox-Spdy: h2
faq7.ru/themes/faq7_new/styles.css
200 OK 4.0 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/styles.css
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type assembler source, ISO-8859 text
Hash 29f9a5f94b994d1ed6560a2942f5f68d
0a65d089f66cb06cc18304594cf348ebe97900aa
e500c712570fe5f49405451d11aa8844425255596b95ceb161f12baa2f6ba6c8
GET /themes/faq7_new/styles.css HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 10 Feb 2012 21:21:42 GMT
Content-Encoding: gzip
faq7.ru/includes/sc/tabs.css
200 OK 489 B URL HTTP/1.1 faq7.ru/includes/sc/tabs.css
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash 94b04a9748ba103b1a638a419d2f3e12
1b41edda82191330b0bc2fc3f22b552b02c162ee
21c18592cab013c5a578d3c4930e3d2efd763fce0db24dfa0d34322c89ae45a5
GET /includes/sc/tabs.css HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 10 May 2018 23:13:07 GMT
Content-Encoding: gzip
faq7.ru/themes/templates/scrollto.css
200 OK 197 B URL HTTP/1.1 faq7.ru/themes/templates/scrollto.css
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash de790ab65c683e4288b5cb608e7538ad
59bfffdd15d94dac2f0787a5820f15fe5289610e
3bb0e839ac9aa0f8a8110b019715f03fae8ef3866ca9b7ac8481ed0503ac661f
GET /themes/templates/scrollto.css HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 24 Sep 2013 13:55:32 GMT
Content-Encoding: gzip
faq7.ru/infusions/wnavi_panel/tools.js
200 OK 742 B URL HTTP/1.1 faq7.ru/infusions/wnavi_panel/tools.js
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type ASCII text, with very long lines (734)
Hash 0be610858474bc880768546a4c5f5a62
f71db2e0cc15d70866e9cdd6842a328e5343f1c7
ac2034ec0c46e0a1558ac542efddbad8ad2deb136c91dd7d4dc6f6bf82e766bb
GET /infusions/wnavi_panel/tools.js HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 25 Feb 2012 21:40:59 GMT
Content-Encoding: gzip
faq7.ru/includes/sc/tabs.js
200 OK 194 B URL HTTP/1.1 faq7.ru/includes/sc/tabs.js
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash 6e90085f150f59cb03edd6ec670fa7da
bb2963ce68d3085312596c54696f9f40dae47fa5
91e0b6352b4d9d8a2a553614385173ab1c7dabc079e3c51f7be80a4c5263afe5
GET /includes/sc/tabs.js HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 13 Apr 2012 19:51:42 GMT
Content-Encoding: gzip
faq7.ru/includes/jscript.js
200 OK 2.1 kB URL HTTP/1.1 faq7.ru/includes/jscript.js
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type ISO-8859 text, with very long lines (3332)
Hash c6e760336b8ab3156952a91167e54f77
763f8887fe0c9bb0c66cb519d1aca4d73620498a
9d3eeafa976fc7a375ea2a47558d5a799a9eca12fdc4f79b36b8d6d10c1387a7
GET /includes/jscript.js HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 25 Feb 2012 20:46:11 GMT
Content-Encoding: gzip
faq7.ru/infusions/shoutbox_panel/ash.css
200 OK 510 B URL HTTP/1.1 faq7.ru/infusions/shoutbox_panel/ash.css
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash 75ca413eb284a7e9875b93e76820a752
4e335a8e427bcfa76c13f930a03f202114a293c9
5ef2da20fca7f2fcc0bcb55c3ae9a9712c74336977f91a4674c798504ffaa4f5
GET /infusions/shoutbox_panel/ash.css HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 18:39:40 GMT
Content-Encoding: gzip
faq7.ru/themes/templates/scrollto.js
200 OK 402 B URL HTTP/1.1 faq7.ru/themes/templates/scrollto.js
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash eb3f8a1e0ff48e1d6ac3b6008f6ee905
8a27aaa5271ac5d09bcc4150ddd148bc0eb515ea
86266cec3ff3c340cdd470160199b9d9ab20517fda4d8f306f373d4db5c65d04
GET /themes/templates/scrollto.js HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 24 Sep 2013 13:55:30 GMT
Content-Encoding: gzip
faq7.ru/includes/jquery/jquery.js
200 OK 34 kB URL HTTP/1.1 faq7.ru/includes/jquery/jquery.js
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash 94966b2cdea759e7fdaf47fcb1e787e8
2352ba4d8d0923451def34d56c04391332e1a3ed
fed5742bef8c2a419e554407fc3af8fad8e5a9a10b6ea38da6254fee4ca6e5d7
GET /includes/jquery/jquery.js HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 13 May 2012 22:02:13 GMT
Content-Encoding: gzip
faq7.ru/infusions/shoutbox_panel/ash.js
200 OK 1.0 kB URL HTTP/1.1 faq7.ru/infusions/shoutbox_panel/ash.js
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash ae01fb6204f511588e8a46e72a75b80f
9955c073c7435f55fac0744b64a32da5f80228c7
cef09f718a9852e0781abde108be3b512d9cb4d2d1e22283460b49578dc0b0a3
GET /infusions/shoutbox_panel/ash.js HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 25 Feb 2012 21:36:15 GMT
Content-Encoding: gzip
userapi.com/js/api/openapi.js?49
301 Moved Permanently 164 B URL HTTP/1.1 userapi.com/js/api/openapi.js?49
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 6d359f551ba4cb27d59e94a6cddaec09
d230318bd921ad8167c2eb9dfdc7b1d7d2c7373f
9ecd8531025e89f5e1ca23d81203a9feddbd5b4b75ca79c9868cb53762293bc8
GET /js/api/openapi.js?49 HTTP/1.1
Host: userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 301 Moved Permanently
Server: kittenx
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: text/html
Content-Length: 164
Connection: keep-alive
Location: https://vk.com/js/api/openapi.js?49
X-Frontend: front508124
Access-Control-Expose-Headers: X-Frontend
Strict-Transport-Security: max-age=15768000
userapi.com/js/api/openapi.js?34
301 Moved Permanently 164 B URL HTTP/1.1 userapi.com/js/api/openapi.js?34
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 6d359f551ba4cb27d59e94a6cddaec09
d230318bd921ad8167c2eb9dfdc7b1d7d2c7373f
9ecd8531025e89f5e1ca23d81203a9feddbd5b4b75ca79c9868cb53762293bc8
GET /js/api/openapi.js?34 HTTP/1.1
Host: userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 301 Moved Permanently
Server: kittenx
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: text/html
Content-Length: 164
Connection: keep-alive
Location: https://vk.com/js/api/openapi.js?34
X-Frontend: front508124
Access-Control-Expose-Headers: X-Frontend
Strict-Transport-Security: max-age=15768000
api-maps.yandex.ru/1.1/index.xml
302 Moved temporarily 0 B URL HTTP/1.1 api-maps.yandex.ru/1.1/index.xml
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1.1/index.xml HTTP/1.1
Host: api-maps.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302 Moved temporarily
Content-Length: 0
Location: https://api-maps.yandex.ru/1.1/index.xml
Set-Cookie: _yasc=nji14wFeZMp31wz4ofMTXnjV+895loP+dGENIZ1q7yIAeon5dDIefKrUbj4=; domain=.yandex.ru; path=/; expires=Fri, 26-Nov-2032 16:52:47 GMT; secure
mc.yandex.ru/metrika/watch.js
302 Moved temporarily 0 B URL HTTP/1.1 mc.yandex.ru/metrika/watch.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302 Moved temporarily
Content-Length: 0
Location: https://mc.yandex.ru/metrika/watch.js
i.ytimg.com/vi/AdUw5RdyZxI/default.jpg
200 OK 4.6 kB URL HTTP/1.1 i.ytimg.com/vi/AdUw5RdyZxI/default.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash 7bc11e5444662f27f29c11f9f5fd7e87
3ec0d11235dcd3e02f700e146f446e20680ea66e
a275339f23ed9fa54b4b8ee543a665fbadf021948cee47fa683dae8b722a780b
GET /vi/AdUw5RdyZxI/default.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
Timing-Allow-Origin: *
Content-Length: 4632
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 29 Nov 2022 15:56:59 GMT
Expires: Tue, 29 Nov 2022 17:56:59 GMT
Cache-Control: public, max-age=7200
Age: 3348
ETag: "1620055147"
Content-Type: image/jpeg
i.ytimg.com/vi/ph1vpnYIxJk/default.jpg
200 OK 4.7 kB URL HTTP/1.1 i.ytimg.com/vi/ph1vpnYIxJk/default.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash 964f8376431fa49f7ab7e91aa8bd28e7
fda13bab465e9bd88ed486b2016aa54e6c6c36bb
47374a4eb6736ed92b9118ad2e7e2d92f0ef8492ad70b68f77d07f31d5387076
GET /vi/ph1vpnYIxJk/default.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
Timing-Allow-Origin: *
Content-Length: 4724
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 29 Nov 2022 15:56:59 GMT
Expires: Tue, 29 Nov 2022 17:56:59 GMT
Cache-Control: public, max-age=7200
Age: 3348
ETag: "1663773246"
Content-Type: image/jpeg
i.ytimg.com/vi/8KGXSjtS5pk/default.jpg
200 OK 4.7 kB URL HTTP/1.1 i.ytimg.com/vi/8KGXSjtS5pk/default.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash b5101b3f4a35e0ce036f55bfd1c77fc3
c769b52027adac7c510ec16be9962e44d50c5a72
cf8a86bf9eac880ff94fbe63c9fd5de5d4c68fe31b070d13ba4a3cfd00af8967
GET /vi/8KGXSjtS5pk/default.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
Timing-Allow-Origin: *
Content-Length: 4723
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 29 Nov 2022 15:56:59 GMT
Expires: Tue, 29 Nov 2022 17:56:59 GMT
Cache-Control: public, max-age=7200
Age: 3348
ETag: "1663864940"
Content-Type: image/jpeg
s7.addthis.com/js/300/addthis_widget.js
308 Permanent Redirect 171 B URL HTTP/1.1 s7.addthis.com/js/300/addthis_widget.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3c417e9efbcaeb3bf7e7df75cf3b22fd
00465aec6b8ec302eae8abb99678fc5c09c3f343
21bd143d38dbbae427615a7266a86a18dc95c417f3e510632d7a9180d98d3571
GET /js/300/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 308 Permanent Redirect
Server: nginx/1.15.8
Content-Type: text/html
Content-Length: 171
Location: https://s7.addthis.com/js/300/addthis_widget.js
Date: Tue, 29 Nov 2022 16:52:47 GMT
Connection: keep-alive
X-Distribution: 99
X-Host: s7.addthis.com
faq7.ru/images/photoalbum/album_5/nature110_t1.jpg
200 OK 12 kB URL HTTP/1.1 faq7.ru/images/photoalbum/album_5/nature110_t1.jpg
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 130x73, components 3\012- data
Hash 4e12bc500b8e52c996c63aacd89be6ff
4d55e89e6df86cdc2f43314d4af37a303ff744a8
e1b75285d86337ab7a7f16318e25dfab2255b02fc0512db6b276339dd22b2197
GET /images/photoalbum/album_5/nature110_t1.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: image/jpeg
Content-Length: 11582
Connection: keep-alive
Last-Modified: Wed, 15 Feb 2012 19:21:16 GMT
Accept-Ranges: bytes
faq7.ru/infusions/uip_panel/images/ico_users.png
200 OK 444 B URL HTTP/1.1 faq7.ru/infusions/uip_panel/images/ico_users.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash fe23e852cf1626a5eefea593b4f14375
dc4509331e8f2712a323ec252c36b1761431d888
9e3df70006b23420dd9e4314cb84bf0f1585dbfebfc170ef4ec0924f658074b0
GET /infusions/uip_panel/images/ico_users.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: image/png
Content-Length: 444
Connection: keep-alive
Last-Modified: Sat, 07 May 2011 19:05:42 GMT
Accept-Ranges: bytes
faq7.ru/images/advtab/video.png
200 OK 6.9 kB URL HTTP/1.1 faq7.ru/images/advtab/video.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash e2a040ca9524eb99c8eb08e0fab53672
3e689ba3ac72c9b6137d1a2612d13c9435b64ea6
0476c1fcbecc6ce3e80c83b8a988c40f343016aa5f24d8a735e7128a8ff501e6
GET /images/advtab/video.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: image/png
Content-Length: 6915
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2011 00:31:08 GMT
Accept-Ranges: bytes
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/total.png
200 OK 1.6 kB URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/total.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 618a00e119dd1c7840bfb09a0e3c89e5
4b4ff1c15195db9b51b599ab7a539fec11ab8b30
8bb619e24f7f880c286536a7ab338b13a745494f47ff2e29b08893519d69bbe3
GET /infusions/hayaletsevgili_online_users_panel/images/total.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: image/png
Content-Length: 1627
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/noav2.png
200 OK 5.3 kB URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/noav2.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash ffa23bb64b400147fc7af73d7e243135
e28b289d2fb4c5760fdc3d971e1811da407508a0
ac3b04ebdeeffd7a4b7f2a6d8668e2ffbe5b862ec432bf3dd27bb5fc919c1548
GET /infusions/hayaletsevgili_online_users_panel/images/noav2.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: image/png
Content-Length: 5270
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
faq7.ru/themes/templates/scrolltotop.png
200 OK 1.8 kB URL HTTP/1.1 faq7.ru/themes/templates/scrolltotop.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 56 x 30, 8-bit/color RGB, interlaced\012- data
Hash b1c26b831b25fd49cc834fb22cd7c851
380070d45e51d3a1e55999eafe2d16abf9640306
0ba5411b9a88b717e6d756040926e6c3a112a548c5257d3869dee784f66d200b
GET /themes/templates/scrolltotop.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: image/png
Content-Length: 1834
Connection: keep-alive
Last-Modified: Tue, 24 Sep 2013 13:55:40 GMT
Accept-Ranges: bytes
faq7.ru/infusions/wnavi_panel/img/accept.png
200 OK 781 B URL HTTP/1.1 faq7.ru/infusions/wnavi_panel/img/accept.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 8bfed48756f192ed7afe6eaa4799aae4
8872adf860a379cf6eab4faf35a67301b38325c6
0a733b99fcd03c5e6359d0973a169bbfaf94485227437480d9c703bbe58e4b4c
GET /infusions/wnavi_panel/img/accept.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: image/png
Content-Length: 781
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 21:19:49 GMT
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 29622cbf83b71a5f01eef63036832cd6
b239103285a5a3ad7558a42dd0de7306ac098e33
ab736f69340545d31c27fe94187c8a7a526158a2361bc03242995eaa394a25f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AB736F69340545D31C27FE94187C8A7A526158A2361BC03242995EAA394A25F1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4841
Expires: Tue, 29 Nov 2022 18:13:28 GMT
Date: Tue, 29 Nov 2022 16:52:47 GMT
Connection: keep-alive
s7.addthis.com/js/300/addthis_widget.js
200 OK 116 kB URL HTTP/2 s7.addthis.com/js/300/addthis_widget.js
IP
File type ASCII text, with very long lines (54602)
Size 116 kB (116325 bytes)
Hash ff4671f71c958029bbf6d9694284da70
7535744f2dbaf99902a54fc529e760b08a73f265
123f781673b2e45e18df36b64984674f489a5f3541c69e295f01f554b8d3c738
GET /js/300/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-5834c"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 116325
date: Tue, 29 Nov 2022 16:52:47 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 36cb6b74955acaa0b36cff930f12d087
2606aaf3a0e12dc5ba2473476e58e92385f2b9de
bbc59393cdf9ba34188ae00894f2a460f49af3b2b98674b90ae0afd3beafb180
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=141246
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 16:52:47 GMT
Etag: "6385bd9d-116"
Expires: Thu, 01 Dec 2022 08:06:53 GMT
Last-Modified: Tue, 29 Nov 2022 08:06:53 GMT
Server: nginx
Content-Length: 278
ulogin.ru/js/widget.js?display=window&fields=email&optional=first_name,last_name,nickname&redirect_uri=http://faq7.ru/ulogin.php
200 OK 17 kB URL HTTP/1.1 ulogin.ru/js/widget.js?display=window&fields=email&optional=first_name,last_name,nickname&redirect_uri=http://faq7.ru/ulogin.php
IP
ASN #12695 LLC Digital Network
File type ASCII text, with very long lines (580)
Hash d0aeb0ca1401db63e0f72da3f101ec9b
4cd78f340a48961518cc99a59c1f7b6c912feb07
8c270aae9c9f946930715147fed929a53cb56cf01a30aad6f78663f49d02fa94
GET /js/widget.js?display=window&fields=email&optional=first_name,last_name,nickname&redirect_uri=http://faq7.ru/ulogin.php HTTP/1.1
Host: ulogin.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:52 GMT
Content-Type: application/x-javascript
Content-Length: 17398
Last-Modified: Tue, 10 Aug 2021 18:41:38 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "6112c862-43f6"
Content-Encoding: gzip
Expires: Fri, 02 Dec 2022 16:52:52 GMT
Cache-Control: max-age=259200
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash 2abcbf1ed2f8590927d45b55fd287b94
008c481263c85658c688e310819a9f30b1d2003f
ad29062ef2f1c9723e21c111e33cec16ce3b4fac2b4acbd6b2ddd8799f87a743
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 03 Dec 2022 14:15:20 GMT
ETag: "008c481263c85658c688e310819a9f30b1d2003f"
Last-Modified: Tue, 29 Nov 2022 14:15:21 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 868
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771cdb168b5db4f7-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b70adf021425d7e992c7cd64481c8e31
cb773403e99992c587353a18b06b4fdf3437d316
5e368e20981d070814b693ec0fdf1ed743a4b7219d53c4059e35411bf0392c0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E368E20981D070814B693EC0FDF1ED743A4B7219D53C4059E35411BF0392C0D"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8830
Expires: Tue, 29 Nov 2022 19:19:57 GMT
Date: Tue, 29 Nov 2022 16:52:47 GMT
Connection: keep-alive
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash 2abcbf1ed2f8590927d45b55fd287b94
008c481263c85658c688e310819a9f30b1d2003f
ad29062ef2f1c9723e21c111e33cec16ce3b4fac2b4acbd6b2ddd8799f87a743
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 03 Dec 2022 14:15:20 GMT
ETag: "008c481263c85658c688e310819a9f30b1d2003f"
Last-Modified: Tue, 29 Nov 2022 14:15:21 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 868
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771cdb16ab7fb4f7-OSL
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 168f0b833f0ee18db44944b2484f3a38
1cf492d09afc4d3d534230029a5bc367493de262
6f89d5cc136c5d1a7e0b992ce8dbf0c70d844762cd15c8369cb039d9fddc27e9
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 03 Dec 2022 12:49:06 GMT
ETag: "1cf492d09afc4d3d534230029a5bc367493de262"
Last-Modified: Tue, 29 Nov 2022 12:49:07 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2288
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771cdb16b8afb4f4-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash ca27fc67794db301648b1fe3c0b785a6
ff5fab3d522ffe7d23be2e27f865533aaf8e2103
14fb227d7ebbac5da461b065bcb39aa9e524e2cf529f4453679299a644149261
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sat, 03 Dec 2022 15:07:02 GMT
ETag: "ff5fab3d522ffe7d23be2e27f865533aaf8e2103"
Last-Modified: Tue, 29 Nov 2022 15:07:03 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2777
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771cdb16bf1cb518-OSL
promo.partner.alawar.ru/images/0c8/120x240.jpg?pid=21363
200 OK 26 kB URL HTTP/1.1 promo.partner.alawar.ru/images/0c8/120x240.jpg?pid=21363
IP
ASN #47723 Softline Trade JSC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 120x240, components 3\012- data
Hash c665bcbbb13966ee2c549fcc8e7b0bcf
367fce8555178a88697a077961c9c8504dea8bf8
e232735258913712e221075e2841476f35e0961eb7e9b149f5e9a07e21c68f66
GET /images/0c8/120x240.jpg?pid=21363 HTTP/1.1
Host: promo.partner.alawar.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:47 GMT
Content-Type: image/jpeg
Content-Length: 25532
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2010 07:32:36 GMT
Accept-Ranges: bytes
vk.com/js/api/openapi.js?49
200 OK 23 kB URL HTTP/2 vk.com/js/api/openapi.js?49
IP
File type ASCII text, with very long lines (3849)
Hash b33ff213862515e45744517b207d77db
7d69b309a9c1d918d8dc7b42c510d08321207b9c
a5cd610dc23e643864c8827d58736c15b955328124bfd95661c88a7b96eaed47
GET /js/api/openapi.js?49 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Tue, 29 Nov 2022 16:52:47 GMT
content-type: application/x-javascript
content-length: 23322
last-modified: Wed, 10 Aug 2022 14:44:17 GMT
etag: "62f3c441-5b1a"
content-encoding: br
expires: Sat, 03 Dec 2022 16:52:47 GMT
cache-control: max-age=345600
x-frontend: front512004
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/watch.js
200 OK 58 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (586)
Hash 89185e037b366ee6c6b5d55bd893c11d
6a0e2cd6189b890da76b827beaeeca41097e8cf1
2b46f64d745301de1b0f94206157e0373db1e5db20e7725794fb34adaab08423
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 57741
date: Tue, 29 Nov 2022 16:52:47 GMT
access-control-allow-origin: *
etag: "6384bff1-e18d"
expires: Tue, 29 Nov 2022 17:52:47 GMT
last-modified: Mon, 28 Nov 2022 17:04:33 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
vk.com/js/api/openapi.js?34
200 OK 23 kB URL HTTP/2 vk.com/js/api/openapi.js?34
IP
File type ASCII text, with very long lines (3849)
Hash b33ff213862515e45744517b207d77db
7d69b309a9c1d918d8dc7b42c510d08321207b9c
a5cd610dc23e643864c8827d58736c15b955328124bfd95661c88a7b96eaed47
GET /js/api/openapi.js?34 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Tue, 29 Nov 2022 16:52:47 GMT
content-type: application/x-javascript
content-length: 23322
last-modified: Wed, 10 Aug 2022 14:44:17 GMT
etag: "62f3c441-5b1a"
content-encoding: br
expires: Sat, 03 Dec 2022 16:52:47 GMT
cache-control: max-age=345600
x-frontend: front512004
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 29 Nov 2022 16:08:56 GMT
cache-control: public,max-age=3600
age: 2631
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 36cb6b74955acaa0b36cff930f12d087
2606aaf3a0e12dc5ba2473476e58e92385f2b9de
bbc59393cdf9ba34188ae00894f2a460f49af3b2b98674b90ae0afd3beafb180
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: max-age=141246
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 16:52:48 GMT
Etag: "6385bd9d-116"
Expires: Thu, 01 Dec 2022 08:06:54 GMT
Last-Modified: Tue, 29 Nov 2022 08:06:53 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 471 B IP
Hash 3c8c689bd654417640d85f3da51af313
85123b6d46230a23d03768bf304b386e5d301305
516138ca79703b45e904d32d7dde1c1e9fd35995b9f1bb1331c547542745676d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2726
Cache-Control: max-age=147566
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 16:52:48 GMT
Etag: "6385cba8-1d7"
Expires: Thu, 01 Dec 2022 09:52:14 GMT
Last-Modified: Tue, 29 Nov 2022 09:06:48 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash b19911a4d63f351896bf143655174c3c
852e9036e356c2b37765aa63629be57c1e75f88b
18d393d00191580e288a1d177d30ae78ea2dcc487fd400d21a9ff8da13e3b0f3
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "18D393D00191580E288A1D177D30AE78EA2DCC487FD400D21A9FF8DA13E3B0F3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 29 Nov 2022 22:52:48 GMT
Date: Tue, 29 Nov 2022 16:52:48 GMT
Connection: keep-alive
1ps.ru/identic/120x60_courses_23.jpg
200 OK 3.5 kB URL HTTP/2 1ps.ru/identic/120x60_courses_23.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 120x60, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 053df15eb0b9738de351c59d8afaf5c0
6ea32b36fd8ae8fcdf3991d0536e21574b8d50a1
2167db28ef377bc44c4c78b79757092ef7f5d3602b47be45b8f3bbcc6a7ccdc1
GET /identic/120x60_courses_23.jpg HTTP/1.1
Host: 1ps.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 16:52:48 GMT
content-type: image/webp
content-length: 3530
cf-ray: 771cdb1968c7b4f3-OSL
accept-ranges: bytes
cache-control: max-age=31536000
content-disposition: inline; filename="120x60_courses_23.webp"
etag: "2519-52e4e6f593f80"
expires: Sat, 11 Nov 2023 22:27:37 GMT
last-modified: Fri, 18 Mar 2016 08:21:34 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=jpeg, origSize=9497
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T3J3Xc3hnbGt8uKjErY3vnQr0GmANapgIv%2BggyH%2FLqe8CBBRmsXixDmPmPEP0AGStybAfxp4um1Ojiij39wqGjPkE2Yo7UeRtePcgHFZLN%2Fe2%2FsW2mP8Ew%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/watch.js
302 Moved temporarily 0 B URL HTTP/1.1 mc.yandex.ru/metrika/watch.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302 Moved temporarily
Content-Length: 0
Location: https://mc.yandex.ru/metrika/watch.js
media.reformal.ru/widgets/v3/reformal.js
200 OK 4.8 kB URL HTTP/1.1 media.reformal.ru/widgets/v3/reformal.js
IP
File type ASCII text, with very long lines (15116)
Hash 206c92e8c010e2f54dc2e76adf56bddc
cc612ba858973a9c384107e4df6453c9ed9ebf10
154e0789792326a4a35496859afd407e299d30d62b86709c6d4387c8f51296b9
GET /widgets/v3/reformal.js HTTP/1.1
Host: media.reformal.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: application/x-javascript; charset=utf-8
Last-Modified: Wed, 27 Apr 2016 09:51:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"57208bb3-3b0d"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Yn047QVJgwijZFftrsrgkA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: edgNmHuO9c5f9k/+FOztJwQRa84=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 86f0f90d074e70e78cf03822d25ebc1a
6ed24264e6af10ab1137224048905d1d3321203f
5b00c75b995168ebcc4bff38c0cce49810fe640dda4e62e5016ef716016a62a7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5B00C75B995168EBCC4BFF38C0CCE49810FE640DDA4E62E5016EF716016A62A7"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9715
Expires: Tue, 29 Nov 2022 19:34:43 GMT
Date: Tue, 29 Nov 2022 16:52:48 GMT
Connection: keep-alive
reformal.ru/human_check/189983|aHR0cDovL2ZhcTcucnUvZXJyb3IucGhwP2NvZGU9NDA0||26180
200 OK 43 B URL HTTP/1.1 reformal.ru/human_check/189983|aHR0cDovL2ZhcTcucnUvZXJyb3IucGhwP2NvZGU9NDA0||26180
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /human_check/189983|aHR0cDovL2ZhcTcucnUvZXJyb3IucGhwP2NvZGU9NDA0||26180 HTTP/1.1
Host: reformal.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Fri, 20 Dec 2013 07:24:29 GMT
Connection: keep-alive
ETag: "52b3f0ad-2b"
Accept-Ranges: bytes
log.reformal.ru/st.php?w=3&pid=189983
200 OK 43 B URL HTTP/1.1 log.reformal.ru/st.php?w=3&pid=189983
