devid.info/ru/208427/islim310
301 Moved Permanently 0 B URL HTTP/1.1 devid.info/ru/208427/islim310
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ru/208427/islim310 HTTP/1.1
Host: devid.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 27 Mar 2023 10:01:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 27 Mar 2023 11:01:51 GMT
Location: https://devid.info/ru/208427/islim310
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z1M9LwNT2qh3BEGoFgBawZACUAoiDt1C%2FeZR%2BjcYrvbOujDTOOeRvvAS53EfLY7Q8j%2FE6FHX9GXmINYwcP3BS2q8C4iCQPBz0P%2BeOsAA8IwtL9FYhz%2B6CBrHZQ%2Fl"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ae6cb5e4d4db4eb-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5d9435c884bf4a0777fdf4b57079ae09
7f04b9db47ffeec90ac6397416b7553e5336a550
fe77420ec3a11f547cf5172b68d30faa4fe0c13165ae305f0013b02914e61084
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE77420EC3A11F547CF5172B68D30FAA4FE0C13165AE305F0013B02914E61084"
Last-Modified: Sat, 25 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5605
Expires: Mon, 27 Mar 2023 11:35:16 GMT
Date: Mon, 27 Mar 2023 10:01:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 911d74784325663a0d95b463b0e9ae9b
21e999229be584d8e42696bce71236ad5bcb9a25
f48cbe4d605e660a45267400e0add4f7bc7cd523c450376ecd8e3a7f094abf56
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F48CBE4D605E660A45267400E0ADD4F7BC7CD523C450376ECD8E3A7F094ABF56"
Last-Modified: Mon, 27 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5800
Expires: Mon, 27 Mar 2023 11:38:31 GMT
Date: Mon, 27 Mar 2023 10:01:51 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4ad6984a756720fbfff47b37a75513a2
355e35258114452af8b9638985ed9d8ef3bf0aca
43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 27 Mar 2023 09:27:57 GMT
content-type: application/json
age: 2034
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9bb70197d53617b5e6889b890dd2ae26
f3e9b8a743de494529baf2d078a622539f965307
a094a13905b7f1cd89475f9c83f9245580d4c3c7228d51d5c16622aec3c6aa45
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A094A13905B7F1CD89475F9C83F9245580D4C3C7228D51D5C16622AEC3C6AA45"
Last-Modified: Sat, 25 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17699
Expires: Mon, 27 Mar 2023 14:56:50 GMT
Date: Mon, 27 Mar 2023 10:01:51 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: WPRcvAA05HMcThh4OX6WXkN9QiK9uTKE787wjtNFozFORNVMpiEkC13czcT/Og+x25/ocLRuzi0=
x-amz-request-id: ASHF9WS1QGX92XQB
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 27 Mar 2023 09:55:44 GMT
age: 367
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 27 Mar 2023 10:01:51 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Last-Modified, Content-Length, Pragma, Expires, ETag, Backoff, Alert, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 27 Mar 2023 09:14:35 GMT
age: 2836
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0-rc.2/css/materialize.min.css
200 OK 18 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0-rc.2/css/materialize.min.css
IP
File type ASCII text, with very long lines (65347), with CRLF line terminators
Hash 50052df6f4929614e5f7d32e90a27974
5a9e442d9dace14be0a9bc83d6b1e69b0787e1d2
c66701d5e0100c46987fb3f4e1b1e2e759c3848da039500a9918887f355a0d22
GET /ajax/libs/materialize/1.0.0-rc.2/css/materialize.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:52 GMT
content-type: text/css; charset=utf-8
content-length: 17500
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03efe-22a01"
last-modified: Mon, 04 May 2020 16:12:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 22948528
expires: Sat, 16 Mar 2024 10:01:52 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h9M%2B%2F9Ti%2BXPLq8P%2BGbm2dnd8qPRN359%2FtGMBMRaM1aYplnz91YBzESDwj7dSDTADOLng05ufOq4gRtGKOpJ31WIIqPSljsfcqepUoZ20%2BVkfrXI%2FaDy7ngdftFzG5fWQI%2BXtbknq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7ae6cb651e68b4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
code.jquery.com/jquery-2.1.1.min.js
200 OK 30 kB URL HTTP/2 code.jquery.com/jquery-2.1.1.min.js
IP
File type ASCII text, with very long lines (32061)
Hash bc3fbf33dc7b6b815c7e294a7dd685b4
8ff4bad0a255364f15fd1926199bf17fb673b736
ad3722919f1d0a20f0d7734f6e0823c211de6bc7d6972a56a9a7e9a12d7d02dd
GET /jquery-2.1.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:52 GMT
content-encoding: gzip
content-length: 29482
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-14915"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1679911312.dop202.sk1.t,1679911312.cds223.sk1.hn,1679911312.cds262.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 338c42e4ccd475333da107485955b1cf
89223f304f86cb8c292a3acb7c640b5002b39690
333964f3284089e231f7cade16ba160392dd24eab8516c55588be6f513c7306d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 338c42e4ccd475333da107485955b1cf
89223f304f86cb8c292a3acb7c640b5002b39690
333964f3284089e231f7cade16ba160392dd24eab8516c55588be6f513c7306d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1eebd93ef4ace8f93b306d6a46d47288
e968b59494a1ec170444176e4a45733e34289be0
ac364c1480c475154359adb0bd62380d9f51d59d0617c77977001a0eb184d77e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad-delivery.net/px.gif?ch=2
200 OK 43 B URL HTTP/2 ad-delivery.net/px.gif?ch=2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=2 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:52 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ADPycdtPGT2o0xjtSTj_l2to0_qmbbQ--3HuvenaYCxOjBSNMCRoWSPRIwFpDCq4Ey1CrfJIH6woC9yKxU5Xs5esPckX
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Thu, 09 Mar 2023 20:05:42 GMT
cache-control: public, max-age=86400
age: 1519666
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CYFsjYjKY5uNIsLmQ8l2f9TLDbcEL2EtcZw1Cn2usX98epieGxV139S3MgeRYqpUIUli8lYIirV3%2FojBsxU750mHNiF7R7fIVbhz32z0be2LE1T9UUJhOn50jsz05J4ppw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ae6cb6599c6b51d-OSL
X-Firefox-Spdy: h2
ad-delivery.net/px.gif?ch=1&e=0.41859882185374486
200 OK 43 B URL HTTP/2 ad-delivery.net/px.gif?ch=1&e=0.41859882185374486
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=1&e=0.41859882185374486 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:52 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ADPycdtPGT2o0xjtSTj_l2to0_qmbbQ--3HuvenaYCxOjBSNMCRoWSPRIwFpDCq4Ey1CrfJIH6woC9yKxU5Xs5esPckX
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Thu, 09 Mar 2023 20:05:42 GMT
cache-control: public, max-age=86400
age: 1519666
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3jUpkf6EVpovgZMvDBxJ0O7SzmE0Jp%2F7UuVmypuXWK2BLg84n1C2EVMZnqzhSDhL%2FqSqnmlzPABURaNRnvquEM6AKDAx%2BIMtmVGCXaybuX8Eq%2FjA44SOdncwQY1Zc69zig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ae6cb6599c8b51d-OSL
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash c47d423964bcfcec4596b6546555bc22
49602b4aa15cf2e913182d04f4db74632827754a
3b628957aa7da729ca521de177f0201cace199fdf4f5810d025ee375c6baa317
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:52 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Fri, 31 Mar 2023 07:04:08 GMT
ETag: "49602b4aa15cf2e913182d04f4db74632827754a"
Last-Modified: Mon, 27 Mar 2023 07:04:09 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1660
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ae6cb65ac4b067b-OSL
www.googletagmanager.com/gtag/js?id=UA-41996113-16
200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-41996113-16
IP
File type ASCII text, with very long lines (2206)
Hash 3cb5516b3746cda70d22f0c8323af504
a87c85c328234c9e8a29b61cf2d3a263144e10d3
ff17b132d383e3101bd9a466c4deba00b9f88ba99228a1d6f73184e496eed8d8
GET /gtag/js?id=UA-41996113-16 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 27 Mar 2023 10:01:52 GMT
expires: Mon, 27 Mar 2023 10:01:52 GMT
cache-control: private, max-age=900
last-modified: Mon, 27 Mar 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44814
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-PDJ7GHJ
200 OK 39 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PDJ7GHJ
IP
File type ASCII text, with very long lines (2206)
Hash 602be26472c4420b242d1ff1d86fcf41
2cc0306b90053fbdfa211d007d24f42c74bb1ec5
bab89aea19ba2712c3feb1233a6d0cd1b0867d84dfc4f64d3dfb4e57a2f77b68
GET /gtm.js?id=GTM-PDJ7GHJ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 27 Mar 2023 10:01:52 GMT
expires: Mon, 27 Mar 2023 10:01:52 GMT
cache-control: private, max-age=900
last-modified: Mon, 27 Mar 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 38724
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 338c42e4ccd475333da107485955b1cf
89223f304f86cb8c292a3acb7c640b5002b39690
333964f3284089e231f7cade16ba160392dd24eab8516c55588be6f513c7306d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
launchpad.privacymanager.io/latest/launchpad.bundle.js
200 OK 8.6 kB URL HTTP/2 launchpad.privacymanager.io/latest/launchpad.bundle.js
IP
Hash b33380df296365b7203b9a00607a3d1e
9b8623823b893f2d6a5257507c979a9e885f5abc
24e07d99cef2bbb42cd4cff51b4b0b41cf6441bd1f685141099346c528c96c07
GET /latest/launchpad.bundle.js HTTP/1.1
Host: launchpad.privacymanager.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Thu, 10 Mar 2022 13:10:48 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-codebuild-content-sha256: e4ad213b137401d20a50fe1692169cc5f8b39867b6fe39afed7e307e1b9c967e
x-amz-version-id: 95T7hNeyoepJiTzIDuymkLfRgOn9zgCf
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:eu-west-1:469675294282:build/LaunchPadLibraryBuild-prod:f09170b2-5416-4e55-be91-38e5eec207ec
x-amz-meta-codebuild-content-md5: a78f2a5a4864424e54348ce47b156abb
server: AmazonS3
content-encoding: gzip
date: Mon, 27 Mar 2023 09:07:22 GMT
cache-control: must-revalidate,public,max-age=3600
etag: W/"3e312624cdc2445a38a716f92dc3c0cd"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nBQYu0oXjbcjFuBoHBDY4SEPzN0qZXQ1BUpQ4J1etm-70Oiy7Q3EJg==
age: 3271
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash 024bcab34d08eb68713d2db55945e9fe
29d1cb0f4c3f97bf920696590cc6e071da47beb9
ce4001285759032117c1316f7ccae3bc2ab59c01671cec20f36a0e7312bc2c72
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:52 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Fri, 31 Mar 2023 06:45:22 GMT
ETag: "29d1cb0f4c3f97bf920696590cc6e071da47beb9"
Last-Modified: Mon, 27 Mar 2023 06:45:23 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 108
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ae6cb660a5eb4f7-OSL
btloader.com/tag?o=5766703155773440&upapi=true
304 Not Modified 0 B URL HTTP/2 btloader.com/tag?o=5766703155773440&upapi=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tag?o=5766703155773440&upapi=true HTTP/1.1
Host: btloader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://devid.info/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Mon, 27 Mar 2023 09:03:39 GMT
If-None-Match: W/"3cf258f75c7a675d42b10122596e7c17"
TE: trailers
HTTP/2 304 Not Modified
date: Mon, 27 Mar 2023 10:01:52 GMT
cache-control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300
etag: "3cf258f75c7a675d42b10122596e7c17"
last-modified: Mon, 27 Mar 2023 09:03:39 GMT
vary: Origin, Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
age: 3330
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fmLI5gg571nywKnSGhIIZfTDw3bflhcTzrFFZAcyDxM77AS4YWv0%2FNMWDSPQgtWNnlPKQCX9x0PORTogcJA5cyh5VJ4%2Fez0Ms2uc%2BSyUBqTcEz6pYch%2FOyQHfwQXAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ae6cb662ce91c0e-OSL
X-Firefox-Spdy: h2
userapi.com/js/api/openapi.js?49
301 Moved Permanently 164 B URL HTTP/2 userapi.com/js/api/openapi.js?49
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 6d359f551ba4cb27d59e94a6cddaec09
d230318bd921ad8167c2eb9dfdc7b1d7d2c7373f
9ecd8531025e89f5e1ca23d81203a9feddbd5b4b75ca79c9868cb53762293bc8
GET /js/api/openapi.js?49 HTTP/1.1
Host: userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: kittenx
date: Mon, 27 Mar 2023 10:01:52 GMT
content-type: text/html
content-length: 164
location: https://vk.com/js/api/openapi.js?49
x-frontend: front220101
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f118fb224d6a3feb68bb7296958d8fe
7ccaa3d7e3b47dec93f7ddb398615bd71227b26e
2f70628100003ab47f5fb5622f8951ec8f4bad4b88cc3c083983a5c31356b429
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f118fb224d6a3feb68bb7296958d8fe
7ccaa3d7e3b47dec93f7ddb398615bd71227b26e
2f70628100003ab47f5fb5622f8951ec8f4bad4b88cc3c083983a5c31356b429
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0KExQ.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0KExQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 45300, version 1.0\012- data
Hash 5fe660c3a23b871807b0e1d3ee973d23
62a9dd423b30b6ee3ab3dd40d573545d579af10a
e13ffa988be59cbf299d7ff68f019f902b60848203ac4990819eb7e4624ee52d
GET /s/ptsans/v17/jizaRExUiTo99u79D0KExQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://devid.info
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 45300
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:46 GMT
expires: Sat, 23 Mar 2024 10:26:46 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:11:08 GMT
content-type: font/woff2
age: 257706
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0aExdGM.woff2
200 OK 28 kB URL HTTP/2 fonts.gstatic.com/s/ptsans/v17/jizaRExUiTo99u79D0aExdGM.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 28444, version 1.0\012- data
Hash e996a4db02cc36705ce700e4b5d06b3a
c5fa1dff68d7d83689f58bc498caea9041cf7b75
7e9c22d02fc319b701844b334477a05fd32acee9668feb98672f6c27887f79cf
GET /s/ptsans/v17/jizaRExUiTo99u79D0aExdGM.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://devid.info
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28444
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:46 GMT
expires: Sat, 23 Mar 2024 10:26:46 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:45:23 GMT
content-type: font/woff2
age: 257706
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
launchpad.privacymanager.io/1/launchpad.bundle.js
200 OK 7.8 kB URL HTTP/2 launchpad.privacymanager.io/1/launchpad.bundle.js
IP
File type ASCII text, with very long lines (25864), with no line terminators
Hash 91a35c30895dc7a3f6936f47a2a60e40
b34111e763bb0da89b4849ada3d84906b16451e1
71464ad0a50f18b84a0a53f1fae4e0d1eca28bd8fd276bdc5f45da8f08eb0a89
GET /1/launchpad.bundle.js HTTP/1.1
Host: launchpad.privacymanager.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Thu, 10 Mar 2022 13:10:48 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-codebuild-content-sha256: e4ad213b137401d20a50fe1692169cc5f8b39867b6fe39afed7e307e1b9c967e
x-amz-version-id: IBczV1acfLsLLKzHm11PkizTXPxE9_cH
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:eu-west-1:469675294282:build/LaunchPadLibraryBuild-prod:f09170b2-5416-4e55-be91-38e5eec207ec
x-amz-meta-codebuild-content-md5: a78f2a5a4864424e54348ce47b156abb
server: AmazonS3
content-encoding: br
date: Mon, 27 Mar 2023 09:48:09 GMT
cache-control: must-revalidate,public,max-age=3600
etag: W/"3e312624cdc2445a38a716f92dc3c0cd"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DY0pYpgn1GFjsOYJXB9CVkD67Fn-6LKI0YVV0915MF2RDcWdHo7EoQ==
age: 824
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f118fb224d6a3feb68bb7296958d8fe
7ccaa3d7e3b47dec93f7ddb398615bd71227b26e
2f70628100003ab47f5fb5622f8951ec8f4bad4b88cc3c083983a5c31356b429
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
geo.privacymanager.io/
200 OK 28 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 57744b8d30cb48c871213dd5dfe0df01
9d33a3a35c016251765337527aa6963f0405f286
7aa436ba2de59c82da6263076cedef3a9ca49fd61e0493404f2f7d898fa21b81
GET / HTTP/1.1
Host: geo.privacymanager.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://devid.info/
Content-Type: application/json
Origin: https://devid.info
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 28
date: Mon, 27 Mar 2023 01:38:18 GMT
x-amzn-requestid: 31687f15-5fc2-4a5e-9631-a6446a637af2
access-control-allow-origin: *
access-control-allow-headers: Content-Type,Authorization,X-Amz-Date,X-Api-Key,X-Amz-Security-Token
x-amz-apigw-id: Car9pEctjoEF3yw=
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
x-amzn-trace-id: Root=1-6420f38a-48b013d648de8646534c429d;Sampled=0;lineage=06620786:0
via: 1.1 a23fc047c59f0902384fa94644607c00.cloudfront.net (CloudFront), 1.1 42c9dddb4e518a9ed3248bf50565b120.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA56-P3, VIE50-C2
x-amz-cf-id: 8XlAsuY7ZJYeNmsPgSAub1Qk83ruGNjII3gbUojAumddrtDbBIbI9A==
age: 30214
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=PT+Sans
200 OK 1.9 kB URL HTTP/2 fonts.googleapis.com/css?family=PT+Sans
IP
Hash dcf2ac1702bdb593e45172bdb46b1e30
204257d62d52439dcb87e6a7fd1adce69fa85de6
be8e4b6596e117c5dddd758be3aa9948374f3abe69be5f46e86a0e0be95f24dc
GET /css?family=PT+Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 27 Mar 2023 10:01:52 GMT
date: Mon, 27 Mar 2023 10:01:52 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b50726fcf63dc2a413d062eecac1e7c6
a5d32e8ed0099d8502141ce1696e61ccf3a0bff5
e0ac38764545d1dade860bb61c891b8c601ed05f241128c9463f11af0396e0f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
securepubads.g.doubleclick.net/tag/js/gpt.js
200 OK 26 kB URL HTTP/2 securepubads.g.doubleclick.net/tag/js/gpt.js
IP
File type ASCII text, with very long lines (39766)
Hash 1abaff5576f113f4890e13022f846f43
57aed7a7e30b2c74fa77835cc96fbff314e65633
2cd8e58d7e1697c5fb20bfc550e40d42b831c5a9f272e847a0847e6a2605b49d
GET /tag/js/gpt.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Mon, 27 Mar 2023 10:01:52 GMT
expires: Mon, 27 Mar 2023 10:01:52 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 636 / 19443 / 31073328 / config-hash: 12398814570711252326
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 26150
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b50726fcf63dc2a413d062eecac1e7c6
a5d32e8ed0099d8502141ce1696e61ccf3a0bff5
e0ac38764545d1dade860bb61c891b8c601ed05f241128c9463f11af0396e0f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
vk.com/js/api/openapi.js?49
200 OK 23 kB URL HTTP/2 vk.com/js/api/openapi.js?49
IP
File type ASCII text, with very long lines (3849)
Hash 6b56e2aa629cc5f334bba9e200af3bfe
1e99707868f45c499400d95e75348c3d7b7686f5
7cb4aa1277e9f29f5c6d21c642b7c08cfce199332e30395c20995847a0db3fab
GET /js/api/openapi.js?49 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://devid.info/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:52 GMT
content-type: application/x-javascript
content-length: 23318
last-modified: Fri, 02 Dec 2022 07:14:40 GMT
etag: "6389a5e0-5b16"
content-encoding: br
expires: Fri, 31 Mar 2023 10:01:52 GMT
cache-control: max-age=345600
x-frontend: front609304
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 20ec762fe1ff3bab7e3c4ae800f0f1ae
979ead21568400e4b0857e113ebfb097c039c840
690dd55bc141c246d71c90bff0d4b68e974ffd1bc789cb27855d0b3d8e25748c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "690DD55BC141C246D71C90BFF0D4B68E974FFD1BC789CB27855D0B3D8E25748C"
Last-Modified: Sun, 26 Mar 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5230
Expires: Mon, 27 Mar 2023 11:29:02 GMT
Date: Mon, 27 Mar 2023 10:01:52 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 727 B IP
Hash 4833aef4521cf85140e562e259c96853
c851595ee721027d22b2601a02a59242c04283af
9777236efd284cb7b6ab237fc7b75ee9bac2e3aebf0855df3ab681d00f616749
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2210
Cache-Control: max-age=158750
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:52 GMT
Etag: "64212a0c-2d7"
Expires: Wed, 29 Mar 2023 06:07:42 GMT
Last-Modified: Mon, 27 Mar 2023 05:30:52 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 727
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: xq54Ssy2uxyU/1i7EyFI9w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: BXzGXZwwCxvJyk8TcHzzWmlmQKw=
cat2.hbwrapper.com/
200 OK 15 B IP
ASN #14061 DIGITALOCEAN-ASN
File type JSON data\012- , ASCII text, with no line terminators
Hash 0f0479874bf6f4a7281099b15df27c27
55a490e280d48996e564d00492437eb17faadd28
a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288
POST / HTTP/1.1
Host: cat2.hbwrapper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 147
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:52 GMT
Server: Apache
Access-Control-Allow-Origin: https://devid.info
Access-Control-Allow-Credentials: true
Content-Length: 15
Connection: close
Content-Type: text/html; charset=UTF-8
c.amazon-adsystem.com/aax2/apstag.js
200 OK 56 kB URL HTTP/2 c.amazon-adsystem.com/aax2/apstag.js
IP
File type ASCII text, with very long lines (65446)
Hash 9fd5bd193b6e1677e79c8dc60965bb56
af1db071a61c3f5af16b20c8b99b8d92be028482
6828911c9e14e363024188fefc4210f3aea91d05af2225929480372130a0fdc3
GET /aax2/apstag.js HTTP/1.1
Host: c.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 27 Mar 2023 09:47:29 GMT
last-modified: Wed, 22 Mar 2023 19:29:59 GMT
etag: W/"d56f69f591501c51a51bb8f94f3df073"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600
server: AmazonS3
content-encoding: gzip
via: 1.1 3141f89cca62ae5784a211a8d1176d1c.cloudfront.net (CloudFront), 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
vary: Accept-Encoding
x-cache: Hit from cloudfront
x-amz-cf-pop: FRA60-P1, OSL50-P1
x-amz-cf-id: gA9J4r80Ksa_Dro7B4_SZkPo2plBQw9wVPWnXibQtLLHG04FdNeU_g==
age: 864
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
200 OK 35 kB URL HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 34852, version 1.0\012- data
Hash 0e8eefb4549a2edf26c560cb9845952e
8d0b1718aacad934fd0043c87cbc54aa091396bf
7f653b3ce9d3277457fc6da4edb246ae2f6c913f088c42dcb8cd2e96267aa21a
GET /s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://devid.info
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:49 GMT
expires: Sat, 23 Mar 2024 10:26:49 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:31:23 GMT
content-type: font/woff2
age: 257703
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKew72j00.woff2
200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKew72j00.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20860, version 1.0\012- data
Hash 15b0d42b9ec6606a60edbdcced868466
73ca3f9f966f6722e78409b22db328ce4da475a9
f1400c92345dcd9dbf746acab2c60e8580aa959473e9e56c8772cadcf7734b76
GET /s/ubuntu/v20/4iCs6KVjbNBYlgoKew72j00.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://devid.info
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:57 GMT
expires: Sat, 23 Mar 2024 10:26:57 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:15:59 GMT
content-type: font/woff2
age: 257695
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 6f4a6f85d8bcd8a69165d0b4366da0f9
de2b102b65b463db0f1ba42ddb7fe396346c4eae
8d727a711d99a4b535e367e9cded824c9b411009c6021b7be0a525081ec3f4e0
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:52 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 31 Mar 2023 06:44:48 GMT
ETag: "de2b102b65b463db0f1ba42ddb7fe396346c4eae"
Last-Modified: Mon, 27 Mar 2023 06:44:49 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3537
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ae6cb698f75067b-OSL
ocsp.digicert.com/
200 OK 727 B IP
Hash 4833aef4521cf85140e562e259c96853
c851595ee721027d22b2601a02a59242c04283af
9777236efd284cb7b6ab237fc7b75ee9bac2e3aebf0855df3ab681d00f616749
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 903
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:52 GMT
Etag: "64212a0c-2d7"
Last-Modified: Mon, 27 Mar 2023 09:46:49 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 727
ad-delivery.net/px.gif?ch=1&e=0.1820646796604135
200 OK 43 B URL HTTP/2 ad-delivery.net/px.gif?ch=1&e=0.1820646796604135
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=1&e=0.1820646796604135 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:52 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ADPycdtPGT2o0xjtSTj_l2to0_qmbbQ--3HuvenaYCxOjBSNMCRoWSPRIwFpDCq4Ey1CrfJIH6woC9yKxU5Xs5esPckX
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Thu, 09 Mar 2023 20:05:42 GMT
cache-control: public, max-age=86400
age: 1519666
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NuoCcFC3mc5NnhBqEwwzGoPTE2iFX2viROe9Pt0GVjEaqV%2Fe377Zr8wg0mEOdw6%2FoTRxXXNj15N0gWGnvTeoPQEAGa5j6FsJlNssk4yxDWWZnNErrmE%2FudhqY%2FiTHuzd5A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ae6cb699802b51d-OSL
X-Firefox-Spdy: h2
kraken.rambler.ru/cnt/?et=pv&v=3.13.10i&pid=2729707&tid=t1.2729707.254409371.1679911330550&rid=1679911330.549-399230837&fid=pA8AAENKs1e4GYz8AQlryQA%3D&eid=357113305873825&aduid=12187e52-93ff-4e49-ae5e-f19241c6cdb8&aduidsc=devid.info&stid=636906005_1679911330552&sn=1&sen=1&ce=1&bs=1268x939&rf&en=UTF-8&pt=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20iSlim310%20%D0%B4%D0%BB%D1%8F%20Windows%202000%20Windows%20XP%20Windows%202003&sr=1280x1024&cd=24-bit&la=en-US&ja=0&acn=Mozilla&an=Netscape&pl=Linux%20x86_64&tz=0&le=0&ct=web&url=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&lv&exp=%5B%5B%22exp_bot%22%2C%22split_b%22%5D%2C%5B%22exp_ping%22%2C%22no%22%5D%5D&rn=1727869716
200 OK 595 B URL HTTP/2 kraken.rambler.ru/cnt/?et=pv&v=3.13.10i&pid=2729707&tid=t1.2729707.254409371.1679911330550&rid=1679911330.549-399230837&fid=pA8AAENKs1e4GYz8AQlryQA%3D&eid=357113305873825&aduid=12187e52-93ff-4e49-ae5e-f19241c6cdb8&aduidsc=devid.info&stid=636906005_1679911330552&sn=1&sen=1&ce=1&bs=1268x939&rf&en=UTF-8&pt=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20iSlim310%20%D0%B4%D0%BB%D1%8F%20Windows%202000%20Windows%20XP%20Windows%202003&sr=1280x1024&cd=24-bit&la=en-US&ja=0&acn=Mozilla&an=Netscape&pl=Linux%20x86_64&tz=0&le=0&ct=web&url=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&lv&exp=%5B%5B%22exp_bot%22%2C%22split_b%22%5D%2C%5B%22exp_ping%22%2C%22no%22%5D%5D&rn=1727869716
IP
ASN #24638 Rambler Internet Holding LLC
File type GIF image data, version 87a, 88 x 31\012- data
Hash 2e7de88b1844c804542d0c5f59f8dafb
b98f73fb4585e557e14470cc0fb83c95dcd1c686
bed2365e0935b48d4d3b1392538a2bf1add63576b70f840e09ecd0ac619e234e
