www.moviesubtitles.ru/movie-22872.html
200 OK 3.5 kB URL HTTP/1.1 www.moviesubtitles.ru/movie-22872.html
IP
ASN #56485 Oleksandr Siedinkin
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Non-ISO extended-ASCII text, with very long lines (2085), with LF, NEL line terminators
Hash b0fb9308a077ca3fee71099cbdb3677e
e50c80db3e40b2257c22eb76b81c2e77f0dffcbf
6aa3b5d64e511a17650f0074af9e1b7dec418ccfad28b94377576eea30edcc0f
Analyzer Verdict Alert fortinet Phishing
GET /movie-22872.html HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:27 GMT
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.3.3
Set-Cookie: visited=1; expires=Sat, 28-Jan-2023 19:48:27 GMT
Cache-Control: no-cache
content-encoding: gzip
vary: accept-encoding
Content-Length: 3510
Connection: close
Content-Type: text/html
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a2104f935c638b4767ca5ae0d738ef23
85c6af15af749be0ceeae6de17c36925b750f166
5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13193
Expires: Sat, 28 Jan 2023 11:28:20 GMT
Date: Sat, 28 Jan 2023 07:48:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81dd5c5cc5b3278876cb44dcb520a60f
c0511a59e9eccdcdda98717b87c89c5d59974808
41736c303afdb3d31e48724b107dcb22883cae02f3562308eb52d9164001a2de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41736C303AFDB3D31E48724B107DCB22883CAE02F3562308EB52D9164001A2DE"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16275
Expires: Sat, 28 Jan 2023 12:19:42 GMT
Date: Sat, 28 Jan 2023 07:48:27 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 03092d1a1bc7ac91ee342a1a7ab2a562
52db06ce1fd2c74ddd36b6a0a7aee1b5c891600a
03b8ff2629abac9fc30ebec059c2e2018fcbc41646ad5f71c965ff630fbf1ffd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "03B8FF2629ABAC9FC30EBEC059C2E2018FCBC41646AD5F71C965FF630FBF1FFD"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10520
Expires: Sat, 28 Jan 2023 10:43:47 GMT
Date: Sat, 28 Jan 2023 07:48:27 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 28 Jan 2023 07:35:29 GMT
content-type: application/json
age: 778
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 6aYQ61Y9Vvw5aq4lI9jh80ctdnhEXSat5t+9hXdjwJAo7xj5zpbykSLGUhzmB8nQ/T+utQaLzp0=
x-amz-request-id: GTZN8016G6EZ14G2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 28 Jan 2023 07:20:53 GMT
age: 1654
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
www.moviesubtitles.ru/style.css
200 OK 6.4 kB URL HTTP/1.1 www.moviesubtitles.ru/style.css
IP
ASN #56485 Oleksandr Siedinkin
File type assembler source, ASCII text, with CRLF, CR, LF line terminators
Hash 9e1a8eb7c6ccb69ebe66c6eff9b50a74
f994f042ea4f3bfbbf39f14475456338d09c59d3
fac1af2a81fadf8855c6d7f601c799a036f5baafd514110a7301603594611931
GET /style.css HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:27 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sat, 21 Feb 2015 14:42:50 GMT
ETag: "140017-18e8-50f9a2ee9ae80"
Accept-Ranges: bytes
Content-Length: 6376
Connection: close
Content-Type: text/css
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:48:27 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.moviesubtitles.ru/images/flag-ukrainian.png
200 OK 384 B URL HTTP/1.1 www.moviesubtitles.ru/images/flag-ukrainian.png
IP
ASN #56485 Oleksandr Siedinkin
File type PNG image data, 30 x 16, 8-bit colormap, non-interlaced\012- data
Hash 40bb6252f3a845bce3aefd9bf69eca8e
621cb198075ef7b4d1682ccef1bfed764f1c93a8
1cbeb88e936ac4d4e90c39e8337cf728c2ecf850a79a10290655954a5f15ca0d
GET /images/flag-ukrainian.png HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:27 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 06 Jan 2008 21:21:14 GMT
ETag: "1a8d17-180-4431452c6a680"
Accept-Ranges: bytes
Content-Length: 384
Connection: close
Content-Type: image/png
www.moviesubtitles.ru/images/rip.gif
200 OK 351 B URL HTTP/1.1 www.moviesubtitles.ru/images/rip.gif
IP
ASN #56485 Oleksandr Siedinkin
File type GIF image data, version 89a, 16 x 16\012- data
Hash c4e53fb68f4833116f9dfa5d7f397df7
cc30445d49d5b274bcff23412ab6f2c70c97dee2
e8319ba048083e908dc5e38111165f2e37e9e67c70e80d6d89678207f54e5e2b
GET /images/rip.gif HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:27 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Fri, 03 Oct 2014 18:24:18 GMT
ETag: "1a8d33-15f-50488d7509880"
Accept-Ranges: bytes
Content-Length: 351
Connection: close
Content-Type: image/gif
www.moviesubtitles.ru/images/time.png
200 OK 1.4 kB URL HTTP/1.1 www.moviesubtitles.ru/images/time.png
IP
ASN #56485 Oleksandr Siedinkin
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 28de7ce62f47a07bd6bff880c7f8509f
d20691c7b3e65de7de979d8fd95676cb3143404b
ea7552169b38706119e1224959b852bcc926182bffe3d5bfc4b689a945cb724d
GET /images/time.png HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:27 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Fri, 03 Oct 2014 18:21:34 GMT
ETag: "1a3914-591-50488cd8a2780"
Accept-Ranges: bytes
Content-Length: 1425
Connection: close
Content-Type: image/png
jsc.mgid.com/m/o/moviesubtitles.org.216908.js?t=1230287
301 Moved Permanently 0 B URL HTTP/1.1 jsc.mgid.com/m/o/moviesubtitles.org.216908.js?t=1230287
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /m/o/moviesubtitles.org.216908.js?t=1230287 HTTP/1.1
Host: jsc.mgid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/
HTTP/1.1 301 Moved Permanently
Date: Sat, 28 Jan 2023 07:48:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 28 Jan 2023 08:48:27 GMT
Location: https://jsc.mgid.com/m/o/moviesubtitles.org.216908.js?t=1230287
Set-Cookie: __cf_bm=mykYauju5blDjj.pmotEUInMAp2p0Yr1nnVXMlGCj8g-1674892107-0-AedCBZG8R707hDMXG+y/ZuSlpqz8rRWY0KqQE5Ook8NmlOjtSnRsRnCvkq3ghUiw6puNSyPq+gv4QHj1zdxYLcI=; path=/; expires=Sat, 28-Jan-23 08:18:27 GMT; domain=.mgid.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7908203a285bb503-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.moviesubtitles.ru/images/save.png
200 OK 1.4 kB URL HTTP/1.1 www.moviesubtitles.ru/images/save.png
IP
ASN #56485 Oleksandr Siedinkin
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 37c7938af69b3400a3684a527a1c2762
acf0f418b4ccb641248dd53d587a8e5745496e7f
189ffd31de1499d872c27dbedeb96edec58881031ed2d3759bb232e785714501
GET /images/save.png HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:27 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Fri, 03 Oct 2014 18:25:18 GMT
ETag: "1a8d14-591-50488dae41f80"
Accept-Ranges: bytes
Content-Length: 1425
Connection: close
Content-Type: image/png
www.moviesubtitles.ru/images/number.png
200 OK 662 B URL HTTP/1.1 www.moviesubtitles.ru/images/number.png
IP
ASN #56485 Oleksandr Siedinkin
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash f01582e962cca9fb7573e8cf5f06bb59
502a4311d70171a759f0a7397a989f1c6cbcc0a3
68b0af4f86abe5a659bd5d8f78fd7e3c6226321a7c5e9f0ba970f23bb7885713
GET /images/number.png HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:27 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Fri, 03 Oct 2014 18:06:20 GMT
ETag: "1a8d25-296-50488970f9f00"
Accept-Ranges: bytes
Content-Length: 662
Connection: close
Content-Type: image/png
www.moviesubtitles.ru/images/episode.png
200 OK 1.2 kB URL HTTP/1.1 www.moviesubtitles.ru/images/episode.png
IP
ASN #56485 Oleksandr Siedinkin
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 7591c1ed5262b4ee66baa8c4ff95fc36
343564fa8be1ef7024c5cf60e615210943403ebb
39597086460cc2a7d95d04d0160764edb387060479861f0ad197634372ab802e
GET /images/episode.png HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:27 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Fri, 03 Oct 2014 18:03:14 GMT
ETag: "1a8d29-4db-504888bf97c80"
Accept-Ranges: bytes
Content-Length: 1243
Connection: close
Content-Type: image/png
www.moviesubtitles.ru/images/statistics.png
200 OK 5.2 kB URL HTTP/1.1 www.moviesubtitles.ru/images/statistics.png
IP
ASN #56485 Oleksandr Siedinkin
File type PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced\012- data
Hash bd9107990f488c1d5b2425149f6a6147
b51a4f17cf263132afa95a729409de8495041f8a
84ff5eb90d238d97a3b1f954bae5c5bf6f65db1b3256f7668d08e564c0c774f2
GET /images/statistics.png HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:27 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 06 Jan 2008 21:21:24 GMT
ETag: "1a8d2e-1434-44314535f3d00"
Accept-Ranges: bytes
Content-Length: 5172
Connection: close
Content-Type: image/png
www.moviesubtitles.ru/images/flag-english.png
200 OK 576 B URL HTTP/1.1 www.moviesubtitles.ru/images/flag-english.png
IP
ASN #56485 Oleksandr Siedinkin
File type PNG image data, 30 x 16, 8-bit colormap, non-interlaced\012- data
Hash 582ec9b89bc5aede2500c3187203214e
33ec525494a51db14d03873e148aee4ff086f06c
051d6cd2ed19ffbc284afead8be7c74ae1c8a0a13355ed2aaa9d8d0827099c8a
GET /images/flag-english.png HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:27 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 06 Jan 2008 21:21:14 GMT
ETag: "1a8cf9-240-4431452c6a680"
Accept-Ranges: bytes
Content-Length: 576
Connection: close
Content-Type: image/png
www.moviesubtitles.ru/images/flag-russian.png
200 OK 399 B URL HTTP/1.1 www.moviesubtitles.ru/images/flag-russian.png
IP
ASN #56485 Oleksandr Siedinkin
File type PNG image data, 30 x 16, 8-bit colormap, non-interlaced\012- data
Hash a8500a6f5e2f4849edd2bc560ab40283
55be906ab46003c0a78c3b3746f1e743027831a1
b27cba19783619a43b17e973e14ed138f3aa87840e896d39811156b961e8b78f
GET /images/flag-russian.png HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:27 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 06 Jan 2008 21:21:14 GMT
ETag: "1a8d03-18f-4431452c6a680"
Accept-Ranges: bytes
Content-Length: 399
Connection: close
Content-Type: image/png
jsc.mgid.com/m/o/moviesubtitles.org.216908.js?t=1230287
200 OK 0 B URL HTTP/2 jsc.mgid.com/m/o/moviesubtitles.org.216908.js?t=1230287
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /m/o/moviesubtitles.org.216908.js?t=1230287 HTTP/1.1
Host: jsc.mgid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.moviesubtitles.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 07:48:27 GMT
content-type: text/javascript
content-length: 0
cf-bgj: minify
etag: "d41d8cd98f00b204e9800998ecf8427e"
last-modified: Wed, 31 Mar 2021 16:05:35 GMT
x-amz-id-2: mOVhpU5QjPFpVpc8/F4Orx31YdIYkumhn/1a4VPMbCVJiErQxTx9kHGJsjlEOEu5b7DqTM3+XP4w53c6xuu9kg==
x-amz-request-id: CDGANV44PGP1Q934
x-amz-version-id: null
cf-cache-status: HIT
expires: Sat, 28 Jan 2023 10:48:27 GMT
cache-control: public, max-age=10800
accept-ranges: bytes
set-cookie: __cf_bm=zhVrMowOeosknMbPftrbd46xkqOWPBDjcCHbRiOfwCI-1674892107-0-AXLX+Yhd5n8amzElvekI9IXct6RVq1Ub8eYVGbYv7Xl8I21nUosv9p4x5KjQoULmG8uuOYCvtF+FOOP96/4Dplk=; path=/; expires=Sat, 28-Jan-23 08:18:27 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 7908203aaf9d0b59-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.moviesubtitles.ru/images/searchbg.gif
200 OK 5.2 kB URL HTTP/1.1 www.moviesubtitles.ru/images/searchbg.gif
IP
ASN #56485 Oleksandr Siedinkin
File type GIF image data, version 87a, 589 x 64\012- data
Hash d3420ea5dfaaf22395a05278feea5f65
56c8857463874bb7ea2e42da56bca9dccc54c540
c7c6e6a5d0d5a4419a93508564d93c3a4da70e027756493d0b8817f801e93a69
GET /images/searchbg.gif HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/style.css
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:27 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sat, 26 Feb 2011 13:48:52 GMT
ETag: "1a8d1f-1447-49d2fb4f7b900"
Accept-Ranges: bytes
Content-Length: 5191
Connection: close
Content-Type: image/gif
www.moviesubtitles.ru/images/barcurrent.gif
200 OK 1.4 kB URL HTTP/1.1 www.moviesubtitles.ru/images/barcurrent.gif
IP
ASN #56485 Oleksandr Siedinkin
File type GIF image data, version 89a, 82 x 32\012- data
Hash e001323087c18a2f90e64e4512377a2d
6f473acb9e3f3f6d8c33c871bb8ebb05462d8ce2
2f19583005a10b907e0cc8f7914e2026e135e1299adbc71428a1d82769e4d29f
GET /images/barcurrent.gif HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/style.css
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:27 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 06 Jan 2008 21:21:08 GMT
ETag: "1a8cf1-587-44314526b1900"
Accept-Ranges: bytes
Content-Length: 1415
Connection: close
Content-Type: image/gif
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c340db2d08e7b1529c7a909cec007a7b
7190f021d36fd018f68d9798e7fd6a08f6724aab
abb046a5884472ee74db4ca7fe35179dd08df237031ed32ac43604d0bc748e0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ABB046A5884472EE74DB4CA7FE35179DD08DF237031ED32AC43604D0BC748E0F"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2305
Expires: Sat, 28 Jan 2023 08:26:53 GMT
Date: Sat, 28 Jan 2023 07:48:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c340db2d08e7b1529c7a909cec007a7b
7190f021d36fd018f68d9798e7fd6a08f6724aab
abb046a5884472ee74db4ca7fe35179dd08df237031ed32ac43604d0bc748e0f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ABB046A5884472EE74DB4CA7FE35179DD08DF237031ED32AC43604D0BC748E0F"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2305
Expires: Sat, 28 Jan 2023 08:26:53 GMT
Date: Sat, 28 Jan 2023 07:48:28 GMT
Connection: keep-alive
www.moviesubtitles.ru/images/bigbox.gif
200 OK 7.9 kB URL HTTP/1.1 www.moviesubtitles.ru/images/bigbox.gif
IP
ASN #56485 Oleksandr Siedinkin
File type GIF image data, version 87a, 1040 x 64\012- data
Hash 37b7b1f9fcf66c9007016a2e42fbbef0
8a5d357eddde847d002a4bc6bb1f7b39c6398b8f
fb83423071c39ae28ee49e9da7ad4eadbcb215f8a80b438541139eb0f9eb3558
GET /images/bigbox.gif HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/style.css
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sat, 26 Feb 2011 13:44:10 GMT
ETag: "1a8cf7-1ec9-49d2fa428be80"
Accept-Ranges: bytes
Content-Length: 7881
Connection: close
Content-Type: image/gif
www.acint.net/aci.js
200 OK 7.8 kB IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1649)
Hash 23df47b4330754db70e9c1e32f0092d6
dea956b3a9dad9fa3cc352180be435943e8d0352
0056d5c8969a597094abb6cc9f3a383631ba9c0f13ac620d735f0788807fb4de
GET /aci.js HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: application/x-javascript
content-length: 7757
last-modified: Mon, 09 Jan 2023 08:01:40 GMT
etag: "63bbc9e4-1e4d"
content-encoding: gzip
expires: Sat, 28 Jan 2023 19:48:28 GMT
cache-control: max-age=43200
X-Firefox-Spdy: h2
www.moviesubtitles.ru/images/barbg.gif
200 OK 982 B URL HTTP/1.1 www.moviesubtitles.ru/images/barbg.gif
IP
ASN #56485 Oleksandr Siedinkin
File type GIF image data, version 89a, 82 x 32\012- data
Hash 8a4331a30416cf454ad2b0abc835c896
13f3a5a40cb75258f71b43b98abaa566138a4963
2367039c876efe5532796cdfeec5298a8026316c7091c7b8b44c425084f16558
