soft.mydiv.net.ua/win/dlfile342846_ed28a-SONY-Vegas-Pro.html/vegaspro11.0.700_32bit.exe
54.36.106.111301 Moved Permanently 169 B URL HTTP/1.1 soft.mydiv.net.ua/win/dlfile342846_ed28a-SONY-Vegas-Pro.html/vegaspro11.0.700_32bit.exe
IP 54.36.106.111:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash ed71c5a05640b46c23806b1a1820495c
34ec4e67972ab66ce64857b6386d3f8e742b2546
e9a4e42c1ef4bf3bc0e06bf073ae680d246d6ee764cdca261ae225883a7cc2d1
GET /win/dlfile342846_ed28a-SONY-Vegas-Pro.html/vegaspro11.0.700_32bit.exe HTTP/1.1
Host: soft.mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.17.7
Date: Fri, 31 Mar 2023 10:29:23 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://soft.mydiv.net.ua/win/dlfile342846_ed28a-SONY-Vegas-Pro.html/vegaspro11.0.700_32bit.exe
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7af19a5145a4ee99bdf18831bad04bfd
7bdd2a4785b999ef54a2644211d2b2b7190fb8e1
3237bf0111ecdec3615c4d2d49a602f48f800335d0194f52b600bdaefbd63ed0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3237BF0111ECDEC3615C4D2D49A602F48F800335D0194F52B600BDAEFBD63ED0"
Last-Modified: Thu, 30 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6506
Expires: Fri, 31 Mar 2023 12:17:49 GMT
Date: Fri, 31 Mar 2023 10:29:23 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b93010cbf31ba3ec785b4088e5d0f529
c0f1ab8a2aae3c445a8f24959a4eea433a345caf
2cc1a5865dee7636b82a68deddd3aff8b697e846e37789a694cc3c7c47340590
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2CC1A5865DEE7636B82A68DEDDD3AFF8B697E846E37789A694CC3C7C47340590"
Last-Modified: Wed, 29 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8413
Expires: Fri, 31 Mar 2023 12:49:36 GMT
Date: Fri, 31 Mar 2023 10:29:23 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bc86ef2a0cee04915bc360f5821adc8f
3658f9028cce204d38f7f48fcfaa2a8e4f54383a
aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Retry-After, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 31 Mar 2023 10:16:11 GMT
content-type: application/json
age: 792
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 374c9e295a804e605c402f48ae7e2446
967394b36ecdff2dd32842f878887f061024c6b3
7652dfcb9e2d620ce1d033be8ecc53166d2881154c15decd60899415e5ac2706
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7652DFCB9E2D620CE1D033BE8ECC53166D2881154C15DECD60899415E5AC2706"
Last-Modified: Thu, 30 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11183
Expires: Fri, 31 Mar 2023 13:35:46 GMT
Date: Fri, 31 Mar 2023 10:29:23 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Htq00t5v81GrG9FWYh/XMge0WeeBOyL6usvaUMy1clMizR3DwZCqas9m25jycwL2HE08/Z93elmhyjxdlm611Q==
x-amz-request-id: HDHBF5MFBFCFG3BG
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 31 Mar 2023 10:12:08 GMT
age: 1035
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 10:29:23 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ab61862f016dea85f8aa55e59369d905
a5e81f13052b9e9184caf05a9740c345a40d1f22
e0d580c313088d524a5338e63e4acf9f3f3cb45a54f2528c5d1c4915d71b255b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E0D580C313088D524A5338E63E4ACF9F3F3CB45A54F2528C5D1C4915D71B255B"
Last-Modified: Thu, 30 Mar 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5041
Expires: Fri, 31 Mar 2023 11:53:25 GMT
Date: Fri, 31 Mar 2023 10:29:24 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Expires, Cache-Control, Content-Length, Retry-After, Last-Modified, Pragma, ETag, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 31 Mar 2023 10:14:39 GMT
age: 885
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
push.services.mozilla.com/
34.117.65.55101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.117.65.55:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 1icEsXeU2+E+Qe74tmhupQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: NMKLrnCkKdiOHswSpul3UJHxUyM=
Date: Fri, 31 Mar 2023 10:29:24 GMT
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
soft.mydiv.net.ua/build/public/images/c141857003053201a2b0239f9c2571a4.svg
54.36.106.111200 OK 3.3 kB URL HTTP/2 soft.mydiv.net.ua/build/public/images/c141857003053201a2b0239f9c2571a4.svg
IP 54.36.106.111:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3315), with no line terminators
Hash c141857003053201a2b0239f9c2571a4
ed829bb667018790d2256bdb84cbc40e910b890d
f4a8a85124370b95447eb9818a3feb3c646f126cf7abd4f80c80605e38b80a10
GET /build/public/images/c141857003053201a2b0239f9c2571a4.svg HTTP/1.1
Host: soft.mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html
Cookie: suid=de7c9f517b90f01e93ad3472150aa776bd9b8c53174942582ae76fd894ed45f1; ifh=11010140436426b604283aa3.51689900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: image/svg+xml
content-length: 3315
last-modified: Sat, 14 Jan 2023 15:52:12 GMT
etag: "63c2cfac-cf3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
soft.mydiv.net.ua/images/ua/win/icons/SONY-Vegas-Pro.gif
54.36.106.111200 OK 1.6 kB URL HTTP/2 soft.mydiv.net.ua/images/ua/win/icons/SONY-Vegas-Pro.gif
IP 54.36.106.111:0
File type GIF image data, version 87a, 32 x 32\012- data
Hash 199ff98603828c0b84f6ee306cf2c3f3
605d2715018c02b11be59bb86f3a28f5ac8512f7
4d378f5ccde489adb54f66f234a555818b7e6aa323d44321bd6a04842bbd42c8
GET /images/ua/win/icons/SONY-Vegas-Pro.gif HTTP/1.1
Host: soft.mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html
Cookie: suid=de7c9f517b90f01e93ad3472150aa776bd9b8c53174942582ae76fd894ed45f1; ifh=11010140436426b604283aa3.51689900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: image/gif
content-length: 1609
last-modified: Wed, 02 Nov 2022 23:48:27 GMT
etag: "636301cb-649"
expires: Sun, 30 Apr 2023 10:29:24 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
soft.mydiv.net.ua/images/ua/win/screens/79925_small.jpg
54.36.106.111200 OK 8.5 kB URL HTTP/2 soft.mydiv.net.ua/images/ua/win/screens/79925_small.jpg
IP 54.36.106.111:0
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 190x190, components 3\012- data
Hash 5900e0c66db0f8f445fb7991d29dedeb
4a0f08a06b0a76672f6afe439a0114a409206e40
76b39ed9a3778b51f0cf171ec07acea83551b132b9241f91d7ff97f71a61e5ee
GET /images/ua/win/screens/79925_small.jpg HTTP/1.1
Host: soft.mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html
Cookie: suid=de7c9f517b90f01e93ad3472150aa776bd9b8c53174942582ae76fd894ed45f1; ifh=11010140436426b604283aa3.51689900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: image/jpeg
content-length: 8517
last-modified: Tue, 14 Feb 2017 11:37:34 GMT
etag: "58a2ebfe-2145"
expires: Sun, 30 Apr 2023 10:29:24 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
soft.mydiv.net.ua/images/ua/win/screens/79926_small.jpg
54.36.106.111200 OK 8.5 kB URL HTTP/2 soft.mydiv.net.ua/images/ua/win/screens/79926_small.jpg
IP 54.36.106.111:0
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 190x190, components 3\012- data
Hash c84bfc4166ac31c9ef880d4e2b149645
d4926e94f6f7d84ef41a89386ba073b8d4fe69b8
30c27e4ce81a3547e894490010399d0d58af68fbaf9934ff567aae250ecd0d6d
GET /images/ua/win/screens/79926_small.jpg HTTP/1.1
Host: soft.mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html
Cookie: suid=de7c9f517b90f01e93ad3472150aa776bd9b8c53174942582ae76fd894ed45f1; ifh=11010140436426b604283aa3.51689900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: image/jpeg
content-length: 8522
last-modified: Tue, 14 Feb 2017 11:37:39 GMT
etag: "58a2ec03-214a"
expires: Sun, 30 Apr 2023 10:29:24 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
soft.mydiv.net.ua/images/ua/win/screens/79927_small.jpg
54.36.106.111200 OK 8.6 kB URL HTTP/2 soft.mydiv.net.ua/images/ua/win/screens/79927_small.jpg
IP 54.36.106.111:0
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 190x190, components 3\012- data
Hash a14f931f028bb1f8bfb573a43c2672ec
b029e43c99ae08467b028c8a82c1e9155df63b8d
dc25333acd48cf3aab75f269474160674ec4a95be2a0c9b75a149cf47d15197e
GET /images/ua/win/screens/79927_small.jpg HTTP/1.1
Host: soft.mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html
Cookie: suid=de7c9f517b90f01e93ad3472150aa776bd9b8c53174942582ae76fd894ed45f1; ifh=11010140436426b604283aa3.51689900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: image/jpeg
content-length: 8646
last-modified: Tue, 14 Feb 2017 11:37:44 GMT
etag: "58a2ec08-21c6"
expires: Sun, 30 Apr 2023 10:29:24 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
soft.mydiv.net.ua/images/ua/win/screens/79928_small.jpg
54.36.106.111200 OK 8.7 kB URL HTTP/2 soft.mydiv.net.ua/images/ua/win/screens/79928_small.jpg
IP 54.36.106.111:0
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 190x190, components 3\012- data
Hash 6a5659229947fc99ee1adfb91f8833eb
5a729aa2aef53aa217f44e84f8c8ba09b19899ac
647d7009b320bf55fc377cb5606967abefd181139c98f682dce145d39a697867
GET /images/ua/win/screens/79928_small.jpg HTTP/1.1
Host: soft.mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html
Cookie: suid=de7c9f517b90f01e93ad3472150aa776bd9b8c53174942582ae76fd894ed45f1; ifh=11010140436426b604283aa3.51689900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: image/jpeg
content-length: 8676
last-modified: Tue, 14 Feb 2017 11:37:48 GMT
etag: "58a2ec0c-21e4"
expires: Sun, 30 Apr 2023 10:29:24 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
soft.mydiv.net.ua/images/ua/win/screens/79929_small.jpg
54.36.106.111200 OK 8.4 kB URL HTTP/2 soft.mydiv.net.ua/images/ua/win/screens/79929_small.jpg
IP 54.36.106.111:0
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 190x190, components 3\012- data
Hash d2296f3502fa9d64f6ecc74287167b3c
41227a9d81ec8562d6d1c3496db965dd30f2a43e
4b9b02caaba549aae9ee5402f89460a054c9ec01258b860f9f5ebba8823482dd
GET /images/ua/win/screens/79929_small.jpg HTTP/1.1
Host: soft.mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html
Cookie: suid=de7c9f517b90f01e93ad3472150aa776bd9b8c53174942582ae76fd894ed45f1; ifh=11010140436426b604283aa3.51689900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: image/jpeg
content-length: 8350
last-modified: Tue, 14 Feb 2017 11:37:52 GMT
etag: "58a2ec10-209e"
expires: Sun, 30 Apr 2023 10:29:24 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
soft.mydiv.net.ua/images/ua/win/icons/Movavi-Video-Editor.gif
54.36.106.111200 OK 546 B URL HTTP/2 soft.mydiv.net.ua/images/ua/win/icons/Movavi-Video-Editor.gif
IP 54.36.106.111:0
File type GIF image data, version 87a, 32 x 32\012- data
Hash 2bd1b50b36086fc57c59a16a5cda59d0
46bda4a0ac69455cc5e7e025068068b673221798
5281e56dd3c3cba2b7bca290d9f2bc45ffe7e77742bb7795fbdc4abef61a7f5c
GET /images/ua/win/icons/Movavi-Video-Editor.gif HTTP/1.1
Host: soft.mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html
Cookie: suid=de7c9f517b90f01e93ad3472150aa776bd9b8c53174942582ae76fd894ed45f1; ifh=11010140436426b604283aa3.51689900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: image/gif
content-length: 546
last-modified: Tue, 12 Nov 2019 09:01:06 GMT
etag: "5dca74d2-222"
expires: Sun, 30 Apr 2023 10:29:24 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
soft.mydiv.net.ua/images/ua/win/icons/oCam.gif
54.36.106.111200 OK 1.0 kB URL HTTP/2 soft.mydiv.net.ua/images/ua/win/icons/oCam.gif
IP 54.36.106.111:0
File type GIF image data, version 87a, 32 x 32\012- data
Hash f30be5ed782eb878c0a11976f25336f8
729727c8b3429bd8b0c903abcc2880afa657c6fb
77b890bfc613c0a689630b3230bd674b74a639b067af47d30f457045f9f14f50
GET /images/ua/win/icons/oCam.gif HTTP/1.1
Host: soft.mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html
Cookie: suid=de7c9f517b90f01e93ad3472150aa776bd9b8c53174942582ae76fd894ed45f1; ifh=11010140436426b604283aa3.51689900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: image/gif
content-length: 1034
last-modified: Sat, 19 Jun 2021 08:30:34 GMT
etag: "60cdab2a-40a"
expires: Sun, 30 Apr 2023 10:29:24 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
soft.mydiv.net.ua/images/ua/win/icons/Bandicam.gif
54.36.106.111200 OK 788 B URL HTTP/2 soft.mydiv.net.ua/images/ua/win/icons/Bandicam.gif
IP 54.36.106.111:0
File type GIF image data, version 87a, 32 x 32\012- data
Hash eb898399270d7e6543f010613089c909
add74fc01bdf8c0fa91029fccccf2fe53a6b84e4
fda968eb8d70bcb5733c11ae28a188898acc1d9ee9de30bf219406737052b139
GET /images/ua/win/icons/Bandicam.gif HTTP/1.1
Host: soft.mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html
Cookie: suid=de7c9f517b90f01e93ad3472150aa776bd9b8c53174942582ae76fd894ed45f1; ifh=11010140436426b604283aa3.51689900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: image/gif
content-length: 788
last-modified: Thu, 14 Jul 2022 22:00:00 GMT
etag: "62d091e0-314"
expires: Sun, 30 Apr 2023 10:29:24 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
soft.mydiv.net.ua/images/ua/win/icons/Action.gif
54.36.106.111200 OK 1.5 kB URL HTTP/2 soft.mydiv.net.ua/images/ua/win/icons/Action.gif
IP 54.36.106.111:0
File type GIF image data, version 87a, 32 x 32\012- data
Hash 745b55446e6855284a8423a87bb394a7
c8e4c1209e5e2bba6a689f38b0f475f42f12b71e
50510fc7f19f94b7ce5f1d76c0dfabc6b0f03fdf44b40c7039f1c76b585dd889
GET /images/ua/win/icons/Action.gif HTTP/1.1
Host: soft.mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html
Cookie: suid=de7c9f517b90f01e93ad3472150aa776bd9b8c53174942582ae76fd894ed45f1; ifh=11010140436426b604283aa3.51689900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: image/gif
content-length: 1525
last-modified: Thu, 16 Mar 2023 21:29:41 GMT
etag: "64138a45-5f5"
expires: Sun, 30 Apr 2023 10:29:24 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
soft.mydiv.net.ua/images/ua/win/icons/Avidemux.gif
54.36.106.111200 OK 808 B URL HTTP/2 soft.mydiv.net.ua/images/ua/win/icons/Avidemux.gif
IP 54.36.106.111:0
File type GIF image data, version 87a, 32 x 32\012- data
Hash 0c64583a49359bb5e7d5b5bacb832936
4b1211833bba5b253e5a8990f465558530df67e6
8d83dade506e768c13c34def04a53f350e12dad9efcf77eb24b29a7bfc98a29f
GET /images/ua/win/icons/Avidemux.gif HTTP/1.1
Host: soft.mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html
Cookie: suid=de7c9f517b90f01e93ad3472150aa776bd9b8c53174942582ae76fd894ed45f1; ifh=11010140436426b604283aa3.51689900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: image/gif
content-length: 808
last-modified: Mon, 19 Sep 2022 21:53:43 GMT
etag: "6328e4e7-328"
expires: Sun, 30 Apr 2023 10:29:24 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
soft.mydiv.net.ua/images/ua/win/icons/IceCream-Slideshow-Maker.gif
54.36.106.111200 OK 588 B URL HTTP/2 soft.mydiv.net.ua/images/ua/win/icons/IceCream-Slideshow-Maker.gif
IP 54.36.106.111:0
File type GIF image data, version 87a, 32 x 32\012- data
Hash c17210d8c74a8519266909e820086713
55f705959e48bfc591fbde1e9fd12d83000be07a
4412f8ea643f2ff70b3cac27ee0e4fa992d891766aa646794632d6ad5fc16114
GET /images/ua/win/icons/IceCream-Slideshow-Maker.gif HTTP/1.1
Host: soft.mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html
Cookie: suid=de7c9f517b90f01e93ad3472150aa776bd9b8c53174942582ae76fd894ed45f1; ifh=11010140436426b604283aa3.51689900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: image/gif
content-length: 588
last-modified: Sat, 19 Jun 2021 07:52:14 GMT
etag: "60cda22e-24c"
expires: Sun, 30 Apr 2023 10:29:24 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
soft.mydiv.net.ua/images/ua/win/icons/Free-Screen-Video-Recorder.gif
54.36.106.111200 OK 514 B URL HTTP/2 soft.mydiv.net.ua/images/ua/win/icons/Free-Screen-Video-Recorder.gif
IP 54.36.106.111:0
File type GIF image data, version 87a, 32 x 32\012- data
Hash e2082b8d788767c2869d1d55d024c407
51fa82d41363c5f1898a2136f080b03f37a529ab
a3949e60002599a34ff7f65dd3df5ee90c6333ebe3e9084dac42982b021aed1b
GET /images/ua/win/icons/Free-Screen-Video-Recorder.gif HTTP/1.1
Host: soft.mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html
Cookie: suid=de7c9f517b90f01e93ad3472150aa776bd9b8c53174942582ae76fd894ed45f1; ifh=11010140436426b604283aa3.51689900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: image/gif
content-length: 514
last-modified: Sat, 19 Jun 2021 07:54:45 GMT
etag: "60cda2c5-202"
expires: Sun, 30 Apr 2023 10:29:24 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
soft.mydiv.net.ua/images/ua/win/icons/VideoPad.gif
54.36.106.111200 OK 1.5 kB URL HTTP/2 soft.mydiv.net.ua/images/ua/win/icons/VideoPad.gif
IP 54.36.106.111:0
File type GIF image data, version 87a, 32 x 32\012- data
Hash c7d0bb2ba29ce0f9c506f2e18a5248f1
03f1a5f277962b0586e897e3e22cdd561109f973
409ca96fbf077ababf7c8b245e8b6857166ae2f6c6f44ba29ebb8b6315e0e768
GET /images/ua/win/icons/VideoPad.gif HTTP/1.1
Host: soft.mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html
Cookie: suid=de7c9f517b90f01e93ad3472150aa776bd9b8c53174942582ae76fd894ed45f1; ifh=11010140436426b604283aa3.51689900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: image/gif
content-length: 1492
last-modified: Sat, 18 Mar 2023 22:27:03 GMT
etag: "64163ab7-5d4"
expires: Sun, 30 Apr 2023 10:29:24 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
soft.mydiv.net.ua/images/ua/win/icons/ZD-Soft-Screen-Recorder.gif
54.36.106.111200 OK 1.4 kB URL HTTP/2 soft.mydiv.net.ua/images/ua/win/icons/ZD-Soft-Screen-Recorder.gif
IP 54.36.106.111:0
File type GIF image data, version 87a, 32 x 32\012- data
Hash 39cc79f44439e26a932043a80b76feea
cea1b59b78001cd5645dab8470e5296e97c4a39f
07695a6c2285f87ecf057b60ca8a664260769a58c6979ba3804a495decbc998b
GET /images/ua/win/icons/ZD-Soft-Screen-Recorder.gif HTTP/1.1
Host: soft.mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html
Cookie: suid=de7c9f517b90f01e93ad3472150aa776bd9b8c53174942582ae76fd894ed45f1; ifh=11010140436426b604283aa3.51689900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: image/gif
content-length: 1433
last-modified: Sat, 19 Jun 2021 07:50:33 GMT
etag: "60cda1c9-599"
expires: Sun, 30 Apr 2023 10:29:24 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
soft.mydiv.net.ua/build/public/images/c539cc4109c4ed80ec05cb5812112d1c.png
54.36.106.111200 OK 1.8 kB URL HTTP/2 soft.mydiv.net.ua/build/public/images/c539cc4109c4ed80ec05cb5812112d1c.png
IP 54.36.106.111:0
File type PNG image data, 117 x 27, 8-bit/color RGBA, non-interlaced\012- data
Hash c539cc4109c4ed80ec05cb5812112d1c
e54ad527d32113957d3c6fbc42f5dee7cf2a15f5
3abcf0a2a296461fb1cf4584d08a2a9afdbd0c0861a7211ab6f53fc64f8fe83a
GET /build/public/images/c539cc4109c4ed80ec05cb5812112d1c.png HTTP/1.1
Host: soft.mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html
Cookie: suid=de7c9f517b90f01e93ad3472150aa776bd9b8c53174942582ae76fd894ed45f1; ifh=11010140436426b604283aa3.51689900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: image/png
content-length: 1770
last-modified: Sat, 14 Jan 2023 15:52:12 GMT
etag: "63c2cfac-6ea"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
mydiv.net/gf/cds/epbase-check.js?s=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE2ODAyNTg1NjQsInNfc2lkIjoiNDUzNTQzMDciLCJzX2RpZCI6M30.-aybmOb2iSZisbKHBMNKjpQlZEmTRfB65BcVfbGpn0g&rnd=5061843596426b60441862
54.36.106.111204 No Content 0 B URL HTTP/2 mydiv.net/gf/cds/epbase-check.js?s=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE2ODAyNTg1NjQsInNfc2lkIjoiNDUzNTQzMDciLCJzX2RpZCI6M30.-aybmOb2iSZisbKHBMNKjpQlZEmTRfB65BcVfbGpn0g&rnd=5061843596426b60441862
IP 54.36.106.111:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gf/cds/epbase-check.js?s=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE2ODAyNTg1NjQsInNfc2lkIjoiNDUzNTQzMDciLCJzX2RpZCI6M30.-aybmOb2iSZisbKHBMNKjpQlZEmTRfB65BcVfbGpn0g&rnd=5061843596426b60441862 HTTP/1.1
Host: mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
x-powered-by: PHP/8.2.1
set-cookie: suid=a91715d6dd991d020735c54b27960c8bf6e2d2bc7f39be8ec600cd8a76345fa5; domain=.mydiv.net; path=/; expires=Mon, 03-Apr-2023 10:29:24 UTC
ifh=9853892116426b604a90e79.05295371; domain=.mydiv.net; path=/; expires=Mon, 03-Apr-2023 10:29:24 UTC; HttpOnly
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
104.16.89.20200 OK 87 kB URL HTTP/2 cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
IP 104.16.89.20:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash b1dab63d851c4780473a5289492c83ec
9d7ae41ee3370ea8f1b00e0a33d2ec33118c44ec
07595a53fc5549484054815853ce31ec4ec5f40c8f710a1c3c11a6a25c99b438
GET /npm/yandex-metrica-watch/tag.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 1.262.0
x-jsd-version-type: version
etag: W/"34f93-uyWgQ4OqMEayc+Bdz0czFyiAHJ0"
x-served-by: cache-fra-eddf8230100-FRA, cache-jnb7027-JNB
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 3583
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NBZfNbxTpdXow86qLmYwSszfgbg1jvLqzZJKtSMv5mehgo2Nott3jXPuCT8cl2OKNLKMb5wOj5MDO7uTIoHa4iPp0vRbQTEi3M79COD5pf3noBuUfc6z70hG5p6kC0HZF1k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b07e93dea40b511-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash bf29feb5d124115ffaf0b00e89ab0309
693d2ad3694d3171af6545ef4758855127b2e669
40c67d04ae6c3d13fd0a77cf0c804660a5498d0c24425162f8e21c86d9e85eb1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 10:29:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mydiv.net/build/public/site.mydiv.bundle.js?ver=e24849be52c774f06638
54.36.106.111200 OK 106 kB URL HTTP/2 mydiv.net/build/public/site.mydiv.bundle.js?ver=e24849be52c774f06638
IP 54.36.106.111:0
Size 106 kB (105485 bytes)
Hash 69be87a357298e8c435094dd97d7d344
d99f1306a5a2baa3b1907bf7d5d1ee6be30de7b7
7af10c8e8bd893784ecede2506b6dd0d4e00d5bc15356d81df3e1394e5badaa7
GET /build/public/site.mydiv.bundle.js?ver=e24849be52c774f06638 HTTP/1.1
Host: mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 22 Mar 2023 21:30:40 GMT
vary: Accept-Encoding
etag: W/"641b7380-45ee2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/firasans/v11/va9B4kDNxMZdWfMOD5VnZKveRhf6.woff2
216.58.207.227200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/firasans/v11/va9B4kDNxMZdWfMOD5VnZKveRhf6.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 22920, version 1.0\012- data
Hash 70487f355d22aef7eee8f36bca4d03b8
9ffd6785eeaad33637a9c1be6a0c208f346e134e
d28cae33a9cff1cd54246e2bca04018f101451707a5b5f426d32ea768e911186