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 45cf913e5d9d3c9b2058033056d3dd23
30cb5d44e276505b1d4c053c8b25525da228db30
42b976597a2d977d0e300f6d06bc903db389e5c112d33c1c8c249690a522d9f2
GET /st.php?w=3&pid=189983 HTTP/1.1
Host: log.reformal.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a99fa667e89b6a93c38a05d46906620d
7ee4b214440f48a96342ad996fdedc79e756ac08
b387f28cf2d9ba089a3d009dd533020fa56b5cb72c83658d2ecd528c7407b33b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B387F28CF2D9BA089A3D009DD533020FA56B5CB72C83658D2ECD528C7407B33B"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9823
Expires: Tue, 29 Nov 2022 19:36:31 GMT
Date: Tue, 29 Nov 2022 16:52:48 GMT
Connection: keep-alive
tab.reformal.ru/T9GC0LfRi9Cy0Ysg0Lgg0L%252FRgNC10LTQu9C%252B0LbQtdC90LjRjw==/FFFFFF/2a94cfe6511106e7a48d0af3904e3090/left/1/tab.png
200 OK 6.3 kB URL HTTP/1.1 tab.reformal.ru/T9GC0LfRi9Cy0Ysg0Lgg0L%252FRgNC10LTQu9C%252B0LbQtdC90LjRjw==/FFFFFF/2a94cfe6511106e7a48d0af3904e3090/left/1/tab.png
IP
File type PNG image data, 21 x 217, 16-bit/color RGBA, non-interlaced\012- data
Hash d04157421f816095076e9907e0284d90
075d70eb0180148c0562fcdb109e82190eea2683
7cf04ed5fa482c73c10c6bca22d9ff45cc4c57311abedfe6f433a10d1ec5190f
GET /T9GC0LfRi9Cy0Ysg0Lgg0L%252FRgNC10LTQu9C%252B0LbQtdC90LjRjw==/FFFFFF/2a94cfe6511106e7a48d0af3904e3090/left/1/tab.png HTTP/1.1
Host: tab.reformal.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 6291
Connection: keep-alive
Last-Modified: Wed, 23 Nov 2022 14:35:11 GMT
Expires: Fri, 09 Dec 2022 16:52:48 GMT
Cache-Control: max-age=864000
ulogin.ru/img/en/button.png?version=img.3.0.2
200 OK 3.0 kB URL HTTP/1.1 ulogin.ru/img/en/button.png?version=img.3.0.2
IP
ASN #12695 LLC Digital Network
File type PNG image data, 187 x 30, 8-bit/color RGB, non-interlaced\012- data
Hash d59bad09e8798ebbfc728d9020967fdf
5253cc150342c15f213c845489f2191dbdae90a6
a547fbd1408375a90edf09edc5e96602a6dbdb9fd2806fb4984aa3f3da002e14
GET /img/en/button.png?version=img.3.0.2 HTTP/1.1
Host: ulogin.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:53 GMT
Content-Type: image/png
Content-Length: 3016
Last-Modified: Wed, 09 Jul 2014 13:07:17 GMT
Connection: keep-alive
ETag: "53bd3e85-bc8"
Expires: Fri, 02 Dec 2022 16:52:53 GMT
Cache-Control: max-age=259200, public
Accept-Ranges: bytes
s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
200 OK 26 kB URL HTTP/2 s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Hash 707317ccaabe08d32d1bd781754e6871
bb82dcd3e044c960e0861c2ce878f5504e628f78
d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051
GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Tue, 29 Nov 2022 16:52:48 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
www.acint.net/aci.js
200 OK 7.5 kB IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1408)
Hash ae0aab6c5a2ae2e1168e74f6e6ae4741
2c00f69ee4bbe2ec96c0f7bb33b5f827a6195af8
a47a88a9b6c7635e5074c25c6e3c92f399fdf8772376e94f077167241e59f9de
GET /aci.js HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Tue, 29 Nov 2022 16:52:48 GMT
content-type: application/x-javascript
content-length: 7461
last-modified: Mon, 29 Nov 2021 13:23:00 GMT
etag: "61a4d434-1d25"
content-encoding: gzip
expires: Wed, 30 Nov 2022 04:52:48 GMT
cache-control: max-age=43200
X-Firefox-Spdy: h2
media.reformal.ru/widgets/v3/gl.png
200 OK 121 B URL HTTP/1.1 media.reformal.ru/widgets/v3/gl.png
IP
File type PNG image data, 6 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 41d0923d21a3d3cee146c41ece00fe7c
524da78bb3babe8f136edfe669dd48e1e7b7f004
aa1740b3e050627a689cba17a89712fa5d3cd4e814f2347c64e7f2d2b1a1c281
GET /widgets/v3/gl.png HTTP/1.1
Host: media.reformal.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 121
Last-Modified: Wed, 27 Apr 2016 09:51:47 GMT
Connection: keep-alive
ETag: "57208bb3-79"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A116219%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1124%7D&sid=638638df-8dd2-f0y3-hho9-s1dkeyczbfjk&ref=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=1669740768
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A116219%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1124%7D&sid=638638df-8dd2-f0y3-hho9-s1dkeyczbfjk&ref=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=1669740768
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A116219%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1124%7D&sid=638638df-8dd2-f0y3-hho9-s1dkeyczbfjk&ref=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=1669740768 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 29 Nov 2022 16:52:48 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=sAkJCmOGOOB5BwHiQURjAv/xbPoBFTPZeVgo1eUHS+vUk0qN; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
faq7.ru/images/etxt_3.gif
200 OK 2.6 kB URL HTTP/1.1 faq7.ru/images/etxt_3.gif
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type GIF image data, version 89a, 180 x 60\012- data
Hash b6106b860137c508605a0b357504b3dd
ccf308d2ca24fdd0963c912c3c148534e42c90e2
671847e34c95fd887646a115f0ff84c06b7feb7b98d13b77a88ec08e9f55ff14
GET /images/etxt_3.gif HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/gif
Content-Length: 2565
Connection: keep-alive
Last-Modified: Sun, 27 Mar 2022 16:38:59 GMT
Accept-Ranges: bytes
faq7.ru/images/advtab/mobile.png
200 OK 7.7 kB URL HTTP/1.1 faq7.ru/images/advtab/mobile.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 9b339533cbb2b3de222ee613d3657ef8
077527c4570412274126ca8d6073d91e20f4371d
2ed485e4b5e540e22ad2148454255fd09c0bf7da774747101b52d6621db1700a
GET /images/advtab/mobile.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 7701
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2011 00:31:08 GMT
Accept-Ranges: bytes
faq7.ru/images/board/8966bb430467266d42a1af77de4f804c.jpg
200 OK 1.8 kB URL HTTP/1.1 faq7.ru/images/board/8966bb430467266d42a1af77de4f804c.jpg
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 40x50, components 3\012- data
Hash 9f4cfbd781d04cb4213ad4a59260c821
f8d19d2ea3385e10f7c9532a830aff52686d1c40
e816645547c91a9ff7af1f2ea44cb8833e3bfc8c0cbfe1dd04cbe4cbfdbafaad
GET /images/board/8966bb430467266d42a1af77de4f804c.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/jpeg
Content-Length: 1795
Connection: keep-alive
Last-Modified: Mon, 28 Nov 2022 11:52:19 GMT
Accept-Ranges: bytes
faq7.ru/infusions/uip_panel/images/ico_keys.png
200 OK 744 B URL HTTP/1.1 faq7.ru/infusions/uip_panel/images/ico_keys.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 93c3eb002f4070b939e29d0a31a90faa
535d2f6d1eec09ca83a7cae2136c9d1326e6daab
45bebc89c3d3b8cde90edafe534b38bbbe75b6494bc8e9dabba704612c5eb603
GET /infusions/uip_panel/images/ico_keys.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 744
Connection: keep-alive
Last-Modified: Sat, 07 May 2011 19:05:42 GMT
Accept-Ranges: bytes
faq7.ru/images/board/b8ab6d17818448aac7a8844b85f0e423.jpg
200 OK 2.9 kB URL HTTP/1.1 faq7.ru/images/board/b8ab6d17818448aac7a8844b85f0e423.jpg
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 40x50, components 3\012- data
Hash 7e953000eab9f0ad31f348c65ffcb844
f0f52ee7335f756d1d379c978e6ce74ad0bc1311
b9e0edb01f4dd7d652a01c8dfb31279e23bd5e805a81d2f431bbafbbd99a2f42
GET /images/board/b8ab6d17818448aac7a8844b85f0e423.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/jpeg
Content-Length: 2943
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 12:09:06 GMT
Accept-Ranges: bytes
www.acint.net/mc/?dp=14
302 Moved Temporarily 142 B IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /mc/?dp=14 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/mc/?dp=14
www.acint.net/hit/?v=0.4.0&uid=7b7351f8-c746-422a-9255-63bbd53486af&dp=14&tz=%2B00%3A00&nc=87782827&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=&rs=1280x1024&t=FAQ7.ru&oE=1&oP=1&dT=2022-11-29T16%3A52%3A47.787&fu=83523806-dd72-48d8-891f-ed5105d86467
302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/hit/?v=0.4.0&uid=7b7351f8-c746-422a-9255-63bbd53486af&dp=14&tz=%2B00%3A00&nc=87782827&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=&rs=1280x1024&t=FAQ7.ru&oE=1&oP=1&dT=2022-11-29T16%3A52%3A47.787&fu=83523806-dd72-48d8-891f-ed5105d86467
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /hit/?v=0.4.0&uid=7b7351f8-c746-422a-9255-63bbd53486af&dp=14&tz=%2B00%3A00&nc=87782827&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=&rs=1280x1024&t=FAQ7.ru&oE=1&oP=1&dT=2022-11-29T16%3A52%3A47.787&fu=83523806-dd72-48d8-891f-ed5105d86467 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/hit/?v=0.4.0&uid=7b7351f8-c746-422a-9255-63bbd53486af&dp=14&tz=%2B00%3A00&nc=87782827&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=&rs=1280x1024&t=FAQ7.ru&oE=1&oP=1&dT=2022-11-29T16%3A52%3A47.787&fu=83523806-dd72-48d8-891f-ed5105d86467
faq7.ru/themes/faq7_new/images/banner.png
200 OK 40 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/banner.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 320 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash 8d63d8a88179259482d125f5763e48ec
edc3ded7d479171d9facfb981560f00dc9585c26
63d4a7174c2f22886bbf6aac788b7726f051ab41e9302eb047b089a48ec07529
GET /themes/faq7_new/images/banner.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 40101
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
api-maps.yandex.ru/1.1/_YMaps.js?v=0.2.11
200 OK 136 kB URL HTTP/2 api-maps.yandex.ru/1.1/_YMaps.js?v=0.2.11
IP
Size 136 kB (135819 bytes)
Hash 3de3ebff9e656a5ec282e3f17ed09f90
decb0bd0941266c28f9261ab15e5ba4f4bdca36c
f38dfb2b87cc360f70e0b0546d6275830459c26165f7d5321523d9bb37ff29b5
GET /1.1/_YMaps.js?v=0.2.11 HTTP/1.1
Host: api-maps.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
date: Tue, 29 Nov 2022 16:52:47 GMT
set-cookie: _yasc=t+VNVwYeToH5Shr09bSZFbB9a8HxB1T0Dm9yZaEZbrn4a90xoNDTLuuT/aA=; domain=.yandex.ru; path=/; expires=Fri, 26-Nov-2032 16:52:47 GMT; secure
i=jWoUC2FVc/c3RBVYV5tUSt/abkLjC12HVAuBEcDQ36JwwptJ9caRjRGYHOg5O995yLduVxAL9PtpxWBMu24l7WGswuA=; Expires=Thu, 28-Nov-2024 16:52:47 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
etag: W/"606eaf85-7e686"
last-modified: Thu, 08 Apr 2021 07:23:49 GMT
content-encoding: gzip
content-type: application/javascript
X-Firefox-Spdy: h2
faq7.ru/themes/faq7_new/images/header_solkenar.png
200 OK 1.3 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/header_solkenar.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 40 x 79, 8-bit colormap, non-interlaced\012- data
Hash a2eeeffdacf7347bb46bf56ea934b8cf
477fafb9f5b27fa32285847c73f49cb1a3127fd2
b3116ade48c4815db351faabf82c338bb4458ded9da83ec5ffc55874d878e0ec
GET /themes/faq7_new/images/header_solkenar.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 1321
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/images/advtab/anketa.png
200 OK 6.0 kB URL HTTP/1.1 faq7.ru/images/advtab/anketa.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 39f631977ceb651efdff94d781221857
4ea28e49ccd9a19f80b10c60a5d7b51f9688e715
b8744b9bc1484d3c4bce03ab46e701a4f3190a78fe94a5878da4274adf8b678e
GET /images/advtab/anketa.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 5999
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2011 00:31:08 GMT
Accept-Ranges: bytes
faq7.ru/images/advtab/elect.png
200 OK 7.6 kB URL HTTP/1.1 faq7.ru/images/advtab/elect.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash c8d32c8fc630d9f4fd69e954e17aaabe
b298152d6b2211ed33fda4789a18bbc0d1232aeb
509a5109b6875a5b12777c8f8f1c61b7eccfae2e0668e35c4dd17643f02f3209
GET /images/advtab/elect.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 7649
Connection: keep-alive
Last-Modified: Tue, 25 Mar 2014 15:27:43 GMT
Accept-Ranges: bytes
faq7.ru/images/advtab/games.png
200 OK 6.1 kB URL HTTP/1.1 faq7.ru/images/advtab/games.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 1bd58a8ccbb8eace56f92318f7c02590
80c55065fa7a297c5cd3df542828fda430adced5
2ac39badffb60411ade1acc34b6bed16e7fb247372298e68ff28870ff1153655
GET /images/advtab/games.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 6094
Connection: keep-alive
Last-Modified: Mon, 05 Mar 2012 19:12:01 GMT
Accept-Ranges: bytes
faq7.ru/images/advtab/dvd.png
200 OK 6.4 kB URL HTTP/1.1 faq7.ru/images/advtab/dvd.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 1aba653e6205b63208359b5063f65170
ac0ee60f724626edd210f320664ce7c7df02cb0a
07a31aacea778b27060fbc99e0110f3fa23d4be685e3a0afcc8279d4861d03a5
GET /images/advtab/dvd.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 6425
Connection: keep-alive
Last-Modified: Sat, 10 Mar 2012 22:03:04 GMT
Accept-Ranges: bytes
www.acint.net/hit/?v=0.4.0&uid=7b7351f8-c746-422a-9255-63bbd53486af&dp=14&tz=%2B00%3A00&nc=87782827&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=&rs=1280x1024&t=FAQ7.ru&oE=1&oP=1&dT=2022-11-29T16%3A52%3A47.787&fu=83523806-dd72-48d8-891f-ed5105d86467
200 OK 43 B URL HTTP/2 www.acint.net/hit/?v=0.4.0&uid=7b7351f8-c746-422a-9255-63bbd53486af&dp=14&tz=%2B00%3A00&nc=87782827&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=&rs=1280x1024&t=FAQ7.ru&oE=1&oP=1&dT=2022-11-29T16%3A52%3A47.787&fu=83523806-dd72-48d8-891f-ed5105d86467
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hit/?v=0.4.0&uid=7b7351f8-c746-422a-9255-63bbd53486af&dp=14&tz=%2B00%3A00&nc=87782827&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=&rs=1280x1024&t=FAQ7.ru&oE=1&oP=1&dT=2022-11-29T16%3A52%3A47.787&fu=83523806-dd72-48d8-891f-ed5105d86467 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Cookie: aid=sAkJCmOGOOB5BwHiQURjAv/xbPoBFTPZeVgo1eUHS+vUk0qN
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 29 Nov 2022 16:52:48 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
faq7.ru/themes/faq7_new/images/header_sagkenar.png
200 OK 1.1 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/header_sagkenar.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 10 x 120, 8-bit colormap, non-interlaced\012- data
Hash 52030db134ef04b5af0ffd4242943eae
8e674af8d8fca2e5abb8e392cc2d5fd4067300db
8ff0d960d7d4e04d65151c435bc2920d4c53e78bf72fe9a5afd206233efc7b3a
GET /themes/faq7_new/images/header_sagkenar.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 1139
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/buton.png
200 OK 1.3 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/buton.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 88 x 41, 8-bit colormap, non-interlaced\012- data
Hash ef2b4166202ecbe53a0fead53407dba9
e02676cb5b40f19a7c3928b3e31424d367a01709
4d8c0553c61d4f35e920e803dca53c5dab7ee2ae9f71536db3027da5f4b5d41c
GET /themes/faq7_new/images/buton.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 1260
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/arama.png
200 OK 322 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/arama.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 81 x 41, 8-bit colormap, non-interlaced\012- data
Hash 5ef6b593d11fc3323f5a107b8e159c02
2d86f87d801a3da815b1bd597ba21633f939a5c7
e2cac633f04578b76aad42c278e8753aa597b38e2cdb8a9448fee46ba8051eec
GET /themes/faq7_new/images/arama.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 322
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/shade.gif
200 OK 949 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/shade.gif
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type GIF image data, version 89a, 5 x 45\012- data
Hash d2406af2a1f0d53749e633cb1b007c29
0b9b5f655eb54059807a2a17c7e199eee917d5ac
d431ff0f801d1909d1859445f776b32fe163f4e5ecedeee6e3f9a6f264099213
GET /themes/faq7_new/images/shade.gif HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/gif
Content-Length: 949
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/aramasag.png
200 OK 421 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/aramasag.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 9 x 41, 8-bit colormap, non-interlaced\012- data
Hash b735704ed603c9ce2840f636b3156c31
82762e40aecbc250725517893fef7f83ca715c7d
61e0d1ad171634c69f48012ea6c3356b7ba3db021bcd2298afe2441c164a82c3
GET /themes/faq7_new/images/aramasag.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 421
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/menutop.png
200 OK 1.1 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/menutop.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 14 x 174, 8-bit colormap, non-interlaced\012- data
Hash 8d50b3b17a1af019ad91cc3798e86a13
96a53f2a657d74068616c9ce3ec75e0701b3a9e9
3169a60e2414636c9c0ba154d7a9818db1988af81faaedb9b91b94fb56259adc
GET /themes/faq7_new/images/menutop.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 1131
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/menutop_links.png
200 OK 1.8 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/menutop_links.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 200 x 329, 8-bit colormap, non-interlaced\012- data
Hash 61300238b34d223a5b32750060c121fe
eb146c57a05a1a6ce30bd13b8e13d7e58eeaedf9
71a913b199ae80c4be904450ec9b692d9d7ed80777eaa7344f2d44ebde0f8335
GET /themes/faq7_new/images/menutop_links.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 1800
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/mainbody-left.png
200 OK 96 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/mainbody-left.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 4 x 10, 1-bit colormap, non-interlaced\012- data
Hash 5150e8d2e138e7d27bd2092a064d9e85
e0c137cd1d0d855b87a8248ab4db9dd4a3dd4516
6bd68d18838e37b7c2585bdb1c0872c23b3fdf5363072f0c17b3b1696a1573bc
GET /themes/faq7_new/images/mainbody-left.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 96
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/sol_ust.png
200 OK 258 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/sol_ust.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 8 x 45, 8-bit colormap, non-interlaced\012- data
Hash 246b9e737e0ff91965a9716b02d3a82f
c42f6bd27ce0f66c0cf1208397bfeae0bbbc825c
cccb8e940da727e43a272667b78d1352924c3928a116becc3c3796cd2d654504
GET /themes/faq7_new/images/sol_ust.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 258
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/sol_ust_yan.png
200 OK 3.6 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/sol_ust_yan.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced\012- data
Hash abf166fe44402115b260d4343242500d
99d145b8912330803f0f9122c426e8257a9c1dea
a0729cc7d7666a67641780cafc9c37e79e75fe7d85519eaabb7559ff26bbc19e
GET /themes/faq7_new/images/sol_ust_yan.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 3575
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/ust_orta.png
200 OK 197 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/ust_orta.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 10 x 45, 8-bit colormap, non-interlaced\012- data
Hash 3c384583d459815e10ef466e5c28ba8d
e27e16e88557d46099cbe17bb6e91203068591d9
9ebf6a47a6932a5b9064c6abd5dfbcce79397e147c22ebd56d9c0389d94052a7
GET /themes/faq7_new/images/ust_orta.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 197
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/sag_ust.png
200 OK 269 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/sag_ust.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 8 x 45, 8-bit colormap, non-interlaced\012- data
Hash 14ebc364b603c3b652ac79b610dceb05
a14ff530f12382c09c4efdb4e682893c52690a76
c1f975c487d7872c4f28550bf8d8763194d6868e1a18562aa2f8213a02d90c51
GET /themes/faq7_new/images/sag_ust.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 269
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/sol_alt.png
200 OK 229 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/sol_alt.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 8 x 10, 8-bit colormap, non-interlaced\012- data
Hash fc653d7c6065ec60a9a81521fedb7dc1
0ae482fb8b6a61f2df6c4ade790d87af9d3f4d7b
b0e56e0cccfa7a0a2a78254f2e0297379c301aba89bbbacef157a630bc65b72b
GET /themes/faq7_new/images/sol_alt.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 229
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/alt_orta.png
200 OK 145 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/alt_orta.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 5 x 10, 4-bit colormap, non-interlaced\012- data
Hash 25af1732728fb5caad42f93bb0e98955
3c325c86e86cec0756c1e0e94350f1255545e15c
6a9d30fc5253d4b21c47977e892a6d87454e72d0227c66507bdd905d827809f9
GET /themes/faq7_new/images/alt_orta.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 145
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/sag_alt.png
200 OK 231 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/sag_alt.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 8 x 10, 8-bit colormap, non-interlaced\012- data
Hash 3a7b2792ecbdc62eb5a5285bb4a85d05
8989644ae912c26241794ea89eda7e07403950a6
ee9f840c684f0c32ada2908fb91ce6a4d2af34c44ae159c42e739e6f922b2b1c
GET /themes/faq7_new/images/sag_alt.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 231
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/sol_yan.png
200 OK 126 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/sol_yan.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 8 x 5, 4-bit colormap, non-interlaced\012- data
Hash eec9daba94f4cf54d111a1d004bcc3a1
887b0d40d034ce7725be8a9002deaea61bc0e200
cf43c79e011d17b32ea144fd5da55f2bbe89fa9608dac6cf2e242136221b5ee3
GET /themes/faq7_new/images/sol_yan.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 126
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/sag_yan.png
200 OK 128 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/sag_yan.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 8 x 5, 4-bit colormap, non-interlaced\012- data
Hash 4bbcf08eaa7c0c6eacd19ba3cb3bf9ee
52fc9ad0d6e6ecfa85974e831c50ae9c5d53fc19
f56a349bb4a0d3237744a5614912bed54a54a76dbe3c4757818687c5ca69a6d6
GET /themes/faq7_new/images/sag_yan.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 128
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/cap-lefticon.png
200 OK 1.9 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/cap-lefticon.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 30 x 39, 8-bit/color RGBA, non-interlaced\012- data
Hash de36d13a12ccdc85f91b8dea9e61a725
48f05037c6e228b4a9023d0d14e102c2b73cd5ee
c310c544414bbb78f4ef6123a7909367bf5d347366d5de3cdcd906a73e54637d
GET /themes/faq7_new/images/cap-lefticon.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167; _ym_uid=1669740767350330186; _ym_d=1669740767
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 1930
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/cap.png
200 OK 223 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/cap.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 25 x 39, 8-bit colormap, non-interlaced\012- data
Hash 9ab4e24fd164f38cb35884f11f162d96
ce87410a486af0b72b6ae44dd32b33b67f956a85
1eb934fba42e48ccdb2afe5d2ab8f55944a0983f48e50c89d85137b0059a32a4
GET /themes/faq7_new/images/cap.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167; _ym_uid=1669740767350330186; _ym_d=1669740767
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 223
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/cap-left.png
200 OK 344 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/cap-left.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 4 x 39, 8-bit/color RGBA, non-interlaced\012- data
Hash 04ef82b4e31ab9658d0d26e177ce2960
2df7fbf73535e30f62cdf9161ead1e7578c81930
0af48db9a727d245daa8cbacdf5c5f9186e44ec147c7cdc46922d4ef47124b55
GET /themes/faq7_new/images/cap-left.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167; _ym_uid=1669740767350330186; _ym_d=1669740767
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 344
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/mainbody-right.png
200 OK 3.6 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/mainbody-right.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 4 x 10, 8-bit colormap, non-interlaced\012- data
Hash f5da826e583edd665f215a5d3b5d14cd
93c8e1987575972040a444d1aa95d96236b9aaf3
6c79b1d1aa7fe6b2dad8d98825a7b7018e988f5f3e9154288877c306820b201e
GET /themes/faq7_new/images/mainbody-right.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167; _ym_uid=1669740767350330186; _ym_d=1669740767
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 3579
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/mainbody-footerleft.png
200 OK 296 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/mainbody-footerleft.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 4 x 39, 8-bit colormap, non-interlaced\012- data
Hash f8f86d18ec78ed25bdd218e4a38d88db
8eaa0d68ae0c721e668df0175ca286cbf607e0bb
f2b75449667e52afc0349201fa02cb9d1bac0f678e775f2776436452db8e0a96