GET /cnt/?et=pv&v=3.13.10i&pid=2729707&tid=t1.2729707.254409371.1679911330550&rid=1679911330.549-399230837&fid=pA8AAENKs1e4GYz8AQlryQA%3D&eid=357113305873825&aduid=12187e52-93ff-4e49-ae5e-f19241c6cdb8&aduidsc=devid.info&stid=636906005_1679911330552&sn=1&sen=1&ce=1&bs=1268x939&rf&en=UTF-8&pt=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20iSlim310%20%D0%B4%D0%BB%D1%8F%20Windows%202000%20Windows%20XP%20Windows%202003&sr=1280x1024&cd=24-bit&la=en-US&ja=0&acn=Mozilla&an=Netscape&pl=Linux%20x86_64&tz=0&le=0&ct=web&url=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&lv&exp=%5B%5B%22exp_bot%22%2C%22split_b%22%5D%2C%5B%22exp_ping%22%2C%22no%22%5D%5D&rn=1727869716 HTTP/1.1
Host: kraken.rambler.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.19.4
date: Mon, 27 Mar 2023 10:01:52 GMT
content-type: image/gif
content-length: 595
last-modified: Tue, 12 Nov 2019 12:50:59 GMT
etag: "5dcaaab3-253"
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: content-type
access-control-allow-credentials: true
x-srv: 0kraken-prod0002.ad.rambler.tech
set-cookie: ruid=1CIAAJBpIWTKQwiuAbdKRAB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
proto_uid=1CIAAJBpIWTKQwiuAbdKRAB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
p3p: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
accept-ranges: bytes
X-Firefox-Spdy: h2
kraken.rambler.ru/cnt/v2/?event_type=base&event_name=page_view&project_id=2729707&session_id=636906005_1679911330552&session_number=1&session_event_number=1&version=3.13.10i&counter_type=web&experiment=%5B%5B%22exp_bot%22%2C%22split_b%22%5D%2C%5B%22exp_ping%22%2C%22no%22%5D%5D&top100_id=t1.2729707.254409371.1679911330550&adtech_uid=12187e52-93ff-4e49-ae5e-f19241c6cdb8&adtech_uid_scope=devid.info&fingerprint=pA8AAENKs1e4GYz8AQlryQA%3D&url=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&request_id=1679911330.549-399230837&event_id=271413305877910&meta=%7B%22title%22%3A%22%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20iSlim310%20%D0%B4%D0%BB%D1%8F%20Windows%202000%20Windows%20XP%20Windows%202003%22%2C%22referer%22%3A%22%22%2C%22screen_size%22%3A%221280x1024%22%2C%22browser_size%22%3A%221268x939%22%2C%22color_depth%22%3A%2224-bit%22%2C%22language%22%3A%22en-US%22%2C%22browser%22%3A%22Netscape%22%2C%22platform%22%3A%22Linux%20x86_64%22%2C%22timezone%22%3A%220%22%7D&rn=47673364
200 OK 595 B URL HTTP/2 kraken.rambler.ru/cnt/v2/?event_type=base&event_name=page_view&project_id=2729707&session_id=636906005_1679911330552&session_number=1&session_event_number=1&version=3.13.10i&counter_type=web&experiment=%5B%5B%22exp_bot%22%2C%22split_b%22%5D%2C%5B%22exp_ping%22%2C%22no%22%5D%5D&top100_id=t1.2729707.254409371.1679911330550&adtech_uid=12187e52-93ff-4e49-ae5e-f19241c6cdb8&adtech_uid_scope=devid.info&fingerprint=pA8AAENKs1e4GYz8AQlryQA%3D&url=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&request_id=1679911330.549-399230837&event_id=271413305877910&meta=%7B%22title%22%3A%22%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20iSlim310%20%D0%B4%D0%BB%D1%8F%20Windows%202000%20Windows%20XP%20Windows%202003%22%2C%22referer%22%3A%22%22%2C%22screen_size%22%3A%221280x1024%22%2C%22browser_size%22%3A%221268x939%22%2C%22color_depth%22%3A%2224-bit%22%2C%22language%22%3A%22en-US%22%2C%22browser%22%3A%22Netscape%22%2C%22platform%22%3A%22Linux%20x86_64%22%2C%22timezone%22%3A%220%22%7D&rn=47673364
IP
ASN #24638 Rambler Internet Holding LLC
File type GIF image data, version 87a, 88 x 31\012- data
Hash 2e7de88b1844c804542d0c5f59f8dafb
b98f73fb4585e557e14470cc0fb83c95dcd1c686
bed2365e0935b48d4d3b1392538a2bf1add63576b70f840e09ecd0ac619e234e
GET /cnt/v2/?event_type=base&event_name=page_view&project_id=2729707&session_id=636906005_1679911330552&session_number=1&session_event_number=1&version=3.13.10i&counter_type=web&experiment=%5B%5B%22exp_bot%22%2C%22split_b%22%5D%2C%5B%22exp_ping%22%2C%22no%22%5D%5D&top100_id=t1.2729707.254409371.1679911330550&adtech_uid=12187e52-93ff-4e49-ae5e-f19241c6cdb8&adtech_uid_scope=devid.info&fingerprint=pA8AAENKs1e4GYz8AQlryQA%3D&url=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&request_id=1679911330.549-399230837&event_id=271413305877910&meta=%7B%22title%22%3A%22%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20iSlim310%20%D0%B4%D0%BB%D1%8F%20Windows%202000%20Windows%20XP%20Windows%202003%22%2C%22referer%22%3A%22%22%2C%22screen_size%22%3A%221280x1024%22%2C%22browser_size%22%3A%221268x939%22%2C%22color_depth%22%3A%2224-bit%22%2C%22language%22%3A%22en-US%22%2C%22browser%22%3A%22Netscape%22%2C%22platform%22%3A%22Linux%20x86_64%22%2C%22timezone%22%3A%220%22%7D&rn=47673364 HTTP/1.1
Host: kraken.rambler.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.19.4
date: Mon, 27 Mar 2023 10:01:52 GMT
content-type: image/gif
content-length: 595
last-modified: Tue, 12 Nov 2019 12:50:59 GMT
etag: "5dcaaab3-253"
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: content-type
access-control-allow-credentials: true
x-srv: 0kraken-prod0002.ad.rambler.tech
set-cookie: ruid=1CIAAJBpIWTKQwiuAbhKRAB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
proto_uid=1CIAAJBpIWTKQwiuAbhKRAB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
p3p: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
accept-ranges: bytes
X-Firefox-Spdy: h2
vk.com/images/upload.gif
200 OK 230 B IP
File type GIF image data, version 89a, 32 x 8\012- data
Hash 59cd625f8c2ce03663123d59416378a1
b8d103133aadcdbe532e5642ddce9159b7385e4e
0d7e358637c1b1caa66949aefc529c1e4488923f99e499d6be09eb8cdd0b4202
GET /images/upload.gif HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:52 GMT
content-type: image/gif
content-length: 230
last-modified: Tue, 22 Sep 2020 20:30:00 GMT
etag: "5f6a5ec8-e6"
expires: Mon, 03 Apr 2023 10:01:52 GMT
cache-control: max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Mon, 27 Mar 2023 08:05:11 GMT
expires: Mon, 27 Mar 2023 10:05:11 GMT
cache-control: public, max-age=7200
age: 7002
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7f589a72ab0e3ceb789eec4838d09db5
df1112c32a41bae5630dcd131b2b4c2d15fcdee4
2751e53954ec7e46ba57c1095408154e639059066f5e5d5cc492e0ff96f2b5b0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ssl.google-analytics.com/ga.js
200 OK 17 kB URL HTTP/2 ssl.google-analytics.com/ga.js
IP
File type ASCII text, with very long lines (1305)
Hash 01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: ssl.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Mon, 27 Mar 2023 08:41:44 GMT
expires: Mon, 27 Mar 2023 10:41:44 GMT
cache-control: public, max-age=7200
age: 4809
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 362e8279c1ee6aa5851f104b8c4b1f4f
e5f8140335a492b81f4f7531655e63a896780d06
487d486eab8627135a3ad2ae584e2d43598387481c99604c7a1d2ea97dda191e
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:53 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Fri, 31 Mar 2023 08:57:27 GMT
ETag: "e5f8140335a492b81f4f7531655e63a896780d06"
Last-Modified: Mon, 27 Mar 2023 08:57:28 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1109
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ae6cb6a791db4f7-OSL
vk.com/widget_community.php?app=0&width=200px&_ver=1&gid=38164112&mode=0&color1=&color2=&color3=&class_name=&height=410&url=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&referrer=&title=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20iSlim310%20%D0%B4%D0%BB%D1%8F%20Windows%202000%20Windows%20XP%20Windows%202003&1872284a2c3
200 OK 13 kB URL HTTP/2 vk.com/widget_community.php?app=0&width=200px&_ver=1&gid=38164112&mode=0&color1=&color2=&color3=&class_name=&height=410&url=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&referrer=&title=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20iSlim310%20%D0%B4%D0%BB%D1%8F%20Windows%202000%20Windows%20XP%20Windows%202003&1872284a2c3
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Non-ISO extended-ASCII text, with very long lines (19492)
Hash 0f395761e5549ff5bf98619292979471
69328dc668f0ee6f6006af5891f2ff4ff843a364
c7cbf64d7a39e01a284875d2a9e88d0a7ef63d70815c7837f2e6f6c65ecf3fdc
GET /widget_community.php?app=0&width=200px&_ver=1&gid=38164112&mode=0&color1=&color2=&color3=&class_name=&height=410&url=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&referrer=&title=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20iSlim310%20%D0%B4%D0%BB%D1%8F%20Windows%202000%20Windows%20XP%20Windows%202003&1872284a2c3 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: text/html; charset=windows-1251
content-length: 13431
x-powered-by: KPHP/7.4.113549
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Tue, 26 Mar 2024 18:36:37 GMT; path=/; domain=.vk.com
remixstlid=9100182457167468066_18uVJcMU3XTPJaV1kJ1JDgW5TUHunX4EZ3pOTJaAVoL; expires=Tue, 26 Mar 2024 10:01:52 GMT; path=/; domain=.vk.com; secure
remixstid=722959261_eQywWFp30FMmXS3w7wHfPvu5z1W0TMykIkjccAjIZlT; expires=Wed, 27 Mar 2024 00:25:42 GMT; path=/; domain=.vk.com; secure
cache-control: no-store
content-security-policy: default-src * data: blob: about: vkcalls:;script-src 'self' https://vk.com https://*.vk.com https://vk.ru https://*.vk.ru https://static.vk.me https://*.mail.ru https://r.mradx.net https://s.ytimg.com https://platform.twitter.com https://cdn.syndication.twimg.com https://www.instagram.com https://connect.facebook.net https://telegram.org https://*.yandex.ru https://*.google-analytics.com https://*.youtube.com https://maps.googleapis.com https://translate.googleapis.com https://*.google.com https://google.com https://*.vkpartner.ru https://*.moatads.com https://*.adlooxtracking.ru https://*.serving-sys.ru https://*.weborama-tech.ru https://*.gstatic.com https://*.google.ru https://securepubads.g.doubleclick.net https://cdn.ampproject.org https://www.googletagmanager.com https://googletagmanager.com https://*.vk-cdn.net https://*.hit.gemius.pl https://yastatic.net https://analytics.tiktok.com 'unsafe-inline' 'unsafe-eval' blob:;style-src https://vk.com https://*.vk.com https://vk.ru https://*.vk.ru https://static.vk.me https://r.mradx.net https://ton.twimg.com https://tagmanager.google.com https://platform.twitter.com https://*.googleapis.com 'self' 'unsafe-inline'
x-xss-protection: 1; report=/xss_reports
content-encoding: gzip
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250
200 OK 104 B URL HTTP/2 ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250
IP
File type MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors\012- data
Hash 32ac8a9b81788b981a3a7e13c14082d4
fbfd48a2bfe8d4247a975176f88d18c3c2ad1952
00cc7617e054596ff0aaabd8a93a9214dc5304bfe317316022dbf4fb3ea073d2
GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
content-length: 104
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Mon, 27 Mar 2023 05:46:45 GMT
expires: Tue, 28 Mar 2023 05:46:45 GMT
cache-control: public, max-age=86400
age: 15308
last-modified: Tue, 08 May 2012 13:08:06 GMT
content-type: image/x-icon
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 362e8279c1ee6aa5851f104b8c4b1f4f
e5f8140335a492b81f4f7531655e63a896780d06
487d486eab8627135a3ad2ae584e2d43598387481c99604c7a1d2ea97dda191e
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:53 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Fri, 31 Mar 2023 08:57:27 GMT
ETag: "e5f8140335a492b81f4f7531655e63a896780d06"
Last-Modified: Mon, 27 Mar 2023 08:57:28 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1109
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ae6cb6a9948b4f7-OSL
counter.yadro.ru/hit?r;s1280*1024*24;uhttps%3A//devid.info/ru/208427/islim310;0.5914914112178747
200 OK 43 B URL HTTP/1.1 counter.yadro.ru/hit?r;s1280*1024*24;uhttps%3A//devid.info/ru/208427/islim310;0.5914914112178747
IP
ASN #39134 United Network LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit?r;s1280*1024*24;uhttps%3A//devid.info/ru/208427/islim310;0.5914914112178747 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Mon, 27 Mar 2023 10:01:53 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Sat, 26 Mar 2022 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 49 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
File type ASCII text, with very long lines (3599)
Hash 02d11399da89eac3de6aeb87d2f9bd80
fc4121cd74ca754d5d91136f1b1d8cf160643b61
08e196eaa85bb2258cee0ba915fee330fd1bf46b639e4bc3a168e7ac510255cf
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Mon, 27 Mar 2023 10:01:53 GMT
expires: Mon, 27 Mar 2023 10:01:53 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 8283072749694533354
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 48915
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
counter.yadro.ru/hit?t14.1;r;s1280*1024*24;uhttps%3A//devid.info/ru/208427/islim310;0.24853195563488173
200 OK 250 B URL HTTP/1.1 counter.yadro.ru/hit?t14.1;r;s1280*1024*24;uhttps%3A//devid.info/ru/208427/islim310;0.24853195563488173
IP
ASN #39134 United Network LLC
File type GIF image data, version 89a, 88 x 31\012- data
Hash c13becb278acf395a275f1fec97ac876
8917dff1ccf523dbeb5cda2dfb966a22cc6a67f6
006b142ff6a552302186de552be7fedcd3914b7b438603cefaafb6b997da2d1d
GET /hit?t14.1;r;s1280*1024*24;uhttps%3A//devid.info/ru/208427/islim310;0.24853195563488173 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Mon, 27 Mar 2023 10:01:53 GMT
Content-Type: image/gif
Content-Length: 250
Connection: keep-alive
Expires: Sat, 26 Mar 2022 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7f589a72ab0e3ceb789eec4838d09db5
df1112c32a41bae5630dcd131b2b4c2d15fcdee4
2751e53954ec7e46ba57c1095408154e639059066f5e5d5cc492e0ff96f2b5b0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.ok.ru/connect.js
200 OK 3.5 kB IP
File type ASCII text, with very long lines (2871), with no line terminators
Hash a5c8dfc799a582d44f8e2c211f470f96
bb337f7dbc58bafe488e161a6b8cdd12d0968c3c
d71c56a56d23e8a882da2e1f09018eeeb4014ee2d6b20ffb4b112cbf3ee1c4d9
GET /connect.js HTTP/1.1
Host: connect.ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:52 GMT
content-type: text/javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
p.gcprivacy.com/t/gcid_s.min.js
200 OK 9.5 kB URL HTTP/2 p.gcprivacy.com/t/gcid_s.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (9498)
Hash dac6676675972d00f4ec994de0578005
4b0a99773e109d54cf705ac198930869069e3de6
8548fa5f198e18b0feca552d0f369f4c9fc15b9990ef9d28ab2fc556f3e8153e
GET /t/gcid_s.min.js HTTP/1.1
Host: p.gcprivacy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 9500
date: Mon, 27 Mar 2023 02:11:47 GMT
last-modified: Fri, 06 Jan 2023 15:37:53 GMT
etag: "dac6676675972d00f4ec994de0578005"
x-amz-server-side-encryption: AES256
x-amz-version-id: sbZKwqqxtvM50Otwl3WJaXFYTCAIgKPH
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PTIQLWAr_ZEy5ob3oVJAOIGS6W28qXnhRqDPvgjo2FLHLQT2Pxl05Q==
age: 28207
X-Firefox-Spdy: h2
aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&pid=HiLr5d9bU8CPY&cb=0&ws=1280x939&v=23.320.1710&t=2000&slots=%5B%7B%22sd%22%3A%2253bb4ffa-47df-4a0b-b77a-4536da8c52e1%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%2C%22300x250%22%5D%2C%22sn%22%3A%22%2F127208727%2Fdi_ros_970x250_top%22%7D%2C%7B%22sd%22%3A%2290ce86dd-f831-4342-9cb3-73f2256f5423%22%2C%22s%22%3A%5B%22160x600%22%2C%22120x600%22%2C%22300x250%22%2C%22300x600%22%5D%2C%22sn%22%3A%22%2F127208727%2Fdi_ros_300x600_top%22%7D%2C%7B%22sd%22%3A%2247ae7880-55ac-463f-b980-49d72b7208a4%22%2C%22s%22%3A%5B%22336x280%22%2C%22300x250%22%5D%2C%22sn%22%3A%22%2F127208727%2Fdi_ros_336x280_left_btf%22%7D%2C%7B%22sd%22%3A%222f073d80-c566-4af1-ac9e-193873a95ea6%22%2C%22s%22%3A%5B%22336x280%22%2C%22300x250%22%5D%2C%22sn%22%3A%22%2F127208727%2Fdi_ros_336x280_right_btf%22%7D%2C%7B%22sd%22%3A%22ece6f551-3d50-4522-89d0-af7c2917ea8c%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F127208727%2Fdi_ros_728v%22%7D%5D&pj=%7B%22adRefresh%22%3A%220%22%7D&schain=1.0%2C1!adapex.io%2Cs67%2C1%2C%2C%2C&pubid=aae5fce7-148c-42d1-b4a2-3be1a1ffbd25&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
200 OK 185 B URL HTTP/2 aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&pid=HiLr5d9bU8CPY&cb=0&ws=1280x939&v=23.320.1710&t=2000&slots=%5B%7B%22sd%22%3A%2253bb4ffa-47df-4a0b-b77a-4536da8c52e1%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%2C%22300x250%22%5D%2C%22sn%22%3A%22%2F127208727%2Fdi_ros_970x250_top%22%7D%2C%7B%22sd%22%3A%2290ce86dd-f831-4342-9cb3-73f2256f5423%22%2C%22s%22%3A%5B%22160x600%22%2C%22120x600%22%2C%22300x250%22%2C%22300x600%22%5D%2C%22sn%22%3A%22%2F127208727%2Fdi_ros_300x600_top%22%7D%2C%7B%22sd%22%3A%2247ae7880-55ac-463f-b980-49d72b7208a4%22%2C%22s%22%3A%5B%22336x280%22%2C%22300x250%22%5D%2C%22sn%22%3A%22%2F127208727%2Fdi_ros_336x280_left_btf%22%7D%2C%7B%22sd%22%3A%222f073d80-c566-4af1-ac9e-193873a95ea6%22%2C%22s%22%3A%5B%22336x280%22%2C%22300x250%22%5D%2C%22sn%22%3A%22%2F127208727%2Fdi_ros_336x280_right_btf%22%7D%2C%7B%22sd%22%3A%22ece6f551-3d50-4522-89d0-af7c2917ea8c%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F127208727%2Fdi_ros_728v%22%7D%5D&pj=%7B%22adRefresh%22%3A%220%22%7D&schain=1.0%2C1!adapex.io%2Cs67%2C1%2C%2C%2C&pubid=aae5fce7-148c-42d1-b4a2-3be1a1ffbd25&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
IP
File type ASCII text, with no line terminators
Hash 185086130806ecb183bdd102e8362692
8d7c113b4f653d35bd76fc51950f4728c848939d
566fadc0ba89ca5c4e8523fb18285cce068383eba06ed780ba31a7685b5f55ea
GET /e/dtb/bid?src=600&u=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&pid=HiLr5d9bU8CPY&cb=0&ws=1280x939&v=23.320.1710&t=2000&slots=%5B%7B%22sd%22%3A%2253bb4ffa-47df-4a0b-b77a-4536da8c52e1%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x90%22%2C%22970x250%22%2C%22300x250%22%5D%2C%22sn%22%3A%22%2F127208727%2Fdi_ros_970x250_top%22%7D%2C%7B%22sd%22%3A%2290ce86dd-f831-4342-9cb3-73f2256f5423%22%2C%22s%22%3A%5B%22160x600%22%2C%22120x600%22%2C%22300x250%22%2C%22300x600%22%5D%2C%22sn%22%3A%22%2F127208727%2Fdi_ros_300x600_top%22%7D%2C%7B%22sd%22%3A%2247ae7880-55ac-463f-b980-49d72b7208a4%22%2C%22s%22%3A%5B%22336x280%22%2C%22300x250%22%5D%2C%22sn%22%3A%22%2F127208727%2Fdi_ros_336x280_left_btf%22%7D%2C%7B%22sd%22%3A%222f073d80-c566-4af1-ac9e-193873a95ea6%22%2C%22s%22%3A%5B%22336x280%22%2C%22300x250%22%5D%2C%22sn%22%3A%22%2F127208727%2Fdi_ros_336x280_right_btf%22%7D%2C%7B%22sd%22%3A%22ece6f551-3d50-4522-89d0-af7c2917ea8c%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22sn%22%3A%22%2F127208727%2Fdi_ros_728v%22%7D%5D&pj=%7B%22adRefresh%22%3A%220%22%7D&schain=1.0%2C1!adapex.io%2Cs67%2C1%2C%2C%2C&pubid=aae5fce7-148c-42d1-b4a2-3be1a1ffbd25&gdprl=%7B%22status%22%3A%22no-cmp%22%7D HTTP/1.1
Host: aax.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
content-length: 185
server: Server
date: Mon, 27 Mar 2023 10:01:53 GMT
x-amz-rid: 21B2MZAGYQ33JZGXRF3F
access-control-allow-origin: https://devid.info
access-control-allow-credentials: true
timing-allow-origin: *
strict-transport-security: max-age=47474747; includeSubDomains; preload
vary: Accept-Encoding,User-Agent
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: u3Ui3ZFkYcaoK4pLnDJaaXkv4RF9JcM2hGpoQbHCMoc8MIyS3AOKiQ==
X-Firefox-Spdy: h2
status.geotrust.com/
200 OK 471 B IP
Hash 5ef408cfeb78e39323658f0d79b8ca5e
bb8bb51a7829d85379e18fa606063019f62c8f57
8b2c44a54b4dd773065c35d1a112ee856f69666b64a34775036e735ad8c51f7a
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5349
Cache-Control: max-age=105725
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:53 GMT
Etag: "64204ea9-1d7"
Expires: Tue, 28 Mar 2023 15:23:58 GMT
Last-Modified: Sun, 26 Mar 2023 13:54:49 GMT
Server: ECAcc (ska/F73A)
X-Cache: HIT
Content-Length: 471
digikulture-d.openx.net/w/1.0/arj?ju=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&ch=UTF-8&res=1280x1024x24&ifr=false&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=cdd2ea81-9c6d-4049-aa1a-ef1542aea038%2C698c5a13-ff8b-4f80-b69b-f95eb5a5a393%2C7500152a-8e7d-4b8f-97e9-c65d0d4d9be5%2C0e35a46a-6438-4a00-9a43-e4b1dcf33752%2Cd3375b25-b7b8-4d5a-a38a-8955ca429b29&nocache=1679911330928&pubcid=8732d9bd-1cf3-4911-ace4-7ef9c1e0c41f&schain=1.0%2C1!adapex.io%2Cs67%2C1%2C%2C%2C&aus=728x90%2C970x90%2C970x250%2C300x250%7C160x600%2C120x600%2C300x250%2C300x600%7C336x280%2C300x250%7C336x280%2C300x250%7C728x90&divids=53bb4ffa-47df-4a0b-b77a-4536da8c52e1%2C90ce86dd-f831-4342-9cb3-73f2256f5423%2C47ae7880-55ac-463f-b980-49d72b7208a4%2C2f073d80-c566-4af1-ac9e-193873a95ea6%2Cece6f551-3d50-4522-89d0-af7c2917ea8c&aucs=%252F127208727%252Fdi_ros_970x250_top%2C%252F127208727%252Fdi_ros_300x600_top%2C%252F127208727%252Fdi_ros_336x280_left_btf%2C%252F127208727%252Fdi_ros_336x280_right_btf%2C%252F127208727%252Fdi_ros_728v&auid=543878760%2C543878770%2C543878783%2C543878784%2C543878780&aumfs=36%2C36%2C36%2C36%2C36
200 OK 78 B URL HTTP/2 digikulture-d.openx.net/w/1.0/arj?ju=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&ch=UTF-8&res=1280x1024x24&ifr=false&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=cdd2ea81-9c6d-4049-aa1a-ef1542aea038%2C698c5a13-ff8b-4f80-b69b-f95eb5a5a393%2C7500152a-8e7d-4b8f-97e9-c65d0d4d9be5%2C0e35a46a-6438-4a00-9a43-e4b1dcf33752%2Cd3375b25-b7b8-4d5a-a38a-8955ca429b29&nocache=1679911330928&pubcid=8732d9bd-1cf3-4911-ace4-7ef9c1e0c41f&schain=1.0%2C1!adapex.io%2Cs67%2C1%2C%2C%2C&aus=728x90%2C970x90%2C970x250%2C300x250%7C160x600%2C120x600%2C300x250%2C300x600%7C336x280%2C300x250%7C336x280%2C300x250%7C728x90&divids=53bb4ffa-47df-4a0b-b77a-4536da8c52e1%2C90ce86dd-f831-4342-9cb3-73f2256f5423%2C47ae7880-55ac-463f-b980-49d72b7208a4%2C2f073d80-c566-4af1-ac9e-193873a95ea6%2Cece6f551-3d50-4522-89d0-af7c2917ea8c&aucs=%252F127208727%252Fdi_ros_970x250_top%2C%252F127208727%252Fdi_ros_300x600_top%2C%252F127208727%252Fdi_ros_336x280_left_btf%2C%252F127208727%252Fdi_ros_336x280_right_btf%2C%252F127208727%252Fdi_ros_728v&auid=543878760%2C543878770%2C543878783%2C543878784%2C543878780&aumfs=36%2C36%2C36%2C36%2C36
IP
File type JSON data\012- , ASCII text
Hash d74c8370dee249963e0f8ad3461e1199
52daa33f7bafef1f0877d5e5e0d7d6d868d2b501
a26c500312b64898ae2db929703717f9d5ae07c3c967bf13188497da62ac7585
GET /w/1.0/arj?ju=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&ch=UTF-8&res=1280x1024x24&ifr=false&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=cdd2ea81-9c6d-4049-aa1a-ef1542aea038%2C698c5a13-ff8b-4f80-b69b-f95eb5a5a393%2C7500152a-8e7d-4b8f-97e9-c65d0d4d9be5%2C0e35a46a-6438-4a00-9a43-e4b1dcf33752%2Cd3375b25-b7b8-4d5a-a38a-8955ca429b29&nocache=1679911330928&pubcid=8732d9bd-1cf3-4911-ace4-7ef9c1e0c41f&schain=1.0%2C1!adapex.io%2Cs67%2C1%2C%2C%2C&aus=728x90%2C970x90%2C970x250%2C300x250%7C160x600%2C120x600%2C300x250%2C300x600%7C336x280%2C300x250%7C336x280%2C300x250%7C728x90&divids=53bb4ffa-47df-4a0b-b77a-4536da8c52e1%2C90ce86dd-f831-4342-9cb3-73f2256f5423%2C47ae7880-55ac-463f-b980-49d72b7208a4%2C2f073d80-c566-4af1-ac9e-193873a95ea6%2Cece6f551-3d50-4522-89d0-af7c2917ea8c&aucs=%252F127208727%252Fdi_ros_970x250_top%2C%252F127208727%252Fdi_ros_300x600_top%2C%252F127208727%252Fdi_ros_336x280_left_btf%2C%252F127208727%252Fdi_ros_336x280_right_btf%2C%252F127208727%252Fdi_ros_728v&auid=543878760%2C543878770%2C543878783%2C543878784%2C543878780&aumfs=36%2C36%2C36%2C36%2C36 HTTP/1.1
Host: digikulture-d.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: application/json
content-length: 78
content-encoding: gzip
cache-control: private, max-age=0, no-cache
access-control-allow-origin: https://devid.info
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
200 OK 253 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP
File type JSON data\012- , ASCII text, with very long lines (594), with no line terminators
Hash a448b3c245321ad33a4bd22f7046cd02
2337af94d897d3d7fa84be8277a1557f089daef1
ed0cb912e45e5afce486e9a8ada95c7202cae8c4107edebc5cccb15a9d135f75
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2274
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Mon, 27 Mar 2023 10:01:53 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://devid.info
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 2248504a-8cd3-41d0-be1e-12ffb3cf12b3
Set-Cookie: icu=ChgI3uM8EAoYASABKAEwkdOFoQY4AUABSAEQkdOFoQYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 25-Jun-2023 10:01:53 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=7045505594120835415; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 25-Jun-2023 10:01:53 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1002.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ed8a6a15efdfd564252753b7124e904d
cb810c7eab2f94657ab141162d7fdcb6137240fc
f28c8fdaca48797394cec951ca6b58175417411ec2adbe99c258269a7066b67b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F28C8FDACA48797394CEC951CA6B58175417411EC2ADBE99C258269A7066B67B"
Last-Modified: Sat, 25 Mar 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4880
Expires: Mon, 27 Mar 2023 11:23:13 GMT
Date: Mon, 27 Mar 2023 10:01:53 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 312 B IP
Hash 4de6753f4042274a9282af76d154ec14
7e44f96cdb48bc658c93fca5db12f8b008c27f74
51f6953a25ba29ba727edec65f1307e780e4c7bd13b56d6a0fbb98f219f6d79b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2521
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:53 GMT
Last-Modified: Mon, 27 Mar 2023 09:19:52 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 312
ib.adnxs.com/openrtb2/prebid
200 OK 7.1 kB URL HTTP/1.1 ib.adnxs.com/openrtb2/prebid
IP
File type JSON data\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (24584), with no line terminators
Hash 32a457411ab45f0553d0aa09fc9be29d
dc5f8c0a0be473942a590d4025ead2d574a7b65a
3bd561100deb51451017d68ac922195dfc3c2b354a6d3f41f09f9b3ba19a7886
POST /openrtb2/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 6675
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Mon, 27 Mar 2023 10:01:53 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://devid.info
x-openrtb-version: 2.4
AN-X-Request-Uuid: 1e43db49-b016-47b7-affd-5d52b01454a4
Set-Cookie: icu=ChgI3uM8EAoYASABKAEwkdOFoQY4AUABSAEQkdOFoQYYAA..; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 25-Jun-2023 10:01:53 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 471 B IP
Hash 294e4005487bc8b4343629c4497ccab8