GET /s/firasans/v11/va9B4kDNxMZdWfMOD5VnZKveRhf6.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://soft.mydiv.net.ua
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 31 Mar 2023 10:28:11 GMT
expires: Sat, 30 Mar 2024 10:28:11 GMT
cache-control: public, max-age=31536000
age: 73
last-modified: Thu, 01 Apr 2021 22:06:35 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash bf29feb5d124115ffaf0b00e89ab0309
693d2ad3694d3171af6545ef4758855127b2e669
40c67d04ae6c3d13fd0a77cf0c804660a5498d0c24425162f8e21c86d9e85eb1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 10:29:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e8df31f5ac474adbf58cfa599304bcae
c3001e355800deb24f04a565cc1ccb1131c1eadc
da2ed2c8207f9290413bf7d38a0957f48cc524c6afe7b481b77a84930c7a9e38
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 10:29:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e8df31f5ac474adbf58cfa599304bcae
c3001e355800deb24f04a565cc1ccb1131c1eadc
da2ed2c8207f9290413bf7d38a0957f48cc524c6afe7b481b77a84930c7a9e38
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 10:29:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e8df31f5ac474adbf58cfa599304bcae
c3001e355800deb24f04a565cc1ccb1131c1eadc
da2ed2c8207f9290413bf7d38a0957f48cc524c6afe7b481b77a84930c7a9e38
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 10:29:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp2.globalsign.com/gsalphasha2g2
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP 104.18.21.226:0
Hash a79d0cbb0207d8dce5032aa8801a55a9
ed010cb16a7d80b4f4df36a1c803f403884572b6
a924ad38fbfa3208a26c550a87943f74fe16421278f6bbb2cc2650e473c8043e
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 10:29:24 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Tue, 04 Apr 2023 07:24:01 GMT
ETag: "ed010cb16a7d80b4f4df36a1c803f403884572b6"
Last-Modified: Fri, 31 Mar 2023 07:24:02 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1948
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b07e93f0eab1c0a-OSL
counter.yadro.ru/hit?t44.6;r;s1280*1024*24;uhttps%3A//soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html;0.36290905359801895
88.212.201.204200 OK 132 B URL HTTP/1.1 counter.yadro.ru/hit?t44.6;r;s1280*1024*24;uhttps%3A//soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html;0.36290905359801895
IP 88.212.201.204:0
ASN #39134 United Network LLC
File type GIF image data, version 87a, 31 x 31\012- data
Hash 0223d80a320a983871bfa82aa6d698ea
f4e06fe8e83c662bb565f175d7de22f51c1e7c9d
fa523f248a332cb89ae3ad8cf51d840153e0f96bcc2a4c8db736e02a340dab48
GET /hit?t44.6;r;s1280*1024*24;uhttps%3A//soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html;0.36290905359801895 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Fri, 31 Mar 2023 10:29:25 GMT
Content-Type: image/gif
Content-Length: 132
Connection: keep-alive
Expires: Wed, 30 Mar 2022 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
142.250.74.130200 OK 48 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP 142.250.74.130:0
File type ASCII text, with very long lines (3599)
Hash 81020f1612a107874014170371a96f6d
b0ea8dfc5dc8840e6e9246474e94fe20e9ef4205
ef2553d5e472c9ea22aa03ea898235f205e8179057d907b03cd3557c8872e735
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Fri, 31 Mar 2023 10:29:24 GMT
expires: Fri, 31 Mar 2023 10:29:24 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 12029787872554575391
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 48340
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e8df31f5ac474adbf58cfa599304bcae
c3001e355800deb24f04a565cc1ccb1131c1eadc
da2ed2c8207f9290413bf7d38a0957f48cc524c6afe7b481b77a84930c7a9e38
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 10:29:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gseccovsslca2018
104.18.20.226200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.20.226:0
Hash 7dfc662ba0adcecd29fa12f6de10a6d5
aa7060e6283e0ab2a160c8ea09b6939c510006ab
2bd038dd68473a03d9bab10e8ffb3aa024dd368cbcd40441e9870a01cdc9b26d
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 10:29:25 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Tue, 04 Apr 2023 06:10:29 GMT
ETag: "aa7060e6283e0ab2a160c8ea09b6939c510006ab"
Last-Modified: Fri, 31 Mar 2023 06:10:30 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2492
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b07e93ffe510b02-OSL
soft.mydiv.net.ua/build/public/langchunks/lang.uk_UA.chunk.js?ver=b8e48fb2be098c97604c
54.36.106.111200 OK 6.2 kB URL HTTP/2 soft.mydiv.net.ua/build/public/langchunks/lang.uk_UA.chunk.js?ver=b8e48fb2be098c97604c
IP 54.36.106.111:0
Hash f23f192dd84c52061f7c7afaba25733a
240c2e97e6d5dbb0bc21bb5cfd0b782659236750
271ac5cac5202ca399f18c702a7a4fcf6c958c88aa36f341e2f845d7ef16d4fc
GET /build/public/langchunks/lang.uk_UA.chunk.js?ver=b8e48fb2be098c97604c HTTP/1.1
Host: soft.mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html
Cookie: suid=de7c9f517b90f01e93ad3472150aa776bd9b8c53174942582ae76fd894ed45f1; ifh=11010140436426b604283aa3.51689900
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 22 Mar 2023 21:30:40 GMT
vary: Accept-Encoding
etag: W/"641b7380-109c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/html/r20230329/r20190131/zrt_lookup.html
142.250.74.66200 OK 4.5 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20230329/r20190131/zrt_lookup.html
IP 142.250.74.66:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3205)
Hash bad17ab9662318e8927e5009c83c2ad1
53ded630f95abe04b7b77d43076bf71b9ea71c02
68da39270ebfa6d17f4b765cbe004797a736611585ff0c53213d91f78f13c260
GET /pagead/html/r20230329/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 4549
x-xss-protection: 0
date: Fri, 31 Mar 2023 02:51:28 GMT
expires: Fri, 14 Apr 2023 02:51:28 GMT
cache-control: public, max-age=1209600
age: 27477
etag: 2378337311435320485
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mydiv.net.ua/tim/design/favicon/favicon-192x192.png
54.36.106.111200 OK 19 kB URL HTTP/2 mydiv.net.ua/tim/design/favicon/favicon-192x192.png
IP 54.36.106.111:0
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 70289d57de1e3d2dffeb3c3a85418a9c
673136d7d97ebfea4e16a65b2c356b2f4e4f6067
b4c347b138911ec83090f2af209ae4173a7fce7a5d9b301cf6a90166d5a97f96
GET /tim/design/favicon/favicon-192x192.png HTTP/1.1
Host: mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Cookie: suid=de7c9f517b90f01e93ad3472150aa776bd9b8c53174942582ae76fd894ed45f1; ifh=11010140436426b604283aa3.51689900
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:25 GMT
content-type: image/png
content-length: 18575
last-modified: Sat, 14 Jan 2023 15:52:12 GMT
etag: "63c2cfac-488f"
expires: Sun, 30 Apr 2023 10:29:25 GMT
cache-control: max-age=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
mc.yandex.ru/watch/39943420?wmode=7&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&charset=utf-8&browser-info=pv%3A1%3Avf%3A3ue65zhww2f2ejkyzehotb%3Afp%3A1263%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A991%3Acn%3A1%3Adp%3A0%3Als%3A1372839197749%3Ahid%3A935900679%3Az%3A0%3Ai%3A20230331102924%3Aet%3A1680258565%3Ac%3A1%3Arn%3A93130936%3Arqn%3A1%3Au%3A1680258565390428630%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C173%2C0%2C584%2C0%2C%2C558%2C3%2C%2C%2C%2C1321%3Aco%3A0%3Ans%3A1680258563235%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1680258565%3At%3ASONY%20Vegas%20Pro%20%E2%80%94%20%D0%B7%D0%B0%D0%B2%D0%B0%D0%BD%D1%82%D0%B0%D0%B6%D0%B8%D1%82%D0%B8%20%D0%B1%D0%B5%D0%B7%D0%BA%D0%BE%D1%88%D1%82%D0%BE%D0%B2%D0%BD%D0%BE%20%D0%BE%D1%81%D1%82%D0%B0%D0%BD%D0%BD%D1%8E%20%D0%B2%D0%B5%D1%80%D1%81%D1%96%D1%8E%20%D0%B4%D0%BB%D1%8F%20Windows%20%7C%20MyDiv&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
93.158.134.119302 Found 426 B URL HTTP/2 mc.yandex.ru/watch/39943420?wmode=7&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&charset=utf-8&browser-info=pv%3A1%3Avf%3A3ue65zhww2f2ejkyzehotb%3Afp%3A1263%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A991%3Acn%3A1%3Adp%3A0%3Als%3A1372839197749%3Ahid%3A935900679%3Az%3A0%3Ai%3A20230331102924%3Aet%3A1680258565%3Ac%3A1%3Arn%3A93130936%3Arqn%3A1%3Au%3A1680258565390428630%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C173%2C0%2C584%2C0%2C%2C558%2C3%2C%2C%2C%2C1321%3Aco%3A0%3Ans%3A1680258563235%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1680258565%3At%3ASONY%20Vegas%20Pro%20%E2%80%94%20%D0%B7%D0%B0%D0%B2%D0%B0%D0%BD%D1%82%D0%B0%D0%B6%D0%B8%D1%82%D0%B8%20%D0%B1%D0%B5%D0%B7%D0%BA%D0%BE%D1%88%D1%82%D0%BE%D0%B2%D0%BD%D0%BE%20%D0%BE%D1%81%D1%82%D0%B0%D0%BD%D0%BD%D1%8E%20%D0%B2%D0%B5%D1%80%D1%81%D1%96%D1%8E%20%D0%B4%D0%BB%D1%8F%20Windows%20%7C%20MyDiv&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP 93.158.134.119:0
File type JSON data\012- , ASCII text, with very long lines (426), with no line terminators
Hash 52047ad2df7532682f0de80b034cbb1b
fa50976f7a139a5da712def844cdcf7481b70969
481003d57e4ff29793b419679d212240138a9b39bc9712a1aa45e01ce60f1bcf
GET /watch/39943420?wmode=7&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&charset=utf-8&browser-info=pv%3A1%3Avf%3A3ue65zhww2f2ejkyzehotb%3Afp%3A1263%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A991%3Acn%3A1%3Adp%3A0%3Als%3A1372839197749%3Ahid%3A935900679%3Az%3A0%3Ai%3A20230331102924%3Aet%3A1680258565%3Ac%3A1%3Arn%3A93130936%3Arqn%3A1%3Au%3A1680258565390428630%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C173%2C0%2C584%2C0%2C%2C558%2C3%2C%2C%2C%2C1321%3Aco%3A0%3Ans%3A1680258563235%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1680258565%3At%3ASONY%20Vegas%20Pro%20%E2%80%94%20%D0%B7%D0%B0%D0%B2%D0%B0%D0%BD%D1%82%D0%B0%D0%B6%D0%B8%D1%82%D0%B8%20%D0%B1%D0%B5%D0%B7%D0%BA%D0%BE%D1%88%D1%82%D0%BE%D0%B2%D0%BD%D0%BE%20%D0%BE%D1%81%D1%82%D0%B0%D0%BD%D0%BD%D1%8E%20%D0%B2%D0%B5%D1%80%D1%81%D1%96%D1%8E%20%D0%B4%D0%BB%D1%8F%20Windows%20%7C%20MyDiv&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://soft.mydiv.net.ua
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/39943420/1?wmode=7&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&charset=utf-8&browser-info=pv%3A1%3Avf%3A3ue65zhww2f2ejkyzehotb%3Afp%3A1263%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A991%3Acn%3A1%3Adp%3A0%3Als%3A1372839197749%3Ahid%3A935900679%3Az%3A0%3Ai%3A20230331102924%3Aet%3A1680258565%3Ac%3A1%3Arn%3A93130936%3Arqn%3A1%3Au%3A1680258565390428630%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C173%2C0%2C584%2C0%2C%2C558%2C3%2C%2C%2C%2C1321%3Aco%3A0%3Ans%3A1680258563235%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1680258565%3At%3ASONY%20Vegas%20Pro%20%E2%80%94%20%D0%B7%D0%B0%D0%B2%D0%B0%D0%BD%D1%82%D0%B0%D0%B6%D0%B8%D1%82%D0%B8%20%D0%B1%D0%B5%D0%B7%D0%BA%D0%BE%D1%88%D1%82%D0%BE%D0%B2%D0%BD%D0%BE%20%D0%BE%D1%81%D1%82%D0%B0%D0%BD%D0%BD%D1%8E%20%D0%B2%D0%B5%D1%80%D1%81%D1%96%D1%8E%20%D0%B4%D0%BB%D1%8F%20Windows%20%7C%20MyDiv&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Fri, 31 Mar 2023 10:29:25 GMT
access-control-allow-origin: https://soft.mydiv.net.ua
set-cookie: yabs-sid=596748731680258565; Path=/; SameSite=None; Secure
i=+NcsTTZdCmILAX7mfvEL5lAHcQBKFh8dbli2BRmYFr5PUS+/KfxH+IiGCboJ9/ifN2sr1cNa72KHGbhUxhcM4SsRoDU=; Expires=Mon, 28-Mar-2033 10:29:21 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=9814101661680258565; Expires=Mon, 28-Mar-2033 10:29:21 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
yuidss=9814101661680258565; Expires=Sat, 30-Mar-2024 10:29:25 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1711794565.yc.1680258565#1711794565.yrts.1680258565#1711794565.yrtsi.1680258565; Expires=Sat, 30-Mar-2024 10:29:25 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 31-Mar-2023 10:29:25 GMT
last-modified: Fri, 31-Mar-2023 10:29:25 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 31 Mar 2023 10:29:25 GMT
access-control-allow-origin: *
etag: "64241f95-2b"
expires: Fri, 31 Mar 2023 11:29:25 GMT
accept-ranges: bytes
last-modified: Wed, 29 Mar 2023 14:23:01 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 2f67dc9a5c95eca1b4911ccdfa024557
1c5fae325ebbec9280401bd05f68964e2d631afb
efe6c92a3a27c6e0566b3889c0e2b56f284afaf91d106660cfe63bee6420d99a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 10:29:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash d9bccde084c491a04e52752f2af1e16d
5a7a761608a0d79d383e104a0455f76bb0d2248e
aed5aade370f65d015700850f0a3a80c5f47066e82d200f5cf1d2d44657388dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 10:29:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
partner.googleadservices.com/gampad/cookie.js?domain=soft.mydiv.net.ua&callback=_gfp_s_&client=ca-pub-1842037506098481
216.58.207.226200 OK 253 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=soft.mydiv.net.ua&callback=_gfp_s_&client=ca-pub-1842037506098481
IP 216.58.207.226:0
File type ASCII text, with very long lines (391), with no line terminators
Hash 0682544998c6cffc90b1916027b0ac29
0f0f9f35c9247779ea16f1589c7cb86627f5fdb3
32f7d0285df6acd950b559ab8bbfefef6d3a7fcf0dee504f241fba5a19cc40cf
GET /gampad/cookie.js?domain=soft.mydiv.net.ua&callback=_gfp_s_&client=ca-pub-1842037506098481 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 31 Mar 2023 10:29:25 GMT
server: cafe
cache-control: private
content-length: 253
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash c7445f8f9dbe44a0457ed584305727c4
0582edfdc9fe490bfeb72250c218af3cff3f6cab
8fa39260f96786df1a76e9896a1a9614fd3ab4aadb1a2f98b909c55caeb9eae1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 10:29:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com/adsid/integrator.js?domain=soft.mydiv.net.ua
142.250.74.162200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=soft.mydiv.net.ua
IP 142.250.74.162:0
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=soft.mydiv.net.ua HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 31 Mar 2023 10:29:25 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=soft.mydiv.net.ua
142.250.74.2200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=soft.mydiv.net.ua
IP 142.250.74.2:0
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=soft.mydiv.net.ua HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 31 Mar 2023 10:29:25 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 2f67dc9a5c95eca1b4911ccdfa024557
1c5fae325ebbec9280401bd05f68964e2d631afb
efe6c92a3a27c6e0566b3889c0e2b56f284afaf91d106660cfe63bee6420d99a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 10:29:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash c7445f8f9dbe44a0457ed584305727c4
0582edfdc9fe490bfeb72250c218af3cff3f6cab
8fa39260f96786df1a76e9896a1a9614fd3ab4aadb1a2f98b909c55caeb9eae1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 10:29:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash d9bccde084c491a04e52752f2af1e16d
5a7a761608a0d79d383e104a0455f76bb0d2248e
aed5aade370f65d015700850f0a3a80c5f47066e82d200f5cf1d2d44657388dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 10:29:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 195589ff3c6c50463257f10da16de114
7119aeba010d5c5c224fa544feff6f1761739929
dbb5774621e0eee6f9641f6078a650a78d281019726ade7a52c150f0988cd12b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DBB5774621E0EEE6F9641F6078A650A78D281019726ADE7A52C150F0988CD12B"
Last-Modified: Wed, 29 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7902
Expires: Fri, 31 Mar 2023 12:41:07 GMT
Date: Fri, 31 Mar 2023 10:29:25 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 195589ff3c6c50463257f10da16de114
7119aeba010d5c5c224fa544feff6f1761739929
dbb5774621e0eee6f9641f6078a650a78d281019726ade7a52c150f0988cd12b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DBB5774621E0EEE6F9641F6078A650A78D281019726ADE7A52C150F0988CD12B"
Last-Modified: Wed, 29 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7902
Expires: Fri, 31 Mar 2023 12:41:07 GMT
Date: Fri, 31 Mar 2023 10:29:25 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccede828-1c24-4287-bb00-f793263370cf.jpeg
34.120.237.76200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccede828-1c24-4287-bb00-f793263370cf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8a2b8f737604b7983cf686c82599dc73
aa63be93c4cd641f09ce0d5144ef60aab21caed1
78835586bfd170fee7e6f70b2b426ed186f5aeae969459c6dcbf527ba9c0deec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccede828-1c24-4287-bb00-f793263370cf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6380
x-amzn-requestid: 0a129a69-0720-47a0-8b0e-b3200de24204
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CnUn6E19IAMF9SQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64260165-564474a42e79d1dc4eb9558f;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Thu, 30 Mar 2023 21:38:45 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: L6tgzFrj9t69Rnfd9bziAPiROAX0tvcj9Kcg8sXkto8qRFeKqiwkpg==
via: 1.1 b5695e36d7fbc522ece27885d73757ae.cloudfront.net (CloudFront), 1.1 7514e5e25722778fd4b1744d4ecc67e0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Mar 2023 22:17:06 GMT
age: 43939
etag: "aa63be93c4cd641f09ce0d5144ef60aab21caed1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68adff46-2278-4660-8b41-0719f5eb19f2.jpeg
34.120.237.76200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68adff46-2278-4660-8b41-0719f5eb19f2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aa4bea27e3e3b648176b5d87c919422d
1aa537444512644c9e5ddbb732cb310e5d3f3a26
28706ef531eabf37199ce8160884b6abe9220809e6217000883a0d9f0a23e93d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68adff46-2278-4660-8b41-0719f5eb19f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5108
x-amzn-requestid: 8d187151-2480-477a-82d9-fa5c96dd61db
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CkA6THX9IAMFhrw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6424aea7-5e5a11746610faac7bb883bb;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Wed, 29 Mar 2023 21:33:28 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: RC7BCyW_QitX-xaWwVn_7qcPD_Qu2dIwr2l_rD3HvHT_812xzmU8vw==
via: 1.1 ee32c7a76e2727d565413cc6c352ef48.cloudfront.net (CloudFront), 1.1 d90109c5a0c30f43223e0db85921c5c2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 31 Mar 2023 06:27:36 GMT
age: 14509
etag: "1aa537444512644c9e5ddbb732cb310e5d3f3a26"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cbd721e-872e-4eec-8eb5-363663d0ab36.jpeg
34.120.237.76200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cbd721e-872e-4eec-8eb5-363663d0ab36.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8600e41520408df4865627256a0a0736
dffeaf1a8f73ae9f6247b9dc7f05301fefc00aef
9163d80d7b6087b804e6682a50d4f66339d339894cf1c5808f2e5c2e0b3de930
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cbd721e-872e-4eec-8eb5-363663d0ab36.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5806
x-amzn-requestid: cee5b166-592b-405e-b5f1-e36eb249ec59
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CnUllFFooAMFQ2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64260156-01840fa47177285667bca060;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Thu, 30 Mar 2023 21:38:30 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: WnrfQr57EWYnXt1xJt9tr5XCuM3gPYULlDdEVpv2Q2kz7MDIPxSPKA==
via: 1.1 88a7ff956a5b49ec3a35abfc0027af12.cloudfront.net (CloudFront), 1.1 aabd01c4a20dae837d162bd972422efc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Mar 2023 21:47:50 GMT
age: 45695
etag: "dffeaf1a8f73ae9f6247b9dc7f05301fefc00aef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash da174e6ccc9451c5071ba10eeb97f6f6
c38827a9ac1218768839877263e1f2984fbdc454
76da406c8ae8cd6ca8471928f3aec3876aed2c21bc10edc0fbdaef5c100c1030
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9859
x-amzn-requestid: c00efe5b-7fdb-445a-a924-75ddd461b72b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: COQPtHizoAMF7-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641bfa64-3eb90ae703b78e8a06130540;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 07:06:12 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: nZfXy-IsoHliuLodEocEZlH-IvmIV9G-noSmSEU1wmuMPfBx3rLJ9w==
via: 1.1 02f1a759e4ec9fab6fc17c080dd851dc.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Mar 2023 11:37:45 GMT
age: 82300
etag: "c38827a9ac1218768839877263e1f2984fbdc454"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F067b6c49-6e52-4dcc-af72-f7292299f912.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F067b6c49-6e52-4dcc-af72-f7292299f912.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 876e5464aba1639f3b07b07d1d694514
93885a6205be71d16187782b1803f53d5c8538cb
6e2b6b15f462922a9e8260f55cfcd94d488d1a48435458db43270ea3b825d8c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F067b6c49-6e52-4dcc-af72-f7292299f912.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13775
x-amzn-requestid: 43d1a1f3-b189-4fcd-a298-429123d1921b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CnUloF9woAMFU4w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64260156-13778451622503253ea252eb;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Thu, 30 Mar 2023 21:38:30 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: bXA995GxGti4_AzSi9F19ZNvUwm5_ZSBw0BB0lRIfNHcmX7Ajt6bSg==
via: 1.1 8731d2a1a7d15f67b588bf58f652f9f0.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Mar 2023 21:52:34 GMT
age: 45411
etag: "93885a6205be71d16187782b1803f53d5c8538cb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0794d5a0-7014-425b-9ea0-5dca44ddb4dd.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0794d5a0-7014-425b-9ea0-5dca44ddb4dd.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ef54a1ed997cc09495edb102ccdf6803
f5637efb37b5eecff77e60e6bcf5f599991f334f
fa76d7a82dc15baf02b207cea874d1332c20a0ebe1eea99929a6f2746608412c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0794d5a0-7014-425b-9ea0-5dca44ddb4dd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8745
x-amzn-requestid: e1d8dab6-4c15-4752-b528-21854c93a11c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CguJ5Hy5oAMFyAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64235d72-4bd62c8472f7257a155b2a80;Sampled=0
