faq7.ru/downloads/targetplus.zip
31.31.198.198302 Moved Temporarily 0 B URL HTTP/1.1 faq7.ru/downloads/targetplus.zip
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /downloads/targetplus.zip HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Mon, 03 Oct 2022 02:27:41 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
X-Powered-By: PHP/5.5.38
Location: http://faq7.ru/error.php?code=404
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 24cdc937930ac2ef9c8f46ba1deabcc5
397417929951bf20f235d5f91510163ac213dc71
eb128aec099dbf1919ee5d965221e904ad3a2162583683cec44518640b505447
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB128AEC099DBF1919EE5D965221E904AD3A2162583683CEC44518640B505447"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11946
Expires: Mon, 03 Oct 2022 05:46:47 GMT
Date: Mon, 03 Oct 2022 02:27:41 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 22b8769801e8712cb7b401b5752da2c2
30d14bf20b20507a4fda3d7dbee9fbba7327139a
69d097718cac37cc6b77d417711c4356557f2b47c78026303bfe5f985b94a5a5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "69D097718CAC37CC6B77D417711C4356557F2B47C78026303BFE5F985B94A5A5"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5822
Expires: Mon, 03 Oct 2022 04:04:43 GMT
Date: Mon, 03 Oct 2022 02:27:41 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
18.164.68.6200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 18.164.68.6:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 03 Oct 2022 02:03:24 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6a4b8b5ea0a3ab45ef51e6681d8320bc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: 7f-TrnwopWWcoFxJq68HfxBCWdZjsXaoHfmehsxrQya5Ycb4dFnxfw==
Age: 1457
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: QkZ4RwsC+uZFPa2LaiwkVGiUAgQNEn0uk1XggzL/FKEZ+xRl/aU4uu6hdLjb2T1k51eqzanMSuI=
x-amz-request-id: SCQK53YE19N9BMWE
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 03 Oct 2022 01:53:15 GMT
age: 2066
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 03 Oct 2022 02:27:41 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
faq7.ru/error.php?code=404
31.31.198.198200 OK 14 kB URL HTTP/1.1 faq7.ru/error.php?code=404
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Non-ISO extended-ASCII text, with very long lines (18362), with CRLF, LF line terminators
Hash 0ec2c5c85bf6a0c673497e48c37e7cb7
f88cf44016adba03692e06e2dca823bfd4445247
43eb8244e95ca14880dce04b61fa60f05e9fd264eacd135bb26c92d78349746b
GET /error.php?code=404 HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.5.38
Set-Cookie: fusionQC28M_visited=yes; expires=Tue, 03-Oct-2023 02:27:41 GMT; Max-Age=31536000; path=/
fusionQC28M_lastvisit=1664760461; expires=Mon, 03-Oct-2022 03:27:41 GMT; Max-Age=3600; path=/; domain=faq7.ru; httponly
Content-Encoding: gzip
faq7.ru/themes/faq7_new/styles.css
31.31.198.198200 OK 4.0 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/styles.css
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type assembler source, ISO-8859 text
Hash 29f9a5f94b994d1ed6560a2942f5f68d
0a65d089f66cb06cc18304594cf348ebe97900aa
e500c712570fe5f49405451d11aa8844425255596b95ceb161f12baa2f6ba6c8
GET /themes/faq7_new/styles.css HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:42 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 10 Feb 2012 21:21:42 GMT
Content-Encoding: gzip
api-maps.yandex.ru/1.1/index.xml
87.250.251.134302 Moved temporarily 0 B URL HTTP/1.1 api-maps.yandex.ru/1.1/index.xml
IP 87.250.251.134:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1.1/index.xml HTTP/1.1
Host: api-maps.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302 Moved temporarily
Content-Length: 0
Location: https://api-maps.yandex.ru/1.1/index.xml
Set-Cookie: _yasc=6uA8QyeBMnn5JRClKG6Gyq53/yeuWR9w6kGK4vnfH7cJBw==; domain=.yandex.ru; path=/; expires=Wed, 02-Nov-2022 02:27:42 GMT; secure
userapi.com/js/api/openapi.js?49
87.240.190.64301 Moved Permanently 164 B URL HTTP/1.1 userapi.com/js/api/openapi.js?49
IP 87.240.190.64:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 6d359f551ba4cb27d59e94a6cddaec09
d230318bd921ad8167c2eb9dfdc7b1d7d2c7373f
9ecd8531025e89f5e1ca23d81203a9feddbd5b4b75ca79c9868cb53762293bc8
GET /js/api/openapi.js?49 HTTP/1.1
Host: userapi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 301 Moved Permanently
Server: kittenx
Date: Mon, 03 Oct 2022 02:27:42 GMT
Content-Type: text/html
Content-Length: 164
Connection: keep-alive
Location: https://vk.com/js/api/openapi.js?49
X-Frontend: front220101
Access-Control-Expose-Headers: X-Frontend
Strict-Transport-Security: max-age=15768000
faq7.ru/themes/templates/scrollto.css
31.31.198.198200 OK 197 B URL HTTP/1.1 faq7.ru/themes/templates/scrollto.css
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
Hash de790ab65c683e4288b5cb608e7538ad
59bfffdd15d94dac2f0787a5820f15fe5289610e
3bb0e839ac9aa0f8a8110b019715f03fae8ef3866ca9b7ac8481ed0503ac661f
GET /themes/templates/scrollto.css HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:42 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 24 Sep 2013 13:55:32 GMT
Content-Encoding: gzip
faq7.ru/includes/sc/tabs.css
31.31.198.198200 OK 489 B URL HTTP/1.1 faq7.ru/includes/sc/tabs.css
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
Hash 94b04a9748ba103b1a638a419d2f3e12
1b41edda82191330b0bc2fc3f22b552b02c162ee
21c18592cab013c5a578d3c4930e3d2efd763fce0db24dfa0d34322c89ae45a5
GET /includes/sc/tabs.css HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:42 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 10 May 2018 23:13:07 GMT
Content-Encoding: gzip
faq7.ru/includes/jscript.js
31.31.198.198200 OK 2.1 kB URL HTTP/1.1 faq7.ru/includes/jscript.js
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type ISO-8859 text, with very long lines (3332)
Hash c6e760336b8ab3156952a91167e54f77
763f8887fe0c9bb0c66cb519d1aca4d73620498a
9d3eeafa976fc7a375ea2a47558d5a799a9eca12fdc4f79b36b8d6d10c1387a7
GET /includes/jscript.js HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:42 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 25 Feb 2012 20:46:11 GMT
Content-Encoding: gzip
faq7.ru/themes/templates/scrollto.js
31.31.198.198200 OK 402 B URL HTTP/1.1 faq7.ru/themes/templates/scrollto.js
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
Hash eb3f8a1e0ff48e1d6ac3b6008f6ee905
8a27aaa5271ac5d09bcc4150ddd148bc0eb515ea
86266cec3ff3c340cdd470160199b9d9ab20517fda4d8f306f373d4db5c65d04
GET /themes/templates/scrollto.js HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:42 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 24 Sep 2013 13:55:30 GMT
Content-Encoding: gzip
faq7.ru/includes/sc/tabs.js
31.31.198.198200 OK 194 B URL HTTP/1.1 faq7.ru/includes/sc/tabs.js
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
Hash 6e90085f150f59cb03edd6ec670fa7da
bb2963ce68d3085312596c54696f9f40dae47fa5
91e0b6352b4d9d8a2a553614385173ab1c7dabc079e3c51f7be80a4c5263afe5
GET /includes/sc/tabs.js HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:42 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 13 Apr 2012 19:51:42 GMT
Content-Encoding: gzip
userapi.com/js/api/openapi.js?34
87.240.190.64301 Moved Permanently 164 B URL HTTP/1.1 userapi.com/js/api/openapi.js?34
IP 87.240.190.64:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 6d359f551ba4cb27d59e94a6cddaec09
d230318bd921ad8167c2eb9dfdc7b1d7d2c7373f
9ecd8531025e89f5e1ca23d81203a9feddbd5b4b75ca79c9868cb53762293bc8
GET /js/api/openapi.js?34 HTTP/1.1
Host: userapi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 301 Moved Permanently
Server: kittenx
Date: Mon, 03 Oct 2022 02:27:42 GMT
Content-Type: text/html
Content-Length: 164
Connection: keep-alive
Location: https://vk.com/js/api/openapi.js?34
X-Frontend: front220101
Access-Control-Expose-Headers: X-Frontend
Strict-Transport-Security: max-age=15768000
mc.yandex.ru/metrika/watch.js
87.250.251.119302 Moved temporarily 0 B URL HTTP/1.1 mc.yandex.ru/metrika/watch.js
IP 87.250.251.119:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302 Moved temporarily
Content-Length: 0
Location: https://mc.yandex.ru/metrika/watch.js
faq7.ru/infusions/shoutbox_panel/ash.js
31.31.198.198200 OK 1.0 kB URL HTTP/1.1 faq7.ru/infusions/shoutbox_panel/ash.js
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
Hash ae01fb6204f511588e8a46e72a75b80f
9955c073c7435f55fac0744b64a32da5f80228c7
cef09f718a9852e0781abde108be3b512d9cb4d2d1e22283460b49578dc0b0a3
GET /infusions/shoutbox_panel/ash.js HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:42 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 25 Feb 2012 21:36:15 GMT
Content-Encoding: gzip
faq7.ru/infusions/wnavi_panel/tools.js
31.31.198.198200 OK 742 B URL HTTP/1.1 faq7.ru/infusions/wnavi_panel/tools.js
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type ASCII text, with very long lines (734)
Hash 0be610858474bc880768546a4c5f5a62
f71db2e0cc15d70866e9cdd6842a328e5343f1c7
ac2034ec0c46e0a1558ac542efddbad8ad2deb136c91dd7d4dc6f6bf82e766bb
GET /infusions/wnavi_panel/tools.js HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:42 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 25 Feb 2012 21:40:59 GMT
Content-Encoding: gzip
faq7.ru/infusions/shoutbox_panel/ash.css
31.31.198.198200 OK 510 B URL HTTP/1.1 faq7.ru/infusions/shoutbox_panel/ash.css
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
Hash 75ca413eb284a7e9875b93e76820a752
4e335a8e427bcfa76c13f930a03f202114a293c9
5ef2da20fca7f2fcc0bcb55c3ae9a9712c74336977f91a4674c798504ffaa4f5
GET /infusions/shoutbox_panel/ash.css HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:42 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 18:39:40 GMT
Content-Encoding: gzip
faq7.ru/includes/jquery/jquery.js
31.31.198.198200 OK 34 kB URL HTTP/1.1 faq7.ru/includes/jquery/jquery.js
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash 94966b2cdea759e7fdaf47fcb1e787e8
2352ba4d8d0923451def34d56c04391332e1a3ed
fed5742bef8c2a419e554407fc3af8fad8e5a9a10b6ea38da6254fee4ca6e5d7
GET /includes/jquery/jquery.js HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:42 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 13 May 2012 22:02:13 GMT
Content-Encoding: gzip
i.ytimg.com/vi/8KGXSjtS5pk/default.jpg
216.58.207.246200 OK 4.7 kB URL HTTP/1.1 i.ytimg.com/vi/8KGXSjtS5pk/default.jpg
IP 216.58.207.246:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash b5101b3f4a35e0ce036f55bfd1c77fc3
c769b52027adac7c510ec16be9962e44d50c5a72
cf8a86bf9eac880ff94fbe63c9fd5de5d4c68fe31b070d13ba4a3cfd00af8967
GET /vi/8KGXSjtS5pk/default.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
Timing-Allow-Origin: *
Content-Length: 4723
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 03 Oct 2022 02:27:42 GMT
Expires: Mon, 03 Oct 2022 04:27:42 GMT
Cache-Control: public, max-age=7200
ETag: "1663864940"
Content-Type: image/jpeg
Age: 0
i.ytimg.com/vi/ph1vpnYIxJk/default.jpg
216.58.207.246200 OK 4.7 kB URL HTTP/1.1 i.ytimg.com/vi/ph1vpnYIxJk/default.jpg
IP 216.58.207.246:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash 964f8376431fa49f7ab7e91aa8bd28e7
fda13bab465e9bd88ed486b2016aa54e6c6c36bb
47374a4eb6736ed92b9118ad2e7e2d92f0ef8492ad70b68f77d07f31d5387076
GET /vi/ph1vpnYIxJk/default.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
Timing-Allow-Origin: *
Content-Length: 4724
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 03 Oct 2022 02:27:42 GMT
Expires: Mon, 03 Oct 2022 04:27:42 GMT
Cache-Control: public, max-age=7200
ETag: "1663773246"
Content-Type: image/jpeg
Age: 0
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3ae0c18333f0d829007057284e55638d
234b6c8681d03dbdc2916d3f6add46945943d607
1a465fae2c933db26b9d57986a36b2aee88a5ac5e9beb48a3f4675981f429555
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1A465FAE2C933DB26B9D57986A36B2AEE88A5AC5E9BEB48A3F4675981F429555"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11162
Expires: Mon, 03 Oct 2022 05:33:44 GMT
Date: Mon, 03 Oct 2022 02:27:42 GMT
Connection: keep-alive
ulogin.ru/js/widget.js?display=window&fields=email&optional=first_name,last_name,nickname&redirect_uri=http://faq7.ru/ulogin.php
95.163.118.168200 OK 17 kB URL HTTP/1.1 ulogin.ru/js/widget.js?display=window&fields=email&optional=first_name,last_name,nickname&redirect_uri=http://faq7.ru/ulogin.php
IP 95.163.118.168:0
ASN #12695 LLC Digital Network
File type ASCII text, with very long lines (580)
Hash d0aeb0ca1401db63e0f72da3f101ec9b
4cd78f340a48961518cc99a59c1f7b6c912feb07
8c270aae9c9f946930715147fed929a53cb56cf01a30aad6f78663f49d02fa94
GET /js/widget.js?display=window&fields=email&optional=first_name,last_name,nickname&redirect_uri=http://faq7.ru/ulogin.php HTTP/1.1
Host: ulogin.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:42 GMT
Content-Type: application/x-javascript
Content-Length: 17398
Last-Modified: Tue, 10 Aug 2021 18:41:38 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "6112c862-43f6"
Content-Encoding: gzip
Expires: Thu, 06 Oct 2022 02:27:42 GMT
Cache-Control: max-age=259200
ocsp.globalsign.com/gseccovsslca2018
104.18.20.226200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.20.226:0
Hash a8e8eed7080d5b8bd4bc2a0446d33c00
e7e0dc730a5df05bb4cfbebe617d0469aa89b9ff
f52b89684c3049c65118a4171b414f41951d6b9abcfcb56d12934ca737d43f55
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 02:27:42 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Thu, 06 Oct 2022 22:08:35 GMT
ETag: "e7e0dc730a5df05bb4cfbebe617d0469aa89b9ff"
Last-Modified: Sun, 02 Oct 2022 22:08:36 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2230
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75423d7eac021c06-OSL
ocsp2.globalsign.com/gsorganizationvalsha2g2
104.18.20.226200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP 104.18.20.226:0
Hash 8df967d40708857eadc15ee0cbe3d035
dc60db2a1ecfeb2bec6b7c95ed7b8290f273f0f3
2440eed7cc61a89de699c78cd5eb3d5c53ba4b501677fc31cc30fe9c79edb77d
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 02:27:42 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Thu, 06 Oct 2022 22:54:14 GMT
ETag: "dc60db2a1ecfeb2bec6b7c95ed7b8290f273f0f3"
Last-Modified: Sun, 02 Oct 2022 22:54:15 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2174
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75423d7eebe7b4ee-OSL
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.20.226:0
Hash e3e2bc88b6174a68bc02bc832299a8ff
39907d6210d97d1a6da466a881a84638e7aa4203
c4f679342b59bbf52b77eaccedcffdfba4065045e9f517582ce0152a6bdef56b
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 02:27:42 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Thu, 06 Oct 2022 23:49:36 GMT
ETag: "39907d6210d97d1a6da466a881a84638e7aa4203"
Last-Modified: Sun, 02 Oct 2022 23:49:37 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75423d7eec2f1c06-OSL
ocsp2.globalsign.com/gsorganizationvalsha2g2
104.18.20.226200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP 104.18.20.226:0
Hash 8df967d40708857eadc15ee0cbe3d035
dc60db2a1ecfeb2bec6b7c95ed7b8290f273f0f3
2440eed7cc61a89de699c78cd5eb3d5c53ba4b501677fc31cc30fe9c79edb77d
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 02:27:42 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Thu, 06 Oct 2022 22:54:14 GMT
ETag: "dc60db2a1ecfeb2bec6b7c95ed7b8290f273f0f3"
Last-Modified: Sun, 02 Oct 2022 22:54:15 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2174
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75423d7efbeeb4ee-OSL
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash a1f49c9cd13109e3079974f3dbe7f526
286371fcfe912ae1a30fa224d7df8e6f3e51dfdb
98bb1f517d55da20309b2d6fe517402301b5a90d3ae16d5afc99b5b6c93e3a77
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98BB1F517D55DA20309B2D6FE517402301B5A90D3AE16D5AFC99B5B6C93E3A77"
Last-Modified: Fri, 30 Sep 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7755
Expires: Mon, 03 Oct 2022 04:36:57 GMT
Date: Mon, 03 Oct 2022 02:27:42 GMT
Connection: keep-alive
vk.com/js/api/openapi.js?49
87.240.132.78200 OK 23 kB URL HTTP/2 vk.com/js/api/openapi.js?49
IP 87.240.132.78:0
File type ASCII text, with very long lines (3849)
Hash b33ff213862515e45744517b207d77db
7d69b309a9c1d918d8dc7b42c510d08321207b9c
a5cd610dc23e643864c8827d58736c15b955328124bfd95661c88a7b96eaed47
GET /js/api/openapi.js?49 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Mon, 03 Oct 2022 02:27:42 GMT
content-type: application/x-javascript
content-length: 23322
last-modified: Wed, 10 Aug 2022 14:44:17 GMT
etag: "62f3c441-5b1a"
content-encoding: br
expires: Fri, 07 Oct 2022 02:27:42 GMT
cache-control: max-age=345600
x-frontend: front226205
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.77.32200 OK 346 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 36b0db0ab22223f33b81a4cf6845f121
bdd53f664c540d4fffb2057616ee258ed813dd79
cdcda2b30a19c8327a728e44c6645a09e7acb777578992d1a3885d529c52684c
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "CDCDA2B30A19C8327A728E44C6645A09E7ACB777578992D1A3885D529C52684C"
Last-Modified: Mon, 03 Oct 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19969
Expires: Mon, 03 Oct 2022 08:00:31 GMT
Date: Mon, 03 Oct 2022 02:27:42 GMT
Connection: keep-alive
mc.yandex.ru/metrika/watch.js
87.250.251.119200 OK 57 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP 87.250.251.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (570)
Hash 44366cc385a5c0f49df4f22b71434b42
3f56349f8a3fff52e28a3300052bdc2bde97371c
485ba52769d75db2ed79f65318d37070d09ce3441680aa22caa10ae3cdcb45cd
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 57285
date: Mon, 03 Oct 2022 02:27:42 GMT
access-control-allow-origin: *
etag: "633583ac-dfc5"
expires: Mon, 03 Oct 2022 03:27:42 GMT
last-modified: Thu, 29 Sep 2022 14:38:20 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
vk.com/js/api/openapi.js?34
87.240.132.78200 OK 23 kB URL HTTP/2 vk.com/js/api/openapi.js?34
IP 87.240.132.78:0
File type ASCII text, with very long lines (3849)
Hash b33ff213862515e45744517b207d77db
7d69b309a9c1d918d8dc7b42c510d08321207b9c
a5cd610dc23e643864c8827d58736c15b955328124bfd95661c88a7b96eaed47
GET /js/api/openapi.js?34 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Mon, 03 Oct 2022 02:27:42 GMT
content-type: application/x-javascript
content-length: 23322
last-modified: Wed, 10 Aug 2022 14:44:17 GMT
etag: "62f3c441-5b1a"
content-encoding: br
expires: Fri, 07 Oct 2022 02:27:42 GMT
cache-control: max-age=345600
x-frontend: front226205
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
promo.partner.alawar.ru/images/0c8/120x240.jpg?pid=21363
93.90.220.83200 OK 26 kB URL HTTP/1.1 promo.partner.alawar.ru/images/0c8/120x240.jpg?pid=21363
IP 93.90.220.83:0
ASN #47723 Softline Trade JSC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 120x240, components 3\012- data
Hash c665bcbbb13966ee2c549fcc8e7b0bcf
367fce8555178a88697a077961c9c8504dea8bf8
e232735258913712e221075e2841476f35e0961eb7e9b149f5e9a07e21c68f66
GET /images/0c8/120x240.jpg?pid=21363 HTTP/1.1
Host: promo.partner.alawar.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:42 GMT
Content-Type: image/jpeg
Content-Length: 25532
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2010 07:32:36 GMT
Accept-Ranges: bytes
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
18.164.68.6200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 18.164.68.6:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Mon, 03 Oct 2022 01:32:53 GMT
Expires: Mon, 03 Oct 2022 01:44:30 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 c3941d2249641ec51690205d7b1084ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: mEtBoaS1gJrNASZOacqxiRiqXCqpN4AkiG4vsC4WxpnoShUtWKCpcw==
Age: 3289
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 4eb30b4a4234809cf7d5f89fa1f6ceeb
797242aab2f13c820050aa9accd11b7b950cd177
ce9d833a0ac321a908184b655d6632c481f758a04a9c936a7c303bb253444146
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3611
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 03 Oct 2022 02:27:42 GMT
Last-Modified: Mon, 03 Oct 2022 01:27:31 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/uye.png
31.31.198.198200 OK 439 B URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/uye.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash 176ee4cc6f666369fb39425d6d28087a
3944c6acbe2e8207bb2694b2a3b06416dbb0f9ab
354e4c28047959c7dd030d46d641d062df0395f641085bba0eeff711f00ad85a
GET /infusions/hayaletsevgili_online_users_panel/images/uye.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 439
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
faq7.ru/infusions/thisrss_panel/feed-icon-12x12.png
31.31.198.198200 OK 552 B URL HTTP/1.1 faq7.ru/infusions/thisrss_panel/feed-icon-12x12.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 93affa4fc35c2f847ed1781b18ca0db0
cf44a2580e06c111d77466aa3a917b1534b6680c
98ea718868bb9a520da4777cd8a5ed5c76d123b77aa2e0289ab4bad638439b73
GET /infusions/thisrss_panel/feed-icon-12x12.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 552
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:13 GMT
Accept-Ranges: bytes
faq7.ru/infusions/board/images/rss.png
31.31.198.198200 OK 727 B URL HTTP/1.1 faq7.ru/infusions/board/images/rss.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash d0394ddde1e3c9f23030eebe56961596
a36c4fd5a8a0ab52b4369b48599f477a642c3ded
e5563da9d0aca6698a0fe760ae0d38827e6a225be742d166e3cda357b8c13732
GET /infusions/board/images/rss.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:10 GMT
Accept-Ranges: bytes
faq7.ru/images/board/0006eb4b602190c369772e6044b2ba70.jpg
31.31.198.198200 OK 3.3 kB URL HTTP/1.1 faq7.ru/images/board/0006eb4b602190c369772e6044b2ba70.jpg
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 40x50, components 3\012- data
Hash 6c0a1d402348f83c29b4e035c2b465b6
a15038261a26640da374aa301fa5303e602905e6
3af1c8c96376756601e1cec0e844bb63a8326ad81f2748c0822edda1728f6b67
GET /images/board/0006eb4b602190c369772e6044b2ba70.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/jpeg
Content-Length: 3262
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 19:56:49 GMT
Accept-Ranges: bytes
faq7.ru/images/banner88.gif
31.31.198.198200 OK 2.0 kB URL HTTP/1.1 faq7.ru/images/banner88.gif
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type GIF image data, version 89a, 88 x 31\012- data