GET /themes/faq7_new/images/mainbody-footerleft.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167; _ym_uid=1669740767350330186; _ym_d=1669740767
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 296
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/cap-right.png
200 OK 340 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/cap-right.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 4 x 39, 8-bit colormap, non-interlaced\012- data
Hash ec3858bb7e54481f53d195592b16cced
c54e5d98d566cedd702db72558e1b21a23dd809e
e7b353ae7fbb5ec9ee656235aaae17694009cac9c4af661af56345d69f994434
GET /themes/faq7_new/images/cap-right.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167; _ym_uid=1669740767350330186; _ym_d=1669740767
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 340
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/mainbody-center.png
200 OK 219 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/mainbody-center.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 10 x 39, 8-bit colormap, non-interlaced\012- data
Hash 8aa7ee36484f1e26f88ebdcdc113c5e6
80b150afae30bff4862ecf2b5d8997625e1c54b8
eb45816c3e3f74874a6a8b01fd024284c12be851dde3ebef15ac0f7dcac41af7
GET /themes/faq7_new/images/mainbody-center.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167; _ym_uid=1669740767350330186; _ym_d=1669740767
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 219
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/mainbody-footerright.png
200 OK 299 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/mainbody-footerright.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 4 x 39, 8-bit colormap, non-interlaced\012- data
Hash 2a294771672f47a14aa9fffba46aba39
423418df8cd4b1f09bf4a614b3c1d58f2970e94e
bfa1210cd7b2874fd9052e019fc515ae1c25bf88a1cd8c14d2cb287a7d9c1f20
GET /themes/faq7_new/images/mainbody-footerright.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167; _ym_uid=1669740767350330186; _ym_d=1669740767
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 299
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/mainbody-right2.png
200 OK 2.8 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/mainbody-right2.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 205 x 10, 8-bit/color RGBA, non-interlaced\012- data
Hash 2b4debf8295bfbfd9f7e1ad03f355a86
734b6d72c293db33416f479c13670dc95885ed98
e7075b79f423d310aceef8a911871d99c4efa5386e598e252e3614e501a9843a
GET /themes/faq7_new/images/mainbody-right2.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167; _ym_uid=1669740767350330186; _ym_d=1669740767
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 2840
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/infusions/shoutbox_panel/sb_imgs.png
200 OK 4.5 kB URL HTTP/1.1 faq7.ru/infusions/shoutbox_panel/sb_imgs.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 160 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 8249d38d90e11a4ff32d3d5d9200e2f2
1c3dcb719ac9c1437291a811ca074cf3af7b97b4
040fdf6c825bec3f191d4c85d48c099558fb913327c37b95861a8d495587b92f
GET /infusions/shoutbox_panel/sb_imgs.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/infusions/shoutbox_panel/ash.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167; _ym_uid=1669740767350330186; _ym_d=1669740767
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 4461
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 18:39:40 GMT
Accept-Ranges: bytes
faq7.ru/images/banner88.gif
200 OK 2.0 kB URL HTTP/1.1 faq7.ru/images/banner88.gif
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type GIF image data, version 89a, 88 x 31\012- data
Hash 369f7ad897bb82bb94a18837089579e3
d604882f7952513aa816d11b233ab725c579bbe4
6408f1769dc939fbee5219dfd900e89c1ce548c426fd23f1dcd515dee038a17d
GET /images/banner88.gif HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/gif
Content-Length: 2023
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:38:59 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/abstand.png
200 OK 378 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/abstand.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 320 x 89, 8-bit/color RGBA, non-interlaced\012- data
Hash f5e5d4dc0e3f709449008e171b6a645d
96974be67f6a59cd2e23e0ac7626145475e3c81d
be8e209de5cb151b2b46adce8165087915ffd9ca4284273b904bfb0a72b2c98b
GET /themes/faq7_new/images/abstand.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 378
Connection: keep-alive
Last-Modified: Sun, 18 Dec 2011 18:43:27 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/bullet.gif
200 OK 911 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/bullet.gif
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type GIF image data, version 89a, 10 x 10\012- data
Hash b0882e2a62f70dd10bb62cf45f709f0a
6ba9da8faf361347036e493a9b9c0317bc5b71c9
4979c73b740882f8d17134e741bee4d9f648830a1788ba21f89f3e72210caa10
GET /themes/faq7_new/images/bullet.gif HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/gif
Content-Length: 911
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/infusions/wnavi_panel/img/add.png
200 OK 733 B URL HTTP/1.1 faq7.ru/infusions/wnavi_panel/img/add.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 1988c3cc1384a3ac9b9a4129183248f3
b6244b0027a8c9f702b311cb5b2ab8cc64f3b5f2
c06a52df3361df380a02a45159a0858d6f7cd8cbc3f71ff732a65d6c25ea6af6
GET /infusions/wnavi_panel/img/add.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 733
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 21:19:49 GMT
Accept-Ranges: bytes
faq7.ru/infusions/wnavi_panel/img/information.png
200 OK 778 B URL HTTP/1.1 faq7.ru/infusions/wnavi_panel/img/information.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 3750c701d2ec35a45d289b9b9c1a0667
04b482344d75d0732275727bd73cceb9b049d276
ff9c48d8c2d063932c7aadd5e15ddfdc76b7111bf0715f3a192bba26df2c531c
GET /infusions/wnavi_panel/img/information.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:48 GMT
Content-Type: image/png
Content-Length: 778
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 21:19:49 GMT
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 280 B IP
Hash 17e967c36ff903cde84ac159d4c5c7c1
a122a6f887bc041e9a05af7133efcc349a1b1402
2dd9055599fef43bd5310d25ff1209afef08ece08c0cdc8028b3809db48fc875
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6522
Cache-Control: max-age=115724
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 16:52:49 GMT
Etag: "63854073-118"
Expires: Thu, 01 Dec 2022 01:01:33 GMT
Last-Modified: Mon, 28 Nov 2022 23:12:51 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 280
faq7.ru/images/avatars/123[2149].jpg
200 OK 6.4 kB URL HTTP/1.1 faq7.ru/images/avatars/123[2149].jpg
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 100x74, components 3\012- data
Hash 1b6bfdd0ba4ae60ef1e7f611ff8ea949
66e85e3f2b19976db33ec00aa45fbd3cacd8e8da
ed0ce9c8cc3da3f3c30859a0166c40541611bfd4b15cac496d46c051b49c7efa
GET /images/avatars/123[2149].jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/jpeg
Content-Length: 6371
Connection: keep-alive
Last-Modified: Thu, 03 Dec 2020 14:09:57 GMT
Accept-Ranges: bytes
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/offline.png
200 OK 780 B URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/offline.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 50 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 1ff203770c42cea237dbee8c496ce7dc
a16df156fd7c1568544139401ac991f373bdc139
844303033c2057761e6b79701273ef57f7b605ace8a7ab6f59396e673ba9f42a
GET /infusions/hayaletsevgili_online_users_panel/images/offline.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/png
Content-Length: 780
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
faq7.ru/images/photoalbum/album_6/vglm1mi_t1.jpg
200 OK 13 kB URL HTTP/1.1 faq7.ru/images/photoalbum/album_6/vglm1mi_t1.jpg
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 130x73, components 3\012- data
Hash ca08437539b212831d29fed1db60a3c7
53ed78ddbcd4b852b5c575e7306ba1528c2fdcac
e8920ee259f2cd9af3b1a1422d077e4da54f1f16cbedb21c999906d588824fd8
GET /images/photoalbum/album_6/vglm1mi_t1.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/jpeg
Content-Length: 12893
Connection: keep-alive
Last-Modified: Sat, 02 Feb 2013 13:49:58 GMT
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb70f2b49102d0dbba09a0645173612d
ba3b4186dccf12f16ac6bbeee4328708ba0e3a72
a3e17a5b5b580d0b1248f49ff41c1266c60d6eac80c9ed63c81bd35ecf8f78d8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3E17A5B5B580D0B1248F49FF41C1266C60D6EAC80C9ED63C81BD35ECF8F78D8"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6595
Expires: Tue, 29 Nov 2022 18:42:44 GMT
Date: Tue, 29 Nov 2022 16:52:49 GMT
Connection: keep-alive
faq7.ru/images/photoalbum/album_6/1_t1.jpg
200 OK 11 kB URL HTTP/1.1 faq7.ru/images/photoalbum/album_6/1_t1.jpg
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 130x78, components 3\012- data
Hash 027247148cdde06b89ed61193a11b7af
11759425d82d2372433a7606082f7fd20b9b8a67
60b6b9a7e399ee2880d4e078ef6e1684ed3f718f3b07ec35dafe569610c1b06b
GET /images/photoalbum/album_6/1_t1.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/jpeg
Content-Length: 11235
Connection: keep-alive
Last-Modified: Fri, 05 Oct 2012 11:12:07 GMT
Accept-Ranges: bytes
faq7.ru/infusions/thisrss_panel/feed-icon-12x12.png
200 OK 552 B URL HTTP/1.1 faq7.ru/infusions/thisrss_panel/feed-icon-12x12.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 93affa4fc35c2f847ed1781b18ca0db0
cf44a2580e06c111d77466aa3a917b1534b6680c
98ea718868bb9a520da4777cd8a5ed5c76d123b77aa2e0289ab4bad638439b73
GET /infusions/thisrss_panel/feed-icon-12x12.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/png
Content-Length: 552
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:13 GMT
Accept-Ranges: bytes
faq7.ru/infusions/board/images/rss.png
200 OK 727 B URL HTTP/1.1 faq7.ru/infusions/board/images/rss.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash d0394ddde1e3c9f23030eebe56961596
a36c4fd5a8a0ab52b4369b48599f477a642c3ded
e5563da9d0aca6698a0fe760ae0d38827e6a225be742d166e3cda357b8c13732
GET /infusions/board/images/rss.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/png
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:10 GMT
Accept-Ranges: bytes
sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0A0909B0E0388663E201077902634441
302 Found 0 B URL HTTP/2 sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0A0909B0E0388663E201077902634441
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0A0909B0E0388663E201077902634441 HTTP/1.1
Host: sync.1dmp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 29 Nov 2022 16:52:49 GMT
content-length: 0
expires: 0
cache-control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
set-cookie: uid=418f79f0-7006-11ed-8ff0-f832e4719dd9; Version=1; Path=/; Domain=.1dmp.io; Expires=Wed, 29 Nov 2023 16:52:49 GMT; SameSite=None; Secure
uid-legacy=418f79f0-7006-11ed-8ff0-f832e4719dd9; Version=1; Path=/; Domain=.1dmp.io; Expires=Wed, 29 Nov 2023 16:52:49 GMT
location: /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0A0909B0E0388663E201077902634441&cs=1
X-Firefox-Spdy: h2
faq7.ru/images/board/a31467762c7c95a6b7496c8770f19642.jpg
200 OK 2.8 kB URL HTTP/1.1 faq7.ru/images/board/a31467762c7c95a6b7496c8770f19642.jpg
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 40x50, components 3\012- data
Hash 0ee7e1f81bbeb295605f93b6a33003b5
0afbf02df72d3d38fc8983ce0734b5bc2b780069
1954fe5ad8f9402d0b9c8e8cbe60fdf78858746cd56e267da36e1a07a3732b08
GET /images/board/a31467762c7c95a6b7496c8770f19642.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/jpeg
Content-Length: 2816
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 14:55:20 GMT
Accept-Ranges: bytes
faq7.ru/images/board/f60b6ab333a8b287717d45c11113b225.jpg
200 OK 2.9 kB URL HTTP/1.1 faq7.ru/images/board/f60b6ab333a8b287717d45c11113b225.jpg
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 40x50, components 3\012- data
Hash b3e01e01afc8418a3ab4a448fb9a59e0
9176772b121622c640f7b7ddf12cbe7a01a2cc1b
9f13fe30ed8e007fb2fc9cfe0ecea338f91edbd527d6edccbf4683fd936c6fe5
GET /images/board/f60b6ab333a8b287717d45c11113b225.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/jpeg
Content-Length: 2925
Connection: keep-alive
Last-Modified: Mon, 31 Oct 2022 15:42:27 GMT
Accept-Ranges: bytes
faq7.ru/images/board/3f8934fd3db5fdd2e456997db7eea60a.jpg
200 OK 2.6 kB URL HTTP/1.1 faq7.ru/images/board/3f8934fd3db5fdd2e456997db7eea60a.jpg
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 40x50, components 3\012- data
Hash 66052df75fac8a07d2e571e9495c5c1b
93713a19784f1ab7c325f6338383f21f46106d63
f27a447f2a398d9071c228380c783836766fc3f954212f7bcf85cdb1c0d43526
GET /images/board/3f8934fd3db5fdd2e456997db7eea60a.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/jpeg
Content-Length: 2585
Connection: keep-alive
Last-Modified: Wed, 24 Nov 2021 16:34:48 GMT
Accept-Ranges: bytes
faq7.ru/infusions/uip_panel/images/ico_lock.png
200 OK 633 B URL HTTP/1.1 faq7.ru/infusions/uip_panel/images/ico_lock.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 5d0bd6c55026e13a40397dcf97fa0cfa
b8efa6913362d97f94f8ddbfceed60f5404ba5ec
fafc9aaaf2140c94a7a3afc94653ce0ff22cd2713cd524eda1bb9974e67b9a49
GET /infusions/uip_panel/images/ico_lock.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/png
Content-Length: 633
Connection: keep-alive
Last-Modified: Sat, 07 May 2011 19:05:42 GMT
Accept-Ranges: bytes
faq7.ru/infusions/uip_panel/images/arrowdown.png
200 OK 1.3 kB URL HTTP/1.1 faq7.ru/infusions/uip_panel/images/arrowdown.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 1f332485c3a13a13256ceb2ba0a2ec1a
231ecee1dfa78e20354882dafc58db490816f242
0e0e531bcd1004ad693a04bed51acc9492c65de807fc3684e654a53945931f26
GET /infusions/uip_panel/images/arrowdown.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/png
Content-Length: 1337
Connection: keep-alive
Last-Modified: Tue, 05 Jul 2016 00:22:04 GMT
Accept-Ranges: bytes
dm-eu.hybrid.ai/match?id=106&vid=0A0909B0E0388663E201077902634441
204 No Content 0 B URL HTTP/2 dm-eu.hybrid.ai/match?id=106&vid=0A0909B0E0388663E201077902634441
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?id=106&vid=0A0909B0E0388663E201077902634441 HTTP/1.1
Host: dm-eu.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 29 Nov 2022 16:52:49 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
set-cookie: vid=fd1221c8274c48e77745; Expires=Wed, 29 Nov 2023 16:52:48 GMT; Domain=.hybrid.ai; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 521
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: Hybrid Web Server
X-Firefox-Spdy: h2
faq7.ru/images/avatars/admin[1].jpg
200 OK 4.5 kB URL HTTP/1.1 faq7.ru/images/avatars/admin[1].jpg
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash c0650802c88b7bd45b87f1337bc8cc6a
54e375ce6542577facafb22a27facd4518260f43
3ed19b252090bdaa5a17374e5f8eede6db317e35cf4c597184fdda4ff0b568a1
GET /images/avatars/admin[1].jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/jpeg
Content-Length: 4525
Connection: keep-alive
Last-Modified: Sun, 30 Oct 2011 21:55:08 GMT
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6e9f26643cd130fc449a7cb7a33aa812
757d6ae8b71a82d35530eaac0a23c17318dfa694
21ec57af3facc5c04613f4171aa1afed199921d0aee351a784a0c913c9eda6d3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "21EC57AF3FACC5C04613F4171AA1AFED199921D0AEE351A784A0C913C9EDA6D3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8709
Expires: Tue, 29 Nov 2022 19:17:58 GMT
Date: Tue, 29 Nov 2022 16:52:49 GMT
Connection: keep-alive
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash bc8c4688811b1cfd5b5c862f8745b788
3d09e35e781d8ac83693c2a0f52806ab8f696acf
f73d472e7e5c2ee6ae6dbb0cb320f70e9c9ce03b76209da3bf3af08559dec21d
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sat, 03 Dec 2022 13:08:15 GMT
ETag: "3d09e35e781d8ac83693c2a0f52806ab8f696acf"
Last-Modified: Tue, 29 Nov 2022 13:08:16 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1026
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771cdb1ebf42b4f7-OSL
sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0A0909B0E0388663E201077902634441&cs=1
200 OK 35 B URL HTTP/2 sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0A0909B0E0388663E201077902634441&cs=1
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=0A0909B0E0388663E201077902634441&cs=1 HTTP/1.1
Host: sync.1dmp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: uid=418f79f0-7006-11ed-8ff0-f832e4719dd9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 16:52:49 GMT
content-type: image/gif
content-length: 35
expires: 0
cache-control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
set-cookie: uid=418f79f0-7006-11ed-8ff0-f832e4719dd9; Version=1; Path=/; Domain=.1dmp.io; Expires=Wed, 29 Nov 2023 16:52:49 GMT; SameSite=None; Secure
uid-legacy=418f79f0-7006-11ed-8ff0-f832e4719dd9; Version=1; Path=/; Domain=.1dmp.io; Expires=Wed, 29 Nov 2023 16:52:49 GMT
X-Firefox-Spdy: h2
faq7.ru/images/smiley/cool.gif
200 OK 1.8 kB URL HTTP/1.1 faq7.ru/images/smiley/cool.gif
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type GIF image data, version 89a, 17 x 17\012- data
Hash 299725ce2012b28cac6a7d383b270617
115cba34d2047f06d1e93cd8f316ad814156175f
036ffc84dfc9b92869428c377badc218ce52399bd47a6d9bff3073269cb8230b
GET /images/smiley/cool.gif HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/gif
Content-Length: 1831
Connection: keep-alive
Last-Modified: Wed, 13 Apr 2011 19:41:26 GMT
Accept-Ranges: bytes
sync.republer.com/match?dsp=sape
204 No Content 0 B URL HTTP/2 sync.republer.com/match?dsp=sape
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?dsp=sape HTTP/1.1
Host: sync.republer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Tue, 29 Nov 2022 16:52:49 GMT
strict-transport-security: max-age=0
X-Firefox-Spdy: h2
ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
302 Moved Temporarily 142 B URL HTTP/1.1 ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/match?dp=14&euid=4602420AE1388663A70061BB02BD8712
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=CkICRmOGOOG7YQCnEoe9AswKslKdNs0d7lcRchdct44ZJdSu; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
ocsp.digicert.com/
200 OK 278 B IP
Hash a14eb5afeb04c20533770726a3e71ced
e8fbb3cd95a91213e82d0f9210dc4fad27751b04
fdf879023a4340ffcb4cfe2d3f8f3b01a5109aa3218683faecbf984c2e725ec6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5720
Cache-Control: max-age=87587
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 16:52:49 GMT
Etag: "6384d5ac-116"
Expires: Wed, 30 Nov 2022 17:12:36 GMT
Last-Modified: Mon, 28 Nov 2022 15:37:16 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 278
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a378e3cc6029dde181c06e0e0568cfa5
0eedaf829e2aa8ed4515963f324fda6ce6c1a024
00c029ae05bbc62c592d0aa39980d2143aa880833cbda0cf89301c2d7b790897
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "00C029AE05BBC62C592D0AA39980D2143AA880833CBDA0CF89301C2D7B790897"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2184
Expires: Tue, 29 Nov 2022 17:29:13 GMT
Date: Tue, 29 Nov 2022 16:52:49 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 471 B IP
Hash 6b9efc56a5c83007514905bc0fbb010e
9133a19f469b8cc3d2fb36399c0955554b0fe1da
d0c5cd5deea1f0b5e77402c785309b5088f732f05ddb5a2ef90f66541c4f0aa5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2022 15:41:02 GMT
Expires: Tue, 06 Dec 2022 15:41:01 GMT
Etag: "9133a19f469b8cc3d2fb36399c0955554b0fe1da"
Cache-Control: max-age=599891,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 771cdb1ee99b0afe-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cac131d4ffb2a7c985e665c9893492f3
0d1547dacf457b818499bc789b454627173f088e
49e53f1eab25176d5890ef7034fbfe14a6bcceafbaf71a54f744c68109a1087b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49E53F1EAB25176D5890EF7034FBFE14A6BCCEAFBAF71A54F744C68109A1087B"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5929
Expires: Tue, 29 Nov 2022 18:31:38 GMT
Date: Tue, 29 Nov 2022 16:52:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ef4e8eb1e0f07b1edd0ae55f6bd5a2a
55dc5b42b7e8f110fd0d59234275ce0043d0adca
a4d6e816fee030f8012ce8b5804fd80fb451f6b91aa42e7e96c6c441048e1df7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4D6E816FEE030F8012CE8B5804FD80FB451F6B91AA42E7E96C6C441048E1DF7"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11083
Expires: Tue, 29 Nov 2022 19:57:32 GMT
Date: Tue, 29 Nov 2022 16:52:49 GMT
Connection: keep-alive
stat.adlabs.ru/merge_gpsid/?sid=50&id=0A0909B0E0388663E201077902634441
302 Found 0 B URL HTTP/2 stat.adlabs.ru/merge_gpsid/?sid=50&id=0A0909B0E0388663E201077902634441
IP
ASN #201009 Centre of server systems Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /merge_gpsid/?sid=50&id=0A0909B0E0388663E201077902634441 HTTP/1.1
Host: stat.adlabs.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 29 Nov 2022 16:38:53 GMT
content-length: 0
location: //adlmerge.com/merge_gpsid/?sid=50&id=0A0909B0E0388663E201077902634441
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 397defec7e48d09430d5ef66936baffa
0691d4ed199a1247921f10c4205a09cee9995d07
e6cc2f43545d575794e8c2d3318759456fe197eb75966a4b285c2a2325dff218
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sat, 03 Dec 2022 14:39:34 GMT
ETag: "0691d4ed199a1247921f10c4205a09cee9995d07"
Last-Modified: Tue, 29 Nov 2022 14:39:35 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2656
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771cdb1f5bc1b4f4-OSL
a.utraff.com/sync?ssp=sape
204 No Content 0 B URL HTTP/2 a.utraff.com/sync?ssp=sape
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?ssp=sape HTTP/1.1
Host: a.utraff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 29 Nov 2022 16:52:49 GMT
content-type: text/plain
set-cookie: preutid=1; Expires=Thu, 29 Dec 2022 19:52:49 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/
preutid=1; Expires=Thu, 29 Dec 2022 19:52:49 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-expose-headers: Content-Length,Content-Range
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fLma0DvISnrmVXrmZv6jQIWwm%2BC9ohmJB0aorPE%2F3YOzhNF1hCDvOxU8Cu4a4SPEywMlMHCiG3jSSLQNxfFcRulm%2Fchucy7fx%2FA2Kde7RrTDOi6Tg28q%2F%2B9nckbSixY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771cdb1f3ab5b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ut.rktch.com/matchspm?pi=1000005&pui=0A0909B0E0388663E201077902634441
302 Found 0 B URL HTTP/1.1 ut.rktch.com/matchspm?pi=1000005&pui=0A0909B0E0388663E201077902634441
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /matchspm?pi=1000005&pui=0A0909B0E0388663E201077902634441 HTTP/1.1
Host: ut.rktch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Length: 0
Connection: keep-alive
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
Set-Cookie: b_uid=fef10694dd0ca76088c3cdd4c6face8a0e4f; Max-Age=2592000; Expires=Thu, 29 Dec 2022 16:52:49 GMT; Domain=rktch.com; Secure; SameSite=None
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Access-Control-Allow-Headers: Content-Type, Accept, Authorization
Access-Control-Allow-Credentials: true
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ef4e8eb1e0f07b1edd0ae55f6bd5a2a
55dc5b42b7e8f110fd0d59234275ce0043d0adca
a4d6e816fee030f8012ce8b5804fd80fb451f6b91aa42e7e96c6c441048e1df7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4D6E816FEE030F8012CE8B5804FD80FB451F6B91AA42E7E96C6C441048E1DF7"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11083
Expires: Tue, 29 Nov 2022 19:57:32 GMT
Date: Tue, 29 Nov 2022 16:52:49 GMT
Connection: keep-alive
www.acint.net/mc/?dp=14
200 OK 1.5 kB IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 76a16eb4026f7f161f2a5c0e0716913b
8a1222a44eaadf1d0b0debc49ca9d64b7fdaf669
5162610439f2b285894e426afb9543c13a57d4b42d206e157495ae2bedd827ff
GET /mc/?dp=14 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Cookie: aid=sAkJCmOGOOB5BwHiQURjAv/xbPoBFTPZeVgo1eUHS+vUk0qN
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 29 Nov 2022 16:52:48 GMT
content-type: text/html