x-amzn-remapped-date: Tue, 28 Mar 2023 21:34:42 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: LAAUFZcFBIpdMUkaDQXGW1sdwLK9c_uhQQHLiJHGF7dEvfJ0KX7MaA==
via: 1.1 8f251d23da31b683c3c9d6fad6ca944c.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Fri, 31 Mar 2023 06:44:37 GMT
age: 13488
etag: "f5637efb37b5eecff77e60e6bcf5f599991f334f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash a54559cbe6b913272745930d0d88346a
dd59af51740af567109eec67847fcd515b191e0b
b76846074b40dba161bcbbc5c69434bec196efef09befb675ea5010566712091
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 10:29:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/pagead/js/r20230329/r20110914/client/qs_click_protection_fy2021.js
142.250.74.161200 OK 8.3 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20230329/r20110914/client/qs_click_protection_fy2021.js
IP 142.250.74.161:0
File type ASCII text, with very long lines (2329)
Hash 15153e582e642d8a9980467efaa11ad4
f738352e6b73226ade4d1df49abd968ef49b9f90
f87b1904ab612eb27b708cfdc920e8e7f92f987737147280e3248ad5d87bf33d
GET /pagead/js/r20230329/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 8268
x-xss-protection: 0
date: Thu, 30 Mar 2023 22:33:06 GMT
expires: Thu, 13 Apr 2023 22:33:06 GMT
cache-control: public, max-age=1209600
age: 42980
etag: 8048349561987089234
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
142.250.74.162200 OK 50 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP 142.250.74.162:0
File type ASCII text, with very long lines (3399)
Hash 1e7768364a8db1e88535d1ca1ee9cd6b
90d26fec8305c95cc5f6fa4b2398456d88627570
eb24872de47889683879df871844b6468d59bb8126f106189b44bbe305853a0a
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
timing-allow-origin: *
content-length: 49585
date: Fri, 31 Mar 2023 10:29:26 GMT
expires: Fri, 31 Mar 2023 10:29:26 GMT
cache-control: private, max-age=3000
etag: "1680090252828925"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.doubleverify.com/dvtp_src.js?ctx=3397726&cmp=3398513&sid=pp3&plc=33985131&advid=3398311&adsrv=0&btreg=&btadsrv=&tagtype=&dvtagver=6.1.src&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVPX_PP_IMP_ID=ABAjH0j-Xv-171yAPXY3NE0AAKCS&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347721382&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&DVP_PP_BUNDLE_ID=
95.101.11.115200 OK 3.3 kB URL HTTP/1.1 cdn.doubleverify.com/dvtp_src.js?ctx=3397726&cmp=3398513&sid=pp3&plc=33985131&advid=3398311&adsrv=0&btreg=&btadsrv=&tagtype=&dvtagver=6.1.src&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVPX_PP_IMP_ID=ABAjH0j-Xv-171yAPXY3NE0AAKCS&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347721382&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&DVP_PP_BUNDLE_ID=
IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (8016)
Hash e072d49341cffb322fdd359541b9e969
de1b7189b03b1aea898af405c0211a80cd25ec95
bd955388ecf026cba6c91f799b23a110cf0b3bc0cebe97ee5ed188c8f92558a2
GET /dvtp_src.js?ctx=3397726&cmp=3398513&sid=pp3&plc=33985131&advid=3398311&adsrv=0&btreg=&btadsrv=&tagtype=&dvtagver=6.1.src&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVPX_PP_IMP_ID=ABAjH0j-Xv-171yAPXY3NE0AAKCS&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347721382&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&DVP_PP_BUNDLE_ID= HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=900
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Tue, 21 Mar 2023 12:11:05 GMT
Accept-Ranges: bytes
ETag: "8012f935ee5bd91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
Content-Length: 3337
Date: Fri, 31 Mar 2023 10:29:26 GMT
Connection: keep-alive
cdn.doubleverify.com/dvbs_src.js?ctx=1828362&cmp=115739&plc=4254492&sid=18330&dvregion=0&unit=300x250&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&prr=1&DVP_DV_CT=1&DVP_PP_IMP_ID=ABAjH0j-Xv-171yAPXY3NE0AAKCS&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347721382&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&DVP_PP_BUNDLE_ID=
95.101.11.115200 OK 1.2 kB URL HTTP/1.1 cdn.doubleverify.com/dvbs_src.js?ctx=1828362&cmp=115739&plc=4254492&sid=18330&dvregion=0&unit=300x250&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&prr=1&DVP_DV_CT=1&DVP_PP_IMP_ID=ABAjH0j-Xv-171yAPXY3NE0AAKCS&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347721382&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&DVP_PP_BUNDLE_ID=
IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
File type HTML document, ASCII text, with very long lines (536)
Hash 9b0ef0e5b912683035f3ec3dc7a6ba88
ac08726b04e33d671ac1f77cba8462992ff4b932
1a57cc629965b4fd2cb6e1f764fc5fda00b2ed9cdf9c653bdb03fc49e9ce273f
GET /dvbs_src.js?ctx=1828362&cmp=115739&plc=4254492&sid=18330&dvregion=0&unit=300x250&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&prr=1&DVP_DV_CT=1&DVP_PP_IMP_ID=ABAjH0j-Xv-171yAPXY3NE0AAKCS&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347721382&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&DVP_PP_BUNDLE_ID= HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=86400
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Tue, 10 Jan 2023 10:59:51 GMT
Accept-Ranges: bytes
ETag: "2d4a10aae224d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
Timing-Allow-Origin: *
Content-Length: 1170
Date: Fri, 31 Mar 2023 10:29:26 GMT
Connection: keep-alive
cdn.doubleverify.com/dvtp_src.js?ctx=3397726&cmp=3398513&sid=pp3&plc=33985131&advid=3398311&adsrv=0&btreg=&btadsrv=&tagtype=&dvtagver=6.1.src&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVPX_PP_IMP_ID=ABAjH0h7gvk7PZByB9nZUEA8Oq6U&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347721382&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&DVP_PP_BUNDLE_ID=
95.101.11.115200 OK 3.3 kB URL HTTP/1.1 cdn.doubleverify.com/dvtp_src.js?ctx=3397726&cmp=3398513&sid=pp3&plc=33985131&advid=3398311&adsrv=0&btreg=&btadsrv=&tagtype=&dvtagver=6.1.src&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVPX_PP_IMP_ID=ABAjH0h7gvk7PZByB9nZUEA8Oq6U&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347721382&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&DVP_PP_BUNDLE_ID=
IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (8016)
Hash e072d49341cffb322fdd359541b9e969
de1b7189b03b1aea898af405c0211a80cd25ec95
bd955388ecf026cba6c91f799b23a110cf0b3bc0cebe97ee5ed188c8f92558a2
GET /dvtp_src.js?ctx=3397726&cmp=3398513&sid=pp3&plc=33985131&advid=3398311&adsrv=0&btreg=&btadsrv=&tagtype=&dvtagver=6.1.src&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVPX_PP_IMP_ID=ABAjH0h7gvk7PZByB9nZUEA8Oq6U&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347721382&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&DVP_PP_BUNDLE_ID= HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=900
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Tue, 21 Mar 2023 12:11:05 GMT
Accept-Ranges: bytes
ETag: "8012f935ee5bd91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
Content-Length: 3337
Date: Fri, 31 Mar 2023 10:29:26 GMT
Connection: keep-alive
cdn.doubleverify.com/dvbs_src_internal117.js
95.101.11.115200 OK 19 kB URL HTTP/1.1 cdn.doubleverify.com/dvbs_src_internal117.js
IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (2636), with CRLF, LF line terminators
Hash cf93b15de9d1c76c1bc6fdaee5382496
26e52f0a242bff375cc54d8d33a1a416d89e2813
c290ae68279e0685c13650d1534a0cd86997420399bb67288046e61b13defb53
GET /dvbs_src_internal117.js HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=946080000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Tue, 10 Jan 2023 11:00:18 GMT
Accept-Ranges: bytes
ETag: "0cda5b9e224d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
Content-Length: 18840
Date: Fri, 31 Mar 2023 10:29:26 GMT
Connection: keep-alive
cdn.doubleverify.com/dvbs_src.js?ctx=1828362&cmp=115739&plc=4254494&sid=18330&dvregion=0&unit=728x90&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&prr=1&DVP_DV_CT=1&DVP_PP_IMP_ID=ABAjH0huXwYLw1h5hHPYzVFck_0a&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347820487&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&DVP_PP_BUNDLE_ID=
95.101.11.115200 OK 1.2 kB URL HTTP/1.1 cdn.doubleverify.com/dvbs_src.js?ctx=1828362&cmp=115739&plc=4254494&sid=18330&dvregion=0&unit=728x90&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&prr=1&DVP_DV_CT=1&DVP_PP_IMP_ID=ABAjH0huXwYLw1h5hHPYzVFck_0a&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347820487&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&DVP_PP_BUNDLE_ID=
IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
File type HTML document, ASCII text, with very long lines (536)
Hash 9b0ef0e5b912683035f3ec3dc7a6ba88
ac08726b04e33d671ac1f77cba8462992ff4b932
1a57cc629965b4fd2cb6e1f764fc5fda00b2ed9cdf9c653bdb03fc49e9ce273f
GET /dvbs_src.js?ctx=1828362&cmp=115739&plc=4254494&sid=18330&dvregion=0&unit=728x90&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&prr=1&DVP_DV_CT=1&DVP_PP_IMP_ID=ABAjH0huXwYLw1h5hHPYzVFck_0a&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347820487&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&DVP_PP_BUNDLE_ID= HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=86400
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Tue, 10 Jan 2023 10:59:51 GMT
Accept-Ranges: bytes
ETag: "2d4a10aae224d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
Timing-Allow-Origin: *
Content-Length: 1170
Date: Fri, 31 Mar 2023 10:29:26 GMT
Connection: keep-alive
cdn.doubleverify.com/dvtp_src.js?ctx=3397726&cmp=3398513&sid=pp3&plc=33985131&advid=3398311&adsrv=0&btreg=&btadsrv=&tagtype=&dvtagver=6.1.src&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVPX_PP_IMP_ID=ABAjH0huXwYLw1h5hHPYzVFck_0a&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347820487&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&DVP_PP_BUNDLE_ID=
95.101.11.115200 OK 3.3 kB URL HTTP/1.1 cdn.doubleverify.com/dvtp_src.js?ctx=3397726&cmp=3398513&sid=pp3&plc=33985131&advid=3398311&adsrv=0&btreg=&btadsrv=&tagtype=&dvtagver=6.1.src&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVPX_PP_IMP_ID=ABAjH0huXwYLw1h5hHPYzVFck_0a&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347820487&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&DVP_PP_BUNDLE_ID=
IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (8016)
Hash e072d49341cffb322fdd359541b9e969
de1b7189b03b1aea898af405c0211a80cd25ec95
bd955388ecf026cba6c91f799b23a110cf0b3bc0cebe97ee5ed188c8f92558a2
GET /dvtp_src.js?ctx=3397726&cmp=3398513&sid=pp3&plc=33985131&advid=3398311&adsrv=0&btreg=&btadsrv=&tagtype=&dvtagver=6.1.src&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVPX_PP_IMP_ID=ABAjH0huXwYLw1h5hHPYzVFck_0a&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347820487&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&DVP_PP_BUNDLE_ID= HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=900
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Tue, 21 Mar 2023 12:11:05 GMT
Accept-Ranges: bytes
ETag: "8012f935ee5bd91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
Content-Length: 3337
Date: Fri, 31 Mar 2023 10:29:26 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 7117d0725779b203269d6c54c3ccedcf
24f4e806fd15c39484288a88c67117c918ce0829
ecfdfee4723c973d404d5e580a8cead357de755354328bfa40c1041350a76504
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 10:29:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 7117d0725779b203269d6c54c3ccedcf
24f4e806fd15c39484288a88c67117c918ce0829
ecfdfee4723c973d404d5e580a8cead357de755354328bfa40c1041350a76504
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 10:29:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.starfieldtech.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash 00fe6dada994c3f2cfd41fa949d86a31
02609ac04a528d99ade196e36a9f80c51714fe21
6c439f6f27151ede8338b12e89dc2ecdbd7a71075447fffa33d175a692a3e053
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 31 Mar 2023 10:29:26 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 30 Mar 2023 19:48:21 GMT
Expires: Fri, 31 Mar 2023 19:48:21 GMT
ETag: "02609ac04a528d99ade196e36a9f80c51714fe21"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.starfieldtech.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash 00fe6dada994c3f2cfd41fa949d86a31
02609ac04a528d99ade196e36a9f80c51714fe21
6c439f6f27151ede8338b12e89dc2ecdbd7a71075447fffa33d175a692a3e053
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 31 Mar 2023 10:29:26 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 30 Mar 2023 19:48:21 GMT
Expires: Fri, 31 Mar 2023 19:48:21 GMT
ETag: "02609ac04a528d99ade196e36a9f80c51714fe21"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.starfieldtech.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash 00fe6dada994c3f2cfd41fa949d86a31
02609ac04a528d99ade196e36a9f80c51714fe21
6c439f6f27151ede8338b12e89dc2ecdbd7a71075447fffa33d175a692a3e053
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 31 Mar 2023 10:29:26 GMT
Content-Type: application/ocsp-response
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 30 Mar 2023 19:48:21 GMT
Expires: Fri, 31 Mar 2023 19:48:21 GMT
ETag: "02609ac04a528d99ade196e36a9f80c51714fe21"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 7117d0725779b203269d6c54c3ccedcf
24f4e806fd15c39484288a88c67117c918ce0829
ecfdfee4723c973d404d5e580a8cead357de755354328bfa40c1041350a76504
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 10:29:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash ee15ff6931559991c58a51cbecf4c8c5
073267ce58de3587f3e1b80914852f6acd56921f
2c90a44d2191b0276c9e0d0571c263a48f2b74cb287f683517c08449bd815ea5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 10:29:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/images/icons/material/system/2x/settings_grey600_24dp.png
142.250.74.35200 OK 604 B URL HTTP/2 www.gstatic.com/images/icons/material/system/2x/settings_grey600_24dp.png
IP 142.250.74.35:0
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 7bd42e5a35b5fb3ff852d6ea9191ca83
8a141eb392a05a2dea3dcd83b97940ef70a81ebc
5c4a713ee4250851232be9f9f68d41586be39b299528cfc7266e0b0e7e582e1b
GET /images/icons/material/system/2x/settings_grey600_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 604
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Mar 2023 14:41:15 GMT
expires: Fri, 29 Mar 2024 14:41:15 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: image/png
vary: Origin
age: 71291
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/images/icons/material/system/2x/feedback_grey600_24dp.png
142.250.74.35200 OK 205 B URL HTTP/2 www.gstatic.com/images/icons/material/system/2x/feedback_grey600_24dp.png
IP 142.250.74.35:0
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 4087858e2c9db9aa8f6a840aedcfb533
d1ffe861da6bd0e95fd1a365b0c3d3ceb6cd58a3
4d45982f2dc34f36c9045ee46a75a1943666bb7fd64e103cac8c7429e7012840
GET /images/icons/material/system/2x/feedback_grey600_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 205
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Mar 2023 19:42:56 GMT
expires: Thu, 28 Mar 2024 19:42:56 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: image/png
vary: Origin
age: 139590
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
rtb0.doubleverify.com/verify.js?flvr=0&jsCallback=__verify_callback_228300982878&jsTagObjCallback=__tagObject_callback_228300982878&num=6&ctx=1828362&cmp=115739&plc=4254492&sid=18330&advid=&adsrv=&unit=300x250&isdvvid=&uid=228300982878&tagtype=&adID=&app=&sup=&isovv=0&gmnpo=&crt=&nav_pltfrm=Linux%20x86_64&dvp_strhd=1.00&dvpx_strhd=1.00&brid=0&brver=&bridua=2&dup=null&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&chro=0&hist=1&winh=340&winw=332&wouh=1024&wouw=1280&scah=1002&scaw=1280&srcurlD=0&ssl=1&refD=2&htmlmsging=1&tstype=128&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVP_PP_IMP_ID=ABAjH0h7gvk7PZByB9nZUEA8Oq6U&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347721382&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&DVP_PP_BUNDLE_ID=&prr=1&aUrlD=-1&m1=13&noc=16&fcifrms=5&brh=1&vavbkt=&lvvn=28&dvp_idcerr=undefined&ver=165&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&dvp_exetime=5.00&callbackName=__verify_callback_228300982878
34.149.12.213200 OK 265 B URL HTTP/1.1 rtb0.doubleverify.com/verify.js?flvr=0&jsCallback=__verify_callback_228300982878&jsTagObjCallback=__tagObject_callback_228300982878&num=6&ctx=1828362&cmp=115739&plc=4254492&sid=18330&advid=&adsrv=&unit=300x250&isdvvid=&uid=228300982878&tagtype=&adID=&app=&sup=&isovv=0&gmnpo=&crt=&nav_pltfrm=Linux%20x86_64&dvp_strhd=1.00&dvpx_strhd=1.00&brid=0&brver=&bridua=2&dup=null&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&chro=0&hist=1&winh=340&winw=332&wouh=1024&wouw=1280&scah=1002&scaw=1280&srcurlD=0&ssl=1&refD=2&htmlmsging=1&tstype=128&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVP_PP_IMP_ID=ABAjH0h7gvk7PZByB9nZUEA8Oq6U&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347721382&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&DVP_PP_BUNDLE_ID=&prr=1&aUrlD=-1&m1=13&noc=16&fcifrms=5&brh=1&vavbkt=&lvvn=28&dvp_idcerr=undefined&ver=165&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&dvp_exetime=5.00&callbackName=__verify_callback_228300982878
IP 34.149.12.213:0
Hash 4a0dbc15361c1cbe51f9a20f1bc9302d
d98524d9bd951d69ca63fd21f95ee7446a1c5848
87d79b2892e0e60f574e44c781eeffc0be3220f43c664b75f4e65ee2de6c00a1
GET /verify.js?flvr=0&jsCallback=__verify_callback_228300982878&jsTagObjCallback=__tagObject_callback_228300982878&num=6&ctx=1828362&cmp=115739&plc=4254492&sid=18330&advid=&adsrv=&unit=300x250&isdvvid=&uid=228300982878&tagtype=&adID=&app=&sup=&isovv=0&gmnpo=&crt=&nav_pltfrm=Linux%20x86_64&dvp_strhd=1.00&dvpx_strhd=1.00&brid=0&brver=&bridua=2&dup=null&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&chro=0&hist=1&winh=340&winw=332&wouh=1024&wouw=1280&scah=1002&scaw=1280&srcurlD=0&ssl=1&refD=2&htmlmsging=1&tstype=128&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVP_PP_IMP_ID=ABAjH0h7gvk7PZByB9nZUEA8Oq6U&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347721382&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&DVP_PP_BUNDLE_ID=&prr=1&aUrlD=-1&m1=13&noc=16&fcifrms=5&brh=1&vavbkt=&lvvn=28&dvp_idcerr=undefined&ver=165&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&dvp_exetime=5.00&callbackName=__verify_callback_228300982878 HTTP/1.1
Host: rtb0.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 10:29:26 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=0
Content-Encoding: br
Expires: 03/30/2023 10:29:26
Pragma: no-cache
Vary: Accept-Encoding
X-DV-Response: 0
rtb0.doubleverify.com/verify.js?flvr=0&jsCallback=__verify_callback_844849340041&jsTagObjCallback=__tagObject_callback_844849340041&num=6&ctx=1828362&cmp=115739&plc=4254492&sid=18330&advid=&adsrv=&unit=300x250&isdvvid=&uid=844849340041&tagtype=&adID=&app=&sup=&isovv=0&gmnpo=&crt=&nav_pltfrm=Linux%20x86_64&dvp_strhd=2.00&dvpx_strhd=2.00&brid=0&brver=&bridua=2&dup=null&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&chro=0&hist=1&winh=340&winw=332&wouh=1024&wouw=1280&scah=1002&scaw=1280&srcurlD=0&ssl=1&refD=2&htmlmsging=1&tstype=128&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVP_PP_IMP_ID=ABAjH0j-Xv-171yAPXY3NE0AAKCS&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347721382&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&DVP_PP_BUNDLE_ID=&prr=1&aUrlD=-1&m1=13&noc=16&fcifrms=5&brh=1&vavbkt=&lvvn=28&dvp_idcerr=undefined&ver=165&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&dvp_exetime=12.00&callbackName=__verify_callback_844849340041
34.149.12.213200 OK 266 B URL HTTP/1.1 rtb0.doubleverify.com/verify.js?flvr=0&jsCallback=__verify_callback_844849340041&jsTagObjCallback=__tagObject_callback_844849340041&num=6&ctx=1828362&cmp=115739&plc=4254492&sid=18330&advid=&adsrv=&unit=300x250&isdvvid=&uid=844849340041&tagtype=&adID=&app=&sup=&isovv=0&gmnpo=&crt=&nav_pltfrm=Linux%20x86_64&dvp_strhd=2.00&dvpx_strhd=2.00&brid=0&brver=&bridua=2&dup=null&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&chro=0&hist=1&winh=340&winw=332&wouh=1024&wouw=1280&scah=1002&scaw=1280&srcurlD=0&ssl=1&refD=2&htmlmsging=1&tstype=128&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVP_PP_IMP_ID=ABAjH0j-Xv-171yAPXY3NE0AAKCS&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347721382&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&DVP_PP_BUNDLE_ID=&prr=1&aUrlD=-1&m1=13&noc=16&fcifrms=5&brh=1&vavbkt=&lvvn=28&dvp_idcerr=undefined&ver=165&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&dvp_exetime=12.00&callbackName=__verify_callback_844849340041
IP 34.149.12.213:0
Hash b885e4f2f4579e6c1647e39fd0cebf71
5de388ff78fa934d676f0759b87f461c011ecc3c
6114d19fb2bc6e3ee7991eb44350d84e6523c60a8b4047ff05991f46c9568281
GET /verify.js?flvr=0&jsCallback=__verify_callback_844849340041&jsTagObjCallback=__tagObject_callback_844849340041&num=6&ctx=1828362&cmp=115739&plc=4254492&sid=18330&advid=&adsrv=&unit=300x250&isdvvid=&uid=844849340041&tagtype=&adID=&app=&sup=&isovv=0&gmnpo=&crt=&nav_pltfrm=Linux%20x86_64&dvp_strhd=2.00&dvpx_strhd=2.00&brid=0&brver=&bridua=2&dup=null&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&chro=0&hist=1&winh=340&winw=332&wouh=1024&wouw=1280&scah=1002&scaw=1280&srcurlD=0&ssl=1&refD=2&htmlmsging=1&tstype=128&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVP_PP_IMP_ID=ABAjH0j-Xv-171yAPXY3NE0AAKCS&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347721382&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&DVP_PP_BUNDLE_ID=&prr=1&aUrlD=-1&m1=13&noc=16&fcifrms=5&brh=1&vavbkt=&lvvn=28&dvp_idcerr=undefined&ver=165&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&dvp_exetime=12.00&callbackName=__verify_callback_844849340041 HTTP/1.1
Host: rtb0.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 10:29:26 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=0
Content-Encoding: br
Expires: 03/30/2023 10:29:26
Pragma: no-cache
Vary: Accept-Encoding
X-DV-Response: 0