Hash 369f7ad897bb82bb94a18837089579e3
d604882f7952513aa816d11b233ab725c579bbe4
6408f1769dc939fbee5219dfd900e89c1ce548c426fd23f1dcd515dee038a17d
GET /images/banner88.gif HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/gif
Content-Length: 2023
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:38:59 GMT
Accept-Ranges: bytes
faq7.ru/images/board/d0f01e9f5780b8400aaeba80e7464ae9.jpg
31.31.198.198200 OK 2.5 kB URL HTTP/1.1 faq7.ru/images/board/d0f01e9f5780b8400aaeba80e7464ae9.jpg
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 40x50, components 3\012- data
Hash 79b4399ea83dd73931d18cfc53c21600
70e7743839421c5fb58cedb7aae03c29a1ab6d1c
5ae01b49561c77d26d0e5727511d48670730b00effda6f111aef3a4077fa2a85
GET /images/board/d0f01e9f5780b8400aaeba80e7464ae9.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/jpeg
Content-Length: 2513
Connection: keep-alive
Last-Modified: Sat, 17 Sep 2022 14:19:08 GMT
Accept-Ranges: bytes
share.pluso.ru/pluso-like.js
37.200.67.211200 OK 14 kB URL HTTP/1.1 share.pluso.ru/pluso-like.js
IP 37.200.67.211:0
ASN #49505 OOO Network of data-centers Selectel
File type Unicode text, UTF-8 text, with very long lines (32982)
Hash 771636fe34795ee7992d56e06316e014
c8f739663b5d71fa742143d7344e14e986658a24
de5c409b319232aea6b31d87a013df379e85007c2dbd124a62548bbc1ef656b6
GET /pluso-like.js HTTP/1.1
Host: share.pluso.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:29:43 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
Vary: Accept-Encoding
Set-Cookie: pluso=3386703247126394343; expires=Tue, 19 Sep 2028 04:52:57 GMT; path=/; domain=.pluso.ru
Cache-control: no-cache
ETag: 3386703247126394343
Last-Modified: Mon, 07 May 2018 16:59:21 GMT
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
mc.yandex.ru/metrika/watch.js
87.250.251.119302 Moved temporarily 0 B URL HTTP/1.1 mc.yandex.ru/metrika/watch.js
IP 87.250.251.119:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302 Moved temporarily
Content-Length: 0
Location: https://mc.yandex.ru/metrika/watch.js
faq7.ru/themes/faq7_new/images/header_solkenar.png
31.31.198.198200 OK 1.3 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/header_solkenar.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 40 x 79, 8-bit colormap, non-interlaced\012- data
Hash a2eeeffdacf7347bb46bf56ea934b8cf
477fafb9f5b27fa32285847c73f49cb1a3127fd2
b3116ade48c4815db351faabf82c338bb4458ded9da83ec5ffc55874d878e0ec
GET /themes/faq7_new/images/header_solkenar.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 1321
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/header_message.png
31.31.198.198200 OK 203 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/header_message.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 22 x 79, 4-bit colormap, non-interlaced\012- data
Hash 6cdc3cdb186b437be450668cbb353812
12ff968298ec4e9e45073ad47dd87157aea88162
914c3c07a764e5d7cec44dca97285f0eb5d46a4b2ac3c6fa4b05841a53b394cc
GET /themes/faq7_new/images/header_message.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 203
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/images/advtab/elect.png
31.31.198.198200 OK 7.6 kB URL HTTP/1.1 faq7.ru/images/advtab/elect.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash c8d32c8fc630d9f4fd69e954e17aaabe
b298152d6b2211ed33fda4789a18bbc0d1232aeb
509a5109b6875a5b12777c8f8f1c61b7eccfae2e0668e35c4dd17643f02f3209
GET /images/advtab/elect.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 7649
Connection: keep-alive
Last-Modified: Tue, 25 Mar 2014 15:27:43 GMT
Accept-Ranges: bytes
faq7.ru/images/advtab/games.png
31.31.198.198200 OK 6.1 kB URL HTTP/1.1 faq7.ru/images/advtab/games.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 1bd58a8ccbb8eace56f92318f7c02590
80c55065fa7a297c5cd3df542828fda430adced5
2ac39badffb60411ade1acc34b6bed16e7fb247372298e68ff28870ff1153655
GET /images/advtab/games.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 6094
Connection: keep-alive
Last-Modified: Mon, 05 Mar 2012 19:12:01 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/header_sagkenar.png
31.31.198.198200 OK 1.1 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/header_sagkenar.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 10 x 120, 8-bit colormap, non-interlaced\012- data
Hash 52030db134ef04b5af0ffd4242943eae
8e674af8d8fca2e5abb8e392cc2d5fd4067300db
8ff0d960d7d4e04d65151c435bc2920d4c53e78bf72fe9a5afd206233efc7b3a
GET /themes/faq7_new/images/header_sagkenar.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 1139
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
media.reformal.ru/widgets/v3/reformal.js
139.162.151.130200 OK 4.8 kB URL HTTP/1.1 media.reformal.ru/widgets/v3/reformal.js
IP 139.162.151.130:0
File type ASCII text, with very long lines (15116)
Hash 206c92e8c010e2f54dc2e76adf56bddc
cc612ba858973a9c384107e4df6453c9ed9ebf10
154e0789792326a4a35496859afd407e299d30d62b86709c6d4387c8f51296b9
GET /widgets/v3/reformal.js HTTP/1.1
Host: media.reformal.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: application/x-javascript; charset=utf-8
Last-Modified: Wed, 27 Apr 2016 09:51:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"57208bb3-3b0d"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
faq7.ru/themes/faq7_new/images/banner.png
31.31.198.198200 OK 40 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/banner.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 320 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash 8d63d8a88179259482d125f5763e48ec
edc3ded7d479171d9facfb981560f00dc9585c26
63d4a7174c2f22886bbf6aac788b7726f051ab41e9302eb047b089a48ec07529
GET /themes/faq7_new/images/banner.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 40101
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
app.sharpay.io/api/script.js
104.21.75.6200 OK 40 kB URL HTTP/2 app.sharpay.io/api/script.js
IP 104.21.75.6:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8e3244f7613cb831eca2c596cdf0d381
fd7f66ed948b0f85cae6a31f3fb59deba35b1f5e
d384f52dc3a583e3f5adcccbfe214d9247103f4f4c3223dd4616383aa8266f56
GET /api/script.js HTTP/1.1
Host: app.sharpay.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 03 Oct 2022 02:27:42 GMT
content-type: application/javascript
last-modified: Tue, 17 Nov 2020 21:50:02 GMT
etag: W/"5fb4458a-1f245"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GplsjkJdLi6WZS3QE6A0gCrLFVfnyev3LwbJA3pkKrf9ZiSo3q4MYvo2ByvvGXIQXMB3GV2qoqp3KD0bG39n4m8OZHBylLztEfKDAvWAA0FFSpfgjO%2B4OWCfRVBeg1eOGA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75423d7d1b14b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
faq7.ru/themes/faq7_new/images/arama.png
31.31.198.198200 OK 322 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/arama.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 81 x 41, 8-bit colormap, non-interlaced\012- data
Hash 5ef6b593d11fc3323f5a107b8e159c02
2d86f87d801a3da815b1bd597ba21633f939a5c7
e2cac633f04578b76aad42c278e8753aa597b38e2cdb8a9448fee46ba8051eec
GET /themes/faq7_new/images/arama.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 322
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/aramasag.png
31.31.198.198200 OK 421 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/aramasag.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 9 x 41, 8-bit colormap, non-interlaced\012- data
Hash b735704ed603c9ce2840f636b3156c31
82762e40aecbc250725517893fef7f83ca715c7d
61e0d1ad171634c69f48012ea6c3356b7ba3db021bcd2298afe2441c164a82c3
GET /themes/faq7_new/images/aramasag.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 421
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/shade.gif
31.31.198.198200 OK 949 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/shade.gif
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type GIF image data, version 89a, 5 x 45\012- data
Hash d2406af2a1f0d53749e633cb1b007c29
0b9b5f655eb54059807a2a17c7e199eee917d5ac
d431ff0f801d1909d1859445f776b32fe163f4e5ecedeee6e3f9a6f264099213
GET /themes/faq7_new/images/shade.gif HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/gif
Content-Length: 949
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/menutop.png
31.31.198.198200 OK 1.1 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/menutop.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 14 x 174, 8-bit colormap, non-interlaced\012- data
Hash 8d50b3b17a1af019ad91cc3798e86a13
96a53f2a657d74068616c9ce3ec75e0701b3a9e9
3169a60e2414636c9c0ba154d7a9818db1988af81faaedb9b91b94fb56259adc
GET /themes/faq7_new/images/menutop.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 1131
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
push.services.mozilla.com/
34.214.236.46101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.214.236.46:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0aMsH825xSoREVyCDpfbiw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 2Z3Ulg3RoSvfLbapGRVf7XOLyhI=
faq7.ru/themes/faq7_new/images/menutop_links.png
31.31.198.198200 OK 1.8 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/menutop_links.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 200 x 329, 8-bit colormap, non-interlaced\012- data
Hash 61300238b34d223a5b32750060c121fe
eb146c57a05a1a6ce30bd13b8e13d7e58eeaedf9
71a913b199ae80c4be904450ec9b692d9d7ed80777eaa7344f2d44ebde0f8335
GET /themes/faq7_new/images/menutop_links.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 1800
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/mainbody-left.png
31.31.198.198200 OK 96 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/mainbody-left.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 4 x 10, 1-bit colormap, non-interlaced\012- data
Hash 5150e8d2e138e7d27bd2092a064d9e85
e0c137cd1d0d855b87a8248ab4db9dd4a3dd4516
6bd68d18838e37b7c2585bdb1c0872c23b3fdf5363072f0c17b3b1696a1573bc
GET /themes/faq7_new/images/mainbody-left.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 96
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/sol_ust_yan.png
31.31.198.198200 OK 3.6 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/sol_ust_yan.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced\012- data
Hash abf166fe44402115b260d4343242500d
99d145b8912330803f0f9122c426e8257a9c1dea
a0729cc7d7666a67641780cafc9c37e79e75fe7d85519eaabb7559ff26bbc19e
GET /themes/faq7_new/images/sol_ust_yan.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 3575
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/sol_ust.png
31.31.198.198200 OK 258 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/sol_ust.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 8 x 45, 8-bit colormap, non-interlaced\012- data
Hash 246b9e737e0ff91965a9716b02d3a82f
c42f6bd27ce0f66c0cf1208397bfeae0bbbc825c
cccb8e940da727e43a272667b78d1352924c3928a116becc3c3796cd2d654504
GET /themes/faq7_new/images/sol_ust.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 258
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/ust_orta.png
31.31.198.198200 OK 197 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/ust_orta.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 10 x 45, 8-bit colormap, non-interlaced\012- data
Hash 3c384583d459815e10ef466e5c28ba8d
e27e16e88557d46099cbe17bb6e91203068591d9
9ebf6a47a6932a5b9064c6abd5dfbcce79397e147c22ebd56d9c0389d94052a7
GET /themes/faq7_new/images/ust_orta.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 197
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/sag_ust.png
31.31.198.198200 OK 269 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/sag_ust.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 8 x 45, 8-bit colormap, non-interlaced\012- data
Hash 14ebc364b603c3b652ac79b610dceb05
a14ff530f12382c09c4efdb4e682893c52690a76
c1f975c487d7872c4f28550bf8d8763194d6868e1a18562aa2f8213a02d90c51
GET /themes/faq7_new/images/sag_ust.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 269
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/sol_alt.png
31.31.198.198200 OK 229 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/sol_alt.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 8 x 10, 8-bit colormap, non-interlaced\012- data
Hash fc653d7c6065ec60a9a81521fedb7dc1
0ae482fb8b6a61f2df6c4ade790d87af9d3f4d7b
b0e56e0cccfa7a0a2a78254f2e0297379c301aba89bbbacef157a630bc65b72b
GET /themes/faq7_new/images/sol_alt.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 229
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/sol_yan.png
31.31.198.198200 OK 126 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/sol_yan.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 8 x 5, 4-bit colormap, non-interlaced\012- data
Hash eec9daba94f4cf54d111a1d004bcc3a1
887b0d40d034ce7725be8a9002deaea61bc0e200
cf43c79e011d17b32ea144fd5da55f2bbe89fa9608dac6cf2e242136221b5ee3
GET /themes/faq7_new/images/sol_yan.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 126
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/sag_yan.png
31.31.198.198200 OK 128 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/sag_yan.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 8 x 5, 4-bit colormap, non-interlaced\012- data
Hash 4bbcf08eaa7c0c6eacd19ba3cb3bf9ee
52fc9ad0d6e6ecfa85974e831c50ae9c5d53fc19
f56a349bb4a0d3237744a5614912bed54a54a76dbe3c4757818687c5ca69a6d6
GET /themes/faq7_new/images/sag_yan.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 128
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/alt_orta.png
31.31.198.198200 OK 145 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/alt_orta.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 5 x 10, 4-bit colormap, non-interlaced\012- data
Hash 25af1732728fb5caad42f93bb0e98955
3c325c86e86cec0756c1e0e94350f1255545e15c
6a9d30fc5253d4b21c47977e892a6d87454e72d0227c66507bdd905d827809f9
GET /themes/faq7_new/images/alt_orta.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 145
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/images/advtab/anketa.png
31.31.198.198200 OK 6.0 kB URL HTTP/1.1 faq7.ru/images/advtab/anketa.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 39f631977ceb651efdff94d781221857
4ea28e49ccd9a19f80b10c60a5d7b51f9688e715
b8744b9bc1484d3c4bce03ab46e701a4f3190a78fe94a5878da4274adf8b678e
GET /images/advtab/anketa.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 5999
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2011 00:31:08 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/sag_alt.png
31.31.198.198200 OK 231 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/sag_alt.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 8 x 10, 8-bit colormap, non-interlaced\012- data
Hash 3a7b2792ecbdc62eb5a5285bb4a85d05
8989644ae912c26241794ea89eda7e07403950a6
ee9f840c684f0c32ada2908fb91ce6a4d2af34c44ae159c42e739e6f922b2b1c
GET /themes/faq7_new/images/sag_alt.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 231
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/images/advtab/mobile.png
31.31.198.198200 OK 7.7 kB URL HTTP/1.1 faq7.ru/images/advtab/mobile.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 9b339533cbb2b3de222ee613d3657ef8
077527c4570412274126ca8d6073d91e20f4371d
2ed485e4b5e540e22ad2148454255fd09c0bf7da774747101b52d6621db1700a
GET /images/advtab/mobile.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 7701
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2011 00:31:08 GMT
Accept-Ranges: bytes
faq7.ru/images/advtab/video.png
31.31.198.198200 OK 6.9 kB URL HTTP/1.1 faq7.ru/images/advtab/video.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash e2a040ca9524eb99c8eb08e0fab53672
3e689ba3ac72c9b6137d1a2612d13c9435b64ea6
0476c1fcbecc6ce3e80c83b8a988c40f343016aa5f24d8a735e7128a8ff501e6
GET /images/advtab/video.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 6915
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2011 00:31:08 GMT
Accept-Ranges: bytes
faq7.ru/images/advtab/dvd.png
31.31.198.198200 OK 6.4 kB URL HTTP/1.1 faq7.ru/images/advtab/dvd.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 1aba653e6205b63208359b5063f65170
ac0ee60f724626edd210f320664ce7c7df02cb0a
07a31aacea778b27060fbc99e0110f3fa23d4be685e3a0afcc8279d4861d03a5
GET /images/advtab/dvd.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 6425
Connection: keep-alive
Last-Modified: Sat, 10 Mar 2012 22:03:04 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/abstand.png
31.31.198.198200 OK 378 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/abstand.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 320 x 89, 8-bit/color RGBA, non-interlaced\012- data
Hash f5e5d4dc0e3f709449008e171b6a645d
96974be67f6a59cd2e23e0ac7626145475e3c81d
be8e209de5cb151b2b46adce8165087915ffd9ca4284273b904bfb0a72b2c98b
GET /themes/faq7_new/images/abstand.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 378
Connection: keep-alive
Last-Modified: Sun, 18 Dec 2011 18:43:27 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/bullet.gif
31.31.198.198200 OK 911 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/bullet.gif
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type GIF image data, version 89a, 10 x 10\012- data
Hash b0882e2a62f70dd10bb62cf45f709f0a
6ba9da8faf361347036e493a9b9c0317bc5b71c9
4979c73b740882f8d17134e741bee4d9f648830a1788ba21f89f3e72210caa10
GET /themes/faq7_new/images/bullet.gif HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/gif
Content-Length: 911
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/infusions/wnavi_panel/img/accept.png
31.31.198.198200 OK 781 B URL HTTP/1.1 faq7.ru/infusions/wnavi_panel/img/accept.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 8bfed48756f192ed7afe6eaa4799aae4
8872adf860a379cf6eab4faf35a67301b38325c6
0a733b99fcd03c5e6359d0973a169bbfaf94485227437480d9c703bbe58e4b4c
GET /infusions/wnavi_panel/img/accept.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 781
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 21:19:49 GMT
Accept-Ranges: bytes
faq7.ru/infusions/wnavi_panel/img/add.png
31.31.198.198200 OK 733 B URL HTTP/1.1 faq7.ru/infusions/wnavi_panel/img/add.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 1988c3cc1384a3ac9b9a4129183248f3
b6244b0027a8c9f702b311cb5b2ab8cc64f3b5f2
c06a52df3361df380a02a45159a0858d6f7cd8cbc3f71ff732a65d6c25ea6af6
GET /infusions/wnavi_panel/img/add.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 733
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 21:19:49 GMT
Accept-Ranges: bytes
faq7.ru/images/photoalbum/album_6/vglm1mi_t1.jpg
31.31.198.198200 OK 13 kB URL HTTP/1.1 faq7.ru/images/photoalbum/album_6/vglm1mi_t1.jpg
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 130x73, components 3\012- data
Hash ca08437539b212831d29fed1db60a3c7
53ed78ddbcd4b852b5c575e7306ba1528c2fdcac
e8920ee259f2cd9af3b1a1422d077e4da54f1f16cbedb21c999906d588824fd8
GET /images/photoalbum/album_6/vglm1mi_t1.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/jpeg
Content-Length: 12893
Connection: keep-alive
Last-Modified: Sat, 02 Feb 2013 13:49:58 GMT
Accept-Ranges: bytes
faq7.ru/infusions/wnavi_panel/img/information.png
31.31.198.198200 OK 778 B URL HTTP/1.1 faq7.ru/infusions/wnavi_panel/img/information.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 3750c701d2ec35a45d289b9b9c1a0667
04b482344d75d0732275727bd73cceb9b049d276
ff9c48d8c2d063932c7aadd5e15ddfdc76b7111bf0715f3a192bba26df2c531c
GET /infusions/wnavi_panel/img/information.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 778
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 21:19:49 GMT
Accept-Ranges: bytes
faq7.ru/images/avatars/admin[1].jpg
31.31.198.198200 OK 4.5 kB URL HTTP/1.1 faq7.ru/images/avatars/admin[1].jpg
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash c0650802c88b7bd45b87f1337bc8cc6a
54e375ce6542577facafb22a27facd4518260f43
3ed19b252090bdaa5a17374e5f8eede6db317e35cf4c597184fdda4ff0b568a1
GET /images/avatars/admin[1].jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/jpeg
Content-Length: 4525
Connection: keep-alive
Last-Modified: Sun, 30 Oct 2011 21:55:08 GMT
Accept-Ranges: bytes
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/offline.png
31.31.198.198200 OK 780 B URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/offline.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 50 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 1ff203770c42cea237dbee8c496ce7dc
a16df156fd7c1568544139401ac991f373bdc139
844303033c2057761e6b79701273ef57f7b605ace8a7ab6f59396e673ba9f42a
GET /infusions/hayaletsevgili_online_users_panel/images/offline.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 780
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/noav2.png
31.31.198.198200 OK 5.3 kB URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/noav2.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash ffa23bb64b400147fc7af73d7e243135
e28b289d2fb4c5760fdc3d971e1811da407508a0
ac3b04ebdeeffd7a4b7f2a6d8668e2ffbe5b862ec432bf3dd27bb5fc919c1548
GET /infusions/hayaletsevgili_online_users_panel/images/noav2.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 5270
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
faq7.ru/images/board/3f8934fd3db5fdd2e456997db7eea60a.jpg
31.31.198.198200 OK 2.6 kB URL HTTP/1.1 faq7.ru/images/board/3f8934fd3db5fdd2e456997db7eea60a.jpg
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 40x50, components 3\012- data
Hash 66052df75fac8a07d2e571e9495c5c1b
93713a19784f1ab7c325f6338383f21f46106d63
f27a447f2a398d9071c228380c783836766fc3f954212f7bcf85cdb1c0d43526
GET /images/board/3f8934fd3db5fdd2e456997db7eea60a.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/jpeg
Content-Length: 2585
Connection: keep-alive
Last-Modified: Wed, 24 Nov 2021 16:34:48 GMT
Accept-Ranges: bytes
faq7.ru/images/photoalbum/album_6/1_t1.jpg
31.31.198.198200 OK 11 kB URL HTTP/1.1 faq7.ru/images/photoalbum/album_6/1_t1.jpg
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 130x78, components 3\012- data
Hash 027247148cdde06b89ed61193a11b7af
11759425d82d2372433a7606082f7fd20b9b8a67
60b6b9a7e399ee2880d4e078ef6e1684ed3f718f3b07ec35dafe569610c1b06b
GET /images/photoalbum/album_6/1_t1.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/jpeg
Content-Length: 11235
Connection: keep-alive
Last-Modified: Fri, 05 Oct 2012 11:12:07 GMT
Accept-Ranges: bytes
faq7.ru/images/photoalbum/album_5/nature110_t1.jpg