GET /images/barbg.gif HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/style.css
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 06 Jan 2008 21:21:08 GMT
ETag: "1a8d01-3d6-44314526b1900"
Accept-Ranges: bytes
Content-Length: 982
Connection: close
Content-Type: image/gif
www.moviesubtitles.ru/images/flags/en.gif
200 OK 1.0 kB URL HTTP/1.1 www.moviesubtitles.ru/images/flags/en.gif
IP
ASN #56485 Oleksandr Siedinkin
File type GIF image data, version 89a, 18 x 12\012- data
Hash 93cb87bcf85c3b2756f6b296494cbc37
14d88657745649cff40766b2f43a0daf75fb955a
afd35d185a9c29cdf52a6d00347efb737cfa717cc161635809351a6aa7eca943
GET /images/flags/en.gif HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 06 Jan 2008 21:14:58 GMT
ETag: "1a8d0d-3ee-443143c5d5880"
Accept-Ranges: bytes
Content-Length: 1006
Connection: close
Content-Type: image/gif
www.moviesubtitles.ru/images/input.gif
200 OK 734 B URL HTTP/1.1 www.moviesubtitles.ru/images/input.gif
IP
ASN #56485 Oleksandr Siedinkin
File type GIF image data, version 89a, 299 x 28\012- data
Hash 4af5d9c254829f246d81119b9b4c7e65
d67ddce29bddbb54c62d04d0e3dac27c9698f73e
e1d8b29aa8f506dc8b80b87347d0b320813e204f39a94a7925fb8799a5c52d02
GET /images/input.gif HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/style.css
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 06 Jan 2008 21:21:18 GMT
ETag: "1a8d30-2de-443145303af80"
Accept-Ranges: bytes
Content-Length: 734
Connection: close
Content-Type: image/gif
www.moviesubtitles.ru/images/_blank.jpg
200 OK 3.3 kB URL HTTP/1.1 www.moviesubtitles.ru/images/_blank.jpg
IP
ASN #56485 Oleksandr Siedinkin
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x106, components 3\012- data
Hash e74a8234e1bcf95e6035db31b16ef0dd
d3ab09c7360566f7dedeb5065daad68fcf54ac64
3ab0662446695019538e25131a3b2bffbaacf51e05039c707b83d76bf57ffa98
GET /images/_blank.jpg HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sat, 21 Feb 2015 14:55:58 GMT
ETag: "1a8d31-cb5-50f9a5de19b80"
Accept-Ranges: bytes
Content-Length: 3253
Connection: close
Content-Type: image/jpeg
www.moviesubtitles.ru/images/downloads.png
200 OK 1.4 kB URL HTTP/1.1 www.moviesubtitles.ru/images/downloads.png
IP
ASN #56485 Oleksandr Siedinkin
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 7fd5b180dc46f8c67613cccc7e20e0d4
d43020c7452a2f1d509686fecdbac5575429bd30
f90383d5f41c09c41b56e347936281964b84d56fd19571e45f940c8b83e91d30
GET /images/downloads.png HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Fri, 03 Oct 2014 18:19:46 GMT
ETag: "1a8cfd-556-50488c71a3480"
Accept-Ranges: bytes
Content-Length: 1366
Connection: close
Content-Type: image/png
www.acint.net/oci.js?t=1674892109753
302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/oci.js?t=1674892109753
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /oci.js?t=1674892109753 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Sat, 28 Jan 2023 07:48:28 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/oci.js?t=1674892109753
www.acint.net/hit/?v=0.5.0&uid=f5b65176-80e0-43a8-a606-f50e3fc62cc5&dp=10&tz=%2B00%3A00&nc=94715835&u=http%3A%2F%2Fwww.moviesubtitles.ru%2Fmovie-22872.html&r=&rs=1280x1024&t=Moviesubtitles.org%20-%20%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D1%81%D1%83%D0%B1%D1%82%D0%B8%D1%82%D1%80%D1%8B%20%D0%BA%20%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%D1%83%20%22Alanis%20(2017)%22&oE=1&oP=1&dT=2023-01-28T07%3A48%3A29.751&fu=c94268e1-294a-4532-8578-05a13254d5b4
302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/hit/?v=0.5.0&uid=f5b65176-80e0-43a8-a606-f50e3fc62cc5&dp=10&tz=%2B00%3A00&nc=94715835&u=http%3A%2F%2Fwww.moviesubtitles.ru%2Fmovie-22872.html&r=&rs=1280x1024&t=Moviesubtitles.org%20-%20%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D1%81%D1%83%D0%B1%D1%82%D0%B8%D1%82%D1%80%D1%8B%20%D0%BA%20%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%D1%83%20%22Alanis%20(2017)%22&oE=1&oP=1&dT=2023-01-28T07%3A48%3A29.751&fu=c94268e1-294a-4532-8578-05a13254d5b4
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /hit/?v=0.5.0&uid=f5b65176-80e0-43a8-a606-f50e3fc62cc5&dp=10&tz=%2B00%3A00&nc=94715835&u=http%3A%2F%2Fwww.moviesubtitles.ru%2Fmovie-22872.html&r=&rs=1280x1024&t=Moviesubtitles.org%20-%20%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D1%81%D1%83%D0%B1%D1%82%D0%B8%D1%82%D1%80%D1%8B%20%D0%BA%20%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%D1%83%20%22Alanis%20(2017)%22&oE=1&oP=1&dT=2023-01-28T07%3A48%3A29.751&fu=c94268e1-294a-4532-8578-05a13254d5b4 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Sat, 28 Jan 2023 07:48:28 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/hit/?v=0.5.0&uid=f5b65176-80e0-43a8-a606-f50e3fc62cc5&dp=10&tz=%2B00%3A00&nc=94715835&u=http%3A%2F%2Fwww.moviesubtitles.ru%2Fmovie-22872.html&r=&rs=1280x1024&t=Moviesubtitles.org%20-%20%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D1%81%D1%83%D0%B1%D1%82%D0%B8%D1%82%D1%80%D1%8B%20%D0%BA%20%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%D1%83%20%22Alanis%20(2017)%22&oE=1&oP=1&dT=2023-01-28T07%3A48%3A29.751&fu=c94268e1-294a-4532-8578-05a13254d5b4
www.acint.net/mc/?dp=10
302 Moved Temporarily 142 B IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /mc/?dp=10 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Sat, 28 Jan 2023 07:48:28 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/mc/?dp=10
www.moviesubtitles.ru/images/boxtop.gif
200 OK 540 B URL HTTP/1.1 www.moviesubtitles.ru/images/boxtop.gif
IP
ASN #56485 Oleksandr Siedinkin
File type GIF image data, version 87a, 300 x 19\012- data
Hash f5ff371a9530b68267ae7c547b8254ee
0ccee3f9e81daaa4348643fd8c67ad247a345bf2
4233e40a98547af295ddbe5099bc9761efb6d034b17cf7a2e389c6bfaa93499a
GET /images/boxtop.gif HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/style.css
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sat, 26 Feb 2011 13:12:20 GMT
ETag: "1a8d2c-21c-49d2f32507500"
Accept-Ranges: bytes
Content-Length: 540
Connection: close
Content-Type: image/gif
www.moviesubtitles.ru/images/box.gif
200 OK 2.0 kB URL HTTP/1.1 www.moviesubtitles.ru/images/box.gif
IP
ASN #56485 Oleksandr Siedinkin
File type GIF image data, version 87a, 300 x 500\012- data
Hash dfad9115ed7a961db995572ccad40dca
2236e570c546886e7510ced44d32a09a6b0e8fa0
222366ee8355a834cdf3dac8cb4a0a5b7eb1b162a44d1c3a718fbeeadae1e650
GET /images/box.gif HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/style.css
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sat, 26 Feb 2011 13:13:58 GMT
ETag: "1a8cf2-7a0-49d2f3827d180"
Accept-Ranges: bytes
Content-Length: 1952
Connection: close
Content-Type: image/gif
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 28 Jan 2023 07:41:40 GMT
age: 408
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.moviesubtitles.ru/images/flags/gr.gif
200 OK 1.0 kB URL HTTP/1.1 www.moviesubtitles.ru/images/flags/gr.gif
IP
ASN #56485 Oleksandr Siedinkin
File type GIF image data, version 89a, 18 x 12\012- data
Hash cee23846c8603623882ed5134406806c
9623f1e77d92024d07f580aa20c2412bb2c2bdb1
4028eb4779d91c503ad51bb8984e09cdef9d4070118ca4ee1581460fa81d7ef7
GET /images/flags/gr.gif HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 06 Jan 2008 21:15:00 GMT
ETag: "1a8d06-3ee-443143c7bdd00"
Accept-Ranges: bytes
Content-Length: 1006
Connection: close
Content-Type: image/gif
www.moviesubtitles.ru/images/flags/fr.gif
200 OK 1.0 kB URL HTTP/1.1 www.moviesubtitles.ru/images/flags/fr.gif
IP
ASN #56485 Oleksandr Siedinkin
File type GIF image data, version 89a, 18 x 12\012- data
Hash 7f66797472eb9360e0bd22bfcfb9de1f
bf34e4f438b27e599ea28076beedce0e690f6b49
1df59d2f9889b0553295fe997df9f1e5adec5a34abc798178d2cb313c6a196c9
GET /images/flags/fr.gif HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 06 Jan 2008 21:15:00 GMT
ETag: "1a8d0a-3ee-443143c7bdd00"
Accept-Ranges: bytes
Content-Length: 1006
Connection: close
Content-Type: image/gif
www.moviesubtitles.ru/images/flags/tr.gif
200 OK 995 B URL HTTP/1.1 www.moviesubtitles.ru/images/flags/tr.gif
IP
ASN #56485 Oleksandr Siedinkin
File type GIF image data, version 89a, 18 x 12\012- data
Hash 23c0420906ac063753138c20bacd3e1a
5a2b0bc253c629cbd727590af18e2cc1816dd8c4
e79e65dba1dac21432fd206c0a02c02acea900da44e1cdcf8c7a14a3937121c2
GET /images/flags/tr.gif HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 06 Jan 2008 21:15:02 GMT
ETag: "1a8d09-3e3-443143c9a6180"
Accept-Ranges: bytes
Content-Length: 995
Connection: close
Content-Type: image/gif
www.moviesubtitles.ru/images/flags/br.gif
200 OK 1.0 kB URL HTTP/1.1 www.moviesubtitles.ru/images/flags/br.gif
IP
ASN #56485 Oleksandr Siedinkin
File type GIF image data, version 89a, 18 x 12\012- data
Hash 667c1c786e5365ea1ff2c51baed8e6a7
274b24ec9ee848710ff7b0ddf1ee46ee60eb505f
030a7ff4bbac3e311d7120f41844a4e6df33da06ed13a4c18f105b26a7abd117
GET /images/flags/br.gif HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 06 Jan 2008 21:14:58 GMT
ETag: "1a8d0e-3ee-443143c5d5880"
Accept-Ranges: bytes
Content-Length: 1006
Connection: close
Content-Type: image/gif
www.moviesubtitles.ru/images/flags/es.gif
200 OK 1.0 kB URL HTTP/1.1 www.moviesubtitles.ru/images/flags/es.gif
IP
ASN #56485 Oleksandr Siedinkin
File type GIF image data, version 89a, 18 x 12\012- data
Hash 4fc4c91dbb8012db776af9b476c4e1cd
6aecc143ce67204b927d99a83c5adf7bc331f8fe
e9f8b8fabb38524354f0bd87e91a4f4e702555956d29cc6db1b899fc0b5980b0
GET /images/flags/es.gif HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 06 Jan 2008 21:14:58 GMT
ETag: "1a8d11-3ee-443143c5d5880"
Accept-Ranges: bytes
Content-Length: 1006
Connection: close
Content-Type: image/gif
www.acint.net/mc/?dp=10
302 Found 154 B IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /mc/?dp=10 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.moviesubtitles.ru/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: text/html
content-length: 154
location: /mc/?dp=10&tc=1
set-cookie: test_cookie=CheckForPermission; path=/; Secure; SameSite=None; domain=.acint.net; expires=Sat, 28-Jan-23 07:58:28 GMT
aid=nVqzHGPU00x7bgMxyozkAm4kjWB+GBG2VsjICWnFSAnX2/ZV; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.moviesubtitles.ru/images/flags/pl.gif
200 OK 1.0 kB URL HTTP/1.1 www.moviesubtitles.ru/images/flags/pl.gif
IP
ASN #56485 Oleksandr Siedinkin
File type GIF image data, version 89a, 18 x 12\012- data
Hash a929046f3f0c7781989a284371a7f43b
1848d36e3a104294cf2a974177857947f15942c5
159c6e57f9073caed43e08f74325364ade5b064f1ab69dcf744092bd5c9c9363
GET /images/flags/pl.gif HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 06 Jan 2008 21:15:00 GMT
ETag: "1a8d08-3ee-443143c7bdd00"
Accept-Ranges: bytes
Content-Length: 1006
Connection: close
Content-Type: image/gif
www.moviesubtitles.ru/images/flags/hu.gif
200 OK 1.0 kB URL HTTP/1.1 www.moviesubtitles.ru/images/flags/hu.gif
IP
ASN #56485 Oleksandr Siedinkin
File type GIF image data, version 89a, 18 x 12\012- data
Hash 3212a65eba5018fdee554234c45fb5ff
854e9b6f0ca3989ba503e1866dce91009c97f310
16c2ad04feae30953806f138957821108d525139fee7aa9434bb15126e422f54
GET /images/flags/hu.gif HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 06 Jan 2008 21:15:00 GMT
ETag: "1a8d13-3ee-443143c7bdd00"
Accept-Ranges: bytes
Content-Length: 1006
Connection: close
Content-Type: image/gif
www.moviesubtitles.ru/images/flags/ar.gif
200 OK 237 B URL HTTP/1.1 www.moviesubtitles.ru/images/flags/ar.gif
IP
ASN #56485 Oleksandr Siedinkin
File type GIF image data, version 87a, 18 x 12\012- data
Hash 394cbae01e70ed0ab07ea8a62e549e18
85691c70465a7c26e05186e4ea67547ab5e8192a
fc36b56a21d6c67e47ad2329aab99fbb6a836aa3683d4fafb22c47e25f6dff33
GET /images/flags/ar.gif HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 06 Jan 2008 21:14:56 GMT
ETag: "1a8d07-ed-443143c3ed400"
Accept-Ranges: bytes
Content-Length: 237
Connection: close
Content-Type: image/gif
www.moviesubtitles.ru/images/flags/ru.gif
200 OK 1.0 kB URL HTTP/1.1 www.moviesubtitles.ru/images/flags/ru.gif
IP
ASN #56485 Oleksandr Siedinkin
File type GIF image data, version 89a, 18 x 12\012- data
Hash daa2a635125539998a491f04ce53dc60
8b7daa6c7adef9a3db8c2d05b3830c3be3d9dcdd
987407b3bff6c7785ecdb057b9b4be01c28db9dc0343b68a2ada547d02c9f2f1
GET /images/flags/ru.gif HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 06 Jan 2008 21:15:02 GMT
ETag: "1a8d0b-3ee-443143c9a6180"
Accept-Ranges: bytes
Content-Length: 1006
Connection: close
Content-Type: image/gif
www.moviesubtitles.ru/images/flags/it.gif
200 OK 1.0 kB URL HTTP/1.1 www.moviesubtitles.ru/images/flags/it.gif
IP
ASN #56485 Oleksandr Siedinkin
File type GIF image data, version 89a, 18 x 12\012- data
Hash 72b0c360b078e4b7d58840c12ec89525
de2359dc1eeead31e25142059f4e3a111b4ffb69
ee14d785626c45c528e752688029655d38c572371fdcd17f7dee0254aad90218
GET /images/flags/it.gif HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 06 Jan 2008 21:15:00 GMT
ETag: "1a8d0f-3ee-443143c7bdd00"
Accept-Ranges: bytes
Content-Length: 1006
Connection: close
Content-Type: image/gif
www.acint.net/hit/?v=0.5.0&uid=f5b65176-80e0-43a8-a606-f50e3fc62cc5&dp=10&tz=%2B00%3A00&nc=94715835&u=http%3A%2F%2Fwww.moviesubtitles.ru%2Fmovie-22872.html&r=&rs=1280x1024&t=Moviesubtitles.org%20-%20%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D1%81%D1%83%D0%B1%D1%82%D0%B8%D1%82%D1%80%D1%8B%20%D0%BA%20%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%D1%83%20%22Alanis%20(2017)%22&oE=1&oP=1&dT=2023-01-28T07%3A48%3A29.751&fu=c94268e1-294a-4532-8578-05a13254d5b4
200 OK 43 B URL HTTP/2 www.acint.net/hit/?v=0.5.0&uid=f5b65176-80e0-43a8-a606-f50e3fc62cc5&dp=10&tz=%2B00%3A00&nc=94715835&u=http%3A%2F%2Fwww.moviesubtitles.ru%2Fmovie-22872.html&r=&rs=1280x1024&t=Moviesubtitles.org%20-%20%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D1%81%D1%83%D0%B1%D1%82%D0%B8%D1%82%D1%80%D1%8B%20%D0%BA%20%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%D1%83%20%22Alanis%20(2017)%22&oE=1&oP=1&dT=2023-01-28T07%3A48%3A29.751&fu=c94268e1-294a-4532-8578-05a13254d5b4
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hit/?v=0.5.0&uid=f5b65176-80e0-43a8-a606-f50e3fc62cc5&dp=10&tz=%2B00%3A00&nc=94715835&u=http%3A%2F%2Fwww.moviesubtitles.ru%2Fmovie-22872.html&r=&rs=1280x1024&t=Moviesubtitles.org%20-%20%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D1%81%D1%83%D0%B1%D1%82%D0%B8%D1%82%D1%80%D1%8B%20%D0%BA%20%D1%84%D0%B8%D0%BB%D1%8C%D0%BC%D1%83%20%22Alanis%20(2017)%22&oE=1&oP=1&dT=2023-01-28T07%3A48%3A29.751&fu=c94268e1-294a-4532-8578-05a13254d5b4 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.moviesubtitles.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=nVqzHGPU00x7ZQMwss+bAll5YBtLZLdTs+76QlzMH3iyGw7W; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.moviesubtitles.ru/images/flags/de.gif