rtb0.doubleverify.com/verify.js?flvr=0&jsCallback=__verify_callback_789386710567&jsTagObjCallback=__tagObject_callback_789386710567&num=6&ctx=1828362&cmp=115739&plc=4254494&sid=18330&advid=&adsrv=&unit=728x90&isdvvid=&uid=789386710567&tagtype=&adID=&app=&sup=&isovv=0&gmnpo=&crt=&nav_pltfrm=Linux%20x86_64&dvp_strhd=1.00&dvpx_strhd=1.00&brid=0&brver=&bridua=2&dup=null&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&chro=0&hist=1&winh=100&winw=738&wouh=1024&wouw=1280&scah=1002&scaw=1280&srcurlD=0&ssl=1&refD=2&htmlmsging=1&tstype=128&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVP_PP_IMP_ID=ABAjH0huXwYLw1h5hHPYzVFck_0a&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347820487&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&DVP_PP_BUNDLE_ID=&prr=1&aUrlD=-1&m1=13&noc=16&fcifrms=5&brh=1&vavbkt=&lvvn=28&dvp_idcerr=undefined&ver=165&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&dvp_exetime=7.00&callbackName=__verify_callback_789386710567
34.149.12.213200 OK 265 B URL HTTP/1.1 rtb0.doubleverify.com/verify.js?flvr=0&jsCallback=__verify_callback_789386710567&jsTagObjCallback=__tagObject_callback_789386710567&num=6&ctx=1828362&cmp=115739&plc=4254494&sid=18330&advid=&adsrv=&unit=728x90&isdvvid=&uid=789386710567&tagtype=&adID=&app=&sup=&isovv=0&gmnpo=&crt=&nav_pltfrm=Linux%20x86_64&dvp_strhd=1.00&dvpx_strhd=1.00&brid=0&brver=&bridua=2&dup=null&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&chro=0&hist=1&winh=100&winw=738&wouh=1024&wouw=1280&scah=1002&scaw=1280&srcurlD=0&ssl=1&refD=2&htmlmsging=1&tstype=128&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVP_PP_IMP_ID=ABAjH0huXwYLw1h5hHPYzVFck_0a&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347820487&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&DVP_PP_BUNDLE_ID=&prr=1&aUrlD=-1&m1=13&noc=16&fcifrms=5&brh=1&vavbkt=&lvvn=28&dvp_idcerr=undefined&ver=165&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&dvp_exetime=7.00&callbackName=__verify_callback_789386710567
IP 34.149.12.213:0
Hash 60b46c97d943507fb53b55cc1690a913
7850a080551f1fb90795fb8008997f064dffb165
b21e10cb85a01489d70028da9e2ac3100968e64990b80aed71d6223fce1b3b3a
GET /verify.js?flvr=0&jsCallback=__verify_callback_789386710567&jsTagObjCallback=__tagObject_callback_789386710567&num=6&ctx=1828362&cmp=115739&plc=4254494&sid=18330&advid=&adsrv=&unit=728x90&isdvvid=&uid=789386710567&tagtype=&adID=&app=&sup=&isovv=0&gmnpo=&crt=&nav_pltfrm=Linux%20x86_64&dvp_strhd=1.00&dvpx_strhd=1.00&brid=0&brver=&bridua=2&dup=null&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&chro=0&hist=1&winh=100&winw=738&wouh=1024&wouw=1280&scah=1002&scaw=1280&srcurlD=0&ssl=1&refD=2&htmlmsging=1&tstype=128&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVP_PP_IMP_ID=ABAjH0huXwYLw1h5hHPYzVFck_0a&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347820487&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&DVP_PP_BUNDLE_ID=&prr=1&aUrlD=-1&m1=13&noc=16&fcifrms=5&brh=1&vavbkt=&lvvn=28&dvp_idcerr=undefined&ver=165&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&dvp_exetime=7.00&callbackName=__verify_callback_789386710567 HTTP/1.1
Host: rtb0.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 10:29:26 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=0
Content-Encoding: br
Expires: 03/30/2023 10:29:26
Pragma: no-cache
Vary: Accept-Encoding
X-DV-Response: 0
www.google.com/pagead/drt/ui
142.250.74.132302 Found 0 B URL HTTP/2 www.google.com/pagead/drt/ui
IP 142.250.74.132:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/drt/ui HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA
cache-control: private
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 31 Mar 2023 10:29:26 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.doubleverify.com/dv-measurements3590.js
95.101.11.115200 OK 109 kB URL HTTP/1.1 cdn.doubleverify.com/dv-measurements3590.js
IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Size 109 kB (108664 bytes)
Hash 1641a9065f775579eb36e560f8aece4e
1177a3cde5acfc8733c283dc7cb0799f94980b76
6448dbc00141d6bd237f6081e7eab33bfa16a4be59140d3adedd379984e7d1e0
GET /dv-measurements3590.js HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=946080900
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Tue, 21 Mar 2023 10:20:26 GMT
Accept-Ranges: bytes
ETag: "011d2c0de5bd91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
Content-Length: 108664
Date: Fri, 31 Mar 2023 10:29:26 GMT
Connection: keep-alive
ocsp.digicert.com/
192.229.221.95200 OK 471 B IP 192.229.221.95:0
Hash 64319aed5b3163a6a2c2e0ea881e1ac5
dc23be6635dc9351479e1b7b428635f55a375b10
20f44db268aaacb3923c9f9057c2ad817919fc3f9d86c1abb4d86a1b74b20711
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1145
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 10:29:27 GMT
Last-Modified: Fri, 31 Mar 2023 10:10:22 GMT
Server: ECAcc (ska/F7A3)
X-Cache: HIT
Content-Length: 471
adobe.demdex.net/event?d_sid=498429&d_rtbd=json&d_cb=fltk
34.249.39.203302 Found 0 B URL HTTP/1.1 adobe.demdex.net/event?d_sid=498429&d_rtbd=json&d_cb=fltk
IP 34.249.39.203:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /event?d_sid=498429&d_rtbd=json&d_cb=fltk HTTP/1.1
Host: adobe.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-1-v046-0458b73b6.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://adobe.demdex.net/firstevent?d_sid=498429&d_rtbd=json&d_cb=fltk
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=88770372156945405041482662590562791664; Max-Age=15552000; Expires=Wed, 27 Sep 2023 10:29:27 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: esRywTXnTcM=
Content-Length: 0
Connection: keep-alive
adobe.demdex.net/event?d_sid=498429&d_rtbd=json&d_cb=fltk
34.249.39.203302 Found 0 B URL HTTP/1.1 adobe.demdex.net/event?d_sid=498429&d_rtbd=json&d_cb=fltk
IP 34.249.39.203:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /event?d_sid=498429&d_rtbd=json&d_cb=fltk HTTP/1.1
Host: adobe.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-1-v046-0040bba41.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://adobe.demdex.net/firstevent?d_sid=498429&d_rtbd=json&d_cb=fltk
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=38389781072478404213709662550105642932; Max-Age=15552000; Expires=Wed, 27 Sep 2023 10:29:27 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: kWwVcHiLSTI=
Content-Length: 0
Connection: keep-alive
adobe.demdex.net/event?d_sid=498429&d_rtbd=json&d_cb=fltk
34.249.39.203302 Found 0 B URL HTTP/1.1 adobe.demdex.net/event?d_sid=498429&d_rtbd=json&d_cb=fltk
IP 34.249.39.203:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /event?d_sid=498429&d_rtbd=json&d_cb=fltk HTTP/1.1
Host: adobe.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v046-0dc39c7af.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://adobe.demdex.net/firstevent?d_sid=498429&d_rtbd=json&d_cb=fltk
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=40195771220907957382915114754057336116; Max-Age=15552000; Expires=Wed, 27 Sep 2023 10:29:27 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: +FMCQ1elQNA=
Content-Length: 0
Connection: keep-alive
adobe.demdex.net/firstevent?d_sid=498429&d_rtbd=json&d_cb=fltk
34.249.39.203200 OK 34 B URL HTTP/1.1 adobe.demdex.net/firstevent?d_sid=498429&d_rtbd=json&d_cb=fltk
IP 34.249.39.203:0
File type ASCII text, with no line terminators
Hash 172c41d6e5091275076fb86a0c069146
ad6111551bc17f301d183e5d1696dd965869cc93
40942d4c9bf4671bd978b99d2b41ad7f72196651baa180fa808ecd679828b10b
GET /firstevent?d_sid=498429&d_rtbd=json&d_cb=fltk HTTP/1.1
Host: adobe.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/javascript;charset=utf-8
DCS: dcs-prod-irl1-2-v046-0ff0e17f0.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: HaYtgRv7TiU=
Content-Length: 34
Connection: keep-alive
adobe.demdex.net/firstevent?d_sid=498429&d_rtbd=json&d_cb=fltk
34.249.39.203200 OK 34 B URL HTTP/1.1 adobe.demdex.net/firstevent?d_sid=498429&d_rtbd=json&d_cb=fltk
IP 34.249.39.203:0
File type ASCII text, with no line terminators
Hash 172c41d6e5091275076fb86a0c069146
ad6111551bc17f301d183e5d1696dd965869cc93
40942d4c9bf4671bd978b99d2b41ad7f72196651baa180fa808ecd679828b10b
GET /firstevent?d_sid=498429&d_rtbd=json&d_cb=fltk HTTP/1.1
Host: adobe.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/javascript;charset=utf-8
DCS: dcs-prod-irl1-1-v046-0ff8ba6d7.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: Fx+EmllOSZI=
Content-Length: 34
Connection: keep-alive
adobe.demdex.net/firstevent?d_sid=498429&d_rtbd=json&d_cb=fltk
34.249.39.203200 OK 34 B URL HTTP/1.1 adobe.demdex.net/firstevent?d_sid=498429&d_rtbd=json&d_cb=fltk
IP 34.249.39.203:0
File type ASCII text, with no line terminators
Hash 172c41d6e5091275076fb86a0c069146
ad6111551bc17f301d183e5d1696dd965869cc93
40942d4c9bf4671bd978b99d2b41ad7f72196651baa180fa808ecd679828b10b
GET /firstevent?d_sid=498429&d_rtbd=json&d_cb=fltk HTTP/1.1
Host: adobe.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/javascript;charset=utf-8
DCS: dcs-prod-irl1-1-v046-0138048db.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: gwc6uPSzQ9s=
Content-Length: 34
Connection: keep-alive
servedby.flashtalking.com/imp/8/115739;4254492;201;jsappend;DV360;DV360FY20EDUBEHCustomAffinityNODSKBAN300x250/?ftOBA=1&ft_agentEnv=0&ft_referrer=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-1842037506098481%26output%3Dhtml%26h%3D340%26slotname%3D1109858467%26adk%3D443154256%26adf%3D186560882%26pi%3Dt.ma~as.1109858467%26w%3D332%26lmt%3D1680258565%26rafmt%3D12%26format%3D332x340%26url%3Dhttps%253A%252F%252Fsoft.mydiv.net.ua%252Fwin%252Fdownload-SONY-Vegas-Pro.html%26wgl%3D1%26dt%3D1680258564845%26bpp%3D5%26bdt%3D811%26idt%3D252%26shv%3Dr20230329%26mjsv%3Dm202303270101%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie%3DID%253D88f0cb0c12f9642d-22b311e0f1de0018%253AT%253D1680258565%253ART%253D1680258565%253AS%253DALNI_MYCIxaZXRokImKMMvx4xS02uztfKg%26gpic%3DUID%253D00000a37b481c4b5%253AT%253D1680258565%253ART%253D1680258565%253AS%253DALNI_Ma7EzVNtMMvKLwwqZ_3qRDHl3C8KQ%26correlator%3D8753881983689%26frm%3D20%26pv%3D2%26ga_vid%3D1414769287.1680258565%26ga_sid%3D1680258565%26ga_hid%3D294358582%26ga_fc%3D0%26u_tz%3D0%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D1002%26u_aw%3D1280%26u_cd%3D24%26u_sd%3D1%26adx%3D8&us_privacy=${US_PRIVACY}&cachebuster=455028.73129091284
2.23.132.54200 OK 1.2 kB URL HTTP/1.1 servedby.flashtalking.com/imp/8/115739;4254492;201;jsappend;DV360;DV360FY20EDUBEHCustomAffinityNODSKBAN300x250/?ftOBA=1&ft_agentEnv=0&ft_referrer=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-1842037506098481%26output%3Dhtml%26h%3D340%26slotname%3D1109858467%26adk%3D443154256%26adf%3D186560882%26pi%3Dt.ma~as.1109858467%26w%3D332%26lmt%3D1680258565%26rafmt%3D12%26format%3D332x340%26url%3Dhttps%253A%252F%252Fsoft.mydiv.net.ua%252Fwin%252Fdownload-SONY-Vegas-Pro.html%26wgl%3D1%26dt%3D1680258564845%26bpp%3D5%26bdt%3D811%26idt%3D252%26shv%3Dr20230329%26mjsv%3Dm202303270101%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie%3DID%253D88f0cb0c12f9642d-22b311e0f1de0018%253AT%253D1680258565%253ART%253D1680258565%253AS%253DALNI_MYCIxaZXRokImKMMvx4xS02uztfKg%26gpic%3DUID%253D00000a37b481c4b5%253AT%253D1680258565%253ART%253D1680258565%253AS%253DALNI_Ma7EzVNtMMvKLwwqZ_3qRDHl3C8KQ%26correlator%3D8753881983689%26frm%3D20%26pv%3D2%26ga_vid%3D1414769287.1680258565%26ga_sid%3D1680258565%26ga_hid%3D294358582%26ga_fc%3D0%26u_tz%3D0%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D1002%26u_aw%3D1280%26u_cd%3D24%26u_sd%3D1%26adx%3D8&us_privacy=${US_PRIVACY}&cachebuster=455028.73129091284
IP 2.23.132.54:0
ASN #1299 Telia Company AB
File type ASCII text, with very long lines (1114), with CRLF, CR, LF line terminators
Hash 4193cb87dda3b50c396dd4dd84a28666
8595678ddb141e1ddbde5d25d1a1d64e3b09825d
60284995cf8781f8d43656b6745a2b42f67afca12ea30bc01d040228f1b9335e
GET /imp/8/115739;4254492;201;jsappend;DV360;DV360FY20EDUBEHCustomAffinityNODSKBAN300x250/?ftOBA=1&ft_agentEnv=0&ft_referrer=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-1842037506098481%26output%3Dhtml%26h%3D340%26slotname%3D1109858467%26adk%3D443154256%26adf%3D186560882%26pi%3Dt.ma~as.1109858467%26w%3D332%26lmt%3D1680258565%26rafmt%3D12%26format%3D332x340%26url%3Dhttps%253A%252F%252Fsoft.mydiv.net.ua%252Fwin%252Fdownload-SONY-Vegas-Pro.html%26wgl%3D1%26dt%3D1680258564845%26bpp%3D5%26bdt%3D811%26idt%3D252%26shv%3Dr20230329%26mjsv%3Dm202303270101%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie%3DID%253D88f0cb0c12f9642d-22b311e0f1de0018%253AT%253D1680258565%253ART%253D1680258565%253AS%253DALNI_MYCIxaZXRokImKMMvx4xS02uztfKg%26gpic%3DUID%253D00000a37b481c4b5%253AT%253D1680258565%253ART%253D1680258565%253AS%253DALNI_Ma7EzVNtMMvKLwwqZ_3qRDHl3C8KQ%26correlator%3D8753881983689%26frm%3D20%26pv%3D2%26ga_vid%3D1414769287.1680258565%26ga_sid%3D1680258565%26ga_hid%3D294358582%26ga_fc%3D0%26u_tz%3D0%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D1002%26u_aw%3D1280%26u_cd%3D24%26u_sd%3D1%26adx%3D8&us_privacy=${US_PRIVACY}&cachebuster=455028.73129091284 HTTP/1.1
Host: servedby.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=ISO-8859-1
Server: prod-xre-app10.frk11
Vary: Accept-Encoding
Content-Encoding: gzip
Expires: Fri, 31 Mar 2023 10:29:27 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 31 Mar 2023 10:29:27 GMT
Content-Length: 1246
Connection: keep-alive
Strict-Transport-Security: max-age=86400
servedby.flashtalking.com/imp/8/115739;4254492;201;jsappend;DV360;DV360FY20EDUBEHCustomAffinityNODSKBAN300x250/?ftOBA=1&ft_agentEnv=0&ft_referrer=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-1842037506098481%26output%3Dhtml%26h%3D340%26slotname%3D1109858467%26adk%3D443154256%26adf%3D1752365368%26pi%3Dt.ma~as.1109858467%26w%3D332%26lmt%3D1680258565%26rafmt%3D12%26format%3D332x340%26url%3Dhttps%253A%252F%252Fsoft.mydiv.net.ua%252Fwin%252Fdownload-SONY-Vegas-Pro.html%26wgl%3D1%26dt%3D1680258564845%26bpp%3D2%26bdt%3D811%26idt%3D304%26shv%3Dr20230329%26mjsv%3Dm202303270101%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie%3DID%253D88f0cb0c12f9642d-22b311e0f1de0018%253AT%253D1680258565%253ART%253D1680258565%253AS%253DALNI_MYCIxaZXRokImKMMvx4xS02uztfKg%26gpic%3DUID%253D00000a37b481c4b5%253AT%253D1680258565%253ART%253D1680258565%253AS%253DALNI_Ma7EzVNtMMvKLwwqZ_3qRDHl3C8KQ%26prev_fmts%3D332x340%252C738x100%26correlator%3D8753881983689%26frm%3D20%26pv%3D1%26ga_vid%3D1414769287.1680258565%26ga_sid%3D1680258565%26ga_hid%3D294358582%26ga_fc%3D0%26u_tz%3D0%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D1002%26u_aw%3D12&us_privacy=${US_PRIVACY}&cachebuster=813235.5029079147
2.23.132.54200 OK 1.3 kB URL HTTP/1.1 servedby.flashtalking.com/imp/8/115739;4254492;201;jsappend;DV360;DV360FY20EDUBEHCustomAffinityNODSKBAN300x250/?ftOBA=1&ft_agentEnv=0&ft_referrer=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-1842037506098481%26output%3Dhtml%26h%3D340%26slotname%3D1109858467%26adk%3D443154256%26adf%3D1752365368%26pi%3Dt.ma~as.1109858467%26w%3D332%26lmt%3D1680258565%26rafmt%3D12%26format%3D332x340%26url%3Dhttps%253A%252F%252Fsoft.mydiv.net.ua%252Fwin%252Fdownload-SONY-Vegas-Pro.html%26wgl%3D1%26dt%3D1680258564845%26bpp%3D2%26bdt%3D811%26idt%3D304%26shv%3Dr20230329%26mjsv%3Dm202303270101%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie%3DID%253D88f0cb0c12f9642d-22b311e0f1de0018%253AT%253D1680258565%253ART%253D1680258565%253AS%253DALNI_MYCIxaZXRokImKMMvx4xS02uztfKg%26gpic%3DUID%253D00000a37b481c4b5%253AT%253D1680258565%253ART%253D1680258565%253AS%253DALNI_Ma7EzVNtMMvKLwwqZ_3qRDHl3C8KQ%26prev_fmts%3D332x340%252C738x100%26correlator%3D8753881983689%26frm%3D20%26pv%3D1%26ga_vid%3D1414769287.1680258565%26ga_sid%3D1680258565%26ga_hid%3D294358582%26ga_fc%3D0%26u_tz%3D0%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D1002%26u_aw%3D12&us_privacy=${US_PRIVACY}&cachebuster=813235.5029079147
IP 2.23.132.54:0
ASN #1299 Telia Company AB
File type ASCII text, with very long lines (1113), with CRLF, CR, LF line terminators
Hash 78dc702bb845e7c706c3db1db58aca9c
eb4e3707f3fc89ee58fa2a7d6880160d7b98412c
ddc18b5d5534edef8c83769d40a69e5f89aed105b1b95b43c80febd048fafe11
GET /imp/8/115739;4254492;201;jsappend;DV360;DV360FY20EDUBEHCustomAffinityNODSKBAN300x250/?ftOBA=1&ft_agentEnv=0&ft_referrer=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-1842037506098481%26output%3Dhtml%26h%3D340%26slotname%3D1109858467%26adk%3D443154256%26adf%3D1752365368%26pi%3Dt.ma~as.1109858467%26w%3D332%26lmt%3D1680258565%26rafmt%3D12%26format%3D332x340%26url%3Dhttps%253A%252F%252Fsoft.mydiv.net.ua%252Fwin%252Fdownload-SONY-Vegas-Pro.html%26wgl%3D1%26dt%3D1680258564845%26bpp%3D2%26bdt%3D811%26idt%3D304%26shv%3Dr20230329%26mjsv%3Dm202303270101%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie%3DID%253D88f0cb0c12f9642d-22b311e0f1de0018%253AT%253D1680258565%253ART%253D1680258565%253AS%253DALNI_MYCIxaZXRokImKMMvx4xS02uztfKg%26gpic%3DUID%253D00000a37b481c4b5%253AT%253D1680258565%253ART%253D1680258565%253AS%253DALNI_Ma7EzVNtMMvKLwwqZ_3qRDHl3C8KQ%26prev_fmts%3D332x340%252C738x100%26correlator%3D8753881983689%26frm%3D20%26pv%3D1%26ga_vid%3D1414769287.1680258565%26ga_sid%3D1680258565%26ga_hid%3D294358582%26ga_fc%3D0%26u_tz%3D0%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D1002%26u_aw%3D12&us_privacy=${US_PRIVACY}&cachebuster=813235.5029079147 HTTP/1.1
Host: servedby.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=ISO-8859-1
Server: prod-xre-app11.frk11
Vary: Accept-Encoding
Content-Encoding: gzip
Expires: Fri, 31 Mar 2023 10:29:27 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 31 Mar 2023 10:29:27 GMT
Content-Length: 1252
Connection: keep-alive
Strict-Transport-Security: max-age=86400
servedby.flashtalking.com/imp/8/115739;4254494;201;jsappend;DV360;DV360FY20EDUBEHCustomAffinityNODSKBAN728x90/?ftOBA=1&ft_agentEnv=0&ft_referrer=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-1842037506098481%26output%3Dhtml%26h%3D100%26slotname%3D1109858467%26adk%3D2414490864%26adf%3D1274209040%26pi%3Dt.ma~as.1109858467%26w%3D738%26lmt%3D1680258565%26rafmt%3D12%26format%3D738x100%26url%3Dhttps%253A%252F%252Fsoft.mydiv.net.ua%252Fwin%252Fdownload-SONY-Vegas-Pro.html%26wgl%3D1%26dt%3D1680258564845%26bpp%3D2%26bdt%3D811%26idt%3D269%26shv%3Dr20230329%26mjsv%3Dm202303270101%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie%3DID%253D88f0cb0c12f9642d-22b311e0f1de0018%253AT%253D1680258565%253ART%253D1680258565%253AS%253DALNI_MYCIxaZXRokImKMMvx4xS02uztfKg%26gpic%3DUID%253D00000a37b481c4b5%253AT%253D1680258565%253ART%253D1680258565%253AS%253DALNI_Ma7EzVNtMMvKLwwqZ_3qRDHl3C8KQ%26prev_fmts%3D332x340%26correlator%3D8753881983689%26frm%3D20%26pv%3D1%26ga_vid%3D1414769287.1680258565%26ga_sid%3D1680258565%26ga_hid%3D294358582%26ga_fc%3D0%26u_tz%3D0%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D1002%26u_aw%3D1280%26u_cd&us_privacy=${US_PRIVACY}&cachebuster=831690.7971042868
2.23.132.54200 OK 1.3 kB URL HTTP/1.1 servedby.flashtalking.com/imp/8/115739;4254494;201;jsappend;DV360;DV360FY20EDUBEHCustomAffinityNODSKBAN728x90/?ftOBA=1&ft_agentEnv=0&ft_referrer=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-1842037506098481%26output%3Dhtml%26h%3D100%26slotname%3D1109858467%26adk%3D2414490864%26adf%3D1274209040%26pi%3Dt.ma~as.1109858467%26w%3D738%26lmt%3D1680258565%26rafmt%3D12%26format%3D738x100%26url%3Dhttps%253A%252F%252Fsoft.mydiv.net.ua%252Fwin%252Fdownload-SONY-Vegas-Pro.html%26wgl%3D1%26dt%3D1680258564845%26bpp%3D2%26bdt%3D811%26idt%3D269%26shv%3Dr20230329%26mjsv%3Dm202303270101%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie%3DID%253D88f0cb0c12f9642d-22b311e0f1de0018%253AT%253D1680258565%253ART%253D1680258565%253AS%253DALNI_MYCIxaZXRokImKMMvx4xS02uztfKg%26gpic%3DUID%253D00000a37b481c4b5%253AT%253D1680258565%253ART%253D1680258565%253AS%253DALNI_Ma7EzVNtMMvKLwwqZ_3qRDHl3C8KQ%26prev_fmts%3D332x340%26correlator%3D8753881983689%26frm%3D20%26pv%3D1%26ga_vid%3D1414769287.1680258565%26ga_sid%3D1680258565%26ga_hid%3D294358582%26ga_fc%3D0%26u_tz%3D0%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D1002%26u_aw%3D1280%26u_cd&us_privacy=${US_PRIVACY}&cachebuster=831690.7971042868
IP 2.23.132.54:0
ASN #1299 Telia Company AB
File type ASCII text, with very long lines (1111), with CRLF, CR, LF line terminators
Hash 38af05bafea5d2ca71012bbc4a9a0c24
4b2b88538cffd286e7fbf7e4b1cd158b2274c6bc
d822fb6a4733f3d711342b5cc8eefc602fdf406c71b7e2ce60eff630a83bff3b
GET /imp/8/115739;4254494;201;jsappend;DV360;DV360FY20EDUBEHCustomAffinityNODSKBAN728x90/?ftOBA=1&ft_agentEnv=0&ft_referrer=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-1842037506098481%26output%3Dhtml%26h%3D100%26slotname%3D1109858467%26adk%3D2414490864%26adf%3D1274209040%26pi%3Dt.ma~as.1109858467%26w%3D738%26lmt%3D1680258565%26rafmt%3D12%26format%3D738x100%26url%3Dhttps%253A%252F%252Fsoft.mydiv.net.ua%252Fwin%252Fdownload-SONY-Vegas-Pro.html%26wgl%3D1%26dt%3D1680258564845%26bpp%3D2%26bdt%3D811%26idt%3D269%26shv%3Dr20230329%26mjsv%3Dm202303270101%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie%3DID%253D88f0cb0c12f9642d-22b311e0f1de0018%253AT%253D1680258565%253ART%253D1680258565%253AS%253DALNI_MYCIxaZXRokImKMMvx4xS02uztfKg%26gpic%3DUID%253D00000a37b481c4b5%253AT%253D1680258565%253ART%253D1680258565%253AS%253DALNI_Ma7EzVNtMMvKLwwqZ_3qRDHl3C8KQ%26prev_fmts%3D332x340%26correlator%3D8753881983689%26frm%3D20%26pv%3D1%26ga_vid%3D1414769287.1680258565%26ga_sid%3D1680258565%26ga_hid%3D294358582%26ga_fc%3D0%26u_tz%3D0%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D1002%26u_aw%3D1280%26u_cd&us_privacy=${US_PRIVACY}&cachebuster=831690.7971042868 HTTP/1.1
Host: servedby.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=ISO-8859-1
Server: prod-xre-app7.frk11
Vary: Accept-Encoding
Content-Encoding: gzip
Expires: Fri, 31 Mar 2023 10:29:27 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 31 Mar 2023 10:29:27 GMT
Content-Length: 1252
Connection: keep-alive
Strict-Transport-Security: max-age=86400
ocsp.godaddy.com/
192.124.249.23200 OK 1.8 kB IP 192.124.249.23:0
Hash 62def6cb6f7b6f7e97ec4350c8baf279
a3d22f909132797d595b0c7f0779ea69cb1f7660