31.31.198.198200 OK 12 kB URL HTTP/1.1 faq7.ru/images/photoalbum/album_5/nature110_t1.jpg
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 130x73, components 3\012- data
Hash 4e12bc500b8e52c996c63aacd89be6ff
4d55e89e6df86cdc2f43314d4af37a303ff744a8
e1b75285d86337ab7a7f16318e25dfab2255b02fc0512db6b276339dd22b2197
GET /images/photoalbum/album_5/nature110_t1.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/jpeg
Content-Length: 11582
Connection: keep-alive
Last-Modified: Wed, 15 Feb 2012 19:21:16 GMT
Accept-Ranges: bytes
faq7.ru/images/board/3aedcec787264ea4572420a058095b34.png
31.31.198.198200 OK 1.6 kB URL HTTP/1.1 faq7.ru/images/board/3aedcec787264ea4572420a058095b34.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 40x50, components 3\012- data
Hash 7da0454c3fade2e67317d824e4434d4d
e260732d24365ee6b59063eb200a82fb426fe73e
6758b136fe540833d76f10b793def9864122bcbbac0b6c5d1a9a5c501dca6c68
GET /images/board/3aedcec787264ea4572420a058095b34.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 1584
Connection: keep-alive
Last-Modified: Fri, 16 Sep 2022 19:15:35 GMT
Accept-Ranges: bytes
faq7.ru/infusions/uip_panel/images/ico_lock.png
31.31.198.198200 OK 633 B URL HTTP/1.1 faq7.ru/infusions/uip_panel/images/ico_lock.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 5d0bd6c55026e13a40397dcf97fa0cfa
b8efa6913362d97f94f8ddbfceed60f5404ba5ec
fafc9aaaf2140c94a7a3afc94653ce0ff22cd2713cd524eda1bb9974e67b9a49
GET /infusions/uip_panel/images/ico_lock.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 633
Connection: keep-alive
Last-Modified: Sat, 07 May 2011 19:05:42 GMT
Accept-Ranges: bytes
faq7.ru/images/board/be42c7dc044b7c9a533c87d0b91330ab.jpg
31.31.198.198200 OK 2.7 kB URL HTTP/1.1 faq7.ru/images/board/be42c7dc044b7c9a533c87d0b91330ab.jpg
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 40x50, components 3\012- data
Hash 74907b758eacc538d42089951206dfa3
2728b6aab4030067f62209939459e2fa3ca9f402
9a249d030582b47efec5a03ed955266815690e2ce653a5b99f9733268204ca28
GET /images/board/be42c7dc044b7c9a533c87d0b91330ab.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/jpeg
Content-Length: 2736
Connection: keep-alive
Last-Modified: Wed, 25 Aug 2021 15:45:02 GMT
Accept-Ranges: bytes
faq7.ru/infusions/uip_panel/images/ico_users.png
31.31.198.198200 OK 444 B URL HTTP/1.1 faq7.ru/infusions/uip_panel/images/ico_users.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash fe23e852cf1626a5eefea593b4f14375
dc4509331e8f2712a323ec252c36b1761431d888
9e3df70006b23420dd9e4314cb84bf0f1585dbfebfc170ef4ec0924f658074b0
GET /infusions/uip_panel/images/ico_users.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 444
Connection: keep-alive
Last-Modified: Sat, 07 May 2011 19:05:42 GMT
Accept-Ranges: bytes
faq7.ru/infusions/uip_panel/images/ico_keys.png
31.31.198.198200 OK 744 B URL HTTP/1.1 faq7.ru/infusions/uip_panel/images/ico_keys.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 93c3eb002f4070b939e29d0a31a90faa
535d2f6d1eec09ca83a7cae2136c9d1326e6daab
45bebc89c3d3b8cde90edafe534b38bbbe75b6494bc8e9dabba704612c5eb603
GET /infusions/uip_panel/images/ico_keys.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 744
Connection: keep-alive
Last-Modified: Sat, 07 May 2011 19:05:42 GMT
Accept-Ranges: bytes
faq7.ru/infusions/uip_panel/images/arrowdown.png
31.31.198.198200 OK 1.3 kB URL HTTP/1.1 faq7.ru/infusions/uip_panel/images/arrowdown.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 1f332485c3a13a13256ceb2ba0a2ec1a
231ecee1dfa78e20354882dafc58db490816f242
0e0e531bcd1004ad693a04bed51acc9492c65de807fc3684e654a53945931f26
GET /infusions/uip_panel/images/arrowdown.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 1337
Connection: keep-alive
Last-Modified: Tue, 05 Jul 2016 00:22:04 GMT
Accept-Ranges: bytes
faq7.ru/images/smiley/cool.gif
31.31.198.198200 OK 1.8 kB URL HTTP/1.1 faq7.ru/images/smiley/cool.gif
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type GIF image data, version 89a, 17 x 17\012- data
Hash 299725ce2012b28cac6a7d383b270617
115cba34d2047f06d1e93cd8f316ad814156175f
036ffc84dfc9b92869428c377badc218ce52399bd47a6d9bff3073269cb8230b
GET /images/smiley/cool.gif HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/gif
Content-Length: 1831
Connection: keep-alive
Last-Modified: Wed, 13 Apr 2011 19:41:26 GMT
Accept-Ranges: bytes
faq7.ru/images/etxt_3.gif
31.31.198.198200 OK 2.6 kB URL HTTP/1.1 faq7.ru/images/etxt_3.gif
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type GIF image data, version 89a, 180 x 60\012- data
Hash b6106b860137c508605a0b357504b3dd
ccf308d2ca24fdd0963c912c3c148534e42c90e2
671847e34c95fd887646a115f0ff84c06b7feb7b98d13b77a88ec08e9f55ff14
GET /images/etxt_3.gif HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/gif
Content-Length: 2565
Connection: keep-alive
Last-Modified: Sun, 27 Mar 2022 16:38:59 GMT
Accept-Ranges: bytes
faq7.ru/images/loveplanet.gif
31.31.198.198200 OK 6.2 kB URL HTTP/1.1 faq7.ru/images/loveplanet.gif
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type GIF image data, version 89a, 120 x 60\012- data
Hash 893db3a9bf6afc47ed38629743e33ff0
d64a4878b97a48a0f842c48ea9aa70c9e491a0e2
9e2c4204cdf51db95c6d15247213c72e74d1972493cab534e118da77e7edbc06
GET /images/loveplanet.gif HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/gif
Content-Length: 6188
Connection: keep-alive
Last-Modified: Sun, 27 Mar 2022 16:44:45 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/cap.png
31.31.198.198200 OK 223 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/cap.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 25 x 39, 8-bit colormap, non-interlaced\012- data
Hash 9ab4e24fd164f38cb35884f11f162d96
ce87410a486af0b72b6ae44dd32b33b67f956a85
1eb934fba42e48ccdb2afe5d2ab8f55944a0983f48e50c89d85137b0059a32a4
GET /themes/faq7_new/images/cap.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461; _ym_uid=166476406325431108; _ym_d=1664764063
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 223
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/infusions/ulogin/img/button.png
31.31.198.198200 OK 3.5 kB URL HTTP/1.1 faq7.ru/infusions/ulogin/img/button.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 187 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 4c5012f6e5081bdd7fcc8d113a5ebaa1
4e0989f67487426bf07a9d2d7f60ea64426b908a
13f59d25bdc5ea9494f88da550c526f8e11567f42e42ab3e71cee558b75a8027
GET /infusions/ulogin/img/button.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 3473
Connection: keep-alive
Last-Modified: Tue, 06 Mar 2012 18:25:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/cap-left.png
31.31.198.198200 OK 344 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/cap-left.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 4 x 39, 8-bit/color RGBA, non-interlaced\012- data
Hash 04ef82b4e31ab9658d0d26e177ce2960
2df7fbf73535e30f62cdf9161ead1e7578c81930
0af48db9a727d245daa8cbacdf5c5f9186e44ec147c7cdc46922d4ef47124b55
GET /themes/faq7_new/images/cap-left.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461; _ym_uid=166476406325431108; _ym_d=1664764063
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 344
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/cap-lefticon.png
31.31.198.198200 OK 1.9 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/cap-lefticon.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 30 x 39, 8-bit/color RGBA, non-interlaced\012- data
Hash de36d13a12ccdc85f91b8dea9e61a725
48f05037c6e228b4a9023d0d14e102c2b73cd5ee
c310c544414bbb78f4ef6123a7909367bf5d347366d5de3cdcd906a73e54637d
GET /themes/faq7_new/images/cap-lefticon.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461; _ym_uid=166476406325431108; _ym_d=1664764063
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 1930
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/cap-right.png
31.31.198.198200 OK 340 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/cap-right.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 4 x 39, 8-bit colormap, non-interlaced\012- data
Hash ec3858bb7e54481f53d195592b16cced
c54e5d98d566cedd702db72558e1b21a23dd809e
e7b353ae7fbb5ec9ee656235aaae17694009cac9c4af661af56345d69f994434
GET /themes/faq7_new/images/cap-right.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461; _ym_uid=166476406325431108; _ym_d=1664764063
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 340
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/mainbody-right.png
31.31.198.198200 OK 3.6 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/mainbody-right.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 4 x 10, 8-bit colormap, non-interlaced\012- data
Hash f5da826e583edd665f215a5d3b5d14cd
93c8e1987575972040a444d1aa95d96236b9aaf3
6c79b1d1aa7fe6b2dad8d98825a7b7018e988f5f3e9154288877c306820b201e
GET /themes/faq7_new/images/mainbody-right.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461; _ym_uid=166476406325431108; _ym_d=1664764063
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 3579
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
tab.reformal.ru/T9GC0LfRi9Cy0Ysg0Lgg0L%252FRgNC10LTQu9C%252B0LbQtdC90LjRjw==/FFFFFF/2a94cfe6511106e7a48d0af3904e3090/left/1/tab.png
139.162.151.130200 OK 6.3 kB URL HTTP/1.1 tab.reformal.ru/T9GC0LfRi9Cy0Ysg0Lgg0L%252FRgNC10LTQu9C%252B0LbQtdC90LjRjw==/FFFFFF/2a94cfe6511106e7a48d0af3904e3090/left/1/tab.png
IP 139.162.151.130:0
File type PNG image data, 21 x 217, 16-bit/color RGBA, non-interlaced\012- data
Hash d04157421f816095076e9907e0284d90
075d70eb0180148c0562fcdb109e82190eea2683
7cf04ed5fa482c73c10c6bca22d9ff45cc4c57311abedfe6f433a10d1ec5190f
GET /T9GC0LfRi9Cy0Ysg0Lgg0L%252FRgNC10LTQu9C%252B0LbQtdC90LjRjw==/FFFFFF/2a94cfe6511106e7a48d0af3904e3090/left/1/tab.png HTTP/1.1
Host: tab.reformal.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 6291
Connection: keep-alive
Last-Modified: Sat, 24 Sep 2022 14:33:36 GMT
Expires: Thu, 13 Oct 2022 02:27:43 GMT
Cache-Control: max-age=864000
log.reformal.ru/st.php?w=3&pid=189983
139.162.151.130200 OK 43 B URL HTTP/1.1 log.reformal.ru/st.php?w=3&pid=189983
IP 139.162.151.130:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 45cf913e5d9d3c9b2058033056d3dd23
30cb5d44e276505b1d4c053c8b25525da228db30
42b976597a2d977d0e300f6d06bc903db389e5c112d33c1c8c249690a522d9f2
GET /st.php?w=3&pid=189983 HTTP/1.1
Host: log.reformal.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e84365668b3024efb04b7c9c6217f3bd
9bd1c7d53170fe1bd8ed0d3b0b5de86a8047dd85
4793996fd1b011f7407ba5352caf03e0b71b01edd3d5c6416a65946336d23693
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4793996FD1B011F7407BA5352CAF03E0B71B01EDD3D5C6416A65946336D23693"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6323
Expires: Mon, 03 Oct 2022 04:13:06 GMT
Date: Mon, 03 Oct 2022 02:27:43 GMT
Connection: keep-alive
reformal.ru/human_check/189983|aHR0cDovL2ZhcTcucnUvZXJyb3IucGhwP2NvZGU9NDA0||33369
139.162.151.130200 OK 43 B URL HTTP/1.1 reformal.ru/human_check/189983|aHR0cDovL2ZhcTcucnUvZXJyb3IucGhwP2NvZGU9NDA0||33369
IP 139.162.151.130:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /human_check/189983|aHR0cDovL2ZhcTcucnUvZXJyb3IucGhwP2NvZGU9NDA0||33369 HTTP/1.1
Host: reformal.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Fri, 20 Dec 2013 07:24:29 GMT
Connection: keep-alive
ETag: "52b3f0ad-2b"
Accept-Ranges: bytes
www.acint.net/aci.js
176.9.9.10200 OK 7.5 kB IP 176.9.9.10:0
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1408)
Hash ae0aab6c5a2ae2e1168e74f6e6ae4741
2c00f69ee4bbe2ec96c0f7bb33b5f827a6195af8
a47a88a9b6c7635e5074c25c6e3c92f399fdf8772376e94f077167241e59f9de
GET /aci.js HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Mon, 03 Oct 2022 02:27:43 GMT
content-type: application/x-javascript
content-length: 7461
last-modified: Wed, 08 Jun 2022 16:58:23 GMT
etag: "62a0d52f-1d25"
content-encoding: gzip
expires: Mon, 03 Oct 2022 14:27:43 GMT
cache-control: max-age=43200
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A116219%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1067%7D&sid=633a489f-32f1-a85g-wt25-bqd5b5s9fbyb&ref=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=1664764063
176.9.9.10200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A116219%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1067%7D&sid=633a489f-32f1-a85g-wt25-bqd5b5s9fbyb&ref=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=1664764063
IP 176.9.9.10:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A116219%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1067%7D&sid=633a489f-32f1-a85g-wt25-bqd5b5s9fbyb&ref=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=1664764063 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 03 Oct 2022 02:27:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=LgRybWM6SJ+nAADoWQ8kAqCJNcn0Mjy2HG3FWthDDDDlTNfv; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
media.reformal.ru/widgets/v3/gl.png
139.162.151.130200 OK 121 B URL HTTP/1.1 media.reformal.ru/widgets/v3/gl.png
IP 139.162.151.130:0
File type PNG image data, 6 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 41d0923d21a3d3cee146c41ece00fe7c
524da78bb3babe8f136edfe669dd48e1e7b7f004
aa1740b3e050627a689cba17a89712fa5d3cd4e814f2347c64e7f2d2b1a1c281
GET /widgets/v3/gl.png HTTP/1.1
Host: media.reformal.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: image/png
Content-Length: 121
Last-Modified: Wed, 27 Apr 2016 09:51:47 GMT
Connection: keep-alive
ETag: "57208bb3-79"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
share.pluso.ru/process?act=counter&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&w=1280&h=1024&ref=&user=84719068&uid=3386703247126394343&k=CSZRGTrbrfQOvbNq&first=1
37.200.67.211200 OK 125 B URL HTTP/1.1 share.pluso.ru/process?act=counter&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&w=1280&h=1024&ref=&user=84719068&uid=3386703247126394343&k=CSZRGTrbrfQOvbNq&first=1
IP 37.200.67.211:0
ASN #49505 OOO Network of data-centers Selectel
File type ASCII text, with no line terminators
Hash 180be938170f0e237ea09054f4224745
4583b9f532b8a33bac2a350a103a74f315eab8bd
526d829656d2ba42de073e5e1e1057a661724d06b1322dc33dea874b60d2adcc
GET /process?act=counter&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&w=1280&h=1024&ref=&user=84719068&uid=3386703247126394343&k=CSZRGTrbrfQOvbNq&first=1 HTTP/1.1
Host: share.pluso.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:29:43 GMT
Content-Type: application/javascript
Content-Length: 125
Connection: keep-alive
Keep-Alive: timeout=5
Set-Cookie: pluso=3386703247126394343; expires=Tue, 03 Oct 2023 02:29:43 GMT; path=/; domain=.pluso.ru
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
share.pluso.ru/img/plus.png
37.200.67.211200 OK 2.4 kB URL HTTP/1.1 share.pluso.ru/img/plus.png
IP 37.200.67.211:0
ASN #49505 OOO Network of data-centers Selectel
File type PNG image data, 54 x 105, 8-bit/color RGBA, non-interlaced\012- data
Hash 41284080ec1a6df8b48a92d034c5f200
1841522b6e23d66a1e89cdda280b7a4772297bed
784eb14774a9a419af32c02c2d16cf197ef2701afc2ea65b58c3a574ed5458bd
GET /img/plus.png HTTP/1.1
Host: share.pluso.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:29:43 GMT
Content-Type: image/png
Content-Length: 2442
Last-Modified: Mon, 13 Apr 2015 11:02:40 GMT
Connection: keep-alive
Keep-Alive: timeout=5
ETag: "552ba250-98a"
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
www.acint.net/mc/?dp=14
176.9.9.10302 Moved Temporarily 142 B IP 176.9.9.10:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /mc/?dp=14 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/mc/?dp=14
www.acint.net/hit/?v=0.4.0&uid=8e5776e3-4429-43ad-bd36-5ed28addfb70&dp=14&tz=%2B00%3A00&nc=97644926&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=&rs=1280x1024&t=FAQ7.ru&oE=1&oP=1&dT=2022-10-03T02%3A27%3A43.454&fu=940a52e5-36ef-4064-b9e8-d34f14647b88
176.9.9.10302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/hit/?v=0.4.0&uid=8e5776e3-4429-43ad-bd36-5ed28addfb70&dp=14&tz=%2B00%3A00&nc=97644926&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=&rs=1280x1024&t=FAQ7.ru&oE=1&oP=1&dT=2022-10-03T02%3A27%3A43.454&fu=940a52e5-36ef-4064-b9e8-d34f14647b88
IP 176.9.9.10:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /hit/?v=0.4.0&uid=8e5776e3-4429-43ad-bd36-5ed28addfb70&dp=14&tz=%2B00%3A00&nc=97644926&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=&rs=1280x1024&t=FAQ7.ru&oE=1&oP=1&dT=2022-10-03T02%3A27%3A43.454&fu=940a52e5-36ef-4064-b9e8-d34f14647b88 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Mon, 03 Oct 2022 02:27:43 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/hit/?v=0.4.0&uid=8e5776e3-4429-43ad-bd36-5ed28addfb70&dp=14&tz=%2B00%3A00&nc=97644926&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=&rs=1280x1024&t=FAQ7.ru&oE=1&oP=1&dT=2022-10-03T02%3A27%3A43.454&fu=940a52e5-36ef-4064-b9e8-d34f14647b88
share.pluso.ru/img/pluso-like/square/big/06.png
37.200.67.211200 OK 47 kB URL HTTP/1.1 share.pluso.ru/img/pluso-like/square/big/06.png
IP 37.200.67.211:0
ASN #49505 OOO Network of data-centers Selectel
File type PNG image data, 1888 x 40, 8-bit/color RGBA, interlaced\012- data
Hash b59ccd42ad5ff8a5ea01302aa5cc08c3
c4976003a9211a1477a819fee5aeba330bb4b3b1
698e02bba9989882c071a26a99e59f780d695fa27a2af8a57f91a19737467bbc
GET /img/pluso-like/square/big/06.png HTTP/1.1
Host: share.pluso.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:29:43 GMT
Content-Type: image/png
Content-Length: 46574
Last-Modified: Mon, 13 Apr 2015 11:02:40 GMT
Connection: keep-alive
Keep-Alive: timeout=5
ETag: "552ba250-b5ee"
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
www.acint.net/hit/?v=0.4.0&uid=8e5776e3-4429-43ad-bd36-5ed28addfb70&dp=14&tz=%2B00%3A00&nc=97644926&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=&rs=1280x1024&t=FAQ7.ru&oE=1&oP=1&dT=2022-10-03T02%3A27%3A43.454&fu=940a52e5-36ef-4064-b9e8-d34f14647b88
176.9.9.10200 OK 43 B URL HTTP/2 www.acint.net/hit/?v=0.4.0&uid=8e5776e3-4429-43ad-bd36-5ed28addfb70&dp=14&tz=%2B00%3A00&nc=97644926&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=&rs=1280x1024&t=FAQ7.ru&oE=1&oP=1&dT=2022-10-03T02%3A27%3A43.454&fu=940a52e5-36ef-4064-b9e8-d34f14647b88
IP 176.9.9.10:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hit/?v=0.4.0&uid=8e5776e3-4429-43ad-bd36-5ed28addfb70&dp=14&tz=%2B00%3A00&nc=97644926&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=&rs=1280x1024&t=FAQ7.ru&oE=1&oP=1&dT=2022-10-03T02%3A27%3A43.454&fu=940a52e5-36ef-4064-b9e8-d34f14647b88 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Cookie: aid=LgRybWM6SJ+nAADoWQ8kAqCJNcn0Mjy2HG3FWthDDDDlTNfv
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 03 Oct 2022 02:27:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/mc/?dp=14
176.9.9.10200 OK 1.5 kB IP 176.9.9.10:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash ba526aa91a308ae5eddaa0b221ffb073
131195ea464236c13ea8ed4f7f3c227e0a1448d7
93b461c7fdbe28f721f06fbcf7673cb9a72c751dad45e49bf5d8e5f2949abe24
GET /mc/?dp=14 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Cookie: aid=LgRybWM6SJ+nAADoWQ8kAqCJNcn0Mjy2HG3FWthDDDDlTNfv
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 03 Oct 2022 02:27:43 GMT
content-type: text/html
set-cookie: cSyncDp7v2=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp14v3=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp17=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp32=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp45v3=1664764063; expires=Tue, 04-Oct-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp53=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp54v2=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp62=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp67v2=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp68=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp71=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp77=1664764063; expires=Mon, 17-Oct-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp84=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp85=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp95v3=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp101=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp104v2=1664764063; expires=Mon, 17-Oct-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp107=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp110=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp111v2=1664764063; expires=Mon, 17-Oct-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp112v2=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp125v2=1664764063; expires=Tue, 18-Oct-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp126=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp127=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp129=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp136v2=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp138=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp144=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp146=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp148=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp149=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp151=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp178=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp179=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp186=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp221=1664764063; expires=Wed, 02-Nov-22 02:27:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
content-encoding: gzip
X-Firefox-Spdy: h2
dm-eu.hybrid.ai/match?id=106&vid=6D72042E9F483A63E80000A702240F59
37.18.103.21204 No Content 0 B URL HTTP/2 dm-eu.hybrid.ai/match?id=106&vid=6D72042E9F483A63E80000A702240F59
IP 37.18.103.21:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /match?id=106&vid=6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: dm-eu.hybrid.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 03 Oct 2022 02:27:44 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
set-cookie: vid=1a5d0e87426541d82643; expires=Tue, 03 Oct 2023 02:27:42 GMT; domain=.hybrid.ai; path=/; samesite=none
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 520
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: Hybrid Web Server
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 254ab2c4e371d830c0370ad5b0f920aa