81269f898f3c4e3714c0c98f5ad9e6789b0281e7
ab9b2fbac3a440295cc5a02160606133fc0479f86cb92beab92c0dda06495d08
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6362
Cache-Control: max-age=87638
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:53 GMT
Etag: "6420040d-1d7"
Expires: Tue, 28 Mar 2023 10:22:31 GMT
Last-Modified: Sun, 26 Mar 2023 08:36:29 GMT
Server: ECAcc (ska/F776)
X-Cache: HIT
Content-Length: 471
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 456
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 27 Mar 2023 10:01:53 GMT
cache-control: no-cache, private
access-control-allow-origin: https://devid.info
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7ae6cb6d2f4309a5-ARN
X-Firefox-Spdy: h2
prebid.a-mo.net/a/c
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 3398
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://devid.info
cache-control: max-age=0, private, must-revalidate
date: Mon, 27 Mar 2023 10:01:53 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 1
set-cookie: X-Contour-Session-Affinity="066cf04aa939a187"; Path=/; HttpOnly
X-Firefox-Spdy: h2
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 438
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 27 Mar 2023 10:01:53 GMT
cache-control: no-cache, private
access-control-allow-origin: https://devid.info
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7ae6cb6cfeef09a5-ARN
X-Firefox-Spdy: h2
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 457
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 27 Mar 2023 10:01:53 GMT
cache-control: no-cache, private
access-control-allow-origin: https://devid.info
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7ae6cb6d4f8609a5-ARN
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 88e88c509a84b92013f23fc3ad030d9c
71cfbfc4d88e610aff3ede09f469cbc6675a5df1
facbec1ee3b2fff9114f8b6e4d4735f5ef6eace03f40cea028382048278341f1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6350
Cache-Control: max-age=170127
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:53 GMT
Etag: "64214652-1d7"
Expires: Wed, 29 Mar 2023 09:17:20 GMT
Last-Modified: Mon, 27 Mar 2023 07:31:30 GMT
Server: ECAcc (ska/F7A3)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 5ef408cfeb78e39323658f0d79b8ca5e
bb8bb51a7829d85379e18fa606063019f62c8f57
8b2c44a54b4dd773065c35d1a112ee856f69666b64a34775036e735ad8c51f7a
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4909
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:53 GMT
Last-Modified: Mon, 27 Mar 2023 08:40:04 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash dc0915897816a707313961fba0840ee0
683cb74558b13199cb034de032061fad01ad2949
e962b058c8ac4352c58f6ab90eb90f2ce7ef3bc092e9626ca6efb141781c6b2a
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=144445
Date: Mon, 27 Mar 2023 10:01:53 GMT
Etag: "6420e7ed-1d7"
Expires: Wed, 29 Mar 2023 02:09:18 GMT
Last-Modified: Mon, 27 Mar 2023 00:48:45 GMT
Server: ECAcc (bsa/EB4C)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ddTjX6GxvWkFr63rsOIr5gMjTdDny31M7_PNQgwyrB7m5txCUc7kUg==
Age: 4833
fonts.googleapis.com/css?family=Ubuntu
200 OK 453 B URL HTTP/2 fonts.googleapis.com/css?family=Ubuntu
IP
Hash 8e19b9552ddc6a89689d58a5fe169454
f4e0af0a51aae19d96154f4fda7140000bc32200
195ebeec349029bcafbc150270ff2e398b9d2beec5b99b6a894525c865a40078
GET /css?family=Ubuntu HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 27 Mar 2023 10:01:52 GMT
date: Mon, 27 Mar 2023 10:01:52 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
prebid.smilewanted.com/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: prebid.smilewanted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 491
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 27 Mar 2023 10:01:53 GMT
cache-control: no-cache, private
access-control-allow-origin: https://devid.info
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7ae6cb6d883c09a5-ARN
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ae27b2934388782f5bb0328d23f7a245
639e25c96475a42f0c6d7ef3a7769ca84511c194
1156c03113a597bd9a7c17479d1d91b0bf7f4b192f6cae8103ab41e97a1abf48
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1905
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:53 GMT
Etag: "64212479-1d7"
Last-Modified: Mon, 27 Mar 2023 09:30:08 GMT
Server: ECAcc (ska/F757)
X-Cache: HIT
Content-Length: 471
c2shb.pubgw.yahoo.com/bidRequest
200 OK 0 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-openrtb-version
Referer: https://devid.info/
Origin: https://devid.info
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:53 GMT
content-length: 0
server: ATS/9.1.10.25
access-control-allow-origin: https://devid.info
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: X-Requested-With,Content-Type,X-Openrtb-Version
access-control-allow-credentials: true
access-control-max-age: 600
age: 0
X-Firefox-Spdy: h2
ad.360yield.com/1914/pb
400 Bad Request 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /1914/pb HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2983
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 400 Bad Request
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: text/html; charset=UTF-8
content-length: 0
access-control-allow-origin: https://devid.info
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ae27b2934388782f5bb0328d23f7a245
639e25c96475a42f0c6d7ef3a7769ca84511c194
1156c03113a597bd9a7c17479d1d91b0bf7f4b192f6cae8103ab41e97a1abf48
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3704
Cache-Control: max-age=158816
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:53 GMT
Etag: "64212479-1d7"
Expires: Wed, 29 Mar 2023 06:08:49 GMT
Last-Modified: Mon, 27 Mar 2023 05:07:05 GMT
Server: ECAcc (ska/F73A)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/s/gts1d4/C9sIyVCC2ts
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/C9sIyVCC2ts
IP
Hash a9683d29537c2eb059bec763cd751bb8
f75dddeb0ba61efb3502b44ffa23ad4459edf5f7
e8717f6fbd2717788c2cfd128ec39ca9a51997b8f0566621a383df6484680eaf
POST /s/gts1d4/C9sIyVCC2ts HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:53 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/C9sIyVCC2ts
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/C9sIyVCC2ts
IP
Hash a9683d29537c2eb059bec763cd751bb8
f75dddeb0ba61efb3502b44ffa23ad4459edf5f7
e8717f6fbd2717788c2cfd128ec39ca9a51997b8f0566621a383df6484680eaf
POST /s/gts1d4/C9sIyVCC2ts HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:53 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17262&site_id=209472&zone_id=1259744&size_id=2&p_pos=atf&rp_schain=1.0,1!adapex.io,s67,1,62da9f98-9238-4459-aa5d-3db06b1b3cda,,&eid_pubcid.org=8732d9bd-1cf3-4911-ace4-7ef9c1e0c41f%5E1&rf=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&kw=%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D0%B4%D0%BB%D1%8FiSlim310&tg_i.page=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&tg_i.domain=devid.info&tg_i.pbadslot=%2F127208727%2Fdi_ros_728v&tg_i.gpid=%2F127208727%2Fdi_ros_728v&tk_flint=pbjs_lite_v7.38.0&x_source.tid=d3375b25-b7b8-4d5a-a38a-8955ca429b29&l_pb_bid_id=138f924d9b4ba1778&p_screen_res=1280x1024&rp_secure=1&rp_hard_floor=0.01&rp_maxbids=1&p_gpid=%2F127208727%2Fdi_ros_728v&slots=1&rand=0.16612828280699588
200 OK 387 B URL HTTP/1.1 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17262&site_id=209472&zone_id=1259744&size_id=2&p_pos=atf&rp_schain=1.0,1!adapex.io,s67,1,62da9f98-9238-4459-aa5d-3db06b1b3cda,,&eid_pubcid.org=8732d9bd-1cf3-4911-ace4-7ef9c1e0c41f%5E1&rf=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&kw=%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D0%B4%D0%BB%D1%8FiSlim310&tg_i.page=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&tg_i.domain=devid.info&tg_i.pbadslot=%2F127208727%2Fdi_ros_728v&tg_i.gpid=%2F127208727%2Fdi_ros_728v&tk_flint=pbjs_lite_v7.38.0&x_source.tid=d3375b25-b7b8-4d5a-a38a-8955ca429b29&l_pb_bid_id=138f924d9b4ba1778&p_screen_res=1280x1024&rp_secure=1&rp_hard_floor=0.01&rp_maxbids=1&p_gpid=%2F127208727%2Fdi_ros_728v&slots=1&rand=0.16612828280699588
IP
File type JSON data\012- , ASCII text, with very long lines (387), with no line terminators
Hash 1e9f18e5b2ceba87f068bc22ad5696ec
aee2f1d060024a027d0f7e36a86c955e3907c42b
ae9569b4f83c880a28011102d1aa8de1df4290881c26b76a34d3fac43b7c3aca
GET /a/api/fastlane.json?account_id=17262&site_id=209472&zone_id=1259744&size_id=2&p_pos=atf&rp_schain=1.0,1!adapex.io,s67,1,62da9f98-9238-4459-aa5d-3db06b1b3cda,,&eid_pubcid.org=8732d9bd-1cf3-4911-ace4-7ef9c1e0c41f%5E1&rf=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&kw=%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D0%B4%D0%BB%D1%8FiSlim310&tg_i.page=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&tg_i.domain=devid.info&tg_i.pbadslot=%2F127208727%2Fdi_ros_728v&tg_i.gpid=%2F127208727%2Fdi_ros_728v&tk_flint=pbjs_lite_v7.38.0&x_source.tid=d3375b25-b7b8-4d5a-a38a-8955ca429b29&l_pb_bid_id=138f924d9b4ba1778&p_screen_res=1280x1024&rp_secure=1&rp_hard_floor=0.01&rp_maxbids=1&p_gpid=%2F127208727%2Fdi_ros_728v&slots=1&rand=0.16612828280699588 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.4
Date: Mon, 27 Mar 2023 10:01:53 GMT
Content-Type: application/json
Content-Length: 387
Connection: keep-alive
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://devid.info
Pragma: no-cache
Vary: Accept-Encoding
Set-Cookie: khaos=LFQNTLG3-8-61XI; Domain=.rubiconproject.com; Path=/; Expires=Tue, 26-Mar-2024 10:01:53 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|hLZGFuTafB0On7tncGKPm+9DtVM30fCgq/3jPf+UBunXBb9gRi51RalC+70L5eAA4HEYI5ehIrWq2GCPWNASwdzpQ7vzkXQ/; Domain=.rubiconproject.com; Path=/; Expires=Tue, 26-Mar-2024 10:01:53 GMT; Max-Age=31536000; SameSite=None; Secure
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17262&site_id=209472&zone_id=1761198&size_id=15&alt_size_ids=16&p_pos=atf&rp_schain=1.0,1!adapex.io,s67,1,62da9f98-9238-4459-aa5d-3db06b1b3cda,,&eid_pubcid.org=8732d9bd-1cf3-4911-ace4-7ef9c1e0c41f%5E1&rf=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&kw=%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D0%B4%D0%BB%D1%8FiSlim310&tg_i.page=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&tg_i.domain=devid.info&tg_i.pbadslot=%2F127208727%2Fdi_ros_336x280_left_btf&tg_i.gpid=%2F127208727%2Fdi_ros_336x280_left_btf&tk_flint=pbjs_lite_v7.38.0&x_source.tid=7500152a-8e7d-4b8f-97e9-c65d0d4d9be5&l_pb_bid_id=1362f40a624189418&p_screen_res=1280x1024&rp_secure=1&rp_hard_floor=0.01&rp_maxbids=1&p_gpid=%2F127208727%2Fdi_ros_336x280_left_btf&slots=1&rand=0.5554568341683425
200 OK 432 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17262&site_id=209472&zone_id=1761198&size_id=15&alt_size_ids=16&p_pos=atf&rp_schain=1.0,1!adapex.io,s67,1,62da9f98-9238-4459-aa5d-3db06b1b3cda,,&eid_pubcid.org=8732d9bd-1cf3-4911-ace4-7ef9c1e0c41f%5E1&rf=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&kw=%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D0%B4%D0%BB%D1%8FiSlim310&tg_i.page=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&tg_i.domain=devid.info&tg_i.pbadslot=%2F127208727%2Fdi_ros_336x280_left_btf&tg_i.gpid=%2F127208727%2Fdi_ros_336x280_left_btf&tk_flint=pbjs_lite_v7.38.0&x_source.tid=7500152a-8e7d-4b8f-97e9-c65d0d4d9be5&l_pb_bid_id=1362f40a624189418&p_screen_res=1280x1024&rp_secure=1&rp_hard_floor=0.01&rp_maxbids=1&p_gpid=%2F127208727%2Fdi_ros_336x280_left_btf&slots=1&rand=0.5554568341683425
IP
File type JSON data\012- , ASCII text, with very long lines (432), with no line terminators
Hash 215331a31cc0302b272650c682837b38
8ffa83cd8a475a61790c0fef78cb4eaf73b4d291
8648cafcdc55a84d253b38094d925ecb04d4f8fd30b3a52dadb5145140cbbef6
GET /a/api/fastlane.json?account_id=17262&site_id=209472&zone_id=1761198&size_id=15&alt_size_ids=16&p_pos=atf&rp_schain=1.0,1!adapex.io,s67,1,62da9f98-9238-4459-aa5d-3db06b1b3cda,,&eid_pubcid.org=8732d9bd-1cf3-4911-ace4-7ef9c1e0c41f%5E1&rf=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&kw=%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D0%B4%D0%BB%D1%8FiSlim310&tg_i.page=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&tg_i.domain=devid.info&tg_i.pbadslot=%2F127208727%2Fdi_ros_336x280_left_btf&tg_i.gpid=%2F127208727%2Fdi_ros_336x280_left_btf&tk_flint=pbjs_lite_v7.38.0&x_source.tid=7500152a-8e7d-4b8f-97e9-c65d0d4d9be5&l_pb_bid_id=1362f40a624189418&p_screen_res=1280x1024&rp_secure=1&rp_hard_floor=0.01&rp_maxbids=1&p_gpid=%2F127208727%2Fdi_ros_336x280_left_btf&slots=1&rand=0.5554568341683425 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.4
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://devid.info
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LFQNTLG8-5-I3Y5; Domain=.rubiconproject.com; Path=/; Expires=Tue, 26-Mar-2024 10:01:53 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|hLZGFuTafB3EwddmnalRJ+9DtVM30fCgq/3jPf+UBunXBb9gRi51RalC+70L5eAA4HEYI5ehIrWq2GCPWNASwdzpQ7vzkXQ/; Domain=.rubiconproject.com; Path=/; Expires=Tue, 26-Mar-2024 10:01:53 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 432
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 7ef51c0fa2320bb875996a5e9dc8a3b2
9800551f1f2e2b51d6bd2142972770683dc5df97
0e153635305bdf3a1bcda79feac0d97209af15bc0044cc176c3b8a621c768f22
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:53 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 25 Mar 2023 01:56:50 GMT
Expires: Sat, 01 Apr 2023 01:56:49 GMT
Etag: "9800551f1f2e2b51d6bd2142972770683dc5df97"
Cache-Control: max-age=402295,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ae6cb6e0852fac0-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash 1f676e95ba006bab875fd7e28d50626e
e2523d6c10d39befafa2cfbbad9cddc2d9d28141
9c501bc0dd6d5576a06b34d89fb67e2845df20230682d0e3bff1246e2d3fd675
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4005
Cache-Control: max-age=108350
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:53 GMT
Etag: "64205e2a-1d7"
Expires: Tue, 28 Mar 2023 16:07:43 GMT
Last-Modified: Sun, 26 Mar 2023 15:00:58 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 472 B IP
Hash f93d820dcdbcbe50f8196fdd8abb9d75
85ebe02bbc653434d4867eda0916dcee8bc0e043
b8e19706bdeaaa3e73c2cb8b642f427b4b5fe53d06bba70ccb2e32069e1ec1fb
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:53 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 25 Mar 2023 07:45:29 GMT
Expires: Sat, 01 Apr 2023 07:45:28 GMT
Etag: "85ebe02bbc653434d4867eda0916dcee8bc0e043"
Cache-Control: max-age=423214,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ae6cb6d7897fac4-OSL
googleads.g.doubleclick.net/pagead/html/r20230322/r20190131/zrt_lookup.html
200 OK 4.5 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20230322/r20190131/zrt_lookup.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3205)
Hash bad17ab9662318e8927e5009c83c2ad1
53ded630f95abe04b7b77d43076bf71b9ea71c02
68da39270ebfa6d17f4b765cbe004797a736611585ff0c53213d91f78f13c260
GET /pagead/html/r20230322/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 4549
x-xss-protection: 0
date: Sun, 26 Mar 2023 12:50:23 GMT
expires: Sun, 09 Apr 2023 12:50:23 GMT
cache-control: public, max-age=1209600
age: 76290
etag: 2378337311435320485
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17262&site_id=209472&zone_id=1030436&size_id=16&alt_size_ids=57&p_pos=atf&rp_schain=1.0,1!adapex.io,s67,1,62da9f98-9238-4459-aa5d-3db06b1b3cda,,&eid_pubcid.org=8732d9bd-1cf3-4911-ace4-7ef9c1e0c41f%5E1&rf=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&kw=%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D0%B4%D0%BB%D1%8FiSlim310&tg_i.page=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&tg_i.domain=devid.info&tg_i.pbadslot=%2F127208727%2Fdi_ros_970x250_top&tg_i.gpid=%2F127208727%2Fdi_ros_970x250_top&tk_flint=pbjs_lite_v7.38.0&x_source.tid=cdd2ea81-9c6d-4049-aa1a-ef1542aea038&l_pb_bid_id=134246cc2febdbd3&p_screen_res=1280x1024&rp_secure=1&rp_hard_floor=0.01&rp_maxbids=1&p_gpid=%2F127208727%2Fdi_ros_970x250_top&slots=1&rand=0.9377656444676411
200 OK 402 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17262&site_id=209472&zone_id=1030436&size_id=16&alt_size_ids=57&p_pos=atf&rp_schain=1.0,1!adapex.io,s67,1,62da9f98-9238-4459-aa5d-3db06b1b3cda,,&eid_pubcid.org=8732d9bd-1cf3-4911-ace4-7ef9c1e0c41f%5E1&rf=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&kw=%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D0%B4%D0%BB%D1%8FiSlim310&tg_i.page=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&tg_i.domain=devid.info&tg_i.pbadslot=%2F127208727%2Fdi_ros_970x250_top&tg_i.gpid=%2F127208727%2Fdi_ros_970x250_top&tk_flint=pbjs_lite_v7.38.0&x_source.tid=cdd2ea81-9c6d-4049-aa1a-ef1542aea038&l_pb_bid_id=134246cc2febdbd3&p_screen_res=1280x1024&rp_secure=1&rp_hard_floor=0.01&rp_maxbids=1&p_gpid=%2F127208727%2Fdi_ros_970x250_top&slots=1&rand=0.9377656444676411
IP
File type JSON data\012- , ASCII text, with very long lines (402), with no line terminators
Hash d9dd92bc2280d74b3d64f5f9d58b116e
5b22eb76945bc829b5a0f2e8f87c24ae0b6d4ee2
d44555dcb4b34c6f38fef2387c6897733679749e38ff3623fdf2e7304f8e5b1c
GET /a/api/fastlane.json?account_id=17262&site_id=209472&zone_id=1030436&size_id=16&alt_size_ids=57&p_pos=atf&rp_schain=1.0,1!adapex.io,s67,1,62da9f98-9238-4459-aa5d-3db06b1b3cda,,&eid_pubcid.org=8732d9bd-1cf3-4911-ace4-7ef9c1e0c41f%5E1&rf=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&kw=%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D0%B4%D0%BB%D1%8FiSlim310&tg_i.page=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&tg_i.domain=devid.info&tg_i.pbadslot=%2F127208727%2Fdi_ros_970x250_top&tg_i.gpid=%2F127208727%2Fdi_ros_970x250_top&tk_flint=pbjs_lite_v7.38.0&x_source.tid=cdd2ea81-9c6d-4049-aa1a-ef1542aea038&l_pb_bid_id=134246cc2febdbd3&p_screen_res=1280x1024&rp_secure=1&rp_hard_floor=0.01&rp_maxbids=1&p_gpid=%2F127208727%2Fdi_ros_970x250_top&slots=1&rand=0.9377656444676411 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.4
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://devid.info
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LFQNTLGG-6-CKXH; Domain=.rubiconproject.com; Path=/; Expires=Tue, 26-Mar-2024 10:01:53 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|hLZGFuTafB1yg14dNin4f+9DtVM30fCgq/3jPf+UBunXBb9gRi51RalC+70L5eAA4HEYI5ehIrWq2GCPWNASwdzpQ7vzkXQ/; Domain=.rubiconproject.com; Path=/; Expires=Tue, 26-Mar-2024 10:01:53 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 402
X-Firefox-Spdy: h2
cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json
200 OK 1.3 kB URL HTTP/2 cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json
IP
File type JSON data\012- , ASCII text, with very long lines (1596), with no line terminators
Hash 8a06582f972fe10a2d8bf32ecbadf8e1
7da67e755b3c387b7c5992e9710e6d8a115491ca
d801b5eac46768a74882cd431fff2d73c3510b02de8bafb77b7c5010df039cf5
GET /gh/prebid/currency-file@1/latest.json HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:52 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 1.0.1658
x-jsd-version-type: version
etag: W/"63c-nmc9fF2sgMbSmQaNz0mU7uVqNw8"
x-served-by: cache-fra-eddf8230103-FRA, cache-yyz4541-YYZ
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 21662
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MHFhEzoBGL%2BBMq0mwhPE%2Bo3WOpifcT3MesV9RqMqghD%2BIkAPKbfjj71mI%2BaDmb01rM7eJ8%2BLrTOjy8sRM9fXYCn%2BEvzsAAvVehgPejeXNO%2FrO5ErA6YYoQp1Yb1TcDh3A2c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ae6cb679c9d0b51-OSL
content-encoding: br
X-Firefox-Spdy: h2
hbopenbid.pubmatic.com/translator?source=prebid-client
204 No Content 0 B URL HTTP/2 hbopenbid.pubmatic.com/translator?source=prebid-client
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /translator?source=prebid-client HTTP/1.1
Host: hbopenbid.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2976
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://devid.info
cache-control: no-cache, no-store, must-revalidate
date: Mon, 27 Mar 2023 10:01:53 GMT
X-Firefox-Spdy: h2
c2shb.pubgw.yahoo.com/bidRequest
200 OK 84 B URL HTTP/2 c2shb.pubgw.yahoo.com/bidRequest
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ccdd0faddf4d365c942c28d1ed207ab0
ad15f0e4706a54d8e8ff55450ed6006f9528ee2d
34679ba8dfa425cf473844f68fda2613c4176dc80b3b19cbb53bce78b5c06e3f
POST /bidRequest HTTP/1.1
Host: c2shb.pubgw.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
x-openrtb-version: 2.5
Content-Type: application/json
Content-Length: 1223
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: application/json;charset=utf-8
content-length: 84
server: ATS/9.1.10.25
access-control-allow-origin: https://devid.info
access-control-allow-methods: POST,GET,HEAD,OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Accept-Encoding, User-Agent
access-control-allow-credentials: true
content-encoding: gzip
age: 0
X-Firefox-Spdy: h2
api.btloader.com/country
200 OK 16 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 452880c1a375b8fba8c9499f0930d05f
ffe5484a23512c2a574d837fe2d3267b134e48c8
8b3383aa4c71f1d816bfaf33e3ef2e8ded067698a7798b9f306204d5777b140d
GET /country HTTP/1.1
Host: api.btloader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://devid.info/
Origin: https://devid.info
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: private, max-age=300, stale-while-revalidate=600, stale-if-error=600
content-type: application/json
vary: Origin
date: Mon, 27 Mar 2023 10:01:53 GMT
content-length: 16
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
200 OK 314 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash f93f31358ebbcc1a9c6cce0d2c6d3fe6
29ed7ab938cb5508f1c8df4668b2c608199c3d0f
3c6b15294057ff7870be733cdafb8443550be3dc3b87f74a4b00414fd5f4b8e2
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:53 GMT
Content-Type: application/ocsp-response
Content-Length: 314
Connection: keep-alive
Last-Modified: Sat, 25 Mar 2023 05:15:15 GMT
Expires: Sat, 01 Apr 2023 05:15:14 GMT
Etag: "29ed7ab938cb5508f1c8df4668b2c608199c3d0f"
Cache-Control: max-age=414200,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ae6cb6dfe5b1c12-OSL
fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17262&site_id=209472&zone_id=1030438&size_id=10&alt_size_ids=14%2C16%2C17&p_pos=atf&rp_schain=1.0,1!adapex.io,s67,1,62da9f98-9238-4459-aa5d-3db06b1b3cda,,&eid_pubcid.org=8732d9bd-1cf3-4911-ace4-7ef9c1e0c41f%5E1&rf=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&kw=%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D0%B4%D0%BB%D1%8FiSlim310&tg_i.page=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&tg_i.domain=devid.info&tg_i.pbadslot=%2F127208727%2Fdi_ros_300x600_top&tg_i.gpid=%2F127208727%2Fdi_ros_300x600_top&tk_flint=pbjs_lite_v7.38.0&x_source.tid=698c5a13-ff8b-4f80-b69b-f95eb5a5a393&l_pb_bid_id=135cfc4fd5955c29&p_screen_res=1280x1024&rp_secure=1&rp_hard_floor=0.01&rp_maxbids=1&p_gpid=%2F127208727%2Fdi_ros_300x600_top&slots=1&rand=0.624319696491596
200 OK 422 B URL HTTP/2 fastlane.rubiconproject.com/a/api/fastlane.json?account_id=17262&site_id=209472&zone_id=1030438&size_id=10&alt_size_ids=14%2C16%2C17&p_pos=atf&rp_schain=1.0,1!adapex.io,s67,1,62da9f98-9238-4459-aa5d-3db06b1b3cda,,&eid_pubcid.org=8732d9bd-1cf3-4911-ace4-7ef9c1e0c41f%5E1&rf=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&kw=%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D0%B4%D0%BB%D1%8FiSlim310&tg_i.page=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&tg_i.domain=devid.info&tg_i.pbadslot=%2F127208727%2Fdi_ros_300x600_top&tg_i.gpid=%2F127208727%2Fdi_ros_300x600_top&tk_flint=pbjs_lite_v7.38.0&x_source.tid=698c5a13-ff8b-4f80-b69b-f95eb5a5a393&l_pb_bid_id=135cfc4fd5955c29&p_screen_res=1280x1024&rp_secure=1&rp_hard_floor=0.01&rp_maxbids=1&p_gpid=%2F127208727%2Fdi_ros_300x600_top&slots=1&rand=0.624319696491596
IP
File type JSON data\012- , ASCII text, with very long lines (422), with no line terminators
Hash fb03a7a7b69f580d80a43060a17d2262
193b80509fbd42fe39c29dfb4a2c329373fe6671
b252f339bf566bab919b5073d75f98487af90e65078f7ce91525d9870f38326c
GET /a/api/fastlane.json?account_id=17262&site_id=209472&zone_id=1030438&size_id=10&alt_size_ids=14%2C16%2C17&p_pos=atf&rp_schain=1.0,1!adapex.io,s67,1,62da9f98-9238-4459-aa5d-3db06b1b3cda,,&eid_pubcid.org=8732d9bd-1cf3-4911-ace4-7ef9c1e0c41f%5E1&rf=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&kw=%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D0%B4%D0%BB%D1%8FiSlim310&tg_i.page=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&tg_i.domain=devid.info&tg_i.pbadslot=%2F127208727%2Fdi_ros_300x600_top&tg_i.gpid=%2F127208727%2Fdi_ros_300x600_top&tk_flint=pbjs_lite_v7.38.0&x_source.tid=698c5a13-ff8b-4f80-b69b-f95eb5a5a393&l_pb_bid_id=135cfc4fd5955c29&p_screen_res=1280x1024&rp_secure=1&rp_hard_floor=0.01&rp_maxbids=1&p_gpid=%2F127208727%2Fdi_ros_300x600_top&slots=1&rand=0.624319696491596 HTTP/1.1
Host: fastlane.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.4
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: application/json
cache-control: no-cache, no-store, max-age=0, must-revalidate
expires: Wed, 17 Sep 1975 21:32:10 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://devid.info
pragma: no-cache
vary: Accept-Encoding
set-cookie: khaos=LFQNTLHN-V-JHS5; Domain=.rubiconproject.com; Path=/; Expires=Tue, 26-Mar-2024 10:01:53 GMT; Max-Age=31536000; SameSite=None; Secure
audit=1|hLZGFuTafB3bTfDylcIppe9DtVM30fCgq/3jPf+UBunXBb9gRi51RalC+70L5eAA4HEYI5ehIrWq2GCPWNASwdzpQ7vzkXQ/; Domain=.rubiconproject.com; Path=/; Expires=Tue, 26-Mar-2024 10:01:53 GMT; Max-Age=31536000; SameSite=None; Secure
p3p: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
content-length: 422
X-Firefox-Spdy: h2
bidder.criteo.com/cdb?profileId=207&av=35&wv=7.38.0&cb=48645616607&lsavail=1
204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=35&wv=7.38.0&cb=48645616607&lsavail=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=35&wv=7.38.0&cb=48645616607&lsavail=1 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 3494
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 27 Mar 2023 10:01:53 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: https://devid.info