84d187b4e1c1e509f4605882f5debbb6f61d3ac4beb70ef26b333505b0bfa935
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 31 Mar 2023 10:29:27 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 30 Mar 2023 20:34:38 GMT
Expires: Fri, 31 Mar 2023 20:34:38 GMT
ETag: "a3d22f909132797d595b0c7f0779ea69cb1f7660"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=428&ttfrms=15&bridua=2&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&srcurlD=0&aUrlD=-1&ssl=https:&uid=1680258566989245&jsCallback=dvCallback_1680258566989622&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=250&winw=300&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3590&tgjsver=3590&lvvn=28&m1=13&refD=2&fcifrms=6&brh=1&sdf=2&dvp_epl=179&noc=16&nav_pltfrm=Linux%20x86_64&ctx=3397726&cmp=3398513&sid=pp3&plc=33985131&adsrv=0&advid=3398311&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVPX_PP_IMP_ID=ABAjH0j-Xv-171yAPXY3NE0AAKCS&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347721382&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=190447165874.83118&dvp_tukv=176663929262.2671&dvp_strhd=1&dvpx_strhd=1&dvp_tuid=743013591070&jurtd=293365816
34.149.12.213200 OK 681 B URL HTTP/1.1 tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=428&ttfrms=15&bridua=2&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&srcurlD=0&aUrlD=-1&ssl=https:&uid=1680258566989245&jsCallback=dvCallback_1680258566989622&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=250&winw=300&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3590&tgjsver=3590&lvvn=28&m1=13&refD=2&fcifrms=6&brh=1&sdf=2&dvp_epl=179&noc=16&nav_pltfrm=Linux%20x86_64&ctx=3397726&cmp=3398513&sid=pp3&plc=33985131&adsrv=0&advid=3398311&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVPX_PP_IMP_ID=ABAjH0j-Xv-171yAPXY3NE0AAKCS&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347721382&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=190447165874.83118&dvp_tukv=176663929262.2671&dvp_strhd=1&dvpx_strhd=1&dvp_tuid=743013591070&jurtd=293365816
IP 34.149.12.213:0
File type ASCII text, with very long lines (1184), with no line terminators
Hash ca241eff5b52923444b2287c27b21a4c
66225a76ed4030b95dbb4562e475fb922365b315
66b01df7545ddb33a1b80989b30a419ab7ae346d322feb35efd0ea1ea0c3b294
GET /visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=428&ttfrms=15&bridua=2&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&srcurlD=0&aUrlD=-1&ssl=https:&uid=1680258566989245&jsCallback=dvCallback_1680258566989622&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=250&winw=300&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3590&tgjsver=3590&lvvn=28&m1=13&refD=2&fcifrms=6&brh=1&sdf=2&dvp_epl=179&noc=16&nav_pltfrm=Linux%20x86_64&ctx=3397726&cmp=3398513&sid=pp3&plc=33985131&adsrv=0&advid=3398311&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVPX_PP_IMP_ID=ABAjH0j-Xv-171yAPXY3NE0AAKCS&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347721382&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=190447165874.83118&dvp_tukv=176663929262.2671&dvp_strhd=1&dvpx_strhd=1&dvp_tuid=743013591070&jurtd=293365816 HTTP/1.1
Host: tps.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 10:29:27 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=0
Content-Encoding: br
Expires: 03/30/2023 10:29:27
Pragma: no-cache
Vary: Accept-Encoding
cdn.flashtalking.com/xre/425/4254494/4198861/js/j-4254494-4198861.js
23.38.200.44200 OK 25 kB URL HTTP/1.1 cdn.flashtalking.com/xre/425/4254494/4198861/js/j-4254494-4198861.js
IP 23.38.200.44:0
Hash a54cd1ffc4bb5cdf5c7c1d08a8546603
103cf3aebb5fde69b23dcc83596dc487220b6a32
cf5878f5305d96e7578101214b009f84677f1375e1b2cb2cb41ba521c669ba6b
GET /xre/425/4254494/4198861/js/j-4254494-4198861.js HTTP/1.1
Host: cdn.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Thu, 26 Jan 2023 18:38:23 GMT
Content-Type: text/javascript; charset=utf-8
ETag: W/"2a2305481525cb84e8956cdf6807aa03"
X-Varnish: 481395080
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=875
Expires: Fri, 31 Mar 2023 10:44:02 GMT
Date: Fri, 31 Mar 2023 10:29:27 GMT
Content-Length: 24677
Connection: keep-alive
Server: Flashtalking (AKA)
cdn.flashtalking.com/xre/425/4254492/4198862/js/j-4254492-4198862.js
23.38.200.44200 OK 25 kB URL HTTP/1.1 cdn.flashtalking.com/xre/425/4254492/4198862/js/j-4254492-4198862.js
IP 23.38.200.44:0
Hash a627582dad18661404fd0c7cf710cc99
de9cc093b65df0e35f433e8b454db13dc5be3169
5e94e214c81a4304640b5e1328ab39c9aa988d8a38926b15519eb1ecb4ce6a05
GET /xre/425/4254492/4198862/js/j-4254492-4198862.js HTTP/1.1
Host: cdn.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Thu, 26 Jan 2023 18:38:34 GMT
Content-Type: text/javascript; charset=utf-8
ETag: W/"9dc2de0556dc3368d1239b6ae3f4726c"
X-Varnish: 475381234
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=309
Expires: Fri, 31 Mar 2023 10:34:36 GMT
Date: Fri, 31 Mar 2023 10:29:27 GMT
Content-Length: 24676
Connection: keep-alive
Server: Flashtalking (AKA)
cdn.doubleverify.com/redirect/?host=tpsc-eu3¶m=akipv6&impid=56bc870ca95f43cc97e01b3df1b162f9&dup=&eoid=1000&cbust=1680258567546420
95.101.11.115302 Moved Temporarily 0 B URL HTTP/1.1 cdn.doubleverify.com/redirect/?host=tpsc-eu3¶m=akipv6&impid=56bc870ca95f43cc97e01b3df1b162f9&dup=&eoid=1000&cbust=1680258567546420
IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect/?host=tpsc-eu3¶m=akipv6&impid=56bc870ca95f43cc97e01b3df1b162f9&dup=&eoid=1000&cbust=1680258567546420 HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: AkamaiGHost
Content-Length: 0
Location: https://tpsc-eu3.doubleverify.com/event.png?impid=56bc870ca95f43cc97e01b3df1b162f9&akipv6=&dup=&eoid=1000
Date: Fri, 31 Mar 2023 10:29:27 GMT
Connection: keep-alive
cdn.flashtalking.com/155251/4198861/index.html
23.38.200.44200 OK 1.8 kB URL HTTP/1.1 cdn.flashtalking.com/155251/4198861/index.html
IP 23.38.200.44:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 4fe75d23c4b95826ab70b40734bc582e
b06e9266c900631ca80815a73117a75eb1af5c5e
375a39eb65f443bb128f03bd36889d0f4a507748c75ee53edc10ae56e34c1b57
GET /155251/4198861/index.html HTTP/1.1
Host: cdn.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range
Access-Control-Max-Age: 3000
Last-Modified: Wed, 25 Jan 2023 18:34:38 GMT
Content-Type: text/html
ETag: W/"420ed51c081e6ec9e5bb53c238dac1cd"
X-Varnish: 466079235
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=780
Expires: Fri, 31 Mar 2023 10:42:27 GMT
Date: Fri, 31 Mar 2023 10:29:27 GMT
Content-Length: 1753
Connection: keep-alive
Server: Flashtalking (AKA)
cdn.doubleverify.com/dvtp_src.js?ctx=1828362&cmp=115739&sid=18330&plc=4254494&num=&adid=&advid=&adsrv=29&btreg=4254494&btadsrv=flashtalking&crt=4198861&crtname=&chnl=&unit=&pid=&uid=&dvtagver=6.1.src&dvp_ftimpid=61B800CF-3624-27E2-5FAE-C5FF83A3C94B&auevent=&144107104
95.101.11.115200 OK 3.3 kB URL HTTP/1.1 cdn.doubleverify.com/dvtp_src.js?ctx=1828362&cmp=115739&sid=18330&plc=4254494&num=&adid=&advid=&adsrv=29&btreg=4254494&btadsrv=flashtalking&crt=4198861&crtname=&chnl=&unit=&pid=&uid=&dvtagver=6.1.src&dvp_ftimpid=61B800CF-3624-27E2-5FAE-C5FF83A3C94B&auevent=&144107104
IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (8016)
Hash e072d49341cffb322fdd359541b9e969
de1b7189b03b1aea898af405c0211a80cd25ec95
bd955388ecf026cba6c91f799b23a110cf0b3bc0cebe97ee5ed188c8f92558a2
GET /dvtp_src.js?ctx=1828362&cmp=115739&sid=18330&plc=4254494&num=&adid=&advid=&adsrv=29&btreg=4254494&btadsrv=flashtalking&crt=4198861&crtname=&chnl=&unit=&pid=&uid=&dvtagver=6.1.src&dvp_ftimpid=61B800CF-3624-27E2-5FAE-C5FF83A3C94B&auevent=&144107104 HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=900
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Tue, 21 Mar 2023 12:11:05 GMT
Accept-Ranges: bytes
ETag: "8012f935ee5bd91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
Content-Length: 3337
Date: Fri, 31 Mar 2023 10:29:27 GMT
Connection: keep-alive
cdn.flashtalking.com/155251/4198862/index.html
23.38.200.44200 OK 1.8 kB URL HTTP/1.1 cdn.flashtalking.com/155251/4198862/index.html
IP 23.38.200.44:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 8ba96046d699dd9099d3548584f7844b
cafb5f629852b00a95b3e831c9701b4d60c3adee
6ec3d9685cef64517ef2e02db784ef928c2e16bc4c128e4bda05dec15fbf8db3
GET /155251/4198862/index.html HTTP/1.1
Host: cdn.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range
Access-Control-Max-Age: 3000
Last-Modified: Wed, 25 Jan 2023 18:34:38 GMT
Content-Type: text/html
ETag: W/"7cd34d34953965caf7f7b7429e5c94fd"
X-Varnish: 472312315
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1018
Expires: Fri, 31 Mar 2023 10:46:25 GMT
Date: Fri, 31 Mar 2023 10:29:27 GMT
Content-Length: 1754
Connection: keep-alive
Server: Flashtalking (AKA)
cdn.doubleverify.com/dvtp_src.js?ctx=1828362&cmp=115739&sid=18330&plc=4254492&num=&adid=&advid=&adsrv=29&btreg=4254492&btadsrv=flashtalking&crt=4198862&crtname=&chnl=&unit=&pid=&uid=&dvtagver=6.1.src&dvp_ftimpid=041F586F-2029-1927-8633-2885913C8105&auevent=&711502622
95.101.11.115200 OK 3.3 kB URL HTTP/1.1 cdn.doubleverify.com/dvtp_src.js?ctx=1828362&cmp=115739&sid=18330&plc=4254492&num=&adid=&advid=&adsrv=29&btreg=4254492&btadsrv=flashtalking&crt=4198862&crtname=&chnl=&unit=&pid=&uid=&dvtagver=6.1.src&dvp_ftimpid=041F586F-2029-1927-8633-2885913C8105&auevent=&711502622
IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (8016)
Hash e072d49341cffb322fdd359541b9e969
de1b7189b03b1aea898af405c0211a80cd25ec95
bd955388ecf026cba6c91f799b23a110cf0b3bc0cebe97ee5ed188c8f92558a2
GET /dvtp_src.js?ctx=1828362&cmp=115739&sid=18330&plc=4254492&num=&adid=&advid=&adsrv=29&btreg=4254492&btadsrv=flashtalking&crt=4198862&crtname=&chnl=&unit=&pid=&uid=&dvtagver=6.1.src&dvp_ftimpid=041F586F-2029-1927-8633-2885913C8105&auevent=&711502622 HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=900
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Tue, 21 Mar 2023 12:11:05 GMT
Accept-Ranges: bytes
ETag: "8012f935ee5bd91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
Content-Length: 3337
Date: Fri, 31 Mar 2023 10:29:27 GMT
Connection: keep-alive
cdn.flashtalking.com/155251/4198862/index.html
23.38.200.44200 OK 1.8 kB URL HTTP/1.1 cdn.flashtalking.com/155251/4198862/index.html
IP 23.38.200.44:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 8ba96046d699dd9099d3548584f7844b
cafb5f629852b00a95b3e831c9701b4d60c3adee
6ec3d9685cef64517ef2e02db784ef928c2e16bc4c128e4bda05dec15fbf8db3
GET /155251/4198862/index.html HTTP/1.1
Host: cdn.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range
Access-Control-Max-Age: 3000
Last-Modified: Wed, 25 Jan 2023 18:34:38 GMT
Content-Type: text/html
ETag: W/"7cd34d34953965caf7f7b7429e5c94fd"
X-Varnish: 472312315
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1018
Expires: Fri, 31 Mar 2023 10:46:25 GMT
Date: Fri, 31 Mar 2023 10:29:27 GMT
Content-Length: 1754
Connection: keep-alive
Server: Flashtalking (AKA)
cdn.doubleverify.com/dvtp_src.js?ctx=1828362&cmp=115739&sid=18330&plc=4254492&num=&adid=&advid=&adsrv=29&btreg=4254492&btadsrv=flashtalking&crt=4198862&crtname=&chnl=&unit=&pid=&uid=&dvtagver=6.1.src&dvp_ftimpid=F3B0176C-BB8B-D43E-01A2-C81F86410E87&auevent=&917426540
95.101.11.115200 OK 3.3 kB URL HTTP/1.1 cdn.doubleverify.com/dvtp_src.js?ctx=1828362&cmp=115739&sid=18330&plc=4254492&num=&adid=&advid=&adsrv=29&btreg=4254492&btadsrv=flashtalking&crt=4198862&crtname=&chnl=&unit=&pid=&uid=&dvtagver=6.1.src&dvp_ftimpid=F3B0176C-BB8B-D43E-01A2-C81F86410E87&auevent=&917426540
IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (8016)
Hash e072d49341cffb322fdd359541b9e969
de1b7189b03b1aea898af405c0211a80cd25ec95
bd955388ecf026cba6c91f799b23a110cf0b3bc0cebe97ee5ed188c8f92558a2
GET /dvtp_src.js?ctx=1828362&cmp=115739&sid=18330&plc=4254492&num=&adid=&advid=&adsrv=29&btreg=4254492&btadsrv=flashtalking&crt=4198862&crtname=&chnl=&unit=&pid=&uid=&dvtagver=6.1.src&dvp_ftimpid=F3B0176C-BB8B-D43E-01A2-C81F86410E87&auevent=&917426540 HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=900
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Tue, 21 Mar 2023 12:11:05 GMT
Accept-Ranges: bytes
ETag: "8012f935ee5bd91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
Content-Length: 3337
Date: Fri, 31 Mar 2023 10:29:27 GMT
Connection: keep-alive
secure.flashtalking.com/oba/icon/iconc.png?EDAA_icon=y
23.38.200.44200 OK 1.3 kB URL HTTP/1.1 secure.flashtalking.com/oba/icon/iconc.png?EDAA_icon=y
IP 23.38.200.44:0
File type PNG image data, 19 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash db320ef6f3c45ab5c90887ef618de2bb
7d4bd175166545ea775fcb69b406eba11f7fa3ec
f75ada33b07cb31e16a0a0d3325961a22dc9526edb49bff04c31d7b7611f7025
GET /oba/icon/iconc.png?EDAA_icon=y HTTP/1.1
Host: secure.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Sat, 12 Apr 2014 19:14:32 GMT
Content-Type: image/png
ETag: W/"db320ef6f3c45ab5c90887ef618de2bb"
X-Varnish: 440713868 434560932
Accept-Ranges: bytes
Content-Length: 1308
Cache-Control: max-age=1551961
Expires: Tue, 18 Apr 2023 09:35:28 GMT
Date: Fri, 31 Mar 2023 10:29:27 GMT
Connection: keep-alive
Server: Flashtalking (AKA)
tpsc-eu3.doubleverify.com/event.png?impid=56bc870ca95f43cc97e01b3df1b162f9&akipv6=&dup=&eoid=1000
34.149.12.213204 No Content 0 B URL HTTP/1.1 tpsc-eu3.doubleverify.com/event.png?impid=56bc870ca95f43cc97e01b3df1b162f9&akipv6=&dup=&eoid=1000
IP 34.149.12.213:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /event.png?impid=56bc870ca95f43cc97e01b3df1b162f9&akipv6=&dup=&eoid=1000 HTTP/1.1
Host: tpsc-eu3.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Fri, 31 Mar 2023 10:29:27 GMT
Connection: keep-alive
Cache-Control: max-age=0
Expires: 03/30/2023 10:29:27
Pragma: no-cache
cdn.flashtalking.com/155251/4198861/FY22Q4_CC_Student_Blank_NO_NO_DCOGeneralPathfinders_ST_728x90.js?1673590089425
23.38.200.44200 OK 9.8 kB URL HTTP/1.1 cdn.flashtalking.com/155251/4198861/FY22Q4_CC_Student_Blank_NO_NO_DCOGeneralPathfinders_ST_728x90.js?1673590089425
IP 23.38.200.44:0
File type ASCII text, with very long lines (953)
Hash d90fee3395f62a917b7519bef6e6bd1f
beeb4550ab0751752e6afaf4bac5080570f764da
0b35d9f3f97c8c668f9a90a1618440ad3ffd6fb9a9a50b08f99ab36737d81eb5
GET /155251/4198861/FY22Q4_CC_Student_Blank_NO_NO_DCOGeneralPathfinders_ST_728x90.js?1673590089425 HTTP/1.1
Host: cdn.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.flashtalking.com/155251/4198861/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range
Access-Control-Max-Age: 3000
Last-Modified: Wed, 25 Jan 2023 18:34:37 GMT
Content-Type: application/javascript
ETag: W/"ac6b8a865781735aaa1185e7d6840676"
X-Varnish: 466079240
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=780
Expires: Fri, 31 Mar 2023 10:42:27 GMT
Date: Fri, 31 Mar 2023 10:29:27 GMT
Content-Length: 9804
Connection: keep-alive
Server: Flashtalking (AKA)
tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=194&ttfrms=17&bridua=2&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&srcurlD=0&aUrlD=-1&ssl=https:&dfs=1460&ddur=12&uid=1680258567817577&jsCallback=dvCallback_1680258567817772&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=90&winw=728&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3590&tgjsver=3590&lvvn=28&m1=13&refD=2&fcifrms=6&brh=1&sdf=2&dvp_epl=179&noc=16&nav_pltfrm=Linux%20x86_64&ctx=1828362&cmp=115739&sid=18330&plc=4254494&crt=4198861&btreg=4254494&btadsrv=flashtalking&adsrv=29&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&dvp_ftimpid=61B800CF-3624-27E2-5FAE-C5FF83A3C94B&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_tcnt=2&dvp_sukv=1516010200204.829&dvp_tukv=30721783439.136486&dvp_tuid=1158045339399&jurtd=2836606553
34.149.12.213200 OK 1.0 kB URL HTTP/1.1 tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=194&ttfrms=17&bridua=2&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&srcurlD=0&aUrlD=-1&ssl=https:&dfs=1460&ddur=12&uid=1680258567817577&jsCallback=dvCallback_1680258567817772&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=90&winw=728&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3590&tgjsver=3590&lvvn=28&m1=13&refD=2&fcifrms=6&brh=1&sdf=2&dvp_epl=179&noc=16&nav_pltfrm=Linux%20x86_64&ctx=1828362&cmp=115739&sid=18330&plc=4254494&crt=4198861&btreg=4254494&btadsrv=flashtalking&adsrv=29&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&dvp_ftimpid=61B800CF-3624-27E2-5FAE-C5FF83A3C94B&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_tcnt=2&dvp_sukv=1516010200204.829&dvp_tukv=30721783439.136486&dvp_tuid=1158045339399&jurtd=2836606553
IP 34.149.12.213:0
File type ASCII text, with very long lines (2460), with no line terminators
Hash c39819032b9803dfadb617a58215053d
b0fadf043781c608167ec08f5f7ebf7ec7025d84
c7dd7dadd6ab2133300708e2d2eaa47e6584ddaf242925de893d1c3b55472255
GET /visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=194&ttfrms=17&bridua=2&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&srcurlD=0&aUrlD=-1&ssl=https:&dfs=1460&ddur=12&uid=1680258567817577&jsCallback=dvCallback_1680258567817772&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=90&winw=728&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3590&tgjsver=3590&lvvn=28&m1=13&refD=2&fcifrms=6&brh=1&sdf=2&dvp_epl=179&noc=16&nav_pltfrm=Linux%20x86_64&ctx=1828362&cmp=115739&sid=18330&plc=4254494&crt=4198861&btreg=4254494&btadsrv=flashtalking&adsrv=29&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&dvp_ftimpid=61B800CF-3624-27E2-5FAE-C5FF83A3C94B&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_tcnt=2&dvp_sukv=1516010200204.829&dvp_tukv=30721783439.136486&dvp_tuid=1158045339399&jurtd=2836606553 HTTP/1.1
Host: tps.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 10:29:28 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=0
Content-Encoding: br
Expires: 03/30/2023 10:29:28
Pragma: no-cache
Vary: Accept-Encoding
tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=211&ttfrms=30&bridua=2&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&srcurlD=0&aUrlD=-1&ssl=https:&dfs=1900&ddur=14&uid=1680258567875388&jsCallback=dvCallback_1680258567875709&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=250&winw=300&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3590&tgjsver=3590&lvvn=28&m1=13&refD=2&fcifrms=6&brh=1&sdf=2&dvp_epl=179&noc=16&nav_pltfrm=Linux%20x86_64&ctx=1828362&cmp=115739&sid=18330&plc=4254492&crt=4198862&btreg=4254492&btadsrv=flashtalking&adsrv=29&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&dvp_ftimpid=F3B0176C-BB8B-D43E-01A2-C81F86410E87&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_tcnt=2&dvp_sukv=190447165874.83118&dvp_tukv=366046192.3152945&dvp_tuid=344710266158&jurtd=640429622
34.149.12.213200 OK 1.0 kB URL HTTP/1.1 tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=211&ttfrms=30&bridua=2&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&srcurlD=0&aUrlD=-1&ssl=https:&dfs=1900&ddur=14&uid=1680258567875388&jsCallback=dvCallback_1680258567875709&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=250&winw=300&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3590&tgjsver=3590&lvvn=28&m1=13&refD=2&fcifrms=6&brh=1&sdf=2&dvp_epl=179&noc=16&nav_pltfrm=Linux%20x86_64&ctx=1828362&cmp=115739&sid=18330&plc=4254492&crt=4198862&btreg=4254492&btadsrv=flashtalking&adsrv=29&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&dvp_ftimpid=F3B0176C-BB8B-D43E-01A2-C81F86410E87&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_tcnt=2&dvp_sukv=190447165874.83118&dvp_tukv=366046192.3152945&dvp_tuid=344710266158&jurtd=640429622
IP 34.149.12.213:0
File type ASCII text, with very long lines (2460), with no line terminators
Hash 6b8cd309e3d68c31911f195a4efc798b
2ae6e2fa9f20880b1f624f875fb640a0154f93fa
e9242e0e97f1eefb469fd1658c503e25ce5b3334875a5ee91ab795be0d52c7b4
GET /visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=211&ttfrms=30&bridua=2&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&srcurlD=0&aUrlD=-1&ssl=https:&dfs=1900&ddur=14&uid=1680258567875388&jsCallback=dvCallback_1680258567875709&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=250&winw=300&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3590&tgjsver=3590&lvvn=28&m1=13&refD=2&fcifrms=6&brh=1&sdf=2&dvp_epl=179&noc=16&nav_pltfrm=Linux%20x86_64&ctx=1828362&cmp=115739&sid=18330&plc=4254492&crt=4198862&btreg=4254492&btadsrv=flashtalking&adsrv=29&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&dvp_ftimpid=F3B0176C-BB8B-D43E-01A2-C81F86410E87&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_tcnt=2&dvp_sukv=190447165874.83118&dvp_tukv=366046192.3152945&dvp_tuid=344710266158&jurtd=640429622 HTTP/1.1
Host: tps.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 10:29:28 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=0
Content-Encoding: br
Expires: 03/30/2023 10:29:28
Pragma: no-cache
Vary: Accept-Encoding
cdn.doubleverify.com/redirect/?host=tpsc-eu3¶m=akipv6&impid=482c04fd2c0148ad9794ed995f84f880&dup=&eoid=1000&cbust=1680258567912147
95.101.11.115302 Moved Temporarily 0 B URL HTTP/1.1 cdn.doubleverify.com/redirect/?host=tpsc-eu3¶m=akipv6&impid=482c04fd2c0148ad9794ed995f84f880&dup=&eoid=1000&cbust=1680258567912147
IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect/?host=tpsc-eu3¶m=akipv6&impid=482c04fd2c0148ad9794ed995f84f880&dup=&eoid=1000&cbust=1680258567912147 HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: AkamaiGHost
Content-Length: 0
Location: https://tpsc-eu3.doubleverify.com/event.png?impid=482c04fd2c0148ad9794ed995f84f880&akipv6=&dup=&eoid=1000
Date: Fri, 31 Mar 2023 10:29:28 GMT
Connection: keep-alive
cdn.doubleverify.com/redirect/?host=tpsc-eu3¶m=akipv6&impid=c05e0d23fb984073b0be4cf67286fb38&dup=&eoid=1000&cbust=1680258567968821
95.101.11.115302 Moved Temporarily 0 B URL HTTP/1.1 cdn.doubleverify.com/redirect/?host=tpsc-eu3¶m=akipv6&impid=c05e0d23fb984073b0be4cf67286fb38&dup=&eoid=1000&cbust=1680258567968821
IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect/?host=tpsc-eu3¶m=akipv6&impid=c05e0d23fb984073b0be4cf67286fb38&dup=&eoid=1000&cbust=1680258567968821 HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: AkamaiGHost