9434c92202566c34aa62446edb33e0cd838d829d
557a2bff65bd067a9dc45e25edbc16bd95ba87672d9904f8f7acbc2e47e8e8e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "557A2BFF65BD067A9DC45E25EDBC16BD95BA87672D9904F8F7ACBC2E47E8E8E7"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6462
Expires: Mon, 03 Oct 2022 04:15:26 GMT
Date: Mon, 03 Oct 2022 02:27:44 GMT
Connection: keep-alive
ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
193.3.184.212302 Moved Temporarily 142 B URL HTTP/1.1 ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
IP 193.3.184.212:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/match?dp=14&euid=88B803C1A0483A6362005B7E02FFB3EB
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=wQO4iGM6SKB+WwBi67P/Aj30gjntGPld1QSTYKjTxPZoRC77; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 86d0996ac84734558063f4cd4e83057a
408f1ef8dd696a463161a851f7efb7915be8c65f
2b1c469f70ef758e999e2765d3c478cd1b26d948712144cd309beb930dd32784
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2B1C469F70EF758E999E2765D3C478CD1B26D948712144CD309BEB930DD32784"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11798
Expires: Mon, 03 Oct 2022 05:44:22 GMT
Date: Mon, 03 Oct 2022 02:27:44 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash db52ea53adcd2cb456c7a457499e3a03
a82c733ecf40d6b57d531e3cde8da8d064843f0a
f3507054e91e89a459ed3d334f892918a8a6930293ca3320e08793e3c65363f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3507054E91E89A459ED3D334F892918A8A6930293CA3320E08793E3C65363F3"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11185
Expires: Mon, 03 Oct 2022 05:34:09 GMT
Date: Mon, 03 Oct 2022 02:27:44 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d198482f6282831cbc3265312e035715
3d2b75687076cef34b095750006c846d241ef82b
70a11fd722ac239ee1bf9672226662da89b6b86c9cd04d961fb313a7a7860b5e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "70A11FD722AC239EE1BF9672226662DA89B6B86C9CD04D961FB313A7A7860B5E"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2327
Expires: Mon, 03 Oct 2022 03:06:31 GMT
Date: Mon, 03 Oct 2022 02:27:44 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 807b33b38950552852230343f27e442a
665da840429c50d747a3ee9932ef6e444dd89800
284dcd9f78e065b942319fece94e4c363ac59bb47cd0dc8f91e0e2d1e98c5814
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "284DCD9F78E065B942319FECE94E4C363AC59BB47CD0DC8F91E0E2D1E98C5814"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1110
Expires: Mon, 03 Oct 2022 02:46:14 GMT
Date: Mon, 03 Oct 2022 02:27:44 GMT
Connection: keep-alive
sync.upravel.com/sape/sync
78.46.16.13302 Found 0 B URL HTTP/2 sync.upravel.com/sape/sync
IP 78.46.16.13:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Mon, 03 Oct 2022 02:27:44 GMT
content-type: image/png
content-length: 0
location: https://sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
set-cookie: session_tptc=1664764064159;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
session_tptc-legacy=1664764064159;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
sync.republer.com/match?dsp=sape
23.88.82.46204 No Content 0 B URL HTTP/2 sync.republer.com/match?dsp=sape
IP 23.88.82.46:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?dsp=sape HTTP/1.1
Host: sync.republer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Mon, 03 Oct 2022 02:27:44 GMT
strict-transport-security: max-age=0
X-Firefox-Spdy: h2
s.uuidksinc.net/match/396/?remote_uid=6D72042E9F483A63E80000A702240F59
31.220.27.134302 Found 0 B URL HTTP/2 s.uuidksinc.net/match/396/?remote_uid=6D72042E9F483A63E80000A702240F59
IP 31.220.27.134:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/396/?remote_uid=6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: s.uuidksinc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.19.0
date: Mon, 03 Oct 2022 02:27:44 GMT
content-length: 0
location: https://www.acint.net/match?dp=127&euid=rR237MAZzmMEUD4AV5qc
set-cookie: jcsuuid=rR237MAZzmMEUD4AV5qc; expires=Tue, 03 Oct 2023 02:27:44 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP 104.18.20.226:0
Hash fe09c84b40ebea981ac1c04172e2119d
749969b5ea580810560bdd120a032bb662cde5d0
ffe00613e12c83cdcce27bb0f288f96f4c842630bb760802978e846106fcbc24
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Thu, 06 Oct 2022 23:04:02 GMT
ETag: "749969b5ea580810560bdd120a032bb662cde5d0"
Last-Modified: Sun, 02 Oct 2022 23:04:03 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3332
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75423d892ff6b4ee-OSL
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 44db453ff0cf93a62b0a589e64f73cfc
ae3cd3a135e5b587028bef4a124188e1a6b8895c
b1087c4e6de697ad5ff519d4a35bb1f3f793e01c6bae9a452d30b4ee5e1c306a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B1087C4E6DE697AD5FF519D4A35BB1F3F793E01C6BAE9A452D30B4EE5E1C306A"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11350
Expires: Mon, 03 Oct 2022 05:36:54 GMT
Date: Mon, 03 Oct 2022 02:27:44 GMT
Connection: keep-alive
ocsp.globalsign.com/gsgccr3dvtlsca2020
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP 104.18.20.226:0
Hash 3e261c56e8a73e26fce6543e6cd86d4b
112774bbd45868fc09431307bb3d5308207c6c0d
a1d6295929635dc731bd3bfb8f862ea6a7c53be46a6cec1422ef55d4fae81709
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Thu, 06 Oct 2022 23:28:47 GMT
ETag: "112774bbd45868fc09431307bb3d5308207c6c0d"
Last-Modified: Sun, 02 Oct 2022 23:28:48 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3386
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75423d893fe81c06-OSL
stat.adlabs.ru/merge_gpsid/?sid=50&id=6D72042E9F483A63E80000A702240F59
109.248.237.36302 Found 0 B URL HTTP/2 stat.adlabs.ru/merge_gpsid/?sid=50&id=6D72042E9F483A63E80000A702240F59
IP 109.248.237.36:0
ASN #201009 Centre of server systems Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /merge_gpsid/?sid=50&id=6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: stat.adlabs.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Mon, 03 Oct 2022 02:15:07 GMT
content-length: 0
location: //adlmerge.com/merge_gpsid/?sid=50&id=6D72042E9F483A63E80000A702240F59
X-Firefox-Spdy: h2
faq7.ru/themes/faq7_new/images/mainbody-footerleft.png
31.31.198.198200 OK 296 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/mainbody-footerleft.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 4 x 39, 8-bit colormap, non-interlaced\012- data
Hash f8f86d18ec78ed25bdd218e4a38d88db
8eaa0d68ae0c721e668df0175ca286cbf607e0bb
f2b75449667e52afc0349201fa02cb9d1bac0f678e775f2776436452db8e0a96
GET /themes/faq7_new/images/mainbody-footerleft.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461; _ym_uid=166476406325431108; _ym_d=1664764063
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: image/png
Content-Length: 296
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/mainbody-center.png
31.31.198.198200 OK 219 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/mainbody-center.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 10 x 39, 8-bit colormap, non-interlaced\012- data
Hash 8aa7ee36484f1e26f88ebdcdc113c5e6
80b150afae30bff4862ecf2b5d8997625e1c54b8
eb45816c3e3f74874a6a8b01fd024284c12be851dde3ebef15ac0f7dcac41af7
GET /themes/faq7_new/images/mainbody-center.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461; _ym_uid=166476406325431108; _ym_d=1664764063
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: image/png
Content-Length: 219
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/footer_sol.png
31.31.198.198200 OK 1.4 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/footer_sol.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 110 x 89, 8-bit/color RGBA, non-interlaced\012- data
Hash 3225d1d8cb532b4ccb66587b66e932f5
a2c204ae5c5816497193ed6fc23c589cd9490bf3
367ea106144396bc041b910dc42957084bc61c37e35617957fb02cc312f42c41
GET /themes/faq7_new/images/footer_sol.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461; _ym_uid=166476406325431108; _ym_d=1664764063
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: image/png
Content-Length: 1358
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/mainbody-footerright.png
31.31.198.198200 OK 299 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/mainbody-footerright.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 4 x 39, 8-bit colormap, non-interlaced\012- data
Hash 2a294771672f47a14aa9fffba46aba39
423418df8cd4b1f09bf4a614b3c1d58f2970e94e
bfa1210cd7b2874fd9052e019fc515ae1c25bf88a1cd8c14d2cb287a7d9c1f20
GET /themes/faq7_new/images/mainbody-footerright.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461; _ym_uid=166476406325431108; _ym_d=1664764063
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: image/png
Content-Length: 299
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/infusions/shoutbox_panel/sb_imgs.png
31.31.198.198200 OK 4.5 kB URL HTTP/1.1 faq7.ru/infusions/shoutbox_panel/sb_imgs.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 160 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 8249d38d90e11a4ff32d3d5d9200e2f2
1c3dcb719ac9c1437291a811ca074cf3af7b97b4
040fdf6c825bec3f191d4c85d48c099558fb913327c37b95861a8d495587b92f
GET /infusions/shoutbox_panel/sb_imgs.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/infusions/shoutbox_panel/ash.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461; _ym_uid=166476406325431108; _ym_d=1664764063
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: image/png
Content-Length: 4461
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 18:39:40 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/mainbody-right2.png
31.31.198.198200 OK 2.8 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/mainbody-right2.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 205 x 10, 8-bit/color RGBA, non-interlaced\012- data
Hash 2b4debf8295bfbfd9f7e1ad03f355a86
734b6d72c293db33416f479c13670dc95885ed98
e7075b79f423d310aceef8a911871d99c4efa5386e598e252e3614e501a9843a
GET /themes/faq7_new/images/mainbody-right2.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461; _ym_uid=166476406325431108; _ym_d=1664764063
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: image/png
Content-Length: 2840
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ccffd24dc8bb69bf7a3e0abb29428721
a3cf42817454d11bfe62ced1c2842cc580c79ef8
86f2458eb777ad84c76265e8ff4630508573d5baaca62f3be33d1bd712660ab3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "86F2458EB777AD84C76265E8FF4630508573D5BAACA62F3BE33D1BD712660AB3"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9474
Expires: Mon, 03 Oct 2022 05:05:38 GMT
Date: Mon, 03 Oct 2022 02:27:44 GMT
Connection: keep-alive
acint.net/match?dp=14&euid=88B803C1A0483A6362005B7E02FFB3EB
176.9.9.10200 OK 43 B URL HTTP/2 acint.net/match?dp=14&euid=88B803C1A0483A6362005B7E02FFB3EB
IP 176.9.9.10:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=14&euid=88B803C1A0483A6362005B7E02FFB3EB HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=LgRybWM6SJ+nAADoWQ8kAqCJNcn0Mjy2HG3FWthDDDDlTNfv; cSyncDp7v2=1664764063; cSyncDp14v3=1664764063; cSyncDp17=1664764063; cSyncDp32=1664764063; cSyncDp45v3=1664764063; cSyncDp53=1664764063; cSyncDp54v2=1664764063; cSyncDp62=1664764063; cSyncDp67v2=1664764063; cSyncDp68=1664764063; cSyncDp71=1664764063; cSyncDp77=1664764063; cSyncDp84=1664764063; cSyncDp85=1664764063; cSyncDp95v3=1664764063; cSyncDp101=1664764063; cSyncDp104v2=1664764063; cSyncDp107=1664764063; cSyncDp110=1664764063; cSyncDp111v2=1664764063; cSyncDp112v2=1664764063; cSyncDp125v2=1664764063; cSyncDp126=1664764063; cSyncDp127=1664764063; cSyncDp129=1664764063; cSyncDp136v2=1664764063; cSyncDp138=1664764063; cSyncDp144=1664764063; cSyncDp146=1664764063; cSyncDp148=1664764063; cSyncDp149=1664764063; cSyncDp151=1664764063; cSyncDp178=1664764063; cSyncDp179=1664764063; cSyncDp186=1664764063; cSyncDp221=1664764063
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 03 Oct 2022 02:27:44 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
185.147.80.35302 Found 0 B URL HTTP/1.1 ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
IP 185.147.80.35:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D HTTP/1.1
Host: ssp.bestssp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.16.1
Date: Mon, 03 Oct 2022 02:27:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.acint.net/match?dp=95&euid=HBWRVLNV
Set-Cookie: uid=HBWRVLNV; Expires=Mon, 03 Oct 2032 00:00:00 GMT; mf2=1; Expires=Wed, 02 Nov 2022 00:00:00 GMT;
sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=6D72042E9F483A63E80000A702240F59
136.243.148.229302 Found 0 B URL HTTP/2 sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=6D72042E9F483A63E80000A702240F59
IP 136.243.148.229:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: sync.1dmp.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Mon, 03 Oct 2022 02:27:44 GMT
content-length: 0
expires: 0
cache-control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
set-cookie: uid=f6552fe0-42c2-11ed-acfd-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Tue, 03 Oct 2023 02:27:44 GMT; SameSite=None; Secure
uid-legacy=f6552fe0-42c2-11ed-acfd-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Tue, 03 Oct 2023 02:27:44 GMT
location: /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=6D72042E9F483A63E80000A702240F59&cs=1
X-Firefox-Spdy: h2
acint.net/match?dp=110&euid=9b65c4fe44db452d8218fd7b958c3b8c
176.9.9.10200 OK 43 B URL HTTP/2 acint.net/match?dp=110&euid=9b65c4fe44db452d8218fd7b958c3b8c
IP 176.9.9.10:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=110&euid=9b65c4fe44db452d8218fd7b958c3b8c HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=LgRybWM6SJ+nAADoWQ8kAqCJNcn0Mjy2HG3FWthDDDDlTNfv; cSyncDp7v2=1664764063; cSyncDp14v3=1664764063; cSyncDp17=1664764063; cSyncDp32=1664764063; cSyncDp45v3=1664764063; cSyncDp53=1664764063; cSyncDp54v2=1664764063; cSyncDp62=1664764063; cSyncDp67v2=1664764063; cSyncDp68=1664764063; cSyncDp71=1664764063; cSyncDp77=1664764063; cSyncDp84=1664764063; cSyncDp85=1664764063; cSyncDp95v3=1664764063; cSyncDp101=1664764063; cSyncDp104v2=1664764063; cSyncDp107=1664764063; cSyncDp110=1664764063; cSyncDp111v2=1664764063; cSyncDp112v2=1664764063; cSyncDp125v2=1664764063; cSyncDp126=1664764063; cSyncDp127=1664764063; cSyncDp129=1664764063; cSyncDp136v2=1664764063; cSyncDp138=1664764063; cSyncDp144=1664764063; cSyncDp146=1664764063; cSyncDp148=1664764063; cSyncDp149=1664764063; cSyncDp151=1664764063; cSyncDp178=1664764063; cSyncDp179=1664764063; cSyncDp186=1664764063; cSyncDp221=1664764063
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 03 Oct 2022 02:27:44 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
78.46.16.13302 Found 0 B URL HTTP/2 sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
IP 78.46.16.13:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0 HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: session_tptc=1664764064159
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 03 Oct 2022 02:27:44 GMT
content-type: image/png
content-length: 0
location: https://4ef11cd0-22e9-4027-ac00-349692838d9a.sync.upravel.com/sape/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyIsImh0dHBzOi8vd3d3LmFjaW50Lm5ldC8iXX19
set-cookie: user_id=4ef11cd0-22e9-4027-ac00-349692838d9a;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
user_id-legacy=4ef11cd0-22e9-4027-ac00-349692838d9a;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
www.acint.net/match?dp=127&euid=rR237MAZzmMEUD4AV5qc
176.9.9.10200 OK 43 B URL HTTP/2 www.acint.net/match?dp=127&euid=rR237MAZzmMEUD4AV5qc
IP 176.9.9.10:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=127&euid=rR237MAZzmMEUD4AV5qc HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=LgRybWM6SJ+nAADoWQ8kAqCJNcn0Mjy2HG3FWthDDDDlTNfv; cSyncDp7v2=1664764063; cSyncDp14v3=1664764063; cSyncDp17=1664764063; cSyncDp32=1664764063; cSyncDp45v3=1664764063; cSyncDp53=1664764063; cSyncDp54v2=1664764063; cSyncDp62=1664764063; cSyncDp67v2=1664764063; cSyncDp68=1664764063; cSyncDp71=1664764063; cSyncDp77=1664764063; cSyncDp84=1664764063; cSyncDp85=1664764063; cSyncDp95v3=1664764063; cSyncDp101=1664764063; cSyncDp104v2=1664764063; cSyncDp107=1664764063; cSyncDp110=1664764063; cSyncDp111v2=1664764063; cSyncDp112v2=1664764063; cSyncDp125v2=1664764063; cSyncDp126=1664764063; cSyncDp127=1664764063; cSyncDp129=1664764063; cSyncDp136v2=1664764063; cSyncDp138=1664764063; cSyncDp144=1664764063; cSyncDp146=1664764063; cSyncDp148=1664764063; cSyncDp149=1664764063; cSyncDp151=1664764063; cSyncDp178=1664764063; cSyncDp179=1664764063; cSyncDp186=1664764063; cSyncDp221=1664764063
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 03 Oct 2022 02:27:44 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sap1&uid=6D72042E9F483A63E80000A702240F59
31.172.81.160302 Moved Temporarily 0 B URL HTTP/1.1 sync.bumlam.com/?src=sap1&uid=6D72042E9F483A63E80000A702240F59
IP 31.172.81.160:0
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&uid=6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiRmNjU4MTRjNi00MmMyLTExZWQtODY0NC0wMDI1OTBjODI0Mzc*; Path=/; Expires=Sun, 28 Sep 2042 02:27:44 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync.bumlam.com/?src=sap1&s_data=CAIQARigkemZBmIgNkQ3MjA0MkU5RjQ4M0E2M0U4MDAwMEE3MDIyNDBGNTmiARD2WBTGQsIR7YZEACWQyCQ3
ETag: f65814c6-42c2-11ed-8644-002590c82437
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3e2da48a16dee66b36c15154311425da
7e2cb99fd93276714dd0ad8b1b7791d16fc78291
b51bf458292b0789c73e8ca5a966db73d4bac842b1b9b639824f7c8ad33b215a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B51BF458292B0789C73E8CA5A966DB73D4BAC842B1B9B639824F7C8AD33B215A"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6913
Expires: Mon, 03 Oct 2022 04:22:57 GMT
Date: Mon, 03 Oct 2022 02:27:44 GMT
Connection: keep-alive
faq7.ru/themes/templates/scrolltotop.png
31.31.198.198200 OK 1.8 kB URL HTTP/1.1 faq7.ru/themes/templates/scrolltotop.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 56 x 30, 8-bit/color RGB, interlaced\012- data
Hash b1c26b831b25fd49cc834fb22cd7c851
380070d45e51d3a1e55999eafe2d16abf9640306
0ba5411b9a88b717e6d756040926e6c3a112a548c5257d3869dee784f66d200b
GET /themes/templates/scrolltotop.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: image/png
Content-Length: 1834
Connection: keep-alive
Last-Modified: Tue, 24 Sep 2013 13:55:40 GMT
Accept-Ranges: bytes
www.acint.net/match?dp=129&euid=s6soni19s1
176.9.9.10200 OK 43 B URL HTTP/2 www.acint.net/match?dp=129&euid=s6soni19s1
IP 176.9.9.10:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=129&euid=s6soni19s1 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=LgRybWM6SJ+nAADoWQ8kAqCJNcn0Mjy2HG3FWthDDDDlTNfv; cSyncDp7v2=1664764063; cSyncDp14v3=1664764063; cSyncDp17=1664764063; cSyncDp32=1664764063; cSyncDp45v3=1664764063; cSyncDp53=1664764063; cSyncDp54v2=1664764063; cSyncDp62=1664764063; cSyncDp67v2=1664764063; cSyncDp68=1664764063; cSyncDp71=1664764063; cSyncDp77=1664764063; cSyncDp84=1664764063; cSyncDp85=1664764063; cSyncDp95v3=1664764063; cSyncDp101=1664764063; cSyncDp104v2=1664764063; cSyncDp107=1664764063; cSyncDp110=1664764063; cSyncDp111v2=1664764063; cSyncDp112v2=1664764063; cSyncDp125v2=1664764063; cSyncDp126=1664764063; cSyncDp127=1664764063; cSyncDp129=1664764063; cSyncDp136v2=1664764063; cSyncDp138=1664764063; cSyncDp144=1664764063; cSyncDp146=1664764063; cSyncDp148=1664764063; cSyncDp149=1664764063; cSyncDp151=1664764063; cSyncDp178=1664764063; cSyncDp179=1664764063; cSyncDp186=1664764063; cSyncDp221=1664764063
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 03 Oct 2022 02:27:44 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=6D72042E9F483A63E80000A702240F59&cs=1
136.243.148.229200 OK 35 B URL HTTP/2 sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=6D72042E9F483A63E80000A702240F59&cs=1
IP 136.243.148.229:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=6D72042E9F483A63E80000A702240F59&cs=1 HTTP/1.1
Host: sync.1dmp.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: uid=f6552fe0-42c2-11ed-acfd-901b0e8b2a6e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 03 Oct 2022 02:27:44 GMT
content-type: image/gif
content-length: 35
expires: 0
cache-control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
set-cookie: uid=f6552fe0-42c2-11ed-acfd-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Tue, 03 Oct 2023 02:27:44 GMT; SameSite=None; Secure
uid-legacy=f6552fe0-42c2-11ed-acfd-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Tue, 03 Oct 2023 02:27:44 GMT
X-Firefox-Spdy: h2
ut.rktch.com/matchspm?pi=1000005&pui=6D72042E9F483A63E80000A702240F59
89.108.97.2302 Found 0 B URL HTTP/1.1 ut.rktch.com/matchspm?pi=1000005&pui=6D72042E9F483A63E80000A702240F59
IP 89.108.97.2:0
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /matchspm?pi=1000005&pui=6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: ut.rktch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Length: 0
Connection: keep-alive
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
Set-Cookie: b_uid=fc3c7e579b37623999ddcc31df672ab06705; Max-Age=2592000; Expires=Wed, 02 Nov 2022 02:27:44 GMT; Domain=rktch.com; Secure; SameSite=None
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Access-Control-Allow-Headers: Content-Type, Accept, Authorization
Access-Control-Allow-Credentials: true
match.new-programmatic.com/userbind?src=sape&id=6D72042E9F483A63E80000A702240F59
217.65.2.150204 No Content 0 B URL HTTP/1.1 match.new-programmatic.com/userbind?src=sape&id=6D72042E9F483A63E80000A702240F59
IP 217.65.2.150:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=sape&id=6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: match.new-programmatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
6d72042e9f483a63e80000a702240f59-sp.ops.beeline.ru/p?ssp=sp&id=6D72042E9F483A63E80000A702240F59
37.9.245.57301 Moved Permanently 0 B URL HTTP/2 6d72042e9f483a63e80000a702240f59-sp.ops.beeline.ru/p?ssp=sp&id=6D72042E9F483A63E80000A702240F59
IP 37.9.245.57:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&id=6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: 6d72042e9f483a63e80000a702240f59-sp.ops.beeline.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Mon, 03 Oct 2022 02:27:44 GMT
content-length: 0