200 OK 1.0 kB URL HTTP/1.1 www.moviesubtitles.ru/images/flags/de.gif
IP
ASN #56485 Oleksandr Siedinkin
File type GIF image data, version 89a, 18 x 12\012- data
Hash 1f31389417402bf187e3276579adcfc1
658045e62fa454a1903324b7fd6dba8ed8fbb10a
66671616f880ade1bee6a9afbced9011f1fe1b179ff9860766f700825e8bc9ae
GET /images/flags/de.gif HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 06 Jan 2008 21:14:58 GMT
ETag: "1a8d0c-3eb-443143c5d5880"
Accept-Ranges: bytes
Content-Length: 1003
Connection: close
Content-Type: image/gif
www.moviesubtitles.ru/images/flags/ua.gif
200 OK 995 B URL HTTP/1.1 www.moviesubtitles.ru/images/flags/ua.gif
IP
ASN #56485 Oleksandr Siedinkin
File type GIF image data, version 87a, 18 x 12\012- data
Hash 6bb8be6dabf4f8e4a73459c8d089868f
059c1653ee5571065e8dcf327a2b51075366221c
b0d33277bf37bb100870305fb4c5f8c0c94ff0b975bef1ab45ac30b0a3f3e4f7
GET /images/flags/ua.gif HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 06 Jan 2008 21:15:02 GMT
ETag: "1a8d12-3e3-443143c9a6180"
Accept-Ranges: bytes
Content-Length: 995
Connection: close
Content-Type: image/gif
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14058
Expires: Sat, 28 Jan 2023 11:42:46 GMT
Date: Sat, 28 Jan 2023 07:48:28 GMT
Connection: keep-alive
counter.yadro.ru/hit?t15.1;r;s1280*1024*24;uhttp%3A//www.moviesubtitles.ru/movie-22872.html;i%uFFFD%uFFFDMoviesubtitles.org%20-%20%u0421%u043A%u0430%u0447%u0430%u0442%u044C%20%u0441%u0443%u0431%u0442%u0438%u0442%u0440%u044B%20%u043A%20%u0444%u0438%u043B%u044C%u043C%u0443%20%22Alanis%20%282017%29%22;0.42527011854430086
302 Moved Temporarily 32 B URL HTTP/1.1 counter.yadro.ru/hit?t15.1;r;s1280*1024*24;uhttp%3A//www.moviesubtitles.ru/movie-22872.html;i%uFFFD%uFFFDMoviesubtitles.org%20-%20%u0421%u043A%u0430%u0447%u0430%u0442%u044C%20%u0441%u0443%u0431%u0442%u0438%u0442%u0440%u044B%20%u043A%20%u0444%u0438%u043B%u044C%u043C%u0443%20%22Alanis%20%282017%29%22;0.42527011854430086
IP
ASN #39134 United Network LLC
File type HTML document, ASCII text
Hash 3e9c09a8c5a87f266e047a596f48578c
07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
GET /hit?t15.1;r;s1280*1024*24;uhttp%3A//www.moviesubtitles.ru/movie-22872.html;i%uFFFD%uFFFDMoviesubtitles.org%20-%20%u0421%u043A%u0430%u0447%u0430%u0442%u044C%20%u0441%u0443%u0431%u0442%u0438%u0442%u0440%u044B%20%u043A%20%u0444%u0438%u043B%u044C%u043C%u0443%20%22Alanis%20%282017%29%22;0.42527011854430086 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/
HTTP/1.1 302 Moved Temporarily
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: 0W/0.8c
Content-Type: text/html
Location: https://counter.yadro.ru/hit?t15.1;r;s1280*1024*24;uhttp%3A//www.moviesubtitles.ru/movie-22872.html;i%uFFFD%uFFFDMoviesubtitles.org%20-%20%u0421%u043A%u0430%u0447%u0430%u0442%u044C%20%u0441%u0443%u0431%u0442%u0438%u0442%u0440%u044B%20%u043A%20%u0444%u0438%u043B%u044C%u043C%u0443%20%22Alanis%20%282017%29%22;0.42527011854430086
Content-Length: 32
Expires: Thu, 27 Jan 2022 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
a.utraff.com/sync?ssp=Sape
204 No Content 0 B URL HTTP/2 a.utraff.com/sync?ssp=Sape
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?ssp=Sape HTTP/1.1
Host: a.utraff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: text/plain
set-cookie: preutid=1; Expires=Mon, 27 Feb 2023 10:48:28 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/
preutid=1; Expires=Mon, 27 Feb 2023 10:48:28 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-expose-headers: Content-Length,Content-Range
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WTPRdpgaonFQrZfecS7dy%2B8kzmRjlEJDjYyl4feY4ykKLwZ38wSeAh6IBLJh15ghx9Mb%2FrVGSjZf5PZW4%2B1W2621olnMt4GoDiR9Fdvz6yQnni%2FSpW4Sz9pOpfEgzTc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7908203dcfb4b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dm-eu.hybrid.ai/match?id=106&vid=1CB35A9D4CD3D46331036E7B02E48CCA
204 No Content 0 B URL HTTP/2 dm-eu.hybrid.ai/match?id=106&vid=1CB35A9D4CD3D46331036E7B02E48CCA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?id=106&vid=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: dm-eu.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sat, 28 Jan 2023 07:48:28 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
set-cookie: vid=36d56e5f331d18888542; Expires=Sun, 28 Jan 2024 07:48:26 GMT; Domain=.hybrid.ai; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 504
x-xss-protection: 1; mode=block
access-control-allow-origin: https://www.acint.net
access-control-allow-credentials: true
server: Hybrid Web Server
X-Firefox-Spdy: h2
www.moviesubtitles.ru/favicon.ico
200 OK 7.9 kB URL HTTP/1.1 www.moviesubtitles.ru/favicon.ico
IP
ASN #56485 Oleksandr Siedinkin
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\012- data
Hash 9a270ff72cdddededa2b98343837c598
04f8da4d1df983e7725a865035695926f1131d73
cb1379df51fdde9b61c6c0773cc1398c12b5406314b4438b745271823661259e
GET /favicon.ico HTTP/1.1
Host: www.moviesubtitles.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/movie-22872.html
Cookie: visited=1; fid=c94268e1-294a-4532-8578-05a13254d5b4
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 06 Jan 2008 21:23:06 GMT
ETag: "140019-1ece-443145973a280"
Accept-Ranges: bytes
Content-Length: 7886
Connection: close
Content-Type: image/vnd.microsoft.icon
sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1CB35A9D4CD3D46331036E7B02E48CCA
204 No Content 0 B URL HTTP/2 sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1CB35A9D4CD3D46331036E7B02E48CCA
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: sync.1dmp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 28 Jan 2023 07:48:28 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f3fe2f2980634f8a3b741fe5c32f89ad
c190b6d0acc2aed768656000b26231ba5b862c76
28ac81264018f03990b36c3c3a0af03c8a89ea28ca4be97e1de542544dd3d94a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "28AC81264018F03990B36C3C3A0AF03C8A89EA28CA4BE97E1DE542544DD3D94A"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11470
Expires: Sat, 28 Jan 2023 10:59:38 GMT
Date: Sat, 28 Jan 2023 07:48:28 GMT
Connection: keep-alive
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash fcbef411e4054e267b8cd7e3bb18a8a7
b255c3c65868d119e06e696f0db049d9084f5ec2
01c064eb5d7d6bf73fcc562acc352d1734c23f6df41f43b3c12e8b3ced94ed96
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Wed, 01 Feb 2023 05:18:42 GMT
ETag: "b255c3c65868d119e06e696f0db049d9084f5ec2"
Last-Modified: Sat, 28 Jan 2023 05:18:43 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 541
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7908203edf75b505-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d5922d7d7a0587dd4f7bd1efda209331
114ff3c4d8948df7350b176a910bc91d8617d8c1
d769bd78f5c383c81c165fd85139ae31011d41d8e4f73aafa7db265a73a93114
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D769BD78F5C383C81C165FD85139AE31011D41D8E4F73AAFA7DB265A73A93114"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12150
Expires: Sat, 28 Jan 2023 11:10:58 GMT
Date: Sat, 28 Jan 2023 07:48:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b40eeffeb90c07b09385da5763754ffb
26bc11b5aa4b4784adb0e9629c94feecc8907eae
a3cf040ba05fd48d9a2c61ca2f8644f0177fa91c0d9b20b57cd332f117b8ae88
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3CF040BA05FD48D9A2C61CA2F8644F0177FA91C0D9B20B57CD332F117B8AE88"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15889
Expires: Sat, 28 Jan 2023 12:13:17 GMT
Date: Sat, 28 Jan 2023 07:48:28 GMT
Connection: keep-alive
ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
302 Moved Temporarily 142 B URL HTTP/1.1 ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Sat, 28 Jan 2023 07:48:28 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/match?dp=14&euid=1C03420A4CD3D4631900C6BB02A464F0
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=CkIDHGPU00y7xgAZ8GSkAlOO0hOs9PuyF+q2dQ9ccLDPhG3N; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
sync.dmp.otm-r.com/match/sape?id=1CB35A9D4CD3D46331036E7B02E48CCA
204 No Content 0 B URL HTTP/2 sync.dmp.otm-r.com/match/sape?id=1CB35A9D4CD3D46331036E7B02E48CCA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.23.2
date: Sat, 28 Jan 2023 07:48:28 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash af1a7432747bd8bfeabace1396731828
bf5bfe75e9b4d269b264394b75e4a3b58d8971af
201e2e36228ae1a6fee0b1e5983cab85afb8516aa4f50f7e161c7f1e908dcc2a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "201E2E36228AE1A6FEE0B1E5983CAB85AFB8516AA4F50F7E161C7F1E908DCC2A"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3222
Expires: Sat, 28 Jan 2023 08:42:10 GMT
Date: Sat, 28 Jan 2023 07:48:28 GMT
Connection: keep-alive
ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
302 Found 74 B URL HTTP/1.1 ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
IP
File type HTML document, ASCII text
Hash a0b8f665f369b2ed10123c2affc1e625
e9a5db4e669cd50a9a7a4f4780bfcd414ba5c11e
4ff613f83acfcad8e6a21e77dcd84285f92a0925bb3d9b437ff4e1df73a5a837
GET /sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D HTTP/1.1
Host: ssp.bestssp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.16.1
Date: Sat, 28 Jan 2023 07:48:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 74
Connection: keep-alive
Location: https://www.acint.net/match?dp=95&euid=LESQIQTD
Set-Cookie: uid=LESQIQTD; Expires=Tue, 25 Jan 2033 07:48:28 GMT
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 94db683649508c2942b535f410d29443
be126ebe0f70d3d6139f59646f4b26df048409e7
c3a6b6371599d9cc60d87f89714cc675a1f81339d6238366c50e4110d6969ecf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C3A6B6371599D9CC60D87F89714CC675A1F81339D6238366C50E4110D6969ECF"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1649
Expires: Sat, 28 Jan 2023 08:15:57 GMT
Date: Sat, 28 Jan 2023 07:48:28 GMT
Connection: keep-alive
sync.bumlam.com/?src=sap1&uid=1CB35A9D4CD3D46331036E7B02E48CCA
302 Moved Temporarily 0 B URL HTTP/1.1 sync.bumlam.com/?src=sap1&uid=1CB35A9D4CD3D46331036E7B02E48CCA
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&uid=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sat, 28 Jan 2023 07:48:28 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQyNzQzM2ZiYS05ZWUwLTExZWQtYTFjNC0wMDI1OTBjODI0Mzc*; Path=/; Expires=Fri, 23 Jan 2043 07:48:28 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync.bumlam.com/?src=sap1&s_data=CAIQARjMptOeBmIgMUNCMzVBOUQ0Q0QzRDQ2MzMxMDM2RTdCMDJFNDhDQ0GiARAnQz-6nuAR7aHEACWQyCQ3
ETag: 27433fba-9ee0-11ed-a1c4-002590c82437
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
pix.bumlam.com/sync/sape/check?sspuid=1CB35A9D4CD3D46331036E7B02E48CCA
302 Found 0 B URL HTTP/1.1 pix.bumlam.com/sync/sape/check?sspuid=1CB35A9D4CD3D46331036E7B02E48CCA
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/sape/check?sspuid=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 28 Jan 2023 07:48:28 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://sync.bumlam.com/?src=sape
sync.upravel.com/sape/sync
302 Found 0 B URL HTTP/2 sync.upravel.com/sape/sync
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: image/png
content-length: 0
location: https://sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
set-cookie: session_tptc=1674892108689;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
session_tptc-legacy=1674892108689;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bc64905ed0c46221e28418a82fe2c70
89af1faa2308b988a7f32aac2650e76da312d086
7d0d6fdccac2ecbcb2cb9fff60fe88e1eb34fbf1088c5ddae97542c672ad8a6f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D0D6FDCCAC2ECBCB2CB9FFF60FE88E1EB34FBF1088C5DDAE97542C672AD8A6F"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5914
Expires: Sat, 28 Jan 2023 09:27:02 GMT
Date: Sat, 28 Jan 2023 07:48:28 GMT
Connection: keep-alive
www.acint.net/oci/?v=0.5.0&uid=f5b65176-80e0-43a8-a606-f50e3fc62cc5&dp=10&tz=%2B00%3A00&nc=75137283&oid=b2e3b40ba24804f2c106d1b697e85bef
302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/oci/?v=0.5.0&uid=f5b65176-80e0-43a8-a606-f50e3fc62cc5&dp=10&tz=%2B00%3A00&nc=75137283&oid=b2e3b40ba24804f2c106d1b697e85bef
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /oci/?v=0.5.0&uid=f5b65176-80e0-43a8-a606-f50e3fc62cc5&dp=10&tz=%2B00%3A00&nc=75137283&oid=b2e3b40ba24804f2c106d1b697e85bef HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Sat, 28 Jan 2023 07:48:28 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/oci/?v=0.5.0&uid=f5b65176-80e0-43a8-a606-f50e3fc62cc5&dp=10&tz=%2B00%3A00&nc=75137283&oid=b2e3b40ba24804f2c106d1b697e85bef
acint.net/match?dp=14&euid=1C03420A4CD3D4631900C6BB02A464F0
200 OK 43 B URL HTTP/2 acint.net/match?dp=14&euid=1C03420A4CD3D4631900C6BB02A464F0
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=14&euid=1C03420A4CD3D4631900C6BB02A464F0 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=nVqzHGPU00x7ZQMwss+bAll5YBtLZLdTs+76QlzMH3iyGw7W; cSyncDp7v2=1674892108; cSyncDp14v3=1674892108; cSyncDp17=1674892108; cSyncDp32=1674892108; cSyncDp45v3=1674892108; cSyncDp53v2=1674892108; cSyncDp54v2=1674892108; cSyncDp62=1674892108; cSyncDp67v2=1674892108; cSyncDp68=1674892108; cSyncDp71=1674892108; cSyncDp77=1674892108; cSyncDp84=1674892108; cSyncDp85=1674892108; cSyncDp95v3=1674892108; cSyncDp98v2=1674892108; cSyncDp101=1674892108; cSyncDp104v2=1674892108; cSyncDp107=1674892108; cSyncDp110=1674892108; cSyncDp111v2=1674892108; cSyncDp112v2=1674892108; cSyncDp125v3=1674892108; cSyncDp126=1674892108; cSyncDp127=1674892108; cSyncDp129=1674892108; cSyncDp136v2=1674892108; cSyncDp138=1674892108; cSyncDp146=1674892108; cSyncDp148=1674892108; cSyncDp149v2=1674892108; cSyncDp151=1674892108; cSyncDp178=1674892108; cSyncDp179=1674892108; cSyncDp186=1674892108; cSyncDp221=1674892108
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
acint.net/match?dp=110&euid=57564fc70219444f87b35571d39b00f1
200 OK 43 B URL HTTP/2 acint.net/match?dp=110&euid=57564fc70219444f87b35571d39b00f1
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=110&euid=57564fc70219444f87b35571d39b00f1 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=nVqzHGPU00x7ZQMwss+bAll5YBtLZLdTs+76QlzMH3iyGw7W; cSyncDp7v2=1674892108; cSyncDp14v3=1674892108; cSyncDp17=1674892108; cSyncDp32=1674892108; cSyncDp45v3=1674892108; cSyncDp53v2=1674892108; cSyncDp54v2=1674892108; cSyncDp62=1674892108; cSyncDp67v2=1674892108; cSyncDp68=1674892108; cSyncDp71=1674892108; cSyncDp77=1674892108; cSyncDp84=1674892108; cSyncDp85=1674892108; cSyncDp95v3=1674892108; cSyncDp98v2=1674892108; cSyncDp101=1674892108; cSyncDp104v2=1674892108; cSyncDp107=1674892108; cSyncDp110=1674892108; cSyncDp111v2=1674892108; cSyncDp112v2=1674892108; cSyncDp125v3=1674892108; cSyncDp126=1674892108; cSyncDp127=1674892108; cSyncDp129=1674892108; cSyncDp136v2=1674892108; cSyncDp138=1674892108; cSyncDp146=1674892108; cSyncDp148=1674892108; cSyncDp149v2=1674892108; cSyncDp151=1674892108; cSyncDp178=1674892108; cSyncDp179=1674892108; cSyncDp186=1674892108; cSyncDp221=1674892108