Content-Length: 0
Location: https://tpsc-eu3.doubleverify.com/event.png?impid=c05e0d23fb984073b0be4cf67286fb38&akipv6=&dup=&eoid=1000
Date: Fri, 31 Mar 2023 10:29:28 GMT
Connection: keep-alive
tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=264&ttfrms=16&bridua=2&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&srcurlD=0&aUrlD=-1&ssl=https:&dfs=1808&ddur=21&uid=1680258567938111&jsCallback=dvCallback_1680258567938924&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=250&winw=300&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3590&tgjsver=3590&lvvn=28&m1=13&refD=2&fcifrms=6&brh=1&sdf=2&dvp_epl=179&noc=16&nav_pltfrm=Linux%20x86_64&ctx=1828362&cmp=115739&sid=18330&plc=4254492&crt=4198862&btreg=4254492&btadsrv=flashtalking&adsrv=29&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&dvp_ftimpid=041F586F-2029-1927-8633-2885913C8105&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_tcnt=2&dvp_sukv=13746225479.86325&dvp_tukv=49623001072.84888&dvp_tuid=1635620931297&jurtd=4033752516
34.149.12.213200 OK 1.0 kB URL HTTP/1.1 tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=264&ttfrms=16&bridua=2&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&srcurlD=0&aUrlD=-1&ssl=https:&dfs=1808&ddur=21&uid=1680258567938111&jsCallback=dvCallback_1680258567938924&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=250&winw=300&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3590&tgjsver=3590&lvvn=28&m1=13&refD=2&fcifrms=6&brh=1&sdf=2&dvp_epl=179&noc=16&nav_pltfrm=Linux%20x86_64&ctx=1828362&cmp=115739&sid=18330&plc=4254492&crt=4198862&btreg=4254492&btadsrv=flashtalking&adsrv=29&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&dvp_ftimpid=041F586F-2029-1927-8633-2885913C8105&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_tcnt=2&dvp_sukv=13746225479.86325&dvp_tukv=49623001072.84888&dvp_tuid=1635620931297&jurtd=4033752516
IP 34.149.12.213:0
File type ASCII text, with very long lines (2460), with no line terminators
Hash 22f8dda33e02e1aeb722f76b226a2286
cd3efeba86d5685802be98783c6c657e0cd48322
03d3aee1017922349914fd41f81144e7c686223c8eced254be64c4d2295f4648
GET /visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=264&ttfrms=16&bridua=2&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&srcurlD=0&aUrlD=-1&ssl=https:&dfs=1808&ddur=21&uid=1680258567938111&jsCallback=dvCallback_1680258567938924&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=250&winw=300&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3590&tgjsver=3590&lvvn=28&m1=13&refD=2&fcifrms=6&brh=1&sdf=2&dvp_epl=179&noc=16&nav_pltfrm=Linux%20x86_64&ctx=1828362&cmp=115739&sid=18330&plc=4254492&crt=4198862&btreg=4254492&btadsrv=flashtalking&adsrv=29&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&dvp_ftimpid=041F586F-2029-1927-8633-2885913C8105&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_tcnt=2&dvp_sukv=13746225479.86325&dvp_tukv=49623001072.84888&dvp_tuid=1635620931297&jurtd=4033752516 HTTP/1.1
Host: tps.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 10:29:28 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=0
Content-Encoding: br
Expires: 03/30/2023 10:29:28
Pragma: no-cache
Vary: Accept-Encoding
cdn.doubleverify.com/redirect/?host=tpsc-eu3¶m=akipv6&impid=c8d3e2583b7848f1937ee24521cc6def&dup=&eoid=1000&cbust=1680258568019146
95.101.11.115302 Moved Temporarily 0 B URL HTTP/1.1 cdn.doubleverify.com/redirect/?host=tpsc-eu3¶m=akipv6&impid=c8d3e2583b7848f1937ee24521cc6def&dup=&eoid=1000&cbust=1680258568019146
IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect/?host=tpsc-eu3¶m=akipv6&impid=c8d3e2583b7848f1937ee24521cc6def&dup=&eoid=1000&cbust=1680258568019146 HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: AkamaiGHost
Content-Length: 0
Location: https://tpsc-eu3.doubleverify.com/event.png?impid=c8d3e2583b7848f1937ee24521cc6def&akipv6=&dup=&eoid=1000
Date: Fri, 31 Mar 2023 10:29:28 GMT
Connection: keep-alive
cdn.flashtalking.com/155251/4198861/images/bg.jpg?1673590089413
23.38.200.44200 OK 4.3 kB URL HTTP/1.1 cdn.flashtalking.com/155251/4198861/images/bg.jpg?1673590089413
IP 23.38.200.44:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1456x180, components 3\012- data
Hash cf4cab4878b7694571debb12a86b0280
d63f1787bc371e604442aa539536a96fa32069ab
af11d38a271d99cf5d2d63ed89e86294532838d699ff6c49bedee7c3e8f9a6fb
GET /155251/4198861/images/bg.jpg?1673590089413 HTTP/1.1
Host: cdn.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.flashtalking.com/155251/4198861/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range
Access-Control-Max-Age: 3000
Last-Modified: Wed, 25 Jan 2023 18:34:38 GMT
Content-Type: image/jpeg
ETag: W/"cf4cab4878b7694571debb12a86b0280"
X-Varnish: 868873550
Accept-Ranges: bytes
Content-Length: 4253
Cache-Control: max-age=779
Expires: Fri, 31 Mar 2023 10:42:27 GMT
Date: Fri, 31 Mar 2023 10:29:28 GMT
Connection: keep-alive
Server: Flashtalking (AKA)
cdn.flashtalking.com/155251/4198862/images/bg.jpg?1673589956968
23.38.200.44200 OK 6.0 kB URL HTTP/1.1 cdn.flashtalking.com/155251/4198862/images/bg.jpg?1673589956968
IP 23.38.200.44:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x500, components 3\012- data
Hash 8a065c16527c487afc06ee3a519ae685
b6f9b7b1634e8b37d0d08cae206ffb8a31c56abd
21b66fd120120971ef13a36728c6b048cdfb18bc6355a4c79f9d49d1fe5e94f8
GET /155251/4198862/images/bg.jpg?1673589956968 HTTP/1.1
Host: cdn.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.flashtalking.com/155251/4198862/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range
Access-Control-Max-Age: 3000
Last-Modified: Wed, 25 Jan 2023 18:34:38 GMT
Content-Type: image/jpeg
ETag: W/"8a065c16527c487afc06ee3a519ae685"
X-Varnish: 472741281
Accept-Ranges: bytes
Content-Length: 6043
Cache-Control: max-age=1017
Expires: Fri, 31 Mar 2023 10:46:25 GMT
Date: Fri, 31 Mar 2023 10:29:28 GMT
Connection: keep-alive
Server: Flashtalking (AKA)
cdn.flashtalking.com/155251/4198862/manifest.js
23.38.200.44200 OK 99 B URL HTTP/1.1 cdn.flashtalking.com/155251/4198862/manifest.js
IP 23.38.200.44:0
Hash 9653645e0084283f027d77bb6ad852fe
a7b1856e8d6970b3d3f8dd3f82509beca325c48f
a673cc4b8d035afebd4faf1a62394d9919e23b2ffd552aaca01928dbe519fcef
GET /155251/4198862/manifest.js HTTP/1.1
Host: cdn.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.flashtalking.com/155251/4198862/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range
Access-Control-Max-Age: 3000
Last-Modified: Wed, 25 Jan 2023 18:34:38 GMT
Content-Type: application/javascript
ETag: W/"9653645e0084283f027d77bb6ad852fe"
X-Varnish: 475574258
Accept-Ranges: bytes
Content-Length: 99
Cache-Control: max-age=1017
Expires: Fri, 31 Mar 2023 10:46:25 GMT
Date: Fri, 31 Mar 2023 10:29:28 GMT
Connection: keep-alive
Server: Flashtalking (AKA)
cdn.flashtalking.com/155251/4198861/images/card.png?1673590089413
23.38.200.44200 OK 7.1 kB URL HTTP/1.1 cdn.flashtalking.com/155251/4198861/images/card.png?1673590089413
IP 23.38.200.44:0
File type PNG image data, 1456 x 180, 8-bit colormap, non-interlaced\012- data
Hash 07514d24bd445e44d8c848babbc415cf
3c0419dd047d652000b35292e072e8de290b2d5d
49e1d0f374e2e64e48e2c6602944dfb3f4f4156393d9c33b1a7b014e7901ff2d
GET /155251/4198861/images/card.png?1673590089413 HTTP/1.1
Host: cdn.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.flashtalking.com/155251/4198861/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range
Access-Control-Max-Age: 3000
Last-Modified: Wed, 25 Jan 2023 18:34:38 GMT
Content-Type: image/png
ETag: W/"07514d24bd445e44d8c848babbc415cf"
X-Varnish: 480918438
Accept-Ranges: bytes
Content-Length: 7078
Cache-Control: max-age=779
Expires: Fri, 31 Mar 2023 10:42:27 GMT
Date: Fri, 31 Mar 2023 10:29:28 GMT
Connection: keep-alive
Server: Flashtalking (AKA)
cdn.flashtalking.com/155251/4198862/images/card.png?1673589956968
23.38.200.44200 OK 11 kB URL HTTP/1.1 cdn.flashtalking.com/155251/4198862/images/card.png?1673589956968
IP 23.38.200.44:0
File type PNG image data, 600 x 500, 8-bit colormap, non-interlaced\012- data
Hash b5f1a67dc49c88094af94afe1dcbeaf3
ef9207e77d372ba33378732db0d2ed54c51783b5
dbed53cb11df083113e8a251de754e017eaaca303ba6dab2451235d16afb6cf7
GET /155251/4198862/images/card.png?1673589956968 HTTP/1.1
Host: cdn.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.flashtalking.com/155251/4198862/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range
Access-Control-Max-Age: 3000
Last-Modified: Wed, 25 Jan 2023 18:34:38 GMT
Content-Type: image/png
ETag: W/"b5f1a67dc49c88094af94afe1dcbeaf3"
X-Varnish: 478412797
Accept-Ranges: bytes
Content-Length: 10729
Cache-Control: max-age=1017
Expires: Fri, 31 Mar 2023 10:46:25 GMT
Date: Fri, 31 Mar 2023 10:29:28 GMT
Connection: keep-alive
Server: Flashtalking (AKA)
cdn.flashtalking.com/155251/4198861/manifest.js
23.38.200.44200 OK 98 B URL HTTP/1.1 cdn.flashtalking.com/155251/4198861/manifest.js
IP 23.38.200.44:0
Hash 21d18ebfda5d005e0fe378aaddd7e680
d5c2eac9d1117252aeef7dfc895ba98f87710394
ca2fec6d9168102da4b08fad54e45776c3ac91fead7a22ffbf0ff78c37e05b2a
GET /155251/4198861/manifest.js HTTP/1.1
Host: cdn.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.flashtalking.com/155251/4198861/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range
Access-Control-Max-Age: 3000
Last-Modified: Wed, 25 Jan 2023 18:34:38 GMT
Content-Type: application/javascript
ETag: W/"21d18ebfda5d005e0fe378aaddd7e680"
X-Varnish: 464442346
Accept-Ranges: bytes
Content-Length: 98
Cache-Control: max-age=779
Expires: Fri, 31 Mar 2023 10:42:27 GMT
Date: Fri, 31 Mar 2023 10:29:28 GMT
Connection: keep-alive
Server: Flashtalking (AKA)
cdn.flashtalking.com/155251/4198861/images/resume.png?1673590089413
23.38.200.44200 OK 18 kB URL HTTP/1.1 cdn.flashtalking.com/155251/4198861/images/resume.png?1673590089413
IP 23.38.200.44:0
File type PNG image data, 1456 x 180, 8-bit colormap, non-interlaced\012- data
Hash 24e155410269b660b7ce94c68c9fbcc9
ff5192889e7e9e02d1fec6a8740c1ca1dea21b7e
107645a100aec2bf24e21658dd58043d5f65be8c9c3700f7d02ec7dc77e6a191
GET /155251/4198861/images/resume.png?1673590089413 HTTP/1.1
Host: cdn.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.flashtalking.com/155251/4198861/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range
Access-Control-Max-Age: 3000
Last-Modified: Wed, 25 Jan 2023 18:34:38 GMT
Content-Type: image/png
ETag: W/"24e155410269b660b7ce94c68c9fbcc9"
X-Varnish: 479464165
Accept-Ranges: bytes
Content-Length: 18027
Cache-Control: max-age=779
Expires: Fri, 31 Mar 2023 10:42:27 GMT
Date: Fri, 31 Mar 2023 10:29:28 GMT
Connection: keep-alive
Server: Flashtalking (AKA)
cdn.flashtalking.com/155251/4198862/images/resume.png?1673589956968
23.38.200.44200 OK 29 kB URL HTTP/1.1 cdn.flashtalking.com/155251/4198862/images/resume.png?1673589956968
IP 23.38.200.44:0
File type PNG image data, 600 x 500, 8-bit colormap, non-interlaced\012- data
Hash bf45ab6a0a4164e81ebff4cdb9869ae2
379a0527f6760cfe25b6a6bf9d4745d3916302ac
522d69a00b930b1a4af447000520e593b9d1f7092f4bf1d2f6e4dfe0bf08eae5
GET /155251/4198862/images/resume.png?1673589956968 HTTP/1.1
Host: cdn.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.flashtalking.com/155251/4198862/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range
Access-Control-Max-Age: 3000
Last-Modified: Wed, 25 Jan 2023 18:34:38 GMT
Content-Type: image/png
ETag: W/"bf45ab6a0a4164e81ebff4cdb9869ae2"
X-Varnish: 659363306 661574056
Accept-Ranges: bytes
Content-Length: 28729
Cache-Control: max-age=1017
Expires: Fri, 31 Mar 2023 10:46:25 GMT
Date: Fri, 31 Mar 2023 10:29:28 GMT
Connection: keep-alive
Server: Flashtalking (AKA)
tpsc-eu3.doubleverify.com/event.png?impid=482c04fd2c0148ad9794ed995f84f880&akipv6=&dup=&eoid=1000
34.149.12.213204 No Content 0 B URL HTTP/1.1 tpsc-eu3.doubleverify.com/event.png?impid=482c04fd2c0148ad9794ed995f84f880&akipv6=&dup=&eoid=1000
IP 34.149.12.213:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /event.png?impid=482c04fd2c0148ad9794ed995f84f880&akipv6=&dup=&eoid=1000 HTTP/1.1
Host: tpsc-eu3.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Fri, 31 Mar 2023 10:29:28 GMT
Connection: keep-alive
Cache-Control: max-age=0
Expires: 03/30/2023 10:29:28
Pragma: no-cache
tpsc-eu3.doubleverify.com/event.png?impid=c05e0d23fb984073b0be4cf67286fb38&akipv6=&dup=&eoid=1000
34.149.12.213204 No Content 0 B URL HTTP/1.1 tpsc-eu3.doubleverify.com/event.png?impid=c05e0d23fb984073b0be4cf67286fb38&akipv6=&dup=&eoid=1000
IP 34.149.12.213:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /event.png?impid=c05e0d23fb984073b0be4cf67286fb38&akipv6=&dup=&eoid=1000 HTTP/1.1
Host: tpsc-eu3.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Fri, 31 Mar 2023 10:29:28 GMT
Connection: keep-alive
Cache-Control: max-age=0
Expires: 03/30/2023 10:29:28
Pragma: no-cache
secure.flashtalking.com/oba/icon/consumer-privacy-logo.png
23.38.200.44200 OK 6.0 kB URL HTTP/1.1 secure.flashtalking.com/oba/icon/consumer-privacy-logo.png
IP 23.38.200.44:0
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash d675694ab4d4d2eb56cca854c25d9c36
34174b9397a3cb289f892f1f98ccc51a63698360
49b19f7f2d3d0fc9d2270cd1ebd79d468ca86cf308f33b063595863e3f392e98
GET /oba/icon/consumer-privacy-logo.png HTTP/1.1
Host: secure.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Thu, 11 Feb 2021 15:39:51 GMT
Content-Type: image/png
ETag: W/"d675694ab4d4d2eb56cca854c25d9c36"
X-Varnish: 721542519 721664610
Accept-Ranges: bytes
Content-Length: 5953
Cache-Control: max-age=894
Expires: Fri, 31 Mar 2023 10:44:22 GMT
Date: Fri, 31 Mar 2023 10:29:28 GMT
Connection: keep-alive
Server: Flashtalking (AKA)
tpsc-eu3.doubleverify.com/event.png?impid=c8d3e2583b7848f1937ee24521cc6def&akipv6=&dup=&eoid=1000
34.149.12.213204 No Content 0 B URL HTTP/1.1 tpsc-eu3.doubleverify.com/event.png?impid=c8d3e2583b7848f1937ee24521cc6def&akipv6=&dup=&eoid=1000
IP 34.149.12.213:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /event.png?impid=c8d3e2583b7848f1937ee24521cc6def&akipv6=&dup=&eoid=1000 HTTP/1.1
Host: tpsc-eu3.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Fri, 31 Mar 2023 10:29:28 GMT
Connection: keep-alive
Cache-Control: max-age=0
Expires: 03/30/2023 10:29:28
Pragma: no-cache
tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=224&ttfrms=18&bridua=2&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&srcurlD=0&aUrlD=-1&ssl=https:&uid=1680258566756753&jsCallback=dvCallback_1680258566756568&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=250&winw=300&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3590&tgjsver=3590&lvvn=28&m1=13&refD=2&fcifrms=6&brh=1&sdf=2&dvp_epl=179&noc=16&nav_pltfrm=Linux%20x86_64&ctx=3397726&cmp=3398513&sid=pp3&plc=33985131&adsrv=0&advid=3398311&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVPX_PP_IMP_ID=ABAjH0h7gvk7PZByB9nZUEA8Oq6U&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347721382&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=13746225479.86325&dvp_tukv=2908427887.0788608&dvp_tuid=374565956322&jurtd=4018888698
34.149.12.213200 OK 681 B URL HTTP/1.1 tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=224&ttfrms=18&bridua=2&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&srcurlD=0&aUrlD=-1&ssl=https:&uid=1680258566756753&jsCallback=dvCallback_1680258566756568&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=250&winw=300&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3590&tgjsver=3590&lvvn=28&m1=13&refD=2&fcifrms=6&brh=1&sdf=2&dvp_epl=179&noc=16&nav_pltfrm=Linux%20x86_64&ctx=3397726&cmp=3398513&sid=pp3&plc=33985131&adsrv=0&advid=3398311&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVPX_PP_IMP_ID=ABAjH0h7gvk7PZByB9nZUEA8Oq6U&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347721382&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=13746225479.86325&dvp_tukv=2908427887.0788608&dvp_tuid=374565956322&jurtd=4018888698
IP 34.149.12.213:0
File type ASCII text, with very long lines (1184), with no line terminators
Hash 6b052c8548e837434645b37b88c542bc
d25817c4678d7a833a68fce28c8781527b9c4a04
7403632156b7b2ee307c1388df934f5f4b19fd866f1df5bbe019395f927c450c
GET /visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=224&ttfrms=18&bridua=2&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&srcurlD=0&aUrlD=-1&ssl=https:&uid=1680258566756753&jsCallback=dvCallback_1680258566756568&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=250&winw=300&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3590&tgjsver=3590&lvvn=28&m1=13&refD=2&fcifrms=6&brh=1&sdf=2&dvp_epl=179&noc=16&nav_pltfrm=Linux%20x86_64&ctx=3397726&cmp=3398513&sid=pp3&plc=33985131&adsrv=0&advid=3398311&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVPX_PP_IMP_ID=ABAjH0h7gvk7PZByB9nZUEA8Oq6U&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347721382&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=13746225479.86325&dvp_tukv=2908427887.0788608&dvp_tuid=374565956322&jurtd=4018888698 HTTP/1.1
Host: tps.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 10:29:28 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=0
Content-Encoding: br
Expires: 03/30/2023 10:29:28
Pragma: no-cache
Vary: Accept-Encoding
tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=204&ttfrms=16&bridua=2&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&srcurlD=0&aUrlD=-1&ssl=https:&uid=1680258566790838&jsCallback=dvCallback_1680258566790674&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=90&winw=728&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3590&tgjsver=3590&lvvn=28&m1=13&refD=2&fcifrms=6&brh=1&sdf=2&dvp_epl=179&noc=16&nav_pltfrm=Linux%20x86_64&ctx=3397726&cmp=3398513&sid=pp3&plc=33985131&adsrv=0&advid=3398311&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVPX_PP_IMP_ID=ABAjH0huXwYLw1h5hHPYzVFck_0a&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347820487&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=1516010200204.829&dvp_tukv=1064609364.8738792&dvp_tuid=390734809088&jurtd=2284281937
34.149.12.213200 OK 683 B URL HTTP/1.1 tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=204&ttfrms=16&bridua=2&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&srcurlD=0&aUrlD=-1&ssl=https:&uid=1680258566790838&jsCallback=dvCallback_1680258566790674&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=90&winw=728&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3590&tgjsver=3590&lvvn=28&m1=13&refD=2&fcifrms=6&brh=1&sdf=2&dvp_epl=179&noc=16&nav_pltfrm=Linux%20x86_64&ctx=3397726&cmp=3398513&sid=pp3&plc=33985131&adsrv=0&advid=3398311&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVPX_PP_IMP_ID=ABAjH0huXwYLw1h5hHPYzVFck_0a&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347820487&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=1516010200204.829&dvp_tukv=1064609364.8738792&dvp_tuid=390734809088&jurtd=2284281937
IP 34.149.12.213:0
File type ASCII text, with very long lines (1184), with no line terminators
Hash f7e9a38964bc78b7fd37a722ef594fe5
55631ea402f3b8e9a6cb1307512f03d088ada3f6
8af2426f3361a225f1a7b849fabebb90f2a4fe2f392e62eb7e5556285b9e5117
GET /visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=204&ttfrms=16&bridua=2&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauU2%26C%3Dl9EEADTbpTauTauD%407E%5D%3EJ5%3AG%5D%3F6E%5DF2TauH%3A%3FTau5%40H%3F%3D%4025%5C%24~%7D*%5C%27682D%5C!C%40%5D9E%3E%3D&srcurlD=0&aUrlD=-1&ssl=https:&uid=1680258566790838&jsCallback=dvCallback_1680258566790674&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&htmlmsging=1&chro=0&hist=1&winh=90&winw=728&wouh=1024&wouw=1280&scah=1002&scaw=1280&jsver=3590&tgjsver=3590&lvvn=28&m1=13&refD=2&fcifrms=6&brh=1&sdf=2&dvp_epl=179&noc=16&nav_pltfrm=Linux%20x86_64&ctx=3397726&cmp=3398513&sid=pp3&plc=33985131&adsrv=0&advid=3398311&turl=https://soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&DVP_PROG_REP=1&DVP_DV_TT=1&DVP_PP_ID=3&DVP_DV_CT=1&DVPX_PP_IMP_ID=ABAjH0huXwYLw1h5hHPYzVFck_0a&DVP_DBM_1=3060631&DVP_DBM_2=11796640&DVP_DBM_3=46961921&DVP_DBM_4=347820487&DVP_DBM_5=1&DVP_DBM_6=1&DVP_DBM_7=155817947598&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=1516010200204.829&dvp_tukv=1064609364.8738792&dvp_tuid=390734809088&jurtd=2284281937 HTTP/1.1
Host: tps.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 31 Mar 2023 10:29:28 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=0
Content-Encoding: br
Expires: 03/30/2023 10:29:28
Pragma: no-cache
Vary: Accept-Encoding
cdn.doubleverify.com/redirect/?host=tpsc-eu3¶m=akipv6&impid=cc433f5a23ab4f0a804f45c4bfbbdf8f&dup=&eoid=1000&cbust=1680258568417400
95.101.11.115302 Moved Temporarily 0 B URL HTTP/1.1 cdn.doubleverify.com/redirect/?host=tpsc-eu3¶m=akipv6&impid=cc433f5a23ab4f0a804f45c4bfbbdf8f&dup=&eoid=1000&cbust=1680258568417400
IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect/?host=tpsc-eu3¶m=akipv6&impid=cc433f5a23ab4f0a804f45c4bfbbdf8f&dup=&eoid=1000&cbust=1680258568417400 HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: AkamaiGHost
Content-Length: 0
Location: https://tpsc-eu3.doubleverify.com/event.png?impid=cc433f5a23ab4f0a804f45c4bfbbdf8f&akipv6=&dup=&eoid=1000
Date: Fri, 31 Mar 2023 10:29:28 GMT
Connection: keep-alive
cdn.doubleverify.com/redirect/?host=tpsc-eu3¶m=akipv6&impid=88ee385ce3834825880b495e35f6d442&dup=&eoid=1000&cbust=1680258568425775
95.101.11.115302 Moved Temporarily 0 B URL HTTP/1.1 cdn.doubleverify.com/redirect/?host=tpsc-eu3¶m=akipv6&impid=88ee385ce3834825880b495e35f6d442&dup=&eoid=1000&cbust=1680258568425775
IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect/?host=tpsc-eu3¶m=akipv6&impid=88ee385ce3834825880b495e35f6d442&dup=&eoid=1000&cbust=1680258568425775 HTTP/1.1
Host: cdn.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: AkamaiGHost
Content-Length: 0
Location: https://tpsc-eu3.doubleverify.com/event.png?impid=88ee385ce3834825880b495e35f6d442&akipv6=&dup=&eoid=1000
Date: Fri, 31 Mar 2023 10:29:28 GMT
Connection: keep-alive
tpsc-eu3.doubleverify.com/event.png?impid=cc433f5a23ab4f0a804f45c4bfbbdf8f&akipv6=&dup=&eoid=1000
34.149.12.213204 No Content 0 B URL HTTP/1.1 tpsc-eu3.doubleverify.com/event.png?impid=cc433f5a23ab4f0a804f45c4bfbbdf8f&akipv6=&dup=&eoid=1000