location: https://www.acint.net/match?dp=111&euid=2d11f7da-9b84-410d-9b2c-53ae8df859b0
access-control-allow-origin: *
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: BeeAID=2d11f7da-9b84-410d-9b2c-53ae8df859b0; expires=Sun, 24 Sep 2023 02:27:44 GMT; domain=ops.beeline.ru; path=/; secure; SameSite=None
access-control-allow-credentials: true, true
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS, GET, HEAD, POST, OPTIONS, PUT, DELETE
access-control-allow-headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
x-route: http://upstream_cookiesync
x-host: 192.168.152.62
X-Firefox-Spdy: h2
nr.bidderstack.com/sape/cm?user_id=6D72042E9F483A63E80000A702240F59
148.251.217.100200 OK 44 B URL HTTP/1.1 nr.bidderstack.com/sape/cm?user_id=6D72042E9F483A63E80000A702240F59
IP 148.251.217.100:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash f9d60352c70a2ba15616d1c9421f3844
e9abc8bea7721a4b6a50295850d13c515006a95c
82cb517a8f80c91dfcec543c6d140deb3baaf463ea9e77655475096eba7bc7d9
GET /sape/cm?user_id=6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: nr.bidderstack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: image/gif
Content-Length: 44
Connection: keep-alive
Set-Cookie: uid=5981a0ed-addd-4d54-8990-fe1571868278; domain=.bidderstack.com; path=/; expires=Tue, 03-Oct-2023 02:27:44 GMT;
Access-Control-Allow-Credentials: true
cs.agency2.ru/p?ssp=sp&uid=6D72042E9F483A63E80000A702240F59
23.111.107.44301 Moved Permanently 0 B URL HTTP/1.1 cs.agency2.ru/p?ssp=sp&uid=6D72042E9F483A63E80000A702240F59
IP 23.111.107.44:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&uid=6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: cs.agency2.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Length: 0
Connection: keep-alive
Server: fasthttp
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.acint.net/match?dp=186&euid=86aafbc1-da7c-4ce4-bfd5-a3c4ee17c1b9
Set-Cookie: uuid=86aafbc1-da7c-4ce4-bfd5-a3c4ee17c1b9; expires=Sun, 24 Sep 2023 02:27:44 GMT; domain=agency2.ru; path=/; secure; SameSite=None
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.107.44
faq7.ru/themes/faq7_new/images/footer_orta.png
31.31.198.198200 OK 593 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/footer_orta.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 110 x 89, 8-bit colormap, non-interlaced\012- data
Hash 0ac4a6a866974c24abe9b52bd2634df3
b77013e015176b7e9949af086283294d9b03e462
44b086bcf1e37e2a2ef39ff27890672501a4446fd08467fd2e97dd52c320cdb0
GET /themes/faq7_new/images/footer_orta.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461; _ym_uid=166476406325431108; _ym_d=1664764063
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: image/png
Content-Length: 593
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/member.png
31.31.198.198200 OK 1.5 kB URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/member.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash e83e604605dca02dd1bfc2ae97321031
99a02e39b710687ee7cd6c9d439716b129f74580
e9041471c7f3a53fd8084d44791b0700b8dd85bf673a38f8e7b2768214bad23a
GET /infusions/hayaletsevgili_online_users_panel/images/member.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: image/png
Content-Length: 1515
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/footer_sag.png
31.31.198.198200 OK 750 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/footer_sag.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 57 x 89, 8-bit/color RGBA, non-interlaced\012- data
Hash 43d4c670b38c9e2194e74ed0dba778f4
8d5795fb6bcbbefa7b28f57ad18f4a14b3e48953
3f5a00d025bc5cd85baebefad3fc414cb2f19b30eba01ff7528869a6fec4f3cb
GET /themes/faq7_new/images/footer_sag.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461; _ym_uid=166476406325431108; _ym_d=1664764063
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: image/png
Content-Length: 750
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
www.acint.net/match?dp=95&euid=HBWRVLNV
176.9.9.10200 OK 43 B URL HTTP/2 www.acint.net/match?dp=95&euid=HBWRVLNV
IP 176.9.9.10:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=95&euid=HBWRVLNV HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=LgRybWM6SJ+nAADoWQ8kAqCJNcn0Mjy2HG3FWthDDDDlTNfv; cSyncDp7v2=1664764063; cSyncDp14v3=1664764063; cSyncDp17=1664764063; cSyncDp32=1664764063; cSyncDp45v3=1664764063; cSyncDp53=1664764063; cSyncDp54v2=1664764063; cSyncDp62=1664764063; cSyncDp67v2=1664764063; cSyncDp68=1664764063; cSyncDp71=1664764063; cSyncDp77=1664764063; cSyncDp84=1664764063; cSyncDp85=1664764063; cSyncDp95v3=1664764063; cSyncDp101=1664764063; cSyncDp104v2=1664764063; cSyncDp107=1664764063; cSyncDp110=1664764063; cSyncDp111v2=1664764063; cSyncDp112v2=1664764063; cSyncDp125v2=1664764063; cSyncDp126=1664764063; cSyncDp127=1664764063; cSyncDp129=1664764063; cSyncDp136v2=1664764063; cSyncDp138=1664764063; cSyncDp144=1664764063; cSyncDp146=1664764063; cSyncDp148=1664764063; cSyncDp149=1664764063; cSyncDp151=1664764063; cSyncDp178=1664764063; cSyncDp179=1664764063; cSyncDp186=1664764063; cSyncDp221=1664764063
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 03 Oct 2022 02:27:44 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.dmp.otm-r.com/match/sape?id=6D72042E9F483A63E80000A702240F59
195.201.106.117204 No Content 0 B URL HTTP/2 sync.dmp.otm-r.com/match/sape?id=6D72042E9F483A63E80000A702240F59
IP 195.201.106.117:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.15.9
date: Mon, 03 Oct 2022 02:27:44 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
mediatoday.ru/core/match.gif?s=32&id=6D72042E9F483A63E80000A702240F59
139.45.228.111200 OK 43 B URL HTTP/2 mediatoday.ru/core/match.gif?s=32&id=6D72042E9F483A63E80000A702240F59
IP 139.45.228.111:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /core/match.gif?s=32&id=6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: mediatoday.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.22.0
date: Mon, 03 Oct 2022 02:27:44 GMT
content-type: image/gif
content-length: 43
p3p: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
cache-control: no-cache, max-age=0, must-revalidate, no-store
pragma: no-cache
expires: Thursday, 01-Jan-1970 00:00:00 GMT
set-cookie: idntfy=VUkSBfyFdV5w4ub; expires=Thu, 30-Sep-2032 02:27:44 GMT; domain=mediatoday.ru; path=/core; SameSite=None; Secure
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5e0dd1e9dd8e61a058ff269351e88959
9847cfc742a314f59be0d2d94a27aa2c6f6a81a2
416983f57a24826bac9440315fa32329e9672b7b4fc3f1d6ab40deeb8f9e45fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "416983F57A24826BAC9440315FA32329E9672B7B4FC3F1D6AB40DEEB8F9E45FD"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4672
Expires: Mon, 03 Oct 2022 03:45:36 GMT
Date: Mon, 03 Oct 2022 02:27:44 GMT
Connection: keep-alive
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/total.png
31.31.198.198200 OK 1.6 kB URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/total.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 618a00e119dd1c7840bfb09a0e3c89e5
4b4ff1c15195db9b51b599ab7a539fec11ab8b30
8bb619e24f7f880c286536a7ab338b13a745494f47ff2e29b08893519d69bbe3
GET /infusions/hayaletsevgili_online_users_panel/images/total.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: image/png
Content-Length: 1627
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
faq7.ru/themes/templates/scrolltobottom.png
31.31.198.198200 OK 2.3 kB URL HTTP/1.1 faq7.ru/themes/templates/scrolltobottom.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 56 x 30, 8-bit/color RGB, non-interlaced\012- data
Hash 9742f054cb49a72057b6015006ffea8c
017a2e400afae7b3b0150337700c65f4367d5839
b6252bc738d151a12640f4f946d2a6446d3b3f12a26338bd609fe5d1e0fa933c
GET /themes/templates/scrolltobottom.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: image/png
Content-Length: 2294
Connection: keep-alive
Last-Modified: Tue, 24 Sep 2013 13:55:39 GMT
Accept-Ranges: bytes
faq7.ru/images/avatars/715[2185].jpg
31.31.198.198200 OK 9.8 kB URL HTTP/1.1 faq7.ru/images/avatars/715[2185].jpg
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 100x100, components 3\012- data
Hash 187c91d1ebd42c6129ee2641a5a9b7aa
c280f8a2b47679dd62db63925b6b06d664bc1ca2
4c078e1544784792ec4acf9d1d3b65616ae5ead918efb21434f244c405e28c98
GET /images/avatars/715[2185].jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: image/jpeg
Content-Length: 9849
Connection: keep-alive
Last-Modified: Sat, 27 Mar 2021 18:02:47 GMT
Accept-Ranges: bytes
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/sadmin.png
31.31.198.198200 OK 460 B URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/sadmin.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash 811c619e9c5e4d01f1d4f04a182426a3
b131747b733290cf7e0a8a9f7ac3b699a40d27ca
fc09383faf569e0a6470ff9267f24cc289ec7f567d127766f0601d1fa611dad0
GET /infusions/hayaletsevgili_online_users_panel/images/sadmin.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: image/png
Content-Length: 460
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
www.acint.net/match?dp=111&euid=2d11f7da-9b84-410d-9b2c-53ae8df859b0
176.9.9.10200 OK 43 B URL HTTP/2 www.acint.net/match?dp=111&euid=2d11f7da-9b84-410d-9b2c-53ae8df859b0
IP 176.9.9.10:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=111&euid=2d11f7da-9b84-410d-9b2c-53ae8df859b0 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=LgRybWM6SJ+nAADoWQ8kAqCJNcn0Mjy2HG3FWthDDDDlTNfv; cSyncDp7v2=1664764063; cSyncDp14v3=1664764063; cSyncDp17=1664764063; cSyncDp32=1664764063; cSyncDp45v3=1664764063; cSyncDp53=1664764063; cSyncDp54v2=1664764063; cSyncDp62=1664764063; cSyncDp67v2=1664764063; cSyncDp68=1664764063; cSyncDp71=1664764063; cSyncDp77=1664764063; cSyncDp84=1664764063; cSyncDp85=1664764063; cSyncDp95v3=1664764063; cSyncDp101=1664764063; cSyncDp104v2=1664764063; cSyncDp107=1664764063; cSyncDp110=1664764063; cSyncDp111v2=1664764063; cSyncDp112v2=1664764063; cSyncDp125v2=1664764063; cSyncDp126=1664764063; cSyncDp127=1664764063; cSyncDp129=1664764063; cSyncDp136v2=1664764063; cSyncDp138=1664764063; cSyncDp144=1664764063; cSyncDp146=1664764063; cSyncDp148=1664764063; cSyncDp149=1664764063; cSyncDp151=1664764063; cSyncDp178=1664764063; cSyncDp179=1664764063; cSyncDp186=1664764063; cSyncDp221=1664764063
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 03 Oct 2022 02:27:44 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/match?dp=186&euid=86aafbc1-da7c-4ce4-bfd5-a3c4ee17c1b9
176.9.9.10200 OK 43 B URL HTTP/2 www.acint.net/match?dp=186&euid=86aafbc1-da7c-4ce4-bfd5-a3c4ee17c1b9
IP 176.9.9.10:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=186&euid=86aafbc1-da7c-4ce4-bfd5-a3c4ee17c1b9 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=LgRybWM6SJ+nAADoWQ8kAqCJNcn0Mjy2HG3FWthDDDDlTNfv; cSyncDp7v2=1664764063; cSyncDp14v3=1664764063; cSyncDp17=1664764063; cSyncDp32=1664764063; cSyncDp45v3=1664764063; cSyncDp53=1664764063; cSyncDp54v2=1664764063; cSyncDp62=1664764063; cSyncDp67v2=1664764063; cSyncDp68=1664764063; cSyncDp71=1664764063; cSyncDp77=1664764063; cSyncDp84=1664764063; cSyncDp85=1664764063; cSyncDp95v3=1664764063; cSyncDp101=1664764063; cSyncDp104v2=1664764063; cSyncDp107=1664764063; cSyncDp110=1664764063; cSyncDp111v2=1664764063; cSyncDp112v2=1664764063; cSyncDp125v2=1664764063; cSyncDp126=1664764063; cSyncDp127=1664764063; cSyncDp129=1664764063; cSyncDp136v2=1664764063; cSyncDp138=1664764063; cSyncDp144=1664764063; cSyncDp146=1664764063; cSyncDp148=1664764063; cSyncDp149=1664764063; cSyncDp151=1664764063; cSyncDp178=1664764063; cSyncDp179=1664764063; cSyncDp186=1664764063; cSyncDp221=1664764063
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 03 Oct 2022 02:27:44 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sap1&s_data=CAIQARigkemZBmIgNkQ3MjA0MkU5RjQ4M0E2M0U4MDAwMEE3MDIyNDBGNTmiARD2WBTGQsIR7YZEACWQyCQ3
31.172.81.160200 OK 0 B URL HTTP/1.1 sync.bumlam.com/?src=sap1&s_data=CAIQARigkemZBmIgNkQ3MjA0MkU5RjQ4M0E2M0U4MDAwMEE3MDIyNDBGNTmiARD2WBTGQsIR7YZEACWQyCQ3
IP 31.172.81.160:0
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&s_data=CAIQARigkemZBmIgNkQ3MjA0MkU5RjQ4M0E2M0U4MDAwMEE3MDIyNDBGNTmiARD2WBTGQsIR7YZEACWQyCQ3 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiRmNjU4MTRjNi00MmMyLTExZWQtODY0NC0wMDI1OTBjODI0Mzc*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiRmNjU4MTRjNi00MmMyLTExZWQtODY0NC0wMDI1OTBjODI0Mzc*; Path=/; Expires=Sun, 28 Sep 2042 02:27:44 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash d51261866dd5febcf21b6559dd112bfb
671e5633ab489f6fee44f15b999909882c578bc4
893af3299b038bb94319119b838ee8a257131c6caae4e7bfa81dd171a56980a9
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 01 Oct 2022 03:41:05 GMT
Expires: Sat, 08 Oct 2022 03:41:04 GMT
Etag: "671e5633ab489f6fee44f15b999909882c578bc4"
Cache-Control: max-age=435799,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75423d895ae5b512-OSL
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/guest.png
31.31.198.198200 OK 1.6 kB URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/guest.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 899c4542cebec8946af0dd230db941b1
721ce680c80039cbd5ef1bbb7f261842b0a734aa
739fe5c2f1c7de8c13378c2f0e752109ccebebbaf51ff0deb7604dd893be2972
GET /infusions/hayaletsevgili_online_users_panel/images/guest.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: image/png
Content-Length: 1562
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
167.235.33.114301 Moved Permanently 115 B URL HTTP/2 exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
IP 167.235.33.114:0
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text
Hash 3fc8fe70194ba0fb4a8401f35bd69a68
45ea0f5958e4a96095c260403838bc404236df49
c126d62f04221fdc7c1ee453def2cc08a195298c3d197f6d4c2976391582d78a
GET /cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Mon, 03 Oct 2022 02:27:44 GMT
content-type: text/html; charset=utf-8
content-length: 115
location: https://www.acint.net/match?dp=126&euid=02a98cd3-3667-43de-60b7-64ec652c7b13
serverid: TODO
X-Firefox-Spdy: h2
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/admin.png
31.31.198.198200 OK 472 B URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/admin.png
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash 866f2f3b6feeef57e7473e74e6973f50
4cbf86eb10bd082b02d1667e45ff778c7631cf4a
25bb27f5f14e5163c9dd73c55d18600441ce5b8198350e66da6e7c1e7967ceea
GET /infusions/hayaletsevgili_online_users_panel/images/admin.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: image/png
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
www.acint.net/match?dp=126&euid=02a98cd3-3667-43de-60b7-64ec652c7b13
176.9.9.10200 OK 43 B URL HTTP/2 www.acint.net/match?dp=126&euid=02a98cd3-3667-43de-60b7-64ec652c7b13
IP 176.9.9.10:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=126&euid=02a98cd3-3667-43de-60b7-64ec652c7b13 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=LgRybWM6SJ+nAADoWQ8kAqCJNcn0Mjy2HG3FWthDDDDlTNfv; cSyncDp7v2=1664764063; cSyncDp14v3=1664764063; cSyncDp17=1664764063; cSyncDp32=1664764063; cSyncDp45v3=1664764063; cSyncDp53=1664764063; cSyncDp54v2=1664764063; cSyncDp62=1664764063; cSyncDp67v2=1664764063; cSyncDp68=1664764063; cSyncDp71=1664764063; cSyncDp77=1664764063; cSyncDp84=1664764063; cSyncDp85=1664764063; cSyncDp95v3=1664764063; cSyncDp101=1664764063; cSyncDp104v2=1664764063; cSyncDp107=1664764063; cSyncDp110=1664764063; cSyncDp111v2=1664764063; cSyncDp112v2=1664764063; cSyncDp125v2=1664764063; cSyncDp126=1664764063; cSyncDp127=1664764063; cSyncDp129=1664764063; cSyncDp136v2=1664764063; cSyncDp138=1664764063; cSyncDp144=1664764063; cSyncDp146=1664764063; cSyncDp148=1664764063; cSyncDp149=1664764063; cSyncDp151=1664764063; cSyncDp178=1664764063; cSyncDp179=1664764063; cSyncDp186=1664764063; cSyncDp221=1664764063
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 03 Oct 2022 02:27:44 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f5e503471cc78b95c0a3e75785615e5f
145b1e4d850c145a78577b5d7d4fadae9658d7a4
61bf2bddece68c7876ab5481c14ed1b1879343e55c86ee013b4f3a8d3353e6b4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10395
Expires: Mon, 03 Oct 2022 05:20:59 GMT
Date: Mon, 03 Oct 2022 02:27:44 GMT
Connection: keep-alive
ssp.bidvol.com/usersync?dspcsid=8&redirect=1
65.109.65.187302 Found 503 B URL HTTP/2 ssp.bidvol.com/usersync?dspcsid=8&redirect=1
IP 65.109.65.187:0
ASN #24940 Hetzner Online GmbH
Hash f5e503471cc78b95c0a3e75785615e5f
145b1e4d850c145a78577b5d7d4fadae9658d7a4
61bf2bddece68c7876ab5481c14ed1b1879343e55c86ee013b4f3a8d3353e6b4
GET /usersync?dspcsid=8&redirect=1 HTTP/1.1
Host: ssp.bidvol.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.22.0
date: Mon, 03 Oct 2022 02:27:44 GMT
x-request-id: 2a160e39-3e4e-4b7d-82c4-55bf1e727f5e
set-cookie: bvuid=s6soni19s1; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None
bvuid2=s6soni19s1; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT
vary: Origin
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
surrogate-control: no-store
location: https://www.acint.net/match?dp=129&euid=s6soni19s1
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f5e503471cc78b95c0a3e75785615e5f
145b1e4d850c145a78577b5d7d4fadae9658d7a4
61bf2bddece68c7876ab5481c14ed1b1879343e55c86ee013b4f3a8d3353e6b4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10395
Expires: Mon, 03 Oct 2022 05:20:59 GMT
Date: Mon, 03 Oct 2022 02:27:44 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f5e503471cc78b95c0a3e75785615e5f
145b1e4d850c145a78577b5d7d4fadae9658d7a4
61bf2bddece68c7876ab5481c14ed1b1879343e55c86ee013b4f3a8d3353e6b4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10395
Expires: Mon, 03 Oct 2022 05:20:59 GMT
Date: Mon, 03 Oct 2022 02:27:44 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd0be942-f345-4da4-974e-a9fe16b90b3c.jpeg
34.120.237.76200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd0be942-f345-4da4-974e-a9fe16b90b3c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 523edd86af4757d0bc5fa5b3b8a3596a
8118ee462077c291b9d6f1402b85b55a9ceba8c2
c27de9970317636df8c4a517a9ed38e573235b351bf92c9b8bb1f964cd100031
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd0be942-f345-4da4-974e-a9fe16b90b3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9083
x-amzn-requestid: fda71fd3-ef25-4a63-94ae-1bfc8aef8d14
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZXD2H0DIAMFjrg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a054b-198915fc17ce3dab571b7575;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 21:40:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BobS2JU-TqDuL8q31SVlerM15cRoMhL1oM5MkL7MVhY9RZG_Ukp5yA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:46:36 GMT
age: 16868
etag: "8118ee462077c291b9d6f1402b85b55a9ceba8c2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fda34e4-86f9-4fb4-94af-575d6201fccb.jpeg
34.120.237.76200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fda34e4-86f9-4fb4-94af-575d6201fccb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e6c9691e104001fe54d3c6273b7b8596
481ec2135ca0a96484c36cced30776c871aedf8f
f9e5e087d8b6e9b357c9f93b00c5919d89d90ac9b48d2dcd1ac72bf775a5cf49
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fda34e4-86f9-4fb4-94af-575d6201fccb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5383
x-amzn-requestid: 19106579-5727-4220-82ca-e9b7887d9896
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZM7OfEwuoAMFnXQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63350bf6-2d80c27d185f114c4c512edb;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 03:07:34 GMT
x-amz-cf-pop: SFO5-C3, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: gWL6QKfR02p9RhhXL9Sn8Jw19qRKcJM5uW4u2Cv5nZvH2FkTJQ9gTw==
via: 1.1 6785379936d15b44a779e5f13a6567de.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:58:31 GMT
age: 16153
etag: "481ec2135ca0a96484c36cced30776c871aedf8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 097e021b2da0e66b5cb9cb4682189a1d
49a1de235f694491202b56b5144b1ed817f31da1
d673a35286f3549f0449c043da65b774591ac08ce459b15b56dee94309f8bdc4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 02 Oct 2022 11:26:43 GMT
Expires: Sun, 09 Oct 2022 11:26:42 GMT
Etag: "49a1de235f694491202b56b5144b1ed817f31da1"
Cache-Control: max-age=550137,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75423d8a1c260af6-OSL
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
34.120.237.76200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 206fb65e75dbadf119512f71e0b78402
58ff0bf8ce7528b303d28bab01a80ad721705569
56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 04:41:39 GMT
age: 78365
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98a090b5-0736-4ddd-b6ca-3c76661e7051.jpeg
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98a090b5-0736-4ddd-b6ca-3c76661e7051.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 721a8d8f94c3796abf021978fcdbc831
3fc3aeae907a0ce0db21753c67c1000681e48b8e
cb497b15e7c2e49930b99f8d6659f0394acefb7b11613ca04397ee782dac759d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98a090b5-0736-4ddd-b6ca-3c76661e7051.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8158
x-amzn-requestid: 424c8c6c-7075-4ace-97e6-2b0a609d1b7e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZXDxGRlIAMFZrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a054b-046d963a345c15e81dc74e4d;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 21:40:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: aFBTRAsXhi4io7fSc02hftf9hRQ-J5yaBgU4Wgwijyir30xjTjdMLQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:46:36 GMT
age: 16868
etag: "3fc3aeae907a0ce0db21753c67c1000681e48b8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dcf393f-77c1-48ed-9c3e-ab160d7b4829.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dcf393f-77c1-48ed-9c3e-ab160d7b4829.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7660e05c8a7b32db05f8c56693bc774
b64aff132fdfc91cf59f70170b3d4bd3fc025294
e1d523c385cf05ae2d432526a387f43443d14b4b68129aa76229687366938805
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dcf393f-77c1-48ed-9c3e-ab160d7b4829.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9721