set-cookie: cSyncDp7v2=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp14v3=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp17=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp32=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp45v3=1669740768; expires=Wed, 30-Nov-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp53=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp54v2=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp62=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp67v2=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp68=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp71=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp77=1669740768; expires=Tue, 13-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp84=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp85=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp95v3=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp101=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp104v2=1669740768; expires=Tue, 13-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp107=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp110=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp111v2=1669740768; expires=Tue, 13-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp112v2=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp125v2=1669740768; expires=Wed, 14-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp126=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp127=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp129=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp136v2=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp138=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp146=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp148=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp149v2=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp151=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp178=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp179=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp186=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp221=1669740768; expires=Thu, 29-Dec-22 16:52:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
content-encoding: gzip
X-Firefox-Spdy: h2
exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
301 Moved Permanently 115 B URL HTTP/2 exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
IP
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text
Hash c5a5c39e31ed679fb313e70e50c570e5
cfb985ad44fe826a6b8f5f56a988d194afebd3be
58d6b7cafce4eafa7acfca6cfb78e39c6da5b9219514bfff1b70bda3028019cb
GET /cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 29 Nov 2022 16:52:49 GMT
content-type: text/html; charset=utf-8
content-length: 115
location: https://www.acint.net/match?dp=126&euid=6438f7ad-a643-4838-7a64-abc517158044
serverid: TODO
X-Firefox-Spdy: h2
s.uuidksinc.net/match/396/?remote_uid=0A0909B0E0388663E201077902634441
302 Found 0 B URL HTTP/2 s.uuidksinc.net/match/396/?remote_uid=0A0909B0E0388663E201077902634441
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/396/?remote_uid=0A0909B0E0388663E201077902634441 HTTP/1.1
Host: s.uuidksinc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.19.0
date: Tue, 29 Nov 2022 16:52:49 GMT
content-length: 0
location: https://www.acint.net/match?dp=127&euid=fjg4K13b3jVl42QNKF6g
set-cookie: jcsuuid=fjg4K13b3jVl42QNKF6g; expires=Wed, 29 Nov 2023 16:52:49 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
pix.bumlam.com/sync/sape/check?sspuid=0A0909B0E0388663E201077902634441
302 Found 0 B URL HTTP/1.1 pix.bumlam.com/sync/sape/check?sspuid=0A0909B0E0388663E201077902634441
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/sape/check?sspuid=0A0909B0E0388663E201077902634441 HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://sync.bumlam.com/?src=sape
acint.net/match?dp=14&euid=4602420AE1388663A70061BB02BD8712
200 OK 43 B URL HTTP/2 acint.net/match?dp=14&euid=4602420AE1388663A70061BB02BD8712
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=14&euid=4602420AE1388663A70061BB02BD8712 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=sAkJCmOGOOB5BwHiQURjAv/xbPoBFTPZeVgo1eUHS+vUk0qN; cSyncDp7v2=1669740768; cSyncDp14v3=1669740768; cSyncDp17=1669740768; cSyncDp32=1669740768; cSyncDp45v3=1669740768; cSyncDp53=1669740768; cSyncDp54v2=1669740768; cSyncDp62=1669740768; cSyncDp67v2=1669740768; cSyncDp68=1669740768; cSyncDp71=1669740768; cSyncDp77=1669740768; cSyncDp84=1669740768; cSyncDp85=1669740768; cSyncDp95v3=1669740768; cSyncDp101=1669740768; cSyncDp104v2=1669740768; cSyncDp107=1669740768; cSyncDp110=1669740768; cSyncDp111v2=1669740768; cSyncDp112v2=1669740768; cSyncDp125v2=1669740768; cSyncDp126=1669740768; cSyncDp127=1669740768; cSyncDp129=1669740768; cSyncDp136v2=1669740768; cSyncDp138=1669740768; cSyncDp146=1669740768; cSyncDp148=1669740768; cSyncDp149v2=1669740768; cSyncDp151=1669740768; cSyncDp178=1669740768; cSyncDp179=1669740768; cSyncDp186=1669740768; cSyncDp221=1669740768
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 29 Nov 2022 16:52:49 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
0a0909b0e0388663e201077902634441-sp.ops.beeline.ru/p?ssp=sp&id=0A0909B0E0388663E201077902634441
301 Moved Permanently 0 B URL HTTP/2 0a0909b0e0388663e201077902634441-sp.ops.beeline.ru/p?ssp=sp&id=0A0909B0E0388663E201077902634441
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&id=0A0909B0E0388663E201077902634441 HTTP/1.1
Host: 0a0909b0e0388663e201077902634441-sp.ops.beeline.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 29 Nov 2022 16:52:49 GMT
content-length: 0
location: https://www.acint.net/match?dp=111&euid=7f38ec49-dbb5-4937-8d1d-6ab1dfa41112
access-control-allow-origin: *
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: BeeAID=7f38ec49-dbb5-4937-8d1d-6ab1dfa41112; expires=Mon, 20 Nov 2023 16:52:49 GMT; domain=ops.beeline.ru; path=/; secure; SameSite=None
access-control-allow-credentials: true, true
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS, GET, HEAD, POST, OPTIONS, PUT, DELETE
access-control-allow-headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
x-route: http://upstream_cookiesync
x-host: 192.168.152.32
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash a14eb5afeb04c20533770726a3e71ced
e8fbb3cd95a91213e82d0f9210dc4fad27751b04
fdf879023a4340ffcb4cfe2d3f8f3b01a5109aa3218683faecbf984c2e725ec6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5720
Cache-Control: max-age=87587
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 16:52:49 GMT
Etag: "6384d5ac-116"
Expires: Wed, 30 Nov 2022 17:12:36 GMT
Last-Modified: Mon, 28 Nov 2022 15:37:16 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 278
nr.bidderstack.com/sape/cm?user_id=0A0909B0E0388663E201077902634441
200 OK 44 B URL HTTP/1.1 nr.bidderstack.com/sape/cm?user_id=0A0909B0E0388663E201077902634441
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash f9d60352c70a2ba15616d1c9421f3844
e9abc8bea7721a4b6a50295850d13c515006a95c
82cb517a8f80c91dfcec543c6d140deb3baaf463ea9e77655475096eba7bc7d9
GET /sape/cm?user_id=0A0909B0E0388663E201077902634441 HTTP/1.1
Host: nr.bidderstack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/gif
Content-Length: 44
Connection: keep-alive
Set-Cookie: uid=dcbceaf7-181b-4fdd-9212-e1245dd90774; domain=.bidderstack.com; path=/; expires=Wed, 29-Nov-2023 16:52:49 GMT;
Access-Control-Allow-Credentials: true
ssp.bidvol.com/usersync?dspcsid=8&redirect=1
302 Found 503 B URL HTTP/2 ssp.bidvol.com/usersync?dspcsid=8&redirect=1
IP
ASN #24940 Hetzner Online GmbH
Hash 187fc76c07c5b145d7653c93a62a8a18
6c13f79f4ea15dfe1dc387f7013d08088bcc6636
985df91528e58b440a9276b97f9110886011b3cd25c2b4e642f4be256be987fc
GET /usersync?dspcsid=8&redirect=1 HTTP/1.1
Host: ssp.bidvol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.22.0
date: Tue, 29 Nov 2022 16:52:49 GMT
x-request-id: d6c48fb2-0c7a-464e-975d-b924d6ea280f
set-cookie: bvuid=j5m4ndob5o; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None
bvuid2=j5m4ndob5o; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT
vary: Origin
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
surrogate-control: no-store
location: https://www.acint.net/match?dp=129&euid=j5m4ndob5o
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sap1&uid=0A0909B0E0388663E201077902634441
302 Moved Temporarily 0 B URL HTTP/1.1 sync.bumlam.com/?src=sap1&uid=0A0909B0E0388663E201077902634441
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&uid=0A0909B0E0388663E201077902634441 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQ0MWFkMWQzZS03MDA2LTExZWQtYWIxNS0wMDI1OTBjODI0Mzc*; Path=/; Expires=Mon, 24 Nov 2042 16:52:49 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync.bumlam.com/?src=sap1&s_data=CAIQARjh8ZicBmIgMEEwOTA5QjBFMDM4ODY2M0UyMDEwNzc5MDI2MzQ0NDGiARBBrR0-cAYR7asVACWQyCQ3
ETag: 41ad1d3e-7006-11ed-ab15-002590c82437
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
www.acint.net/match?dp=129&euid=j5m4ndob5o
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=129&euid=j5m4ndob5o
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=129&euid=j5m4ndob5o HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=sAkJCmOGOOB5BwHiQURjAv/xbPoBFTPZeVgo1eUHS+vUk0qN; cSyncDp7v2=1669740768; cSyncDp14v3=1669740768; cSyncDp17=1669740768; cSyncDp32=1669740768; cSyncDp45v3=1669740768; cSyncDp53=1669740768; cSyncDp54v2=1669740768; cSyncDp62=1669740768; cSyncDp67v2=1669740768; cSyncDp68=1669740768; cSyncDp71=1669740768; cSyncDp77=1669740768; cSyncDp84=1669740768; cSyncDp85=1669740768; cSyncDp95v3=1669740768; cSyncDp101=1669740768; cSyncDp104v2=1669740768; cSyncDp107=1669740768; cSyncDp110=1669740768; cSyncDp111v2=1669740768; cSyncDp112v2=1669740768; cSyncDp125v2=1669740768; cSyncDp126=1669740768; cSyncDp127=1669740768; cSyncDp129=1669740768; cSyncDp136v2=1669740768; cSyncDp138=1669740768; cSyncDp146=1669740768; cSyncDp148=1669740768; cSyncDp149v2=1669740768; cSyncDp151=1669740768; cSyncDp178=1669740768; cSyncDp179=1669740768; cSyncDp186=1669740768; cSyncDp221=1669740768
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 29 Nov 2022 16:52:49 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mediatoday.ru/core/match.gif?s=32&id=0A0909B0E0388663E201077902634441
200 OK 43 B URL HTTP/2 mediatoday.ru/core/match.gif?s=32&id=0A0909B0E0388663E201077902634441
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /core/match.gif?s=32&id=0A0909B0E0388663E201077902634441 HTTP/1.1
Host: mediatoday.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.2
date: Tue, 29 Nov 2022 16:52:49 GMT
content-type: image/gif
content-length: 43
p3p: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
cache-control: no-cache, max-age=0, must-revalidate, no-store
pragma: no-cache
expires: Thursday, 01-Jan-1970 00:00:00 GMT
set-cookie: idntfy=VUAJS52w4lERCqm; expires=Fri, 26-Nov-2032 16:52:49 GMT; domain=mediatoday.ru; path=/core; SameSite=None; Secure
X-Firefox-Spdy: h2
sync.upravel.com/sape/sync
302 Found 0 B URL HTTP/2 sync.upravel.com/sape/sync
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 29 Nov 2022 16:52:49 GMT
content-type: image/png
content-length: 0
location: https://sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
set-cookie: session_tptc=1669740769236;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
session_tptc-legacy=1669740769236;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
www.acint.net/match?dp=126&euid=6438f7ad-a643-4838-7a64-abc517158044
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=126&euid=6438f7ad-a643-4838-7a64-abc517158044
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=126&euid=6438f7ad-a643-4838-7a64-abc517158044 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=sAkJCmOGOOB5BwHiQURjAv/xbPoBFTPZeVgo1eUHS+vUk0qN; cSyncDp7v2=1669740768; cSyncDp14v3=1669740768; cSyncDp17=1669740768; cSyncDp32=1669740768; cSyncDp45v3=1669740768; cSyncDp53=1669740768; cSyncDp54v2=1669740768; cSyncDp62=1669740768; cSyncDp67v2=1669740768; cSyncDp68=1669740768; cSyncDp71=1669740768; cSyncDp77=1669740768; cSyncDp84=1669740768; cSyncDp85=1669740768; cSyncDp95v3=1669740768; cSyncDp101=1669740768; cSyncDp104v2=1669740768; cSyncDp107=1669740768; cSyncDp110=1669740768; cSyncDp111v2=1669740768; cSyncDp112v2=1669740768; cSyncDp125v2=1669740768; cSyncDp126=1669740768; cSyncDp127=1669740768; cSyncDp129=1669740768; cSyncDp136v2=1669740768; cSyncDp138=1669740768; cSyncDp146=1669740768; cSyncDp148=1669740768; cSyncDp149v2=1669740768; cSyncDp151=1669740768; cSyncDp178=1669740768; cSyncDp179=1669740768; cSyncDp186=1669740768; cSyncDp221=1669740768
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 29 Nov 2022 16:52:49 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 21f0f9e8c27f0710173535d10434c08d
034a44832a61c779932be899727e3ac12e71db3f
d5f0357c1c0bd94f23175c7d8d007a8c5c9c00ba9ad98fed9aa16ad6972d834d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 11:26:44 GMT
Expires: Sun, 04 Dec 2022 11:26:43 GMT
Etag: "034a44832a61c779932be899727e3ac12e71db3f"
Cache-Control: max-age=411833,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 771cdb1faa6b0afe-OSL
www.acint.net/match?dp=127&euid=fjg4K13b3jVl42QNKF6g
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=127&euid=fjg4K13b3jVl42QNKF6g
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=127&euid=fjg4K13b3jVl42QNKF6g HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=sAkJCmOGOOB5BwHiQURjAv/xbPoBFTPZeVgo1eUHS+vUk0qN; cSyncDp7v2=1669740768; cSyncDp14v3=1669740768; cSyncDp17=1669740768; cSyncDp32=1669740768; cSyncDp45v3=1669740768; cSyncDp53=1669740768; cSyncDp54v2=1669740768; cSyncDp62=1669740768; cSyncDp67v2=1669740768; cSyncDp68=1669740768; cSyncDp71=1669740768; cSyncDp77=1669740768; cSyncDp84=1669740768; cSyncDp85=1669740768; cSyncDp95v3=1669740768; cSyncDp101=1669740768; cSyncDp104v2=1669740768; cSyncDp107=1669740768; cSyncDp110=1669740768; cSyncDp111v2=1669740768; cSyncDp112v2=1669740768; cSyncDp125v2=1669740768; cSyncDp126=1669740768; cSyncDp127=1669740768; cSyncDp129=1669740768; cSyncDp136v2=1669740768; cSyncDp138=1669740768; cSyncDp146=1669740768; cSyncDp148=1669740768; cSyncDp149v2=1669740768; cSyncDp151=1669740768; cSyncDp178=1669740768; cSyncDp179=1669740768; cSyncDp186=1669740768; cSyncDp221=1669740768
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 29 Nov 2022 16:52:49 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sape
302 Moved Temporarily 0 B URL HTTP/1.1 sync.bumlam.com/?src=sape
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sape HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQ0MWIxZjY3NC03MDA2LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Mon, 24 Nov 2042 16:52:49 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync.bumlam.com/?src=sape&s_data=CAIQARjh8ZicBqIBEEGx9nRwBhHthuAAJZDAZHw*
ETag: 41b1f674-7006-11ed-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
Access-Control-Allow-Origin: https://acint.net
Access-Control-Allow-Credentials: true
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6fd105d27beebbe7df8ca8ae6eaabf91
8b1b23b1c6c117c8b8093b64c04d3f0e1ba114f5
7e8dcea46878a1b704a1e086b299fc17586264d8b4f8f6c60112ead8a5667e24
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7E8DCEA46878A1B704A1E086B299FC17586264D8B4F8F6C60112EAD8A5667E24"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16800
Expires: Tue, 29 Nov 2022 21:32:49 GMT
Date: Tue, 29 Nov 2022 16:52:49 GMT
Connection: keep-alive
www.acint.net/match?dp=111&euid=7f38ec49-dbb5-4937-8d1d-6ab1dfa41112
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=111&euid=7f38ec49-dbb5-4937-8d1d-6ab1dfa41112
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=111&euid=7f38ec49-dbb5-4937-8d1d-6ab1dfa41112 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=sAkJCmOGOOB5BwHiQURjAv/xbPoBFTPZeVgo1eUHS+vUk0qN; cSyncDp7v2=1669740768; cSyncDp14v3=1669740768; cSyncDp17=1669740768; cSyncDp32=1669740768; cSyncDp45v3=1669740768; cSyncDp53=1669740768; cSyncDp54v2=1669740768; cSyncDp62=1669740768; cSyncDp67v2=1669740768; cSyncDp68=1669740768; cSyncDp71=1669740768; cSyncDp77=1669740768; cSyncDp84=1669740768; cSyncDp85=1669740768; cSyncDp95v3=1669740768; cSyncDp101=1669740768; cSyncDp104v2=1669740768; cSyncDp107=1669740768; cSyncDp110=1669740768; cSyncDp111v2=1669740768; cSyncDp112v2=1669740768; cSyncDp125v2=1669740768; cSyncDp126=1669740768; cSyncDp127=1669740768; cSyncDp129=1669740768; cSyncDp136v2=1669740768; cSyncDp138=1669740768; cSyncDp146=1669740768; cSyncDp148=1669740768; cSyncDp149v2=1669740768; cSyncDp151=1669740768; cSyncDp178=1669740768; cSyncDp179=1669740768; cSyncDp186=1669740768; cSyncDp221=1669740768
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 29 Nov 2022 16:52:49 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ads.adlook.me/csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
302 Found 43 B URL HTTP/2 ads.adlook.me/csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
IP
ASN #48096 Enterprise Cloud Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://acint.net/match?dp=110&euid=6cb0b4571a6e416ab87a18d03ee3d14d
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=6cb0b4571a6e416ab87a18d03ee3d14d; expires=Tue, 28 Nov 2023 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
date: Tue, 29 Nov 2022 16:52:48 GMT
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sap1&s_data=CAIQARjh8ZicBmIgMEEwOTA5QjBFMDM4ODY2M0UyMDEwNzc5MDI2MzQ0NDGiARBBrR0-cAYR7asVACWQyCQ3
200 OK 0 B URL HTTP/1.1 sync.bumlam.com/?src=sap1&s_data=CAIQARjh8ZicBmIgMEEwOTA5QjBFMDM4ODY2M0UyMDEwNzc5MDI2MzQ0NDGiARBBrR0-cAYR7asVACWQyCQ3
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&s_data=CAIQARjh8ZicBmIgMEEwOTA5QjBFMDM4ODY2M0UyMDEwNzc5MDI2MzQ0NDGiARBBrR0-cAYR7asVACWQyCQ3 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQ0MWFkMWQzZS03MDA2LTExZWQtYWIxNS0wMDI1OTBjODI0Mzc*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQ0MWFkMWQzZS03MDA2LTExZWQtYWIxNS0wMDI1OTBjODI0Mzc*; Path=/; Expires=Mon, 24 Nov 2042 16:52:49 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
cs.agency2.ru/p?ssp=sp&uid=0A0909B0E0388663E201077902634441
301 Moved Permanently 0 B URL HTTP/1.1 cs.agency2.ru/p?ssp=sp&uid=0A0909B0E0388663E201077902634441
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&uid=0A0909B0E0388663E201077902634441 HTTP/1.1
Host: cs.agency2.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Length: 0
Connection: keep-alive
Server: fasthttp
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.acint.net/match?dp=186&euid=8b33f509-1114-45e4-a6eb-19df5b1815b1
Set-Cookie: uuid=8b33f509-1114-45e4-a6eb-19df5b1815b1; expires=Mon, 20 Nov 2023 16:52:49 GMT; domain=agency2.ru; path=/; secure; SameSite=None
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.107.44
dmp.gotechnology.io/match/sape?id=0A0909B0E0388663E201077902634441
302 Found 0 B URL HTTP/2 dmp.gotechnology.io/match/sape?id=0A0909B0E0388663E201077902634441
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=0A0909B0E0388663E201077902634441 HTTP/1.1
Host: dmp.gotechnology.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 29 Nov 2022 16:52:49 GMT
content-length: 0
location: https://dmp.gotechnology.io/match/sape?id=0A0909B0E0388663E201077902634441&chk=1
set-cookie: chk=1; path=/; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
302 Found 0 B URL HTTP/2 sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0 HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: session_tptc=1669740769236
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Tue, 29 Nov 2022 16:52:49 GMT
content-type: image/png
content-length: 0
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: user_id=45c06101-0701-407f-bcc7-3c6219da646d;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
user_id-legacy=45c06101-0701-407f-bcc7-3c6219da646d;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
location: https://www.acint.net/match?dp=71&euid=45c06101-0701-407f-bcc7-3c6219da646d
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sape&s_data=CAIQARjh8ZicBqIBEEGx9nRwBhHthuAAJZDAZHw*
302 Moved Temporarily 0 B URL HTTP/1.1 sync.bumlam.com/?src=sape&s_data=CAIQARjh8ZicBqIBEEGx9nRwBhHthuAAJZDAZHw*
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sape&s_data=CAIQARjh8ZicBqIBEEGx9nRwBhHthuAAJZDAZHw* HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQ0MWIxZjY3NC03MDA2LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQ0MWIxZjY3NC03MDA2LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Mon, 24 Nov 2042 16:52:49 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: https://pix.bumlam.com/sync/sape/sync_ok?guid=41b1f674-7006-11ed-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
Access-Control-Allow-Origin: https://acint.net
Access-Control-Allow-Credentials: true
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8e16786a153cd0576dfb21cafea05a69
084b0d65656787181fa663d9e1c16d15fa1e796a
34b67517be5de0fc22e3aa71294a26ae4ea8cb9427d3e86755313f2e328b5c8d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "34B67517BE5DE0FC22E3AA71294A26AE4EA8CB9427D3E86755313F2E328B5C8D"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11895
Expires: Tue, 29 Nov 2022 20:11:04 GMT
Date: Tue, 29 Nov 2022 16:52:49 GMT
Connection: keep-alive
www.acint.net/match?dp=186&euid=8b33f509-1114-45e4-a6eb-19df5b1815b1
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=186&euid=8b33f509-1114-45e4-a6eb-19df5b1815b1
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=186&euid=8b33f509-1114-45e4-a6eb-19df5b1815b1 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=sAkJCmOGOOB5BwHiQURjAv/xbPoBFTPZeVgo1eUHS+vUk0qN; cSyncDp7v2=1669740768; cSyncDp14v3=1669740768; cSyncDp17=1669740768; cSyncDp32=1669740768; cSyncDp45v3=1669740768; cSyncDp53=1669740768; cSyncDp54v2=1669740768; cSyncDp62=1669740768; cSyncDp67v2=1669740768; cSyncDp68=1669740768; cSyncDp71=1669740768; cSyncDp77=1669740768; cSyncDp84=1669740768; cSyncDp85=1669740768; cSyncDp95v3=1669740768; cSyncDp101=1669740768; cSyncDp104v2=1669740768; cSyncDp107=1669740768; cSyncDp110=1669740768; cSyncDp111v2=1669740768; cSyncDp112v2=1669740768; cSyncDp125v2=1669740768; cSyncDp126=1669740768; cSyncDp127=1669740768; cSyncDp129=1669740768; cSyncDp136v2=1669740768; cSyncDp138=1669740768; cSyncDp146=1669740768; cSyncDp148=1669740768; cSyncDp149v2=1669740768; cSyncDp151=1669740768; cSyncDp178=1669740768; cSyncDp179=1669740768; cSyncDp186=1669740768; cSyncDp221=1669740768
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 29 Nov 2022 16:52:49 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
dmp.gotechnology.io/match/sape?id=0A0909B0E0388663E201077902634441&chk=1
302 Found 0 B URL HTTP/2 dmp.gotechnology.io/match/sape?id=0A0909B0E0388663E201077902634441&chk=1
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=0A0909B0E0388663E201077902634441&chk=1 HTTP/1.1
Host: dmp.gotechnology.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: chk=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Tue, 29 Nov 2022 16:52:49 GMT
content-length: 0
location: https://an.yandex.ru/mapuid/gonetdspis/YzZiYmQwN2VjODA2MzU2
set-cookie: pid=YzZiYmQwN2VjODA2MzU2; expires=Wed, 29 Nov 2023 16:52:49 GMT; domain=.gotechnology.io; path=/; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
adlmerge.com/merge_gpsid/?sid=50&id=0A0909B0E0388663E201077902634441
200 OK 43 B URL HTTP/2 adlmerge.com/merge_gpsid/?sid=50&id=0A0909B0E0388663E201077902634441
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /merge_gpsid/?sid=50&id=0A0909B0E0388663E201077902634441 HTTP/1.1
Host: adlmerge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.16.0
date: Tue, 29 Nov 2022 16:52:49 GMT
content-type: image/gif
iseu: eu
X-Firefox-Spdy: h2
www.acint.net/match?dp=71&euid=45c06101-0701-407f-bcc7-3c6219da646d
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=71&euid=45c06101-0701-407f-bcc7-3c6219da646d
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=71&euid=45c06101-0701-407f-bcc7-3c6219da646d HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=sAkJCmOGOOB5BwHiQURjAv/xbPoBFTPZeVgo1eUHS+vUk0qN; cSyncDp7v2=1669740768; cSyncDp14v3=1669740768; cSyncDp17=1669740768; cSyncDp32=1669740768; cSyncDp45v3=1669740768; cSyncDp53=1669740768; cSyncDp54v2=1669740768; cSyncDp62=1669740768; cSyncDp67v2=1669740768; cSyncDp68=1669740768; cSyncDp71=1669740768; cSyncDp77=1669740768; cSyncDp84=1669740768; cSyncDp85=1669740768; cSyncDp95v3=1669740768; cSyncDp101=1669740768; cSyncDp104v2=1669740768; cSyncDp107=1669740768; cSyncDp110=1669740768; cSyncDp111v2=1669740768; cSyncDp112v2=1669740768; cSyncDp125v2=1669740768; cSyncDp126=1669740768; cSyncDp127=1669740768; cSyncDp129=1669740768; cSyncDp136v2=1669740768; cSyncDp138=1669740768; cSyncDp146=1669740768; cSyncDp148=1669740768; cSyncDp149v2=1669740768; cSyncDp151=1669740768; cSyncDp178=1669740768; cSyncDp179=1669740768; cSyncDp186=1669740768; cSyncDp221=1669740768
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 29 Nov 2022 16:52:49 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
302 Found 0 B URL HTTP/1.1 ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D HTTP/1.1
Host: ssp.bestssp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.16.1
Date: Tue, 29 Nov 2022 16:52:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.acint.net/match?dp=95&euid=FOJLKTMO