IP 34.149.12.213:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /event.png?impid=cc433f5a23ab4f0a804f45c4bfbbdf8f&akipv6=&dup=&eoid=1000 HTTP/1.1
Host: tpsc-eu3.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Fri, 31 Mar 2023 10:29:28 GMT
Connection: keep-alive
Cache-Control: max-age=0
Expires: 03/30/2023 10:29:28
Pragma: no-cache
tpsc-eu3.doubleverify.com/event.png?impid=88ee385ce3834825880b495e35f6d442&akipv6=&dup=&eoid=1000
34.149.12.213204 No Content 0 B URL HTTP/1.1 tpsc-eu3.doubleverify.com/event.png?impid=88ee385ce3834825880b495e35f6d442&akipv6=&dup=&eoid=1000
IP 34.149.12.213:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /event.png?impid=88ee385ce3834825880b495e35f6d442&akipv6=&dup=&eoid=1000 HTTP/1.1
Host: tpsc-eu3.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://googleads.g.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Date: Fri, 31 Mar 2023 10:29:28 GMT
Connection: keep-alive
Cache-Control: max-age=0
Expires: 03/30/2023 10:29:28
Pragma: no-cache
mc.yandex.ru/webvisor/39943420?wmode=0&wv-part=1&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=48885103&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1680258569%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102928%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258569&t=gdpr(14)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/39943420?wmode=0&wv-part=1&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=48885103&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1680258569%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102928%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258569&t=gdpr(14)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/39943420?wmode=0&wv-part=1&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=48885103&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1680258569%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102928%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258569&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 94412
Origin: https://soft.mydiv.net.ua
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 31 Mar 2023 10:29:29 GMT
access-control-allow-origin: https://soft.mydiv.net.ua
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 31-Mar-2023 10:29:29 GMT
last-modified: Fri, 31-Mar-2023 10:29:29 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/39943420?wmode=0&wv-part=1&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=245275645&wv-type=3&browser-info=we%3A1%3Aet%3A1680258569%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102929%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258569&t=gdpr(14)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/39943420?wmode=0&wv-part=1&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=245275645&wv-type=3&browser-info=we%3A1%3Aet%3A1680258569%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102929%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258569&t=gdpr(14)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/39943420?wmode=0&wv-part=1&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=245275645&wv-type=3&browser-info=we%3A1%3Aet%3A1680258569%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102929%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258569&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 54
Origin: https://soft.mydiv.net.ua
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 31 Mar 2023 10:29:29 GMT
access-control-allow-origin: https://soft.mydiv.net.ua
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 31-Mar-2023 10:29:29 GMT
last-modified: Fri, 31-Mar-2023 10:29:29 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.23200 OK 1.8 kB IP 192.124.249.23:0
Hash 62def6cb6f7b6f7e97ec4350c8baf279
a3d22f909132797d595b0c7f0779ea69cb1f7660
84d187b4e1c1e509f4605882f5debbb6f61d3ac4beb70ef26b333505b0bfa935
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 31 Mar 2023 10:29:29 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 30 Mar 2023 20:34:38 GMT
Expires: Fri, 31 Mar 2023 20:34:38 GMT
ETag: "a3d22f909132797d595b0c7f0779ea69cb1f7660"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
stat.flashtalking.com/reportV3/ft.stat?225259319-4254494;4198861;0-18-0-55687DB3006923-1011861
23.38.200.44200 OK 1 B URL HTTP/1.1 stat.flashtalking.com/reportV3/ft.stat?225259319-4254494;4198861;0-18-0-55687DB3006923-1011861
IP 23.38.200.44:0
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
GET /reportV3/ft.stat?225259319-4254494;4198861;0-18-0-55687DB3006923-1011861 HTTP/1.1
Host: stat.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: text/plain
ETag: "c4ca4238a0b923820dcc509a6f75849b:1340894289"
Last-Modified: Thu, 28 Jun 2012 14:38:09 GMT
Server: AkamaiNetStorage
Content-Length: 1
Expires: Fri, 31 Mar 2023 10:29:29 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 31 Mar 2023 10:29:29 GMT
Connection: keep-alive
mc.yandex.ru/webvisor/39943420?wmode=0&wv-part=2&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=62837767&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1680258570%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102929%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258570&t=gdpr(14)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/39943420?wmode=0&wv-part=2&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=62837767&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1680258570%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102929%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258570&t=gdpr(14)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/39943420?wmode=0&wv-part=2&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=62837767&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1680258570%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102929%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258570&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1868
Origin: https://soft.mydiv.net.ua
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 31 Mar 2023 10:29:30 GMT
access-control-allow-origin: https://soft.mydiv.net.ua
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 31-Mar-2023 10:29:30 GMT
last-modified: Fri, 31-Mar-2023 10:29:30 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/39943420?wmode=0&wv-part=2&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=814216867&wv-type=3&browser-info=we%3A1%3Aet%3A1680258570%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102929%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258570&t=gdpr(14)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/39943420?wmode=0&wv-part=2&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=814216867&wv-type=3&browser-info=we%3A1%3Aet%3A1680258570%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102929%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258570&t=gdpr(14)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/39943420?wmode=0&wv-part=2&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=814216867&wv-type=3&browser-info=we%3A1%3Aet%3A1680258570%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102929%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258570&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 33
Origin: https://soft.mydiv.net.ua
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 31 Mar 2023 10:29:30 GMT
access-control-allow-origin: https://soft.mydiv.net.ua
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 31-Mar-2023 10:29:30 GMT
last-modified: Fri, 31-Mar-2023 10:29:30 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 0d892e9f5f8b07396f1f57f5a466863d
c39780de29f58ee41378759d514a0072fc3a1554
eb717db57f5890dd6d0bb0444adeb04c628bbd0c4a50505eaceed278558c8dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 10:29:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 0d892e9f5f8b07396f1f57f5a466863d
c39780de29f58ee41378759d514a0072fc3a1554
eb717db57f5890dd6d0bb0444adeb04c628bbd0c4a50505eaceed278558c8dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 10:29:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad.doubleclick.net/activity;src=1295336;type=cs;cat=Viewa0;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;ord=1?&cbust=1680258570016167
142.250.74.166302 Found 0 B URL HTTP/2 ad.doubleclick.net/activity;src=1295336;type=cs;cat=Viewa0;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;ord=1?&cbust=1680258570016167
IP 142.250.74.166:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /activity;src=1295336;type=cs;cat=Viewa0;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;ord=1?&cbust=1680258570016167 HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 31 Mar 2023 10:29:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.com/ddm/fls/p/src=1295336;type=cs;cat=Viewa0;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;ord=1?&cbust=1680258570016167&~oref=https://googleads.g.doubleclick.net/
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 31-Mar-2023 10:44:30 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ad.doubleclick.net/ddm/activity/src=1295336;type=custom;cat=viewa2;u1=%5BTOTALPAGETIME%5D;u2=%5BBUCKET_0%5D;u3=%5BBUCKET_1_9%5D;u4=%5BBUCKET_10_19%5D;u5=%5BBUCKET_20_29%5D;u6=%5BBUCKET_30_39%5D;u7=%5BBUCKET_40_49%5D;u8=%5BBUCKET_50_59%5D;u9=%5BBUCKET_60_69%5D;u10=%5BBUCKET_70_79%5D;u11=%5BBUCKET_80_89%5D;u12=%5BBUCKET_90_99%5D;u13=%5BBUCKET_100%5D;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;u17=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=1?%20&cbust=1680258570017213
142.250.74.166302 Found 0 B URL HTTP/2 ad.doubleclick.net/ddm/activity/src=1295336;type=custom;cat=viewa2;u1=%5BTOTALPAGETIME%5D;u2=%5BBUCKET_0%5D;u3=%5BBUCKET_1_9%5D;u4=%5BBUCKET_10_19%5D;u5=%5BBUCKET_20_29%5D;u6=%5BBUCKET_30_39%5D;u7=%5BBUCKET_40_49%5D;u8=%5BBUCKET_50_59%5D;u9=%5BBUCKET_60_69%5D;u10=%5BBUCKET_70_79%5D;u11=%5BBUCKET_80_89%5D;u12=%5BBUCKET_90_99%5D;u13=%5BBUCKET_100%5D;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;u17=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=1?%20&cbust=1680258570017213
IP 142.250.74.166:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/activity/src=1295336;type=custom;cat=viewa2;u1=%5BTOTALPAGETIME%5D;u2=%5BBUCKET_0%5D;u3=%5BBUCKET_1_9%5D;u4=%5BBUCKET_10_19%5D;u5=%5BBUCKET_20_29%5D;u6=%5BBUCKET_30_39%5D;u7=%5BBUCKET_40_49%5D;u8=%5BBUCKET_50_59%5D;u9=%5BBUCKET_60_69%5D;u10=%5BBUCKET_70_79%5D;u11=%5BBUCKET_80_89%5D;u12=%5BBUCKET_90_99%5D;u13=%5BBUCKET_100%5D;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;u17=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=1?%20&cbust=1680258570017213 HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 31 Mar 2023 10:29:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.com/ddm/fls/p/src=1295336;type=custom;cat=viewa2;u1=%5BTOTALPAGETIME%5D;u2=%5BBUCKET_0%5D;u3=%5BBUCKET_1_9%5D;u4=%5BBUCKET_10_19%5D;u5=%5BBUCKET_20_29%5D;u6=%5BBUCKET_30_39%5D;u7=%5BBUCKET_40_49%5D;u8=%5BBUCKET_50_59%5D;u9=%5BBUCKET_60_69%5D;u10=%5BBUCKET_70_79%5D;u11=%5BBUCKET_80_89%5D;u12=%5BBUCKET_90_99%5D;u13=%5BBUCKET_100%5D;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;u17=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=1?%20&cbust=1680258570017213&~oref=https://googleads.g.doubleclick.net/
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 31-Mar-2023 10:44:30 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ad.doubleclick.net/activity;src=1295336;type=cs;cat=Viewa0;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;ord=1?&cbust=1680258570073675
142.250.74.166302 Found 0 B URL HTTP/2 ad.doubleclick.net/activity;src=1295336;type=cs;cat=Viewa0;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;ord=1?&cbust=1680258570073675
IP 142.250.74.166:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /activity;src=1295336;type=cs;cat=Viewa0;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;ord=1?&cbust=1680258570073675 HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 31 Mar 2023 10:29:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.com/ddm/fls/p/src=1295336;type=cs;cat=Viewa0;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;ord=1?&cbust=1680258570073675&~oref=https://googleads.g.doubleclick.net/
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 31-Mar-2023 10:44:30 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ad.doubleclick.net/ddm/activity/src=1295336;type=custom;cat=viewa2;u1=%5BTOTALPAGETIME%5D;u2=%5BBUCKET_0%5D;u3=%5BBUCKET_1_9%5D;u4=%5BBUCKET_10_19%5D;u5=%5BBUCKET_20_29%5D;u6=%5BBUCKET_30_39%5D;u7=%5BBUCKET_40_49%5D;u8=%5BBUCKET_50_59%5D;u9=%5BBUCKET_60_69%5D;u10=%5BBUCKET_70_79%5D;u11=%5BBUCKET_80_89%5D;u12=%5BBUCKET_90_99%5D;u13=%5BBUCKET_100%5D;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;u17=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=1?%20&cbust=1680258570074210
142.250.74.166302 Found 0 B URL HTTP/2 ad.doubleclick.net/ddm/activity/src=1295336;type=custom;cat=viewa2;u1=%5BTOTALPAGETIME%5D;u2=%5BBUCKET_0%5D;u3=%5BBUCKET_1_9%5D;u4=%5BBUCKET_10_19%5D;u5=%5BBUCKET_20_29%5D;u6=%5BBUCKET_30_39%5D;u7=%5BBUCKET_40_49%5D;u8=%5BBUCKET_50_59%5D;u9=%5BBUCKET_60_69%5D;u10=%5BBUCKET_70_79%5D;u11=%5BBUCKET_80_89%5D;u12=%5BBUCKET_90_99%5D;u13=%5BBUCKET_100%5D;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;u17=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=1?%20&cbust=1680258570074210
IP 142.250.74.166:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/activity/src=1295336;type=custom;cat=viewa2;u1=%5BTOTALPAGETIME%5D;u2=%5BBUCKET_0%5D;u3=%5BBUCKET_1_9%5D;u4=%5BBUCKET_10_19%5D;u5=%5BBUCKET_20_29%5D;u6=%5BBUCKET_30_39%5D;u7=%5BBUCKET_40_49%5D;u8=%5BBUCKET_50_59%5D;u9=%5BBUCKET_60_69%5D;u10=%5BBUCKET_70_79%5D;u11=%5BBUCKET_80_89%5D;u12=%5BBUCKET_90_99%5D;u13=%5BBUCKET_100%5D;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;u17=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=1?%20&cbust=1680258570074210 HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 31 Mar 2023 10:29:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.com/ddm/fls/p/src=1295336;type=custom;cat=viewa2;u1=%5BTOTALPAGETIME%5D;u2=%5BBUCKET_0%5D;u3=%5BBUCKET_1_9%5D;u4=%5BBUCKET_10_19%5D;u5=%5BBUCKET_20_29%5D;u6=%5BBUCKET_30_39%5D;u7=%5BBUCKET_40_49%5D;u8=%5BBUCKET_50_59%5D;u9=%5BBUCKET_60_69%5D;u10=%5BBUCKET_70_79%5D;u11=%5BBUCKET_80_89%5D;u12=%5BBUCKET_90_99%5D;u13=%5BBUCKET_100%5D;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;u17=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=1?%20&cbust=1680258570074210&~oref=https://googleads.g.doubleclick.net/
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 31-Mar-2023 10:44:30 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ad.doubleclick.net/activity;src=1295336;type=cs;cat=Viewa0;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;ord=1?&cbust=1680258570127388
142.250.74.166302 Found 0 B URL HTTP/2 ad.doubleclick.net/activity;src=1295336;type=cs;cat=Viewa0;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;ord=1?&cbust=1680258570127388
IP 142.250.74.166:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /activity;src=1295336;type=cs;cat=Viewa0;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;ord=1?&cbust=1680258570127388 HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 31 Mar 2023 10:29:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.com/ddm/fls/p/src=1295336;type=cs;cat=Viewa0;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;ord=1?&cbust=1680258570127388&~oref=https://googleads.g.doubleclick.net/
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 31-Mar-2023 10:44:30 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ad.doubleclick.net/ddm/activity/src=1295336;type=custom;cat=viewa2;u1=%5BTOTALPAGETIME%5D;u2=%5BBUCKET_0%5D;u3=%5BBUCKET_1_9%5D;u4=%5BBUCKET_10_19%5D;u5=%5BBUCKET_20_29%5D;u6=%5BBUCKET_30_39%5D;u7=%5BBUCKET_40_49%5D;u8=%5BBUCKET_50_59%5D;u9=%5BBUCKET_60_69%5D;u10=%5BBUCKET_70_79%5D;u11=%5BBUCKET_80_89%5D;u12=%5BBUCKET_90_99%5D;u13=%5BBUCKET_100%5D;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;u17=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=1?%20&cbust=1680258570128687
142.250.74.166302 Found 0 B URL HTTP/2 ad.doubleclick.net/ddm/activity/src=1295336;type=custom;cat=viewa2;u1=%5BTOTALPAGETIME%5D;u2=%5BBUCKET_0%5D;u3=%5BBUCKET_1_9%5D;u4=%5BBUCKET_10_19%5D;u5=%5BBUCKET_20_29%5D;u6=%5BBUCKET_30_39%5D;u7=%5BBUCKET_40_49%5D;u8=%5BBUCKET_50_59%5D;u9=%5BBUCKET_60_69%5D;u10=%5BBUCKET_70_79%5D;u11=%5BBUCKET_80_89%5D;u12=%5BBUCKET_90_99%5D;u13=%5BBUCKET_100%5D;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;u17=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=1?%20&cbust=1680258570128687
IP 142.250.74.166:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/activity/src=1295336;type=custom;cat=viewa2;u1=%5BTOTALPAGETIME%5D;u2=%5BBUCKET_0%5D;u3=%5BBUCKET_1_9%5D;u4=%5BBUCKET_10_19%5D;u5=%5BBUCKET_20_29%5D;u6=%5BBUCKET_30_39%5D;u7=%5BBUCKET_40_49%5D;u8=%5BBUCKET_50_59%5D;u9=%5BBUCKET_60_69%5D;u10=%5BBUCKET_70_79%5D;u11=%5BBUCKET_80_89%5D;u12=%5BBUCKET_90_99%5D;u13=%5BBUCKET_100%5D;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;u17=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=1?%20&cbust=1680258570128687 HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 31 Mar 2023 10:29:30 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://adservice.google.com/ddm/fls/p/src=1295336;type=custom;cat=viewa2;u1=%5BTOTALPAGETIME%5D;u2=%5BBUCKET_0%5D;u3=%5BBUCKET_1_9%5D;u4=%5BBUCKET_10_19%5D;u5=%5BBUCKET_20_29%5D;u6=%5BBUCKET_30_39%5D;u7=%5BBUCKET_40_49%5D;u8=%5BBUCKET_50_59%5D;u9=%5BBUCKET_60_69%5D;u10=%5BBUCKET_70_79%5D;u11=%5BBUCKET_80_89%5D;u12=%5BBUCKET_90_99%5D;u13=%5BBUCKET_100%5D;u14=115739;u15=18330;u16=%5BDVP_ADID%5D;u17=;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=1?%20&cbust=1680258570128687&~oref=https://googleads.g.doubleclick.net/
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 31-Mar-2023 10:44:30 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 0d892e9f5f8b07396f1f57f5a466863d
c39780de29f58ee41378759d514a0072fc3a1554
eb717db57f5890dd6d0bb0444adeb04c628bbd0c4a50505eaceed278558c8dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 10:29:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpsc-eu3.doubleverify.com/event.png?impid=56bc870ca95f43cc97e01b3df1b162f9&flavor=0&gdpr=&gdpr_consent=&dvp_gdpr_Error=3&dvp_gdv2_Error=3&vdur=519&eoid=14&msrjs=3590&sdf=67108870&vit=2&isvelg=1&rmi=16&tltms=0&tetms=6&msltms=50&vltms=519&sei=145&vetms=38&tuviims=443&tuviems=1000&engms=1&engisel=1&dvp_dtcov=4&msrcanlm=904&msrcannum=3&ismms=1110&isumms=1110&nvr=2&isgmmims=1110&isgmv4mims=1110&elmtp=1&isbxdms=2627&b0=1618&adhgt=250&adwdth=300&norwdth=300&norhgt=250&dvp_vsosnmr=1&lftb=1618&sftb=1618&msrdp=2&naral=640&vct=512&vphgt=1024&vpwdth=1280&chgt=250&cwdth=300&scrhgt=1024&scrwdth=1280&strp=0&advisonl=false&engalms=1110&dvp_dpr=1&ee_dp_cvcmeeid=1&metp=2&meeid=1&ttfurm=3570&cbust=1680258570546876
34.149.12.213204 No Content 0 B URL HTTP/1.1 tpsc-eu3.doubleverify.com/event.png?impid=56bc870ca95f43cc97e01b3df1b162f9&flavor=0&gdpr=&gdpr_consent=&dvp_gdpr_Error=3&dvp_gdv2_Error=3&vdur=519&eoid=14&msrjs=3590&sdf=67108870&vit=2&isvelg=1&rmi=16&tltms=0&tetms=6&msltms=50&vltms=519&sei=145&vetms=38&tuviims=443&tuviems=1000&engms=1&engisel=1&dvp_dtcov=4&msrcanlm=904&msrcannum=3&ismms=1110&isumms=1110&nvr=2&isgmmims=1110&isgmv4mims=1110&elmtp=1&isbxdms=2627&b0=1618&adhgt=250&adwdth=300&norwdth=300&norhgt=250&dvp_vsosnmr=1&lftb=1618&sftb=1618&msrdp=2&naral=640&vct=512&vphgt=1024&vpwdth=1280&chgt=250&cwdth=300&scrhgt=1024&scrwdth=1280&strp=0&advisonl=false&engalms=1110&dvp_dpr=1&ee_dp_cvcmeeid=1&metp=2&meeid=1&ttfurm=3570&cbust=1680258570546876
IP 34.149.12.213:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /event.png?impid=56bc870ca95f43cc97e01b3df1b162f9&flavor=0&gdpr=&gdpr_consent=&dvp_gdpr_Error=3&dvp_gdv2_Error=3&vdur=519&eoid=14&msrjs=3590&sdf=67108870&vit=2&isvelg=1&rmi=16&tltms=0&tetms=6&msltms=50&vltms=519&sei=145&vetms=38&tuviims=443&tuviems=1000&engms=1&engisel=1&dvp_dtcov=4&msrcanlm=904&msrcannum=3&ismms=1110&isumms=1110&nvr=2&isgmmims=1110&isgmv4mims=1110&elmtp=1&isbxdms=2627&b0=1618&adhgt=250&adwdth=300&norwdth=300&norhgt=250&dvp_vsosnmr=1&lftb=1618&sftb=1618&msrdp=2&naral=640&vct=512&vphgt=1024&vpwdth=1280&chgt=250&cwdth=300&scrhgt=1024&scrwdth=1280&strp=0&advisonl=false&engalms=1110&dvp_dpr=1&ee_dp_cvcmeeid=1&metp=2&meeid=1&ttfurm=3570&cbust=1680258570546876 HTTP/1.1
Host: tpsc-eu3.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/1.1 204 No Content
Date: Fri, 31 Mar 2023 10:29:31 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: max-age=0
Expires: 03/30/2023 10:29:31
Pragma: no-cache
mc.yandex.ru/webvisor/39943420?wmode=0&wv-part=3&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=1069365490&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1680258571%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102931%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258571&t=gdpr(14)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/39943420?wmode=0&wv-part=3&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=1069365490&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1680258571%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102931%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258571&t=gdpr(14)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/39943420?wmode=0&wv-part=3&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=1069365490&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1680258571%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102931%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258571&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 207
Origin: https://soft.mydiv.net.ua
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 31 Mar 2023 10:29:31 GMT
access-control-allow-origin: https://soft.mydiv.net.ua
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 31-Mar-2023 10:29:31 GMT