x-amzn-requestid: 1825bd73-4760-43e8-97f7-c9d2c06a119f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZXXxRHYkoAMFaHA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633939a1-4e92f3265ead21e876cfb556;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 07:11:29 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: l-YyB6m2kDzmbo7Mo4vBedg5_c_N4U3PrCkpNlicpARH0-BrwjnEOA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 07:22:18 GMT
age: 68726
etag: "b64aff132fdfc91cf59f70170b3d4bd3fc025294"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb4b91592-bb2f-4b2e-9c62-80d06ad4b698.jpeg
34.120.237.76200 OK 3.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb4b91592-bb2f-4b2e-9c62-80d06ad4b698.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e3dfda0e06e989942bf45f4c2bf18d7c
6d0cee63012a8f79aef1f1e751e2940582b981e1
a79d4015713255da4475ff9193ccfeed72737f5f03027a42fd86cc7b095ddf03
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb4b91592-bb2f-4b2e-9c62-80d06ad4b698.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3695
x-amzn-requestid: f1f35cb1-9fc2-4694-8bf4-9d9e41f9bd7f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZWabEM8oAMF0RQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a0442-3140202b1a3b892702978a7e;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 21:36:02 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: kxxeDkHccWmlQFBbBf-5gKzqY0utY15Czvx0Ms7QS1lJMXExRmbjjQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:51:56 GMT
age: 16548
etag: "6d0cee63012a8f79aef1f1e751e2940582b981e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
4ef11cd0-22e9-4027-ac00-349692838d9a.sync.upravel.com/sape/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyIsImh0dHBzOi8vd3d3LmFjaW50Lm5ldC8iXX19
148.251.129.43302 Found 0 B URL HTTP/2 4ef11cd0-22e9-4027-ac00-349692838d9a.sync.upravel.com/sape/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyIsImh0dHBzOi8vd3d3LmFjaW50Lm5ldC8iXX19
IP 148.251.129.43:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyIsImh0dHBzOi8vd3d3LmFjaW50Lm5ldC8iXX19 HTTP/1.1
Host: 4ef11cd0-22e9-4027-ac00-349692838d9a.sync.upravel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: session_tptc=1664764064159; user_id=4ef11cd0-22e9-4027-ac00-349692838d9a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Mon, 03 Oct 2022 02:27:44 GMT
content-type: image/png
content-length: 0
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: user_id=4ef11cd0-22e9-4027-ac00-349692838d9a;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
user_id-legacy=4ef11cd0-22e9-4027-ac00-349692838d9a;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
location: https://www.acint.net/match?dp=71&euid=4ef11cd0-22e9-4027-ac00-349692838d9a
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
faq7.disqus.com/count.js
151.101.84.134301 Moved Permanently 219 B IP 151.101.84.134:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 6b22a8f71ae72ac4b781cff49386dfa9
a8e7202517458752851aeb18c9fb770e931fec34
186d5321baf20106cb6361d9ec524b818d876d773a5bd9dd5530ae5889d74be3
GET /count.js HTTP/1.1
Host: faq7.disqus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 219
Server: Varnish
Location: https://faq7.disqus.com/count.js
Content-Type: text/html
Cache-Control: public, max-age=31536000
Date: Mon, 03 Oct 2022 02:27:44 GMT
Strict-Transport-Security: max-age=300; includeSubdomains
Cross-Origin-Resource-Policy: cross-origin
Link: <https://disqus.com>; rel=preconnect, <https://c.disquscdn.com>; rel=preconnect
www.acint.net/match?dp=71&euid=4ef11cd0-22e9-4027-ac00-349692838d9a
176.9.9.10200 OK 43 B URL HTTP/2 www.acint.net/match?dp=71&euid=4ef11cd0-22e9-4027-ac00-349692838d9a
IP 176.9.9.10:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=71&euid=4ef11cd0-22e9-4027-ac00-349692838d9a HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=LgRybWM6SJ+nAADoWQ8kAqCJNcn0Mjy2HG3FWthDDDDlTNfv; cSyncDp7v2=1664764063; cSyncDp14v3=1664764063; cSyncDp17=1664764063; cSyncDp32=1664764063; cSyncDp45v3=1664764063; cSyncDp53=1664764063; cSyncDp54v2=1664764063; cSyncDp62=1664764063; cSyncDp67v2=1664764063; cSyncDp68=1664764063; cSyncDp71=1664764063; cSyncDp77=1664764063; cSyncDp84=1664764063; cSyncDp85=1664764063; cSyncDp95v3=1664764063; cSyncDp101=1664764063; cSyncDp104v2=1664764063; cSyncDp107=1664764063; cSyncDp110=1664764063; cSyncDp111v2=1664764063; cSyncDp112v2=1664764063; cSyncDp125v2=1664764063; cSyncDp126=1664764063; cSyncDp127=1664764063; cSyncDp129=1664764063; cSyncDp136v2=1664764063; cSyncDp138=1664764063; cSyncDp144=1664764063; cSyncDp146=1664764063; cSyncDp148=1664764063; cSyncDp149=1664764063; cSyncDp151=1664764063; cSyncDp178=1664764063; cSyncDp179=1664764063; cSyncDp186=1664764063; cSyncDp221=1664764063
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 03 Oct 2022 02:27:44 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
dmp.gotechnology.io/match/sape?id=6D72042E9F483A63E80000A702240F59
142.132.209.138302 Found 0 B URL HTTP/2 dmp.gotechnology.io/match/sape?id=6D72042E9F483A63E80000A702240F59
IP 142.132.209.138:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: dmp.gotechnology.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Mon, 03 Oct 2022 02:27:44 GMT
content-length: 0
location: https://dmp.gotechnology.io/match/sape?id=6D72042E9F483A63E80000A702240F59&chk=1
set-cookie: chk=1; path=/; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
87.250.251.119200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 87.250.251.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 03 Oct 2022 02:27:44 GMT
access-control-allow-origin: *
etag: "633583ac-2b"
expires: Mon, 03 Oct 2022 03:27:44 GMT
accept-ranges: bytes
last-modified: Thu, 29 Sep 2022 14:38:20 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
counter.yadro.ru/hit;PLUSO?r;s1280*1024*24;uhttp%3A//faq7.ru/error.php%3Fcode%3D404;hFAQ7.ru;1
88.212.201.198302 Moved Temporarily 32 B URL HTTP/1.1 counter.yadro.ru/hit;PLUSO?r;s1280*1024*24;uhttp%3A//faq7.ru/error.php%3Fcode%3D404;hFAQ7.ru;1
IP 88.212.201.198:0
ASN #39134 United Network LLC
File type HTML document, ASCII text
Hash 3e9c09a8c5a87f266e047a596f48578c
07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
GET /hit;PLUSO?r;s1280*1024*24;uhttp%3A//faq7.ru/error.php%3Fcode%3D404;hFAQ7.ru;1 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302 Moved Temporarily
Date: Mon, 03 Oct 2022 02:27:44 GMT
Server: 0W/0.8c
Content-Type: text/html
Location: https://counter.yadro.ru/hit;PLUSO?r;s1280*1024*24;uhttp%3A//faq7.ru/error.php%3Fcode%3D404;hFAQ7.ru;1
Content-Length: 32
Expires: Sat, 02 Oct 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
faq7.disqus.com/count.js
151.101.84.134200 OK 871 B IP 151.101.84.134:0
File type ASCII text, with very long lines (528)
Hash a487039f9b553cb4f6928743872234e9
b3d835075d1983a8c2fe716285d173fcc3708f9c
364f622ba24e063adcee84f132da53c6e6071745f04a00d10937663deb24b822
GET /count.js HTTP/1.1
Host: faq7.disqus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 871
Content-Type: application/javascript; charset=utf-8
Server: nginx
Last-Modified: Thu, 29 Sep 2022 08:59:24 GMT
ETag: "63355e6c-367"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Amz-Cf-Pop: DFW55-C3
X-Amz-Cf-Id: Iin0XIQbUucU2EMNBJMIAwjWPVunXJLp7qVvMJvnOUQsJyuZY35WjA==
Cache-Control: public, max-age=300
Date: Mon, 03 Oct 2022 02:27:44 GMT
Age: 38
Vary: Accept-Encoding
Strict-Transport-Security: max-age=300; includeSubdomains
Cross-Origin-Resource-Policy: cross-origin
Link: <https://disqus.com>; rel=preconnect, <https://c.disquscdn.com>; rel=preconnect
bs.yandex.ru/informer/5046166/3_0_FFFFFFFF_E6E6FAFF_0_pageviews
87.250.250.90302 Moved temporarily 0 B URL HTTP/1.1 bs.yandex.ru/informer/5046166/3_0_FFFFFFFF_E6E6FAFF_0_pageviews
IP 87.250.250.90:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /informer/5046166/3_0_FFFFFFFF_E6E6FAFF_0_pageviews HTTP/1.1
Host: bs.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302 Moved temporarily
Content-Length: 0
Location: https://mc.yandex.ru/informer/5046166/3_0_FFFFFFFF_E6E6FAFF_0_pageviews
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-XSS-Protection: 1; mode=block
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 6abe76ca28fe176c44e7475b1d5c93fb
a4a87a771c6f081e5dae3499c090551c6dd31acb
451a8f3a3e654355467b434976022b84820c25b54f7b78472635c7dc3241423f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 03 Oct 2022 02:27:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
faq7.ru/images/favicon.ico
31.31.198.198200 OK 1.4 kB URL HTTP/1.1 faq7.ru/images/favicon.ico
IP 31.31.198.198:0
ASN #197695 Domain names registrar REG.RU, Ltd
File type MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel\012- data
Hash ac0a5a8a6ef2526e94d654f23d4b5d4d
17bf741a8533da11cb197fe64d976d2dd3c3800e
3a396355158a20eb2461ffc49fc4d9c75ebcb9b03a3439331b2213488d999ae9
GET /images/favicon.ico HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664760461; _ym_uid=166476406325431108; _ym_d=1664764063; fid=940a52e5-36ef-4064-b9e8-d34f14647b88
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: image/x-icon
Content-Length: 1406
Connection: keep-alive
Last-Modified: Sun, 30 Oct 2011 21:55:08 GMT
Accept-Ranges: bytes
dmp.gotechnology.io/match/sape?id=6D72042E9F483A63E80000A702240F59&chk=1
142.132.209.138302 Found 0 B URL HTTP/2 dmp.gotechnology.io/match/sape?id=6D72042E9F483A63E80000A702240F59&chk=1
IP 142.132.209.138:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=6D72042E9F483A63E80000A702240F59&chk=1 HTTP/1.1
Host: dmp.gotechnology.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: chk=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 03 Oct 2022 02:27:44 GMT
content-length: 0
location: https://ads.betweendigital.com/match?bidder_id=98&external_user_id=NjUwMDcxZDUxOTkyODhlZg
set-cookie: pid=NjUwMDcxZDUxOTkyODhlZg; expires=Tue, 03 Oct 2023 02:27:44 GMT; domain=.gotechnology.io; path=/; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Mon, 03 Oct 2022 00:41:09 GMT
expires: Mon, 03 Oct 2022 02:41:09 GMT
cache-control: public, max-age=7200
age: 6395
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71281900?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22site_id%22%3A116219%2C%22srtb_sid%22%3A%22633a489f-32f1-a85g-wt25-bqd5b5s9fbyb%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1516%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A3%3Adp%3A0%3Als%3A288113282420%3Ahid%3A52235910%3Az%3A0%3Ai%3A20221003022743%3Aet%3A1664764063%3Ac%3A1%3Arn%3A113416478%3Arqn%3A1%3Au%3A166476406325431108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C195%2C0%2C330%2C337%2C1%2C1061%2C%2C%2C%2C%2C%3Ans%3A1664764061175%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664764063%3At%3AFAQ7.ru&t=gdpr(14)mc(cm-1-tl-1)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
87.250.251.119302 Found 400 B URL HTTP/2 mc.yandex.ru/watch/71281900?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22site_id%22%3A116219%2C%22srtb_sid%22%3A%22633a489f-32f1-a85g-wt25-bqd5b5s9fbyb%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1516%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A3%3Adp%3A0%3Als%3A288113282420%3Ahid%3A52235910%3Az%3A0%3Ai%3A20221003022743%3Aet%3A1664764063%3Ac%3A1%3Arn%3A113416478%3Arqn%3A1%3Au%3A166476406325431108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C195%2C0%2C330%2C337%2C1%2C1061%2C%2C%2C%2C%2C%3Ans%3A1664764061175%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664764063%3At%3AFAQ7.ru&t=gdpr(14)mc(cm-1-tl-1)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP 87.250.251.119:0
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash e4567a5119e687384a5c89148b34717f
e9baad4c74abb36a274c05b07f02527f57e8ec90
088aba592d564adbe1974b1911407602c440f760a38a9814431f7aba6004b9c7
GET /watch/71281900?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22site_id%22%3A116219%2C%22srtb_sid%22%3A%22633a489f-32f1-a85g-wt25-bqd5b5s9fbyb%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1516%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A3%3Adp%3A0%3Als%3A288113282420%3Ahid%3A52235910%3Az%3A0%3Ai%3A20221003022743%3Aet%3A1664764063%3Ac%3A1%3Arn%3A113416478%3Arqn%3A1%3Au%3A166476406325431108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C195%2C0%2C330%2C337%2C1%2C1061%2C%2C%2C%2C%2C%3Ans%3A1664764061175%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664764063%3At%3AFAQ7.ru&t=gdpr(14)mc(cm-1-tl-1)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://faq7.ru
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/71281900/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22site_id%22%3A116219%2C%22srtb_sid%22%3A%22633a489f-32f1-a85g-wt25-bqd5b5s9fbyb%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1516%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A3%3Adp%3A0%3Als%3A288113282420%3Ahid%3A52235910%3Az%3A0%3Ai%3A20221003022743%3Aet%3A1664764063%3Ac%3A1%3Arn%3A113416478%3Arqn%3A1%3Au%3A166476406325431108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C195%2C0%2C330%2C337%2C1%2C1061%2C%2C%2C%2C%2C%3Ans%3A1664764061175%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664764063%3At%3AFAQ7.ru&t=gdpr%2814%29mc%28cm-1-tl-1%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Mon, 03 Oct 2022 02:27:44 GMT
access-control-allow-origin: http://faq7.ru
set-cookie: yandexuid=9006991191664764064; Expires=Tue, 03-Oct-2023 02:27:44 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=9006991191664764064; Expires=Tue, 03-Oct-2023 02:27:44 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=807280701664764064; Path=/; SameSite=None; Secure
i=jvSSKVkQgEY8InNw3BHet2kGcqeQ51Pyv7PNlsMPEbKf4bvlQQpSLCeIKZBGGnyrqfs0Qft4d65hZwvnirvuMqw80aQ=; Expires=Thu, 30-Sep-2032 02:27:44 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1696300064.yrts.1664764064#1696300064.yrtsi.1664764064; Expires=Tue, 03-Oct-2023 02:27:44 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 03-Oct-2022 02:27:44 GMT
last-modified: Mon, 03-Oct-2022 02:27:44 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
db.c0.bc.a1.top.mail.ru/counter?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.23617208821416402
95.163.52.67302 Moved Temporarily 0 B URL HTTP/1.1 db.c0.bc.a1.top.mail.ru/counter?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.23617208821416402
IP 95.163.52.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.23617208821416402 HTTP/1.1
Host: db.c0.bc.a1.top.mail.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=60
Location: https://top-fwz1.mail.ru/counter?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.23617208821416402
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: *
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: private, no-cache, no-store, max-age=0
Pragma: no-cache
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
mc.yandex.ru/watch/82412725?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1516%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A856469825653%3Ahid%3A52235910%3Az%3A0%3Ai%3A20221003022742%3Aet%3A1664764063%3Ac%3A1%3Arn%3A107312044%3Arqn%3A1%3Au%3A166476406325431108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C195%2C0%2C330%2C337%2C1%2C1061%2C%2C%2C%2C%2C%3Ans%3A1664764061175%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664764063%3At%3AFAQ7.ru&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
87.250.251.119302 Found 407 B URL HTTP/2 mc.yandex.ru/watch/82412725?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1516%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A856469825653%3Ahid%3A52235910%3Az%3A0%3Ai%3A20221003022742%3Aet%3A1664764063%3Ac%3A1%3Arn%3A107312044%3Arqn%3A1%3Au%3A166476406325431108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C195%2C0%2C330%2C337%2C1%2C1061%2C%2C%2C%2C%2C%3Ans%3A1664764061175%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664764063%3At%3AFAQ7.ru&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP 87.250.251.119:0
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash 29fa9ad88e5782edd30350d9066923db
1e455d3249e735d6292d7dbd2e2d2d13f958e9b8
b64517adadc726ea6cb4f6efc7143553c5a1a22269836d81b8368b49caa3f171
GET /watch/82412725?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1516%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A856469825653%3Ahid%3A52235910%3Az%3A0%3Ai%3A20221003022742%3Aet%3A1664764063%3Ac%3A1%3Arn%3A107312044%3Arqn%3A1%3Au%3A166476406325431108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C195%2C0%2C330%2C337%2C1%2C1061%2C%2C%2C%2C%2C%3Ans%3A1664764061175%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664764063%3At%3AFAQ7.ru&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://faq7.ru
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/82412725/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1516%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A856469825653%3Ahid%3A52235910%3Az%3A0%3Ai%3A20221003022742%3Aet%3A1664764063%3Ac%3A1%3Arn%3A107312044%3Arqn%3A1%3Au%3A166476406325431108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C195%2C0%2C330%2C337%2C1%2C1061%2C%2C%2C%2C%2C%3Ans%3A1664764061175%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664764063%3At%3AFAQ7.ru&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Mon, 03 Oct 2022 02:27:44 GMT
access-control-allow-origin: http://faq7.ru
set-cookie: yandexuid=9736347251664764064; Expires=Tue, 03-Oct-2023 02:27:44 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=9736347251664764064; Expires=Tue, 03-Oct-2023 02:27:44 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2472613011664764064; Path=/; SameSite=None; Secure
i=ulJRglmo2Xd7Nrd1jYwT9LOjECSgXr+DSRFbKVw+2xVcC7wt6NcbLPHiufyDHTfCfv1gHuIeCplp3oACRiFPNl2FVKU=; Expires=Thu, 30-Sep-2032 02:27:40 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1696300064.yrts.1664764064#1696300064.yrtsi.1664764064; Expires=Tue, 03-Oct-2023 02:27:44 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 03-Oct-2022 02:27:44 GMT
last-modified: Mon, 03-Oct-2022 02:27:44 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/5046166/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1516%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A683999560622%3Ahid%3A52235910%3Az%3A0%3Ai%3A20221003022743%3Aet%3A1664764063%3Ac%3A1%3Arn%3A581223970%3Arqn%3A1%3Au%3A166476406325431108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C195%2C0%2C330%2C337%2C1%2C1061%2C%2C%2C%2C%2C%3Ans%3A1664764061175%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664764063%3At%3AFAQ7.ru&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
87.250.251.119200 OK 407 B URL HTTP/2 mc.yandex.ru/watch/5046166/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1516%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A683999560622%3Ahid%3A52235910%3Az%3A0%3Ai%3A20221003022743%3Aet%3A1664764063%3Ac%3A1%3Arn%3A581223970%3Arqn%3A1%3Au%3A166476406325431108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C195%2C0%2C330%2C337%2C1%2C1061%2C%2C%2C%2C%2C%3Ans%3A1664764061175%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664764063%3At%3AFAQ7.ru&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
IP 87.250.251.119:0
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash 8c6229406a9a23bb8b84a2db471b669c
eb1b1600d137f45cb7367cb1a85689a9dea0a09d
1de4e7cf5068c98442981c81f60f6ae5ec21ecd9b3b5381f4d221677db0f2ba1
GET /watch/5046166/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1516%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A683999560622%3Ahid%3A52235910%3Az%3A0%3Ai%3A20221003022743%3Aet%3A1664764063%3Ac%3A1%3Arn%3A581223970%3Arqn%3A1%3Au%3A166476406325431108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C195%2C0%2C330%2C337%2C1%2C1061%2C%2C%2C%2C%2C%3Ans%3A1664764061175%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664764063%3At%3AFAQ7.ru&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://faq7.ru
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 407
date: Mon, 03 Oct 2022 02:27:44 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://faq7.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 03-Oct-2022 02:27:44 GMT
last-modified: Mon, 03-Oct-2022 02:27:44 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/informer/5046166/3_0_FFFFFFFF_E6E6FAFF_0_pageviews
87.250.251.119200 OK 1.4 kB URL HTTP/2 mc.yandex.ru/informer/5046166/3_0_FFFFFFFF_E6E6FAFF_0_pageviews
IP 87.250.251.119:0
File type PNG image data, 88 x 31, 8-bit/color RGBA, non-interlaced\012- data
Hash d45c4fcc17e3e2e564b7746d0954ef2e
2523c97cd571776fe92b33e1ed4b55291431c844
5151f6959a6a15fd9f52e4aa9a188831a090b2e63c6655224266c083fa9f640e
GET /informer/5046166/3_0_FFFFFFFF_E6E6FAFF_0_pageviews HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 1432
last-modified: Mon, 03-Oct-2022 02:27:44 GMT
content-type: image/png
pragma: no-cache
strict-transport-security: max-age=31536000
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-xss-protection: 1; mode=block
expires: Mon, 03-Oct-2022 02:27:44 GMT
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP 104.18.20.226:0
Hash df9c2eba0b0d4abb04d05bb59be1ac9d
46de94b35b3a5b2c5579664d1cfdf1527461875f
9eff9aa4bbca3ee720c3f6a67cd8b12aa330222efa42644d328f5eea41fade00
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Fri, 07 Oct 2022 02:09:28 GMT
ETag: "46de94b35b3a5b2c5579664d1cfdf1527461875f"
Last-Modified: Mon, 03 Oct 2022 02:09:29 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 539
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75423d8ca8d61c06-OSL
counter.yadro.ru/hit;PLUSO?r;s1280*1024*24;uhttp%3A//faq7.ru/error.php%3Fcode%3D404;hFAQ7.ru;1
88.212.201.198200 OK 43 B URL HTTP/1.1 counter.yadro.ru/hit;PLUSO?r;s1280*1024*24;uhttp%3A//faq7.ru/error.php%3Fcode%3D404;hFAQ7.ru;1
IP 88.212.201.198:0
ASN #39134 United Network LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit;PLUSO?r;s1280*1024*24;uhttp%3A//faq7.ru/error.php%3Fcode%3D404;hFAQ7.ru;1 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Sat, 02 Oct 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691
195.209.108.38302 Moved Temporarily 0 B URL HTTP/1.1 ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691
IP 195.209.108.38:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691 HTTP/1.1
Host: ad.adriver.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-control: no-cache, max-age=0, must-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
Set-Cookie: cid=-5978765941; expires=Wed, 02 Oct 2024 02:27:44 GMT; path=/; domain=.adriver.ru; SameSite=None; Secure