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
api.btloader.com/pv?tid=FskwZUD3&w=5741512803483648&o=5766703155773440&cv=2.1.10-3-g4120aac&r=false&vr=1280x939&pageURL=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&sid=VtG4pijFbV&upapi=true
204 No Content 0 B URL HTTP/2 api.btloader.com/pv?tid=FskwZUD3&w=5741512803483648&o=5766703155773440&cv=2.1.10-3-g4120aac&r=false&vr=1280x939&pageURL=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&sid=VtG4pijFbV&upapi=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pv?tid=FskwZUD3&w=5741512803483648&o=5766703155773440&cv=2.1.10-3-g4120aac&r=false&vr=1280x939&pageURL=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&sid=VtG4pijFbV&upapi=true HTTP/1.1
Host: api.btloader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
vary: Origin
date: Mon, 27 Mar 2023 10:01:53 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
grid.bidswitch.net/hbjson
200 OK 50 B URL HTTP/2 grid.bidswitch.net/hbjson
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5afd01360ea4f963b148bd5404a8e387
c7fbc0d3f998f29b1eadddf93eeea8a33bef85cc
c4a58b41ddd28c2c2456f71dc8a875b759d5db5c53396d7831c8820a911977f8
POST /hbjson HTTP/1.1
Host: grid.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2578
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: application/json
content-length: 50
access-control-allow-credentials: true
access-control-allow-origin: https://devid.info
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
vk.com/js/al/lite.js?107
200 OK 62 kB IP
File type ISO-8859 text, with very long lines (2839)
Hash b1ecbd41b7d5e73e7332c74f0aa3f2f8
45d588bb8e02142f8af7783877e146a6dc8ecc68
2301c848a57d0cdee13f796bc4d821d9dced826e1efbddb7835d8231fcac6a1e
GET /js/al/lite.js?107 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/widget_community.php?app=0&width=200px&_ver=1&gid=38164112&mode=0&color1=&color2=&color3=&class_name=&height=410&url=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&referrer=&title=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20iSlim310%20%D0%B4%D0%BB%D1%8F%20Windows%202000%20Windows%20XP%20Windows%202003&1872284a2c3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: application/x-javascript
content-length: 61958
last-modified: Wed, 15 Mar 2023 09:19:40 GMT
etag: "64118dac-f206"
content-encoding: br
expires: Fri, 31 Mar 2023 10:01:53 GMT
cache-control: max-age=345600
x-frontend: front609304
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
ghb.adtelligent.com/v2/auction/
200 OK 965 B URL HTTP/1.1 ghb.adtelligent.com/v2/auction/
IP
File type JSON data\012- , ASCII text, with very long lines (7814), with no line terminators
Hash 3f93580078a43adbd60c720044571219
09c56cb671a6fe32cd80ab836bea0c9d6649074c
0717dba77a4236dd0128723d084365c34e010eed9f9d5d72a226a9392aa4fe47
POST /v2/auction/ HTTP/1.1
Host: ghb.adtelligent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1062
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Adtelligent
Date: Mon, 27 Mar 2023 10:01:52 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 965
Access-Control-Allow-Origin: https://devid.info
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
ocsp.pki.goog/s/gts1d4/C9sIyVCC2ts
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/C9sIyVCC2ts
IP
Hash a9683d29537c2eb059bec763cd751bb8
f75dddeb0ba61efb3502b44ffa23ad4459edf5f7
e8717f6fbd2717788c2cfd128ec39ca9a51997b8f0566621a383df6484680eaf
POST /s/gts1d4/C9sIyVCC2ts HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:53 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
vk.com/js/loader_nav207615438220_3.js
200 OK 57 kB URL HTTP/2 vk.com/js/loader_nav207615438220_3.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 91c64688c3aec88d653de14aff30833d
2561782efc7a410eb960168d2770a2943810f704
ff9b9bbb2b88b3d3bc63eff818ba93658724b4609299aafa4ab956fad1034357
GET /js/loader_nav207615438220_3.js HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/widget_community.php?app=0&width=200px&_ver=1&gid=38164112&mode=0&color1=&color2=&color3=&class_name=&height=410&url=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&referrer=&title=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20iSlim310%20%D0%B4%D0%BB%D1%8F%20Windows%202000%20Windows%20XP%20Windows%202003&1872284a2c3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: text/javascript; charset=windows-1251
content-length: 56569
x-powered-by: KPHP/7.4.113549
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Mon, 01 Apr 2024 10:57:30 GMT; path=/; domain=.vk.com
remixstlid=9088641983123054952_PAgFZTczp5eGBYNpgO0bSbQiRLeGBysgSROHTcT3jmX; expires=Tue, 26 Mar 2024 10:01:53 GMT; path=/; domain=.vk.com; secure
cache-control: no-store
content-encoding: gzip
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be1cd1cf8e462ca6f6acb2f132e614d5
037f3bc7ab850fa2c69f2584bb24340b25bb6f3c
e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4995
Expires: Mon, 27 Mar 2023 11:25:08 GMT
Date: Mon, 27 Mar 2023 10:01:53 GMT
Connection: keep-alive
onetag-sys.com/prebid-request
200 OK 41 B URL HTTP/2 onetag-sys.com/prebid-request
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1c15203d1319c02fe2a06d78bc45eccf
40386992654bdda331c8f6eb21ac79de396119ee
cc81a9c5e7147dba347b0ffd34f64e9a7c40f25782569fec5c3fc68b4017badb
POST /prebid-request HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 4331
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://devid.info
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
cache-control: no-transform, no-cache
content-type: application/json
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
connect.ok.ru/dk?st.cmd=WidgetGroup&st.groupId=56736618381346&st.fid=__okGroup0&st.hoster=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&st.settings=%7Bwidth%3A200%2Cheight%3A455%7D
200 OK 3.0 kB URL HTTP/2 connect.ok.ru/dk?st.cmd=WidgetGroup&st.groupId=56736618381346&st.fid=__okGroup0&st.hoster=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&st.settings=%7Bwidth%3A200%2Cheight%3A455%7D
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12605)
Hash a170973216a0636f3028edbf48c27847
ce118dbe1b4cfef5bcd4e85c5cca3becb068b07d
f3b0433d787f92ab4d5a8f31f32356fcc85dc59224185a87bfd0b76dab4c8bda
GET /dk?st.cmd=WidgetGroup&st.groupId=56736618381346&st.fid=__okGroup0&st.hoster=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&st.settings=%7Bwidth%3A200%2Cheight%3A455%7D HTTP/1.1
Host: connect.ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
set-cookie: bci=-8301412718164355860; Domain=.ok.ru; Expires=Sat, 14 Apr 2091 13:16:00 GMT; Path=/; Secure; HttpOnly
_statid=ac76a2f6-7494-4d3e-b4ac-e181181d31e5; Domain=.ok.ru; Expires=Sat, 14 Apr 2091 13:16:00 GMT; Path=/; Secure; HttpOnly
landref=devid.info; Domain=.ok.ru; Path=/; Secure
content-security-policy: default-src data: 'self' 'unsafe-inline' 'unsafe-eval' ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me wss://ad.mail.ru *.mail.ru *.imgsmail.ru *.mradx.net *.serving-sys.com *.googleapis.com *.gstatic.com www.google.com https://api-maps.yandex.ru yastatic.net yandex.st *.doubleverify.com *.adsafeprotected.com https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://football.sportmail.ru *.google.ru *.google.com *.googlesyndication.com *.yandex.ru blob:; script-src 'unsafe-inline' 'unsafe-eval' *.mail.ru https://*.mail.ru *.imgsmail.ru *.mradx.net ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me mc.yandex.ru an.yandex.ru yastatic.net yandex.st *.google-analytics.com api-maps.yandex.ru https://api-maps.yandex.ru https://clck.yandex.ru *.googleapis.com *.gstatic.com www.google.com www.youtube.com https://www.youtube.com *.ytimg.com https://*.ytimg.com *.doubleverify.com *.dvtps.com *.doubleclick.net *.googletagservices.com *.googlesyndication.com *.googleadservices.com *.goodgame.ru https://*.goodgame.ru https://*.moatads.com *.adlooxtracking.com *.adlooxtracking.ru *.adsafeprotected.com *.serving-sys.com *.serving-sys.ru *.weborama.fr *.weborama-tech.ru https://enterprise.api-maps.yandex.ru https://suggest-maps.yandex.ru https://*.hit.gemius.pl https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://gum.criteo.com https://football.sportmail.ru *.googletagmanager.com connect.facebook.net *.google.ru *.google.com *.googlesyndication.com yandex.ru; worker-src blob: 'self'; connect-src * wss: blob: data:; font-src * data: blob:; frame-src * blob: 'self'; img-src * data: blob: about:; media-src * data: blob:; object-src *; report-uri /csp/report;
content-security-policy-report-only: default-src data: blob: about: 'self' 'unsafe-inline' 'unsafe-eval' https: wss:; report-uri /csp/report?always;
cache-control: no-cache, no-store
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=63072000;includeSubdomains;preload
rendered-blocks: WidgetPage
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be1cd1cf8e462ca6f6acb2f132e614d5
037f3bc7ab850fa2c69f2584bb24340b25bb6f3c
e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4995
Expires: Mon, 27 Mar 2023 11:25:08 GMT
Date: Mon, 27 Mar 2023 10:01:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be1cd1cf8e462ca6f6acb2f132e614d5
037f3bc7ab850fa2c69f2584bb24340b25bb6f3c
e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4995
Expires: Mon, 27 Mar 2023 11:25:08 GMT
Date: Mon, 27 Mar 2023 10:01:53 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4429ed9b-a655-45dc-a59b-78db53c9c2f6.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4429ed9b-a655-45dc-a59b-78db53c9c2f6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e999a9d79efe60a30b2942c5f2940294
c3891c43b16521f66eb3a52d83694de2ddd39871
290ed1232883a4ec63ef42c30f40b819983c5544e35261d2d1e0d1e55d0c8b07
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4429ed9b-a655-45dc-a59b-78db53c9c2f6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12017
x-amzn-requestid: 4f61a0c7-4b18-4289-b47c-eeeff93d873f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Ca6yQGNtoAMFsxw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64210b41-350e4e2425d9606e478872b5;Sampled=0
x-amzn-remapped-date: Mon, 27 Mar 2023 03:19:29 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: TCzHm5qTtnAUDSmayc-LLFmDfV7o6PaaYYfVtN_w7cC3o66HCa3DEg==
via: 1.1 b3cdce1c2fc39b89f45c98c417351f26.cloudfront.net (CloudFront), 1.1 0a2ce08fa1ec3c33302a7547d3305978.cloudfront.net (CloudFront), 1.1 google
date: Mon, 27 Mar 2023 03:34:08 GMT
age: 23265
etag: "c3891c43b16521f66eb3a52d83694de2ddd39871"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F217b24c4-6cf4-4be4-bdbf-764890bd9672.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F217b24c4-6cf4-4be4-bdbf-764890bd9672.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8cc79a830964d923d24a45f5ccc9939b
557cc4827414912c41319ad961c14cce71ed4a18
b3b1c73b34057cb6e41920f3d55213ad8c193076525767c051960ec26d17ca3c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F217b24c4-6cf4-4be4-bdbf-764890bd9672.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4775
x-amzn-requestid: 28d0e56d-ed03-4686-bd49-34f193f1c65a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CK96KF9coAMFvMA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641aa9da-122cd32a6f23e8442a52464c;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 07:10:18 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: psNReeBG7nAuKQXIMl1zwCVmvtZ-xwn6Fx8oAIX4wi4GCNUWNWOGMA==
via: 1.1 4e4278a2778e72cc34feef6db603088c.cloudfront.net (CloudFront), 1.1 34f8ef0e4c880df0650a814412a26ea6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Mar 2023 22:12:36 GMT
age: 52837
etag: "557cc4827414912c41319ad961c14cce71ed4a18"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
st.vk.com/css/al/lite.ce9567cd8cf121942abf.css
200 OK 36 kB URL HTTP/2 st.vk.com/css/al/lite.ce9567cd8cf121942abf.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Hash 57be82da51ac6dd75ebad989c8cfd637
d42f705f20ca8d8227301e913be8d564f92e8442
8107f7b2c4a400b356b2aff5edf62899b6212aab1840e72fd39224039ea67680
GET /css/al/lite.ce9567cd8cf121942abf.css HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: text/css
content-length: 36072
last-modified: Wed, 22 Feb 2023 15:59:24 GMT
etag: "63f63bdc-8ce8"
content-encoding: br
expires: Fri, 31 Mar 2023 10:01:53 GMT
cache-control: max-age=345600
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 85351059b67b0a42eda7e69a31b3b4b4
b798268806dc2f79f033e5872676019faf0e0cc1
86e163b7159b197d6358ab01333ac6da221de0ebe1c5da8d5cef2977d38625fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: _g9kT_E1XbUL7UICSL8g0AR0ZYciqALNSNMyJyhFClAh_zMe8CwiRA==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 6ca7826fb0f4c565b1af9c7737725c48.cloudfront.net (CloudFront), 1.1 google
date: Mon, 27 Mar 2023 06:28:03 GMT
age: 12831
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
vk.com/js/lang3_0.js?27998521
200 OK 24 kB URL HTTP/2 vk.com/js/lang3_0.js?27998521
IP
File type ISO-8859 text, with very long lines (56811), with LF, NEL line terminators
Hash 65c2fc0bb12cba49a5ecbade1774f142
d9c4584531f932a6af089907270375abf3e7120b
a87dd0fc3307120f59765bc2df1a30a1548a651e442053528f7f6c7dc7ff9044
GET /js/lang3_0.js?27998521 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/widget_community.php?app=0&width=200px&_ver=1&gid=38164112&mode=0&color1=&color2=&color3=&class_name=&height=410&url=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&referrer=&title=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20iSlim310%20%D0%B4%D0%BB%D1%8F%20Windows%202000%20Windows%20XP%20Windows%202003&1872284a2c3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: text/javascript; charset=windows-1251
content-length: 23953
x-powered-by: KPHP/7.4.113549
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Wed, 20 Mar 2024 01:00:52 GMT; path=/; domain=.vk.com
remixstlid=9110878506283221298_1vYvd0UuWZUcyYnavbHmaG57c3TI56ZbSBSuEgzWLkw; expires=Tue, 26 Mar 2024 10:01:53 GMT; path=/; domain=.vk.com; secure
cache-control: max-age=345600
content-encoding: gzip
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/js/api/xdm.js?9
200 OK 2.8 kB URL HTTP/2 st.vk.com/js/api/xdm.js?9
IP
Hash 3621f21a6215d1660754d2a2d1947af5
6480e04e1e4a82bf63c1322fe17dbff2037f3e06
3ffe8143f00123797a9a41d9444fce19a8935e6f34378293cb22b8b0705df6ea
GET /js/api/xdm.js?9 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: application/x-javascript
content-length: 2846
last-modified: Tue, 22 Sep 2020 20:30:00 GMT
etag: "5f6a5ec8-b1e"
content-encoding: br
expires: Fri, 31 Mar 2023 10:01:53 GMT
cache-control: max-age=345600
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/css/al/ui_common.0a29c544720bdcf89154.css
200 OK 15 kB URL HTTP/2 st.vk.com/css/al/ui_common.0a29c544720bdcf89154.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Hash c841f5476d24b1c84ffd02a60b797151
58363f554b292a5e5c02dbb3887d369fb0d92833
fd17ef07ad835f1ee73643599d34f04485403f63b9e4bb945d2ef30552658876
GET /css/al/ui_common.0a29c544720bdcf89154.css HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: text/css
content-length: 14783
last-modified: Tue, 14 Feb 2023 13:38:21 GMT
etag: "63eb8ecd-39bf"
content-encoding: br
expires: Fri, 31 Mar 2023 10:01:53 GMT
cache-control: max-age=345600
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/polyfills.1881adbf36454e07c9c6.js?a69ef34dc1979f8d5126
200 OK 43 kB URL HTTP/2 st.vk.com/dist/polyfills.1881adbf36454e07c9c6.js?a69ef34dc1979f8d5126
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65445)
Hash a7157352830b630af348ef2f636726ff
2ce0ffd5a605490beb2850292b992e692b6426a8
533603e49671677c00f98be4cc0ff463d36098512cda07761ea03747168b80e3
GET /dist/polyfills.1881adbf36454e07c9c6.js?a69ef34dc1979f8d5126 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: application/x-javascript
content-length: 43415
last-modified: Thu, 02 Feb 2023 23:04:52 GMT
etag: "63dc4194-a997"
content-encoding: br
expires: Fri, 31 Mar 2023 10:01:53 GMT
cache-control: max-age=345600
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/react.6d787991b51243317269.js?cb151ae0d77e1fe8ca23
200 OK 44 kB URL HTTP/2 st.vk.com/dist/react.6d787991b51243317269.js?cb151ae0d77e1fe8ca23
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65449)
Hash 8d6ab054b91c1fdf73e251314677b689
40e5043d15cacc381cbae77ee0f22f94b562097a
fc97c0b1d58d2c32abacbd559120088ac47b59dcc218da80d28ee4814abb9cd7
GET /dist/react.6d787991b51243317269.js?cb151ae0d77e1fe8ca23 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: application/x-javascript
content-length: 43811
last-modified: Tue, 29 Nov 2022 04:27:50 GMT
etag: "63858a46-ab23"
content-encoding: br
expires: Fri, 31 Mar 2023 10:01:53 GMT
cache-control: max-age=345600
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2fcfac9-c8d3-433b-bca1-fc4cc01b74e5.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2fcfac9-c8d3-433b-bca1-fc4cc01b74e5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8613d9a5ad5db82302da111c87e69854
3ebae7c6f761885b671f744ab3eced168eeaaacc
cda7548c1074a6511230502deefc18f387eb92b850d8f6cd950895a365eb9d85
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2fcfac9-c8d3-433b-bca1-fc4cc01b74e5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7261
x-amzn-requestid: c4a9b3c7-2555-4727-9986-9b251e684bd8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CaIOHFTRIAMF0qA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6420ba5a-14b9f548565823bb76cbf1c3;Sampled=0
x-amzn-remapped-date: Sun, 26 Mar 2023 21:34:18 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: gxqEwiG77PNfekjEfngOspKeZrJh5Czup43-Y-sxnTrMasdtwMP3SA==
via: 1.1 773bf3616e85ce2b187fa78710a6beb2.cloudfront.net (CloudFront), 1.1 599f04a365a179d553682d476509c388.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Mar 2023 21:49:30 GMT
age: 43944
etag: "3ebae7c6f761885b671f744ab3eced168eeaaacc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
st.vk.com/dist/palette.312affb84a54f315a60e.js?7377e77f7a86402ee80e
200 OK 24 kB URL HTTP/2 st.vk.com/dist/palette.312affb84a54f315a60e.js?7377e77f7a86402ee80e
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65531), with no line terminators
Hash 1a9e226de9f7af966ebcf04cf3c4a2a3
0a4b870e271405925bd9e8560ea9bf0c1d7f3564
4b4a489962d34b729c6936f2240ec627d1b95b234ac6a286be55ee8df9570c41
GET /dist/palette.312affb84a54f315a60e.js?7377e77f7a86402ee80e HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: application/x-javascript
content-length: 24167
last-modified: Sun, 26 Mar 2023 22:01:46 GMT
etag: "6420c0ca-5e67"
content-encoding: br
expires: Fri, 31 Mar 2023 10:01:53 GMT
cache-control: max-age=345600
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/vkcom-kit.74161b4762fa1c1aa0de.js?
200 OK 26 kB URL HTTP/2 st.vk.com/dist/vkcom-kit.74161b4762fa1c1aa0de.js?
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Hash 84e7227bb083e6587032c725bf97935c
ccb1083fd54fda397f90d0dd98105d8b4443b8d3
03c26b103e91c11b83172366c043c686a1dc7b508ef358ffeca5629af1437e09
GET /dist/vkcom-kit.74161b4762fa1c1aa0de.js? HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: application/x-javascript
content-length: 25736
last-modified: Mon, 27 Mar 2023 06:32:00 GMT
etag: "64213860-6488"
content-encoding: br
expires: Fri, 31 Mar 2023 10:01:53 GMT
cache-control: max-age=345600
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/state-management.03f2031fb0dac9b033ec.js?8b1d1b6ff58a415d5e75
200 OK 21 kB URL HTTP/2 st.vk.com/dist/state-management.03f2031fb0dac9b033ec.js?8b1d1b6ff58a415d5e75
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (61993)
Hash 4b6c53ae651b764d7a15825a4067b12a
ffd9360ab16fa85e1d19d69127e57e15cd12a7c2
34b54e16cc9536c6412b3ccf7fe5e662d1f41109e00026175e01ed3eac98989c
GET /dist/state-management.03f2031fb0dac9b033ec.js?8b1d1b6ff58a415d5e75 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: application/x-javascript
content-length: 21423
last-modified: Fri, 10 Mar 2023 00:24:10 GMT
etag: "640a78aa-53af"
content-encoding: br
expires: Fri, 31 Mar 2023 10:01:53 GMT
cache-control: max-age=345600
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/audioplayer.af38bb0a079337fc6601.js?315ef0a928b82100f4187c2
200 OK 41 kB URL HTTP/2 st.vk.com/dist/audioplayer.af38bb0a079337fc6601.js?315ef0a928b82100f4187c2
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Hash c4af66294a4f0dfc7c87cf47ade18651
4428e996c5726bc1cc464361db06cce27db98fe9
e9265a5ce5ff2e0addaee61635a7df6559052bff384d62915b146cd903eae1a7
GET /dist/audioplayer.af38bb0a079337fc6601.js?315ef0a928b82100f4187c2 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: application/x-javascript
content-length: 41370
last-modified: Fri, 17 Mar 2023 13:33:46 GMT
etag: "64146c3a-a19a"
content-encoding: br
expires: Fri, 31 Mar 2023 10:01:53 GMT
cache-control: max-age=345600
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/web/audioplayer.94c5e3c7848244ae919e.js?2a3e282b6c7366e910b6c37332d2beef
200 OK 2.2 kB URL HTTP/2 st.vk.com/dist/web/audioplayer.94c5e3c7848244ae919e.js?2a3e282b6c7366e910b6c37332d2beef
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (4750), with no line terminators
Hash d54b50103f61c66c86e89a9930208a79
fcb27dd2d24394e0e4a9ccc8dfc159c6880e1e52
c198eb3971d5053699cb7f77802bf136c744ec4e8ff525c8f689ca97d8ded32c
GET /dist/web/audioplayer.94c5e3c7848244ae919e.js?2a3e282b6c7366e910b6c37332d2beef HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: application/x-javascript
content-length: 2238
last-modified: Thu, 23 Mar 2023 13:32:52 GMT
etag: "641c5504-8be"
content-encoding: br
expires: Fri, 31 Mar 2023 10:01:53 GMT
cache-control: max-age=345600
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/css/al/widget_community.461c04150f1c05e585d0.css
200 OK 3.6 kB URL HTTP/2 st.vk.com/css/al/widget_community.461c04150f1c05e585d0.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (21023)
Hash dff507c02dd746a677f8d6d2bd8be332
912c3ee8aacbb0424570d8cc22083ebc37783fb4
a5ed1a62890c57c8f427e46cfad13dd335b39a77b4629dd3bea3950d5aae23b3
GET /css/al/widget_community.461c04150f1c05e585d0.css HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: text/css
content-length: 3620
last-modified: Sat, 28 Jan 2023 10:21:26 GMT
etag: "63d4f726-e24"
content-encoding: br
expires: Fri, 31 Mar 2023 10:01:53 GMT
cache-control: max-age=345600
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/web/likes.1d5177172b7a77ee834d.js?538e49f25788bc15ab325d4357747a39
200 OK 7.1 kB URL HTTP/2 st.vk.com/dist/web/likes.1d5177172b7a77ee834d.js?538e49f25788bc15ab325d4357747a39
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (19229), with no line terminators
Hash 12317b50ee8eace9477406831088a7db
a767ee4af97bea65cc7f54b71fb94982341dfc46
c2f792d0a37455573bc6875c3036811fdcd819b84df6fcf15a90cec8d82d2b1f
GET /dist/web/likes.1d5177172b7a77ee834d.js?538e49f25788bc15ab325d4357747a39 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: application/x-javascript
content-length: 7083
last-modified: Thu, 23 Mar 2023 13:32:52 GMT
etag: "641c5504-1bab"
content-encoding: br
expires: Fri, 31 Mar 2023 10:01:53 GMT
cache-control: max-age=345600
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/css/al/base.1c25eeb7ac42cd36d08a.css
200 OK 19 kB URL HTTP/2 st.vk.com/css/al/base.1c25eeb7ac42cd36d08a.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Hash 717a3435177db8bf42d60f25242a9f33
a9397dc03def6aed560d1fac67e0002d71c7648f
045487821dc9c0b373259ee9f682f4b7629983ead750a51fed79ca52de8b599b
GET /css/al/base.1c25eeb7ac42cd36d08a.css HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: text/css
content-length: 19325
last-modified: Wed, 08 Feb 2023 11:29:05 GMT
etag: "63e38781-4b7d"
content-encoding: br
expires: Fri, 31 Mar 2023 10:01:53 GMT
cache-control: max-age=345600
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/common.46aac00b60cf55932afd.js?315bf8787011b89cb24dcbb
200 OK 324 kB URL HTTP/2 st.vk.com/dist/common.46aac00b60cf55932afd.js?315bf8787011b89cb24dcbb
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65424)
Size 324 kB (324439 bytes)
Hash 932cd8a41e34f0e52587300832d14508
c5179a9ddbd9737ccc18f2c6b1526d3c6846d046
23a26af5cd442cee705635b7e41f16df109e3b0d5c6cd9b5358256f3825eeac8
GET /dist/common.46aac00b60cf55932afd.js?315bf8787011b89cb24dcbb HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: application/x-javascript
content-length: 324439
last-modified: Mon, 27 Mar 2023 07:26:52 GMT
etag: "6421453c-4f357"
content-encoding: br
expires: Fri, 31 Mar 2023 10:01:53 GMT
cache-control: max-age=345600
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash c6d987ff92f4a14cf3b31f21fd33d489
1f1261ac0687ab8c65fbf3dd7a85daebe60b39dd
890570496334f97bed389dff7633b3b3e0e20258a47e076070636b2682e2a83d
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:54 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 31 Mar 2023 08:00:57 GMT
ETag: "1f1261ac0687ab8c65fbf3dd7a85daebe60b39dd"
Last-Modified: Mon, 27 Mar 2023 08:00:58 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3141
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ae6cb712dd4067b-OSL
aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_n-index_n-sharethrough_n-LoopMe_rbd_n-MediaNet_n-Beeswax_ox-db5_smrt_sovrn
302 Found 0 B URL HTTP/1.1 aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_n-index_n-sharethrough_n-LoopMe_rbd_n-MediaNet_n-Beeswax_ox-db5_smrt_sovrn
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_n-index_n-sharethrough_n-LoopMe_rbd_n-MediaNet_n-Beeswax_ox-db5_smrt_sovrn HTTP/1.1
Host: aax-eu.amazon-adsystem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Server
Date: Mon, 27 Mar 2023 10:01:54 GMT
Content-Length: 0
Connection: keep-alive
x-amz-rid: 4ZJJY48G0WZD2RE11MGX
Set-Cookie: ad-id=A7ZNP83pm0uHpZQcWYySUsM|t; Domain=.amazon-adsystem.com; Expires=Sun, 01-Oct-2023 10:01:54 GMT; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR"
Location: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_n-index_n-sharethrough_n-LoopMe_rbd_n-MediaNet_n-Beeswax_ox-db5_smrt_sovrn&dcc=t
Vary: Content-Type,Accept-Encoding,User-Agent
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