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bfef68d3eb1aa2431ad11fc6e46b0a40
771278fe4238732678458298eb00f68a02079803
bcf879ab02273ab6f38983b3ca5910f7e38c4ca34d66245c8d6563ada8a29257
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BCF879AB02273AB6F38983B3CA5910F7E38C4CA34D66245C8D6563ADA8A29257"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11718
Expires: Sat, 28 Jan 2023 11:03:46 GMT
Date: Sat, 28 Jan 2023 07:48:28 GMT
Connection: keep-alive
www.acint.net/match?dp=95&euid=LESQIQTD
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=95&euid=LESQIQTD
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=95&euid=LESQIQTD HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=nVqzHGPU00x7ZQMwss+bAll5YBtLZLdTs+76QlzMH3iyGw7W; cSyncDp7v2=1674892108; cSyncDp14v3=1674892108; cSyncDp17=1674892108; cSyncDp32=1674892108; cSyncDp45v3=1674892108; cSyncDp53v2=1674892108; cSyncDp54v2=1674892108; cSyncDp62=1674892108; cSyncDp67v2=1674892108; cSyncDp68=1674892108; cSyncDp71=1674892108; cSyncDp77=1674892108; cSyncDp84=1674892108; cSyncDp85=1674892108; cSyncDp95v3=1674892108; cSyncDp98v2=1674892108; cSyncDp101=1674892108; cSyncDp104v2=1674892108; cSyncDp107=1674892108; cSyncDp110=1674892108; cSyncDp111v2=1674892108; cSyncDp112v2=1674892108; cSyncDp125v3=1674892108; cSyncDp126=1674892108; cSyncDp127=1674892108; cSyncDp129=1674892108; cSyncDp136v2=1674892108; cSyncDp138=1674892108; cSyncDp146=1674892108; cSyncDp148=1674892108; cSyncDp149v2=1674892108; cSyncDp151=1674892108; cSyncDp178=1674892108; cSyncDp179=1674892108; cSyncDp186=1674892108; cSyncDp221=1674892108
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/match?dp=129&euid=jc4sxc5k14
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=129&euid=jc4sxc5k14
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=129&euid=jc4sxc5k14 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=nVqzHGPU00x7ZQMwss+bAll5YBtLZLdTs+76QlzMH3iyGw7W; cSyncDp7v2=1674892108; cSyncDp14v3=1674892108; cSyncDp17=1674892108; cSyncDp32=1674892108; cSyncDp45v3=1674892108; cSyncDp53v2=1674892108; cSyncDp54v2=1674892108; cSyncDp62=1674892108; cSyncDp67v2=1674892108; cSyncDp68=1674892108; cSyncDp71=1674892108; cSyncDp77=1674892108; cSyncDp84=1674892108; cSyncDp85=1674892108; cSyncDp95v3=1674892108; cSyncDp98v2=1674892108; cSyncDp101=1674892108; cSyncDp104v2=1674892108; cSyncDp107=1674892108; cSyncDp110=1674892108; cSyncDp111v2=1674892108; cSyncDp112v2=1674892108; cSyncDp125v3=1674892108; cSyncDp126=1674892108; cSyncDp127=1674892108; cSyncDp129=1674892108; cSyncDp136v2=1674892108; cSyncDp138=1674892108; cSyncDp146=1674892108; cSyncDp148=1674892108; cSyncDp149v2=1674892108; cSyncDp151=1674892108; cSyncDp178=1674892108; cSyncDp179=1674892108; cSyncDp186=1674892108; cSyncDp221=1674892108
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash eb076ea82dfce7ba75b3e5f52802809a
a50d51d80b89e8c1d5e583ee9f6c7b4c0cc541fd
c9a500255f4bf0a7e1c54b76eb8f07ef94733f5660686df34ab5a2b588878684
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C9A500255F4BF0A7E1C54B76EB8F07EF94733F5660686DF34AB5A2B588878684"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5766
Expires: Sat, 28 Jan 2023 09:24:34 GMT
Date: Sat, 28 Jan 2023 07:48:28 GMT
Connection: keep-alive
sync.republer.com/match?dsp=sape
204 No Content 0 B URL HTTP/2 sync.republer.com/match?dsp=sape
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?dsp=sape HTTP/1.1
Host: sync.republer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Sat, 28 Jan 2023 07:48:28 GMT
strict-transport-security: max-age=0
X-Firefox-Spdy: h2
s.uuidksinc.net/match/396/?remote_uid=1CB35A9D4CD3D46331036E7B02E48CCA
302 Found 0 B URL HTTP/2 s.uuidksinc.net/match/396/?remote_uid=1CB35A9D4CD3D46331036E7B02E48CCA
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/396/?remote_uid=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: s.uuidksinc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.19.0
date: Sat, 28 Jan 2023 07:48:28 GMT
content-length: 0
location: https://www.acint.net/match?dp=127&euid=Gmpm56LdOizHSexdQYBC
set-cookie: jcsuuid=Gmpm56LdOizHSexdQYBC; expires=Sun, 28 Jan 2024 07:48:28 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
ut.rktch.com/matchspm?pi=1000005&pui=1CB35A9D4CD3D46331036E7B02E48CCA
302 Found 0 B URL HTTP/1.1 ut.rktch.com/matchspm?pi=1000005&pui=1CB35A9D4CD3D46331036E7B02E48CCA
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /matchspm?pi=1000005&pui=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: ut.rktch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Sat, 28 Jan 2023 07:48:28 GMT
Content-Length: 0
Connection: keep-alive
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
Set-Cookie: b_uid=5a4c9ff9aa22ff37eed89166424797147cfb; Max-Age=2592000; Expires=Mon, 27 Feb 2023 07:48:28 GMT; Domain=rktch.com; Secure; SameSite=None
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Access-Control-Allow-Headers: Content-Type, Accept, Authorization
Access-Control-Allow-Credentials: true
mediatoday.ru/core/match.gif?s=32&id=1CB35A9D4CD3D46331036E7B02E48CCA
200 OK 43 B URL HTTP/2 mediatoday.ru/core/match.gif?s=32&id=1CB35A9D4CD3D46331036E7B02E48CCA
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /core/match.gif?s=32&id=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: mediatoday.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.2
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: image/gif
content-length: 43
p3p: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
cache-control: no-cache, max-age=0, must-revalidate, no-store
pragma: no-cache
expires: Thursday, 01-Jan-1970 00:00:00 GMT
set-cookie: idntfy=VUuMd5SpQFdulaD; expires=Tue, 25-Jan-2033 07:48:28 GMT; domain=mediatoday.ru; path=/core; SameSite=None; Secure
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4289WoKaT7Fs2ktQ+kDfkA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: TBE9tMe3ia76m3lLDZSXvZ2KYdI=
nr.bidderstack.com/sape/cm?user_id=1CB35A9D4CD3D46331036E7B02E48CCA
200 OK 44 B URL HTTP/1.1 nr.bidderstack.com/sape/cm?user_id=1CB35A9D4CD3D46331036E7B02E48CCA
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash f9d60352c70a2ba15616d1c9421f3844
e9abc8bea7721a4b6a50295850d13c515006a95c
82cb517a8f80c91dfcec543c6d140deb3baaf463ea9e77655475096eba7bc7d9
GET /sape/cm?user_id=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: nr.bidderstack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 07:48:28 GMT
Content-Type: image/gif
Content-Length: 44
Connection: keep-alive
Access-Control-Allow-Credentials: true
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b9d2706d0e7a9b8f7dc11a1d323ffba
98cdd7743ec5f86cbdb831bde5ebb751fea4c60c
7b33340337ab77d72539f86a9607ce3eb12b6b0fbadea3f6b457badb8616692a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7B33340337AB77D72539F86A9607CE3EB12B6B0FBADEA3F6B457BADB8616692A"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1350
Expires: Sat, 28 Jan 2023 08:10:58 GMT
Date: Sat, 28 Jan 2023 07:48:28 GMT
Connection: keep-alive
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 78da1741defc9f60ea00b44e799a6212
e301f9dee161006ae3a5bc65c523a9d9b6961584
13fefa467ce9e0f4855858aa83a92c00a83cdf5062bb611ff2d3d16ff27087df
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Wed, 01 Feb 2023 04:36:47 GMT
ETag: "e301f9dee161006ae3a5bc65c523a9d9b6961584"
Last-Modified: Sat, 28 Jan 2023 04:36:48 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1433
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7908203fca45b518-OSL
www.acint.net/oci/?v=0.5.0&uid=f5b65176-80e0-43a8-a606-f50e3fc62cc5&dp=10&tz=%2B00%3A00&nc=75137283&oid=b2e3b40ba24804f2c106d1b697e85bef
200 OK 43 B URL HTTP/2 www.acint.net/oci/?v=0.5.0&uid=f5b65176-80e0-43a8-a606-f50e3fc62cc5&dp=10&tz=%2B00%3A00&nc=75137283&oid=b2e3b40ba24804f2c106d1b697e85bef
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /oci/?v=0.5.0&uid=f5b65176-80e0-43a8-a606-f50e3fc62cc5&dp=10&tz=%2B00%3A00&nc=75137283&oid=b2e3b40ba24804f2c106d1b697e85bef HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.moviesubtitles.ru/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=nVqzHGPU00x7ZQMwss+bAll5YBtLZLdTs+76QlzMH3iyGw7W; cSyncDp7v2=1674892108; cSyncDp14v3=1674892108; cSyncDp17=1674892108; cSyncDp32=1674892108; cSyncDp45v3=1674892108; cSyncDp53v2=1674892108; cSyncDp54v2=1674892108; cSyncDp62=1674892108; cSyncDp67v2=1674892108; cSyncDp68=1674892108; cSyncDp71=1674892108; cSyncDp77=1674892108; cSyncDp84=1674892108; cSyncDp85=1674892108; cSyncDp95v3=1674892108; cSyncDp98v2=1674892108; cSyncDp101=1674892108; cSyncDp104v2=1674892108; cSyncDp107=1674892108; cSyncDp110=1674892108; cSyncDp111v2=1674892108; cSyncDp112v2=1674892108; cSyncDp125v3=1674892108; cSyncDp126=1674892108; cSyncDp127=1674892108; cSyncDp129=1674892108; cSyncDp136v2=1674892108; cSyncDp138=1674892108; cSyncDp146=1674892108; cSyncDp148=1674892108; cSyncDp149v2=1674892108; cSyncDp151=1674892108; cSyncDp178=1674892108; cSyncDp179=1674892108; cSyncDp186=1674892108; cSyncDp221=1674892108
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
match.new-programmatic.com/userbind?src=sape&id=1CB35A9D4CD3D46331036E7B02E48CCA
204 No Content 0 B URL HTTP/1.1 match.new-programmatic.com/userbind?src=sape&id=1CB35A9D4CD3D46331036E7B02E48CCA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=sape&id=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: match.new-programmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.22.1
Date: Sat, 28 Jan 2023 07:48:28 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
302 Found 0 B URL HTTP/2 sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0 HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: session_tptc=1674892108689
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: image/png
content-length: 0
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: user_id=30a4100e-8cc0-4c72-b52b-1b3f546979e0;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
user_id-legacy=30a4100e-8cc0-4c72-b52b-1b3f546979e0;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
location: https://www.acint.net/match?dp=71&euid=30a4100e-8cc0-4c72-b52b-1b3f546979e0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sap1&s_data=CAIQARjMptOeBmIgMUNCMzVBOUQ0Q0QzRDQ2MzMxMDM2RTdCMDJFNDhDQ0GiARAnQz-6nuAR7aHEACWQyCQ3
200 OK 0 B URL HTTP/1.1 sync.bumlam.com/?src=sap1&s_data=CAIQARjMptOeBmIgMUNCMzVBOUQ0Q0QzRDQ2MzMxMDM2RTdCMDJFNDhDQ0GiARAnQz-6nuAR7aHEACWQyCQ3
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&s_data=CAIQARjMptOeBmIgMUNCMzVBOUQ0Q0QzRDQ2MzMxMDM2RTdCMDJFNDhDQ0GiARAnQz-6nuAR7aHEACWQyCQ3 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQyNzQzM2ZiYS05ZWUwLTExZWQtYTFjNC0wMDI1OTBjODI0Mzc*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 07:48:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQyNzQzM2ZiYS05ZWUwLTExZWQtYTFjNC0wMDI1OTBjODI0Mzc*; Path=/; Expires=Fri, 23 Jan 2043 07:48:28 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0a25f371a954c455634e7b426531fc1d
51904886535a2e4d441483b5f3d35df7a32fa6a0
55ca874617410ff12bd201295c3ec43249c05120dcbd830984ab41e8017d98a8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "55CA874617410FF12BD201295C3EC43249C05120DCBD830984AB41E8017D98A8"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13209
Expires: Sat, 28 Jan 2023 11:28:37 GMT
Date: Sat, 28 Jan 2023 07:48:28 GMT
Connection: keep-alive
stat.adlabs.ru/merge_gpsid/?sid=50&id=1CB35A9D4CD3D46331036E7B02E48CCA
302 Found 0 B URL HTTP/2 stat.adlabs.ru/merge_gpsid/?sid=50&id=1CB35A9D4CD3D46331036E7B02E48CCA
IP
ASN #201009 Centre of server systems Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /merge_gpsid/?sid=50&id=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: stat.adlabs.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sat, 28 Jan 2023 07:33:05 GMT
content-length: 0
location: //adlmerge.com/merge_gpsid/?sid=50&id=1CB35A9D4CD3D46331036E7B02E48CCA
X-Firefox-Spdy: h2
www.acint.net/match?dp=127&euid=Gmpm56LdOizHSexdQYBC
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=127&euid=Gmpm56LdOizHSexdQYBC
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=127&euid=Gmpm56LdOizHSexdQYBC HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=nVqzHGPU00x7ZQMwss+bAll5YBtLZLdTs+76QlzMH3iyGw7W; cSyncDp7v2=1674892108; cSyncDp14v3=1674892108; cSyncDp17=1674892108; cSyncDp32=1674892108; cSyncDp45v3=1674892108; cSyncDp53v2=1674892108; cSyncDp54v2=1674892108; cSyncDp62=1674892108; cSyncDp67v2=1674892108; cSyncDp68=1674892108; cSyncDp71=1674892108; cSyncDp77=1674892108; cSyncDp84=1674892108; cSyncDp85=1674892108; cSyncDp95v3=1674892108; cSyncDp98v2=1674892108; cSyncDp101=1674892108; cSyncDp104v2=1674892108; cSyncDp107=1674892108; cSyncDp110=1674892108; cSyncDp111v2=1674892108; cSyncDp112v2=1674892108; cSyncDp125v3=1674892108; cSyncDp126=1674892108; cSyncDp127=1674892108; cSyncDp129=1674892108; cSyncDp136v2=1674892108; cSyncDp138=1674892108; cSyncDp146=1674892108; cSyncDp148=1674892108; cSyncDp149v2=1674892108; cSyncDp151=1674892108; cSyncDp178=1674892108; cSyncDp179=1674892108; cSyncDp186=1674892108; cSyncDp221=1674892108
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sape
302 Moved Temporarily 0 B URL HTTP/1.1 sync.bumlam.com/?src=sape
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sape HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQyNzQzM2ZiYS05ZWUwLTExZWQtYTFjNC0wMDI1OTBjODI0Mzc*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sat, 28 Jan 2023 07:48:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQyNzQzM2ZiYS05ZWUwLTExZWQtYTFjNC0wMDI1OTBjODI0Mzc*; Path=/; Expires=Fri, 23 Jan 2043 07:48:28 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: https://pix.bumlam.com/sync/sape/sync_ok?guid=27433fba-9ee0-11ed-a1c4-002590c82437
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
Access-Control-Allow-Origin: https://acint.net
Access-Control-Allow-Credentials: true
1cb35a9d4cd3d46331036e7b02e48cca-sp.ops.beeline.ru/p?ssp=sp&id=1CB35A9D4CD3D46331036E7B02E48CCA
301 Moved Permanently 0 B URL HTTP/2 1cb35a9d4cd3d46331036e7b02e48cca-sp.ops.beeline.ru/p?ssp=sp&id=1CB35A9D4CD3D46331036E7B02E48CCA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&id=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: 1cb35a9d4cd3d46331036e7b02e48cca-sp.ops.beeline.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 28 Jan 2023 07:48:28 GMT