Set-Cookie: uid=FOJLKTMO; Expires=Tue, 29 Nov 2032 00:00:00 GMT; mf2=1; Expires=Thu, 29 Dec 2022 00:00:00 GMT;
www.acint.net/match?dp=95&euid=FOJLKTMO
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=95&euid=FOJLKTMO
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=95&euid=FOJLKTMO HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=sAkJCmOGOOB5BwHiQURjAv/xbPoBFTPZeVgo1eUHS+vUk0qN; cSyncDp7v2=1669740768; cSyncDp14v3=1669740768; cSyncDp17=1669740768; cSyncDp32=1669740768; cSyncDp45v3=1669740768; cSyncDp53=1669740768; cSyncDp54v2=1669740768; cSyncDp62=1669740768; cSyncDp67v2=1669740768; cSyncDp68=1669740768; cSyncDp71=1669740768; cSyncDp77=1669740768; cSyncDp84=1669740768; cSyncDp85=1669740768; cSyncDp95v3=1669740768; cSyncDp101=1669740768; cSyncDp104v2=1669740768; cSyncDp107=1669740768; cSyncDp110=1669740768; cSyncDp111v2=1669740768; cSyncDp112v2=1669740768; cSyncDp125v2=1669740768; cSyncDp126=1669740768; cSyncDp127=1669740768; cSyncDp129=1669740768; cSyncDp136v2=1669740768; cSyncDp138=1669740768; cSyncDp146=1669740768; cSyncDp148=1669740768; cSyncDp149v2=1669740768; cSyncDp151=1669740768; cSyncDp178=1669740768; cSyncDp179=1669740768; cSyncDp186=1669740768; cSyncDp221=1669740768
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 29 Nov 2022 16:52:49 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16986
Expires: Tue, 29 Nov 2022 21:35:55 GMT
Date: Tue, 29 Nov 2022 16:52:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16986
Expires: Tue, 29 Nov 2022 21:35:55 GMT
Date: Tue, 29 Nov 2022 16:52:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16986
Expires: Tue, 29 Nov 2022 21:35:55 GMT
Date: Tue, 29 Nov 2022 16:52:49 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 83c1fedec73299637cc7dc47c48af758
2e3f7326aeea6be8a34bf2c39b34862c07bfdc41
1fea143e23bb0156062f4c06569824900a67ed83cb99fd635d4c4ab968dc65e9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4916
x-amzn-requestid: b8c80a6c-e3f1-4f20-beb8-27b0af760692
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYcrELFoAMFaeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d450-155cfb365525173c0ede8adb;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:06:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Twtw6dO3pjTB9OLi0HliKKCDgCuHRqgtx4PFTczrZQ9f8JztgXZoSg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 03:01:17 GMT
age: 49892
etag: "2e3f7326aeea6be8a34bf2c39b34862c07bfdc41"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f434933b5bd6377d299ada22d1ae7ef
075531f525e625b117b2497f31139c9824d0e9c5
b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 02:55:32 GMT
age: 50237
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc326607e-c0fa-4e9d-b8d4-1c9173793bed.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc326607e-c0fa-4e9d-b8d4-1c9173793bed.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cce27a1fe8c0222811a5ce0e7f89e1cb
28c165bac8cf68cd1b0763c311aece00672cb3a5
4530e34a47ef78c2c2b0d34a0511253a61f1927b192ab42f82361002ff10819e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc326607e-c0fa-4e9d-b8d4-1c9173793bed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9376
x-amzn-requestid: c52b3092-90d2-4289-b6e0-ab99c9d4710a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPmz3EVUoAMFWUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382eb4b-39f46c89238eff696e9f2dba;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 04:44:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ofQEhaEiX1vE25a_1xHeab9Px9zgGpk8omlX_aHmLE1oN1aZTPzWxQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:58:57 GMT
age: 68032
etag: "28c165bac8cf68cd1b0763c311aece00672cb3a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabddece8-6c4f-4cb5-9041-4d427b16b826.jpeg
200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabddece8-6c4f-4cb5-9041-4d427b16b826.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a2a5c8d4113d282600462749315f2c4f
e2b4d2e15bb7c086333c0da438873e4c139ba931
9b5d0e5dd11d4cbf1c78a71730cd63544170c91ab635bf3cf917827ac84874e6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabddece8-6c4f-4cb5-9041-4d427b16b826.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4417
x-amzn-requestid: 01de83c2-51d2-4329-98f6-09a0edf46942
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNnGEcRIAMFaXA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852960-34583b6c588a0e937fcfaa46;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Jb1eLyzn88lV_UTId-Fl3OnftDn8c7o5j8d16_nzHCNST_68MZ1pvA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:50:08 GMT
age: 68561
etag: "e2b4d2e15bb7c086333c0da438873e4c139ba931"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 03014221d7f49b50ffc2d1b0a0e75457
772d86ad983042a728ee3490630a9cf1134ad0dd
81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10176
x-amzn-requestid: 768fc69c-e91b-4dd9-8add-63634762b2d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMpbgEFOIAMF71A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bc49-21756db31c4714af0553f21b;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:12:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jS-AS3x8V3XacXRNkU63UJjBxA6unvBer5WcxUYseR5p4eZPK64o2g==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 04:52:21 GMT
age: 43228
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdef9eb6-c1f1-4337-aff8-0986561782c7.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdef9eb6-c1f1-4337-aff8-0986561782c7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5d574c4db20a68295dbd06cb08f5990b
433061bbb226048765a711deca3026ee3e52372f
8cc1a4d18e242f8bfc8ab94637f635b73554b903462c29b06d0ec67872542afb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdef9eb6-c1f1-4337-aff8-0986561782c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9203
x-amzn-requestid: 8cba52d6-3c1c-495c-bb9d-3ba6f0adc7e1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cHcHmGmQoAMF6dQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fa6fd-73abfa592ff223061401af9a;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 17:16:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UmhWm03jrsV8dFagrzIA0E-8eL8dykoO5kw3cYOBd172dCGqNdAX-Q==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 04:05:38 GMT
age: 46031
etag: "433061bbb226048765a711deca3026ee3e52372f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9e2b7f44b678bb0ae88d0460745b8543
6342d988e047e8fdbb4c71ee4d08a27b105bba92
1f253663cac91a97345ec90dc8d608b9cbd6c324a3b4e5625ff7fc7a0a5330db
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F253663CAC91A97345EC90DC8D608B9CBD6C324A3B4E5625FF7FC7A0A5330DB"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2686
Expires: Tue, 29 Nov 2022 17:37:35 GMT
Date: Tue, 29 Nov 2022 16:52:49 GMT
Connection: keep-alive
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 70a07ca957ddca6f2ea2daf7da04f81f
0f26cc18dafa36f7b32b741b08e0282bbf434345
581d82dc972065e728f29295dac1616d5f13ddff3270e101adf8f0b2a2219bf6
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sat, 03 Dec 2022 15:31:26 GMT
ETag: "0f26cc18dafa36f7b32b741b08e0282bbf434345"
Last-Modified: Tue, 29 Nov 2022 15:31:27 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 471
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771cdb236993b4f4-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1cfa609ebdf236e2f3e3ff25dd05caf
c8117b0187d4d9021ed1a42907bd93d24ed4ebf0
7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 16:52:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 70a07ca957ddca6f2ea2daf7da04f81f
0f26cc18dafa36f7b32b741b08e0282bbf434345
581d82dc972065e728f29295dac1616d5f13ddff3270e101adf8f0b2a2219bf6
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sat, 03 Dec 2022 15:31:26 GMT
ETag: "0f26cc18dafa36f7b32b741b08e0282bbf434345"
Last-Modified: Tue, 29 Nov 2022 15:31:27 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 471
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771cdb2379bcb4f4-OSL
ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691
302 Moved Temporarily 0 B URL HTTP/1.1 ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691 HTTP/1.1
Host: ad.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-control: no-cache, max-age=0, must-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
Set-Cookie: cid=-4317287027; expires=Thu, 28 Nov 2024 16:52:49 GMT; path=/; domain=.adriver.ru; SameSite=None; Secure
Location: /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-4317287027
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 342a40dfdf02e2855bec281be0af6815
0b68216f54d6d466b28b0c581ff1fc578fa03ebb
0bc2a54f29c9c093d34ad80e3af901ce4af85c877381cb84a6f8fd604875b898
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0BC2A54F29C9C093D34AD80E3AF901CE4AF85C877381CB84A6F8FD604875B898"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2708
Expires: Tue, 29 Nov 2022 17:37:57 GMT
Date: Tue, 29 Nov 2022 16:52:49 GMT
Connection: keep-alive
cm.g.doubleclick.net/pixel?google_nid=agentstvo_sape_limited&google_hm=CgkJsOA4hmPiAQd5AmNEQQ
200 OK 170 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=agentstvo_sape_limited&google_hm=CgkJsOA4hmPiAQd5AmNEQQ
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash e7673c60af825466f83d46da72ca1635
fc0fcbee0835709ba2d28798a612bfd687903fb5
0b8a20373c6dd04e091902226d922b3688143a8938afb9d283d889de7b55ceb5
GET /pixel?google_nid=agentstvo_sape_limited&google_hm=CgkJsOA4hmPiAQd5AmNEQQ HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
date: Tue, 29 Nov 2022 16:52:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: HTTP server (unknown)
content-length: 170
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=153&external_id=0A0909B0E0388663E201077902634441
200 OK 42 B URL HTTP/1.1 ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=153&external_id=0A0909B0E0388663E201077902634441
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cgi-bin/sync.cgi?dsp_id=153&external_id=0A0909B0E0388663E201077902634441 HTTP/1.1
Host: ssp.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
ocsp.globalsign.com/gseccovsslca2018
200 OK 937 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash a56ba3e65d5f95dabaeb4fd5467bedef
11e4c01d5cd5c233e191062fa583058aa38e15ab
ada52587b65d780d567f95988c2b4ea2ff2b4a844fbad5e1a8e7ce802852fe58
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: application/ocsp-response
Content-Length: 937
Connection: keep-alive
Expires: Sat, 03 Dec 2022 15:32:13 GMT
ETag: "11e4c01d5cd5c233e191062fa583058aa38e15ab"
Last-Modified: Tue, 29 Nov 2022 15:32:14 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2406
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771cdb23ca35b4f4-OSL
tag.digitaltarget.ru/adcm.js
200 OK 3.1 kB URL HTTP/1.1 tag.digitaltarget.ru/adcm.js
IP
File type ASCII text, with very long lines (3051), with no line terminators
Hash e7097284185069f52fc736bcd50cda13
1cdfdf2d869841202079ddf91e0a00a8610812e6
40f2a96f78f4c8484e9da6e172f5ddd3e4d7786ca29e04b96e1067a365190e80
GET /adcm.js HTTP/1.1
Host: tag.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: application/javascript
Content-Length: 3051
Last-Modified: Tue, 29 Nov 2022 16:34:21 GMT
Connection: keep-alive
ETag: "6386348d-beb"
Accept-Ranges: bytes
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 77318ad6c0f6c3afd05e156ab54bab88
068b6246631920d626bf809616dd9f6ea0a0cca7
182652b787af56bad84615a74b938ca580097f1140584f6d7b0be23703aa456c
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sat, 03 Dec 2022 15:11:45 GMT
ETag: "068b6246631920d626bf809616dd9f6ea0a0cca7"
Last-Modified: Tue, 29 Nov 2022 15:11:46 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 107
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771cdb240aa6b4f4-OSL
faq7.ru/images/loveplanet.gif
200 OK 6.2 kB URL HTTP/1.1 faq7.ru/images/loveplanet.gif
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type GIF image data, version 89a, 120 x 60\012- data
Hash 893db3a9bf6afc47ed38629743e33ff0
d64a4878b97a48a0f842c48ea9aa70c9e491a0e2
9e2c4204cdf51db95c6d15247213c72e74d1972493cab534e118da77e7edbc06
GET /images/loveplanet.gif HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/gif
Content-Length: 6188
Connection: keep-alive
Last-Modified: Sun, 27 Mar 2022 16:44:45 GMT
Accept-Ranges: bytes
faq7.ru/themes/templates/scrolltobottom.png
200 OK 2.3 kB URL HTTP/1.1 faq7.ru/themes/templates/scrolltobottom.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 56 x 30, 8-bit/color RGB, non-interlaced\012- data
Hash 9742f054cb49a72057b6015006ffea8c
017a2e400afae7b3b0150337700c65f4367d5839
b6252bc738d151a12640f4f946d2a6446d3b3f12a26338bd609fe5d1e0fa933c
GET /themes/templates/scrolltobottom.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/png
Content-Length: 2294
Connection: keep-alive
Last-Modified: Tue, 24 Sep 2013 13:55:39 GMT
Accept-Ranges: bytes
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/admin.png
200 OK 472 B URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/admin.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash 866f2f3b6feeef57e7473e74e6973f50
4cbf86eb10bd082b02d1667e45ff778c7631cf4a
25bb27f5f14e5163c9dd73c55d18600441ce5b8198350e66da6e7c1e7967ceea
GET /infusions/hayaletsevgili_online_users_panel/images/admin.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/png
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/footer_sol.png
200 OK 1.4 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/footer_sol.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 110 x 89, 8-bit/color RGBA, non-interlaced\012- data
Hash 3225d1d8cb532b4ccb66587b66e932f5
a2c204ae5c5816497193ed6fc23c589cd9490bf3
367ea106144396bc041b910dc42957084bc61c37e35617957fb02cc312f42c41
GET /themes/faq7_new/images/footer_sol.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167; _ym_uid=1669740767350330186; _ym_d=1669740767
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/png
Content-Length: 1358
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/footer_orta.png
200 OK 593 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/footer_orta.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 110 x 89, 8-bit colormap, non-interlaced\012- data
Hash 0ac4a6a866974c24abe9b52bd2634df3
b77013e015176b7e9949af086283294d9b03e462
44b086bcf1e37e2a2ef39ff27890672501a4446fd08467fd2e97dd52c320cdb0
GET /themes/faq7_new/images/footer_orta.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167; _ym_uid=1669740767350330186; _ym_d=1669740767
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/png
Content-Length: 593
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/footer_sag.png
200 OK 750 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/footer_sag.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 57 x 89, 8-bit/color RGBA, non-interlaced\012- data
Hash 43d4c670b38c9e2194e74ed0dba778f4
8d5795fb6bcbbefa7b28f57ad18f4a14b3e48953
3f5a00d025bc5cd85baebefad3fc414cb2f19b30eba01ff7528869a6fec4f3cb
GET /themes/faq7_new/images/footer_sag.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167; _ym_uid=1669740767350330186; _ym_d=1669740767
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/png
Content-Length: 750
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
ocsp.sectigo.com/
200 OK 472 B IP
Hash 234a4a3c9c97d9e0e2cf3ad636b261a2
c86bd7e17dadc388154f74cb8cf8428afb2e5cd1
03c44be1aeb057ccc44b023524358f834522f123189eafdc01a9d5e06b16e225
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2022 04:09:16 GMT
Expires: Tue, 06 Dec 2022 04:09:15 GMT
Etag: "c86bd7e17dadc388154f74cb8cf8428afb2e5cd1"
Cache-Control: max-age=558385,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 771cdb23df56b4fd-OSL
ad.mail.ru/cm.gif?p=48&id=0A0909B0E0388663E201077902634441
200 OK 43 B URL HTTP/2 ad.mail.ru/cm.gif?p=48&id=0A0909B0E0388663E201077902634441
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /cm.gif?p=48&id=0A0909B0E0388663E201077902634441 HTTP/1.1
Host: ad.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 16:52:49 GMT
content-type: image/gif
content-length: 43
set-cookie: VID=04aTrD2N34oE0027mq1le0YE:::0-0-0-8a091a1:CAASEEwNqu_V0iDHy-krJgjtyJMaYJVJs6RiNM1Aq1nVPvLatIbkrllygeWs10de640kKsNjsJtzAm5K22IjK-qtBvmUmJAOtWqG8QdSm9tvxEvnNpyApGX7i_aUGrDJjkYli9Zs6Cgb5jeiiu_9oRv3k10k4w; path=/; expires=Thu, 30-Nov-23 16:52:49 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
expires: Tue, 29 Nov 2022 22:52:49 GMT
cache-control: max-age=21600
last-modified: Tue, 29 Nov 2022 16:52:49 GMT
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: require-corp
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 8d9cf2ff10312fde8deb0aebec8b0a86
5701cf0751f5294e0407af847e55735bf4571b8e
10b08fbaebde8185e5186229b29133f5282c205b8768ce1ea18d19b82b5571a1
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sat, 03 Dec 2022 14:54:46 GMT
ETag: "5701cf0751f5294e0407af847e55735bf4571b8e"
Last-Modified: Tue, 29 Nov 2022 14:54:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1319
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771cdb242e80b4f7-OSL
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/sadmin.png
200 OK 460 B URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/sadmin.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash 811c619e9c5e4d01f1d4f04a182426a3
b131747b733290cf7e0a8a9f7ac3b699a40d27ca
fc09383faf569e0a6470ff9267f24cc289ec7f567d127766f0601d1fa611dad0
GET /infusions/hayaletsevgili_online_users_panel/images/sadmin.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/png
Content-Length: 460
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/member.png
200 OK 1.5 kB URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/member.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash e83e604605dca02dd1bfc2ae97321031
99a02e39b710687ee7cd6c9d439716b129f74580
e9041471c7f3a53fd8084d44791b0700b8dd85bf673a38f8e7b2768214bad23a
GET /infusions/hayaletsevgili_online_users_panel/images/member.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/png
Content-Length: 1515
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash a48d094871e47d16bdcee89ece8e5151
e91d913e79b9281510fa80c07dfd45ab4fed4059
1fb9a439129236b2af944b42c7b1a45c8037ee652df4c7ea42ac422506ab3a5a
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 29 Nov 2022 16:52:50 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 28 Nov 2022 21:47:43 GMT
Expires: Tue, 29 Nov 2022 21:47:43 GMT
ETag: "e91d913e79b9281510fa80c07dfd45ab4fed4059"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.usertrust.com/
200 OK 472 B IP
Hash e29e1b6a4d7d8b622c0811f54ace7327
562bfa8688eba658bf77c7e51ef2e5a720b7b86d
15d20b692ecc0e6b10dd88945e5cdec4db6f4b98b4d06d55222e2df2d2ea0c40
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 28 Nov 2022 04:18:21 GMT
Expires: Mon, 05 Dec 2022 04:18:20 GMT
Etag: "562bfa8688eba658bf77c7e51ef2e5a720b7b86d"
Cache-Control: max-age=601365,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 826
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771cdb242edab511-OSL
ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D
302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Wed, 29 Nov 2023 16:52:50 GMT; Path=/; Domain=.betweendigital.com
tuuid=08b8c1bb-ffbc-524d-a8e0-c7c4cb66ff26; Max-Age=31536000; Expires=Wed, 29 Nov 2023 16:52:50 GMT; Path=/; Domain=.betweendigital.com
ut=Y4Y44gAAgOhHUwO7ZAkSzItWLMbyG0oKIDnNHA==; Max-Age=31536000; Expires=Wed, 29 Nov 2023 16:52:50 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/guest.png
200 OK 1.6 kB URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/guest.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 899c4542cebec8946af0dd230db941b1
721ce680c80039cbd5ef1bbb7f261842b0a734aa
739fe5c2f1c7de8c13378c2f0e752109ccebebbaf51ff0deb7604dd893be2972
GET /infusions/hayaletsevgili_online_users_panel/images/guest.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/png
Content-Length: 1562
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/uye.png
200 OK 439 B URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/uye.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash 176ee4cc6f666369fb39425d6d28087a
3944c6acbe2e8207bb2694b2a3b06416dbb0f9ab
354e4c28047959c7dd030d46d641d062df0395f641085bba0eeff711f00ad85a
GET /infusions/hayaletsevgili_online_users_panel/images/uye.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Type: image/png
Content-Length: 439
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
sync.adkernel.com/user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D
200 OK 0 B URL HTTP/1.1 sync.adkernel.com/user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D
IP
ASN #36057 WEBAIR-INTERNET-MTL
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D HTTP/1.1
Host: sync.adkernel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Length: 0
Connection: close
ocsp.sectigo.com/
200 OK 471 B IP
Hash 94761464ba8a8f704548cecc2ce63423
38d09e0ce1f8bcf76c31c1f27bc823e8453c6d85
51c92436ab7e9890dba871ca7f0d0eb6e4b3fc1ae9217e30ba9960eaa7e5c735
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 16:52:50 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2022 14:18:43 GMT
Expires: Tue, 06 Dec 2022 14:18:42 GMT
Etag: "38d09e0ce1f8bcf76c31c1f27bc823e8453c6d85"
Cache-Control: max-age=594952,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 771cdb244fd6b4fd-OSL
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash a663e7102b9f94ba8fa613f515409242
8742d4f445292ef8d4787f36f55f51b0360b8b1a
ad4c149a18b970d4817b0a1b80c88629b64856069d469f7f59456a77e309db9c
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 16:52:50 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 03 Dec 2022 13:56:27 GMT
ETag: "8742d4f445292ef8d4787f36f55f51b0360b8b1a"
Last-Modified: Tue, 29 Nov 2022 13:56:28 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771cdb246b1ab4f4-OSL
redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
302 Found 0 B URL HTTP/2 redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect HTTP/1.1
Host: redirect.frontend.weborama.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: Weborama Collect Frontend
date: Tue, 29 Nov 2022 16:52:49 GMT
content-length: 0
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=2293317323
access-control-allow-origin: *
p3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM"
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: Tue, 03 Jul 2001 06:00:00 GMT
last-modified: Tue, 29 Nov 2022 16:52:49 GMT
set-cookie: AFFICHE_W=YzvYuQpOH6Vj42; expires=Wed, 27 Dec 2023 16:52:49 GMT; domain=.weborama.fr; path=/; secure; SameSite=None
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f1cfa609ebdf236e2f3e3ff25dd05caf
c8117b0187d4d9021ed1a42907bd93d24ed4ebf0
7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 16:52:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s7.addthis.com/l10n/client.ru.min.json
200 OK 2.3 kB URL HTTP/2 s7.addthis.com/l10n/client.ru.min.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (3622), with no line terminators
Hash 10ea9c2d50791faafa23799f60982fc1
19958856c7530cb4cb2c1cb15f0e70f13ca3a685
7cdb1dd577df8592637f78d44db8deb3600c1e921c566a91738df2e5904c7d17
GET /l10n/client.ru.min.json HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://faq7.ru
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/json
last-modified: Tue, 10 Sep 2019 15:15:17 GMT
etag: W/"5d77be05-16d7"
cache-control: public, s-maxage=604800
access-control-allow-origin: *
timing-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 2276
date: Tue, 29 Nov 2022 16:52:50 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 29 Nov 2022 16:52:50 GMT
access-control-allow-origin: *
etag: "6384bff1-2b"
expires: Tue, 29 Nov 2022 17:52:50 GMT
accept-ranges: bytes
last-modified: Mon, 28 Nov 2022 17:04:33 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 234a4a3c9c97d9e0e2cf3ad636b261a2
c86bd7e17dadc388154f74cb8cf8428afb2e5cd1
03c44be1aeb057ccc44b023524358f834522f123189eafdc01a9d5e06b16e225
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 16:52:50 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2022 04:09:16 GMT
Expires: Tue, 06 Dec 2022 04:09:15 GMT
Etag: "c86bd7e17dadc388154f74cb8cf8428afb2e5cd1"
Cache-Control: max-age=558384,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 771cdb238e960afe-OSL
sape-sync.rutarget.ru/sync
302 Moved Temporarily 0 B URL HTTP/1.1 sape-sync.rutarget.ru/sync
IP
ASN #208677 Cloud technology Limited (Ltd.)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync HTTP/1.1
Host: sape-sync.rutarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Tue, 29 Nov 2022 16:52:49 GMT
Content-Length: 0
Connection: close
Location: https://www.acint.net/match?dp=104&euid=CZXWUw_UQoYg
P3P: CP="This is not a P3P policy. Please visit http://rutarget.ru/p3p/ to get more information."