p2.gcprivacy.com/v2/sync?pid=Q6CV1VBC&uid=8732d9bd-1cf3-4911-ace4-7ef9c1e0c41f&u=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&h=devid.info&ref=
200 OK 155 B URL HTTP/2 p2.gcprivacy.com/v2/sync?pid=Q6CV1VBC&uid=8732d9bd-1cf3-4911-ace4-7ef9c1e0c41f&u=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&h=devid.info&ref=
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f2b1881c2ac544502ac293890049f77f
49df5815503e3bbb39072c3e8ab78c3f3b94584e
118b34ac7571b7142a6882e2d5f735cbe6b1d48a938c380fa3c6890343076e9b
GET /v2/sync?pid=Q6CV1VBC&uid=8732d9bd-1cf3-4911-ace4-7ef9c1e0c41f&u=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&h=devid.info&ref= HTTP/1.1
Host: p2.gcprivacy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: application/json
content-length: 155
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Max
access-control-allow-methods: GET
access-control-allow-origin: https://devid.info
access-control-max-age: 86400
set-cookie: gcid=3b3c88a3-4434-4323-b9d0-c0019ea604f9;Expires=Sun, 25 Jun 2023 10:01:54 UTC; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe588737f-d63b-4477-a8e6-83aaffe381d1.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe588737f-d63b-4477-a8e6-83aaffe381d1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 84110f4e28cd27c0f12fcf6236d835dd
4a9a6be2bc7dd6e1d0a245223baceddb3e4a934c
049be1e437cd8f2c50ce39b5b7bab0f11193816adda5b305c20e20068b8bdf03
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe588737f-d63b-4477-a8e6-83aaffe381d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11490
x-amzn-requestid: 0079e101-36e4-4063-8e54-e9d1c080d644
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: COQQeETZoAMFcmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641bfa69-2ca82c453c32358c021050a6;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 07:06:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: pGDJuziHrQbvIrMC787c05JWidmgNgRe3OAJ6krkxGFgMY9t3vj7sQ==
via: 1.1 f193acd25f2604e189bfbfaf539aaa06.cloudfront.net (CloudFront), 1.1 4d8620b80ebe37d366388e117039aa8e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 27 Mar 2023 08:52:03 GMT
age: 4191
etag: "4a9a6be2bc7dd6e1d0a245223baceddb3e4a934c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxR9IxQPyxgfgNzMwrBufd1XA&fn=sqr_50
200 OK 1.8 kB URL HTTP/2 i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxR9IxQPyxgfgNzMwrBufd1XA&fn=sqr_50
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 994a82571edc68f890f8450fdbd75af9
85ac0d428782e9fc41045a7fccbb9d8d5b9ad3e5
e5ccaf29bacd47b55fca3ca60ccc460293932525e5f1d694396b6dc27b30abab
GET /i?r=AyH4iRPQ2q0otWIFepML2LxR9IxQPyxgfgNzMwrBufd1XA&fn=sqr_50 HTTP/1.1
Host: i.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.ok.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: image/webp
content-length: 1816
accept-ranges: bytes
last-modified: Thu, 26 Jan 2023 10:01:54 GMT
expires: Fri, 22 Dec 2023 10:01:54 GMT
cache-control: private, max-age=100000000
etag: "686897696a7c876b7e"
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxR6MqHvWuFQybG2Epd1BkaVA&fn=sqr_50
200 OK 722 B URL HTTP/2 i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxR6MqHvWuFQybG2Epd1BkaVA&fn=sqr_50
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cd6cfad8f2ab8c33efcefc1664cb5710
2e0d37d68af7d796fc0357b7b09ec684d1b9e5f9
49c4f798f689f402f69991dc1c3d92d4e55f7f7e5d3cf04953b65b62c06ab3fd
GET /i?r=AyH4iRPQ2q0otWIFepML2LxR6MqHvWuFQybG2Epd1BkaVA&fn=sqr_50 HTTP/1.1
Host: i.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.ok.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: image/webp
content-length: 722
accept-ranges: bytes
last-modified: Thu, 26 Jan 2023 10:01:54 GMT
expires: Fri, 22 Dec 2023 10:01:54 GMT
cache-control: private, max-age=100000000
etag: "686897696a7c876b7e"
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
i.mycdn.me/i?r=AzExTCcIQuhnRIX9gBwt8KAM_N-3LNBrJB0IVPclXYnx4Pawj2J9ysQw8nyncLbb0ao&fn=sqr_50
200 OK 1.6 kB URL HTTP/2 i.mycdn.me/i?r=AzExTCcIQuhnRIX9gBwt8KAM_N-3LNBrJB0IVPclXYnx4Pawj2J9ysQw8nyncLbb0ao&fn=sqr_50
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4c478e0db18d122e9fb515c7fa0554b4
ec619259b30d43c080c7c61674142cf631b03660
43e314f89a8be534fd1d83358d74ae575d3f0e7bc2249037338c5b337d59515b
GET /i?r=AzExTCcIQuhnRIX9gBwt8KAM_N-3LNBrJB0IVPclXYnx4Pawj2J9ysQw8nyncLbb0ao&fn=sqr_50 HTTP/1.1
Host: i.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.ok.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: image/webp
content-length: 1632
accept-ranges: bytes
last-modified: Thu, 26 Jan 2023 10:01:54 GMT
expires: Fri, 22 Dec 2023 10:01:54 GMT
cache-control: private, max-age=100000000
etag: "686897696a7c876b7e"
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
i.mycdn.me/i?r=AzExTCcIQuhnRIX9gBwt8KAMW3xrfjcDw38AvFay48riQQ0EHUlL3iOqMkQDO78DPGc&fn=sqr_50
200 OK 1.6 kB URL HTTP/2 i.mycdn.me/i?r=AzExTCcIQuhnRIX9gBwt8KAMW3xrfjcDw38AvFay48riQQ0EHUlL3iOqMkQDO78DPGc&fn=sqr_50
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1ec3cd53b9f2286a6ab222fef64dd5db
f66c0717c8d80ca573a22304ead4490f8129e2fd
efd1ec0aa273c6c835689c9632aabc28783d4fba8185b72d9d6e22b64312094c
GET /i?r=AzExTCcIQuhnRIX9gBwt8KAMW3xrfjcDw38AvFay48riQQ0EHUlL3iOqMkQDO78DPGc&fn=sqr_50 HTTP/1.1
Host: i.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.ok.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: image/webp
content-length: 1614
accept-ranges: bytes
last-modified: Thu, 26 Jan 2023 10:01:54 GMT
expires: Fri, 22 Dec 2023 10:01:54 GMT
cache-control: private, max-age=100000000
etag: "686897696a7c876b7e"
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxRLBXIejUYN7G9-HsLdkTptw&fn=sqr_50
200 OK 956 B URL HTTP/2 i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxRLBXIejUYN7G9-HsLdkTptw&fn=sqr_50
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1f03347cd66bc67e17dca2eba888e18c
eb9f80d5af6a3cfdd5dae87ccb0b39b53db63c9b
8e5ee35843100467e6330113b262ee392f6b58bd2a41cd19a58375641611878e
GET /i?r=AyH4iRPQ2q0otWIFepML2LxRLBXIejUYN7G9-HsLdkTptw&fn=sqr_50 HTTP/1.1
Host: i.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.ok.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: image/webp
content-length: 956
accept-ranges: bytes
last-modified: Thu, 26 Jan 2023 10:01:54 GMT
expires: Fri, 22 Dec 2023 10:01:54 GMT
cache-control: private, max-age=100000000
etag: "686897696a7c876b7e"
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 40424c92051faabd80d6563b99244ab2
65ef469abb87cf3456bbc8c6eb71b55042a79b5d
f43a420c4699ea044429f3a4ef31d0ec016e96378fcf2d415e1f87d99abd1ab6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6368
Cache-Control: max-age=85865
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:54 GMT
Etag: "641ffd1b-2d7"
Expires: Tue, 28 Mar 2023 09:52:59 GMT
Last-Modified: Sun, 26 Mar 2023 08:06:51 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 727
ocsp.digicert.com/
200 OK 727 B IP
Hash f448a809bcf14d2a49529d6910fc9e53
8f111e5fd3368c3beb975ebf73a232136a192ec4
56efd3fb20b53a266435adf8043ecd2a6ad5951ca8ee161ff1025fb3ebb4a6f9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2759
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:54 GMT
Last-Modified: Mon, 27 Mar 2023 09:15:55 GMT
Server: ECAcc (ska/F776)
X-Cache: HIT
Content-Length: 727
i.mycdn.me/i?r=A0FUOT-UX7iqDOTe8YMItwv6DsahJQHTLGBe5TPaWUE2gMrjNMu_qiTaA5oagl2m-o3yHPmo0O2A4atAf8N9yUBF&fn=sqr_50
200 OK 2.2 kB URL HTTP/2 i.mycdn.me/i?r=A0FUOT-UX7iqDOTe8YMItwv6DsahJQHTLGBe5TPaWUE2gMrjNMu_qiTaA5oagl2m-o3yHPmo0O2A4atAf8N9yUBF&fn=sqr_50
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash fec0370b8c155d21fdff5b55bdd50904
910f8eff2a799f667d1d247d0d5d1be6354d6a88
b2a18542a24fe74f8bf78209d901ff639d83dfa238f1b2f95901d5321aa145e1
GET /i?r=A0FUOT-UX7iqDOTe8YMItwv6DsahJQHTLGBe5TPaWUE2gMrjNMu_qiTaA5oagl2m-o3yHPmo0O2A4atAf8N9yUBF&fn=sqr_50 HTTP/1.1
Host: i.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.ok.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: image/webp
content-length: 2214
accept-ranges: bytes
last-modified: Thu, 26 Jan 2023 10:01:54 GMT
expires: Fri, 22 Dec 2023 10:01:54 GMT
cache-control: private, max-age=100000000
etag: "686897696a7c876b7e"
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxRSBeL6kflBgXwcQvNTqunew&fn=sqr_50
200 OK 1.3 kB URL HTTP/2 i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxRSBeL6kflBgXwcQvNTqunew&fn=sqr_50
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1c2655aacbef59a35e85a2b3ef9d0595
b4030ad8a0eda535a115678a4161b998c30ff10c
55dec07dd13a1083102bd8fed7d3a453f0bf5e4b8a8b37f23c07ae79f7e0e437
GET /i?r=AyH4iRPQ2q0otWIFepML2LxRSBeL6kflBgXwcQvNTqunew&fn=sqr_50 HTTP/1.1
Host: i.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.ok.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: image/webp
content-length: 1302
accept-ranges: bytes
last-modified: Thu, 26 Jan 2023 10:01:54 GMT
expires: Fri, 22 Dec 2023 10:01:54 GMT
cache-control: private, max-age=100000000
etag: "686897696a7c876b7e"
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxR-Zn9mkyb_EDOeg3FlVSsrQ&fn=sqr_50
200 OK 698 B URL HTTP/2 i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxR-Zn9mkyb_EDOeg3FlVSsrQ&fn=sqr_50
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d621f41610d1e71071c6d52971a3ecf7
464b3ac8e6d2c193865e9f1b078c47674c3a011c
1645f00e0b04a80d1ecd44b0c915a9be11b9f8579b6dddceae3415bc64fa5985
GET /i?r=AyH4iRPQ2q0otWIFepML2LxR-Zn9mkyb_EDOeg3FlVSsrQ&fn=sqr_50 HTTP/1.1
Host: i.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.ok.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: image/webp
content-length: 698
accept-ranges: bytes
last-modified: Thu, 26 Jan 2023 10:01:54 GMT
expires: Fri, 22 Dec 2023 10:01:54 GMT
cache-control: private, max-age=100000000
etag: "686897696a7c876b7e"
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxRwxsEqBjVMtVKf0eQRIq4cA&fn=sqr_50
200 OK 980 B URL HTTP/2 i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxRwxsEqBjVMtVKf0eQRIq4cA&fn=sqr_50
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cec303a2201de8475f804a6290ac632a
ffe1f9343fd43fc605787b351c5c25e43845ede4
3bce99f43ceb18c697f555df5c6dace40208e071bce4390d4e7c52de6457f248
GET /i?r=AyH4iRPQ2q0otWIFepML2LxRwxsEqBjVMtVKf0eQRIq4cA&fn=sqr_50 HTTP/1.1
Host: i.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.ok.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: image/webp
content-length: 980
accept-ranges: bytes
last-modified: Thu, 26 Jan 2023 10:01:54 GMT
expires: Fri, 22 Dec 2023 10:01:54 GMT
cache-control: private, max-age=100000000
etag: "686897696a7c876b7e"
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash f448a809bcf14d2a49529d6910fc9e53
8f111e5fd3368c3beb975ebf73a232136a192ec4
56efd3fb20b53a266435adf8043ecd2a6ad5951ca8ee161ff1025fb3ebb4a6f9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2759
Cache-Control: max-age=168665
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:54 GMT
Etag: "64214ea4-2d7"
Expires: Wed, 29 Mar 2023 08:52:59 GMT
Last-Modified: Mon, 27 Mar 2023 08:07:00 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 727
i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxR1uj70uBEM50ykXo4saTL3Q&fn=sqr_50
200 OK 1.5 kB URL HTTP/2 i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxR1uj70uBEM50ykXo4saTL3Q&fn=sqr_50
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 38516d96b5ef5ca34823d14dc281a5f2
c3880615b76490ee02a007a3e0e5de1e5f821bf5
ef0e691fc8a7accd2fb60f910e885c3bc27734c16877d1ad86fe1dc3b52eedc0
GET /i?r=AyH4iRPQ2q0otWIFepML2LxR1uj70uBEM50ykXo4saTL3Q&fn=sqr_50 HTTP/1.1
Host: i.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.ok.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: image/webp
content-length: 1492
accept-ranges: bytes
last-modified: Thu, 26 Jan 2023 10:01:54 GMT
expires: Fri, 22 Dec 2023 10:01:54 GMT
cache-control: private, max-age=100000000
etag: "686897696a7c876b7e"
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxRB0aWA61V2VKo0svpbxMuGg&fn=sqr_50
200 OK 1.5 kB URL HTTP/2 i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxRB0aWA61V2VKo0svpbxMuGg&fn=sqr_50
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a9db321fdf78990545c6f34d231b3019
3ea1c21c4ddcb08f68959d80e208498feea7bcea
25d97e007dd02a769c38a70e46c5e711eb7eff8f60fbd4e2bd9ebf4db80531e7
GET /i?r=AyH4iRPQ2q0otWIFepML2LxRB0aWA61V2VKo0svpbxMuGg&fn=sqr_50 HTTP/1.1
Host: i.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.ok.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: image/webp
content-length: 1508
accept-ranges: bytes
last-modified: Thu, 26 Jan 2023 10:01:54 GMT
expires: Fri, 22 Dec 2023 10:01:54 GMT
cache-control: private, max-age=100000000
etag: "686897696a7c876b7e"
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
st.vk.com/dist/vkui.e4d670f36de4368e7b1a.js?8c66230575a229b2c176
200 OK 727 B URL HTTP/2 st.vk.com/dist/vkui.e4d670f36de4368e7b1a.js?8c66230575a229b2c176
IP
Hash 40424c92051faabd80d6563b99244ab2
65ef469abb87cf3456bbc8c6eb71b55042a79b5d
f43a420c4699ea044429f3a4ef31d0ec016e96378fcf2d415e1f87d99abd1ab6
GET /dist/vkui.e4d670f36de4368e7b1a.js?8c66230575a229b2c176 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: application/x-javascript
content-length: 79785
last-modified: Thu, 02 Mar 2023 23:00:53 GMT
etag: "64012aa5-137a9"
content-encoding: br
expires: Fri, 31 Mar 2023 10:01:53 GMT
cache-control: max-age=345600
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxR2mqqiJ67joqqnCC8KWUDaQ
200 OK 878 B URL HTTP/2 i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxR2mqqiJ67joqqnCC8KWUDaQ
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c25cd956ebe1130927ce73af7dcb17c7
b8ef2fb6bc4474cd44641818b80a75cc8cdaa77a
cc6d77d477fbf83e0af936d69ed130445d87bf2bc242e5591ced259f84c86a92
GET /i?r=AyH4iRPQ2q0otWIFepML2LxR2mqqiJ67joqqnCC8KWUDaQ HTTP/1.1
Host: i.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.ok.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: image/webp
content-length: 878
accept-ranges: bytes
last-modified: Thu, 26 Jan 2023 10:01:54 GMT
expires: Fri, 22 Dec 2023 10:01:54 GMT
cache-control: private, max-age=100000000
etag: "686897696a7c876b7e"
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
i.mycdn.me/i?r=AzExTCcIQuhnRIX9gBwt8KAMyWxIr7_gyattvWjqjNgDlBLbdkKPtqm0CFfiBwvaA7s&fn=sqr_50
200 OK 1.3 kB URL HTTP/2 i.mycdn.me/i?r=AzExTCcIQuhnRIX9gBwt8KAMyWxIr7_gyattvWjqjNgDlBLbdkKPtqm0CFfiBwvaA7s&fn=sqr_50
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1b320e89e28308c1c5c805a8eb510b3a
b21ae7e31b641f30eb5a2a6c631a1e484b45f0f8
9e6a23058d857d8482241ec2359f430f2af644e48455b562644b6dc6288c46a5
GET /i?r=AzExTCcIQuhnRIX9gBwt8KAMyWxIr7_gyattvWjqjNgDlBLbdkKPtqm0CFfiBwvaA7s&fn=sqr_50 HTTP/1.1
Host: i.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.ok.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: image/webp
content-length: 1326
accept-ranges: bytes
last-modified: Thu, 26 Jan 2023 10:01:54 GMT
expires: Fri, 22 Dec 2023 10:01:54 GMT
cache-control: private, max-age=100000000
etag: "686897696a7c876b7e"
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxR4zK0oTVfEC30Qa90PkpDwg&fn=sqr_50
200 OK 1.2 kB URL HTTP/2 i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxR4zK0oTVfEC30Qa90PkpDwg&fn=sqr_50
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 76e362110f437e015ee667c075c9f2f7
0567b4215a8bf50f6cb4613b62d7c47d87bdda02
93a841ea735692364123cc2bfad111475a3ce5c2d1cf44b3342bf0f9be65af4c
GET /i?r=AyH4iRPQ2q0otWIFepML2LxR4zK0oTVfEC30Qa90PkpDwg&fn=sqr_50 HTTP/1.1
Host: i.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.ok.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: image/webp
content-length: 1164
accept-ranges: bytes
last-modified: Thu, 26 Jan 2023 10:01:54 GMT
expires: Fri, 22 Dec 2023 10:01:54 GMT
cache-control: private, max-age=100000000
etag: "686897696a7c876b7e"
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxRuZdV_wtYTZPUrdjFkhve5Q&fn=sqr_50
200 OK 1.9 kB URL HTTP/2 i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxRuZdV_wtYTZPUrdjFkhve5Q&fn=sqr_50
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 06eebc8c8a2e0da3a3b24d4bcfebffe1
f624a52ebab48faa64f669316cb37b8ccc16a946
a2c41c8da12318e06240986869ff2bf53b033033355c5b8e8074897c13fb0312
GET /i?r=AyH4iRPQ2q0otWIFepML2LxRuZdV_wtYTZPUrdjFkhve5Q&fn=sqr_50 HTTP/1.1
Host: i.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.ok.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: image/webp
content-length: 1916
accept-ranges: bytes
last-modified: Thu, 26 Jan 2023 10:01:54 GMT
expires: Fri, 22 Dec 2023 10:01:54 GMT
cache-control: private, max-age=100000000
etag: "686897696a7c876b7e"
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
i.mycdn.me/i?r=AzExTCcIQuhnRIX9gBwt8KAMuj_P91lCJb35kGbwx11FGdfS9nBUhis8Eg06FmHCmCE&fn=sqr_50
200 OK 2.0 kB URL HTTP/2 i.mycdn.me/i?r=AzExTCcIQuhnRIX9gBwt8KAMuj_P91lCJb35kGbwx11FGdfS9nBUhis8Eg06FmHCmCE&fn=sqr_50
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e2d77f0d2d734fb5bce722633f64400b
c581e239605eb2a6fbd88f835fe242a1bc4cafed
7bb2fa250cec9aff4382ad8f7d2541273a62ba040e47622a1023c1b371f89091
GET /i?r=AzExTCcIQuhnRIX9gBwt8KAMuj_P91lCJb35kGbwx11FGdfS9nBUhis8Eg06FmHCmCE&fn=sqr_50 HTTP/1.1
Host: i.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.ok.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: image/webp
content-length: 1960
accept-ranges: bytes
last-modified: Thu, 26 Jan 2023 10:01:54 GMT
expires: Fri, 22 Dec 2023 10:01:54 GMT
cache-control: private, max-age=100000000
etag: "686897696a7c876b7e"
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxReKP9fsW4iCfh9IpRo_EImw&fn=sqr_50
200 OK 1.3 kB URL HTTP/2 i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxReKP9fsW4iCfh9IpRo_EImw&fn=sqr_50
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9bc36a630e9a5103a95080b57de9cde7
8691c243f4bdfc15736e8f1d0db05753d2d564ed
197051a85d5f0826e49dc621fb290f565ded415f23d1e0a94e84806e6c735d45
GET /i?r=AyH4iRPQ2q0otWIFepML2LxReKP9fsW4iCfh9IpRo_EImw&fn=sqr_50 HTTP/1.1
Host: i.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.ok.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: image/webp
content-length: 1260
accept-ranges: bytes
last-modified: Thu, 26 Jan 2023 10:01:54 GMT
expires: Fri, 22 Dec 2023 10:01:54 GMT
cache-control: private, max-age=100000000
etag: "686897696a7c876b7e"
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
htlb.casalemedia.com/openrtb/pbjs?s=337280
200 OK 8.0 kB URL HTTP/2 htlb.casalemedia.com/openrtb/pbjs?s=337280
IP
File type JSON data\012- HTML document text\012- HTML document, ASCII text, with very long lines (13624), with no line terminators
Hash 023c3f9da291254a9c1cc1c8c1998bfd
26c592d5da480dfbdeae4cfefc44404a01715247
f7bb211d852310a01ef3aa094bd4d08d2e205230b9e5877bf3a3d9c524b12e0e
POST /openrtb/pbjs?s=337280 HTTP/1.1
Host: htlb.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 2982
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: application/json
cf-ray: 7ae6cb6c0b17b517-OSL
access-control-allow-origin: https://devid.info
cache-control: no-cache
expires: 0
vary: Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=clfzw9%2BcbeIo%2Bu5C1FRsyzMKJDbaEuk%2BmGy2M7cpSv%2FvacDazf37lZtcwtDGNzZWO8CjFB%2FoZS4nFV2vzjHWeylFlOiIKbDrt0zxDn7nUCzZFWgLTOCsdzgY%2FwAgYnCjvslg%2BQ%2FD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxRl1Qj67TaMR36Bap4dEwfng&fn=sqr_50
200 OK 2.4 kB URL HTTP/2 i.mycdn.me/i?r=AyH4iRPQ2q0otWIFepML2LxRl1Qj67TaMR36Bap4dEwfng&fn=sqr_50
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 855a9459d7cca7dd67e40056f1c43e1b
132714e59c20f9b61db315e4f30952d647932c88
5a5226c2dbc3bb6c47b61ca4a1d33c1e99b131d750656692ba51954de4c27dc3
GET /i?r=AyH4iRPQ2q0otWIFepML2LxRl1Qj67TaMR36Bap4dEwfng&fn=sqr_50 HTTP/1.1
Host: i.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.ok.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: image/webp
content-length: 2374
accept-ranges: bytes
last-modified: Thu, 26 Jan 2023 10:01:54 GMT
expires: Fri, 22 Dec 2023 10:01:54 GMT
cache-control: private, max-age=100000000
etag: "686897696a7c876b7e"
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
i.mycdn.me/i?r=A0G_Fjc1-rG6dg9w94j4-RTM5ifS7YeKDaaPSlaK1NT16zeDG7ONAJg67RXk9scI_mZgpMpTIQKsz2xAeYI3hwrp&fn=sqr_50
200 OK 1.7 kB URL HTTP/2 i.mycdn.me/i?r=A0G_Fjc1-rG6dg9w94j4-RTM5ifS7YeKDaaPSlaK1NT16zeDG7ONAJg67RXk9scI_mZgpMpTIQKsz2xAeYI3hwrp&fn=sqr_50
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 43fda1811ab9084188c407643144bc48
919d7b2c9a68ac3d39fbdece471643f19f1f829f
3de9f1d7435958b2aa514060fe8516359cab494f5e202c1caacb4b9ac0a920b4
GET /i?r=A0G_Fjc1-rG6dg9w94j4-RTM5ifS7YeKDaaPSlaK1NT16zeDG7ONAJg67RXk9scI_mZgpMpTIQKsz2xAeYI3hwrp&fn=sqr_50 HTTP/1.1
Host: i.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://connect.ok.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: image/webp
content-length: 1672
accept-ranges: bytes
last-modified: Thu, 26 Jan 2023 10:01:54 GMT
expires: Fri, 22 Dec 2023 10:01:54 GMT
cache-control: private, max-age=100000000
etag: "686897696a7c876b7e"
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
st.mycdn.me/res/i/p/toolbar/logo_ok.png
200 OK 429 B URL HTTP/2 st.mycdn.me/res/i/p/toolbar/logo_ok.png
IP
File type PNG image data, 16 x 29, 8-bit/color RGBA, non-interlaced\012- data
Hash 84220b460b859659c0d827d02faa2c81
7c91cd844ad14c9ddc3724e5a283367421e45c04
ed4c61b09eefd6c1bbeea47a520ddaed52c2e5fc4a1670cd260f8ad9fa58dc2d
GET /res/i/p/toolbar/logo_ok.png HTTP/1.1
Host: st.mycdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://st.mycdn.me/res/css/prod/widget/widget_group.bc08faf4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: apache
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: image/png
content-length: 429
last-modified: Sat, 02 Apr 2022 08:45:31 GMT
vary: Accept-Encoding
expires: Tue, 26 Mar 2024 10:01:54 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
timing-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
vk.com/images/camera_50.png
200 OK 570 B URL HTTP/2 vk.com/images/camera_50.png
IP
File type PNG image data, 50 x 50, 8-bit/color RGB, non-interlaced\012- data
Hash b17a9dcdcc1e5028061e3c769a736e0d
55a0cff39baf55044b77888f5503925319279b38
e3b9c102be54a21fc534271c42ff116be61325240fac9649023cc6adf41d8e72
GET /images/camera_50.png HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/widget_community.php?app=0&width=200px&_ver=1&gid=38164112&mode=0&color1=&color2=&color3=&class_name=&height=410&url=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&referrer=&title=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20iSlim310%20%D0%B4%D0%BB%D1%8F%20Windows%202000%20Windows%20XP%20Windows%202003&1872284a2c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: image/png
content-length: 570
last-modified: Tue, 22 Sep 2020 20:29:55 GMT
etag: "5f6a5ec3-23a"
expires: Mon, 03 Apr 2023 10:01:54 GMT
cache-control: max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2
st.vk.com/dist/api/widgets/community.js?1
200 OK 28 B URL HTTP/2 st.vk.com/dist/api/widgets/community.js?1
IP
Hash 57744b8d30cb48c871213dd5dfe0df01
9d33a3a35c016251765337527aa6963f0405f286
7aa436ba2de59c82da6263076cedef3a9ca49fd61e0493404f2f7d898fa21b81
GET /dist/api/widgets/community.js?1 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: application/x-javascript
content-length: 397083
last-modified: Mon, 27 Mar 2023 07:44:43 GMT
etag: "6421496b-60f1b"
content-encoding: br
expires: Fri, 31 Mar 2023 10:01:53 GMT
cache-control: max-age=345600
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/vkcom-kit.75b3373ae168c1ebc70f.css
200 OK 17 kB URL HTTP/2 st.vk.com/dist/vkcom-kit.75b3373ae168c1ebc70f.css
IP
Hash 89a574ff00e6b0ec61d995d059ce6e65
aea09e96808ab77165ffa712eaa58b8f056d0bb6
e5c29c139842fd487473d0824f2c01b374680fb35d22fa929686d17896602a44
GET /dist/vkcom-kit.75b3373ae168c1ebc70f.css HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: text/css
content-length: 8713
last-modified: Mon, 27 Mar 2023 07:26:52 GMT
etag: "6421453c-2209"
content-encoding: br
expires: Fri, 31 Mar 2023 10:01:53 GMT
cache-control: max-age=345600
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/web/ui_common.e20239724a1ebfe810eb.js?6d5fbe2f5602c2323f0766e7691ba348
200 OK 1.5 kB URL HTTP/2 st.vk.com/dist/web/ui_common.e20239724a1ebfe810eb.js?6d5fbe2f5602c2323f0766e7691ba348
IP
Hash b84e20392ce6ed8a5b745477e5391dbf
9af6c5e05add33dc51acc739d6d6f40900a9115e
092406a8f985b9d03f40196dcf175f3c862aaa0a69c144e36e0a7f02de7c3e68
GET /dist/web/ui_common.e20239724a1ebfe810eb.js?6d5fbe2f5602c2323f0766e7691ba348 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: application/x-javascript
content-length: 21551
last-modified: Thu, 23 Mar 2023 13:32:52 GMT
etag: "641c5504-542f"
content-encoding: br
expires: Fri, 31 Mar 2023 10:01:53 GMT
cache-control: max-age=345600
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash b84e20392ce6ed8a5b745477e5391dbf
9af6c5e05add33dc51acc739d6d6f40900a9115e
092406a8f985b9d03f40196dcf175f3c862aaa0a69c144e36e0a7f02de7c3e68
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:55 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Fri, 31 Mar 2023 08:05:34 GMT
ETag: "9af6c5e05add33dc51acc739d6d6f40900a9115e"
Last-Modified: Mon, 27 Mar 2023 08:05:35 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2726
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ae6cb777866b511-OSL
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash b84e20392ce6ed8a5b745477e5391dbf
9af6c5e05add33dc51acc739d6d6f40900a9115e
092406a8f985b9d03f40196dcf175f3c862aaa0a69c144e36e0a7f02de7c3e68
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:55 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Fri, 31 Mar 2023 08:05:34 GMT
ETag: "9af6c5e05add33dc51acc739d6d6f40900a9115e"
Last-Modified: Mon, 27 Mar 2023 08:05:35 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2726
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ae6cb77bca2b4f7-OSL
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash b84e20392ce6ed8a5b745477e5391dbf
9af6c5e05add33dc51acc739d6d6f40900a9115e
092406a8f985b9d03f40196dcf175f3c862aaa0a69c144e36e0a7f02de7c3e68