content-length: 0
location: https://www.acint.net/match?dp=111&euid=f4812ec6-8d16-4115-9331-6dfe4887662e
access-control-allow-origin: *
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: BeeAID=f4812ec6-8d16-4115-9331-6dfe4887662e; expires=Fri, 19 Jan 2024 07:48:28 GMT; domain=ops.beeline.ru; path=/; secure; SameSite=None
access-control-allow-credentials: true, true
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS, GET, HEAD, POST, OPTIONS, PUT, DELETE
access-control-allow-headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
x-route: http://upstream_cookiesync
x-host: 192.168.152.35
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash baaa4cf163c1b56d18e60efea8e1741b
a100429fb8969ba9a94b27b7ed4e13940e915f83
abecb89105b0d1930e689b2f0cbc78daf55a6d82584ae35084b5c0d26f806c3f
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:28 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Wed, 01 Feb 2023 05:42:15 GMT
ETag: "a100429fb8969ba9a94b27b7ed4e13940e915f83"
Last-Modified: Sat, 28 Jan 2023 05:42:16 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2519
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79082040293bb505-OSL
cs.agency2.ru/p?ssp=sp&uid=1CB35A9D4CD3D46331036E7B02E48CCA
301 Moved Permanently 0 B URL HTTP/1.1 cs.agency2.ru/p?ssp=sp&uid=1CB35A9D4CD3D46331036E7B02E48CCA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&uid=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: cs.agency2.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Date: Sat, 28 Jan 2023 07:48:28 GMT
Content-Length: 0
Connection: keep-alive
Server: fasthttp
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.acint.net/match?dp=186&euid=4182dc73-f931-4a60-bc35-e46edf11009c
Set-Cookie: uuid=4182dc73-f931-4a60-bc35-e46edf11009c; expires=Fri, 19 Jan 2024 07:48:28 GMT; domain=agency2.ru; path=/; secure; SameSite=None
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.107.44
www.acint.net/match?dp=71&euid=30a4100e-8cc0-4c72-b52b-1b3f546979e0
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=71&euid=30a4100e-8cc0-4c72-b52b-1b3f546979e0
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=71&euid=30a4100e-8cc0-4c72-b52b-1b3f546979e0 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=nVqzHGPU00x7ZQMwss+bAll5YBtLZLdTs+76QlzMH3iyGw7W; cSyncDp7v2=1674892108; cSyncDp14v3=1674892108; cSyncDp17=1674892108; cSyncDp32=1674892108; cSyncDp45v3=1674892108; cSyncDp53v2=1674892108; cSyncDp54v2=1674892108; cSyncDp62=1674892108; cSyncDp67v2=1674892108; cSyncDp68=1674892108; cSyncDp71=1674892108; cSyncDp77=1674892108; cSyncDp84=1674892108; cSyncDp85=1674892108; cSyncDp95v3=1674892108; cSyncDp98v2=1674892108; cSyncDp101=1674892108; cSyncDp104v2=1674892108; cSyncDp107=1674892108; cSyncDp110=1674892108; cSyncDp111v2=1674892108; cSyncDp112v2=1674892108; cSyncDp125v3=1674892108; cSyncDp126=1674892108; cSyncDp127=1674892108; cSyncDp129=1674892108; cSyncDp136v2=1674892108; cSyncDp138=1674892108; cSyncDp146=1674892108; cSyncDp148=1674892108; cSyncDp149v2=1674892108; cSyncDp151=1674892108; cSyncDp178=1674892108; cSyncDp179=1674892108; cSyncDp186=1674892108; cSyncDp221=1674892108
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
counter.yadro.ru/hit?t15.1;r;s1280*1024*24;uhttp%3A//www.moviesubtitles.ru/movie-22872.html;i%uFFFD%uFFFDMoviesubtitles.org%20-%20%u0421%u043A%u0430%u0447%u0430%u0442%u044C%20%u0441%u0443%u0431%u0442%u0438%u0442%u0440%u044B%20%u043A%20%u0444%u0438%u043B%u044C%u043C%u0443%20%22Alanis%20%282017%29%22;0.42527011854430086
200 OK 234 B URL HTTP/1.1 counter.yadro.ru/hit?t15.1;r;s1280*1024*24;uhttp%3A//www.moviesubtitles.ru/movie-22872.html;i%uFFFD%uFFFDMoviesubtitles.org%20-%20%u0421%u043A%u0430%u0447%u0430%u0442%u044C%20%u0441%u0443%u0431%u0442%u0438%u0442%u0440%u044B%20%u043A%20%u0444%u0438%u043B%u044C%u043C%u0443%20%22Alanis%20%282017%29%22;0.42527011854430086
IP
ASN #39134 United Network LLC
File type GIF image data, version 89a, 88 x 31\012- data
Hash d0f3d945b12b90ced56542dd4bbf8e61
97e26357a6398ead319d09487a20452e9241df56
6906196a9f9ca25cc6947e0f25ef61fe87742c8cdff68625c5fef8b32fe372ad
GET /hit?t15.1;r;s1280*1024*24;uhttp%3A//www.moviesubtitles.ru/movie-22872.html;i%uFFFD%uFFFDMoviesubtitles.org%20-%20%u0421%u043A%u0430%u0447%u0430%u0442%u044C%20%u0441%u0443%u0431%u0442%u0438%u0442%u0440%u044B%20%u043A%20%u0444%u0438%u043B%u044C%u043C%u0443%20%22Alanis%20%282017%29%22;0.42527011854430086 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.moviesubtitles.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 28 Jan 2023 07:48:28 GMT
Content-Type: image/gif
Content-Length: 234
Connection: keep-alive
Expires: Thu, 27 Jan 2022 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
pix.bumlam.com/sync/sape/sync_ok?guid=27433fba-9ee0-11ed-a1c4-002590c82437
302 Found 0 B URL HTTP/1.1 pix.bumlam.com/sync/sape/sync_ok?guid=27433fba-9ee0-11ed-a1c4-002590c82437
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/sape/sync_ok?guid=27433fba-9ee0-11ed-a1c4-002590c82437 HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQyNzQzM2ZiYS05ZWUwLTExZWQtYTFjNC0wMDI1OTBjODI0Mzc*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 28 Jan 2023 07:48:28 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://27433fba-9ee0-11ed-a1c4-002590c82437.n7.sync.bumlam.com/?src=sape
www.acint.net/match?dp=111&euid=f4812ec6-8d16-4115-9331-6dfe4887662e
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=111&euid=f4812ec6-8d16-4115-9331-6dfe4887662e
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=111&euid=f4812ec6-8d16-4115-9331-6dfe4887662e HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=nVqzHGPU00x7ZQMwss+bAll5YBtLZLdTs+76QlzMH3iyGw7W; cSyncDp7v2=1674892108; cSyncDp14v3=1674892108; cSyncDp17=1674892108; cSyncDp32=1674892108; cSyncDp45v3=1674892108; cSyncDp53v2=1674892108; cSyncDp54v2=1674892108; cSyncDp62=1674892108; cSyncDp67v2=1674892108; cSyncDp68=1674892108; cSyncDp71=1674892108; cSyncDp77=1674892108; cSyncDp84=1674892108; cSyncDp85=1674892108; cSyncDp95v3=1674892108; cSyncDp98v2=1674892108; cSyncDp101=1674892108; cSyncDp104v2=1674892108; cSyncDp107=1674892108; cSyncDp110=1674892108; cSyncDp111v2=1674892108; cSyncDp112v2=1674892108; cSyncDp125v3=1674892108; cSyncDp126=1674892108; cSyncDp127=1674892108; cSyncDp129=1674892108; cSyncDp136v2=1674892108; cSyncDp138=1674892108; cSyncDp146=1674892108; cSyncDp148=1674892108; cSyncDp149v2=1674892108; cSyncDp151=1674892108; cSyncDp178=1674892108; cSyncDp179=1674892108; cSyncDp186=1674892108; cSyncDp221=1674892108
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.adspend.space/sape?uid=1CB35A9D4CD3D46331036E7B02E48CCA
302 Found 149 B URL HTTP/2 sync.adspend.space/sape?uid=1CB35A9D4CD3D46331036E7B02E48CCA
IP
File type HTML document, ASCII text
Hash ab13f8f12af8ddd138ee0e8ad71ccd2b
38ee7e1f91548bdab7a689ae7e7a8d591cb95dba
548c475472fec4ee27d699f6b3672d077efa1e9363608ca59d2b2a53632f0b11
GET /sape?uid=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: sync.adspend.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: text/html; charset=utf-8
content-length: 149
location: https://sync.adspend.space/check?r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D98%26euid%3Dbce6cef8-6dde-40dd-a564-9400a462d817
set-cookie: as-user=bce6cef8-6dde-40dd-a564-9400a462d817; Path=/; Max-Age=31536000; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 448eee096991e3fb582942ba2934b6b5
de58b4da4bb6b4e4a6eca3af7b0cf6d3d62f193c
a383439aa0da9fc504a7a1005a27119e59207f58485cabdaf503e5c9fdc66e7b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A383439AA0DA9FC504A7A1005A27119E59207F58485CABDAF503E5C9FDC66E7B"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5591
Expires: Sat, 28 Jan 2023 09:21:39 GMT
Date: Sat, 28 Jan 2023 07:48:28 GMT
Connection: keep-alive
www.acint.net/match?dp=186&euid=4182dc73-f931-4a60-bc35-e46edf11009c
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=186&euid=4182dc73-f931-4a60-bc35-e46edf11009c
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=186&euid=4182dc73-f931-4a60-bc35-e46edf11009c HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=nVqzHGPU00x7ZQMwss+bAll5YBtLZLdTs+76QlzMH3iyGw7W; cSyncDp7v2=1674892108; cSyncDp14v3=1674892108; cSyncDp17=1674892108; cSyncDp32=1674892108; cSyncDp45v3=1674892108; cSyncDp53v2=1674892108; cSyncDp54v2=1674892108; cSyncDp62=1674892108; cSyncDp67v2=1674892108; cSyncDp68=1674892108; cSyncDp71=1674892108; cSyncDp77=1674892108; cSyncDp84=1674892108; cSyncDp85=1674892108; cSyncDp95v3=1674892108; cSyncDp98v2=1674892108; cSyncDp101=1674892108; cSyncDp104v2=1674892108; cSyncDp107=1674892108; cSyncDp110=1674892108; cSyncDp111v2=1674892108; cSyncDp112v2=1674892108; cSyncDp125v3=1674892108; cSyncDp126=1674892108; cSyncDp127=1674892108; cSyncDp129=1674892108; cSyncDp136v2=1674892108; cSyncDp138=1674892108; cSyncDp146=1674892108; cSyncDp148=1674892108; cSyncDp149v2=1674892108; cSyncDp151=1674892108; cSyncDp178=1674892108; cSyncDp179=1674892108; cSyncDp186=1674892108; cSyncDp221=1674892108
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.adspend.space/check?r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D98%26euid%3Dbce6cef8-6dde-40dd-a564-9400a462d817
302 Found 102 B URL HTTP/2 sync.adspend.space/check?r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D98%26euid%3Dbce6cef8-6dde-40dd-a564-9400a462d817
IP
File type HTML document, ASCII text
Hash 1fb39c5a8800bac8f189da273b8904b2
afb2ed69f953fdfca7f4d3aacce57d5d96880be2
8569f662ad27e3654a357ab19c9ae145c1476c7cf3aa489ba7b545dc1055708a
GET /check?r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D98%26euid%3Dbce6cef8-6dde-40dd-a564-9400a462d817 HTTP/1.1
Host: sync.adspend.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: as-user=bce6cef8-6dde-40dd-a564-9400a462d817
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: text/html; charset=utf-8
content-length: 102
location: https://www.acint.net/match?dp=98&euid=bce6cef8-6dde-40dd-a564-9400a462d817
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
www.acint.net/match?dp=98&euid=bce6cef8-6dde-40dd-a564-9400a462d817
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=98&euid=bce6cef8-6dde-40dd-a564-9400a462d817
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=98&euid=bce6cef8-6dde-40dd-a564-9400a462d817 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=nVqzHGPU00x7ZQMwss+bAll5YBtLZLdTs+76QlzMH3iyGw7W; cSyncDp7v2=1674892108; cSyncDp14v3=1674892108; cSyncDp17=1674892108; cSyncDp32=1674892108; cSyncDp45v3=1674892108; cSyncDp53v2=1674892108; cSyncDp54v2=1674892108; cSyncDp62=1674892108; cSyncDp67v2=1674892108; cSyncDp68=1674892108; cSyncDp71=1674892108; cSyncDp77=1674892108; cSyncDp84=1674892108; cSyncDp85=1674892108; cSyncDp95v3=1674892108; cSyncDp98v2=1674892108; cSyncDp101=1674892108; cSyncDp104v2=1674892108; cSyncDp107=1674892108; cSyncDp110=1674892108; cSyncDp111v2=1674892108; cSyncDp112v2=1674892108; cSyncDp125v3=1674892108; cSyncDp126=1674892108; cSyncDp127=1674892108; cSyncDp129=1674892108; cSyncDp136v2=1674892108; cSyncDp138=1674892108; cSyncDp146=1674892108; cSyncDp148=1674892108; cSyncDp149v2=1674892108; cSyncDp151=1674892108; cSyncDp178=1674892108; cSyncDp179=1674892108; cSyncDp186=1674892108; cSyncDp221=1674892108
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 2161bb4c65c6a044dd64ec1e686db5fa
625990111ff304dd72155b344bf895115f90bb83
6bf8c3feee60db227017e2cdc057dcd7d6850c5e4274a1deede788142d8a9b17
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 25 Jan 2023 23:26:46 GMT
Expires: Wed, 01 Feb 2023 23:26:45 GMT
Etag: "625990111ff304dd72155b344bf895115f90bb83"
Cache-Control: max-age=401296,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 790820401921b505-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 568c93ff4ce0b24387048413ddc44d4f
24cfed9200efd3a0f5525f280af318cd71889855
669a2fac01af429cad09224fce38f0dd73b26ab6b75b1fb705a69c784da626d9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "669A2FAC01AF429CAD09224FCE38F0DD73B26AB6B75B1FB705A69C784DA626D9"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19730
Expires: Sat, 28 Jan 2023 13:17:19 GMT
Date: Sat, 28 Jan 2023 07:48:29 GMT
Connection: keep-alive
dmp.gotechnology.io/match/sape?id=1CB35A9D4CD3D46331036E7B02E48CCA
302 Found 0 B URL HTTP/2 dmp.gotechnology.io/match/sape?id=1CB35A9D4CD3D46331036E7B02E48CCA
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: dmp.gotechnology.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sat, 28 Jan 2023 07:48:29 GMT
content-length: 0
location: https://dmp.gotechnology.io/match/sape?id=1CB35A9D4CD3D46331036E7B02E48CCA&chk=1
set-cookie: chk=1; path=/; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
27433fba-9ee0-11ed-a1c4-002590c82437.n7.sync.bumlam.com/?src=sape
302 Found 0 B URL HTTP/2 27433fba-9ee0-11ed-a1c4-002590c82437.n7.sync.bumlam.com/?src=sape
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sape HTTP/1.1
Host: 27433fba-9ee0-11ed-a1c4-002590c82437.n7.sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQyNzQzM2ZiYS05ZWUwLTExZWQtYTFjNC0wMDI1OTBjODI0Mzc*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.22.1
date: Sat, 28 Jan 2023 07:48:29 GMT
content-length: 0
location: https://pix.bumlam.com/sync/sape/done
X-Firefox-Spdy: h2
pix.bumlam.com/sync/sape/done
200 OK 43 B URL HTTP/1.1 pix.bumlam.com/sync/sape/done
IP
ASN #44066 diva-e Datacenters GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /sync/sape/done HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQyNzQzM2ZiYS05ZWUwLTExZWQtYTFjNC0wMDI1OTBjODI0Mzc*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
adlmerge.com/merge_gpsid/?sid=50&id=1CB35A9D4CD3D46331036E7B02E48CCA
200 OK 43 B URL HTTP/2 adlmerge.com/merge_gpsid/?sid=50&id=1CB35A9D4CD3D46331036E7B02E48CCA
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /merge_gpsid/?sid=50&id=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: adlmerge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.16.0
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: image/gif
iseu: eu
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e7ebbff54ced2c07469b302fc6d44078
f59983c844c398bd37705051ca685b2d07d85726
04eb3bd7658c1112bfc1d0098e8d7f5fafdb10459e3290c0d4e6a17e65a5494f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 07:48:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 02bee28c6fcb4f18445e713c9183a84c
6ccfdfc70c25a4658df4c4daa9be2764e799ff31
70f8e7b29ea836772ee03845f13e0ab67b52a385b7472adf2223c5221643b366
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Wed, 01 Feb 2023 06:09:46 GMT
ETag: "6ccfdfc70c25a4658df4c4daa9be2764e799ff31"