Set-Cookie: userId=CZXWUw_UQoYg; Path=/; Domain=.rutarget.ru; Expires=Sun, 28 May 2023 16:52:49 GMT; SameSite=None; Secure
faq7.disqus.com/count.js
301 Moved Permanently 219 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 6b22a8f71ae72ac4b781cff49386dfa9
a8e7202517458752851aeb18c9fb770e931fec34
186d5321baf20106cb6361d9ec524b818d876d773a5bd9dd5530ae5889d74be3
GET /count.js HTTP/1.1
Host: faq7.disqus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 219
Server: Varnish
Location: https://faq7.disqus.com/count.js
Content-Type: text/html
Cache-Control: public, max-age=31536000
Date: Tue, 29 Nov 2022 16:52:50 GMT
Strict-Transport-Security: max-age=300; includeSubdomains
Cross-Origin-Resource-Policy: cross-origin
Link: <https://disqus.com>; rel=preconnect, <https://c.disquscdn.com>; rel=preconnect
x01.aidata.io/0.gif?pid=9401454&id=0A0909B0E0388663E201077902634441
302 Found 0 B URL HTTP/2 x01.aidata.io/0.gif?pid=9401454&id=0A0909B0E0388663E201077902634441
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0.gif?pid=9401454&id=0A0909B0E0388663E201077902634441 HTTP/1.1
Host: x01.aidata.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 29 Nov 2022 16:52:50 GMT
content-length: 0
location: https://x01.aidata.io/0.gif?pid=9401454&id=0A0909B0E0388663E201077902634441&bounce=1
expires: Tue, 29 Nov 2022 16:52:49 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Tue, 29 Nov 2022 16:52:49 GMT
set-cookie: __upin=vekqmh5Ksdx0VVGFD8tEZw;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
__upints=1669740770;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2
z.moatads.com/addthismoatframe568911941483/moatframe.js
200 OK 948 B URL HTTP/2 z.moatads.com/addthismoatframe568911941483/moatframe.js
IP
File type ASCII text, with very long lines (523)
Hash f14b4e1f799b14f798a195f43cf58376
b6fd3b3d407fb4c0a00fb8a31862235e2a6e0a86
92ed3e9fda5fa4d738ff4d9023846b56633617363dda6a750cacb4fba53241ac
GET /addthismoatframe568911941483/moatframe.js HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: e0HboiVQpjIDEK8WTxqU5+8G8wOtu9bNCFY72alTHLP0/Yb+qoiTOxu6fad89ebRofzHxENxOOg=
x-amz-request-id: 61EC92F13BB22DD4
last-modified: Fri, 08 Nov 2019 20:13:52 GMT
etag: "f14b4e1f799b14f798a195f43cf58376"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
content-length: 948
server: AmazonS3
vary: Accept-Encoding
cache-control: max-age=58677
date: Tue, 29 Nov 2022 16:52:50 GMT
X-Firefox-Spdy: h2
status.thawte.com/
200 OK 471 B IP
Hash 1a09cbf8d9d975e605106eb254cf09f6
163374d69938c622e9917faa2f6ed4277e40b7eb
5c49378e1ad8589b0fa184af0a8a25b4b6b07da233be7fa8147cd2ed33dd9880
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3445
Cache-Control: max-age=108692
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 16:52:50 GMT
Etag: "63853101-1d7"
Expires: Wed, 30 Nov 2022 23:04:22 GMT
Last-Modified: Mon, 28 Nov 2022 22:06:57 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
faq7.ru/images/favicon.ico
200 OK 1.4 kB URL HTTP/1.1 faq7.ru/images/favicon.ico
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel\012- data
Hash ac0a5a8a6ef2526e94d654f23d4b5d4d
17bf741a8533da11cb197fe64d976d2dd3c3800e
3a396355158a20eb2461ffc49fc4d9c75ebcb9b03a3439331b2213488d999ae9
GET /images/favicon.ico HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1669737167; _ym_uid=1669740767350330186; _ym_d=1669740767; __atuvc=1%7C48; __atuvs=638638dfb8e086aa000; fid=83523806-dd72-48d8-891f-ed5105d86467
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:50 GMT
Content-Type: image/x-icon
Content-Length: 1406
Connection: keep-alive
Last-Modified: Sun, 30 Oct 2011 21:55:08 GMT
Accept-Ranges: bytes
mc.yandex.ru/watch/82412725/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A690459878712%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165247%3Aet%3A1669740767%3Ac%3A1%3Arn%3A936181476%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C%2C%2C%2C%2C%3Ans%3A1669740765765%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740768%3At%3AFAQ7.ru&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/82412725/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A690459878712%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165247%3Aet%3A1669740767%3Ac%3A1%3Arn%3A936181476%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C%2C%2C%2C%2C%3Ans%3A1669740765765%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740768%3At%3AFAQ7.ru&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 2853d6a23686df2bd5058f061f08d046
ea0ef06256f5f6582437778006fc565c8c3aa17d
245e9b0702a701da2d8b30d232d27d16b86e8b39085fac07afaa044a00da50cd
GET /watch/82412725/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A690459878712%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165247%3Aet%3A1669740767%3Ac%3A1%3Arn%3A936181476%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C%2C%2C%2C%2C%3Ans%3A1669740765765%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740768%3At%3AFAQ7.ru&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://faq7.ru
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Tue, 29 Nov 2022 16:52:50 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://faq7.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 16:52:50 GMT
last-modified: Tue, 29-Nov-2022 16:52:50 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/5046166/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A989319875367%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165247%3Aet%3A1669740768%3Ac%3A1%3Arn%3A787587795%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C%2C%2C%2C%2C%3Ans%3A1669740765765%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740768%3At%3AFAQ7.ru&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 407 B URL HTTP/2 mc.yandex.ru/watch/5046166/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A989319875367%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165247%3Aet%3A1669740768%3Ac%3A1%3Arn%3A787587795%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C%2C%2C%2C%2C%3Ans%3A1669740765765%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740768%3At%3AFAQ7.ru&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash 862972adf89baf258788127a0a8e5d8c
ec5a2e9d96a00c27dd310483dffad9d80b0fe3c4
c82a12fc00137cbb3786bcd9be14151f8968de299bebb2c9d1be1f67429d91c4
GET /watch/5046166/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A989319875367%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165247%3Aet%3A1669740768%3Ac%3A1%3Arn%3A787587795%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C%2C%2C%2C%2C%3Ans%3A1669740765765%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740768%3At%3AFAQ7.ru&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://faq7.ru
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 407
date: Tue, 29 Nov 2022 16:52:50 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://faq7.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 16:52:50 GMT
last-modified: Tue, 29-Nov-2022 16:52:50 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=73&external_user_id=0A0909B0E0388663E201077902634441
302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=73&external_user_id=0A0909B0E0388663E201077902634441
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=73&external_user_id=0A0909B0E0388663E201077902634441 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /match?bidder_id=73&external_user_id=0A0909B0E0388663E201077902634441&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Wed, 29 Nov 2023 16:52:50 GMT; Path=/; Domain=.betweendigital.com
tuuid=cdf81499-f62c-524d-b275-35b1d1f30d53; Max-Age=31536000; Expires=Wed, 29 Nov 2023 16:52:50 GMT; Path=/; Domain=.betweendigital.com
ut=Y4Y44gADkhCTDwhNhlNFX72acjHClki5NOdYUA==; Max-Age=31536000; Expires=Wed, 29 Nov 2023 16:52:50 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f50fd635895870df33a17fe377a6a038
dd65dfbbc810b095432cfd59f971af04a9e31ab7
ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 16:52:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bs.yandex.ru/informer/5046166/3_0_FFFFFFFF_E6E6FAFF_0_pageviews
404 Not Found 30 B URL HTTP/1.1 bs.yandex.ru/informer/5046166/3_0_FFFFFFFF_E6E6FAFF_0_pageviews
IP
Hash 8f889ce120663ba6351f119abf0775d2
2de758ede24bb91a19907af16a3292a6cc94956d
927eec04729424945b7bdc7ee3f9d226f033a032e83012e2c61adc3c570b0a44
GET /informer/5046166/3_0_FFFFFFFF_E6E6FAFF_0_pageviews HTTP/1.1
Host: bs.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 404 Not Found
Content-Encoding: gzip
Content-Type: text/plain; charset=UTF-8
Date: Tue, 29 Nov 2022 16:52:50 GMT
P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
Transfer-Encoding: chunked
X-XSS-Protection: 1; mode=block
mc.yandex.ru/watch/82412725?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A690459878712%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165247%3Aet%3A1669740767%3Ac%3A1%3Arn%3A936181476%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C%2C%2C%2C%2C%3Ans%3A1669740765765%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740768%3At%3AFAQ7.ru&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
302 Found 871 B URL HTTP/2 mc.yandex.ru/watch/82412725?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A690459878712%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165247%3Aet%3A1669740767%3Ac%3A1%3Arn%3A936181476%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C%2C%2C%2C%2C%3Ans%3A1669740765765%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740768%3At%3AFAQ7.ru&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP
File type gzip compressed data, max compression, from Unix\012- data
Hash a487039f9b553cb4f6928743872234e9
b3d835075d1983a8c2fe716285d173fcc3708f9c
364f622ba24e063adcee84f132da53c6e6071745f04a00d10937663deb24b822
GET /watch/82412725?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A690459878712%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165247%3Aet%3A1669740767%3Ac%3A1%3Arn%3A936181476%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C%2C%2C%2C%2C%3Ans%3A1669740765765%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740768%3At%3AFAQ7.ru&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://faq7.ru
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/82412725/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A690459878712%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165247%3Aet%3A1669740767%3Ac%3A1%3Arn%3A936181476%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C%2C%2C%2C%2C%3Ans%3A1669740765765%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740768%3At%3AFAQ7.ru&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 29 Nov 2022 16:52:50 GMT
access-control-allow-origin: http://faq7.ru
set-cookie: yandexuid=3257210141669740770; Expires=Wed, 29-Nov-2023 16:52:50 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=3257210141669740770; Expires=Wed, 29-Nov-2023 16:52:50 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=720478491669740770; Path=/; SameSite=None; Secure
i=0jLn696GzE/mprbfXiDCELtU9o44nc63Pg6WroPnYDhbW9BwbND/8OFq4ByHTi6rospBfiZBO100oS/qTh2Ch11VnlE=; Expires=Fri, 26-Nov-2032 16:52:36 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1701276770.yc.1669740770#1701276770.yrts.1669740770#1701276770.yrtsi.1669740770; Expires=Wed, 29-Nov-2023 16:52:50 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 16:52:50 GMT
last-modified: Tue, 29-Nov-2022 16:52:50 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash a48d094871e47d16bdcee89ece8e5151
e91d913e79b9281510fa80c07dfd45ab4fed4059
1fb9a439129236b2af944b42c7b1a45c8037ee652df4c7ea42ac422506ab3a5a
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 29 Nov 2022 16:52:50 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 28 Nov 2022 21:47:43 GMT
Expires: Tue, 29 Nov 2022 21:47:43 GMT
ETag: "e91d913e79b9281510fa80c07dfd45ab4fed4059"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
px.adhigh.net/p/cm/sape?u=0A0909B0E0388663E201077902634441
302 Found 0 B URL HTTP/2 px.adhigh.net/p/cm/sape?u=0A0909B0E0388663E201077902634441
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/cm/sape?u=0A0909B0E0388663E201077902634441 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 29 Nov 2022 16:52:50 GMT
content-length: 0
x-backend-id: f13-ru
access-control-allow-origin: *
access-control-allow-credentials: true
set-cookie: gi_u=8JHUYqhpMvV.AikABlGExE4zMA;Path=/;Domain=.adhigh.net;Expires=Wed, 29-Nov-2023 16:52:50 GMT;Secure;SameSite=None
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
location: https://px.adhigh.net/p/cm/sape?u=0A0909B0E0388663E201077902634441&bounced=1
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 29 Nov 2022 16:41:08 GMT
expires: Tue, 29 Nov 2022 18:41:08 GMT
cache-control: public, max-age=7200
age: 702
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sm.rtb.mts.ru/p?ssp=sape&id=0A0909B0E0388663E201077902634441
301 Moved Permanently 0 B URL HTTP/1.1 sm.rtb.mts.ru/p?ssp=sape&id=0A0909B0E0388663E201077902634441
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sape&id=0A0909B0E0388663E201077902634441 HTTP/1.1
Host: sm.rtb.mts.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 29 Nov 2022 16:52:50 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin
Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
Vary: Origin
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://sm.rtb.mts.ru/match/second?ssp=30&exu=0A0909B0E0388663E201077902634441
Set-Cookie: dspid=e71c3a66-bcc1-4fd6-8a22-2ce8602f729b; expires=Mon, 20 Nov 2023 16:52:50 GMT; domain=.mts.ru; path=/; secure; SameSite=None
ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Wed, 29 Nov 2023 16:52:50 GMT; Path=/; Domain=.betweendigital.com
tuuid=fc23a41f-431d-524d-85f5-b8a4e6738046; Max-Age=31536000; Expires=Wed, 29 Nov 2023 16:52:50 GMT; Path=/; Domain=.betweendigital.com
ut=Y4Y44gAC1pD607ysIxrTa0ieoAA5hGZ7bcINlQ==; Max-Age=31536000; Expires=Wed, 29 Nov 2023 16:52:50 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=73&external_user_id=0A0909B0E0388663E201077902634441&crf=1
200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=73&external_user_id=0A0909B0E0388663E201077902634441&crf=1
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=73&external_user_id=0A0909B0E0388663E201077902634441&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Wed, 29 Nov 2023 16:52:50 GMT; Path=/; Domain=.betweendigital.com
tuuid=2e8a70c8-3402-524d-a0cb-6f2ec34d57cc; Max-Age=31536000; Expires=Wed, 29 Nov 2023 16:52:50 GMT; Path=/; Domain=.betweendigital.com
ut=Y4Y44gAGQZDpdxh_QlRsOUXZYhdLXpod0lkdGQ==; Max-Age=31536000; Expires=Wed, 29 Nov 2023 16:52:50 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f50fd635895870df33a17fe377a6a038
dd65dfbbc810b095432cfd59f971af04a9e31ab7
ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 16:52:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
an.yandex.ru/mapuid/sapeis/0A0909B0E0388663E201077902634441
302 Found 20 B URL HTTP/2 an.yandex.ru/mapuid/sapeis/0A0909B0E0388663E201077902634441
IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /mapuid/sapeis/0A0909B0E0388663E201077902634441 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
timing-allow-origin: *
location: https://an.yandex.ru/mapuid/sapeis/0A0909B0E0388663E201077902634441?redir-setuniq=1
date: Tue, 29 Nov 2022 16:52:49 GMT
set-cookie: yandexuid=5669274611669740769; domain=.yandex.ru; path=/; expires=Fri, 26-Nov-2032 16:52:49 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29 Nov 2022 16:52:49 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Tue, 29 Nov 2022 16:52:49 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
www.acint.net/match?dp=104&euid=CZXWUw_UQoYg
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=104&euid=CZXWUw_UQoYg
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=104&euid=CZXWUw_UQoYg HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=sAkJCmOGOOB5BwHiQURjAv/xbPoBFTPZeVgo1eUHS+vUk0qN; cSyncDp7v2=1669740768; cSyncDp14v3=1669740768; cSyncDp17=1669740768; cSyncDp32=1669740768; cSyncDp45v3=1669740768; cSyncDp53=1669740768; cSyncDp54v2=1669740768; cSyncDp62=1669740768; cSyncDp67v2=1669740768; cSyncDp68=1669740768; cSyncDp71=1669740768; cSyncDp77=1669740768; cSyncDp84=1669740768; cSyncDp85=1669740768; cSyncDp95v3=1669740768; cSyncDp101=1669740768; cSyncDp104v2=1669740768; cSyncDp107=1669740768; cSyncDp110=1669740768; cSyncDp111v2=1669740768; cSyncDp112v2=1669740768; cSyncDp125v2=1669740768; cSyncDp126=1669740768; cSyncDp127=1669740768; cSyncDp129=1669740768; cSyncDp136v2=1669740768; cSyncDp138=1669740768; cSyncDp146=1669740768; cSyncDp148=1669740768; cSyncDp149v2=1669740768; cSyncDp151=1669740768; cSyncDp178=1669740768; cSyncDp179=1669740768; cSyncDp186=1669740768; cSyncDp221=1669740768
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 29 Nov 2022 16:52:50 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
an.yandex.ru/mapuid/gonetdspis/YzZiYmQwN2VjODA2MzU2
302 Found 420 B URL HTTP/2 an.yandex.ru/mapuid/gonetdspis/YzZiYmQwN2VjODA2MzU2
IP
Hash fad36432ee3c1d4b9b3c667886219960
64ca06276eb4fc83cce7f0aece3e88d1eea9be53
b7910efb7eb573e4eeb7172ed0d68135a7feb001f3e0a044aac9cc68f646edbc
GET /mapuid/gonetdspis/YzZiYmQwN2VjODA2MzU2 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
timing-allow-origin: *
location: https://an.yandex.ru/mapuid/gonetdspis/YzZiYmQwN2VjODA2MzU2?redir-setuniq=1
date: Tue, 29 Nov 2022 16:52:50 GMT
set-cookie: yandexuid=338856841669740770; domain=.yandex.ru; path=/; expires=Fri, 26-Nov-2032 16:52:50 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29 Nov 2022 16:52:50 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Tue, 29 Nov 2022 16:52:50 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
x01.aidata.io/0.gif?pid=9401454&id=0A0909B0E0388663E201077902634441&bounce=1
204 No Content 0 B URL HTTP/2 x01.aidata.io/0.gif?pid=9401454&id=0A0909B0E0388663E201077902634441&bounce=1
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0.gif?pid=9401454&id=0A0909B0E0388663E201077902634441&bounce=1 HTTP/1.1
Host: x01.aidata.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 29 Nov 2022 16:52:50 GMT
expires: Tue, 29 Nov 2022 16:52:49 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Tue, 29 Nov 2022 16:52:49 GMT
set-cookie: __upin=BKobeldP+tUI8QSEMex+Zg;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
__upints=1669740770;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2
mc.yandex.ru/watch/90979946/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%22638638df-8dd2-f0y3-hho9-s1dkeyczbfjk%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A4%3Adp%3A0%3Als%3A723184038335%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165249%3Aet%3A1669740769%3Ac%3A1%3Arn%3A965423591%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C38%2C%2C%2C%2C1895%3Ans%3A1669740765765%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740769%3At%3AFAQ7.ru&t=gdpr%2814%29mc%28cm-1-tl-1%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 407 B URL HTTP/2 mc.yandex.ru/watch/90979946/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%22638638df-8dd2-f0y3-hho9-s1dkeyczbfjk%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A4%3Adp%3A0%3Als%3A723184038335%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165249%3Aet%3A1669740769%3Ac%3A1%3Arn%3A965423591%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C38%2C%2C%2C%2C1895%3Ans%3A1669740765765%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740769%3At%3AFAQ7.ru&t=gdpr%2814%29mc%28cm-1-tl-1%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash 79efb53014a7957d2bbf71cfd06724a3
7d98eac9c0e47da82c22c696ca0d0f042f6e2089
5a9e03dc73f7b4fcae617a58e2984c27e8d365861781c37308ef412161d9d709
GET /watch/90979946/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%22638638df-8dd2-f0y3-hho9-s1dkeyczbfjk%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A4%3Adp%3A0%3Als%3A723184038335%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165249%3Aet%3A1669740769%3Ac%3A1%3Arn%3A965423591%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C38%2C%2C%2C%2C1895%3Ans%3A1669740765765%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740769%3At%3AFAQ7.ru&t=gdpr%2814%29mc%28cm-1-tl-1%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://faq7.ru
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 407
date: Tue, 29 Nov 2022 16:52:50 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://faq7.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 16:52:50 GMT
last-modified: Tue, 29-Nov-2022 16:52:50 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
sm.rtb.mts.ru/match/second?ssp=30&exu=0A0909B0E0388663E201077902634441
200 OK 0 B URL HTTP/1.1 sm.rtb.mts.ru/match/second?ssp=30&exu=0A0909B0E0388663E201077902634441
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/second?ssp=30&exu=0A0909B0E0388663E201077902634441 HTTP/1.1
Host: sm.rtb.mts.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:50 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin
Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
Vary: Origin
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
px.adhigh.net/p/cm/sape?u=0A0909B0E0388663E201077902634441&bounced=1
200 OK 49 B URL HTTP/2 px.adhigh.net/p/cm/sape?u=0A0909B0E0388663E201077902634441&bounced=1
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
File type GIF image data, version 89a, 1 x 1\012- data
Hash 889bc1fffc025af4685839fb516a0b8b
7f105137a4eafe93213ecd8cc34dd907c340467c
d0409a1b73dab4e29dc40f92fb431fa9133baa23b4a1ffae4897f39068110e32
GET /p/cm/sape?u=0A0909B0E0388663E201077902634441&bounced=1 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 16:52:50 GMT
content-type: image/gif
content-length: 49
x-backend-id: f13-ru
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
X-Firefox-Spdy: h2
tag.digitaltarget.ru/processor.js?i=608855821199169
200 OK 16 kB URL HTTP/1.1 tag.digitaltarget.ru/processor.js?i=608855821199169
IP
File type ASCII text, with very long lines (15897), with no line terminators
Hash c9571a7ce0a22f154c74bdc8e35523e0
101feba577e71fc076ea5bf3f4af08b5d3fe988d
51cf59da6b7e03337540ee3ab9f8e135ff2ead958475c1bacc8683df57823fb0
GET /processor.js?i=608855821199169 HTTP/1.1
Host: tag.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:50 GMT
Content-Type: application/javascript
Content-Length: 15897
Last-Modified: Tue, 29 Nov 2022 16:34:22 GMT
Connection: keep-alive
ETag: "6386348e-3e19"
Accept-Ranges: bytes
top-fwz1.mail.ru/counter?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.4192858439257455
302 Found 0 B URL HTTP/2 top-fwz1.mail.ru/counter?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.4192858439257455
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.4192858439257455 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 29 Nov 2022 16:52:50 GMT
content-length: 0
location: https://top-fwz1.mail.ru/counter2?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.4192858439257455
set-cookie: FTID=1RMYgQ0tkIIE:1669740770:1837830:::; path=/; expires=Thu, 30-Nov-23 16:52:50 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter2?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.4192858439257455