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:55 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Fri, 31 Mar 2023 08:05:34 GMT
ETag: "9af6c5e05add33dc51acc739d6d6f40900a9115e"
Last-Modified: Mon, 27 Mar 2023 08:05:35 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2726
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ae6cb77b8d7b511-OSL
sun9-48.userapi.com/s/v1/if2/-VXs1eWEsKAOfv5-zvW_vLYx4Llet0KXPaLfIBe1qyEC2iKUfh2IzHLyG-1IERySBXW57epeQytQEAhpIBYLhyId.jpg?size=50x50&quality=96&crop=115,115,921,921&ava=1
200 OK 2.3 kB URL HTTP/2 sun9-48.userapi.com/s/v1/if2/-VXs1eWEsKAOfv5-zvW_vLYx4Llet0KXPaLfIBe1qyEC2iKUfh2IzHLyG-1IERySBXW57epeQytQEAhpIBYLhyId.jpg?size=50x50&quality=96&crop=115,115,921,921&ava=1
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash d69b35539a1116063ba5f66757e32dc8
b22e32d9430c39cba679169eddd081a03cc8b32d
049b2ef8a2188549a6aff4ab292f5923077395c8778e7567ba4bbff616f7ba8e
GET /s/v1/if2/-VXs1eWEsKAOfv5-zvW_vLYx4Llet0KXPaLfIBe1qyEC2iKUfh2IzHLyG-1IERySBXW57epeQytQEAhpIBYLhyId.jpg?size=50x50&quality=96&crop=115,115,921,921&ava=1 HTTP/1.1
Host: sun9-48.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:55 GMT
content-type: image/jpeg
content-length: 2342
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 525600
expires: Wed, 26 Apr 2023 10:01:55 GMT
cache-control: max-age=2592000
x-frontend: front225003
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
sun9-39.userapi.com/s/v1/if1/5h8gUkSESnSjLl7o3Hr3VjhX_tKjxL0dfSTBK4cpY73333TX2KHjSxaQW_W1x96PPfL0DLIC.jpg?size=50x50&quality=96&crop=80,80,644,644&ava=1
200 OK 2.3 kB URL HTTP/2 sun9-39.userapi.com/s/v1/if1/5h8gUkSESnSjLl7o3Hr3VjhX_tKjxL0dfSTBK4cpY73333TX2KHjSxaQW_W1x96PPfL0DLIC.jpg?size=50x50&quality=96&crop=80,80,644,644&ava=1
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash bcc8a225cb8044e56817f203471a23d5
caf0f59ec622a8a7cd5eb60e195e97fc4c10acc0
a17f2b7d73c201dd4a44f8ad3e9607e82230570eecb6efdc9167736ce7173632
GET /s/v1/if1/5h8gUkSESnSjLl7o3Hr3VjhX_tKjxL0dfSTBK4cpY73333TX2KHjSxaQW_W1x96PPfL0DLIC.jpg?size=50x50&quality=96&crop=80,80,644,644&ava=1 HTTP/1.1
Host: sun9-39.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:55 GMT
content-type: image/jpeg
content-length: 2349
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 850204
expires: Wed, 26 Apr 2023 10:01:55 GMT
cache-control: max-age=2592000
x-frontend: front221002
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
sun9-68.userapi.com/s/v1/if1/RBWutBP4rxyt_nPXd9fTylA0wEyExw9x6VHXWxUE3v3RnIN8EylWKe5bPF_587O-gU57Ep0f.jpg?size=50x50&quality=96&crop=0,146,960,960&ava=1
200 OK 3.2 kB URL HTTP/2 sun9-68.userapi.com/s/v1/if1/RBWutBP4rxyt_nPXd9fTylA0wEyExw9x6VHXWxUE3v3RnIN8EylWKe5bPF_587O-gU57Ep0f.jpg?size=50x50&quality=96&crop=0,146,960,960&ava=1
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 54baa1cfb52e7ae3cc57bb6c4f5efd12
7c484e4af27d111958129cf6d91de51589bccb1d
1323b3caf63118905201c32ad168d953a16017391aafd9145ad1a08eb2ac68ec
GET /s/v1/if1/RBWutBP4rxyt_nPXd9fTylA0wEyExw9x6VHXWxUE3v3RnIN8EylWKe5bPF_587O-gU57Ep0f.jpg?size=50x50&quality=96&crop=0,146,960,960&ava=1 HTTP/1.1
Host: sun9-68.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:55 GMT
content-type: image/jpeg
content-length: 3237
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 525404
expires: Wed, 26 Apr 2023 10:01:55 GMT
cache-control: max-age=2592000
x-frontend: front226107
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
sun9-80.userapi.com/c272/u82970/e_57f7f62e.jpg
200 OK 2.1 kB URL HTTP/2 sun9-80.userapi.com/c272/u82970/e_57f7f62e.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 93", baseline, precision 8, 50x50, components 3\012- data
Hash 07a10f9924e825a0eb1f787cd78fc728
4bc5d2849df15689ed767908c7997ffc284de322
5f36a22e205b22a22dfb93ddc6424849b2227ec710620caa6856f076ea9bdfb5
GET /c272/u82970/e_57f7f62e.jpg HTTP/1.1
Host: sun9-80.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:55 GMT
content-type: image/jpeg
content-length: 2096
last-modified: Fri, 29 Oct 2010 22:48:50 GMT
etag: "4ccb4f52-830"
expires: Wed, 26 Apr 2023 10:01:55 GMT
cache-control: max-age=2592000
x-frontend: front806208
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
sun9-52.userapi.com/s/v1/if2/kt0TMEfWFd5hl8zixSed8I16_UuosVTQ0c8yS1eBgoYHz8rTyJhRLBysCv3l_xr1vlGG4NaL4OSkn4bmRMM9F5CP.jpg?size=50x50&quality=96&crop=141,278,916,916&ava=1
200 OK 3.7 kB URL HTTP/2 sun9-52.userapi.com/s/v1/if2/kt0TMEfWFd5hl8zixSed8I16_UuosVTQ0c8yS1eBgoYHz8rTyJhRLBysCv3l_xr1vlGG4NaL4OSkn4bmRMM9F5CP.jpg?size=50x50&quality=96&crop=141,278,916,916&ava=1
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 3ef478473be8b475bd0fb1f907c18858
359eb6ea1d70ba15a147af1ed60bb2e4e04341a5
7c491d41e0cfe7d30073ce0feabbd779d52bc97a78f564579ed657740c70d8ac
GET /s/v1/if2/kt0TMEfWFd5hl8zixSed8I16_UuosVTQ0c8yS1eBgoYHz8rTyJhRLBysCv3l_xr1vlGG4NaL4OSkn4bmRMM9F5CP.jpg?size=50x50&quality=96&crop=141,278,916,916&ava=1 HTTP/1.1
Host: sun9-52.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:55 GMT
content-type: image/jpeg
content-length: 3731
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 849404
expires: Wed, 26 Apr 2023 10:01:55 GMT
cache-control: max-age=2592000
x-frontend: front225007
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash b4e70108280b5053d25dba3aa1ddd715
ac87703f7a1b2293eb83b71ae90cfa6116ea60ab
dd3de6133f37a9dcccc4902dcc41d35e275f90ff9e45903d0108853848ac0489
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:55 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Fri, 31 Mar 2023 08:54:08 GMT
ETag: "ac87703f7a1b2293eb83b71ae90cfa6116ea60ab"
Last-Modified: Mon, 27 Mar 2023 08:54:09 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1295
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ae6cb782c36067b-OSL
sun9-41.userapi.com/s/v1/if1/bqGHLOlYJ8w3ExltVeh2r9SVm8ViICtxQM43ZlrbwBuuji8BBcr0zXTGzdn-Wl3q7-_8omwu.jpg?size=50x50&quality=96&crop=3,167,1672,1672&ava=1
200 OK 2.2 kB URL HTTP/2 sun9-41.userapi.com/s/v1/if1/bqGHLOlYJ8w3ExltVeh2r9SVm8ViICtxQM43ZlrbwBuuji8BBcr0zXTGzdn-Wl3q7-_8omwu.jpg?size=50x50&quality=96&crop=3,167,1672,1672&ava=1
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 8070878ef4aad9def0d92929b5ad5e25
47b6ebd6fef73dbd768628455896fedf9628a492
5e68d929f647fad7157f718e1ac0ae707415f69710fc3a8dca936e9ed580feb8
GET /s/v1/if1/bqGHLOlYJ8w3ExltVeh2r9SVm8ViICtxQM43ZlrbwBuuji8BBcr0zXTGzdn-Wl3q7-_8omwu.jpg?size=50x50&quality=96&crop=3,167,1672,1672&ava=1 HTTP/1.1
Host: sun9-41.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:55 GMT
content-type: image/jpeg
content-length: 2192
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 835518
expires: Wed, 26 Apr 2023 10:01:55 GMT
cache-control: max-age=2592000
x-frontend: front632928
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
sun9-52.userapi.com/s/v1/ig2/VOREzZX3qfAQcZ4nqd9iJAbmGSWdCj6nuY6vVpk-dhAW-kYAgBfZqG0HjegAg250buGq3aS4SEhnF3oP5eBDfLRV.jpg?size=50x50&quality=95&crop=165,303,346,346&ava=1
200 OK 2.4 kB URL HTTP/2 sun9-52.userapi.com/s/v1/ig2/VOREzZX3qfAQcZ4nqd9iJAbmGSWdCj6nuY6vVpk-dhAW-kYAgBfZqG0HjegAg250buGq3aS4SEhnF3oP5eBDfLRV.jpg?size=50x50&quality=95&crop=165,303,346,346&ava=1
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 965cfcde4b7fafaf1f96f556211860cb
40553cf74472a4b1a9431b16a768c8ba2b2bd7fe
c6adf4765171fad9cbefcc096069fc11a40eb46ef59c6e2649c5f0dcc484987e
GET /s/v1/ig2/VOREzZX3qfAQcZ4nqd9iJAbmGSWdCj6nuY6vVpk-dhAW-kYAgBfZqG0HjegAg250buGq3aS4SEhnF3oP5eBDfLRV.jpg?size=50x50&quality=95&crop=165,303,346,346&ava=1 HTTP/1.1
Host: sun9-52.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:55 GMT
content-type: image/jpeg
content-length: 2386
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 838512
expires: Wed, 26 Apr 2023 10:01:55 GMT
cache-control: max-age=2592000
x-frontend: front225007
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
sun9-52.userapi.com/s/v1/ig2/S8_tf2-p12cs2OM_qr_nGIkml7bJQ0Tk7hegSRYzVQGhZnWp9m9daQSzbN9HTu4GsFudXkZX6zjNKJO-u4eAjk88.jpg?size=50x50&quality=95&crop=52,52,497,497&ava=1
200 OK 1.3 kB URL HTTP/2 sun9-52.userapi.com/s/v1/ig2/S8_tf2-p12cs2OM_qr_nGIkml7bJQ0Tk7hegSRYzVQGhZnWp9m9daQSzbN9HTu4GsFudXkZX6zjNKJO-u4eAjk88.jpg?size=50x50&quality=95&crop=52,52,497,497&ava=1
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash ac3d274d9351949f21e3cebaa04e0b05
7f87653bdd2fa3a1c7a32121c10e3c28c5a1227e
2b2c3dcf3c8748983fa0a042262c0104edced60e93e13dfdba89d79b341b5509
GET /s/v1/ig2/S8_tf2-p12cs2OM_qr_nGIkml7bJQ0Tk7hegSRYzVQGhZnWp9m9daQSzbN9HTu4GsFudXkZX6zjNKJO-u4eAjk88.jpg?size=50x50&quality=95&crop=52,52,497,497&ava=1 HTTP/1.1
Host: sun9-52.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:55 GMT
content-type: image/jpeg
content-length: 1280
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 838315
expires: Wed, 26 Apr 2023 10:01:55 GMT
cache-control: max-age=2592000
x-frontend: front225007
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
sun9-76.userapi.com/c844722/v844722286/19863b/H5wcWqX27Rg.jpg
200 OK 1.8 kB URL HTTP/2 sun9-76.userapi.com/c844722/v844722286/19863b/H5wcWqX27Rg.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash c45e8bf9578fbb8ed317de98298336ba
696d36f75531ed4b1a82d6e2c366062c0778133c
ac643a603552f4839d31530faf7a9d86ebac28a46f2208c717b23d0edc7e5196
GET /c844722/v844722286/19863b/H5wcWqX27Rg.jpg HTTP/1.1
Host: sun9-76.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:55 GMT
content-type: image/jpeg
content-length: 1758
last-modified: Thu, 07 Feb 2019 08:34:01 GMT
expires: Wed, 26 Apr 2023 10:01:55 GMT
cache-control: max-age=2592000
x-frontend: front604603
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
shb.richaudience.com/hb/
200 OK 2.6 kB IP
ASN #24940 Hetzner Online GmbH
Hash c1f9149eafd4b15012eb8c7dfbd7363b
5a23a9fbf8196645a449a8e414f0b6e1f32c2c3d
9e74a74bd0d65eb4c23a2d592724b738ba63dcaf006a8448cb85684f91121b9a
POST /hb/ HTTP/1.1
Host: shb.richaudience.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 849
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.2
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: https://devid.info
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: gzip
X-Firefox-Spdy: h2
sun9-55.userapi.com/s/v1/if1/ohkvLEoOokIairJZa50x_TKEHhhEdnYKpH3Waz9bCMU9PW2YJVf_02QIQpgP-ZwZ7Bflzhys.jpg?size=50x50&quality=96&crop=0,153,918,918&ava=1
200 OK 3.3 kB URL HTTP/2 sun9-55.userapi.com/s/v1/if1/ohkvLEoOokIairJZa50x_TKEHhhEdnYKpH3Waz9bCMU9PW2YJVf_02QIQpgP-ZwZ7Bflzhys.jpg?size=50x50&quality=96&crop=0,153,918,918&ava=1
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 1a94f2cb6a779f1e55b86c764d0c9f43
dbe9b71a41029ed395548ec21d161c65e500153e
bdca301f66a9628858f5db15928723eb9f92a8319b37f4fc8156a45ac23798c4
GET /s/v1/if1/ohkvLEoOokIairJZa50x_TKEHhhEdnYKpH3Waz9bCMU9PW2YJVf_02QIQpgP-ZwZ7Bflzhys.jpg?size=50x50&quality=96&crop=0,153,918,918&ava=1 HTTP/1.1
Host: sun9-55.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:55 GMT
content-type: image/jpeg
content-length: 3285
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 835518
expires: Wed, 26 Apr 2023 10:01:55 GMT
cache-control: max-age=2592000
x-frontend: front221006
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
sun9-77.userapi.com/s/v1/if1/0QEOQfPcLLUhgfpKVfYItF5i_pfsw-vmGXvcXovabk8J_BeW3qo4nbrC5lB3J_IwC7Bq5A.jpg?size=50x50&quality=96&crop=0,5,200,200&ava=1
200 OK 3.2 kB URL HTTP/2 sun9-77.userapi.com/s/v1/if1/0QEOQfPcLLUhgfpKVfYItF5i_pfsw-vmGXvcXovabk8J_BeW3qo4nbrC5lB3J_IwC7Bq5A.jpg?size=50x50&quality=96&crop=0,5,200,200&ava=1
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash e471e8f0680fb34480b897c5f5d14f12
a338bddbc729a609a686a6316ca013ac25e887d5
0389ff9bddd9117a2524df65dc99a8afa8755566675d7b49bb4c335f0efa251b
GET /s/v1/if1/0QEOQfPcLLUhgfpKVfYItF5i_pfsw-vmGXvcXovabk8J_BeW3qo4nbrC5lB3J_IwC7Bq5A.jpg?size=50x50&quality=96&crop=0,5,200,200&ava=1 HTTP/1.1
Host: sun9-77.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:55 GMT
content-type: image/jpeg
content-length: 3215
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 525602
expires: Wed, 26 Apr 2023 10:01:55 GMT
cache-control: max-age=2592000
x-frontend: front806205
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
sun9-20.userapi.com/s/v1/ig2/9-ZGV1Py7Vah8qi4jerVEbeqq4rygalPtLDsP6i-ZRv5iIwBkFnKTi2NkHpnlvdGfdaFMyHJFGUNyti5dmpeeOmK.jpg?size=50x50&quality=96&crop=546,0,1440,1440&ava=1
200 OK 3.2 kB URL HTTP/2 sun9-20.userapi.com/s/v1/ig2/9-ZGV1Py7Vah8qi4jerVEbeqq4rygalPtLDsP6i-ZRv5iIwBkFnKTi2NkHpnlvdGfdaFMyHJFGUNyti5dmpeeOmK.jpg?size=50x50&quality=96&crop=546,0,1440,1440&ava=1
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 45c8772dce2325d33cf5fba5f5613a70
9a01aee4b462dee27fb721f5e75b137b1a61f009
4239313bf08767ed8409a5926fcedda372998443393d1d7228f906c0fd07d30f
GET /s/v1/ig2/9-ZGV1Py7Vah8qi4jerVEbeqq4rygalPtLDsP6i-ZRv5iIwBkFnKTi2NkHpnlvdGfdaFMyHJFGUNyti5dmpeeOmK.jpg?size=50x50&quality=96&crop=546,0,1440,1440&ava=1 HTTP/1.1
Host: sun9-20.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:55 GMT
content-type: image/jpeg
content-length: 3154
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 838513
expires: Wed, 26 Apr 2023 10:01:55 GMT
cache-control: max-age=2592000
x-frontend: front504110
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
shb.richaudience.com/hb/
200 OK 3.2 kB IP
ASN #24940 Hetzner Online GmbH
Hash 38c8073cd93196ad69530d01a90478de
fe8441803736a4c1272774b54c930a9261a03618
d78b4cd7a16585363fd46b1a7d3a854e4755b611884f50fe241a4b15cca89b38
POST /hb/ HTTP/1.1
Host: shb.richaudience.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 813
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.2
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: https://devid.info
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: gzip
X-Firefox-Spdy: h2
shb.richaudience.com/hb/
200 OK 3.2 kB IP
ASN #24940 Hetzner Online GmbH
Hash 5637ad69564cab88292bb1c00916c454
29fc4f8b44ca90a0a8bf20ee0bd3cc7e20734cd7
a1f97b6e991998a295e7624ff067758ba0b0a00cd86338f52cc177c01531982e
POST /hb/ HTTP/1.1
Host: shb.richaudience.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 795
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.2
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: https://devid.info
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: gzip
X-Firefox-Spdy: h2
sun9-62.userapi.com/s/v1/ig2/C7BsacniwpEXRLjV_x2-KpPbszOoeRw-BNZVq-3j1eJU8yvuuv5AsoVn6Gvi-bF07pbR-OwUZnUDJ7KhhJeyY5FP.jpg?size=50x50&quality=96&crop=216,216,1728,1728&ava=1
200 OK 3.3 kB URL HTTP/2 sun9-62.userapi.com/s/v1/ig2/C7BsacniwpEXRLjV_x2-KpPbszOoeRw-BNZVq-3j1eJU8yvuuv5AsoVn6Gvi-bF07pbR-OwUZnUDJ7KhhJeyY5FP.jpg?size=50x50&quality=96&crop=216,216,1728,1728&ava=1
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash a886f796e00e99c4a4a145ce7663d6fc
356f189aa2b46328b854700468a0ebbdd905e6e2
f0ed9ccd130a4c198b1332e723d926e09cbd43805ecbb81d9db216a4f3c855a1
GET /s/v1/ig2/C7BsacniwpEXRLjV_x2-KpPbszOoeRw-BNZVq-3j1eJU8yvuuv5AsoVn6Gvi-bF07pbR-OwUZnUDJ7KhhJeyY5FP.jpg?size=50x50&quality=96&crop=216,216,1728,1728&ava=1 HTTP/1.1
Host: sun9-62.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:55 GMT
content-type: image/jpeg
content-length: 3330
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 825006
expires: Wed, 26 Apr 2023 10:01:55 GMT
cache-control: max-age=2592000
x-frontend: front226005
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d26bc2c5da61ae0ba0f629dac1f77ac8
f62f4e287592aea7d4f46ed12a45ee041c0a63d0
27f65e53844d7ce364aec6e53f8cc3cd9400bd64706286f33d360e34cb2b6035
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "27F65E53844D7CE364AEC6E53F8CC3CD9400BD64706286F33D360E34CB2B6035"
Last-Modified: Mon, 27 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5080
Expires: Mon, 27 Mar 2023 11:26:35 GMT
Date: Mon, 27 Mar 2023 10:01:55 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 46deddb8b844851da2d68cdb99372c7d
f52730dfe273dff574d1421d8c7178c2d296aaa2
6dfc153b2d0e0b53820d77a059a342f07bf691771ae91c31bc4d45cdbcebf2a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash aee967595d5b11fc508d102c6c93dd93
1b51ae5b5f9a4b7e3c51bb4307c9eacd4ea2a85e
3cbc3af47f5b1e142bb6cb5fed8154476b773f1b9a95623b5bb5ba94957ff309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
api.rlcdn.com/api/identity/envelope?pid=1323
451 Unavailable For Legal Reasons 0 B URL HTTP/2 api.rlcdn.com/api/identity/envelope?pid=1323
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/identity/envelope?pid=1323 HTTP/1.1
Host: api.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 451 Unavailable For Legal Reasons
access-control-allow-credentials: true
access-control-allow-headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: https://devid.info
date: Mon, 27 Mar 2023 10:01:55 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e313e8dc8f60f83d8325701f8cd59269
bdb8a5a6da55f068f4afb86f3cfe3aec90ee68d5
385a5d45b4a6b95322b95b7b563b966e425cf84a71455cb2118f3dd36e299ba5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "385A5D45B4A6B95322B95B7B563B966E425CF84A71455CB2118F3DD36E299BA5"
Last-Modified: Mon, 27 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8119
Expires: Mon, 27 Mar 2023 12:17:14 GMT
Date: Mon, 27 Mar 2023 10:01:55 GMT
Connection: keep-alive
adservice.google.no/adsid/integrator.js?domain=devid.info
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=devid.info
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=devid.info HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Mon, 27 Mar 2023 10:01:55 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lb.eu-1-id5-sync.com/lb/v1
200 33 B URL HTTP/1.1 lb.eu-1-id5-sync.com/lb/v1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash fce38d268e508dbddb996a8b0bd29f8c
cca08050ead62395aeb53993086d9ea50b0d5aa8
e1a64fe46cfc7e974c5df54d0f713cfee5d3104a99d3e36d1d0f3d7f23f1f34c
GET /lb/v1 HTTP/1.1
Host: lb.eu-1-id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://devid.info
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Mon, 27 Mar 2023 10:01:54 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
adservice.google.com/adsid/integrator.js?domain=devid.info
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=devid.info
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=devid.info HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Mon, 27 Mar 2023 10:01:55 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bcp.crwdcntrl.net/6/map
200 OK 60 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f6ccf4d4d8421df19b3fdf9723177cde
18409b454775da91ccab69f13789ecbd00e0a351
9bd920bb4ec121d6e22bc1ccab4b79e39979b08fab0114d10cee54b038481983
POST /6/map HTTP/1.1
Host: bcp.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 50
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:55 GMT
content-type: application/json;charset=utf-8
content-length: 60
p3p: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
cache-control: no-cache
pragma: no-cache
expires: 0
x-server: 10.45.26.162
access-control-allow-credentials: true
access-control-allow-origin: https://devid.info
server: Jetty(9.4.38.v20210224)
X-Firefox-Spdy: h2
id5-sync.com/api/config/prebid
200 135 B URL HTTP/1.1 id5-sync.com/api/config/prebid
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 4eb43de05ae4ccf9197d91167f082dae
d6cd93e31f2d6bcbf9aae42e82680950a1c9ea6f
480613f771d4b2960ecbcbf9f0a8435d009d8f5fd10ab14bba1b1018762708e0
POST /api/config/prebid HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 121
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://devid.info
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Mon, 27 Mar 2023 10:01:54 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
prebid.media.net/rtb/prebid?cid=8CUQWX43D
200 OK 18 kB URL HTTP/2 prebid.media.net/rtb/prebid?cid=8CUQWX43D
IP
Hash 8e1b558aec829f5dbfb378f7e78ac008
300cc9e5ac8e04be2f20ae0a6421ece5617d6be4
071877b95f23dc01a53fa7816bbe18db872889961639a73dd435c35bf22dd94c
POST /rtb/prebid?cid=8CUQWX43D HTTP/1.1
Host: prebid.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 5219
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: application/json;charset=UTF-8
cache-control: max-age=0, no-cache, no-store, must-revalidate
pragma: no-cache
accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model
expires: Mon, 27 Mar 2023 10:01:53 GMT
access-control-allow-origin: https://devid.info
access-control-allow-credentials: true
content-encoding: gzip
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
at.teads.tv/fpc?analytics_tag_id=PUB_17018&tfpvi=&gdpr_consent=&gdpr_status=22&gdpr_reason=220&ccpa_consent=&sv=prebid-v1
200 OK 56 B URL HTTP/1.1 at.teads.tv/fpc?analytics_tag_id=PUB_17018&tfpvi=&gdpr_consent=&gdpr_status=22&gdpr_reason=220&ccpa_consent=&sv=prebid-v1
IP
File type ASCII text, with no line terminators
Hash a417542983367d324fab22141bc92a08
43161580e0339ce01631ca7f1db45c9cc3d65a60
11d1828c10fd491f71dd2ca2334b6445189e826b4609cfa3b3932b220edbe32b
GET /fpc?analytics_tag_id=PUB_17018&tfpvi=&gdpr_consent=&gdpr_status=22&gdpr_reason=220&ccpa_consent=&sv=prebid-v1 HTTP/1.1
Host: at.teads.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
Content-Length: 56
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://devid.info
Expires: Mon, 27 Mar 2023 10:01:55 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 27 Mar 2023 10:01:55 GMT
Connection: keep-alive
ocsp.pki.goog/s/gts1d4/wiwC8w5j4Lo
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/wiwC8w5j4Lo
IP
Hash 0e8b58b5fa7d372b5acf781ac3e40cc2
58318355cec76644175da294d42634fcff2ab7d3
42be6e94ff00551c9bdcd83369b58b2e530ce4189054a69c8240130f6bf4e342
POST /s/gts1d4/wiwC8w5j4Lo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:55 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
top-fwz1.mail.ru/counter?js=13;id=2685520;u=https%3A//devid.info/ru/208427/islim310;st=1679911332596;pid=0;title=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20iSlim310%20%D0%B4%D0%BB%D1%8F%20Windows%202000%20Windows%20XP%20Windows%202003;s=1280*1024;vp=200*410;touch=0;hds=1;frame=1;flash=;sid=454396a2e67015fd;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1679911333177%3A1679911333183%3A0%3Ac5b4bad5eff26f41810d44488c4a2cb9;visible=true;_=0.7944242711364308
302 Found 0 B URL HTTP/2 top-fwz1.mail.ru/counter?js=13;id=2685520;u=https%3A//devid.info/ru/208427/islim310;st=1679911332596;pid=0;title=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20iSlim310%20%D0%B4%D0%BB%D1%8F%20Windows%202000%20Windows%20XP%20Windows%202003;s=1280*1024;vp=200*410;touch=0;hds=1;frame=1;flash=;sid=454396a2e67015fd;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1679911333177%3A1679911333183%3A0%3Ac5b4bad5eff26f41810d44488c4a2cb9;visible=true;_=0.7944242711364308
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?js=13;id=2685520;u=https%3A//devid.info/ru/208427/islim310;st=1679911332596;pid=0;title=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20iSlim310%20%D0%B4%D0%BB%D1%8F%20Windows%202000%20Windows%20XP%20Windows%202003;s=1280*1024;vp=200*410;touch=0;hds=1;frame=1;flash=;sid=454396a2e67015fd;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1679911333177%3A1679911333183%3A0%3Ac5b4bad5eff26f41810d44488c4a2cb9;visible=true;_=0.7944242711364308 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 27 Mar 2023 10:01:55 GMT
content-length: 0
location: https://top-fwz1.mail.ru/counter2?js=13;id=2685520;u=https%3A//devid.info/ru/208427/islim310;st=1679911332596;pid=0;title=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20iSlim310%20%D0%B4%D0%BB%D1%8F%20Windows%202000%20Windows%20XP%20Windows%202003;s=1280*1024;vp=200*410;touch=0;hds=1;frame=1;flash=;sid=454396a2e67015fd;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1679911333177%3A1679911333183%3A0%3Ac5b4bad5eff26f41810d44488c4a2cb9;visible=true;_=0.7944242711364308
set-cookie: FTID=1RMYgQ0tkIIG:1679911315:2685520:::; path=/; expires=Wed, 27-Mar-24 10:01:55 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash aee967595d5b11fc508d102c6c93dd93
1b51ae5b5f9a4b7e3c51bb4307c9eacd4ea2a85e
3cbc3af47f5b1e142bb6cb5fed8154476b773f1b9a95623b5bb5ba94957ff309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 46deddb8b844851da2d68cdb99372c7d
f52730dfe273dff574d1421d8c7178c2d296aaa2
6dfc153b2d0e0b53820d77a059a342f07bf691771ae91c31bc4d45cdbcebf2a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash 97888547ec2e152abc5333a8f1e60899
fc74d301ad95a5d7b61b11dafb8a3f85c24fb82b
f38ae3fa0d98ee97cdafaab05dac52db0f3c286cf6166b0a9512568e1a634d60
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=125340
Date: Mon, 27 Mar 2023 10:01:55 GMT
Etag: "64209aa8-1d7"
Expires: Tue, 28 Mar 2023 20:50:55 GMT
Last-Modified: Sun, 26 Mar 2023 19:19:04 GMT
Server: ECAcc (nya/7993)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: I93GFYMTxRtkkOpS2QyUtKo9vz1Rb6bY3RED0_hZ_W9O9Hff0VeNNA==
Age: 5511
top-fwz1.mail.ru/counter2?js=13;id=2685520;u=https%3A//devid.info/ru/208427/islim310;st=1679911332596;pid=0;title=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20iSlim310%20%D0%B4%D0%BB%D1%8F%20Windows%202000%20Windows%20XP%20Windows%202003;s=1280*1024;vp=200*410;touch=0;hds=1;frame=1;flash=;sid=454396a2e67015fd;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1679911333177%3A1679911333183%3A0%3Ac5b4bad5eff26f41810d44488c4a2cb9;visible=true;_=0.7944242711364308
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/counter2?js=13;id=2685520;u=https%3A//devid.info/ru/208427/islim310;st=1679911332596;pid=0;title=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20iSlim310%20%D0%B4%D0%BB%D1%8F%20Windows%202000%20Windows%20XP%20Windows%202003;s=1280*1024;vp=200*410;touch=0;hds=1;frame=1;flash=;sid=454396a2e67015fd;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1679911333177%3A1679911333183%3A0%3Ac5b4bad5eff26f41810d44488c4a2cb9;visible=true;_=0.7944242711364308