Last-Modified: Sat, 28 Jan 2023 06:09:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 583
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79082042fd6ab518-OSL
cm.g.doubleclick.net/pixel?google_nid=agentstvo_sape_limited&google_hm=HLNanUzT1GMxA257AuSMyg
200 OK 170 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=agentstvo_sape_limited&google_hm=HLNanUzT1GMxA257AuSMyg
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash e7673c60af825466f83d46da72ca1635
fc0fcbee0835709ba2d28798a612bfd687903fb5
0b8a20373c6dd04e091902226d922b3688143a8938afb9d283d889de7b55ceb5
GET /pixel?google_nid=agentstvo_sape_limited&google_hm=HLNanUzT1GMxA257AuSMyg HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
date: Sat, 28 Jan 2023 07:48:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: HTTP server (unknown)
content-length: 170
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 02bee28c6fcb4f18445e713c9183a84c
6ccfdfc70c25a4658df4c4daa9be2764e799ff31
70f8e7b29ea836772ee03845f13e0ab67b52a385b7472adf2223c5221643b366
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Wed, 01 Feb 2023 06:09:46 GMT
ETag: "6ccfdfc70c25a4658df4c4daa9be2764e799ff31"
Last-Modified: Sat, 28 Jan 2023 06:09:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 583
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 790820433d93b518-OSL
ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=153&external_id=1CB35A9D4CD3D46331036E7B02E48CCA
200 OK 42 B URL HTTP/1.1 ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=153&external_id=1CB35A9D4CD3D46331036E7B02E48CCA
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cgi-bin/sync.cgi?dsp_id=153&external_id=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: ssp.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
ocsp.sectigo.com/
200 OK 471 B IP
Hash cd74174131d5447f2242c38a91f7d853
a74a982d078681499bb200b17f5cfc5124ba5be3
11c4f75434e9726d62eb73a73e1697c3c20e2d8b452ca2b263f4821481b06d89
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 03:41:02 GMT
Expires: Sat, 04 Feb 2023 03:41:01 GMT
Etag: "a74a982d078681499bb200b17f5cfc5124ba5be3"
Cache-Control: max-age=589351,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7908203f0b400b55-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 2e693f171fad5ce5cb5c0ea5df6614f5
ad9e6ac32b3638157294d03189e9b0c81fc3c477
9f20e4547f556a8013987075bf7dd1b6c7d1e7aee4ab6905d71fe1cbec766e27
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Wed, 01 Feb 2023 05:12:35 GMT
ETag: "ad9e6ac32b3638157294d03189e9b0c81fc3c477"
Last-Modified: Sat, 28 Jan 2023 05:12:36 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1120
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 790820436dd9b518-OSL
ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691
302 Moved Temporarily 0 B URL HTTP/1.1 ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691 HTTP/1.1
Host: ad.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-control: no-cache, max-age=0, must-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
Set-Cookie: cid=-4906550386; expires=Mon, 27 Jan 2025 07:48:29 GMT; path=/; domain=.adriver.ru; SameSite=None; Secure
Location: /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-4906550386
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
ocsp.globalsign.com/gseccovsslca2018
200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash bcd528fcf0255aaf551ca4eb478dff62
f5b58a221aadeecbdaa875e49a91663274fe494b
63e8ca093aa950890fcdb8f92b3cc92b06e58888369a7f45cdc4c12abc6beb2b
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Wed, 01 Feb 2023 06:13:03 GMT
ETag: "f5b58a221aadeecbdaa875e49a91663274fe494b"
Last-Modified: Sat, 28 Jan 2023 06:13:04 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 373
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 790820438df1b518-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash 7d356edd48bf05fba9a8fcdc9037c2a6
de672418fb6b1082b35935a23947a55b31229044
8b03bac05eefb5307769151d38462b0d8a4317aee20793e6c708f8110af51c26
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 25 Jan 2023 02:03:25 GMT
Expires: Wed, 01 Feb 2023 02:03:24 GMT
Etag: "de672418fb6b1082b35935a23947a55b31229044"
Cache-Control: max-age=324294,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 790820435cd6b505-OSL
ocsp.globalsign.com/alphasslcasha256g4
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/alphasslcasha256g4
IP
Hash 8c676a84d2f33da67a7e30ca8432d4d2
000b3a8e3c1d8e0a120e7a806b151a87646bc8f0
d5d8d105abe7dab1f3ae1674829a0dbaa1137cf40dab164ca7bc2ec2487f85ec
POST /alphasslcasha256g4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: application/ocsp-response
Content-Length: 1437
Connection: keep-alive
Expires: Wed, 01 Feb 2023 05:39:14 GMT
ETag: "000b3a8e3c1d8e0a120e7a806b151a87646bc8f0"
Last-Modified: Sat, 28 Jan 2023 05:39:15 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 216
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79082043ae17b518-OSL
exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
301 Moved Permanently 115 B URL HTTP/2 exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
IP
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text
Hash d278eb0a753cff34211d257f744aa8d2
cbc907d40f342652c543da782aac8a2a972b8b4e
5b9443737fe81a9c1229f5b2c8fbad0573eb797f4c85f0549116f0b71ba11fce
GET /cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 28 Jan 2023 07:48:29 GMT
content-type: text/html; charset=utf-8
content-length: 115
location: https://www.acint.net/match?dp=126&euid=ef6f0e87-2226-4b56-5918-96278ff1c70e
serverid: TODO
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D
302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sun, 28 Jan 2024 07:48:29 GMT; Path=/; Domain=.betweendigital.com
tuuid=0d038491-c578-521c-97bb-d02ff46f0362; Max-Age=31536000; Expires=Sun, 28 Jan 2024 07:48:29 GMT; Path=/; Domain=.betweendigital.com
ut=Y9TTTQAL2yi-ZLYhWCsiQ8cry5zsLCu_LOP_fg==; Max-Age=31536000; Expires=Sun, 28 Jan 2024 07:48:29 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8eac8ce1bd8aebf2c47ae9dc353b3b4b
1002b4e299288b97e9b2b52859d761071cbb37ea
269d4bdac0acc67f22a6bdceb67b66da86cc8c47a44f97cbd0b41941bfafe9b7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "269D4BDAC0ACC67F22A6BDCEB67B66DA86CC8C47A44F97CBD0B41941BFAFE9B7"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1987
Expires: Sat, 28 Jan 2023 08:21:36 GMT
Date: Sat, 28 Jan 2023 07:48:29 GMT
Connection: keep-alive
ad.mail.ru/cm.gif?p=48&id=1CB35A9D4CD3D46331036E7B02E48CCA
200 OK 43 B URL HTTP/2 ad.mail.ru/cm.gif?p=48&id=1CB35A9D4CD3D46331036E7B02E48CCA
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /cm.gif?p=48&id=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: ad.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:48:29 GMT
content-type: image/gif
content-length: 43
set-cookie: VID=0xA56b1EGQIF0024_G2bKR2F:::0-0-0-8ef2c0d:CAASEJzlM3U0s9DBhDWRdX85F1kaYIa9wZ2ZKi5iRZTHg7bJNxh9zWf-8pr5uJV9vW5IN9F7xLL31Ec5F-thV39UJx-JayPfWpO4cZAriGc8aMoehU1BKJiQNHq93osIi3k689jgAA_fujdLBCoXi2s9JaXRyg; path=/; expires=Mon, 29-Jan-24 07:48:29 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
expires: Sat, 28 Jan 2023 13:48:29 GMT
cache-control: max-age=21600
last-modified: Sat, 28 Jan 2023 07:48:29 GMT
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: require-corp
X-Firefox-Spdy: h2
ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-4906550386
302 Moved Temporarily 40 B URL HTTP/1.1 ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-4906550386
IP
File type ASCII text, with CRLF line terminators
Hash 251630b588179b239e8fab1ac9ef6d3a
91b91a97bc481dd2bbd5e0f3fea6ba1c4e843882
c95661e0ef6975b1df5361695a439f71a021d72c345023c3e668e84f35b3c38b
GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-4906550386 HTTP/1.1
Host: ad.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-control: no-cache, no-cache=Set-Cookie, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref="//adriver.ru/w3c/p3p.xml", CP="NON DSP COR CURa ADMa DEVa OUR BUS UNI COM NAV INT STA"
Set-Cookie: cid=0; expires=Mon, 27 Jan 2025 07:48:29 GMT; path=/; domain=.adriver.ru;
uid=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain=.adriver.ru
Location: https://www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
sync.adkernel.com/user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D
400 Bad Request 22 B URL HTTP/1.1 sync.adkernel.com/user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D
IP
ASN #36057 WEBAIR-INTERNET-MTL
File type ASCII text, with no line terminators
Hash b0b11e1c78b526b61477f8e9ee540be0
d5e73002987ff54626542b116d98a8f4aa9ee2eb
4ca18c247df52dd22650bd7f72f71d7c98102243b0ec474f683c6a279ad3a668
GET /user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D HTTP/1.1
Host: sync.adkernel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 400 Bad Request
Server: nginx
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Length: 22
Connection: close
Cache-Control: no-store
Age: 0
Pragma: no-cache
ocsp.usertrust.com/
200 OK 472 B IP
Hash 0e897c0ed51a17b199fe1b0e0c57c362
2f176923d551b1d80215e2ca1701020387a763b0
aae436e55c60fdf5316f181e6f8b16c3f1965733a268e4106f62b0511203c22c
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 26 Jan 2023 16:18:24 GMT
Expires: Thu, 02 Feb 2023 16:18:23 GMT
Etag: "2f176923d551b1d80215e2ca1701020387a763b0"
Cache-Control: max-age=600601,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1391
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79082043fdcf0b31-OSL
www.acint.net/match?dp=126&euid=ef6f0e87-2226-4b56-5918-96278ff1c70e
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=126&euid=ef6f0e87-2226-4b56-5918-96278ff1c70e
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=126&euid=ef6f0e87-2226-4b56-5918-96278ff1c70e HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=nVqzHGPU00x7ZQMwss+bAll5YBtLZLdTs+76QlzMH3iyGw7W; cSyncDp7v2=1674892108; cSyncDp14v3=1674892108; cSyncDp17=1674892108; cSyncDp32=1674892108; cSyncDp45v3=1674892108; cSyncDp53v2=1674892108; cSyncDp54v2=1674892108; cSyncDp62=1674892108; cSyncDp67v2=1674892108; cSyncDp68=1674892108; cSyncDp71=1674892108; cSyncDp77=1674892108; cSyncDp84=1674892108; cSyncDp85=1674892108; cSyncDp95v3=1674892108; cSyncDp98v2=1674892108; cSyncDp101=1674892108; cSyncDp104v2=1674892108; cSyncDp107=1674892108; cSyncDp110=1674892108; cSyncDp111v2=1674892108; cSyncDp112v2=1674892108; cSyncDp125v3=1674892108; cSyncDp126=1674892108; cSyncDp127=1674892108; cSyncDp129=1674892108; cSyncDp136v2=1674892108; cSyncDp138=1674892108; cSyncDp146=1674892108; cSyncDp148=1674892108; cSyncDp149v2=1674892108; cSyncDp151=1674892108; cSyncDp178=1674892108; cSyncDp179=1674892108; cSyncDp186=1674892108; cSyncDp221=1674892108
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 28 Jan 2023 07:48:29 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dac59f925c2b13126c1677cb298fb45a
e1215f2956004e38ae53c23119d2cb1e0e358740
e522b9c5bef4ad6ab36d101fa1501b1f019fd43afc153eaaabeb6cd9ed23ded9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E522B9C5BEF4AD6AB36D101FA1501B1F019FD43AFC153EAAABEB6CD9ED23DED9"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8838
Expires: Sat, 28 Jan 2023 10:15:47 GMT
Date: Sat, 28 Jan 2023 07:48:29 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e7ebbff54ced2c07469b302fc6d44078
f59983c844c398bd37705051ca685b2d07d85726
04eb3bd7658c1112bfc1d0098e8d7f5fafdb10459e3290c0d4e6a17e65a5494f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 07:48:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tag.digitaltarget.ru/adcm.js
200 OK 3.1 kB URL HTTP/1.1 tag.digitaltarget.ru/adcm.js
IP
File type ASCII text, with very long lines (3051), with no line terminators
Hash e7097284185069f52fc736bcd50cda13
1cdfdf2d869841202079ddf91e0a00a8610812e6
40f2a96f78f4c8484e9da6e172f5ddd3e4d7786ca29e04b96e1067a365190e80
GET /adcm.js HTTP/1.1
Host: tag.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: application/javascript
Content-Length: 3051
Last-Modified: Sat, 28 Jan 2023 07:34:22 GMT
Connection: keep-alive
ETag: "63d4cffe-beb"
Accept-Ranges: bytes
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 23fe5a166fddea182034aa7ee1b78074
3d4313d162a7ad79bd06ec7f9cd6a107434387e2
de69560463030341e14094b5587a0813fe8f060273acab400f2b67d76f457833
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Wed, 01 Feb 2023 04:36:11 GMT
ETag: "3d4313d162a7ad79bd06ec7f9cd6a107434387e2"
Last-Modified: Sat, 28 Jan 2023 04:36:12 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2863
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 790820443eddb518-OSL
ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sun, 28 Jan 2024 07:48:28 GMT; Path=/; Domain=.betweendigital.com
tuuid=076f4e32-a6f1-521c-8ea2-ffbded762cf1; Max-Age=31536000; Expires=Sun, 28 Jan 2024 07:48:28 GMT; Path=/; Domain=.betweendigital.com
ut=Y9TTTAAOAfDF3vIh6ypKteRyBlpp2AA7i3Mftg==; Max-Age=31536000; Expires=Sun, 28 Jan 2024 07:48:28 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
302 Found 154 B URL HTTP/2 www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=nVqzHGPU00x7ZQMwss+bAll5YBtLZLdTs+76QlzMH3iyGw7W; cSyncDp7v2=1674892108; cSyncDp14v3=1674892108; cSyncDp17=1674892108; cSyncDp32=1674892108; cSyncDp45v3=1674892108; cSyncDp53v2=1674892108; cSyncDp54v2=1674892108; cSyncDp62=1674892108; cSyncDp67v2=1674892108; cSyncDp68=1674892108; cSyncDp71=1674892108; cSyncDp77=1674892108; cSyncDp84=1674892108; cSyncDp85=1674892108; cSyncDp95v3=1674892108; cSyncDp98v2=1674892108; cSyncDp101=1674892108; cSyncDp104v2=1674892108; cSyncDp107=1674892108; cSyncDp110=1674892108; cSyncDp111v2=1674892108; cSyncDp112v2=1674892108; cSyncDp125v3=1674892108; cSyncDp126=1674892108; cSyncDp127=1674892108; cSyncDp129=1674892108; cSyncDp136v2=1674892108; cSyncDp138=1674892108; cSyncDp146=1674892108; cSyncDp148=1674892108; cSyncDp149v2=1674892108; cSyncDp151=1674892108; cSyncDp178=1674892108; cSyncDp179=1674892108; cSyncDp186=1674892108; cSyncDp221=1674892108
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sat, 28 Jan 2023 07:48:29 GMT
content-type: text/html
content-length: 154
location: https://ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=1CB35A9D4CD3D4633003657B029BCFB2
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sape-sync.rutarget.ru/sync
302 Moved Temporarily 0 B URL HTTP/1.1 sape-sync.rutarget.ru/sync
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync HTTP/1.1
Host: sape-sync.rutarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Length: 0
Connection: close
Location: https://www.acint.net/match?dp=104&euid=51wZ4OUODF81
P3P: CP="This is not a P3P policy. Please visit http://rutarget.ru/p3p/ to get more information."