Location: /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-5978765941
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 6abe76ca28fe176c44e7475b1d5c93fb
a4a87a771c6f081e5dae3499c090551c6dd31acb
451a8f3a3e654355467b434976022b84820c25b54f7b78472635c7dc3241423f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 03 Oct 2022 02:27:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 2a209d7d2febea74ae322fc3de58a1a5
43dce5f88da2868c9cd95f8e00e8bdd6f714207b
4d3f20898802e2b4612b17bb83ee396b0d00ec9f01237a2b4f2693795d4f8d86
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 30 Sep 2022 16:09:18 GMT
Expires: Fri, 07 Oct 2022 16:09:17 GMT
Etag: "43dce5f88da2868c9cd95f8e00e8bdd6f714207b"
Cache-Control: max-age=394292,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75423d8d6d7db512-OSL
status.geotrust.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash fb712058910895f70e32e940363de8ac
a2b52def5bd1ae5684af21f0c01f757764238598
65060a19e51f1848c2482ae05ffd56f66dac95e85320588a895575112413db87
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5857
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 03 Oct 2022 02:27:44 GMT
Last-Modified: Mon, 03 Oct 2022 00:50:07 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 544d205b2f709e0bed39ebfc751d6187
71559b505f318323405eeb5ff59499c63e806559
692e14681ceb7536d5c09cf8700810a258b574e02e93c391e7551690111a5bc7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 03 Oct 2022 02:27:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=153&external_id=6D72042E9F483A63E80000A702240F59
195.209.111.19200 OK 42 B URL HTTP/1.1 ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=153&external_id=6D72042E9F483A63E80000A702240F59
IP 195.209.111.19:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cgi-bin/sync.cgi?dsp_id=153&external_id=6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: ssp.adriver.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.20.226:0
Hash 6f548f85b18ae699e3f533ae8011dc9f
009e7a0c3e012fa0ce18e92a24d8bf21fb743b64
eca1646373bb8d6515c4849766416280898e6a2f618cb40d5770bab2efebb889
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Thu, 06 Oct 2022 23:24:02 GMT
ETag: "009e7a0c3e012fa0ce18e92a24d8bf21fb743b64"
Last-Modified: Sun, 02 Oct 2022 23:24:03 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3024
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75423d8dd9401c06-OSL
ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-5978765941
195.209.108.38302 Moved Temporarily 40 B URL HTTP/1.1 ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-5978765941
IP 195.209.108.38:0
File type ASCII text, with CRLF line terminators
Hash 251630b588179b239e8fab1ac9ef6d3a
91b91a97bc481dd2bbd5e0f3fea6ba1c4e843882
c95661e0ef6975b1df5361695a439f71a021d72c345023c3e668e84f35b3c38b
GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-5978765941 HTTP/1.1
Host: ad.adriver.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-control: no-cache, no-cache=Set-Cookie, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref="//adriver.ru/w3c/p3p.xml", CP="NON DSP COR CURa ADMa DEVa OUR BUS UNI COM NAV INT STA"
Set-Cookie: cid=0; expires=Wed, 02 Oct 2024 02:27:44 GMT; path=/; domain=.adriver.ru;
uid=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain=.adriver.ru
Location: https://www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
ads.betweendigital.com/match?bidder_id=98&external_user_id=NjUwMDcxZDUxOTkyODhlZg
188.42.191.196302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=98&external_user_id=NjUwMDcxZDUxOTkyODhlZg
IP 188.42.191.196:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=98&external_user_id=NjUwMDcxZDUxOTkyODhlZg HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /match?bidder_id=98&external_user_id=NjUwMDcxZDUxOTkyODhlZg&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Tue, 03 Oct 2023 02:27:44 GMT; Path=/; Domain=.betweendigital.com
tuuid=b01ed1c3-624c-5214-a980-ca34caba8294; Max-Age=31536000; Expires=Tue, 03 Oct 2023 02:27:44 GMT; Path=/; Domain=.betweendigital.com
ut=YzpIoAAOMNDito1TDBidlGOG65e2Eyqry_q51Q==; Max-Age=31536000; Expires=Tue, 03 Oct 2023 02:27:44 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 668143d9485cade97bf94c648c361724
5af65ddc21257912cea85e1ba103a9b8106c53fc
52fa92c0e7f65ae7ff2dce9493dbd7ee290a2e9ce3116d8b30d721ec87b6dd79
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52FA92C0E7F65AE7FF2DCE9493DBD7EE290A2E9CE3116D8B30D721EC87B6DD79"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7328
Expires: Mon, 03 Oct 2022 04:29:52 GMT
Date: Mon, 03 Oct 2022 02:27:44 GMT
Connection: keep-alive
cm.g.doubleclick.net/pixel?google_nid=agentstvo_sape_limited&google_hm=bXIELp9IOmPoAACnAiQPWQ
142.250.74.130200 OK 170 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=agentstvo_sape_limited&google_hm=bXIELp9IOmPoAACnAiQPWQ
IP 142.250.74.130:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash e7673c60af825466f83d46da72ca1635
fc0fcbee0835709ba2d28798a612bfd687903fb5
0b8a20373c6dd04e091902226d922b3688143a8938afb9d283d889de7b55ceb5
GET /pixel?google_nid=agentstvo_sape_limited&google_hm=bXIELp9IOmPoAACnAiQPWQ HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
date: Mon, 03 Oct 2022 02:27:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: HTTP server (unknown)
content-length: 170
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D
188.42.191.196302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D
IP 188.42.191.196:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Tue, 03 Oct 2023 02:27:44 GMT; Path=/; Domain=.betweendigital.com
tuuid=414c3a9e-6475-5214-9bd4-e13af8eea99a; Max-Age=31536000; Expires=Tue, 03 Oct 2023 02:27:44 GMT; Path=/; Domain=.betweendigital.com
ut=YzpIoAAOiqjQ7yoOAP2jIWLtAxPOdMdT235Jyg==; Max-Age=31536000; Expires=Tue, 03 Oct 2023 02:27:44 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
104.18.20.226200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.20.226:0
Hash 2bb9ec9e2b1119ceb9f1b2596587a744
f4b8edc000dc6be396e8760599e7fa860956f923
0f677ab03ae5b48246f3a2ed8e429e67963bacd50ca9b30b7e53f96ec2cf7362
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Fri, 07 Oct 2022 00:33:46 GMT
ETag: "f4b8edc000dc6be396e8760599e7fa860956f923"
Last-Modified: Mon, 03 Oct 2022 00:33:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2126
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75423d8e09531c06-OSL
ocsp.usertrust.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash b92cde479e352a1d31f5d4410afe35df
d2a0984a8afbe55ce9f0c531e57f0ae7ca932748
01a0920677dc224d9fe1f58bc791380648642f708310d755aef5968d22a68504
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 16:18:21 GMT
Expires: Thu, 06 Oct 2022 16:18:20 GMT
Etag: "d2a0984a8afbe55ce9f0c531e57f0ae7ca932748"
Cache-Control: max-age=602976,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 539
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75423d8e0c6eb4ed-OSL
fcgi4.gnezdo.ru/cookie_matching_ssp/Sape-dsp/6D72042E9F483A63E80000A702240F59
93.95.102.105204 No Content 0 B URL HTTP/2 fcgi4.gnezdo.ru/cookie_matching_ssp/Sape-dsp/6D72042E9F483A63E80000A702240F59
IP 93.95.102.105:0
ASN #48347 JSC Mediasoft ekspert
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookie_matching_ssp/Sape-dsp/6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: fcgi4.gnezdo.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Mon, 03 Oct 2022 02:27:44 GMT
set-cookie: uid=XV9maWM6SKA6ZoY2Giq6Ag==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=gnezdo.ru; path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
X-Firefox-Spdy: h2
ad.mail.ru/cm.gif?p=48&id=6D72042E9F483A63E80000A702240F59
95.163.41.56200 OK 43 B URL HTTP/2 ad.mail.ru/cm.gif?p=48&id=6D72042E9F483A63E80000A702240F59
IP 95.163.41.56:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /cm.gif?p=48&id=6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: ad.mail.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 03 Oct 2022 02:27:44 GMT
content-type: image/gif
content-length: 43
set-cookie: VID=1C6KsL0l-A2C0027l42ECVYC:::0-0-0-854a160:CAASEGoCNlShOJqpH0nQR7f-IIQaYCsZ3eiBJzIv54O3mGrzBJhoSPbjqz39BmQcihS6h1f6G2jgGLyQk4NKEaS1iOmK5g9-m6QkTiNkhpQBACpW1g-kEW74pWSTILabKii2dBdICe-8ptk9cQw1yDBHCAKsXA; path=/; expires=Wed, 04-Oct-23 02:27:44 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
expires: Mon, 03 Oct 2022 08:27:44 GMT
cache-control: max-age=21600
last-modified: Mon, 03 Oct 2022 02:27:44 GMT
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: require-corp
X-Firefox-Spdy: h2
www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
176.9.9.10302 Found 154 B URL HTTP/2 www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
IP 176.9.9.10:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=LgRybWM6SJ+nAADoWQ8kAqCJNcn0Mjy2HG3FWthDDDDlTNfv; cSyncDp7v2=1664764063; cSyncDp14v3=1664764063; cSyncDp17=1664764063; cSyncDp32=1664764063; cSyncDp45v3=1664764063; cSyncDp53=1664764063; cSyncDp54v2=1664764063; cSyncDp62=1664764063; cSyncDp67v2=1664764063; cSyncDp68=1664764063; cSyncDp71=1664764063; cSyncDp77=1664764063; cSyncDp84=1664764063; cSyncDp85=1664764063; cSyncDp95v3=1664764063; cSyncDp101=1664764063; cSyncDp104v2=1664764063; cSyncDp107=1664764063; cSyncDp110=1664764063; cSyncDp111v2=1664764063; cSyncDp112v2=1664764063; cSyncDp125v2=1664764063; cSyncDp126=1664764063; cSyncDp127=1664764063; cSyncDp129=1664764063; cSyncDp136v2=1664764063; cSyncDp138=1664764063; cSyncDp144=1664764063; cSyncDp146=1664764063; cSyncDp148=1664764063; cSyncDp149=1664764063; cSyncDp151=1664764063; cSyncDp178=1664764063; cSyncDp179=1664764063; cSyncDp186=1664764063; cSyncDp221=1664764063
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 03 Oct 2022 02:27:44 GMT
content-type: text/html
content-length: 154
location: https://ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=6D72042E9F483A63E80000A702240F59
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=98&external_user_id=NjUwMDcxZDUxOTkyODhlZg&crf=1
188.42.191.196200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=98&external_user_id=NjUwMDcxZDUxOTkyODhlZg&crf=1
IP 188.42.191.196:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=98&external_user_id=NjUwMDcxZDUxOTkyODhlZg&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Tue, 03 Oct 2023 02:27:44 GMT; Path=/; Domain=.betweendigital.com
tuuid=79f83aac-45f6-5214-b4d3-86b6d7e9ce16; Max-Age=31536000; Expires=Tue, 03 Oct 2023 02:27:44 GMT; Path=/; Domain=.betweendigital.com
ut=YzpIoAAO7FCbRoY8HBjbSvERlLnqxvAmTM2LHA==; Max-Age=31536000; Expires=Tue, 03 Oct 2023 02:27:44 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP 104.18.20.226:0
Hash 288937d6c168e380f471e16b143b5d8c
7f07441c664ecfc9e15df1bf4fa87e7a9f51b87c
ace149ab9465b3a3e8e59f223e34cbf85aed097a01d18180158e37b253aa96dd
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 02:27:45 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Fri, 07 Oct 2022 00:52:26 GMT
ETag: "7f07441c664ecfc9e15df1bf4fa87e7a9f51b87c"
Last-Modified: Mon, 03 Oct 2022 00:52:27 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2301
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75423d8e49e0b4ee-OSL
ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
188.42.191.196200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
IP 188.42.191.196:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Tue, 03 Oct 2023 02:27:44 GMT; Path=/; Domain=.betweendigital.com
tuuid=35b3f93f-0e6b-5214-b707-3641d43d7ee1; Max-Age=31536000; Expires=Tue, 03 Oct 2023 02:27:44 GMT; Path=/; Domain=.betweendigital.com
ut=YzpIoAAPJug_u3f4sAkBcZhtxjGhqDI7ZqnipQ==; Max-Age=31536000; Expires=Tue, 03 Oct 2023 02:27:44 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
mc.yandex.ru/watch/5046166?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1516%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A683999560622%3Ahid%3A52235910%3Az%3A0%3Ai%3A20221003022743%3Aet%3A1664764063%3Ac%3A1%3Arn%3A581223970%3Arqn%3A1%3Au%3A166476406325431108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C195%2C0%2C330%2C337%2C1%2C1061%2C%2C%2C%2C%2C%3Ans%3A1664764061175%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664764063%3At%3AFAQ7.ru&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
87.250.251.119302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/5046166?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1516%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A683999560622%3Ahid%3A52235910%3Az%3A0%3Ai%3A20221003022743%3Aet%3A1664764063%3Ac%3A1%3Arn%3A581223970%3Arqn%3A1%3Au%3A166476406325431108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C195%2C0%2C330%2C337%2C1%2C1061%2C%2C%2C%2C%2C%3Ans%3A1664764061175%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664764063%3At%3AFAQ7.ru&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP 87.250.251.119:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch/5046166?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1516%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A683999560622%3Ahid%3A52235910%3Az%3A0%3Ai%3A20221003022743%3Aet%3A1664764063%3Ac%3A1%3Arn%3A581223970%3Arqn%3A1%3Au%3A166476406325431108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C195%2C0%2C330%2C337%2C1%2C1061%2C%2C%2C%2C%2C%3Ans%3A1664764061175%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664764063%3At%3AFAQ7.ru&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://faq7.ru
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/5046166/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aasbylctlprmpze3hff9a0%3Afp%3A1516%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A683999560622%3Ahid%3A52235910%3Az%3A0%3Ai%3A20221003022743%3Aet%3A1664764063%3Ac%3A1%3Arn%3A581223970%3Arqn%3A1%3Au%3A166476406325431108%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C195%2C0%2C330%2C337%2C1%2C1061%2C%2C%2C%2C%2C%3Ans%3A1664764061175%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664764063%3At%3AFAQ7.ru&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Mon, 03 Oct 2022 02:27:44 GMT
access-control-allow-origin: http://faq7.ru
set-cookie: yandexuid=8401986401664764064; Expires=Tue, 03-Oct-2023 02:27:44 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=8401986401664764064; Expires=Tue, 03-Oct-2023 02:27:44 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=290670211664764064; Path=/; SameSite=None; Secure
i=Pi1X6BahhuLpwI3lcg5R3XwDSCFkMlgu/ZYzUfOkWw57uWrR2hayq5DOpzW8YSBjka+C1NLCKj2V0BZp40Sv9MgDEyc=; Expires=Thu, 30-Sep-2032 02:27:34 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1696300064.yrts.1664764064#1696300064.yrtsi.1664764064; Expires=Tue, 03-Oct-2023 02:27:44 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 03-Oct-2022 02:27:44 GMT
last-modified: Mon, 03-Oct-2022 02:27:44 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
sape-sync.rutarget.ru/sync
178.170.196.176302 Moved Temporarily 0 B URL HTTP/1.1 sape-sync.rutarget.ru/sync
IP 178.170.196.176:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync HTTP/1.1
Host: sape-sync.rutarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Length: 0
Connection: close
Location: https://www.acint.net/match?dp=104&euid=MB-CafMKqzto
P3P: CP="This is not a P3P policy. Please visit http://rutarget.ru/p3p/ to get more information."
Set-Cookie: userId=MB-CafMKqzto; Path=/; Domain=.rutarget.ru; Expires=Sat, 01 Apr 2023 02:27:44 GMT; SameSite=None; Secure
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash f783f75ed7011d5e16dec1140038cd1e
53a0563b4540dd0fb1cced84cb71bc683c24f42e
0fe04693acd0b3e0bf988b6b4fca47407c0f44dd5b117f45de212bb5fba27c12
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 02:27:45 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 01 Oct 2022 02:18:45 GMT
Expires: Sat, 08 Oct 2022 02:18:44 GMT
Etag: "53a0563b4540dd0fb1cced84cb71bc683c24f42e"
Cache-Control: max-age=430858,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75423d8e3de1b512-OSL
tag.digitaltarget.ru/adcm.js
185.15.175.130200 OK 3.1 kB URL HTTP/1.1 tag.digitaltarget.ru/adcm.js
IP 185.15.175.130:0
File type ASCII text, with very long lines (3051), with no line terminators
Hash e7097284185069f52fc736bcd50cda13
1cdfdf2d869841202079ddf91e0a00a8610812e6
40f2a96f78f4c8484e9da6e172f5ddd3e4d7786ca29e04b96e1067a365190e80
GET /adcm.js HTTP/1.1
Host: tag.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:45 GMT
Content-Type: application/javascript
Content-Length: 3051
Last-Modified: Mon, 03 Oct 2022 02:04:17 GMT
Connection: keep-alive
ETag: "633a4321-beb"
Accept-Ranges: bytes
status.thawte.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 1ba667507553a1a52504300d5404fab1
12c71581e2ea5ecc9a9b7add1ada4a7eb1471be1
48c1d33031b2837875428319ea9bcfd6237fda559b882b1307e2be12cd256425
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5831
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 03 Oct 2022 02:27:45 GMT
Last-Modified: Mon, 03 Oct 2022 00:50:34 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
sync.adkernel.com/user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D
77.245.57.72200 OK 0 B URL HTTP/1.1 sync.adkernel.com/user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D
IP 77.245.57.72:0
ASN #36057 WEBAIR-INTERNET-MTL
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D HTTP/1.1
Host: sync.adkernel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:45 GMT
Content-Length: 0
Connection: close
ocsp.godaddy.com/
192.124.249.22200 OK 1.8 kB IP 192.124.249.22:0
Hash e4d0bdcc45e96c4d0fe3af9508d09598
f86ab205c1c46b20c93873d0cc0987d676acc380
a65e33639a701b52a7e721952822699fe18bd52ce564905f8cc8461436d4dac9
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 02 Oct 2022 23:43:07 GMT
Expires: Mon, 03 Oct 2022 23:43:07 GMT
ETag: "f86ab205c1c46b20c93873d0cc0987d676acc380"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 544d205b2f709e0bed39ebfc751d6187
71559b505f318323405eeb5ff59499c63e806559
692e14681ceb7536d5c09cf8700810a258b574e02e93c391e7551690111a5bc7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 03 Oct 2022 02:27:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=6D72042E9F483A63E80000A702240F59
195.209.111.19200 OK 42 B URL HTTP/1.1 ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=6D72042E9F483A63E80000A702240F59
IP 195.209.111.19:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cgi-bin/sync.cgi?ssp_id=43&external_id=6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: ssp.adriver.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:45 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
www.acint.net/match?dp=104&euid=MB-CafMKqzto
176.9.9.10200 OK 43 B URL HTTP/2 www.acint.net/match?dp=104&euid=MB-CafMKqzto
IP 176.9.9.10:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=104&euid=MB-CafMKqzto HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=LgRybWM6SJ+nAADoWQ8kAqCJNcn0Mjy2HG3FWthDDDDlTNfv; cSyncDp7v2=1664764063; cSyncDp14v3=1664764063; cSyncDp17=1664764063; cSyncDp32=1664764063; cSyncDp45v3=1664764063; cSyncDp53=1664764063; cSyncDp54v2=1664764063; cSyncDp62=1664764063; cSyncDp67v2=1664764063; cSyncDp68=1664764063; cSyncDp71=1664764063; cSyncDp77=1664764063; cSyncDp84=1664764063; cSyncDp85=1664764063; cSyncDp95v3=1664764063; cSyncDp101=1664764063; cSyncDp104v2=1664764063; cSyncDp107=1664764063; cSyncDp110=1664764063; cSyncDp111v2=1664764063; cSyncDp112v2=1664764063; cSyncDp125v2=1664764063; cSyncDp126=1664764063; cSyncDp127=1664764063; cSyncDp129=1664764063; cSyncDp136v2=1664764063; cSyncDp138=1664764063; cSyncDp144=1664764063; cSyncDp146=1664764063; cSyncDp148=1664764063; cSyncDp149=1664764063; cSyncDp151=1664764063; cSyncDp178=1664764063; cSyncDp179=1664764063; cSyncDp186=1664764063; cSyncDp221=1664764063
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 03 Oct 2022 02:27:45 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 2a209d7d2febea74ae322fc3de58a1a5
43dce5f88da2868c9cd95f8e00e8bdd6f714207b
4d3f20898802e2b4612b17bb83ee396b0d00ec9f01237a2b4f2693795d4f8d86
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 03 Oct 2022 02:27:45 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 30 Sep 2022 16:09:18 GMT
Expires: Fri, 07 Oct 2022 16:09:17 GMT
Etag: "43dce5f88da2868c9cd95f8e00e8bdd6f714207b"
Cache-Control: max-age=394291,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75423d8d9df00af6-OSL
top-fwz1.mail.ru/counter?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.23617208821416402
95.163.52.67302 Found 0 B URL HTTP/2 top-fwz1.mail.ru/counter?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.23617208821416402
IP 95.163.52.67:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.23617208821416402 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Mon, 03 Oct 2022 02:27:45 GMT
content-length: 0
location: https://top-fwz1.mail.ru/counter2?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.23617208821416402
set-cookie: FTID=1RMYgQ0tkIIC:1664764065:1837830:::; path=/; expires=Wed, 04-Oct-23 02:27:45 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
x01.aidata.io/0.gif?pid=9401454&id=6D72042E9F483A63E80000A702240F59
89.108.119.43302 Found 0 B URL HTTP/2 x01.aidata.io/0.gif?pid=9401454&id=6D72042E9F483A63E80000A702240F59
IP 89.108.119.43:0
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0.gif?pid=9401454&id=6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: x01.aidata.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Mon, 03 Oct 2022 02:27:45 GMT
content-length: 0
location: https://x01.aidata.io/0.gif?pid=9401454&id=6D72042E9F483A63E80000A702240F59&bounce=1
expires: Mon, 03 Oct 2022 02:27:44 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Mon, 03 Oct 2022 02:27:44 GMT
set-cookie: __upin=2k+QjCVHkV0w8j2QzT0Xcg;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
__upints=1664764065;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2
redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
35.190.24.218302 Found 0 B URL HTTP/2 redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
IP 35.190.24.218:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect HTTP/1.1
Host: redirect.frontend.weborama.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: Weborama Collect Frontend
date: Mon, 03 Oct 2022 02:27:44 GMT
content-length: 0
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=984510643
access-control-allow-origin: *