200 OK 903 B URL HTTP/2 top-fwz1.mail.ru/counter2?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.4192858439257455
IP
File type GIF image data, version 87a, 88 x 31\012- data
Hash cbf676b4e068feac54536b451f176622
070b8ec90abe2cbabc12c7442cf3cc6e973823e1
1917d9e746d13e9eae6c330cf76d8d481e9112fb2b73834118ace92264ba85ca
GET /counter2?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.4192858439257455 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 16:52:50 GMT
content-type: image/gif
content-length: 903
set-cookie: FTID=1RMYgQ0tkIIE:1669740770:1837830:::; path=/; expires=Thu, 30-Nov-23 16:52:50 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-4317287027
302 Moved Temporarily 40 B URL HTTP/1.1 ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-4317287027
IP
File type ASCII text, with CRLF line terminators
Hash 251630b588179b239e8fab1ac9ef6d3a
91b91a97bc481dd2bbd5e0f3fea6ba1c4e843882
c95661e0ef6975b1df5361695a439f71a021d72c345023c3e668e84f35b3c38b
GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-4317287027 HTTP/1.1
Host: ad.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Tue, 29 Nov 2022 16:52:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-control: no-cache, no-cache=Set-Cookie, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref="//adriver.ru/w3c/p3p.xml", CP="NON DSP COR CURa ADMa DEVa OUR BUS UNI COM NAV INT STA"
Set-Cookie: cid=0; expires=Thu, 28 Nov 2024 16:52:49 GMT; path=/; domain=.adriver.ru;
uid=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain=.adriver.ru
Location: https://www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b791e396b363c462c259e47f24d08e02
13f187bcacde8ed75da820ced57d0ebe5e8f3351
daac86ec5af86c6307b74075b1b158bf881957605a7234ce1c2306e8071e8547
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DAAC86EC5AF86C6307B74075B1B158BF881957605A7234CE1C2306E8071E8547"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11027
Expires: Tue, 29 Nov 2022 19:56:37 GMT
Date: Tue, 29 Nov 2022 16:52:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b791e396b363c462c259e47f24d08e02
13f187bcacde8ed75da820ced57d0ebe5e8f3351
daac86ec5af86c6307b74075b1b158bf881957605a7234ce1c2306e8071e8547
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DAAC86EC5AF86C6307B74075B1B158BF881957605A7234CE1C2306E8071E8547"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11027
Expires: Tue, 29 Nov 2022 19:56:37 GMT
Date: Tue, 29 Nov 2022 16:52:50 GMT
Connection: keep-alive
www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
302 Found 154 B URL HTTP/2 www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=sAkJCmOGOOB5BwHiQURjAv/xbPoBFTPZeVgo1eUHS+vUk0qN; cSyncDp7v2=1669740768; cSyncDp14v3=1669740768; cSyncDp17=1669740768; cSyncDp32=1669740768; cSyncDp45v3=1669740768; cSyncDp53=1669740768; cSyncDp54v2=1669740768; cSyncDp62=1669740768; cSyncDp67v2=1669740768; cSyncDp68=1669740768; cSyncDp71=1669740768; cSyncDp77=1669740768; cSyncDp84=1669740768; cSyncDp85=1669740768; cSyncDp95v3=1669740768; cSyncDp101=1669740768; cSyncDp104v2=1669740768; cSyncDp107=1669740768; cSyncDp110=1669740768; cSyncDp111v2=1669740768; cSyncDp112v2=1669740768; cSyncDp125v2=1669740768; cSyncDp126=1669740768; cSyncDp127=1669740768; cSyncDp129=1669740768; cSyncDp136v2=1669740768; cSyncDp138=1669740768; cSyncDp146=1669740768; cSyncDp148=1669740768; cSyncDp149v2=1669740768; cSyncDp151=1669740768; cSyncDp178=1669740768; cSyncDp179=1669740768; cSyncDp186=1669740768; cSyncDp221=1669740768
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 29 Nov 2022 16:52:50 GMT
content-type: text/html
content-length: 154
location: https://ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=0A0909B0E0388663E201077902634441
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
dmg.digitaltarget.ru/1/1093/i/i?i=263200267587453.57683992913775&a=77&e=0A0909B0E0388663E201077902634441&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:0A0909B0E0388663E201077902634441.sync:up.xdua:duAq8NKoJLDPuxi7Por932fm.xps:xps48bYlhgkZgApPBLz2dXn9L.dn:acint__net.adcm:hit.tg:adcmjs_noorient
307 Temporary Redirect 0 B URL HTTP/1.1 dmg.digitaltarget.ru/1/1093/i/i?i=263200267587453.57683992913775&a=77&e=0A0909B0E0388663E201077902634441&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:0A0909B0E0388663E201077902634441.sync:up.xdua:duAq8NKoJLDPuxi7Por932fm.xps:xps48bYlhgkZgApPBLz2dXn9L.dn:acint__net.adcm:hit.tg:adcmjs_noorient
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/1093/i/i?i=263200267587453.57683992913775&a=77&e=0A0909B0E0388663E201077902634441&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:0A0909B0E0388663E201077902634441.sync:up.xdua:duAq8NKoJLDPuxi7Por932fm.xps:xps48bYlhgkZgApPBLz2dXn9L.dn:acint__net.adcm:hit.tg:adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Tue, 29 Nov 2022 16:52:50 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1669740770614&i=263200267587453.57683992913775&a=77&e=0A0909B0E0388663E201077902634441&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:0A0909B0E0388663E201077902634441.sync:up.xdua:duAq8NKoJLDPuxi7Por932fm.xps:xps48bYlhgkZgApPBLz2dXn9L.dn:acint__net.adcm:hit.tg:adcmjs_noorient
Set-Cookie: viuserid=dNsJ.9ecbI4ebSb7.MJM; Max-Age=93312000; Expires=Thu, 13 Nov 2025 16:52:50 GMT; SameSite=None; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly
Request-Time: 0
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/1/1093/i/i?i=263200267587453.977920666366295&a=77&e=0A0909B0E0388663E201077902634441&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:0A0909B0E0388663E201077902634441.sync:up.xdua:duAq8NKoJLDPuxi7Por932fm.xps:xps48bYlhgkZgApPBLz2dXn9L.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
307 Temporary Redirect 0 B URL HTTP/1.1 dmg.digitaltarget.ru/1/1093/i/i?i=263200267587453.977920666366295&a=77&e=0A0909B0E0388663E201077902634441&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:0A0909B0E0388663E201077902634441.sync:up.xdua:duAq8NKoJLDPuxi7Por932fm.xps:xps48bYlhgkZgApPBLz2dXn9L.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/1093/i/i?i=263200267587453.977920666366295&a=77&e=0A0909B0E0388663E201077902634441&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:0A0909B0E0388663E201077902634441.sync:up.xdua:duAq8NKoJLDPuxi7Por932fm.xps:xps48bYlhgkZgApPBLz2dXn9L.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Tue, 29 Nov 2022 16:52:50 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1669740770599&i=263200267587453.977920666366295&a=77&e=0A0909B0E0388663E201077902634441&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:0A0909B0E0388663E201077902634441.sync:up.xdua:duAq8NKoJLDPuxi7Por932fm.xps:xps48bYlhgkZgApPBLz2dXn9L.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
Set-Cookie: viuserid=hXV5mR2ccAFlkCR7.QoH; Max-Age=93312000; Expires=Thu, 13 Nov 2025 16:52:50 GMT; SameSite=None; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly
Request-Time: 0
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=0A0909B0E0388663E201077902634441
200 OK 42 B URL HTTP/1.1 ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=0A0909B0E0388663E201077902634441
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cgi-bin/sync.cgi?ssp_id=43&external_id=0A0909B0E0388663E201077902634441 HTTP/1.1
Host: ssp.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:50 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1669740770599&i=263200267587453.977920666366295&a=77&e=0A0909B0E0388663E201077902634441&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:0A0909B0E0388663E201077902634441.sync:up.xdua:duAq8NKoJLDPuxi7Por932fm.xps:xps48bYlhgkZgApPBLz2dXn9L.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
200 OK 64 B URL HTTP/1.1 dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1669740770599&i=263200267587453.977920666366295&a=77&e=0A0909B0E0388663E201077902634441&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:0A0909B0E0388663E201077902634441.sync:up.xdua:duAq8NKoJLDPuxi7Por932fm.xps:xps48bYlhgkZgApPBLz2dXn9L.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ffd585dfb1ac6320633a0be46d579437
5a6033d23bc9cd5d1de9ee61de69a44428086dcb
df18d81deb0cc1c48ae87e6481bb4ee375b40cce0fec3d226e002704d49f6cc8
GET /awg/custom/1093/i/i?call_source=awg&ts=1669740770599&i=263200267587453.977920666366295&a=77&e=0A0909B0E0388663E201077902634441&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:0A0909B0E0388663E201077902634441.sync:up.xdua:duAq8NKoJLDPuxi7Por932fm.xps:xps48bYlhgkZgApPBLz2dXn9L.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:50 GMT
Content-Type: image/gif
Content-Length: 64
Connection: keep-alive
Vary: Accept-Encoding
Request-Time: 11
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1669740770614&i=263200267587453.57683992913775&a=77&e=0A0909B0E0388663E201077902634441&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:0A0909B0E0388663E201077902634441.sync:up.xdua:duAq8NKoJLDPuxi7Por932fm.xps:xps48bYlhgkZgApPBLz2dXn9L.dn:acint__net.adcm:hit.tg:adcmjs_noorient
200 OK 64 B URL HTTP/1.1 dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1669740770614&i=263200267587453.57683992913775&a=77&e=0A0909B0E0388663E201077902634441&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:0A0909B0E0388663E201077902634441.sync:up.xdua:duAq8NKoJLDPuxi7Por932fm.xps:xps48bYlhgkZgApPBLz2dXn9L.dn:acint__net.adcm:hit.tg:adcmjs_noorient
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ffd585dfb1ac6320633a0be46d579437
5a6033d23bc9cd5d1de9ee61de69a44428086dcb
df18d81deb0cc1c48ae87e6481bb4ee375b40cce0fec3d226e002704d49f6cc8
GET /awg/custom/1093/i/i?call_source=awg&ts=1669740770614&i=263200267587453.57683992913775&a=77&e=0A0909B0E0388663E201077902634441&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:0A0909B0E0388663E201077902634441.sync:up.xdua:duAq8NKoJLDPuxi7Por932fm.xps:xps48bYlhgkZgApPBLz2dXn9L.dn:acint__net.adcm:hit.tg:adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:50 GMT
Content-Type: image/gif
Content-Length: 64
Connection: keep-alive
Vary: Accept-Encoding
Request-Time: 20
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
an.yandex.ru/mapuid/sapeis/0A0909B0E0388663E201077902634441?redir-setuniq=1
200 OK 553 B URL HTTP/2 an.yandex.ru/mapuid/sapeis/0A0909B0E0388663E201077902634441?redir-setuniq=1
IP
Hash 9c9052ccb010f4178a45cf68c2f8330a
16b550728cfac7b1a25e0a71b0997653005da371
45f4a8f2e94eaf3ddc1561b0e74f2318c3fada8c46ddea0e6134ad38fdeaaab8
GET /mapuid/sapeis/0A0909B0E0388663E201077902634441?redir-setuniq=1 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Tue, 29 Nov 2022 16:52:50 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29 Nov 2022 16:52:50 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Tue, 29 Nov 2022 16:52:50 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif; charset=utf-8
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
m.addthis.com/live/red_lojson/300lo.json?si=638638df7d42adf3&bkl=0&bl=1&pdt=705&sid=638638df7d42adf3&pub=ra-63486b56d116b46e&rev=v8.28.8-wp&ln=ru&pc=men&cb=0&ab=-&dp=faq7.ru&fp=error.php%3Fcode%3D404&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=windows-1251&mk=%D0%B8%D0%B3%D1%80%D1%8B%2CLineage%2C%D0%B1%D0%B0%D0%B7%D0%B0%2C%D0%B1%D0%BE%D1%82%D1%8B%2C%D0%BF%D0%BE%D0%B3%D0%BE%D0%B4%D0%B0%2C%D0%BD%D0%BE%D0%B2%D0%BE%D1%81%D1%82%D0%B8%2C%D1%80%D0%B5%D1%84%D0%B5%D1%80%D0%B0%D1%82%D1%8B%2C%D0%BC%D1%83%D0%B7%D1%8B%D0%BA%D0%B0%2C%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%2C%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%2C%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%2Caion%2Ctera%2Clineage%203%2C%D1%81%D0%BA%D1%80%D0%B8%D0%BD%D1%8B%2C%D0%BE%D0%B1%D0%BE%D0%B8%2C%D0%BA%D0%B0%D1%80%D1%82%D0%B8%D0%BD%D0%BA%D0%B8%2C%D0%B7%D0%B0%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%D1%82%D1%8C%2C%D0%B0%D0%BD%D0%BA%D0%B5%D1%82%D1%8B%2C%D1%80%D0%BE%D0%BB%D0%B8%D0%BA%D0%B8%2C%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE%2C%D0%BE%D1%82%D0%B4%D0%BE%D1%85%D0%BD%D1%83%D1%82%D1%8C%2C%D0%BA%D0%B2%D0%B5%D1%81%D1%82%D1%8B%2C%D1%81%D0%B1%D0%BE%D1%80%D0%BA%D0%B8%2C%D1%81%D0%B5%D1%80%D0%B2%D0%B5%D1%80%D0%B0%2Cjava%2C%D0%BA%D0%BB%D0%B0%D1%81%D1%81%D1%8B&colc=1669740767687&jsl=1&uvs=638638dfb8e086aa000&skipb=1&callback=addthis.cbs.jsonp__33295411621366580
200 OK 89 B URL HTTP/2 m.addthis.com/live/red_lojson/300lo.json?si=638638df7d42adf3&bkl=0&bl=1&pdt=705&sid=638638df7d42adf3&pub=ra-63486b56d116b46e&rev=v8.28.8-wp&ln=ru&pc=men&cb=0&ab=-&dp=faq7.ru&fp=error.php%3Fcode%3D404&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=windows-1251&mk=%D0%B8%D0%B3%D1%80%D1%8B%2CLineage%2C%D0%B1%D0%B0%D0%B7%D0%B0%2C%D0%B1%D0%BE%D1%82%D1%8B%2C%D0%BF%D0%BE%D0%B3%D0%BE%D0%B4%D0%B0%2C%D0%BD%D0%BE%D0%B2%D0%BE%D1%81%D1%82%D0%B8%2C%D1%80%D0%B5%D1%84%D0%B5%D1%80%D0%B0%D1%82%D1%8B%2C%D0%BC%D1%83%D0%B7%D1%8B%D0%BA%D0%B0%2C%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%2C%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%2C%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%2Caion%2Ctera%2Clineage%203%2C%D1%81%D0%BA%D1%80%D0%B8%D0%BD%D1%8B%2C%D0%BE%D0%B1%D0%BE%D0%B8%2C%D0%BA%D0%B0%D1%80%D1%82%D0%B8%D0%BD%D0%BA%D0%B8%2C%D0%B7%D0%B0%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%D1%82%D1%8C%2C%D0%B0%D0%BD%D0%BA%D0%B5%D1%82%D1%8B%2C%D1%80%D0%BE%D0%BB%D0%B8%D0%BA%D0%B8%2C%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE%2C%D0%BE%D1%82%D0%B4%D0%BE%D1%85%D0%BD%D1%83%D1%82%D1%8C%2C%D0%BA%D0%B2%D0%B5%D1%81%D1%82%D1%8B%2C%D1%81%D0%B1%D0%BE%D1%80%D0%BA%D0%B8%2C%D1%81%D0%B5%D1%80%D0%B2%D0%B5%D1%80%D0%B0%2Cjava%2C%D0%BA%D0%BB%D0%B0%D1%81%D1%81%D1%8B&colc=1669740767687&jsl=1&uvs=638638dfb8e086aa000&skipb=1&callback=addthis.cbs.jsonp__33295411621366580
IP
File type ASCII text, with no line terminators
Hash c382d7d1452e72424b4b2862d7ebeb10
f54af3a9e1c81e14c04faabdc5ee68c1bbdb9f90
36292aa6ebc8c06af11a6390854c53276ffcf7287b988f4c0aa0eecc3af79fb2
GET /live/red_lojson/300lo.json?si=638638df7d42adf3&bkl=0&bl=1&pdt=705&sid=638638df7d42adf3&pub=ra-63486b56d116b46e&rev=v8.28.8-wp&ln=ru&pc=men&cb=0&ab=-&dp=faq7.ru&fp=error.php%3Fcode%3D404&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=windows-1251&mk=%D0%B8%D0%B3%D1%80%D1%8B%2CLineage%2C%D0%B1%D0%B0%D0%B7%D0%B0%2C%D0%B1%D0%BE%D1%82%D1%8B%2C%D0%BF%D0%BE%D0%B3%D0%BE%D0%B4%D0%B0%2C%D0%BD%D0%BE%D0%B2%D0%BE%D1%81%D1%82%D0%B8%2C%D1%80%D0%B5%D1%84%D0%B5%D1%80%D0%B0%D1%82%D1%8B%2C%D0%BC%D1%83%D0%B7%D1%8B%D0%BA%D0%B0%2C%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%2C%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%2C%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%2Caion%2Ctera%2Clineage%203%2C%D1%81%D0%BA%D1%80%D0%B8%D0%BD%D1%8B%2C%D0%BE%D0%B1%D0%BE%D0%B8%2C%D0%BA%D0%B0%D1%80%D1%82%D0%B8%D0%BD%D0%BA%D0%B8%2C%D0%B7%D0%B0%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%D1%82%D1%8C%2C%D0%B0%D0%BD%D0%BA%D0%B5%D1%82%D1%8B%2C%D1%80%D0%BE%D0%BB%D0%B8%D0%BA%D0%B8%2C%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE%2C%D0%BE%D1%82%D0%B4%D0%BE%D1%85%D0%BD%D1%83%D1%82%D1%8C%2C%D0%BA%D0%B2%D0%B5%D1%81%D1%82%D1%8B%2C%D1%81%D0%B1%D0%BE%D1%80%D0%BA%D0%B8%2C%D1%81%D0%B5%D1%80%D0%B2%D0%B5%D1%80%D0%B0%2Cjava%2C%D0%BA%D0%BB%D0%B0%D1%81%D1%81%D1%8B&colc=1669740767687&jsl=1&uvs=638638dfb8e086aa000&skipb=1&callback=addthis.cbs.jsonp__33295411621366580 HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 89
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
content-disposition: attachment; filename=1.txt
date: Tue, 29 Nov 2022 16:52:50 GMT
X-Firefox-Spdy: h2
41b1f674-7006-11ed-86e0-002590c0647c.n4.sync.bumlam.com/?src=sape
302 Moved Temporarily 0 B URL HTTP/1.1 41b1f674-7006-11ed-86e0-002590c0647c.n4.sync.bumlam.com/?src=sape
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sape HTTP/1.1
Host: 41b1f674-7006-11ed-86e0-002590c0647c.n4.sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQ0MWIxZjY3NC03MDA2LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Tue, 29 Nov 2022 16:52:51 GMT
Content-Length: 0
Connection: close
Location: https://pix.bumlam.com/sync/sape/done
pix.bumlam.com/sync/sape/done
200 OK 43 B URL HTTP/1.1 pix.bumlam.com/sync/sape/done
IP
ASN #44066 diva-e Datacenters GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /sync/sape/done HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQ0MWIxZjY3NC03MDA2LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 16:52:51 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
www.acint.net/ping/?v=0.4.0&uid=7b7351f8-c746-422a-9255-63bbd53486af&dp=14&tz=%2B00%3A00&nc=40142705&dT=2022-11-29T16%3A52%3A50.791
302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/ping/?v=0.4.0&uid=7b7351f8-c746-422a-9255-63bbd53486af&dp=14&tz=%2B00%3A00&nc=40142705&dT=2022-11-29T16%3A52%3A50.791
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /ping/?v=0.4.0&uid=7b7351f8-c746-422a-9255-63bbd53486af&dp=14&tz=%2B00%3A00&nc=40142705&dT=2022-11-29T16%3A52%3A50.791 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Tue, 29 Nov 2022 16:52:51 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/ping/?v=0.4.0&uid=7b7351f8-c746-422a-9255-63bbd53486af&dp=14&tz=%2B00%3A00&nc=40142705&dT=2022-11-29T16%3A52%3A50.791
www.acint.net/ping/?v=0.4.0&uid=7b7351f8-c746-422a-9255-63bbd53486af&dp=14&tz=%2B00%3A00&nc=40142705&dT=2022-11-29T16%3A52%3A50.791
200 OK 43 B URL HTTP/2 www.acint.net/ping/?v=0.4.0&uid=7b7351f8-c746-422a-9255-63bbd53486af&dp=14&tz=%2B00%3A00&nc=40142705&dT=2022-11-29T16%3A52%3A50.791
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /ping/?v=0.4.0&uid=7b7351f8-c746-422a-9255-63bbd53486af&dp=14&tz=%2B00%3A00&nc=40142705&dT=2022-11-29T16%3A52%3A50.791 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Cookie: aid=sAkJCmOGOOB5BwHiQURjAv/xbPoBFTPZeVgo1eUHS+vUk0qN; cSyncDp7v2=1669740768; cSyncDp14v3=1669740768; cSyncDp17=1669740768; cSyncDp32=1669740768; cSyncDp45v3=1669740768; cSyncDp53=1669740768; cSyncDp54v2=1669740768; cSyncDp62=1669740768; cSyncDp67v2=1669740768; cSyncDp68=1669740768; cSyncDp71=1669740768; cSyncDp77=1669740768; cSyncDp84=1669740768; cSyncDp85=1669740768; cSyncDp95v3=1669740768; cSyncDp101=1669740768; cSyncDp104v2=1669740768; cSyncDp107=1669740768; cSyncDp110=1669740768; cSyncDp111v2=1669740768; cSyncDp112v2=1669740768; cSyncDp125v2=1669740768; cSyncDp126=1669740768; cSyncDp127=1669740768; cSyncDp129=1669740768; cSyncDp136v2=1669740768; cSyncDp138=1669740768; cSyncDp146=1669740768; cSyncDp148=1669740768; cSyncDp149v2=1669740768; cSyncDp151=1669740768; cSyncDp178=1669740768; cSyncDp179=1669740768; cSyncDp186=1669740768; cSyncDp221=1669740768
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 29 Nov 2022 16:52:51 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
v1.addthisedge.com/live/boost/ra-63486b56d116b46e/_ate.track.config_resp
200 OK 768 B URL HTTP/2 v1.addthisedge.com/live/boost/ra-63486b56d116b46e/_ate.track.config_resp
IP
File type ASCII text, with very long lines (2804), with no line terminators
Hash f840fd2450ff82b81ab284d1fdf23824
502f050ef5ee7cafa19f562c07376ead957b93cf
a52586a3ce3d313dbf00fbd59524ee6845d3ca3833aba76131514bbaf372c856
GET /live/boost/ra-63486b56d116b46e/_ate.track.config_resp HTTP/1.1
Host: v1.addthisedge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 768
etag: 754542070--gzip
content-disposition: attachment; filename=1.txt
content-encoding: gzip
cache-control: public, max-age=58, s-maxage=86400
date: Tue, 29 Nov 2022 16:52:52 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js
200 OK 78 kB URL HTTP/2 s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js
IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 9a77dff666eebb6cf4bbc4c67c7b563b
9e98d7824a7b4e34665c2690d6f52caddad1fe4b
6cdf8e597f3cbe759531153fd926d51aeaebd836a1c9bc1436e079645bfd3ad7
GET /static/layers.fa6cd1947ce26e890d3d.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-41cf5"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 77672
date: Tue, 29 Nov 2022 16:52:52 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
s7.addthis.com/static/100.17feec3d215fd90d3df4.js
200 OK 423 B URL HTTP/2 s7.addthis.com/static/100.17feec3d215fd90d3df4.js
IP
File type ASCII text, with very long lines (748), with no line terminators
Hash d7316e741ee91ce7e2f1b2619b70eb7a
244753ff8875cfb3950e4fe646ed0c4c2e798418
a5b148ef03b6547813221988df13f95885e68d91603972f9d1311f601306e94a
GET /static/100.17feec3d215fd90d3df4.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-2ec"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 423
date: Tue, 29 Nov 2022 16:52:52 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
s7.addthis.com/static/159.1c3fceccbc80f2a3615f.js
200 OK 394 B URL HTTP/2 s7.addthis.com/static/159.1c3fceccbc80f2a3615f.js
IP
File type ASCII text, with very long lines (564), with no line terminators
Hash 09d6e31790596b5636e4332b45864d33
078bdaadd33f7e19f624e403959dca3eef1a73d4
42805621588148ebf5f6329a1ff74711c44dd93a4f592264f953ca7f88422b82
GET /static/159.1c3fceccbc80f2a3615f.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-234"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 394
date: Tue, 29 Nov 2022 16:52:52 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
www.odnoklassniki.ru/dk?st.cmd=extLike&uid=0&ref=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404
302 0 B URL HTTP/1.1 www.odnoklassniki.ru/dk?st.cmd=extLike&uid=0&ref=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dk?st.cmd=extLike&uid=0&ref=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404 HTTP/1.1
Host: www.odnoklassniki.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302
Server: Apache
Date: Tue, 29 Nov 2022 16:52:52 GMT
Content-Length: 0
Connection: keep-alive
Location: https://connect.ok.ru/dk?st.cmd=extLike&uid=0&ref=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404
www.odnoklassniki.ru/dk?st.cmd=extLike&uid=1&ref=https%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404
302 0 B URL HTTP/1.1 www.odnoklassniki.ru/dk?st.cmd=extLike&uid=1&ref=https%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dk?st.cmd=extLike&uid=1&ref=https%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404 HTTP/1.1
Host: www.odnoklassniki.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302
Server: Apache
Date: Tue, 29 Nov 2022 16:52:52 GMT
Content-Length: 0
Connection: keep-alive
Location: https://connect.ok.ru/dk?st.cmd=extLike&uid=1&ref=https%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404
an.yandex.ru/mapuid/gonetdspis/YzZiYmQwN2VjODA2MzU2?redir-setuniq=1
200 OK 1.5 kB URL HTTP/2 an.yandex.ru/mapuid/gonetdspis/YzZiYmQwN2VjODA2MzU2?redir-setuniq=1
IP
Hash 15a951794d120e35637f1165d123cf9b
4d2527bdcba370f49ce7f3fc7920aef027b6b774
b094776bd1974ef50aaf73716dff0b95571f773ca692a3ad4d11afb3d6d51367
GET /mapuid/gonetdspis/YzZiYmQwN2VjODA2MzU2?redir-setuniq=1 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Tue, 29 Nov 2022 16:52:50 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29 Nov 2022 16:52:50 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Tue, 29 Nov 2022 16:52:50 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif; charset=utf-8