Set-Cookie: userId=51wZ4OUODF81; Path=/; Domain=.rutarget.ru; Expires=Thu, 27 Jul 2023 07:48:29 GMT; SameSite=None; Secure
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 582b8086e006b2524d7f01894924296c
41ed1717f5060a08778842d2be4258e80b047dd3
8bfbf5858af116a3433dc405ab0ad165dd8a6a9c07a00101b399dfa925afd328
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 27 Jan 2023 22:24:24 GMT
Expires: Sat, 28 Jan 2023 22:24:24 GMT
ETag: "41ed1717f5060a08778842d2be4258e80b047dd3"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
sm.rtb.mts.ru/p?ssp=sape&id=1CB35A9D4CD3D46331036E7B02E48CCA
301 Moved Permanently 0 B URL HTTP/1.1 sm.rtb.mts.ru/p?ssp=sape&id=1CB35A9D4CD3D46331036E7B02E48CCA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sape&id=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: sm.rtb.mts.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin
Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
Vary: Origin
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://sm.rtb.mts.ru/match/second?ssp=30&exu=1CB35A9D4CD3D46331036E7B02E48CCA
Set-Cookie: dspid=99b542f8-0d3c-427b-a420-8d71bba3caf4; expires=Fri, 19 Jan 2024 07:48:29 GMT; domain=.mts.ru; path=/; secure; SameSite=None
ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=1CB35A9D4CD3D4633003657B029BCFB2
200 OK 42 B URL HTTP/1.1 ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=1CB35A9D4CD3D4633003657B029BCFB2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cgi-bin/sync.cgi?ssp_id=43&external_id=1CB35A9D4CD3D4633003657B029BCFB2 HTTP/1.1
Host: ssp.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
307 Temporary Redirect 0 B URL HTTP/2 redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect HTTP/1.1
Host: redirect.frontend.weborama.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
server: Weborama Collect Frontend
date: Sat, 28 Jan 2023 07:48:28 GMT
content-length: 0
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=1049284198
vary: Origin
access-control-allow-origin: *
p3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM"
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: Tue, 03 Jul 2001 06:00:00 GMT
last-modified: Sat, 28 Jan 2023 07:48:29 GMT
set-cookie: AFFICHE_W=Q8fH3O62BrBD95; expires=Sun, 25 Feb 2024 07:48:29 GMT; domain=.weborama.fr; path=/; secure; SameSite=None
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.acint.net/match?dp=104&euid=51wZ4OUODF81
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=104&euid=51wZ4OUODF81
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=104&euid=51wZ4OUODF81 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=nVqzHGPU00x7ZQMwss+bAll5YBtLZLdTs+76QlzMH3iyGw7W; cSyncDp7v2=1674892108; cSyncDp14v3=1674892108; cSyncDp17=1674892108; cSyncDp32=1674892108; cSyncDp45v3=1674892108; cSyncDp53v2=1674892108; cSyncDp54v2=1674892108; cSyncDp62=1674892108; cSyncDp67v2=1674892108; cSyncDp68=1674892108; cSyncDp71=1674892108; cSyncDp77=1674892108; cSyncDp84=1674892108; cSyncDp85=1674892108; cSyncDp95v3=1674892108; cSyncDp98v2=1674892108; cSyncDp101=1674892108; cSyncDp104v2=1674892108; cSyncDp107=1674892108; cSyncDp110=1674892108; cSyncDp111v2=1674892108; cSyncDp112v2=1674892108; cSyncDp125v3=1674892108; cSyncDp126=1674892108; cSyncDp127=1674892108; cSyncDp129=1674892108; cSyncDp136v2=1674892108; cSyncDp138=1674892108; cSyncDp146=1674892108; cSyncDp148=1674892108; cSyncDp149v2=1674892108; cSyncDp151=1674892108; cSyncDp178=1674892108; cSyncDp179=1674892108; cSyncDp186=1674892108; cSyncDp221=1674892108
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 28 Jan 2023 07:48:29 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 7d356edd48bf05fba9a8fcdc9037c2a6
de672418fb6b1082b35935a23947a55b31229044
8b03bac05eefb5307769151d38462b0d8a4317aee20793e6c708f8110af51c26
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 25 Jan 2023 02:03:25 GMT
Expires: Wed, 01 Feb 2023 02:03:24 GMT
Etag: "de672418fb6b1082b35935a23947a55b31229044"
Cache-Control: max-age=324294,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 790820436e7c0b69-OSL
px.adhigh.net/p/cm/sape?u=1CB35A9D4CD3D46331036E7B02E48CCA
302 Found 0 B URL HTTP/2 px.adhigh.net/p/cm/sape?u=1CB35A9D4CD3D46331036E7B02E48CCA
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/cm/sape?u=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sat, 28 Jan 2023 07:48:29 GMT
content-length: 0
x-backend-id: f6-ru
access-control-allow-origin: *
access-control-allow-credentials: true
set-cookie: gi_u=uPkpKqxmJY4l.AikABlGF91lm0w;Path=/;Domain=.adhigh.net;Expires=Sun, 28-Jan-2024 07:48:29 GMT;Secure;SameSite=None
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
location: https://px.adhigh.net/p/cm/sape?u=1CB35A9D4CD3D46331036E7B02E48CCA&bounced=1
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=73&external_user_id=1CB35A9D4CD3D46331036E7B02E48CCA
302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=73&external_user_id=1CB35A9D4CD3D46331036E7B02E48CCA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=73&external_user_id=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /match?bidder_id=73&external_user_id=1CB35A9D4CD3D46331036E7B02E48CCA&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sun, 28 Jan 2024 07:48:29 GMT; Path=/; Domain=.betweendigital.com
tuuid=2d5dfd42-53e7-521c-848e-79d6e75aaa9b; Max-Age=31536000; Expires=Sun, 28 Jan 2024 07:48:29 GMT; Path=/; Domain=.betweendigital.com
ut=Y9TTTQAIovBym1dw2b1Fjv09ge80EYqCSIbUQg==; Max-Age=31536000; Expires=Sun, 28 Jan 2024 07:48:29 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=1049284198
204 No Content 0 B URL HTTP/2 redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=1049284198
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=1049284198 HTTP/1.1
Host: redirect.frontend.weborama.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: Weborama Collect Frontend
date: Sat, 28 Jan 2023 07:48:28 GMT
vary: Origin
access-control-allow-origin: *
p3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM"
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: Tue, 03 Jul 2001 06:00:00 GMT
last-modified: Sat, 28 Jan 2023 07:48:29 GMT
set-cookie: AFFICHE_W=; expires=Tue, 10 Nov 2009 23:00:00 GMT; domain=.weborama.fr; path=/; secure; SameSite=None
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
sm.rtb.mts.ru/match/second?ssp=30&exu=1CB35A9D4CD3D46331036E7B02E48CCA
200 OK 0 B URL HTTP/1.1 sm.rtb.mts.ru/match/second?ssp=30&exu=1CB35A9D4CD3D46331036E7B02E48CCA
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/second?ssp=30&exu=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: sm.rtb.mts.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin
Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
Vary: Origin
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
an.yandex.ru/mapuid/sapeis/1CB35A9D4CD3D46331036E7B02E48CCA?redir-setuniq=1
200 OK 16 kB URL HTTP/2 an.yandex.ru/mapuid/sapeis/1CB35A9D4CD3D46331036E7B02E48CCA?redir-setuniq=1
IP
Hash 096b56669bde932c4762a5cab154ed2d
5e3034215aeb94a7a10b321e6843fbe1d0d302c3
973e86c89bc3d8362b46dfab4298390aa740ff7fadf582c6b3e3b83f12fd7106
GET /mapuid/sapeis/1CB35A9D4CD3D46331036E7B02E48CCA?redir-setuniq=1 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Sat, 28 Jan 2023 07:48:29 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 28 Jan 2023 07:48:29 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Sat, 28 Jan 2023 07:48:29 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif; charset=utf-8
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=73&external_user_id=1CB35A9D4CD3D46331036E7B02E48CCA&crf=1
200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=73&external_user_id=1CB35A9D4CD3D46331036E7B02E48CCA&crf=1
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=73&external_user_id=1CB35A9D4CD3D46331036E7B02E48CCA&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sun, 28 Jan 2024 07:48:31 GMT; Path=/; Domain=.betweendigital.com
tuuid=4c53e566-5d82-521c-8c93-6791ef47b4de; Max-Age=31536000; Expires=Sun, 28 Jan 2024 07:48:31 GMT; Path=/; Domain=.betweendigital.com
ut=Y9TTTwAAA-jehHmHBU7Y9_mNtv13Ladm7bR5Bg==; Max-Age=31536000; Expires=Sun, 28 Jan 2024 07:48:31 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
px.adhigh.net/p/cm/sape?u=1CB35A9D4CD3D46331036E7B02E48CCA&bounced=1
200 OK 49 B URL HTTP/2 px.adhigh.net/p/cm/sape?u=1CB35A9D4CD3D46331036E7B02E48CCA&bounced=1
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
File type GIF image data, version 89a, 1 x 1\012- data
Hash 889bc1fffc025af4685839fb516a0b8b
7f105137a4eafe93213ecd8cc34dd907c340467c
d0409a1b73dab4e29dc40f92fb431fa9133baa23b4a1ffae4897f39068110e32
GET /p/cm/sape?u=1CB35A9D4CD3D46331036E7B02E48CCA&bounced=1 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 07:48:29 GMT
content-type: image/gif
content-length: 49
x-backend-id: f6-ru
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 75a5500127902348d80359c36c55b587
f8adb4286602ef7ffdc6db3beb2c9a3ee505853b
6d5a10b611936cffaf6aec9e431d70842e3476efae0b402d6cc6c3489e5e94a9
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 28 Jan 2023 02:18:44 GMT
Expires: Sat, 04 Feb 2023 02:18:43 GMT
Etag: "f8adb4286602ef7ffdc6db3beb2c9a3ee505853b"
Cache-Control: max-age=584413,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79082043deb20b55-OSL
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 582b8086e006b2524d7f01894924296c
41ed1717f5060a08778842d2be4258e80b047dd3
8bfbf5858af116a3433dc405ab0ad165dd8a6a9c07a00101b399dfa925afd328
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 27 Jan 2023 22:24:24 GMT
Expires: Sat, 28 Jan 2023 22:24:24 GMT
ETag: "41ed1717f5060a08778842d2be4258e80b047dd3"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
x01.aidata.io/0.gif?pid=9401454&id=1CB35A9D4CD3D46331036E7B02E48CCA
302 Found 0 B URL HTTP/2 x01.aidata.io/0.gif?pid=9401454&id=1CB35A9D4CD3D46331036E7B02E48CCA
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0.gif?pid=9401454&id=1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: x01.aidata.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sat, 28 Jan 2023 07:48:29 GMT
content-length: 0
location: https://x01.aidata.io/0.gif?pid=9401454&id=1CB35A9D4CD3D46331036E7B02E48CCA&bounce=1
expires: Sat, 28 Jan 2023 07:48:28 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Sat, 28 Jan 2023 07:48:28 GMT
set-cookie: __upin=rDXyxX5I6SAvBPqCrRzDtw;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
__upints=1674892109;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac6df77a2fc750f657890d4ecf15e251
4eac99b4f22e6a659f18e2c4fea8681a67b063ab
60287dcaddf3aa8de8551772381d1a68c55bdc2be9d52530966dde28499f632a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60287DCADDF3AA8DE8551772381D1A68C55BDC2BE9D52530966DDE28499F632A"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4380
Expires: Sat, 28 Jan 2023 09:01:29 GMT
Date: Sat, 28 Jan 2023 07:48:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac6df77a2fc750f657890d4ecf15e251
4eac99b4f22e6a659f18e2c4fea8681a67b063ab
60287dcaddf3aa8de8551772381d1a68c55bdc2be9d52530966dde28499f632a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60287DCADDF3AA8DE8551772381D1A68C55BDC2BE9D52530966DDE28499F632A"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4380
Expires: Sat, 28 Jan 2023 09:01:29 GMT
Date: Sat, 28 Jan 2023 07:48:29 GMT
Connection: keep-alive
x01.aidata.io/0.gif?pid=9401454&id=1CB35A9D4CD3D46331036E7B02E48CCA&bounce=1
204 No Content 0 B URL HTTP/2 x01.aidata.io/0.gif?pid=9401454&id=1CB35A9D4CD3D46331036E7B02E48CCA&bounce=1
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0.gif?pid=9401454&id=1CB35A9D4CD3D46331036E7B02E48CCA&bounce=1 HTTP/1.1
Host: x01.aidata.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 28 Jan 2023 07:48:29 GMT
expires: Sat, 28 Jan 2023 07:48:28 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Sat, 28 Jan 2023 07:48:28 GMT
set-cookie: __upin=CtO7UPBOijegoIindZl69A;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
__upints=1674892109;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2
dmg.digitaltarget.ru/1/1093/i/i?i=640959039002814.102126781601325&a=77&e=1CB35A9D4CD3D46331036E7B02E48CCA&pref=http%3A%2F%2Fwww.moviesubtitles.ru%2F&c=ss:77.up:1CB35A9D4CD3D46331036E7B02E48CCA.sync:up.xdua:duZk6YYHch6CYogpk49ut6hM.xps:xpsdg8adKrm2yulvtY7cShHo2.dn:acint__net.adcm:hit.tg:adcmjs_noorient
307 Temporary Redirect 0 B URL HTTP/1.1 dmg.digitaltarget.ru/1/1093/i/i?i=640959039002814.102126781601325&a=77&e=1CB35A9D4CD3D46331036E7B02E48CCA&pref=http%3A%2F%2Fwww.moviesubtitles.ru%2F&c=ss:77.up:1CB35A9D4CD3D46331036E7B02E48CCA.sync:up.xdua:duZk6YYHch6CYogpk49ut6hM.xps:xpsdg8adKrm2yulvtY7cShHo2.dn:acint__net.adcm:hit.tg:adcmjs_noorient
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/1093/i/i?i=640959039002814.102126781601325&a=77&e=1CB35A9D4CD3D46331036E7B02E48CCA&pref=http%3A%2F%2Fwww.moviesubtitles.ru%2F&c=ss:77.up:1CB35A9D4CD3D46331036E7B02E48CCA.sync:up.xdua:duZk6YYHch6CYogpk49ut6hM.xps:xpsdg8adKrm2yulvtY7cShHo2.dn:acint__net.adcm:hit.tg:adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1674892109747&i=640959039002814.102126781601325&a=77&e=1CB35A9D4CD3D46331036E7B02E48CCA&pref=http%3A%2F%2Fwww.moviesubtitles.ru%2F&c=ss:77.up:1CB35A9D4CD3D46331036E7B02E48CCA.sync:up.xdua:duZk6YYHch6CYogpk49ut6hM.xps:xpsdg8adKrm2yulvtY7cShHo2.dn:acint__net.adcm:hit.tg:adcmjs_noorient
Set-Cookie: viuserid=S0eHvNMbXBD4QDR7fctc; Max-Age=93312000; Expires=Mon, 12 Jan 2026 07:48:29 GMT; SameSite=None; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly
Request-Time: 0
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/1/1093/i/i?i=640959039002814.328940149019941&a=77&e=1CB35A9D4CD3D46331036E7B02E48CCA&pref=http%3A%2F%2Fwww.moviesubtitles.ru%2F&c=ss:77.up:1CB35A9D4CD3D46331036E7B02E48CCA.sync:up.xdua:duZk6YYHch6CYogpk49ut6hM.xps:xpsdg8adKrm2yulvtY7cShHo2.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
307 Temporary Redirect 0 B URL HTTP/1.1 dmg.digitaltarget.ru/1/1093/i/i?i=640959039002814.328940149019941&a=77&e=1CB35A9D4CD3D46331036E7B02E48CCA&pref=http%3A%2F%2Fwww.moviesubtitles.ru%2F&c=ss:77.up:1CB35A9D4CD3D46331036E7B02E48CCA.sync:up.xdua:duZk6YYHch6CYogpk49ut6hM.xps:xpsdg8adKrm2yulvtY7cShHo2.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/1093/i/i?i=640959039002814.328940149019941&a=77&e=1CB35A9D4CD3D46331036E7B02E48CCA&pref=http%3A%2F%2Fwww.moviesubtitles.ru%2F&c=ss:77.up:1CB35A9D4CD3D46331036E7B02E48CCA.sync:up.xdua:duZk6YYHch6CYogpk49ut6hM.xps:xpsdg8adKrm2yulvtY7cShHo2.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1674892109737&i=640959039002814.328940149019941&a=77&e=1CB35A9D4CD3D46331036E7B02E48CCA&pref=http%3A%2F%2Fwww.moviesubtitles.ru%2F&c=ss:77.up:1CB35A9D4CD3D46331036E7B02E48CCA.sync:up.xdua:duZk6YYHch6CYogpk49ut6hM.xps:xpsdg8adKrm2yulvtY7cShHo2.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
Set-Cookie: viuserid=eX-VcXmLuzXBHDT7Uer9; Max-Age=93312000; Expires=Mon, 12 Jan 2026 07:48:29 GMT; SameSite=None; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly
Request-Time: 1
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1674892109747&i=640959039002814.102126781601325&a=77&e=1CB35A9D4CD3D46331036E7B02E48CCA&pref=http%3A%2F%2Fwww.moviesubtitles.ru%2F&c=ss:77.up:1CB35A9D4CD3D46331036E7B02E48CCA.sync:up.xdua:duZk6YYHch6CYogpk49ut6hM.xps:xpsdg8adKrm2yulvtY7cShHo2.dn:acint__net.adcm:hit.tg:adcmjs_noorient
200 OK 64 B URL HTTP/1.1 dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1674892109747&i=640959039002814.102126781601325&a=77&e=1CB35A9D4CD3D46331036E7B02E48CCA&pref=http%3A%2F%2Fwww.moviesubtitles.ru%2F&c=ss:77.up:1CB35A9D4CD3D46331036E7B02E48CCA.sync:up.xdua:duZk6YYHch6CYogpk49ut6hM.xps:xpsdg8adKrm2yulvtY7cShHo2.dn:acint__net.adcm:hit.tg:adcmjs_noorient