p3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM"
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: Tue, 03 Jul 2001 06:00:00 GMT
last-modified: Mon, 03 Oct 2022 02:27:45 GMT
set-cookie: AFFICHE_W=8G8w1jWbRPbw19; expires=Tue, 31 Oct 2023 02:27:45 GMT; domain=.weborama.fr; path=/; secure; SameSite=None
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
px.adhigh.net/p/cm/sape?u=6D72042E9F483A63E80000A702240F59&bounced=1
193.232.150.69200 OK 49 B URL HTTP/2 px.adhigh.net/p/cm/sape?u=6D72042E9F483A63E80000A702240F59&bounced=1
IP 193.232.150.69:0
ASN #48061 Limited Liability Company GPM Digital Technologies
File type GIF image data, version 89a, 1 x 1\012- data
Hash 889bc1fffc025af4685839fb516a0b8b
7f105137a4eafe93213ecd8cc34dd907c340467c
d0409a1b73dab4e29dc40f92fb431fa9133baa23b4a1ffae4897f39068110e32
GET /p/cm/sape?u=6D72042E9F483A63E80000A702240F59&bounced=1 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 03 Oct 2022 02:27:45 GMT
content-type: image/gif
content-length: 49
x-backend-id: f13-ru
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
X-Firefox-Spdy: h2
sm.rtb.mts.ru/p?ssp=sape&id=6D72042E9F483A63E80000A702240F59
217.66.147.42301 Moved Permanently 0 B URL HTTP/1.1 sm.rtb.mts.ru/p?ssp=sape&id=6D72042E9F483A63E80000A702240F59
IP 217.66.147.42:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sape&id=6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: sm.rtb.mts.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 03 Oct 2022 02:38:34 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin
Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
Vary: Origin
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://sm.rtb.mts.ru/match/second?ssp=30&exu=6D72042E9F483A63E80000A702240F59
Set-Cookie: dspid=a1ece04d-5a83-440b-9fde-2e5c8fe0c6ac; expires=Sun, 24 Sep 2023 02:27:45 GMT; domain=.mts.ru; path=/; secure; SameSite=None
ads.betweendigital.com/match?bidder_id=73&external_user_id=6D72042E9F483A63E80000A702240F59
188.42.191.196302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=73&external_user_id=6D72042E9F483A63E80000A702240F59
IP 188.42.191.196:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=73&external_user_id=6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /match?bidder_id=73&external_user_id=6D72042E9F483A63E80000A702240F59&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Tue, 03 Oct 2023 02:27:45 GMT; Path=/; Domain=.betweendigital.com
tuuid=b91d1857-a74d-5214-ab61-cc68c85b84c9; Max-Age=31536000; Expires=Tue, 03 Oct 2023 02:27:45 GMT; Path=/; Domain=.betweendigital.com
ut=YzpIoQABiohce-p2LMbsCEk7AtZ-nkZyTe1X8A==; Max-Age=31536000; Expires=Tue, 03 Oct 2023 02:27:45 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
an.yandex.ru/mapuid/sapeis/6D72042E9F483A63E80000A702240F59?redir-setuniq=1
93.158.134.90200 OK 952 B URL HTTP/2 an.yandex.ru/mapuid/sapeis/6D72042E9F483A63E80000A702240F59?redir-setuniq=1
IP 93.158.134.90:0
Hash 47e06316efee3c0debf518d381596713
f05c13008c007f313dac5e83a059bf9776a76b4a
d57d52067084a793628ea4f1729ea3f76f0cccb5277a1b13b89825374a75e508
GET /mapuid/sapeis/6D72042E9F483A63E80000A702240F59?redir-setuniq=1 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Mon, 03 Oct 2022 02:27:45 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 03 Oct 2022 02:27:45 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Mon, 03 Oct 2022 02:27:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif; charset=utf-8
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=984510643
35.190.24.218204 No Content 0 B URL HTTP/2 redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=984510643
IP 35.190.24.218:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=984510643 HTTP/1.1
Host: redirect.frontend.weborama.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: Weborama Collect Frontend
date: Mon, 03 Oct 2022 02:27:44 GMT
access-control-allow-origin: *
p3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM"
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: Tue, 03 Jul 2001 06:00:00 GMT
last-modified: Mon, 03 Oct 2022 02:27:45 GMT
set-cookie: AFFICHE_W=; expires=Tue, 10 Nov 2009 23:00:00 GMT; domain=.weborama.fr; path=/; secure; SameSite=None
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
x01.aidata.io/0.gif?pid=9401454&id=6D72042E9F483A63E80000A702240F59&bounce=1
89.108.119.43204 No Content 0 B URL HTTP/2 x01.aidata.io/0.gif?pid=9401454&id=6D72042E9F483A63E80000A702240F59&bounce=1
IP 89.108.119.43:0
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0.gif?pid=9401454&id=6D72042E9F483A63E80000A702240F59&bounce=1 HTTP/1.1
Host: x01.aidata.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Mon, 03 Oct 2022 02:27:45 GMT
expires: Mon, 03 Oct 2022 02:27:44 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Mon, 03 Oct 2022 02:27:44 GMT
set-cookie: __upin=pAYEQrBFAib/8C+8DYGj7g;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
__upints=1664764065;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=73&external_user_id=6D72042E9F483A63E80000A702240F59&crf=1
188.42.191.196200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=73&external_user_id=6D72042E9F483A63E80000A702240F59&crf=1
IP 188.42.191.196:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=73&external_user_id=6D72042E9F483A63E80000A702240F59&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Tue, 03 Oct 2023 02:27:45 GMT; Path=/; Domain=.betweendigital.com
tuuid=817a69f1-19ec-5214-888d-1a92ebb75233; Max-Age=31536000; Expires=Tue, 03 Oct 2023 02:27:45 GMT; Path=/; Domain=.betweendigital.com
ut=YzpIoQACJshJZoKzLK9FzYWAz95tvP2cJ0LAhg==; Max-Age=31536000; Expires=Tue, 03 Oct 2023 02:27:45 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
sm.rtb.mts.ru/match/second?ssp=30&exu=6D72042E9F483A63E80000A702240F59
217.66.147.42301 Moved Permanently 0 B URL HTTP/1.1 sm.rtb.mts.ru/match/second?ssp=30&exu=6D72042E9F483A63E80000A702240F59
IP 217.66.147.42:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/second?ssp=30&exu=6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: sm.rtb.mts.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 03 Oct 2022 02:38:34 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin
Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
Vary: Origin
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://tech.rtb.mts.ru/
ocsp.godaddy.com/
192.124.249.22200 OK 1.8 kB IP 192.124.249.22:0
Hash e4d0bdcc45e96c4d0fe3af9508d09598
f86ab205c1c46b20c93873d0cc0987d676acc380
a65e33639a701b52a7e721952822699fe18bd52ce564905f8cc8461436d4dac9
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 03 Oct 2022 02:27:44 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 02 Oct 2022 23:43:07 GMT
Expires: Mon, 03 Oct 2022 23:43:07 GMT
ETag: "f86ab205c1c46b20c93873d0cc0987d676acc380"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
tag.digitaltarget.ru/processor.js?i=98770212341162
185.15.175.130200 OK 16 kB URL HTTP/1.1 tag.digitaltarget.ru/processor.js?i=98770212341162
IP 185.15.175.130:0
File type ASCII text, with very long lines (15892), with no line terminators
Hash 9d8bbf9b7d1aaed9a324a9cf9977dda4
d3365fba7f95ca11a9564b373162d1ddb06fcdbd
0935447866da8ca59df7d65710e0b68377a6dbc62c761e83ebfc83998f905788
GET /processor.js?i=98770212341162 HTTP/1.1
Host: tag.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:45 GMT
Content-Type: application/javascript
Content-Length: 15892
Last-Modified: Mon, 03 Oct 2022 02:04:18 GMT
Connection: keep-alive
ETag: "633a4322-3e14"
Accept-Ranges: bytes
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash adc68b0f9890c8bbba51197bca11418c
88728b63620fbfd53504ac6ee9f3cd97740129f6
457801b5c77b69c2b4b3324617b982bddb9af20e0ace9bb15a733b571d8ed0aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "457801B5C77B69C2B4B3324617B982BDDB9AF20E0ACE9BB15A733B571D8ED0AA"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10993
Expires: Mon, 03 Oct 2022 05:30:58 GMT
Date: Mon, 03 Oct 2022 02:27:45 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash adc68b0f9890c8bbba51197bca11418c
88728b63620fbfd53504ac6ee9f3cd97740129f6
457801b5c77b69c2b4b3324617b982bddb9af20e0ace9bb15a733b571d8ed0aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "457801B5C77B69C2B4B3324617B982BDDB9AF20E0ACE9BB15A733B571D8ED0AA"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10993
Expires: Mon, 03 Oct 2022 05:30:58 GMT
Date: Mon, 03 Oct 2022 02:27:45 GMT
Connection: keep-alive
dmg.digitaltarget.ru/1/1093/i/i?i=292645056143409.353490785618360&a=77&e=6D72042E9F483A63E80000A702240F59&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:6D72042E9F483A63E80000A702240F59.sync:up.xdua:duk14i5KbvIUQLjyFi3971xc.xps:xpsCAh2O7OucRmZBRa6uVh2Wy.dn:acint__net.adcm:hit.tg:adcmjs_noorient
185.15.175.133307 Temporary Redirect 0 B URL HTTP/1.1 dmg.digitaltarget.ru/1/1093/i/i?i=292645056143409.353490785618360&a=77&e=6D72042E9F483A63E80000A702240F59&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:6D72042E9F483A63E80000A702240F59.sync:up.xdua:duk14i5KbvIUQLjyFi3971xc.xps:xpsCAh2O7OucRmZBRa6uVh2Wy.dn:acint__net.adcm:hit.tg:adcmjs_noorient
IP 185.15.175.133:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/1093/i/i?i=292645056143409.353490785618360&a=77&e=6D72042E9F483A63E80000A702240F59&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:6D72042E9F483A63E80000A702240F59.sync:up.xdua:duk14i5KbvIUQLjyFi3971xc.xps:xpsCAh2O7OucRmZBRa6uVh2Wy.dn:acint__net.adcm:hit.tg:adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Mon, 03 Oct 2022 02:27:45 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=292645056143409.353490785618360&a=77&e=6D72042E9F483A63E80000A702240F59&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:6D72042E9F483A63E80000A702240F59.sync:up.xdua:duk14i5KbvIUQLjyFi3971xc.xps:xpsCAh2O7OucRmZBRa6uVh2Wy.dn:acint__net.adcm:hit.tg:adcmjs_noorient
Set-Cookie: viuserid=.HhPNeWJ2RgPp-F7rhyO; Max-Age=93312000; Expires=Wed, 17 Sep 2025 02:27:45 GMT; SameSite=None; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly
Request-Time: 0
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/1/1093/i/i?i=292645056143409.256717104425886&a=77&e=6D72042E9F483A63E80000A702240F59&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:6D72042E9F483A63E80000A702240F59.sync:up.xdua:duk14i5KbvIUQLjyFi3971xc.xps:xpsCAh2O7OucRmZBRa6uVh2Wy.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
185.15.175.133307 Temporary Redirect 0 B URL HTTP/1.1 dmg.digitaltarget.ru/1/1093/i/i?i=292645056143409.256717104425886&a=77&e=6D72042E9F483A63E80000A702240F59&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:6D72042E9F483A63E80000A702240F59.sync:up.xdua:duk14i5KbvIUQLjyFi3971xc.xps:xpsCAh2O7OucRmZBRa6uVh2Wy.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
IP 185.15.175.133:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/1093/i/i?i=292645056143409.256717104425886&a=77&e=6D72042E9F483A63E80000A702240F59&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:6D72042E9F483A63E80000A702240F59.sync:up.xdua:duk14i5KbvIUQLjyFi3971xc.xps:xpsCAh2O7OucRmZBRa6uVh2Wy.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Mon, 03 Oct 2022 02:27:45 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=292645056143409.256717104425886&a=77&e=6D72042E9F483A63E80000A702240F59&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:6D72042E9F483A63E80000A702240F59.sync:up.xdua:duk14i5KbvIUQLjyFi3971xc.xps:xpsCAh2O7OucRmZBRa6uVh2Wy.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
Set-Cookie: viuserid=t0U5ZnDJLGErgiA7r.Sn; Max-Age=93312000; Expires=Wed, 17 Sep 2025 02:27:45 GMT; SameSite=None; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly
Request-Time: 0
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=292645056143409.353490785618360&a=77&e=6D72042E9F483A63E80000A702240F59&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:6D72042E9F483A63E80000A702240F59.sync:up.xdua:duk14i5KbvIUQLjyFi3971xc.xps:xpsCAh2O7OucRmZBRa6uVh2Wy.dn:acint__net.adcm:hit.tg:adcmjs_noorient
185.15.175.133200 OK 64 B URL HTTP/1.1 dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=292645056143409.353490785618360&a=77&e=6D72042E9F483A63E80000A702240F59&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:6D72042E9F483A63E80000A702240F59.sync:up.xdua:duk14i5KbvIUQLjyFi3971xc.xps:xpsCAh2O7OucRmZBRa6uVh2Wy.dn:acint__net.adcm:hit.tg:adcmjs_noorient
IP 185.15.175.133:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ffd585dfb1ac6320633a0be46d579437
5a6033d23bc9cd5d1de9ee61de69a44428086dcb
df18d81deb0cc1c48ae87e6481bb4ee375b40cce0fec3d226e002704d49f6cc8
GET /awg/custom/1093/i/i?call_source=awg&i=292645056143409.353490785618360&a=77&e=6D72042E9F483A63E80000A702240F59&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:6D72042E9F483A63E80000A702240F59.sync:up.xdua:duk14i5KbvIUQLjyFi3971xc.xps:xpsCAh2O7OucRmZBRa6uVh2Wy.dn:acint__net.adcm:hit.tg:adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:45 GMT
Content-Type: image/gif
Content-Length: 64
Connection: keep-alive
Vary: Accept-Encoding
Request-Time: 1
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=292645056143409.256717104425886&a=77&e=6D72042E9F483A63E80000A702240F59&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:6D72042E9F483A63E80000A702240F59.sync:up.xdua:duk14i5KbvIUQLjyFi3971xc.xps:xpsCAh2O7OucRmZBRa6uVh2Wy.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
185.15.175.133200 OK 64 B URL HTTP/1.1 dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=292645056143409.256717104425886&a=77&e=6D72042E9F483A63E80000A702240F59&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:6D72042E9F483A63E80000A702240F59.sync:up.xdua:duk14i5KbvIUQLjyFi3971xc.xps:xpsCAh2O7OucRmZBRa6uVh2Wy.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
IP 185.15.175.133:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ffd585dfb1ac6320633a0be46d579437
5a6033d23bc9cd5d1de9ee61de69a44428086dcb
df18d81deb0cc1c48ae87e6481bb4ee375b40cce0fec3d226e002704d49f6cc8
GET /awg/custom/1093/i/i?call_source=awg&i=292645056143409.256717104425886&a=77&e=6D72042E9F483A63E80000A702240F59&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:6D72042E9F483A63E80000A702240F59.sync:up.xdua:duk14i5KbvIUQLjyFi3971xc.xps:xpsCAh2O7OucRmZBRa6uVh2Wy.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 03 Oct 2022 02:27:45 GMT
Content-Type: image/gif
Content-Length: 64
Connection: keep-alive
Vary: Accept-Encoding
Request-Time: 1
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
tech.rtb.mts.ru/
213.87.44.187204 No Content 0 B IP 213.87.44.187:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: tech.rtb.mts.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.2
Date: Mon, 03 Oct 2022 02:27:45 GMT
Content-Type: text/html; charset=utf-8
Connection: keep-alive
Set-Cookie: mts_id=3250fe6b-8c30-46ae-81db-c36229917e3e; Domain=mts.ru; expires=Wed, 11 Aug 2032 02:27:45 GMT; SameSite=None; Secure
mts_id_last_sync=1664764065; Domain=mts.ru; expires=Wed, 11 Aug 2032 02:27:45 GMT; SameSite=None; Secure
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Access-Control-Allow-Headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
www.acint.net/ping/?v=0.4.0&uid=8e5776e3-4429-43ad-bd36-5ed28addfb70&dp=14&tz=%2B00%3A00&nc=54299457&dT=2022-10-03T02%3A27%3A46.458
176.9.9.10302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/ping/?v=0.4.0&uid=8e5776e3-4429-43ad-bd36-5ed28addfb70&dp=14&tz=%2B00%3A00&nc=54299457&dT=2022-10-03T02%3A27%3A46.458
IP 176.9.9.10:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /ping/?v=0.4.0&uid=8e5776e3-4429-43ad-bd36-5ed28addfb70&dp=14&tz=%2B00%3A00&nc=54299457&dT=2022-10-03T02%3A27%3A46.458 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Mon, 03 Oct 2022 02:27:46 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/ping/?v=0.4.0&uid=8e5776e3-4429-43ad-bd36-5ed28addfb70&dp=14&tz=%2B00%3A00&nc=54299457&dT=2022-10-03T02%3A27%3A46.458
www.acint.net/ping/?v=0.4.0&uid=8e5776e3-4429-43ad-bd36-5ed28addfb70&dp=14&tz=%2B00%3A00&nc=54299457&dT=2022-10-03T02%3A27%3A46.458
176.9.9.10200 OK 43 B URL HTTP/2 www.acint.net/ping/?v=0.4.0&uid=8e5776e3-4429-43ad-bd36-5ed28addfb70&dp=14&tz=%2B00%3A00&nc=54299457&dT=2022-10-03T02%3A27%3A46.458
IP 176.9.9.10:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /ping/?v=0.4.0&uid=8e5776e3-4429-43ad-bd36-5ed28addfb70&dp=14&tz=%2B00%3A00&nc=54299457&dT=2022-10-03T02%3A27%3A46.458 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Cookie: aid=LgRybWM6SJ+nAADoWQ8kAqCJNcn0Mjy2HG3FWthDDDDlTNfv; cSyncDp7v2=1664764063; cSyncDp14v3=1664764063; cSyncDp17=1664764063; cSyncDp32=1664764063; cSyncDp45v3=1664764063; cSyncDp53=1664764063; cSyncDp54v2=1664764063; cSyncDp62=1664764063; cSyncDp67v2=1664764063; cSyncDp68=1664764063; cSyncDp71=1664764063; cSyncDp77=1664764063; cSyncDp84=1664764063; cSyncDp85=1664764063; cSyncDp95v3=1664764063; cSyncDp101=1664764063; cSyncDp104v2=1664764063; cSyncDp107=1664764063; cSyncDp110=1664764063; cSyncDp111v2=1664764063; cSyncDp112v2=1664764063; cSyncDp125v2=1664764063; cSyncDp126=1664764063; cSyncDp127=1664764063; cSyncDp129=1664764063; cSyncDp136v2=1664764063; cSyncDp138=1664764063; cSyncDp144=1664764063; cSyncDp146=1664764063; cSyncDp148=1664764063; cSyncDp149=1664764063; cSyncDp151=1664764063; cSyncDp178=1664764063; cSyncDp179=1664764063; cSyncDp186=1664764063; cSyncDp221=1664764063
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 03 Oct 2022 02:27:46 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
cdn-rtb.sape.ru/teasers/js/219/2/116219.js
95.181.171.231200 OK 0 B URL HTTP/2 cdn-rtb.sape.ru/teasers/js/219/2/116219.js
IP 95.181.171.231:0
GET /teasers/js/219/2/116219.js HTTP/1.1
Host: cdn-rtb.sape.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Mon, 03 Oct 2022 02:27:42 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: block-all-mixed-content
etag: W/"3559de3302957e8f7e94b1d9372138f3"
last-modified: Sat, 01 Oct 2022 02:05:59 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-request-id: 171A6E182E3A95F0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
expires: Mon, 03 Oct 2022 03:27:42 GMT
cache-control: max-age=3600
x-cache-status: MISS
X-Firefox-Spdy: h2
ads.adlook.me/csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
5.200.43.243302 Found 0 B URL HTTP/2 ads.adlook.me/csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
IP 5.200.43.243:0
ASN #48096 Enterprise Cloud Ltd.
GET /csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://acint.net/match?dp=110&euid=9b65c4fe44db452d8218fd7b958c3b8c
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=9b65c4fe44db452d8218fd7b958c3b8c; expires=Mon, 02 Oct 2023 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
date: Mon, 03 Oct 2022 02:27:43 GMT
X-Firefox-Spdy: h2
api-maps.yandex.ru/1.1/index.xml
87.250.251.134200 OK 0 B URL HTTP/2 api-maps.yandex.ru/1.1/index.xml
IP 87.250.251.134:0
GET /1.1/index.xml HTTP/1.1
Host: api-maps.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
date: Mon, 03 Oct 2022 02:27:42 GMT
x-content-type-options: nosniff
set-cookie: _yasc=MXM0vpAaRDH5lT05l09cCG0sGoWeyv5/4jNgvNBPWKiyDw==; domain=.yandex.ru; path=/; expires=Wed, 02-Nov-2022 02:27:42 GMT; secure
i=EYgCRF0B3n+Ih0+1wCl48paMr4OBZqCbMybGlhHzoGL6JgaJ+aDCnJ5QcHIp/N4roe4b+LB2uLAjwv6/G2T4IHuEmgs=; Expires=Wed, 02-Oct-2024 02:27:42 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
etag: W/"151b-fMB3ros1CUVQkdFS0zB8+PSONMY"
x-xss-protection: 1; mode=block
expires: 0
cache-control: max-age=0, must-revalidate, no-cache, no-store, private, proxy-revalidate
content-encoding: gzip
content-type: application/javascript; charset=utf-8
X-Firefox-Spdy: h2
adlmerge.com/merge_gpsid/?sid=50&id=6D72042E9F483A63E80000A702240F59
95.211.66.35200 OK 0 B URL HTTP/2 adlmerge.com/merge_gpsid/?sid=50&id=6D72042E9F483A63E80000A702240F59
IP 95.211.66.35:0
ASN #60781 LeaseWeb Netherlands B.V.
GET /merge_gpsid/?sid=50&id=6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: adlmerge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.0
date: Mon, 03 Oct 2022 02:27:44 GMT
content-type: image/gif
iseu: eu
X-Firefox-Spdy: h2
an.yandex.ru/mapuid/sapeis/6D72042E9F483A63E80000A702240F59
93.158.134.90302 Found 0 B URL HTTP/2 an.yandex.ru/mapuid/sapeis/6D72042E9F483A63E80000A702240F59
IP 93.158.134.90:0
GET /mapuid/sapeis/6D72042E9F483A63E80000A702240F59 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
timing-allow-origin: *
location: https://an.yandex.ru/mapuid/sapeis/6D72042E9F483A63E80000A702240F59?redir-setuniq=1
date: Mon, 03 Oct 2022 02:27:45 GMT
set-cookie: yandexuid=9392057681664764065; domain=.yandex.ru; path=/; expires=Thu, 30-Sep-2032 02:27:45 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 03 Oct 2022 02:27:45 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Mon, 03 Oct 2022 02:27:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
api-maps.yandex.ru/1.1/_YMaps.css?v=0.2.11
87.250.251.134200 OK 0 B URL HTTP/2 api-maps.yandex.ru/1.1/_YMaps.css?v=0.2.11
IP 87.250.251.134:0
GET /1.1/_YMaps.css?v=0.2.11 HTTP/1.1
Host: api-maps.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
date: Mon, 03 Oct 2022 02:27:42 GMT
set-cookie: _yasc=MBOIrtHojFfiwOMbr7r0ZtQaU+ams21BzrW0XgIQUActUA==; domain=.yandex.ru; path=/; expires=Wed, 02-Nov-2022 02:27:42 GMT; secure
i=xVXLC8i3B444BX6rAun4+MsHkrA7U0hdnsvVNUO4zOWNXKJSurmm9lXxUc6DMJmYOrsjTpZCv48UySdSbuO5y6Hx4v0=; Expires=Wed, 02-Oct-2024 02:27:42 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
etag: W/"606eaf86-1b99f"
last-modified: Thu, 08 Apr 2021 07:23:50 GMT
content-encoding: gzip
content-type: text/css
X-Firefox-Spdy: h2
api-maps.yandex.ru/1.1/_YMaps.js?v=0.2.11
87.250.251.134200 OK 0 B URL HTTP/2 api-maps.yandex.ru/1.1/_YMaps.js?v=0.2.11
IP 87.250.251.134:0
GET /1.1/_YMaps.js?v=0.2.11 HTTP/1.1
Host: api-maps.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
date: Mon, 03 Oct 2022 02:27:42 GMT
set-cookie: _yasc=Nvto8gu+QG+UjPs9GcXerIWmJpozO7ewA8VZphZF6/F8EA==; domain=.yandex.ru; path=/; expires=Wed, 02-Nov-2022 02:27:42 GMT; secure
i=Ourt6pS8/t2k2MSvYqioiOsCw9gMB/qqli6SQWYPVy1Rj7cRMcExBT47zSSlLpW5BIKNemdhi0mFxDtrqOWPrpLwg80=; Expires=Wed, 02-Oct-2024 02:27:42 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
etag: W/"606eaf85-7e686"
last-modified: Thu, 08 Apr 2021 07:23:49 GMT
content-encoding: gzip
content-type: application/javascript
X-Firefox-Spdy: h2