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /counter2?js=13;id=2685520;u=https%3A//devid.info/ru/208427/islim310;st=1679911332596;pid=0;title=%D0%A1%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C%20%D0%B4%D1%80%D0%B0%D0%B9%D0%B2%D0%B5%D1%80%D1%8B%20iSlim310%20%D0%B4%D0%BB%D1%8F%20Windows%202000%20Windows%20XP%20Windows%202003;s=1280*1024;vp=200*410;touch=0;hds=1;frame=1;flash=;sid=454396a2e67015fd;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1679911333177%3A1679911333183%3A0%3Ac5b4bad5eff26f41810d44488c4a2cb9;visible=true;_=0.7944242711364308 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vk.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 27 Mar 2023 10:01:55 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIG:1679911315:2685520:::; path=/; expires=Wed, 27-Mar-24 10:01:55 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
d78366f658f7ddb7c3a93e693ce6121c.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
200 OK 2.7 kB URL HTTP/2 d78366f658f7ddb7c3a93e693ce6121c.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5657)
Hash e8ee9c011ff8e1f464e74c37113119ee
64ad72134ea05877de0f2b6503f5c0d8c3f78197
09e42988871806c7f0a897bda7bc4247f47f4d8590749eaa245b8ff1fa907303
GET /safeframe/1-0-40/html/container.html HTTP/1.1
Host: d78366f658f7ddb7c3a93e693ce6121c.safeframe.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/html
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 2653
date: Mon, 27 Mar 2023 10:01:55 GMT
expires: Tue, 26 Mar 2024 10:01:55 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Thu, 03 Nov 2022 19:10:08 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lexicon.33across.com/v1/envelope?pid=0010b00002PIxPJAA1&gdpr=0&src=pbjs&ver=7.38.0
200 OK 49 B URL HTTP/2 lexicon.33across.com/v1/envelope?pid=0010b00002PIxPJAA1&gdpr=0&src=pbjs&ver=7.38.0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c466bd434db29cf02793f8522fde5f3a
f39a01bb0264479dbe9a4bfb0b80ae0b3b0e8154
d0d2e098cd489ef7bc528c86de8ab5c51b5d6cdf9b76a8b08766036992f0d2f4
GET /v1/envelope?pid=0010b00002PIxPJAA1&gdpr=0&src=pbjs&ver=7.38.0 HTTP/1.1
Host: lexicon.33across.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: origin
access-control-allow-credentials: true
access-control-allow-origin: https://devid.info
cache-control: private, must-revalidate, max-age=28800
content-type: application/json
content-length: 49
via: 1.1 google
date: Mon, 27 Mar 2023 10:01:54 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lb.eu-1-id5-sync.com/lb/v1
200 33 B URL HTTP/1.1 lb.eu-1-id5-sync.com/lb/v1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f3e84839da8f865020233357550fa636
48a11bcd415868eaf457bc7170f7092f50017c62
fa58acb6e328bb678e7114bef2fe8e58aa1c1981d93f1634bfc4c6d5e8aa8b31
GET /lb/v1 HTTP/1.1
Host: lb.eu-1-id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://devid.info
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Mon, 27 Mar 2023 10:01:54 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
ocsp.pki.goog/s/gts1d4/wiwC8w5j4Lo
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/wiwC8w5j4Lo
IP
Hash 0e8b58b5fa7d372b5acf781ac3e40cc2
58318355cec76644175da294d42634fcff2ab7d3
42be6e94ff00551c9bdcd83369b58b2e530ce4189054a69c8240130f6bf4e342
POST /s/gts1d4/wiwC8w5j4Lo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:55 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 472 B IP
Hash ac2ae69afc70f2a8941ed6b658f4bd0e
5bac1a2c66dd04024217bd79173e2d00098ea987
1565e942701c0c33f8b78d2d64049fea418ee9b2466b3294db350ed57dd3881d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:55 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 26 Mar 2023 20:38:00 GMT
Expires: Sun, 02 Apr 2023 20:37:59 GMT
Etag: "5bac1a2c66dd04024217bd79173e2d00098ea987"
Cache-Control: max-age=555963,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ae6cb799924fac0-OSL
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 7fdbaff7834ba117db2bc73bfc70666a
a77c3122042ce4c03ba086ace7c3edbd109197a3
b5ce7283e8412a0ccb89c717886dbb5b5872084b2fe8da76a1fae769fb8ea08f
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 27 Mar 2023 10:01:55 GMT
Last-Modified: Mon, 27 Mar 2023 09:35:06 GMT
Server: ECAcc (bsa/EAE4)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: QufFL0sts0mgDDT-NFNq2pWf7wvkwxc8HEIDNEajQHMne_x4RGYYPw==
Age: 1609
prod.us-east-1.cxm-bcn.publisher-services.amazon.dev/v1/recordVendorsLoaded
200 OK 0 B URL HTTP/2 prod.us-east-1.cxm-bcn.publisher-services.amazon.dev/v1/recordVendorsLoaded
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/recordVendorsLoaded HTTP/1.1
Host: prod.us-east-1.cxm-bcn.publisher-services.amazon.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://devid.info/
Origin: https://devid.info
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:55 GMT
content-length: 0
set-cookie: AWSALB=EZXo+P0uIt36Gh1ISPkve1RBNp4RMa8mLwTO4JHP4yji5juDmZVpWMdPScGlwJFJZS4b8V2IRiFpxgHintSFC1bfFgGDQ9OSVzrCPvechTHyIFTHiK4E/LTr9dKB; Expires=Mon, 03 Apr 2023 10:01:55 GMT; Path=/
AWSALBCORS=EZXo+P0uIt36Gh1ISPkve1RBNp4RMa8mLwTO4JHP4yji5juDmZVpWMdPScGlwJFJZS4b8V2IRiFpxgHintSFC1bfFgGDQ9OSVzrCPvechTHyIFTHiK4E/LTr9dKB; Expires=Mon, 03 Apr 2023 10:01:55 GMT; Path=/; SameSite=None; Secure
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: *
access-control-allow-methods: POST
access-control-allow-headers: content-type
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
X-Firefox-Spdy: h2
targeting.unrulymedia.com/unruly_prebid
204 No Content 0 B URL HTTP/2 targeting.unrulymedia.com/unruly_prebid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /unruly_prebid HTTP/1.1
Host: targeting.unrulymedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://devid.info/
Origin: https://devid.info
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 27 Mar 2023 10:01:55 GMT
access-control-allow-origin: https://devid.info
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Accept-Encoding,Origin,Accept-Language,X-CSRF-Token,x-unruly-override
access-control-max-age: 1728000
content-type: text/plain charset=UTF-8
content-length: 0
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b82185d03697f5e199269dcb8e02d904
9f693bd2d0763dcd36d0f02ea828b8fd659898f0
27d0f2641551e3b0c91cd83eaf4e35ca4ea36bf665c21b3da002a1e8026c50fe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3259
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:55 GMT
Last-Modified: Mon, 27 Mar 2023 09:07:36 GMT
Server: ECAcc (ska/F7A3)
X-Cache: HIT
Content-Length: 471
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:54 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=RUM3F180M0RITmhlJTJCZkMwOUJGQlhaMUN2c3lZeGVUZkRIWVQ1JTJGbiUyQndvJTJGV01wdE5OYzF3aXRkd2RWRUYxVzB6SDN3a1g; expires=Sat, 20 Apr 2024 10:01:55 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://devid.info
server-processing-duration-in-ticks: 320850
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
id5-sync.com/g/v2/579.json
200 216 B URL HTTP/1.1 id5-sync.com/g/v2/579.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 4f55a80194f774c532e8708cbbb5de17
0fac59df8c12da6c16f09c2dbfefb3744610c283
353b32c5f41d5cd87f654da96193a17059c42c43df929c6133ac155013499bc3
POST /g/v2/579.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 340
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://devid.info
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Mon, 27 Mar 2023 10:01:54 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
idx.liadm.com/idex/prebid/any?resolve=nonId
200 OK 50 B URL HTTP/2 idx.liadm.com/idex/prebid/any?resolve=nonId
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f742978f136c8cbde5bc6fc5747c23bb
9781522cd2b398452a7aa3d6a17db0bb4dc327cf
1c26346d13f42cc8a43b41fd2ec0e11b992b3dd570f9284ff05fbbdb5f99de0b
GET /idex/prebid/any?resolve=nonId HTTP/1.1
Host: idx.liadm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:55 GMT
content-type: application/json
content-length: 50
trace-id: d43dec8b34f21aea
vary: Origin
expires: Tue, 28 Mar 2023 10:01:55 GMT
set-cookie: lidid=b0a31a7c-1f1d-4fb6-adf3-760e85b21e4d; Max-Age=63072000; Expires=Wed, 26 Mar 2025 10:01:55 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure
request-time: 2
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://devid.info
access-control-allow-credentials: true
X-Firefox-Spdy: h2
prod.us-east-1.cxm-bcn.publisher-services.amazon.dev/v1/recordVendorsLoaded
200 OK 0 B URL HTTP/2 prod.us-east-1.cxm-bcn.publisher-services.amazon.dev/v1/recordVendorsLoaded
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/recordVendorsLoaded HTTP/1.1
Host: prod.us-east-1.cxm-bcn.publisher-services.amazon.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 447
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:55 GMT
content-length: 0
set-cookie: AWSALB=qPDDa3+oenioYzdE85kurV02PnoakbQLK40APbha2y488m3vr0432noJmG4E+WbFsI1hniqqofi07JEYFqRqzT5BiWeqY/fiN+zA4dzQbkLhYxiSVImjvFpNV3r5; Expires=Mon, 03 Apr 2023 10:01:55 GMT; Path=/
AWSALBCORS=qPDDa3+oenioYzdE85kurV02PnoakbQLK40APbha2y488m3vr0432noJmG4E+WbFsI1hniqqofi07JEYFqRqzT5BiWeqY/fiN+zA4dzQbkLhYxiSVImjvFpNV3r5; Expires=Mon, 03 Apr 2023 10:01:55 GMT; Path=/; SameSite=None; Secure
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: *
X-Firefox-Spdy: h2
id5-sync.com/g/v2/1299.json
200 216 B URL HTTP/1.1 id5-sync.com/g/v2/1299.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 95eb9c2dab8d7a441d9b3c6cc06e279b
898428e5d7e9e22f6ce6252e5632e60390ab787e
36037473cce4632fb703fe1f2387c9fde96e05383dc5e4008f2c8f686ea1bced
POST /g/v2/1299.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 417
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: https://devid.info
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Mon, 27 Mar 2023 10:01:54 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 39df75474d1984e41a4417313d866284
750f7332130526dd381a4590224a0c2d98b22af4
eae5bca0ec792b76ccc026ba8eec1c0852c5405552304eff9e749083650535cd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
targeting.unrulymedia.com/unruly_prebid
204 No Content 0 B URL HTTP/2 targeting.unrulymedia.com/unruly_prebid
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /unruly_prebid HTTP/1.1
Host: targeting.unrulymedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 8276
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 27 Mar 2023 10:01:55 GMT
access-control-allow-origin: https://devid.info
access-control-allow-credentials: true
pragma: no-cache
cache-control: private, max-age=0, no-cache, no-store
X-Firefox-Spdy: h2
partner.googleadservices.com/gampad/cookie.js?domain=devid.info&callback=_gfp_s_&client=ca-pub-3730271461974795
200 OK 251 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=devid.info&callback=_gfp_s_&client=ca-pub-3730271461974795
IP
File type ASCII text, with very long lines (387), with no line terminators
Hash e2c4c50ff8e3b4bbf700facad691d1cb
b6f9430076554f6444ae035b443f31a0647647d1
a9944a9a3ed7a1c3c26374589251220a1228af64f0d91e7c0ef3ed5c555c745c
GET /gampad/cookie.js?domain=devid.info&callback=_gfp_s_&client=ca-pub-3730271461974795 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Mon, 27 Mar 2023 10:01:55 GMT
server: cafe
cache-control: private
content-length: 251
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ac6e70d81e9b470c59e33ff13df40b54
93b835b37026b4f2b256b853fd092bf9b60008b5
45b293722b5bf4ebdff0a321bf55ec685e85ec9b78a66dd658df8091698af271
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5810
Cache-Control: max-age=143268
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:55 GMT
Etag: "6420df85-1d7"
Expires: Wed, 29 Mar 2023 01:49:43 GMT
Last-Modified: Mon, 27 Mar 2023 00:12:53 GMT
Server: ECAcc (ska/F757)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 39df75474d1984e41a4417313d866284
750f7332130526dd381a4590224a0c2d98b22af4
eae5bca0ec792b76ccc026ba8eec1c0852c5405552304eff9e749083650535cd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 30c4a2d9b8af588bc31eaad26ec79cc8
dfeb64784d37544148f92dcd52a4033948215834
ad0b44a874fea60419f224b0a1cf91188f312b6738577d33ef1f9b0e523ec316
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 30c4a2d9b8af588bc31eaad26ec79cc8
dfeb64784d37544148f92dcd52a4033948215834
ad0b44a874fea60419f224b0a1cf91188f312b6738577d33ef1f9b0e523ec316
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 30c4a2d9b8af588bc31eaad26ec79cc8
dfeb64784d37544148f92dcd52a4033948215834
ad0b44a874fea60419f224b0a1cf91188f312b6738577d33ef1f9b0e523ec316
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 30c4a2d9b8af588bc31eaad26ec79cc8
dfeb64784d37544148f92dcd52a4033948215834
ad0b44a874fea60419f224b0a1cf91188f312b6738577d33ef1f9b0e523ec316
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 30c4a2d9b8af588bc31eaad26ec79cc8
dfeb64784d37544148f92dcd52a4033948215834
ad0b44a874fea60419f224b0a1cf91188f312b6738577d33ef1f9b0e523ec316
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.ampproject.org/rtv/012302271541000/amp4ads-v0.mjs
200 OK 62 kB URL HTTP/2 cdn.ampproject.org/rtv/012302271541000/amp4ads-v0.mjs
IP
File type Unicode text, UTF-8 text, with very long lines (65008)
Hash 1339ec70ef22f9a9bbc60211432c7b8d
15965f972a1a3c3a62942d5cf53bf220f325cc01
7125067e8ee20da59444918dc7c190803551bb7aa627d49dcc63ae82996aba30
GET /rtv/012302271541000/amp4ads-v0.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 61845
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 25 Mar 2023 20:14:56 GMT
expires: Sun, 24 Mar 2024 20:14:56 GMT
cache-control: public, max-age=31536000
age: 136020
etag: "4fba9ccee66ca96a"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012302271541000/v0/amp-ad-exit-0.1.mjs
200 OK 5.2 kB URL HTTP/2 cdn.ampproject.org/rtv/012302271541000/v0/amp-ad-exit-0.1.mjs
IP
File type ASCII text, with very long lines (14764)
Hash b768be4ec895091a432dcd125d02d18a
403f5cacc316fa63e34b9c966fb1f407289960f7
a3d9373ac3cf42c49d24ab565dc6725919c09819f82485c2216e0998562b77a6
GET /rtv/012302271541000/v0/amp-ad-exit-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://devid.info/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 5236
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 20 Mar 2023 14:23:00 GMT
expires: Tue, 19 Mar 2024 14:23:00 GMT
cache-control: public, max-age=31536000
etag: "cedf9691907d886d"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 589136
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012302271541000/v0/amp-fit-text-0.1.mjs
200 OK 1.9 kB URL HTTP/2 cdn.ampproject.org/rtv/012302271541000/v0/amp-fit-text-0.1.mjs
IP
File type ASCII text, with very long lines (5021)
Hash 29310274e55382559cb128e7210c3290
c4ee1bfdccf9bcdb6c3f3522021c698233ed11f5
f0ec8e4452c0078c6f320b8f9117ebae510dd5732e1ab6abb8cf2d71ec52cdab
GET /rtv/012302271541000/v0/amp-fit-text-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://devid.info/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 1898
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 25 Mar 2023 11:58:24 GMT
expires: Sun, 24 Mar 2024 11:58:24 GMT
cache-control: public, max-age=31536000
etag: "aaf5c93962f41d5e"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 165812
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.ampproject.org/rtv/012302271541000/v0/amp-analytics-0.1.mjs
200 OK 29 kB URL HTTP/2 cdn.ampproject.org/rtv/012302271541000/v0/amp-analytics-0.1.mjs
IP
File type ASCII text, with very long lines (65534)
Hash 97148bebedae50d7264d4d5405be0a3b
db63df3856d8695f61b0c171b88d6ebc88620e36
0c4b6a78c0561c36ed709f09039426304fcbe06e0f58e4e21209c59c401cba73
GET /rtv/012302271541000/v0/amp-analytics-0.1.mjs HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://devid.info/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 28954
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 20 Mar 2023 13:46:30 GMT
expires: Tue, 19 Mar 2024 13:46:30 GMT
cache-control: public, max-age=31536000
etag: "eb54a928dd76f593"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 591326
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fdevid.info%2F&domain=devid.info&cw=1&lsw=1
200 OK 401 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fdevid.info%2F&domain=devid.info&cw=1&lsw=1
IP
File type JSON data\012- , ASCII text, with very long lines (486), with no line terminators
Hash 8cf93220939b6f157bd0f7ec321d9630
7b536cf1960bc7ff692d543d19b33cb2c7b99354
21b6d517c7141632f316ec436699b2957abfb6acfed2927c179675e1d5e9041c
GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fdevid.info%2F&domain=devid.info&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://devid.info
server-processing-duration-in-ticks: 1024925
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 30c4a2d9b8af588bc31eaad26ec79cc8
dfeb64784d37544148f92dcd52a4033948215834
ad0b44a874fea60419f224b0a1cf91188f312b6738577d33ef1f9b0e523ec316
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0a0e392786cef232d21fdb7ab3c1f7fe
cd20f03c68b594ef3eaabf9d7614a81daa190a52
048d414323f5c7fac08217363f19875409b4530b3203cec18fe708f61a04bc2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0a0e392786cef232d21fdb7ab3c1f7fe
cd20f03c68b594ef3eaabf9d7614a81daa190a52
048d414323f5c7fac08217363f19875409b4530b3203cec18fe708f61a04bc2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/pagead/js/r20230322/r20110914/client/qs_click_protection_fy2021.js
200 OK 8.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20230322/r20110914/client/qs_click_protection_fy2021.js
IP
File type ASCII text, with very long lines (2465)
Hash 9da78d3accd905d5cc426fad37ef9ce9
c1c5ebc107844e165679f2b069763d10cf8d226d
79578369b938e27d7a0e3b6d02e048ef340d848e12e7b2465acb1e52dc24eeaa
GET /pagead/js/r20230322/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d78366f658f7ddb7c3a93e693ce6121c.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 8627
x-xss-protection: 0
date: Sun, 26 Mar 2023 16:28:34 GMT
expires: Sun, 09 Apr 2023 16:28:34 GMT
cache-control: public, max-age=1209600
age: 63202
etag: 8620137988422272387
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tpc.googlesyndication.com/daca_images/simgad/17933547781048663124
200 OK 109 kB URL HTTP/2 tpc.googlesyndication.com/daca_images/simgad/17933547781048663124
IP
File type PNG image data, 300 x 600, 8-bit colormap, non-interlaced\012- data
Size 109 kB (108707 bytes)
Hash c391175f0831c82400a7a3ca023c61a7
e6afe6128dc146034b6f2bd33ff4a50e77a3f60f
51037be524bb817180ab4a62d0fce8222d0ff75934c7088dabbbd523cdd9df79
GET /daca_images/simgad/17933547781048663124 HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://devid.info/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="content-ads-owners"
report-to: {"group":"content-ads-owners","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/content-ads-owners"}]}
timing-allow-origin: *
content-length: 108707
x-content-type-options: nosniff
x-dns-prefetch-control: off
server: sffe
x-xss-protection: 0
date: Mon, 20 Mar 2023 14:18:38 GMT
expires: Tue, 19 Mar 2024 14:18:38 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 24 Jan 2023 10:56:17 GMT
content-type: image/png
age: 589398
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.criteo.net/js/ld/publishertag.prebid.135.js
200 OK 60 kB URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.135.js
IP
Hash 96523274f6c516715fe01447d4d08436
f7a5067697d10740df06224ef31881c67c4e5992
2f8ae149b1a91f088c1e0177ebaff7c513860e9c07926d09d3bebc76f0e85e91
GET /js/ld/publishertag.prebid.135.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 27 Mar 2023 10:01:55 GMT
content-type: text/javascript
last-modified: Fri, 24 Feb 2023 07:57:32 GMT
etag: W/"63f86dec-16386"
expires: Tue, 28 Mar 2023 10:01:55 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
tpc.googlesyndication.com/daca_images/simgad/3108833065343310199
200 OK 89 kB URL HTTP/2 tpc.googlesyndication.com/daca_images/simgad/3108833065343310199
IP
File type PNG image data, 970 x 250, 8-bit colormap, non-interlaced\012- data
Hash 04e463fedfbc66be747d18a609246332
88793d697dbf574c18e02ff2fabe24ed51010bef
c1887505054d061cbbc089c1aec223877453b99454976424888afc6f52c57d8d
GET /daca_images/simgad/3108833065343310199 HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://devid.info/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="content-ads-owners"
report-to: {"group":"content-ads-owners","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/content-ads-owners"}]}
timing-allow-origin: *
content-length: 89108
x-content-type-options: nosniff
x-dns-prefetch-control: off
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 09:02:30 GMT
expires: Sat, 23 Mar 2024 09:02:30 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Mar 2023 11:13:01 GMT
content-type: image/png
age: 262766
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/images/abg/ru.png
200 OK 3.0 kB URL HTTP/2 tpc.googlesyndication.com/pagead/images/abg/ru.png
IP
File type PNG image data, 218 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash d0d953c2b2b628abab8920ab9a7496a4
dabe7c35507dfc23f7a260eedc1c83bdaddddcef
fed2d61088cba54be39b2069add7103160e31f07c950c0e2e7706d6d6dc9ebf6
GET /pagead/images/abg/ru.png HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://devid.info/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
server: cafe
content-length: 3041
x-xss-protection: 0
date: Sun, 26 Mar 2023 18:05:12 GMT
expires: Mon, 27 Mar 2023 18:05:12 GMT
cache-control: public, max-age=86400
age: 57404
etag: 6726277462267614359
content-type: image/png
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash aacadb94b44e557195c202f9eac3d422
ae45e0a668927354b659a0050ec4f37421acfc12
e3efec2ec99be9c753808134094e95ea88d59e2898a180327a5a0818050a3859
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/drt/ui
302 Found 0 B URL HTTP/2 www.google.com/pagead/drt/ui
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/drt/ui HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA
cache-control: private
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Mon, 27 Mar 2023 10:01:57 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
router.infolinks.com/usync/lcmanage?pid=3132145&wsid=0&pdom=devid.info&purl=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310
200 OK 0 B URL HTTP/2 router.infolinks.com/usync/lcmanage?pid=3132145&wsid=0&pdom=devid.info&purl=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/lcmanage?pid=3132145&wsid=0&pdom=devid.info&purl=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:57 GMT
content-length: 0
cache-control: no-store
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7ae6cb830911b50c-OSL
X-Firefox-Spdy: h2
router.infolinks.com/gsd?evt=afterGSD&pid=3132145&pdom=devid.info&purl=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&jsv=1853.004-3.025&_cb=16799113347060
200 OK 52 kB URL HTTP/2 router.infolinks.com/gsd?evt=afterGSD&pid=3132145&pdom=devid.info&purl=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&jsv=1853.004-3.025&_cb=16799113347060
IP
Hash 86175b4a08a5e8452126a4fd16aed93e
d0b1b283124e599c681a435099e4eb5c65fdeeaa
19707df2ac3fa82b03a8a8b17bed3482e822f7aee2ace578a92d255913e8293a
GET /gsd?evt=afterGSD&pid=3132145&pdom=devid.info&purl=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310&jsv=1853.004-3.025&_cb=16799113347060 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:57 GMT
content-type: text/javascript;charset=UTF-8
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: max-age=0
p3p: CP="NON DSP NID OUR COR"
set-cookie: cuid=11e62ad1-932e-4c57-b620-67de1d6e02fc; Domain=infolinks.com; Expires=Wed, 26-Mar-2025 10:01:57 GMT; Path=/; SameSite=None; Secure
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7ae6cb82f905b50c-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
id.hadron.ad.gt/api/v1/pbhid?partner_id=405&_it=prebid
200 OK 611 B URL HTTP/2 id.hadron.ad.gt/api/v1/pbhid?partner_id=405&_it=prebid
IP
Hash 684bde44fdf97941b3a49a43ac0956a4
277ca1d05c1fefe2910d64c1fdb239f0933b15f9
22465048a00691b5a5b859540be857e3a1d5fb30d35a64a564f1a3ff780580ba
GET /api/v1/pbhid?partner_id=405&_it=prebid HTTP/1.1
Host: id.hadron.ad.gt
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:55 GMT
content-type: application/json
access-control-allow-origin: *
allow: POST, OPTIONS, GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ae6cb791fd0b500-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5f1d0e453361aee22937357ef5f27069
3787ceeca7c8071056bb885b557009ed2dbe86b4
58ccc21175715d36442ebb26a2112f4dc7bbc4188bcf88fabe2dbb29cefb9a4f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58CCC21175715D36442EBB26A2112F4DC7BBC4188BCF88FABE2DBB29CEFB9A4F"
Last-Modified: Sat, 25 Mar 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16959
Expires: Mon, 27 Mar 2023 14:44:36 GMT
Date: Mon, 27 Mar 2023 10:01:57 GMT
Connection: keep-alive
onetag-sys.com/usync/?pubId=598ce3ddaee8c90
204 No Content 0 B URL HTTP/2 onetag-sys.com/usync/?pubId=598ce3ddaee8c90
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?pubId=598ce3ddaee8c90 HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2
ib.adnxs.com/getuid?https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fapn-usync%3Fuser_id%3D%24UID
307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fapn-usync%3Fuser_id%3D%24UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fapn-usync%3Fuser_id%3D%24UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Mon, 27 Mar 2023 10:01:57 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fapn-usync%253Fuser_id%253D%2524UID
AN-X-Request-Uuid: 23ea563d-eeb7-46d3-bac8-906400b44dfe
Set-Cookie: uuid2=2552438164949095892; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 25-Jun-2023 10:01:57 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
ad.360yield.com/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531
302 Found 0 B URL HTTP/2 ad.360yield.com/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531 HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Mon, 27 Mar 2023 10:01:57 GMT
content-type: text/plain
content-length: 0
location: https://ad.360yield.com/ul_cb/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531
set-cookie: tuuid=9073ad85-50c0-4f64-952f-3cca6123895a; Expires=Sun, 25 Jun 2023 10:01:57 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
tuuid_lu=1679911317; Expires=Sun, 25 Jun 2023 10:01:57 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