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ffd585dfb1ac6320633a0be46d579437
5a6033d23bc9cd5d1de9ee61de69a44428086dcb
df18d81deb0cc1c48ae87e6481bb4ee375b40cce0fec3d226e002704d49f6cc8
GET /awg/custom/1093/i/i?call_source=awg&ts=1674892109747&i=640959039002814.102126781601325&a=77&e=1CB35A9D4CD3D46331036E7B02E48CCA&pref=http%3A%2F%2Fwww.moviesubtitles.ru%2F&c=ss:77.up:1CB35A9D4CD3D46331036E7B02E48CCA.sync:up.xdua:duZk6YYHch6CYogpk49ut6hM.xps:xpsdg8adKrm2yulvtY7cShHo2.dn:acint__net.adcm:hit.tg:adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: image/gif
Content-Length: 64
Connection: keep-alive
Vary: Accept-Encoding
Request-Time: 3
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1674892109737&i=640959039002814.328940149019941&a=77&e=1CB35A9D4CD3D46331036E7B02E48CCA&pref=http%3A%2F%2Fwww.moviesubtitles.ru%2F&c=ss:77.up:1CB35A9D4CD3D46331036E7B02E48CCA.sync:up.xdua:duZk6YYHch6CYogpk49ut6hM.xps:xpsdg8adKrm2yulvtY7cShHo2.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
200 OK 64 B URL HTTP/1.1 dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1674892109737&i=640959039002814.328940149019941&a=77&e=1CB35A9D4CD3D46331036E7B02E48CCA&pref=http%3A%2F%2Fwww.moviesubtitles.ru%2F&c=ss:77.up:1CB35A9D4CD3D46331036E7B02E48CCA.sync:up.xdua:duZk6YYHch6CYogpk49ut6hM.xps:xpsdg8adKrm2yulvtY7cShHo2.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ffd585dfb1ac6320633a0be46d579437
5a6033d23bc9cd5d1de9ee61de69a44428086dcb
df18d81deb0cc1c48ae87e6481bb4ee375b40cce0fec3d226e002704d49f6cc8
GET /awg/custom/1093/i/i?call_source=awg&ts=1674892109737&i=640959039002814.328940149019941&a=77&e=1CB35A9D4CD3D46331036E7B02E48CCA&pref=http%3A%2F%2Fwww.moviesubtitles.ru%2F&c=ss:77.up:1CB35A9D4CD3D46331036E7B02E48CCA.sync:up.xdua:duZk6YYHch6CYogpk49ut6hM.xps:xpsdg8adKrm2yulvtY7cShHo2.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 28 Jan 2023 07:48:29 GMT
Content-Type: image/gif
Content-Length: 64
Connection: keep-alive
Vary: Accept-Encoding
Request-Time: 2
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9782
Expires: Sat, 28 Jan 2023 10:31:32 GMT
Date: Sat, 28 Jan 2023 07:48:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9782
Expires: Sat, 28 Jan 2023 10:31:32 GMT
Date: Sat, 28 Jan 2023 07:48:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9782
Expires: Sat, 28 Jan 2023 10:31:32 GMT
Date: Sat, 28 Jan 2023 07:48:30 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4205d8106659e00fff1cbe9262918b8c
ab4f6528594a1725934727dc7d834c028a79c609
31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hAzO-IMqc1CFpiBAlRl8seIYL9UonyrBMATibovyFq5kEuaweY_VyA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:46 GMT
age: 35504
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 195316042e7f798eeeb7993fecb3a383
4aeca24ad4702f87feaf9674ea0c1ff6d71826a3
b7e0a61060455241fce844d2c91eca500d409804361063ddb61053cbc9c7b1c1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13376
x-amzn-requestid: 64d0092e-1f1a-4183-a4a6-805e0bf37d32
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-DvHIyoAMF6fA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443b1-6387770232ddca74531bce91;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8cRGlncOQ6qYv7qbI1HxTz-qUYJkTVa5V2qJM1C8XM5dmyXFA8qRvA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:48:58 GMT
age: 35972
etag: "4aeca24ad4702f87feaf9674ea0c1ff6d71826a3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F238effff-cb43-479f-8853-06086fff1bd5.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F238effff-cb43-479f-8853-06086fff1bd5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f185f0b4f90d06dbb397b44ed9c73dbe
a48e2c369a048447e0e25e4791eb603859391c1c
b466060fc132cc8d23fcb83001206606e2d5502118c65e9f55795b5adbff2fa6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F238effff-cb43-479f-8853-06086fff1bd5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9364
x-amzn-requestid: e556be7b-567a-4c9a-931e-ff6fee42d3a7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_T8GbFoAMFySg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445b2-6f4476e9388c77a057153277;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:44:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: LPkLrx7l9Qf_GKdtJq_77RUkvgnKZlCaDN34xsB5bEO8c9VQEJPAew==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:38 GMT
etag: "a48e2c369a048447e0e25e4791eb603859391c1c"
content-type: image/jpeg
age: 35512
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 79b70f1f-a157-4dd4-8743-825714195b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9T3UGA3oAMFSlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c86695-36e60aba09c152c73b8aefcb;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:37:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zt4bgV2C6Wb_Ufa5mZ7-UDTfCvhXJggPJw9668v5DEmyBnWZ-aNrCg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 23:03:41 GMT
age: 31489
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed7c466-ac98-4e05-89cf-f0abf56e8d98.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed7c466-ac98-4e05-89cf-f0abf56e8d98.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c982569d070f24dba1259603091c22e3
0f93acb5bee53670cc4ef486922f7333d96a2f4e
9a5a2d8a181a763ee6f60c27b396a0e3d7b1527e5177b2aff8d511db250753ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed7c466-ac98-4e05-89cf-f0abf56e8d98.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4975
x-amzn-requestid: 633350b7-4686-40d5-8c9d-3c097f8e2d34
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-EBGuaoAMFbSw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443b3-4201212c1a0eb2a65d3f494c;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: M4VR-I89SGD0-FLzHhZ88PJJJmdWTEi0UrBnAmCBCQAdjRsssqnSzw==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:49:06 GMT
age: 35964
etag: "0f93acb5bee53670cc4ef486922f7333d96a2f4e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea24bcba583bd8bd139559448a343e68
b9d37c2b14f890d41983a59f352e8f7caa9c94bb
e5ef5975eec964ae1684deb424f00833f2d217bdc7e6c385320ed3adeb6bc1c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7585
x-amzn-requestid: bfb52acb-e0d7-482d-8be9-be5db1c16cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_vkE5roAMF0Hw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d44663-2d38d314177e0ac40d4c8240;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:47:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: K9YWM9eaEc1DQ6wtEEuADnG1U-ahRBXDaiHIAm20dkWMOxPWBlJidw==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 22:46:13 GMT
age: 32537
etag: "b9d37c2b14f890d41983a59f352e8f7caa9c94bb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.acint.net/ping/?v=0.5.0&uid=f5b65176-80e0-43a8-a606-f50e3fc62cc5&dp=10&tz=%2B00%3A00&nc=11970465&dT=2023-01-28T07%3A48%3A32.754
302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/ping/?v=0.5.0&uid=f5b65176-80e0-43a8-a606-f50e3fc62cc5&dp=10&tz=%2B00%3A00&nc=11970465&dT=2023-01-28T07%3A48%3A32.754
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /ping/?v=0.5.0&uid=f5b65176-80e0-43a8-a606-f50e3fc62cc5&dp=10&tz=%2B00%3A00&nc=11970465&dT=2023-01-28T07%3A48%3A32.754 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.moviesubtitles.ru/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Sat, 28 Jan 2023 07:48:31 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/ping/?v=0.5.0&uid=f5b65176-80e0-43a8-a606-f50e3fc62cc5&dp=10&tz=%2B00%3A00&nc=11970465&dT=2023-01-28T07%3A48%3A32.754
www.acint.net/ping/?v=0.5.0&uid=f5b65176-80e0-43a8-a606-f50e3fc62cc5&dp=10&tz=%2B00%3A00&nc=11970465&dT=2023-01-28T07%3A48%3A32.754
200 OK 43 B URL HTTP/2 www.acint.net/ping/?v=0.5.0&uid=f5b65176-80e0-43a8-a606-f50e3fc62cc5&dp=10&tz=%2B00%3A00&nc=11970465&dT=2023-01-28T07%3A48%3A32.754
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /ping/?v=0.5.0&uid=f5b65176-80e0-43a8-a606-f50e3fc62cc5&dp=10&tz=%2B00%3A00&nc=11970465&dT=2023-01-28T07%3A48%3A32.754 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.moviesubtitles.ru/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=nVqzHGPU00x7ZQMwss+bAll5YBtLZLdTs+76QlzMH3iyGw7W; cSyncDp7v2=1674892108; cSyncDp14v3=1674892108; cSyncDp17=1674892108; cSyncDp32=1674892108; cSyncDp45v3=1674892108; cSyncDp53v2=1674892108; cSyncDp54v2=1674892108; cSyncDp62=1674892108; cSyncDp67v2=1674892108; cSyncDp68=1674892108; cSyncDp71=1674892108; cSyncDp77=1674892108; cSyncDp84=1674892108; cSyncDp85=1674892108; cSyncDp95v3=1674892108; cSyncDp98v2=1674892108; cSyncDp101=1674892108; cSyncDp104v2=1674892108; cSyncDp107=1674892108; cSyncDp110=1674892108; cSyncDp111v2=1674892108; cSyncDp112v2=1674892108; cSyncDp125v3=1674892108; cSyncDp126=1674892108; cSyncDp127=1674892108; cSyncDp129=1674892108; cSyncDp136v2=1674892108; cSyncDp138=1674892108; cSyncDp146=1674892108; cSyncDp148=1674892108; cSyncDp149v2=1674892108; cSyncDp151=1674892108; cSyncDp178=1674892108; cSyncDp179=1674892108; cSyncDp186=1674892108; cSyncDp221=1674892108
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 28 Jan 2023 07:48:31 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/oci.js?t=1674892109753
200 OK 0 B URL HTTP/2 www.acint.net/oci.js?t=1674892109753
IP
ASN #24940 Hetzner Online GmbH
GET /oci.js?t=1674892109753 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.moviesubtitles.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: application/x-javascript
last-modified: Mon, 09 Jan 2023 08:01:26 GMT
etag: W/"63bbc9d6-7dac"
content-encoding: gzip
X-Firefox-Spdy: h2
www.acint.net/mc/?dp=10&tc=1
200 OK 0 B URL HTTP/2 www.acint.net/mc/?dp=10&tc=1
IP
ASN #24940 Hetzner Online GmbH
GET /mc/?dp=10&tc=1 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.moviesubtitles.ru/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=nVqzHGPU00x7bgMxyozkAm4kjWB+GBG2VsjICWnFSAnX2/ZV
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 28 Jan 2023 07:48:28 GMT
content-type: text/html
set-cookie: cSyncDp7v2=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp14v3=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp17=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp32=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp45v3=1674892108; expires=Sun, 29-Jan-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp53v2=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp54v2=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp62=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp67v2=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp68=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp71=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp77=1674892108; expires=Sat, 11-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp84=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp85=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp95v3=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp98v2=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp101=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp104v2=1674892108; expires=Sat, 11-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp107=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp110=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp111v2=1674892108; expires=Sat, 11-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp112v2=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp125v3=1674892108; expires=Sun, 12-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp126=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp127=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp129=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp136v2=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp138=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp146=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp148=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp149v2=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp151=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp178=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp179=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp186=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp221=1674892108; expires=Mon, 27-Feb-23 07:48:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
content-encoding: gzip
X-Firefox-Spdy: h2
ssp.bidvol.com/usersync?dspcsid=8&redirect=1
302 Found 0 B URL HTTP/2 ssp.bidvol.com/usersync?dspcsid=8&redirect=1
IP
ASN #24940 Hetzner Online GmbH
GET /usersync?dspcsid=8&redirect=1 HTTP/1.1
Host: ssp.bidvol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.22.0
date: Sat, 28 Jan 2023 07:48:28 GMT
x-request-id: 47a8858d-dc9e-438a-bcf1-f6bd4e7a029a
set-cookie: bvuid=jc4sxc5k14; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None
bvuid2=jc4sxc5k14; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT
vary: Origin
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
surrogate-control: no-store
location: https://www.acint.net/match?dp=129&euid=jc4sxc5k14
X-Firefox-Spdy: h2
an.yandex.ru/mapuid/gonetdspis/N2Q4OWZlN2ZhMDY3ZGQ2?redir-setuniq=1
200 OK 0 B URL HTTP/2 an.yandex.ru/mapuid/gonetdspis/N2Q4OWZlN2ZhMDY3ZGQ2?redir-setuniq=1
IP
GET /mapuid/gonetdspis/N2Q4OWZlN2ZhMDY3ZGQ2?redir-setuniq=1 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Sat, 28 Jan 2023 07:48:29 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 28 Jan 2023 07:48:29 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Sat, 28 Jan 2023 07:48:29 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif; charset=utf-8
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ads.adlook.me/csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
302 Found 0 B URL HTTP/2 ads.adlook.me/csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
IP
ASN #48096 Enterprise Cloud Ltd.
GET /csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://acint.net/match?dp=110&euid=57564fc70219444f87b35571d39b00f1
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=57564fc70219444f87b35571d39b00f1; expires=Sat, 27 Jan 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
date: Sat, 28 Jan 2023 07:48:27 GMT
X-Firefox-Spdy: h2
an.yandex.ru/mapuid/sapeis/1CB35A9D4CD3D46331036E7B02E48CCA
302 Found 0 B URL HTTP/2 an.yandex.ru/mapuid/sapeis/1CB35A9D4CD3D46331036E7B02E48CCA
IP
GET /mapuid/sapeis/1CB35A9D4CD3D46331036E7B02E48CCA HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
timing-allow-origin: *
location: https://an.yandex.ru/mapuid/sapeis/1CB35A9D4CD3D46331036E7B02E48CCA?redir-setuniq=1
date: Sat, 28 Jan 2023 07:48:29 GMT
set-cookie: yandexuid=2999513961674892109; domain=.yandex.ru; path=/; expires=Tue, 25-Jan-2033 07:48:29 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 28 Jan 2023 07:48:29 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Sat, 28 Jan 2023 07:48:29 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
an.yandex.ru/mapuid/gonetdspis/N2Q4OWZlN2ZhMDY3ZGQ2
302 Found 0 B URL HTTP/2 an.yandex.ru/mapuid/gonetdspis/N2Q4OWZlN2ZhMDY3ZGQ2
IP
GET /mapuid/gonetdspis/N2Q4OWZlN2ZhMDY3ZGQ2 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
timing-allow-origin: *
location: https://an.yandex.ru/mapuid/gonetdspis/N2Q4OWZlN2ZhMDY3ZGQ2?redir-setuniq=1
date: Sat, 28 Jan 2023 07:48:29 GMT
set-cookie: yandexuid=2332289981674892109; domain=.yandex.ru; path=/; expires=Tue, 25-Jan-2033 07:48:29 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 28 Jan 2023 07:48:29 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Sat, 28 Jan 2023 07:48:29 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
91.234.33.166
34.160.144.191
148.251.236.115
37.18.103.21
95.216.101.186
185.147.80.35
188.42.196.115
104.19.135.78
139.45.228.100
23.36.76.226