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 8a72fa53578877ec92394d5cbeaf6460
3a0fcc429a09981582250527aaeb066b041aa446
7d8e6571d393a91209ddb73511a79e3ea91106f5dd013e590c3facc94ae86c20
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 16:52:52 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 03 Dec 2022 14:19:42 GMT
ETag: "3a0fcc429a09981582250527aaeb066b041aa446"
Last-Modified: Tue, 29 Nov 2022 14:19:43 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1609
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771cdb33ff0eb4f4-OSL
vk.com/share.php?act=count&index=1&url=https%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404
301 Moved Permanently 164 B URL HTTP/1.1 vk.com/share.php?act=count&index=1&url=https%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 6d359f551ba4cb27d59e94a6cddaec09
d230318bd921ad8167c2eb9dfdc7b1d7d2c7373f
9ecd8531025e89f5e1ca23d81203a9feddbd5b4b75ca79c9868cb53762293bc8
GET /share.php?act=count&index=1&url=https%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 301 Moved Permanently
Server: kittenx
Date: Tue, 29 Nov 2022 16:52:52 GMT
Content-Type: text/html
Content-Length: 164
Connection: keep-alive
Location: https://vk.com/share.php?act=count&index=1&url=https%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404
X-Frontend: front512004
Access-Control-Expose-Headers: X-Frontend
vk.com/share.php?act=count&index=0&url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404
301 Moved Permanently 164 B URL HTTP/1.1 vk.com/share.php?act=count&index=0&url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 6d359f551ba4cb27d59e94a6cddaec09
d230318bd921ad8167c2eb9dfdc7b1d7d2c7373f
9ecd8531025e89f5e1ca23d81203a9feddbd5b4b75ca79c9868cb53762293bc8
GET /share.php?act=count&index=0&url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 301 Moved Permanently
Server: kittenx
Date: Tue, 29 Nov 2022 16:52:52 GMT
Content-Type: text/html
Content-Length: 164
Connection: keep-alive
Location: https://vk.com/share.php?act=count&index=0&url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404
X-Frontend: front512004
Access-Control-Expose-Headers: X-Frontend
connect.ok.ru/dk?st.cmd=extLike&uid=0&ref=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404
200 OK 70 B URL HTTP/2 connect.ok.ru/dk?st.cmd=extLike&uid=0&ref=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404
IP
File type ASCII text, with no line terminators
Hash 568a1beabe8778874ab93bf0ba2c2e0d
6ff3c7333b25702385c5dabe3f3dfe4050fd394a
a974cd7957213731adec094e1050a568808f44642697fcd43a8938111762dc74
GET /dk?st.cmd=extLike&uid=0&ref=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404 HTTP/1.1
Host: connect.ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: apache
date: Tue, 29 Nov 2022 16:52:52 GMT
content-type: application/javascript;charset=UTF-8
vary: Accept-Encoding
set-cookie: bci=-394729375612316464; Domain=.ok.ru; Expires=Sun, 17-Dec-2090 20:06:59 GMT; Path=/; Secure; HttpOnly
_statid=ba173fb7-f36b-423f-8b6f-fc38bba74f06; Domain=.ok.ru; Expires=Sun, 17-Dec-2090 20:06:59 GMT; Path=/; Secure; HttpOnly
landref=faq7.ru; Domain=.ok.ru; Path=/; Secure
content-security-policy: default-src data: 'self' 'unsafe-inline' 'unsafe-eval' ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me wss://ad.mail.ru *.mail.ru *.imgsmail.ru *.mradx.net *.serving-sys.com *.googleapis.com *.gstatic.com www.google.com https://api-maps.yandex.ru yastatic.net yandex.st *.doubleverify.com *.adsafeprotected.com https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://football.sportmail.ru *.google.ru *.google.com *.googlesyndication.com *.yandex.ru blob:; script-src 'unsafe-inline' 'unsafe-eval' *.mail.ru https://*.mail.ru *.imgsmail.ru *.mradx.net ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me mc.yandex.ru an.yandex.ru yastatic.net yandex.st *.google-analytics.com api-maps.yandex.ru https://api-maps.yandex.ru https://clck.yandex.ru *.googleapis.com *.gstatic.com www.google.com www.youtube.com https://www.youtube.com *.ytimg.com https://*.ytimg.com *.doubleverify.com *.dvtps.com *.doubleclick.net *.googletagservices.com *.googlesyndication.com *.googleadservices.com *.goodgame.ru https://*.goodgame.ru https://*.moatads.com *.adlooxtracking.com *.adlooxtracking.ru *.adsafeprotected.com *.serving-sys.com *.serving-sys.ru *.weborama.fr *.weborama-tech.ru https://enterprise.api-maps.yandex.ru https://suggest-maps.yandex.ru https://*.hit.gemius.pl https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://gum.criteo.com https://football.sportmail.ru *.googletagmanager.com connect.facebook.net *.google.ru *.google.com *.googlesyndication.com yandex.ru; worker-src blob: 'self'; connect-src * wss: blob:; font-src * data: blob:; frame-src * blob: 'self'; img-src * data: blob: about:; media-src * data: blob:; object-src *; report-uri /csp/report;
content-security-policy-report-only: default-src data: blob: about: 'self' 'unsafe-inline' 'unsafe-eval' https: wss:; report-uri /csp/report?always;
cache-control: no-cache, no-store
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=63072000;includeSubdomains;preload
access-control-allow-origin: *
access-control-allow-credentials: true
rendered-blocks: WidgetExtLike
content-encoding: br
X-Firefox-Spdy: h2
vk.com/share.php?act=count&index=0&url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404
200 OK 41 B URL HTTP/2 vk.com/share.php?act=count&index=0&url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404
IP
File type ASCII text, with no line terminators
Hash 6de86497641c67868bfddcbf5a8bf434
6065bb53c9addbda818a6b172597326ebc31e8dc
51d446e1b704e289975e53c6945dee986d432bb439d02a2afcee7ce1b5bddcf8
GET /share.php?act=count&index=0&url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Tue, 29 Nov 2022 16:52:52 GMT
content-type: text/html; charset=windows-1251
content-length: 41
x-powered-by: KPHP/7.4.112768
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Fri, 24 Nov 2023 05:55:48 GMT; path=/; domain=.vk.com
remixstlid=9081031988210801865_wCbZNVoiHAdjzrbnZzbct1ZW7GZy5RoXYKJHZnaIHug; expires=Wed, 29 Nov 2023 16:52:52 GMT; path=/; domain=.vk.com; secure
cache-control: no-store
content-encoding: gzip
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
api-public.addthis.com/url/shares.json?url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&callback=_ate.cbs.rcb_j0tu0
200 OK 53 B URL HTTP/2 api-public.addthis.com/url/shares.json?url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&callback=_ate.cbs.rcb_j0tu0
IP
File type ASCII text, with no line terminators
Hash b25c64bb5a2ad7f586b22673103b36f8
ec01e350f3324f54a9406aa42ff7764554fc82bb
a79894c23c6846c5e0d64164921ba1e2e76e03768f1b329593534ace12585232
GET /url/shares.json?url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&callback=_ate.cbs.rcb_j0tu0 HTTP/1.1
Host: api-public.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/json
cache-control: no-transform, must-revalidate, max-age=0, s-maxage=3600
surrogate-key: faq7.ru/error.php?code=404
last-modified: Tue, 29 Nov 2022 16:52:52 GMT
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 53
date: Tue, 29 Nov 2022 16:52:52 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
api-public.addthis.com/url/shares.json?url=https%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&callback=_ate.cbs.rcb_axwy0
200 OK 53 B URL HTTP/2 api-public.addthis.com/url/shares.json?url=https%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&callback=_ate.cbs.rcb_axwy0
IP
File type ASCII text, with no line terminators
Hash 8859a2e29430e26133edc8b07907a00a
fda2143db0551957caf2a891c6d3568a1e8b49c0
63c7ac88384dbfa0d95d05f527f0e59742ce92f48d61195af336e8deaaebca4c
GET /url/shares.json?url=https%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&callback=_ate.cbs.rcb_axwy0 HTTP/1.1
Host: api-public.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/json
cache-control: no-transform, must-revalidate, max-age=0, s-maxage=3600
surrogate-key: faq7.ru/error.php?code=404
last-modified: Tue, 29 Nov 2022 16:52:52 GMT
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 53
date: Tue, 29 Nov 2022 16:52:52 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
mc.yandex.ru/watch/5046166?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A989319875367%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165247%3Aet%3A1669740768%3Ac%3A1%3Arn%3A787587795%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C%2C%2C%2C%2C%3Ans%3A1669740765765%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740768%3At%3AFAQ7.ru&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/5046166?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A989319875367%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165247%3Aet%3A1669740768%3Ac%3A1%3Arn%3A787587795%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C%2C%2C%2C%2C%3Ans%3A1669740765765%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740768%3At%3AFAQ7.ru&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP
GET /watch/5046166?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A989319875367%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165247%3Aet%3A1669740768%3Ac%3A1%3Arn%3A787587795%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C%2C%2C%2C%2C%3Ans%3A1669740765765%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740768%3At%3AFAQ7.ru&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://faq7.ru
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/5046166/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A2%3Adp%3A0%3Als%3A989319875367%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165247%3Aet%3A1669740768%3Ac%3A1%3Arn%3A787587795%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C%2C%2C%2C%2C%3Ans%3A1669740765765%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740768%3At%3AFAQ7.ru&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 29 Nov 2022 16:52:50 GMT
access-control-allow-origin: http://faq7.ru
set-cookie: yandexuid=8187322561669740770; Expires=Wed, 29-Nov-2023 16:52:50 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=8187322561669740770; Expires=Wed, 29-Nov-2023 16:52:50 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=1108815241669740770; Path=/; SameSite=None; Secure
i=80Fo6VjkzSSPxKWLkUbsGN8wEVcuNPDKguMQy21s1Oe23qE+3vIV2F0w2mUqSR3s0Uo2XEDhC1gSSAMp8rxouuE66mA=; Expires=Fri, 26-Nov-2032 16:52:49 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1701276770.yc.1669740770#1701276770.yrts.1669740770#1701276770.yrtsi.1669740770; Expires=Wed, 29-Nov-2023 16:52:50 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 16:52:50 GMT
last-modified: Tue, 29-Nov-2022 16:52:50 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71281900?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22site_id%22%3A116219%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A3%3Adp%3A0%3Als%3A1213204527469%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165249%3Aet%3A1669740769%3Ac%3A1%3Arn%3A986846424%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C38%2C%2C%2C%2C1895%3Ans%3A1669740765765%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740769%3At%3AFAQ7.ru&t=gdpr(14)mc(cm-1-tl-1)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/71281900?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22site_id%22%3A116219%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A3%3Adp%3A0%3Als%3A1213204527469%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165249%3Aet%3A1669740769%3Ac%3A1%3Arn%3A986846424%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C38%2C%2C%2C%2C1895%3Ans%3A1669740765765%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740769%3At%3AFAQ7.ru&t=gdpr(14)mc(cm-1-tl-1)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP
GET /watch/71281900?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22site_id%22%3A116219%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A3%3Adp%3A0%3Als%3A1213204527469%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165249%3Aet%3A1669740769%3Ac%3A1%3Arn%3A986846424%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C38%2C%2C%2C%2C1895%3Ans%3A1669740765765%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740769%3At%3AFAQ7.ru&t=gdpr(14)mc(cm-1-tl-1)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://faq7.ru
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/71281900/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22site_id%22%3A116219%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A3%3Adp%3A0%3Als%3A1213204527469%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165249%3Aet%3A1669740769%3Ac%3A1%3Arn%3A986846424%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C38%2C%2C%2C%2C1895%3Ans%3A1669740765765%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740769%3At%3AFAQ7.ru&t=gdpr%2814%29mc%28cm-1-tl-1%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 29 Nov 2022 16:52:50 GMT
access-control-allow-origin: http://faq7.ru
set-cookie: yandexuid=1636144781669740770; Expires=Wed, 29-Nov-2023 16:52:50 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=1636144781669740770; Expires=Wed, 29-Nov-2023 16:52:50 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=773098561669740770; Path=/; SameSite=None; Secure
i=cp5DZ9WFLESyvftpfsLVjK+dPMqLPRPDS/LEi359wMdlKfqVK/MUp9zpSA7aYeZd5V+LgL+nwyXmwOSIYV2h1UQbpFg=; Expires=Fri, 26-Nov-2032 16:52:49 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1701276770.yc.1669740770#1701276770.yrts.1669740770#1701276770.yrtsi.1669740770; Expires=Wed, 29-Nov-2023 16:52:50 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 16:52:50 GMT
last-modified: Tue, 29-Nov-2022 16:52:50 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/90979946?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%22638638df-8dd2-f0y3-hho9-s1dkeyczbfjk%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A4%3Adp%3A0%3Als%3A723184038335%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165249%3Aet%3A1669740769%3Ac%3A1%3Arn%3A965423591%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C38%2C%2C%2C%2C1895%3Ans%3A1669740765765%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740769%3At%3AFAQ7.ru&t=gdpr(14)mc(cm-1-tl-1)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/90979946?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%22638638df-8dd2-f0y3-hho9-s1dkeyczbfjk%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A4%3Adp%3A0%3Als%3A723184038335%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165249%3Aet%3A1669740769%3Ac%3A1%3Arn%3A965423591%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C38%2C%2C%2C%2C1895%3Ans%3A1669740765765%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740769%3At%3AFAQ7.ru&t=gdpr(14)mc(cm-1-tl-1)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP
GET /watch/90979946?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%22638638df-8dd2-f0y3-hho9-s1dkeyczbfjk%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A4%3Adp%3A0%3Als%3A723184038335%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165249%3Aet%3A1669740769%3Ac%3A1%3Arn%3A965423591%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C38%2C%2C%2C%2C1895%3Ans%3A1669740765765%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740769%3At%3AFAQ7.ru&t=gdpr(14)mc(cm-1-tl-1)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://faq7.ru
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/90979946/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%22638638df-8dd2-f0y3-hho9-s1dkeyczbfjk%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaqp9qze4zeusy7lq5yic%3Afp%3A1513%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A923%3Acn%3A4%3Adp%3A0%3Als%3A723184038335%3Ahid%3A556316546%3Az%3A0%3Ai%3A20221129165249%3Aet%3A1669740769%3Ac%3A1%3Arn%3A965423591%3Arqn%3A1%3Au%3A1669740767350330186%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C145%2C27%2C375%2C383%2C1%2C1038%2C38%2C%2C%2C%2C1895%3Ans%3A1669740765765%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669740769%3At%3AFAQ7.ru&t=gdpr%2814%29mc%28cm-1-tl-1%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 29 Nov 2022 16:52:50 GMT
access-control-allow-origin: http://faq7.ru
set-cookie: yandexuid=981201071669740770; Expires=Wed, 29-Nov-2023 16:52:50 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=981201071669740770; Expires=Wed, 29-Nov-2023 16:52:50 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2651592431669740770; Path=/; SameSite=None; Secure
i=nid426dOoTzld9/rIg8MyWUkBgJ0JkFq14CSpTGMkF4lM/EQYYVqRcGYZx2y/TNxPqN7bM0yh/40p9hUj2DKiPiDaUM=; Expires=Fri, 26-Nov-2032 16:52:49 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1701276770.yc.1669740770#1701276770.yrts.1669740770#1701276770.yrtsi.1669740770; Expires=Wed, 29-Nov-2023 16:52:50 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 29-Nov-2022 16:52:50 GMT
last-modified: Tue, 29-Nov-2022 16:52:50 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
connect.ok.ru/dk?st.cmd=extLike&uid=1&ref=https%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404
200 OK 0 B URL HTTP/2 connect.ok.ru/dk?st.cmd=extLike&uid=1&ref=https%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404
IP
GET /dk?st.cmd=extLike&uid=1&ref=https%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404 HTTP/1.1
Host: connect.ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: apache
date: Tue, 29 Nov 2022 16:52:52 GMT
content-type: application/javascript;charset=UTF-8
vary: Accept-Encoding
set-cookie: bci=-2091668095431625923; Domain=.ok.ru; Expires=Sun, 17-Dec-2090 20:06:59 GMT; Path=/; Secure; HttpOnly
_statid=028bf670-898f-436f-be4e-357066c6094b; Domain=.ok.ru; Expires=Sun, 17-Dec-2090 20:06:59 GMT; Path=/; Secure; HttpOnly
landref=faq7.ru; Domain=.ok.ru; Path=/; Secure
content-security-policy: default-src data: 'self' 'unsafe-inline' 'unsafe-eval' ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me wss://ad.mail.ru *.mail.ru *.imgsmail.ru *.mradx.net *.serving-sys.com *.googleapis.com *.gstatic.com www.google.com https://api-maps.yandex.ru yastatic.net yandex.st *.doubleverify.com *.adsafeprotected.com https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://football.sportmail.ru *.google.ru *.google.com *.googlesyndication.com *.yandex.ru blob:; script-src 'unsafe-inline' 'unsafe-eval' *.mail.ru https://*.mail.ru *.imgsmail.ru *.mradx.net ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me mc.yandex.ru an.yandex.ru yastatic.net yandex.st *.google-analytics.com api-maps.yandex.ru https://api-maps.yandex.ru https://clck.yandex.ru *.googleapis.com *.gstatic.com www.google.com www.youtube.com https://www.youtube.com *.ytimg.com https://*.ytimg.com *.doubleverify.com *.dvtps.com *.doubleclick.net *.googletagservices.com *.googlesyndication.com *.googleadservices.com *.goodgame.ru https://*.goodgame.ru https://*.moatads.com *.adlooxtracking.com *.adlooxtracking.ru *.adsafeprotected.com *.serving-sys.com *.serving-sys.ru *.weborama.fr *.weborama-tech.ru https://enterprise.api-maps.yandex.ru https://suggest-maps.yandex.ru https://*.hit.gemius.pl https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://gum.criteo.com https://football.sportmail.ru *.googletagmanager.com connect.facebook.net *.google.ru *.google.com *.googlesyndication.com yandex.ru; worker-src blob: 'self'; connect-src * wss: blob:; font-src * data: blob:; frame-src * blob: 'self'; img-src * data: blob: about:; media-src * data: blob:; object-src *; report-uri /csp/report;
content-security-policy-report-only: default-src data: blob: about: 'self' 'unsafe-inline' 'unsafe-eval' https: wss:; report-uri /csp/report?always;
cache-control: no-cache, no-store
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=63072000;includeSubdomains;preload
access-control-allow-origin: *
access-control-allow-credentials: true
rendered-blocks: WidgetExtLike
content-encoding: br
X-Firefox-Spdy: h2
cdn-rtb.sape.ru/teasers/js/219/2/116219.js
200 OK 0 B URL HTTP/2 cdn-rtb.sape.ru/teasers/js/219/2/116219.js
IP
GET /teasers/js/219/2/116219.js HTTP/1.1
Host: cdn-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Tue, 29 Nov 2022 16:52:47 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: block-all-mixed-content
etag: W/"393e96ad370315153b393f7a799b470d"
last-modified: Tue, 29 Nov 2022 14:16:31 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-request-id: 172C151DEEB06CD4
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
expires: Tue, 29 Nov 2022 17:52:47 GMT
cache-control: max-age=3600
x-cache-status: REVALIDATED
X-Firefox-Spdy: h2
api-maps.yandex.ru/1.1/index.xml
200 OK 0 B URL HTTP/2 api-maps.yandex.ru/1.1/index.xml
IP
GET /1.1/index.xml HTTP/1.1
Host: api-maps.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
date: Tue, 29 Nov 2022 16:52:47 GMT
x-content-type-options: nosniff
set-cookie: _yasc=aQA6/0gEZObgYzpXMot658zIESjxfjceMZ/jOXBiBM7b/zWGt/m+kdHuGz4F; domain=.yandex.ru; path=/; expires=Fri, 26-Nov-2032 16:52:47 GMT; secure
i=OqS0TKCBhclxOipfLkD2BMi8hP7kl737npI255eUzYIH5cTT7SIYsBmzuCuOe4Edjp/++H9AiqZ56HYdolmrLEnMF7I=; Expires=Thu, 28-Nov-2024 16:52:47 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
etag: W/"151b-mAWu5LpOfaeFCb58s3lzdTMwLsg"
x-xss-protection: 1; mode=block
expires: 0
cache-control: max-age=0, must-revalidate, no-cache, no-store, private, proxy-revalidate
content-encoding: gzip
content-type: application/javascript; charset=utf-8
X-Firefox-Spdy: h2
app.sharpay.io/api/script.js
200 OK 0 B URL HTTP/2 app.sharpay.io/api/script.js
IP
GET /api/script.js HTTP/1.1
Host: app.sharpay.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 16:52:47 GMT
content-type: application/javascript
last-modified: Tue, 17 Nov 2020 21:50:02 GMT
etag: W/"5fb4458a-1f245"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xo8qL97yNOpbNDkvurX2NzQxRHFTa6X%2B8Xw3uCoGQK3f5KX05aiXus%2Foxktmqp7H4yfLkmgRSB4g5z84TuAd1WRCwtyYAO%2BaF8CQvP4nnwibz971cPkwoZJwMxB4uH2%2BjQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771cdb168d2db4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
api-maps.yandex.ru/1.1/_YMaps.css?v=0.2.11
200 OK 0 B URL HTTP/2 api-maps.yandex.ru/1.1/_YMaps.css?v=0.2.11
IP
GET /1.1/_YMaps.css?v=0.2.11 HTTP/1.1
Host: api-maps.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
date: Tue, 29 Nov 2022 16:52:47 GMT
set-cookie: _yasc=Neb+SyDw7xDtd6Fbz22SyBJTyvakeWTpjgH2UCC5n4MlyXMSKIvQkl0lPxk=; domain=.yandex.ru; path=/; expires=Fri, 26-Nov-2032 16:52:47 GMT; secure
i=61vvcAZpkK29RPMNQI2oCsognik59AHbj5KKDJyQCUKIGsAJeGh7rBsgZFHqa/SQLcJaVesIdIbz6+e3emv35hnb/+Y=; Expires=Thu, 28-Nov-2024 16:52:47 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
etag: W/"606eaf86-1b99f"
last-modified: Thu, 08 Apr 2021 07:23:50 GMT
content-encoding: gzip
content-type: text/css
X-Firefox-Spdy: h2
31.31.198.198
199.232.196.134
23.38.201.146
31.220.27.155
31.172.81.160
93.184.220.29
188.114.97.1
104.18.32.68
95.216.101.186
188.42.196.115
46.243.143.249