last-modified: Fri, 31-Mar-2023 10:29:31 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
tpsc-eu3.doubleverify.com/event.png?impid=482c04fd2c0148ad9794ed995f84f880&flavor=0&gdpr=&gdpr_consent=&dvp_gdpr_Error=3&dvp_gdv2_Error=3&vdur=47&eoid=14&msrjs=3590&sdf=67108870&vit=2&isvelg=1&rmi=16&tltms=12&tetms=3&msltms=13&vltms=47&sei=146&vetms=48&tuviims=211&tuviems=306&engms=1&engisel=1&dvp_dtcov=4&msrcanlm=968&msrcannum=4&ismms=24&isumms=23&nvr=6&isgmmims=24&isgmv4mims=24&elmtp=1&isbxdms=2151&b0=100&b11=2128&adhgt=90&adwdth=728&norwdth=728&norhgt=90&vsos=5&dvp_vsosnmr=16&lftb=2228&sftb=2228&msrdp=0&naral=704&vct=512&vphgt=1024&vpwdth=1280&chgt=90&cwdth=728&scrhgt=1024&scrwdth=1280&strp=0&advisonl=false&isiabvms=1036&isuiabvms=1036&isgmpims=369&isgmv4dpims=1036&ispmxpms=1036&enghvms=711&engalms=23&dvp_adEng=true&dvp_dpr=1&ee_dp_cvcmeeid=1&metp=2&meeid=1&ttfurm=3110&cbust=1680258570912673
34.149.12.213204 No Content 0 B URL HTTP/1.1 tpsc-eu3.doubleverify.com/event.png?impid=482c04fd2c0148ad9794ed995f84f880&flavor=0&gdpr=&gdpr_consent=&dvp_gdpr_Error=3&dvp_gdv2_Error=3&vdur=47&eoid=14&msrjs=3590&sdf=67108870&vit=2&isvelg=1&rmi=16&tltms=12&tetms=3&msltms=13&vltms=47&sei=146&vetms=48&tuviims=211&tuviems=306&engms=1&engisel=1&dvp_dtcov=4&msrcanlm=968&msrcannum=4&ismms=24&isumms=23&nvr=6&isgmmims=24&isgmv4mims=24&elmtp=1&isbxdms=2151&b0=100&b11=2128&adhgt=90&adwdth=728&norwdth=728&norhgt=90&vsos=5&dvp_vsosnmr=16&lftb=2228&sftb=2228&msrdp=0&naral=704&vct=512&vphgt=1024&vpwdth=1280&chgt=90&cwdth=728&scrhgt=1024&scrwdth=1280&strp=0&advisonl=false&isiabvms=1036&isuiabvms=1036&isgmpims=369&isgmv4dpims=1036&ispmxpms=1036&enghvms=711&engalms=23&dvp_adEng=true&dvp_dpr=1&ee_dp_cvcmeeid=1&metp=2&meeid=1&ttfurm=3110&cbust=1680258570912673
IP 34.149.12.213:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /event.png?impid=482c04fd2c0148ad9794ed995f84f880&flavor=0&gdpr=&gdpr_consent=&dvp_gdpr_Error=3&dvp_gdv2_Error=3&vdur=47&eoid=14&msrjs=3590&sdf=67108870&vit=2&isvelg=1&rmi=16&tltms=12&tetms=3&msltms=13&vltms=47&sei=146&vetms=48&tuviims=211&tuviems=306&engms=1&engisel=1&dvp_dtcov=4&msrcanlm=968&msrcannum=4&ismms=24&isumms=23&nvr=6&isgmmims=24&isgmv4mims=24&elmtp=1&isbxdms=2151&b0=100&b11=2128&adhgt=90&adwdth=728&norwdth=728&norhgt=90&vsos=5&dvp_vsosnmr=16&lftb=2228&sftb=2228&msrdp=0&naral=704&vct=512&vphgt=1024&vpwdth=1280&chgt=90&cwdth=728&scrhgt=1024&scrwdth=1280&strp=0&advisonl=false&isiabvms=1036&isuiabvms=1036&isgmpims=369&isgmv4dpims=1036&ispmxpms=1036&enghvms=711&engalms=23&dvp_adEng=true&dvp_dpr=1&ee_dp_cvcmeeid=1&metp=2&meeid=1&ttfurm=3110&cbust=1680258570912673 HTTP/1.1
Host: tpsc-eu3.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/1.1 204 No Content
Date: Fri, 31 Mar 2023 10:29:31 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: max-age=0
Expires: 03/30/2023 10:29:31
Pragma: no-cache
tpsc-eu3.doubleverify.com/event.png?impid=c05e0d23fb984073b0be4cf67286fb38&flavor=0&gdpr=&gdpr_consent=&dvp_gdpr_Error=3&dvp_gdv2_Error=3&vdur=45&eoid=14&msrjs=3590&sdf=67108870&vit=2&isvelg=1&rmi=16&tltms=14&tetms=3&msltms=40&vltms=45&sei=146&vetms=49&tuviims=241&tuviems=335&engms=1&engisel=1&dvp_dtcov=4&msrcanlm=968&msrcannum=4&ismms=39&isumms=39&nvr=2&isgmmims=39&isgmv4mims=39&elmtp=1&isbxdms=2178&b0=2241&adhgt=250&adwdth=300&norwdth=300&norhgt=250&dvp_vsosnmr=1&lftb=2241&sftb=2241&msrdp=0&naral=704&vct=512&vphgt=1024&vpwdth=1280&chgt=250&cwdth=300&scrhgt=1024&scrwdth=1280&strp=0&advisonl=false&engalms=39&dvp_dpr=1&ee_dp_cvcmeeid=1&metp=2&meeid=1&ttfurm=3121&cbust=1680258570968717
34.149.12.213204 No Content 0 B URL HTTP/1.1 tpsc-eu3.doubleverify.com/event.png?impid=c05e0d23fb984073b0be4cf67286fb38&flavor=0&gdpr=&gdpr_consent=&dvp_gdpr_Error=3&dvp_gdv2_Error=3&vdur=45&eoid=14&msrjs=3590&sdf=67108870&vit=2&isvelg=1&rmi=16&tltms=14&tetms=3&msltms=40&vltms=45&sei=146&vetms=49&tuviims=241&tuviems=335&engms=1&engisel=1&dvp_dtcov=4&msrcanlm=968&msrcannum=4&ismms=39&isumms=39&nvr=2&isgmmims=39&isgmv4mims=39&elmtp=1&isbxdms=2178&b0=2241&adhgt=250&adwdth=300&norwdth=300&norhgt=250&dvp_vsosnmr=1&lftb=2241&sftb=2241&msrdp=0&naral=704&vct=512&vphgt=1024&vpwdth=1280&chgt=250&cwdth=300&scrhgt=1024&scrwdth=1280&strp=0&advisonl=false&engalms=39&dvp_dpr=1&ee_dp_cvcmeeid=1&metp=2&meeid=1&ttfurm=3121&cbust=1680258570968717
IP 34.149.12.213:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /event.png?impid=c05e0d23fb984073b0be4cf67286fb38&flavor=0&gdpr=&gdpr_consent=&dvp_gdpr_Error=3&dvp_gdv2_Error=3&vdur=45&eoid=14&msrjs=3590&sdf=67108870&vit=2&isvelg=1&rmi=16&tltms=14&tetms=3&msltms=40&vltms=45&sei=146&vetms=49&tuviims=241&tuviems=335&engms=1&engisel=1&dvp_dtcov=4&msrcanlm=968&msrcannum=4&ismms=39&isumms=39&nvr=2&isgmmims=39&isgmv4mims=39&elmtp=1&isbxdms=2178&b0=2241&adhgt=250&adwdth=300&norwdth=300&norhgt=250&dvp_vsosnmr=1&lftb=2241&sftb=2241&msrdp=0&naral=704&vct=512&vphgt=1024&vpwdth=1280&chgt=250&cwdth=300&scrhgt=1024&scrwdth=1280&strp=0&advisonl=false&engalms=39&dvp_dpr=1&ee_dp_cvcmeeid=1&metp=2&meeid=1&ttfurm=3121&cbust=1680258570968717 HTTP/1.1
Host: tpsc-eu3.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/1.1 204 No Content
Date: Fri, 31 Mar 2023 10:29:31 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: max-age=0
Expires: 03/30/2023 10:29:31
Pragma: no-cache
tpsc-eu3.doubleverify.com/event.png?impid=c8d3e2583b7848f1937ee24521cc6def&flavor=0&gdpr=&gdpr_consent=&dvp_gdpr_Error=3&dvp_gdv2_Error=3&vdur=49&eoid=14&msrjs=3590&sdf=67108870&vit=2&isvelg=1&rmi=16&tltms=21&tetms=4&msltms=19&vltms=49&sei=146&vetms=31&tuviims=281&tuviems=361&engms=1&engisel=1&dvp_dtcov=4&msrcanlm=968&msrcannum=4&ismms=24&isumms=23&nvr=6&isgmmims=24&isgmv4mims=24&elmtp=1&isbxdms=2103&b0=100&b11=2082&adhgt=250&adwdth=300&norwdth=300&norhgt=250&vsos=6&dvp_vsosnmr=16&lftb=2182&sftb=2182&msrdp=0&naral=704&vct=512&vphgt=1024&vpwdth=1280&chgt=250&cwdth=300&scrhgt=1024&scrwdth=1280&strp=0&advisonl=false&isiabvms=1089&isuiabvms=1089&isgmpims=319&isgmv4dpims=1089&ispmxpms=1089&engalms=23&dvp_dpr=1&ee_dp_cvcmeeid=1&metp=2&meeid=1&ttfurm=3098&cbust=1680258571022528
34.149.12.213204 No Content 0 B URL HTTP/1.1 tpsc-eu3.doubleverify.com/event.png?impid=c8d3e2583b7848f1937ee24521cc6def&flavor=0&gdpr=&gdpr_consent=&dvp_gdpr_Error=3&dvp_gdv2_Error=3&vdur=49&eoid=14&msrjs=3590&sdf=67108870&vit=2&isvelg=1&rmi=16&tltms=21&tetms=4&msltms=19&vltms=49&sei=146&vetms=31&tuviims=281&tuviems=361&engms=1&engisel=1&dvp_dtcov=4&msrcanlm=968&msrcannum=4&ismms=24&isumms=23&nvr=6&isgmmims=24&isgmv4mims=24&elmtp=1&isbxdms=2103&b0=100&b11=2082&adhgt=250&adwdth=300&norwdth=300&norhgt=250&vsos=6&dvp_vsosnmr=16&lftb=2182&sftb=2182&msrdp=0&naral=704&vct=512&vphgt=1024&vpwdth=1280&chgt=250&cwdth=300&scrhgt=1024&scrwdth=1280&strp=0&advisonl=false&isiabvms=1089&isuiabvms=1089&isgmpims=319&isgmv4dpims=1089&ispmxpms=1089&engalms=23&dvp_dpr=1&ee_dp_cvcmeeid=1&metp=2&meeid=1&ttfurm=3098&cbust=1680258571022528
IP 34.149.12.213:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /event.png?impid=c8d3e2583b7848f1937ee24521cc6def&flavor=0&gdpr=&gdpr_consent=&dvp_gdpr_Error=3&dvp_gdv2_Error=3&vdur=49&eoid=14&msrjs=3590&sdf=67108870&vit=2&isvelg=1&rmi=16&tltms=21&tetms=4&msltms=19&vltms=49&sei=146&vetms=31&tuviims=281&tuviems=361&engms=1&engisel=1&dvp_dtcov=4&msrcanlm=968&msrcannum=4&ismms=24&isumms=23&nvr=6&isgmmims=24&isgmv4mims=24&elmtp=1&isbxdms=2103&b0=100&b11=2082&adhgt=250&adwdth=300&norwdth=300&norhgt=250&vsos=6&dvp_vsosnmr=16&lftb=2182&sftb=2182&msrdp=0&naral=704&vct=512&vphgt=1024&vpwdth=1280&chgt=250&cwdth=300&scrhgt=1024&scrwdth=1280&strp=0&advisonl=false&isiabvms=1089&isuiabvms=1089&isgmpims=319&isgmv4dpims=1089&ispmxpms=1089&engalms=23&dvp_dpr=1&ee_dp_cvcmeeid=1&metp=2&meeid=1&ttfurm=3098&cbust=1680258571022528 HTTP/1.1
Host: tpsc-eu3.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/1.1 204 No Content
Date: Fri, 31 Mar 2023 10:29:31 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: max-age=0
Expires: 03/30/2023 10:29:31
Pragma: no-cache
tpsc-eu3.doubleverify.com/event.png?impid=cc433f5a23ab4f0a804f45c4bfbbdf8f&flavor=0&gdpr=&gdpr_consent=&dvp_gdpr_Error=3&dvp_gdv2_Error=3&vdur=1655&eoid=14&msrjs=3590&sdf=67108870&vit=2&isvelg=1&rmi=16&tltms=21&tetms=5&msltms=26&vltms=1655&sei=145&vetms=6&tuviims=243&tuviems=1904&engms=1&engisel=1&dvp_dtcov=4&msrcanlm=904&msrcannum=3&ismms=1577&isumms=1576&nvr=6&isgmmims=1577&isgmv4mims=1577&elmtp=1&isbxdms=3768&b0=100&b11=2192&adhgt=250&adwdth=300&norwdth=300&norhgt=250&vsos=6&dvp_vsosnmr=16&lftb=2292&sftb=2292&msrdp=2&naral=640&vct=512&vphgt=1024&vpwdth=1280&chgt=250&cwdth=300&scrhgt=1024&scrwdth=1280&strp=0&advisonl=false&isiabvms=2628&isuiabvms=2628&isgmpims=1768&isgmv4dpims=2628&ispmxpms=2628&engalms=1575&dvp_dpr=1&ee_dp_cvcmeeid=1&metp=2&meeid=1&ttfurm=4679&cbust=1680258571419427
34.149.12.213204 No Content 0 B URL HTTP/1.1 tpsc-eu3.doubleverify.com/event.png?impid=cc433f5a23ab4f0a804f45c4bfbbdf8f&flavor=0&gdpr=&gdpr_consent=&dvp_gdpr_Error=3&dvp_gdv2_Error=3&vdur=1655&eoid=14&msrjs=3590&sdf=67108870&vit=2&isvelg=1&rmi=16&tltms=21&tetms=5&msltms=26&vltms=1655&sei=145&vetms=6&tuviims=243&tuviems=1904&engms=1&engisel=1&dvp_dtcov=4&msrcanlm=904&msrcannum=3&ismms=1577&isumms=1576&nvr=6&isgmmims=1577&isgmv4mims=1577&elmtp=1&isbxdms=3768&b0=100&b11=2192&adhgt=250&adwdth=300&norwdth=300&norhgt=250&vsos=6&dvp_vsosnmr=16&lftb=2292&sftb=2292&msrdp=2&naral=640&vct=512&vphgt=1024&vpwdth=1280&chgt=250&cwdth=300&scrhgt=1024&scrwdth=1280&strp=0&advisonl=false&isiabvms=2628&isuiabvms=2628&isgmpims=1768&isgmv4dpims=2628&ispmxpms=2628&engalms=1575&dvp_dpr=1&ee_dp_cvcmeeid=1&metp=2&meeid=1&ttfurm=4679&cbust=1680258571419427
IP 34.149.12.213:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /event.png?impid=cc433f5a23ab4f0a804f45c4bfbbdf8f&flavor=0&gdpr=&gdpr_consent=&dvp_gdpr_Error=3&dvp_gdv2_Error=3&vdur=1655&eoid=14&msrjs=3590&sdf=67108870&vit=2&isvelg=1&rmi=16&tltms=21&tetms=5&msltms=26&vltms=1655&sei=145&vetms=6&tuviims=243&tuviems=1904&engms=1&engisel=1&dvp_dtcov=4&msrcanlm=904&msrcannum=3&ismms=1577&isumms=1576&nvr=6&isgmmims=1577&isgmv4mims=1577&elmtp=1&isbxdms=3768&b0=100&b11=2192&adhgt=250&adwdth=300&norwdth=300&norhgt=250&vsos=6&dvp_vsosnmr=16&lftb=2292&sftb=2292&msrdp=2&naral=640&vct=512&vphgt=1024&vpwdth=1280&chgt=250&cwdth=300&scrhgt=1024&scrwdth=1280&strp=0&advisonl=false&isiabvms=2628&isuiabvms=2628&isgmpims=1768&isgmv4dpims=2628&ispmxpms=2628&engalms=1575&dvp_dpr=1&ee_dp_cvcmeeid=1&metp=2&meeid=1&ttfurm=4679&cbust=1680258571419427 HTTP/1.1
Host: tpsc-eu3.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/1.1 204 No Content
Date: Fri, 31 Mar 2023 10:29:32 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: max-age=0
Expires: 03/30/2023 10:29:32
Pragma: no-cache
tpsc-eu3.doubleverify.com/event.png?impid=88ee385ce3834825880b495e35f6d442&flavor=0&gdpr=&gdpr_consent=&dvp_gdpr_Error=3&dvp_gdv2_Error=3&vdur=1623&eoid=14&msrjs=3590&sdf=67108870&vit=2&isvelg=1&rmi=16&tltms=12&tetms=5&msltms=29&vltms=1623&sei=145&vetms=14&tuviims=220&tuviems=1857&engms=1&engisel=1&dvp_dtcov=4&msrcanlm=904&msrcannum=3&ismms=1577&isumms=1576&nvr=6&isgmmims=1577&isgmv4mims=1577&elmtp=1&isbxdms=3731&b0=100&b11=2155&adhgt=90&adwdth=728&norwdth=728&norhgt=90&vsos=5&dvp_vsosnmr=16&lftb=2255&sftb=2255&msrdp=2&naral=640&vct=512&vphgt=1024&vpwdth=1280&chgt=90&cwdth=728&scrhgt=1024&scrwdth=1280&strp=0&advisonl=false&isiabvms=2590&isuiabvms=2590&isgmpims=1733&isgmv4dpims=2590&ispmxpms=2590&enghvms=1737&engalms=1576&dvp_adEng=true&dvp_dpr=1&ee_dp_cvcmeeid=1&metp=2&meeid=1&ttfurm=4650&cbust=1680258571426311
34.149.12.213204 No Content 0 B URL HTTP/1.1 tpsc-eu3.doubleverify.com/event.png?impid=88ee385ce3834825880b495e35f6d442&flavor=0&gdpr=&gdpr_consent=&dvp_gdpr_Error=3&dvp_gdv2_Error=3&vdur=1623&eoid=14&msrjs=3590&sdf=67108870&vit=2&isvelg=1&rmi=16&tltms=12&tetms=5&msltms=29&vltms=1623&sei=145&vetms=14&tuviims=220&tuviems=1857&engms=1&engisel=1&dvp_dtcov=4&msrcanlm=904&msrcannum=3&ismms=1577&isumms=1576&nvr=6&isgmmims=1577&isgmv4mims=1577&elmtp=1&isbxdms=3731&b0=100&b11=2155&adhgt=90&adwdth=728&norwdth=728&norhgt=90&vsos=5&dvp_vsosnmr=16&lftb=2255&sftb=2255&msrdp=2&naral=640&vct=512&vphgt=1024&vpwdth=1280&chgt=90&cwdth=728&scrhgt=1024&scrwdth=1280&strp=0&advisonl=false&isiabvms=2590&isuiabvms=2590&isgmpims=1733&isgmv4dpims=2590&ispmxpms=2590&enghvms=1737&engalms=1576&dvp_adEng=true&dvp_dpr=1&ee_dp_cvcmeeid=1&metp=2&meeid=1&ttfurm=4650&cbust=1680258571426311
IP 34.149.12.213:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /event.png?impid=88ee385ce3834825880b495e35f6d442&flavor=0&gdpr=&gdpr_consent=&dvp_gdpr_Error=3&dvp_gdv2_Error=3&vdur=1623&eoid=14&msrjs=3590&sdf=67108870&vit=2&isvelg=1&rmi=16&tltms=12&tetms=5&msltms=29&vltms=1623&sei=145&vetms=14&tuviims=220&tuviems=1857&engms=1&engisel=1&dvp_dtcov=4&msrcanlm=904&msrcannum=3&ismms=1577&isumms=1576&nvr=6&isgmmims=1577&isgmv4mims=1577&elmtp=1&isbxdms=3731&b0=100&b11=2155&adhgt=90&adwdth=728&norwdth=728&norhgt=90&vsos=5&dvp_vsosnmr=16&lftb=2255&sftb=2255&msrdp=2&naral=640&vct=512&vphgt=1024&vpwdth=1280&chgt=90&cwdth=728&scrhgt=1024&scrwdth=1280&strp=0&advisonl=false&isiabvms=2590&isuiabvms=2590&isgmpims=1733&isgmv4dpims=2590&ispmxpms=2590&enghvms=1737&engalms=1576&dvp_adEng=true&dvp_dpr=1&ee_dp_cvcmeeid=1&metp=2&meeid=1&ttfurm=4650&cbust=1680258571426311 HTTP/1.1
Host: tpsc-eu3.doubleverify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/1.1 204 No Content
Date: Fri, 31 Mar 2023 10:29:32 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Cache-Control: max-age=0
Expires: 03/30/2023 10:29:32
Pragma: no-cache
stat.flashtalking.com/reportV3/ft.stat?225259319-4254494;4198861;0-19-39-55687DB3006923-3634269
23.38.200.44200 OK 1 B URL HTTP/1.1 stat.flashtalking.com/reportV3/ft.stat?225259319-4254494;4198861;0-19-39-55687DB3006923-3634269
IP 23.38.200.44:0
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
GET /reportV3/ft.stat?225259319-4254494;4198861;0-19-39-55687DB3006923-3634269 HTTP/1.1
Host: stat.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: text/plain
ETag: "c4ca4238a0b923820dcc509a6f75849b:1340894289"
Last-Modified: Thu, 28 Jun 2012 14:38:09 GMT
Server: AkamaiNetStorage
Content-Length: 1
Expires: Fri, 31 Mar 2023 10:29:32 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 31 Mar 2023 10:29:32 GMT
Connection: keep-alive
mc.yandex.ru/webvisor/39943420?wv-check=53224&wv-type=0&wmode=0&wv-part=1&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=614048071&browser-info=we%3A1%3Aet%3A1680258572%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102932%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258572&t=gdpr(14)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/39943420?wv-check=53224&wv-type=0&wmode=0&wv-part=1&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=614048071&browser-info=we%3A1%3Aet%3A1680258572%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102932%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258572&t=gdpr(14)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/39943420?wv-check=53224&wv-type=0&wmode=0&wv-part=1&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=614048071&browser-info=we%3A1%3Aet%3A1680258572%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102932%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258572&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 44
Origin: https://soft.mydiv.net.ua
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 31 Mar 2023 10:29:32 GMT
access-control-allow-origin: https://soft.mydiv.net.ua
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 31-Mar-2023 10:29:32 GMT
last-modified: Fri, 31-Mar-2023 10:29:32 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/39943420?wmode=0&wv-part=3&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=99443838&wv-type=3&browser-info=we%3A1%3Aet%3A1680258572%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102932%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258572&t=gdpr(14)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/39943420?wmode=0&wv-part=3&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=99443838&wv-type=3&browser-info=we%3A1%3Aet%3A1680258572%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102932%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258572&t=gdpr(14)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/39943420?wmode=0&wv-part=3&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=99443838&wv-type=3&browser-info=we%3A1%3Aet%3A1680258572%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102932%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258572&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 21
Origin: https://soft.mydiv.net.ua
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 31 Mar 2023 10:29:32 GMT
access-control-allow-origin: https://soft.mydiv.net.ua
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 31-Mar-2023 10:29:32 GMT
last-modified: Fri, 31-Mar-2023 10:29:32 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/39943420?wmode=0&wv-part=4&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=820899243&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1680258572%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102932%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258572&t=gdpr(14)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/39943420?wmode=0&wv-part=4&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=820899243&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1680258572%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102932%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258572&t=gdpr(14)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/39943420?wmode=0&wv-part=4&wv-hit=935900679&page-url=https%3A%2F%2Fsoft.mydiv.net.ua%2Fwin%2Fdownload-SONY-Vegas-Pro.html&rn=820899243&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1680258572%3Aw%3A1268x898%3Av%3A991%3Az%3A0%3Ai%3A20230331102932%3Au%3A1680258565390428630%3Avf%3A3ue65zhww2f2ejkyzehotb%3Ast%3A1680258572&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 15
Origin: https://soft.mydiv.net.ua
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 31 Mar 2023 10:29:32 GMT
access-control-allow-origin: https://soft.mydiv.net.ua
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 31-Mar-2023 10:29:32 GMT
last-modified: Fri, 31-Mar-2023 10:29:32 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
soft.mydiv.net.ua/win/dlfile342846_ed28a-SONY-Vegas-Pro.html/vegaspro11.0.700_32bit.exe
54.36.106.111301 Moved Permanently 0 B URL HTTP/2 soft.mydiv.net.ua/win/dlfile342846_ed28a-SONY-Vegas-Pro.html/vegaspro11.0.700_32bit.exe
IP 54.36.106.111:0
GET /win/dlfile342846_ed28a-SONY-Vegas-Pro.html/vegaspro11.0.700_32bit.exe HTTP/1.1
Host: soft.mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.2.1
location: /win/download-SONY-Vegas-Pro.html
X-Firefox-Spdy: h2
soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html
54.36.106.111200 OK 0 B URL HTTP/2 soft.mydiv.net.ua/win/download-SONY-Vegas-Pro.html
IP 54.36.106.111:0
GET /win/download-SONY-Vegas-Pro.html HTTP/1.1
Host: soft.mydiv.net.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-powered-by: PHP/8.2.1
set-cookie: suid=de7c9f517b90f01e93ad3472150aa776bd9b8c53174942582ae76fd894ed45f1; domain=.mydiv.net.ua; path=/; expires=Mon, 03-Apr-2023 10:29:24 UTC
ifh=11010140436426b604283aa3.51689900; domain=.mydiv.net.ua; path=/; expires=Mon, 03-Apr-2023 10:29:24 UTC; HttpOnly
content-encoding: gzip
X-Firefox-Spdy: h2
mydiv.net/build/public/styles/site.mydiv.css?ver=e24849be52c774f06638
54.36.106.111200 OK 0 B URL HTTP/2 mydiv.net/build/public/styles/site.mydiv.css?ver=e24849be52c774f06638
IP 54.36.106.111:0
GET /build/public/styles/site.mydiv.css?ver=e24849be52c774f06638 HTTP/1.1
Host: mydiv.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soft.mydiv.net.ua/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.7
date: Fri, 31 Mar 2023 10:29:24 GMT
content-type: text/css
last-modified: Wed, 22 Mar 2023 21:30:40 GMT
vary: Accept-Encoding
etag: W/"641b7380-27338"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500
IP 142.250.74.106:0
GET /css?family=Google%20Sans%3A400%2C500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 31 Mar 2023 10:29:26 GMT
date: Fri, 31 Mar 2023 10:29:26 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap
IP 142.250.74.106:0
GET /css2?family=Roboto:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 31 Mar 2023 10:29:26 GMT
date: Fri, 31 Mar 2023 10:29:26 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.flashtalking.com/frameworks/js/createjs/1.0.0/createjs.min.js
23.38.200.44200 OK 0 B URL HTTP/1.1 cdn.flashtalking.com/frameworks/js/createjs/1.0.0/createjs.min.js
IP 23.38.200.44:0
GET /frameworks/js/createjs/1.0.0/createjs.min.js HTTP/1.1
Host: cdn.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.flashtalking.com/155251/4198861/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Last-Modified: Wed, 11 Apr 2018 19:26:47 GMT
Content-Type: text/javascript
ETag: W/"c71464532c0fc2020d8e8667ecfd9a3f"
X-Varnish: 935807781 944519956
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=9387
Expires: Fri, 31 Mar 2023 13:05:54 GMT
Date: Fri, 31 Mar 2023 10:29:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive, Transfer-Encoding
Server: Flashtalking (AKA)
cdn.flashtalking.com/frameworks/js/api/2/10/html5API.js
23.38.200.44200 OK 0 B URL HTTP/1.1 cdn.flashtalking.com/frameworks/js/api/2/10/html5API.js
IP 23.38.200.44:0
GET /frameworks/js/api/2/10/html5API.js HTTP/1.1
Host: cdn.flashtalking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.flashtalking.com/155251/4198861/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Last-Modified: Wed, 01 Mar 2023 19:05:13 GMT
Content-Type: application/javascript
ETag: W/"18d21e6c8e9dd88128834206e884f8ee"
X-Varnish: 603198017 595631755
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=71993
Expires: Sat, 01 Apr 2023 06:29:20 GMT
Date: Fri, 31 Mar 2023 10:29:27 GMT
Content-Length: 28501
Connection: keep-alive
Server: Flashtalking (AKA)