hal9000.redintelligence.net/zone/hs81rewhznnj?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCnaCnk2khZIG5OIPgZfTCh_AIybminGn0wc3O1Q_wLhABIK2bmFhgw4SAgJgYyAEJqQJX7qvQOQ2yPqgDAaoE1QFP0KT6RMHdbv6YNexlkBxaEHwOaqzcHTqVlYBVr-mZoyPNJDU1pogsvpe0DAmZ8OuPYS2MicL9X20eSWKhl_lyvM5MSUJZmEwLPJKPW2EiPOaYRm32w_JtoRnoOdiuAMZ2ZJ3l9pwJefug7Bk2Ydbj5PfQSPxQVrV5t0kNGE2E0rywxCeh4XWzcS8rXRXgPWijh6eWlJJaH8NEcgRhGWpWcTjrufXbgkZp-ZvQraF8Y02J8ZhI1L_Phs6LxFo_7k0N51LYs7S4bLPAyI8sqF9_Nq6qzpHABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDUE5ymYe-OdRVXghvfQBPf9o5V8YvldloQKyZjrX3V3LGwOxScxza5zk_OjwD4fbaJxJJyqAAD5WfITL7j800sSXA_k7MmsB23YhgB%26sig%3DAOD64_2yCe-b08zn5s_B0fbNdrZnEDLmZw%26client%3Dca-pub-6044557359746051%26dbm_c%3DAKAmf-C0K0D2tVY7b2P5Nm4uMUtFPAfPm3gAR_a4dIefcee2nWPQGvYLl_GPRTAYiCmU0I7Sq-MHPb2BY111IyVO-g8_xqSc7SuUnwr_YzK8iWPlMlOf9VikQ63HxOfY3FMtuzoqzxz0GeSmWUOUvVkrmuKylShWnjEiEl287ukso6XO-brLbsQ%26cry%3D1%26dbm_d%3DAKAmf-BZOM1qRHaHCSw6T46Ek6XbBwGZSH2HgJ7KBkU63A5cW8o3jeAK5qtJzVc3KcqSNaz0GFpTzS8_w1sny95WmeBGfxgLz8rYRUzp-qGI2dlzlYPB2G4wThrdA8ldKFkRIyOFhCS2ESkoKxiqv9SyyBEFFJvNVU_wSHGfziLFf637MVEOxEpU5s1_X8_o5PtzqxwXm9yTZm6TKfx4U9qMXeOHb3qsreN5EGd8ZhBBJUwv_fdz6ZfgO5z4nYXf6WP4bGz7giGXRxfkQrsuTbQPAusWZaQ7k8CinQNXWhIoOmpm6nrr84g_JQ2Qh3obnCxQDOyO3P21U-onmh1PuTwovbWMIutyufZFto_NlA1suIyzj3zI5fv2Ip3E94-hGkfuosbeMdlGKglNGSyZfifbD3yGxVZ-5nLCveDEJj4paFdDj0GnVLDCydz7O_vvakGDzkhfL69WKfAs8uJeFpCJOSNwFVkR1AbmnfV3XYLm3dlZWTM4m5Chs4Iv6hF1vwjNRo1TgAAixZk8rDPVw_hqk2amjodgkuM7ujmk9QVy7-z7PTp155g%26adurl%3D
200 OK 4.1 kB URL HTTP/1.1 hal9000.redintelligence.net/zone/hs81rewhznnj?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCnaCnk2khZIG5OIPgZfTCh_AIybminGn0wc3O1Q_wLhABIK2bmFhgw4SAgJgYyAEJqQJX7qvQOQ2yPqgDAaoE1QFP0KT6RMHdbv6YNexlkBxaEHwOaqzcHTqVlYBVr-mZoyPNJDU1pogsvpe0DAmZ8OuPYS2MicL9X20eSWKhl_lyvM5MSUJZmEwLPJKPW2EiPOaYRm32w_JtoRnoOdiuAMZ2ZJ3l9pwJefug7Bk2Ydbj5PfQSPxQVrV5t0kNGE2E0rywxCeh4XWzcS8rXRXgPWijh6eWlJJaH8NEcgRhGWpWcTjrufXbgkZp-ZvQraF8Y02J8ZhI1L_Phs6LxFo_7k0N51LYs7S4bLPAyI8sqF9_Nq6qzpHABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDUE5ymYe-OdRVXghvfQBPf9o5V8YvldloQKyZjrX3V3LGwOxScxza5zk_OjwD4fbaJxJJyqAAD5WfITL7j800sSXA_k7MmsB23YhgB%26sig%3DAOD64_2yCe-b08zn5s_B0fbNdrZnEDLmZw%26client%3Dca-pub-6044557359746051%26dbm_c%3DAKAmf-C0K0D2tVY7b2P5Nm4uMUtFPAfPm3gAR_a4dIefcee2nWPQGvYLl_GPRTAYiCmU0I7Sq-MHPb2BY111IyVO-g8_xqSc7SuUnwr_YzK8iWPlMlOf9VikQ63HxOfY3FMtuzoqzxz0GeSmWUOUvVkrmuKylShWnjEiEl287ukso6XO-brLbsQ%26cry%3D1%26dbm_d%3DAKAmf-BZOM1qRHaHCSw6T46Ek6XbBwGZSH2HgJ7KBkU63A5cW8o3jeAK5qtJzVc3KcqSNaz0GFpTzS8_w1sny95WmeBGfxgLz8rYRUzp-qGI2dlzlYPB2G4wThrdA8ldKFkRIyOFhCS2ESkoKxiqv9SyyBEFFJvNVU_wSHGfziLFf637MVEOxEpU5s1_X8_o5PtzqxwXm9yTZm6TKfx4U9qMXeOHb3qsreN5EGd8ZhBBJUwv_fdz6ZfgO5z4nYXf6WP4bGz7giGXRxfkQrsuTbQPAusWZaQ7k8CinQNXWhIoOmpm6nrr84g_JQ2Qh3obnCxQDOyO3P21U-onmh1PuTwovbWMIutyufZFto_NlA1suIyzj3zI5fv2Ip3E94-hGkfuosbeMdlGKglNGSyZfifbD3yGxVZ-5nLCveDEJj4paFdDj0GnVLDCydz7O_vvakGDzkhfL69WKfAs8uJeFpCJOSNwFVkR1AbmnfV3XYLm3dlZWTM4m5Chs4Iv6hF1vwjNRo1TgAAixZk8rDPVw_hqk2amjodgkuM7ujmk9QVy7-z7PTp155g%26adurl%3D
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1643), with CRLF line terminators
Hash 114dd38a44dfd0d5b63f2ba24cbbbb30
c79926313c251a539b6d7523eb27361ca36fddf7
741175c342db305d1c7b49e5fbd4202f7779c3ccae79a41a10089f609ff08aab
GET /zone/hs81rewhznnj?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCnaCnk2khZIG5OIPgZfTCh_AIybminGn0wc3O1Q_wLhABIK2bmFhgw4SAgJgYyAEJqQJX7qvQOQ2yPqgDAaoE1QFP0KT6RMHdbv6YNexlkBxaEHwOaqzcHTqVlYBVr-mZoyPNJDU1pogsvpe0DAmZ8OuPYS2MicL9X20eSWKhl_lyvM5MSUJZmEwLPJKPW2EiPOaYRm32w_JtoRnoOdiuAMZ2ZJ3l9pwJefug7Bk2Ydbj5PfQSPxQVrV5t0kNGE2E0rywxCeh4XWzcS8rXRXgPWijh6eWlJJaH8NEcgRhGWpWcTjrufXbgkZp-ZvQraF8Y02J8ZhI1L_Phs6LxFo_7k0N51LYs7S4bLPAyI8sqF9_Nq6qzpHABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDUE5ymYe-OdRVXghvfQBPf9o5V8YvldloQKyZjrX3V3LGwOxScxza5zk_OjwD4fbaJxJJyqAAD5WfITL7j800sSXA_k7MmsB23YhgB%26sig%3DAOD64_2yCe-b08zn5s_B0fbNdrZnEDLmZw%26client%3Dca-pub-6044557359746051%26dbm_c%3DAKAmf-C0K0D2tVY7b2P5Nm4uMUtFPAfPm3gAR_a4dIefcee2nWPQGvYLl_GPRTAYiCmU0I7Sq-MHPb2BY111IyVO-g8_xqSc7SuUnwr_YzK8iWPlMlOf9VikQ63HxOfY3FMtuzoqzxz0GeSmWUOUvVkrmuKylShWnjEiEl287ukso6XO-brLbsQ%26cry%3D1%26dbm_d%3DAKAmf-BZOM1qRHaHCSw6T46Ek6XbBwGZSH2HgJ7KBkU63A5cW8o3jeAK5qtJzVc3KcqSNaz0GFpTzS8_w1sny95WmeBGfxgLz8rYRUzp-qGI2dlzlYPB2G4wThrdA8ldKFkRIyOFhCS2ESkoKxiqv9SyyBEFFJvNVU_wSHGfziLFf637MVEOxEpU5s1_X8_o5PtzqxwXm9yTZm6TKfx4U9qMXeOHb3qsreN5EGd8ZhBBJUwv_fdz6ZfgO5z4nYXf6WP4bGz7giGXRxfkQrsuTbQPAusWZaQ7k8CinQNXWhIoOmpm6nrr84g_JQ2Qh3obnCxQDOyO3P21U-onmh1PuTwovbWMIutyufZFto_NlA1suIyzj3zI5fv2Ip3E94-hGkfuosbeMdlGKglNGSyZfifbD3yGxVZ-5nLCveDEJj4paFdDj0GnVLDCydz7O_vvakGDzkhfL69WKfAs8uJeFpCJOSNwFVkR1AbmnfV3XYLm3dlZWTM4m5Chs4Iv6hF1vwjNRo1TgAAixZk8rDPVw_hqk2amjodgkuM7ujmk9QVy7-z7PTp155g%26adurl%3D HTTP/1.1
Host: hal9000.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d78366f658f7ddb7c3a93e693ce6121c.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:57 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4067
Connection: close
Content-Type: text/html; charset=UTF-8
hal9000.redintelligence.net/zone/hs81rewhznnj?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCciF4k2khZIK5OIPgZfTCh_AIybminGn0wc3O1Q_wLhABIK2bmFhgw4SAgJgYyAEJqQJX7qvQOQ2yPqgDAaoE1QFP0PzMeJA02TlvdkGr6C8tMd_LUZSXHLYDl_GXEVOH5Gr94POzjm0uQbeBrPDIOH24F1JqkoRc7w4uS23hG47DMKDyEbCzHuUPB0Mgeoj8u0M5KAES6Rd3oSWu_x1DhMAhyTyPloPkiOBIVJtoUycPwC145Bs3Nk5N4WaaGAh-YZF7l2KxzU4EtrsLCCXW-QRoALuLkn9ZIgDiFugiFoXyXbdQjbmeI-pZVoraiiSsQlgaK41ANmLzcpqLqrWifYZrovv0GK_qw8PD9kwT_HJa9nD-o9zABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDUE5ymYe-OdRVXghvfQBPf9o5V8YvldloQKyZjrX3V3LGwOxScxza5zk_OjwD4fbaJxJJyqAAD5WfITL7j800sSXA_k7MmsB23YhgB%26sig%3DAOD64_1IeijAYpAAeQaaWskaB6etUGTVvw%26client%3Dca-pub-6044557359746051%26dbm_c%3DAKAmf-DqYTqApAwM5CxBBBzGyqyX4WgwG6xFcQbBYi-ldiWXRQs4u6_NwJ1u1NhH7foLfdAHk1HSsJy10FwWCbIkq931PsthZVqchjOwRyqeKEdwKX0cKcLoPs4LAtSIaRZtphO1sGBYhXyhe2qAoyPXOlrbDVj3Wcq3_YNTG5XNtSMot4U2y3k%26cry%3D1%26dbm_d%3DAKAmf-CYLro9Nin6vyPvTfRhUT9-2Xlrar0PGZEOCRGaMyM5sgNWY-2lFzXbhMrrVF8RboByB5CZC1hIo8bJCpzdNs6aYrUg3ZvBv-bkGVp0cjm3ioKC28HSEM0NFoCa6hrjAug1XoVMgyyBXoSY2r4_bzHlAu0wQbRIrPcUnYN9xu0OZ40qbg15e85o-PRWwv4dqS5DouD33uEJBsehDCe4wKgrUNyRuACJ7UPXG68_VaUGcgHq61end9bYb1KNVuxC5IY0A7O9RWI75wgPHXSJQPOC7T6PyO9_R-UURNOg2_UJt3t8b-A84qc-RDj9drhu5IUsM4hGJbn8bVnALQ1Ngw7Oe-LaT1VSRQmUG2_r74cPGrs73-sA8hTPbzIv5OpkGrR9O6Lp1rFn96lBEfBsLhJxBnIObKe0f57cx4gvKD06372-X4pVGkW8Z5hy9PZhIAN45Zea1-8sN7xrQ1FAw6dE93hHz1O3ZQWz84-GJbuxQ9kwjwjOiR0i6I2hULbayzol8fmdEMc3Xj21vmZtun1gkEs8dgw5S4qYaok681z6KnFAmR8%26adurl%3D
200 OK 4.1 kB URL HTTP/1.1 hal9000.redintelligence.net/zone/hs81rewhznnj?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCciF4k2khZIK5OIPgZfTCh_AIybminGn0wc3O1Q_wLhABIK2bmFhgw4SAgJgYyAEJqQJX7qvQOQ2yPqgDAaoE1QFP0PzMeJA02TlvdkGr6C8tMd_LUZSXHLYDl_GXEVOH5Gr94POzjm0uQbeBrPDIOH24F1JqkoRc7w4uS23hG47DMKDyEbCzHuUPB0Mgeoj8u0M5KAES6Rd3oSWu_x1DhMAhyTyPloPkiOBIVJtoUycPwC145Bs3Nk5N4WaaGAh-YZF7l2KxzU4EtrsLCCXW-QRoALuLkn9ZIgDiFugiFoXyXbdQjbmeI-pZVoraiiSsQlgaK41ANmLzcpqLqrWifYZrovv0GK_qw8PD9kwT_HJa9nD-o9zABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDUE5ymYe-OdRVXghvfQBPf9o5V8YvldloQKyZjrX3V3LGwOxScxza5zk_OjwD4fbaJxJJyqAAD5WfITL7j800sSXA_k7MmsB23YhgB%26sig%3DAOD64_1IeijAYpAAeQaaWskaB6etUGTVvw%26client%3Dca-pub-6044557359746051%26dbm_c%3DAKAmf-DqYTqApAwM5CxBBBzGyqyX4WgwG6xFcQbBYi-ldiWXRQs4u6_NwJ1u1NhH7foLfdAHk1HSsJy10FwWCbIkq931PsthZVqchjOwRyqeKEdwKX0cKcLoPs4LAtSIaRZtphO1sGBYhXyhe2qAoyPXOlrbDVj3Wcq3_YNTG5XNtSMot4U2y3k%26cry%3D1%26dbm_d%3DAKAmf-CYLro9Nin6vyPvTfRhUT9-2Xlrar0PGZEOCRGaMyM5sgNWY-2lFzXbhMrrVF8RboByB5CZC1hIo8bJCpzdNs6aYrUg3ZvBv-bkGVp0cjm3ioKC28HSEM0NFoCa6hrjAug1XoVMgyyBXoSY2r4_bzHlAu0wQbRIrPcUnYN9xu0OZ40qbg15e85o-PRWwv4dqS5DouD33uEJBsehDCe4wKgrUNyRuACJ7UPXG68_VaUGcgHq61end9bYb1KNVuxC5IY0A7O9RWI75wgPHXSJQPOC7T6PyO9_R-UURNOg2_UJt3t8b-A84qc-RDj9drhu5IUsM4hGJbn8bVnALQ1Ngw7Oe-LaT1VSRQmUG2_r74cPGrs73-sA8hTPbzIv5OpkGrR9O6Lp1rFn96lBEfBsLhJxBnIObKe0f57cx4gvKD06372-X4pVGkW8Z5hy9PZhIAN45Zea1-8sN7xrQ1FAw6dE93hHz1O3ZQWz84-GJbuxQ9kwjwjOiR0i6I2hULbayzol8fmdEMc3Xj21vmZtun1gkEs8dgw5S4qYaok681z6KnFAmR8%26adurl%3D
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1643), with CRLF line terminators
Hash 7770746d6d89420bd0d0f58790f88cc8
8d818303d1580d1b33a5d61ba079a4dee37e7aa7
a127f457cb2850f173a476fbaa6912603994777c99229e1d860c457fac98b46b
GET /zone/hs81rewhznnj?subid=&gdpr=-1&gdpr_consent=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCciF4k2khZIK5OIPgZfTCh_AIybminGn0wc3O1Q_wLhABIK2bmFhgw4SAgJgYyAEJqQJX7qvQOQ2yPqgDAaoE1QFP0PzMeJA02TlvdkGr6C8tMd_LUZSXHLYDl_GXEVOH5Gr94POzjm0uQbeBrPDIOH24F1JqkoRc7w4uS23hG47DMKDyEbCzHuUPB0Mgeoj8u0M5KAES6Rd3oSWu_x1DhMAhyTyPloPkiOBIVJtoUycPwC145Bs3Nk5N4WaaGAh-YZF7l2KxzU4EtrsLCCXW-QRoALuLkn9ZIgDiFugiFoXyXbdQjbmeI-pZVoraiiSsQlgaK41ANmLzcpqLqrWifYZrovv0GK_qw8PD9kwT_HJa9nD-o9zABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDUE5ymYe-OdRVXghvfQBPf9o5V8YvldloQKyZjrX3V3LGwOxScxza5zk_OjwD4fbaJxJJyqAAD5WfITL7j800sSXA_k7MmsB23YhgB%26sig%3DAOD64_1IeijAYpAAeQaaWskaB6etUGTVvw%26client%3Dca-pub-6044557359746051%26dbm_c%3DAKAmf-DqYTqApAwM5CxBBBzGyqyX4WgwG6xFcQbBYi-ldiWXRQs4u6_NwJ1u1NhH7foLfdAHk1HSsJy10FwWCbIkq931PsthZVqchjOwRyqeKEdwKX0cKcLoPs4LAtSIaRZtphO1sGBYhXyhe2qAoyPXOlrbDVj3Wcq3_YNTG5XNtSMot4U2y3k%26cry%3D1%26dbm_d%3DAKAmf-CYLro9Nin6vyPvTfRhUT9-2Xlrar0PGZEOCRGaMyM5sgNWY-2lFzXbhMrrVF8RboByB5CZC1hIo8bJCpzdNs6aYrUg3ZvBv-bkGVp0cjm3ioKC28HSEM0NFoCa6hrjAug1XoVMgyyBXoSY2r4_bzHlAu0wQbRIrPcUnYN9xu0OZ40qbg15e85o-PRWwv4dqS5DouD33uEJBsehDCe4wKgrUNyRuACJ7UPXG68_VaUGcgHq61end9bYb1KNVuxC5IY0A7O9RWI75wgPHXSJQPOC7T6PyO9_R-UURNOg2_UJt3t8b-A84qc-RDj9drhu5IUsM4hGJbn8bVnALQ1Ngw7Oe-LaT1VSRQmUG2_r74cPGrs73-sA8hTPbzIv5OpkGrR9O6Lp1rFn96lBEfBsLhJxBnIObKe0f57cx4gvKD06372-X4pVGkW8Z5hy9PZhIAN45Zea1-8sN7xrQ1FAw6dE93hHz1O3ZQWz84-GJbuxQ9kwjwjOiR0i6I2hULbayzol8fmdEMc3Xj21vmZtun1gkEs8dgw5S4qYaok681z6KnFAmR8%26adurl%3D HTTP/1.1
Host: hal9000.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d78366f658f7ddb7c3a93e693ce6121c.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:57 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4061
Connection: close
Content-Type: text/html; charset=UTF-8
cs.media.net/cksync?cs=41&ovsid=setstatuscode&type=inf&redirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fmnet-usync%3Fuid%3D%3Cvsid%3E
302 Moved Temporarily 154 B URL HTTP/1.1 cs.media.net/cksync?cs=41&ovsid=setstatuscode&type=inf&redirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fmnet-usync%3Fuid%3D%3Cvsid%3E
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 52558d05355ee6e9d14ff3cf8a5a3ef0
52cfd7dd3859dc0578849a7b1c91bb8f91ad84c2
bac5546ea0f819f461c9023592ec2398a45a6c3aab78e55fed8b7c908dce6060
GET /cksync?cs=41&ovsid=setstatuscode&type=inf&redirect=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fmnet-usync%3Fuid%3D%3Cvsid%3E HTTP/1.1
Host: cs.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: Apache
Content-Length: 154
Content-Type: text/html
Location: https://router.infolinks.com/dyn/mnet-usync?uid=0000EEA
Set-Cookie: data-inf=setstatuscode~~41;Expires=Sun, 25 Jun 2023 10:01:57 GMT;path=/;domain=.media.net;
p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA", CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
x-mnet-hl2: E
Expires: Mon, 27 Mar 2023 10:01:57 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 27 Mar 2023 10:01:57 GMT
Connection: keep-alive
router.infolinks.com/dyn/iq-usync
200 OK 0 B URL HTTP/2 router.infolinks.com/dyn/iq-usync
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dyn/iq-usync HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/usync/manage?pid=3132145&wsid=0&pdom=devid.info&purl=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:57 GMT
content-length: 0
cache-control: no-store
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7ae6cb84cb51b50c-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 96c593bbe092cd1ad76a6faa53e3b034
9c6a7c3393e6a45eb0273a21b8a9c4e9d4380ea7
6859fb06afb2a74ff2d16d1a05bb126d0aedf75367dd1c340d4df49f89287638
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5500
Cache-Control: max-age=95465
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:57 GMT
Etag: "64202602-1d7"
Expires: Tue, 28 Mar 2023 12:33:02 GMT
Last-Modified: Sun, 26 Mar 2023 11:01:22 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471
resources.infolinks.com/js/infolinks_main.js
200 OK 2.7 kB URL HTTP/2 resources.infolinks.com/js/infolinks_main.js
IP
Hash 409535bc44ce6a63bd1466105032635e
8ec77507413d287eff2b8baa43f2400f2149265c
1e37a3af1c28a729574fe644b0515b63e9072d4fc6e762d35e7df90715e9b8ca
GET /js/infolinks_main.js HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:56 GMT
content-type: application/javascript
last-modified: Mon, 20 Mar 2023 11:30:18 GMT
etag: W/"e3a-5f753406b2bbc"
cache-control: max-age=3600
expires: Mon, 27 Mar 2023 09:48:42 GMT
via: 1.1 google
cf-cache-status: HIT
age: 4394
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ae6cb803d87b50c-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ad.360yield.com/ul_cb/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531
200 OK 43 B URL HTTP/2 ad.360yield.com/ul_cb/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/server_match?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fimd-usync%3Fuser_id%3D%7BPUB_USER_ID%7D%26partner_id%3D1531 HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:57 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
pixel.advertising.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true
301 Moved Permanently 360 B URL HTTP/2 pixel.advertising.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ef184c6b065a63adf6c94f609c0a0c72
12e8af72d7af8f029d4300991e1eda7ec9f2545b
b01d8ed4f119579d92815a648e454327ae4af8a4592e98462fb72f414ddba9af
GET /ups/58237/sync?&gdpr=&gdpr_consent=&redir=true HTTP/1.1
Host: pixel.advertising.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Mon, 27 Mar 2023 10:01:57 GMT
server: ATS/9.1.10.25
cache-control: no-store
location: https://ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true
content-type: text/html
content-language: en
set-cookie: A3=d=AQABBJVpIWQCEFy3n3ULwNDc64AmTZUcG0sFEgEBAQG7ImQrZAAAAAAA_eMAAA&S=AQAAAoDp_ts1W491JwZbBV0nVdQ; Expires=Tue, 26 Mar 2024 16:01:57 GMT; Max-Age=31557600; Domain=.advertising.com; Path=/; SameSite=None; Secure; HttpOnly
content-length: 360
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash b5aa5bc24ae7a28b285f756ef8e08b79
8ea84a9b39c24e5ccd255aea15fc37e77bef70cc
1ede98d81fd27119dba1517e0aa2b788a7c626715e0961222bab423327972d57
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:57 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 25 Mar 2023 13:55:58 GMT
Expires: Sat, 01 Apr 2023 13:55:57 GMT
Etag: "8ea84a9b39c24e5ccd255aea15fc37e77bef70cc"
Cache-Control: max-age=445439,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ae6cb85dbe9fac0-OSL
cms.quantserve.com/pixel/p-u1vdacBMXAcfT.gif?idmatch=0
302 Found 0 B URL HTTP/2 cms.quantserve.com/pixel/p-u1vdacBMXAcfT.gif?idmatch=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/p-u1vdacBMXAcfT.gif?idmatch=0 HTTP/1.1
Host: cms.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 27 Mar 2023 10:01:57 GMT
content-length: 0
cache-control: private, no-cache, no-store, proxy-revalidate
expires: Fri, 04 Aug 1978 12:00:00 GMT
location: https://router.infolinks.com/dyn/qc-usync?&uid=AcXJuAHIwrwaxs2_U8jW6weUmrsakMy_UsXgC8Vq
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
pragma: no-cache
set-cookie: d=EB8BDQHOKM2aswA; expires=Sun, 25-Jun-2023 10:01:57 GMT; path=/; domain=.quantserve.com
mc=64216995-766d9-b0ea2-a76e4; expires=Fri, 26-Apr-2024 10:01:57 GMT; path=/; domain=.quantserve.com
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 80f932dd392e205b7866afd0bdd401fb
46220f070214375ccb62f583092f5883f4c983e9
8f3e7795203d128afe5478bd9b8e8d650fc6c681f57bd2c7aba10558f968a163
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 27 Mar 2023 10:01:57 GMT
Last-Modified: Mon, 27 Mar 2023 08:40:03 GMT
Server: ECAcc (bsa/EA9A)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: BQqthgBdCD-uOLPHC5kiMrpd7BdcczvVZG4-uGbmk2cjHGP9ZZ7mxA==
Age: 4914
image8.pubmatic.com/AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID
302 Found 272 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID
IP
File type HTML document, ASCII text
Hash ebb92a4e4bfa9f49081d6d5490b87169
e986871fb2a1067935b9f45ff4ba155383056b29
fd3de728a94f948ba814f33b0020466ae949a4c493784a6b7a5f23687385747d
GET /AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
location: /AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID&rdf=1
set-cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; secure;
date: Mon, 27 Mar 2023 10:01:57 GMT
content-length: 272
X-Firefox-Spdy: h2
image8.pubmatic.com/AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID
302 Found 267 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID
IP
File type HTML document, ASCII text
Hash 4c3b0ed5d0694dfc6293df9d26db3427
d24a807f496ede8c6860cdfaef65db160c5bd622
bd7d1d9ab7cd90754ced171b8a2a5f8585295a99cbdaeeb377019e772442efe4
GET /AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
location: /AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID&rdf=1
set-cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; secure;
date: Mon, 27 Mar 2023 10:01:57 GMT
content-length: 267
X-Firefox-Spdy: h2
cloudflare.com/cdn-cgi/trace
200 OK 2.9 kB URL HTTP/2 cloudflare.com/cdn-cgi/trace
IP
Hash 0703af618f9750534056148ed9a45d40
e306f9e84cfba7f291f27ad3beb6155384d1e35f
7cf3bf48cce070b19f15b6a32498d65a51c356182866ac6978d2712abc3225c6
GET /cdn-cgi/trace HTTP/1.1
Host: cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:52 GMT
content-type: text/plain
access-control-allow-origin: *
server: cloudflare
cf-ray: 7ae6cb677af81c16-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58422/occ
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58422/occ
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58422/occ HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 27 Mar 2023 10:01:57 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58422/occ?verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBJVpIWQCELDCOf635I-jLd87g7oYuTEFEgEBAQG7ImQrZAAAAAAA_eMAAA&S=AQAAAvvJNF-lLbIKt8Q2_ELji1k; Expires=Tue, 26 Mar 2024 16:01:57 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fapn-usync%253Fuser_id%253D%2524UID
302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fapn-usync%253Fuser_id%253D%2524UID
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fapn-usync%253Fuser_id%253D%2524UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Mon, 27 Mar 2023 10:01:57 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://router.infolinks.com/dyn/apn-usync?user_id=0
AN-X-Request-Uuid: f9f28614-a1d4-45f6-a105-9b92bedacfee
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 1006.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
router.infolinks.com/dyn/mnet-usync?uid=0000EEA
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/mnet-usync?uid=0000EEA
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/mnet-usync?uid=0000EEA HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:57 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: MNETUSERCOOKIE=0000EEA; Domain=infolinks.com; Expires=Sun, 25-Jun-2023 10:01:57 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Sun, 27 Mar 2022 10:01:57 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7ae6cb85fcd9b50c-OSL
X-Firefox-Spdy: h2
www.gstatic.com/mysidia/914be99cd47eba54dcad56263af893ff.js?tag=client_fast_engine_2019
200 OK 4.4 kB URL HTTP/2 www.gstatic.com/mysidia/914be99cd47eba54dcad56263af893ff.js?tag=client_fast_engine_2019
IP
File type ASCII text, with very long lines (1872)
Hash 056388abd032b1b2379658867cff7ba6
1319fd8733e9468e99a5ff41697fa2785b3d270d
b589223aae080b27544a3a832f2896c66c1d337016b90e1827d60c724f07daf1
GET /mysidia/914be99cd47eba54dcad56263af893ff.js?tag=client_fast_engine_2019 HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/mysidia
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="mysidia"
report-to: {"group":"mysidia","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/mysidia"}]}
content-length: 4426
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 26 Mar 2023 17:43:11 GMT
expires: Sat, 24 Jun 2023 17:43:11 GMT
cache-control: public, max-age=7776000
last-modified: Wed, 22 Mar 2023 05:23:26 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 58726
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
router.infolinks.com/usync/manage?pid=3132145&wsid=0&pdom=devid.info&purl=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310
200 OK 6.8 kB URL HTTP/2 router.infolinks.com/usync/manage?pid=3132145&wsid=0&pdom=devid.info&purl=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1899)
Hash 77c7eb73d5228440fe1df5aa40bdd1dd
a3c16499aa5201f650c20b2d07cd41bf9afe5d74
8c848b0199da2d9ea1645d0b7243c3fed61cc124c0c953caa65b6cc2bc180e0f
GET /usync/manage?pid=3132145&wsid=0&pdom=devid.info&purl=https%3A%2F%2Fdevid.info%2Fru%2F208427%2Fislim310 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:57 GMT
content-type: text/html;charset=UTF-8
cache-control: no-store
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7ae6cb82f907b50c-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
hal900017.redintelligence.net/request.php?zone=hs81rewhznnj&nw=20&renderingType=javascript&namespace=d3e2187fb0&subid=&uid=a3313990133926a2&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=200x200&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCnaCnk2khZIG5OIPgZfTCh_AIybminGn0wc3O1Q_wLhABIK2bmFhgw4SAgJgYyAEJqQJX7qvQOQ2yPqgDAaoE1QFP0KT6RMHdbv6YNexlkBxaEHwOaqzcHTqVlYBVr-mZoyPNJDU1pogsvpe0DAmZ8OuPYS2MicL9X20eSWKhl_lyvM5MSUJZmEwLPJKPW2EiPOaYRm32w_JtoRnoOdiuAMZ2ZJ3l9pwJefug7Bk2Ydbj5PfQSPxQVrV5t0kNGE2E0rywxCeh4XWzcS8rXRXgPWijh6eWlJJaH8NEcgRhGWpWcTjrufXbgkZp-ZvQraF8Y02J8ZhI1L_Phs6LxFo_7k0N51LYs7S4bLPAyI8sqF9_Nq6qzpHABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDUE5ymYe-OdRVXghvfQBPf9o5V8YvldloQKyZjrX3V3LGwOxScxza5zk_OjwD4fbaJxJJyqAAD5WfITL7j800sSXA_k7MmsB23YhgB%26sig%3DAOD64_2yCe-b08zn5s_B0fbNdrZnEDLmZw%26client%3Dca-pub-6044557359746051%26dbm_c%3DAKAmf-C0K0D2tVY7b2P5Nm4uMUtFPAfPm3gAR_a4dIefcee2nWPQGvYLl_GPRTAYiCmU0I7Sq-MHPb2BY111IyVO-g8_xqSc7SuUnwr_YzK8iWPlMlOf9VikQ63HxOfY3FMtuzoqzxz0GeSmWUOUvVkrmuKylShWnjEiEl287ukso6XO-brLbsQ%26cry%3D1%26dbm_d%3DAKAmf-BZOM1qRHaHCSw6T46Ek6XbBwGZSH2HgJ7KBkU63A5cW8o3jeAK5qtJzVc3KcqSNaz0GFpTzS8_w1sny95WmeBGfxgLz8rYRUzp-qGI2dlzlYPB2G4wThrdA8ldKFkRIyOFhCS2ESkoKxiqv9SyyBEFFJvNVU_wSHGfziLFf637MVEOxEpU5s1_X8_o5PtzqxwXm9yTZm6TKfx4U9qMXeOHb3qsreN5EGd8ZhBBJUwv_fdz6ZfgO5z4nYXf6WP4bGz7giGXRxfkQrsuTbQPAusWZaQ7k8CinQNXWhIoOmpm6nrr84g_JQ2Qh3obnCxQDOyO3P21U-onmh1PuTwovbWMIutyufZFto_NlA1suIyzj3zI5fv2Ip3E94-hGkfuosbeMdlGKglNGSyZfifbD3yGxVZ-5nLCveDEJj4paFdDj0GnVLDCydz7O_vvakGDzkhfL69WKfAs8uJeFpCJOSNwFVkR1AbmnfV3XYLm3dlZWTM4m5Chs4Iv6hF1vwjNRo1TgAAixZk8rDPVw_hqk2amjodgkuM7ujmk9QVy7-z7PTp155g%26adurl%3D&documentReferer=https%3A%2F%2Fdevid.info%2F&ancestorOrigins=null&random=791591460594&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0
302 Found 0 B URL HTTP/1.1 hal900017.redintelligence.net/request.php?zone=hs81rewhznnj&nw=20&renderingType=javascript&namespace=d3e2187fb0&subid=&uid=a3313990133926a2&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=200x200&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCnaCnk2khZIG5OIPgZfTCh_AIybminGn0wc3O1Q_wLhABIK2bmFhgw4SAgJgYyAEJqQJX7qvQOQ2yPqgDAaoE1QFP0KT6RMHdbv6YNexlkBxaEHwOaqzcHTqVlYBVr-mZoyPNJDU1pogsvpe0DAmZ8OuPYS2MicL9X20eSWKhl_lyvM5MSUJZmEwLPJKPW2EiPOaYRm32w_JtoRnoOdiuAMZ2ZJ3l9pwJefug7Bk2Ydbj5PfQSPxQVrV5t0kNGE2E0rywxCeh4XWzcS8rXRXgPWijh6eWlJJaH8NEcgRhGWpWcTjrufXbgkZp-ZvQraF8Y02J8ZhI1L_Phs6LxFo_7k0N51LYs7S4bLPAyI8sqF9_Nq6qzpHABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDUE5ymYe-OdRVXghvfQBPf9o5V8YvldloQKyZjrX3V3LGwOxScxza5zk_OjwD4fbaJxJJyqAAD5WfITL7j800sSXA_k7MmsB23YhgB%26sig%3DAOD64_2yCe-b08zn5s_B0fbNdrZnEDLmZw%26client%3Dca-pub-6044557359746051%26dbm_c%3DAKAmf-C0K0D2tVY7b2P5Nm4uMUtFPAfPm3gAR_a4dIefcee2nWPQGvYLl_GPRTAYiCmU0I7Sq-MHPb2BY111IyVO-g8_xqSc7SuUnwr_YzK8iWPlMlOf9VikQ63HxOfY3FMtuzoqzxz0GeSmWUOUvVkrmuKylShWnjEiEl287ukso6XO-brLbsQ%26cry%3D1%26dbm_d%3DAKAmf-BZOM1qRHaHCSw6T46Ek6XbBwGZSH2HgJ7KBkU63A5cW8o3jeAK5qtJzVc3KcqSNaz0GFpTzS8_w1sny95WmeBGfxgLz8rYRUzp-qGI2dlzlYPB2G4wThrdA8ldKFkRIyOFhCS2ESkoKxiqv9SyyBEFFJvNVU_wSHGfziLFf637MVEOxEpU5s1_X8_o5PtzqxwXm9yTZm6TKfx4U9qMXeOHb3qsreN5EGd8ZhBBJUwv_fdz6ZfgO5z4nYXf6WP4bGz7giGXRxfkQrsuTbQPAusWZaQ7k8CinQNXWhIoOmpm6nrr84g_JQ2Qh3obnCxQDOyO3P21U-onmh1PuTwovbWMIutyufZFto_NlA1suIyzj3zI5fv2Ip3E94-hGkfuosbeMdlGKglNGSyZfifbD3yGxVZ-5nLCveDEJj4paFdDj0GnVLDCydz7O_vvakGDzkhfL69WKfAs8uJeFpCJOSNwFVkR1AbmnfV3XYLm3dlZWTM4m5Chs4Iv6hF1vwjNRo1TgAAixZk8rDPVw_hqk2amjodgkuM7ujmk9QVy7-z7PTp155g%26adurl%3D&documentReferer=https%3A%2F%2Fdevid.info%2F&ancestorOrigins=null&random=791591460594&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /request.php?zone=hs81rewhznnj&nw=20&renderingType=javascript&namespace=d3e2187fb0&subid=&uid=a3313990133926a2&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=200x200&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCnaCnk2khZIG5OIPgZfTCh_AIybminGn0wc3O1Q_wLhABIK2bmFhgw4SAgJgYyAEJqQJX7qvQOQ2yPqgDAaoE1QFP0KT6RMHdbv6YNexlkBxaEHwOaqzcHTqVlYBVr-mZoyPNJDU1pogsvpe0DAmZ8OuPYS2MicL9X20eSWKhl_lyvM5MSUJZmEwLPJKPW2EiPOaYRm32w_JtoRnoOdiuAMZ2ZJ3l9pwJefug7Bk2Ydbj5PfQSPxQVrV5t0kNGE2E0rywxCeh4XWzcS8rXRXgPWijh6eWlJJaH8NEcgRhGWpWcTjrufXbgkZp-ZvQraF8Y02J8ZhI1L_Phs6LxFo_7k0N51LYs7S4bLPAyI8sqF9_Nq6qzpHABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDUE5ymYe-OdRVXghvfQBPf9o5V8YvldloQKyZjrX3V3LGwOxScxza5zk_OjwD4fbaJxJJyqAAD5WfITL7j800sSXA_k7MmsB23YhgB%26sig%3DAOD64_2yCe-b08zn5s_B0fbNdrZnEDLmZw%26client%3Dca-pub-6044557359746051%26dbm_c%3DAKAmf-C0K0D2tVY7b2P5Nm4uMUtFPAfPm3gAR_a4dIefcee2nWPQGvYLl_GPRTAYiCmU0I7Sq-MHPb2BY111IyVO-g8_xqSc7SuUnwr_YzK8iWPlMlOf9VikQ63HxOfY3FMtuzoqzxz0GeSmWUOUvVkrmuKylShWnjEiEl287ukso6XO-brLbsQ%26cry%3D1%26dbm_d%3DAKAmf-BZOM1qRHaHCSw6T46Ek6XbBwGZSH2HgJ7KBkU63A5cW8o3jeAK5qtJzVc3KcqSNaz0GFpTzS8_w1sny95WmeBGfxgLz8rYRUzp-qGI2dlzlYPB2G4wThrdA8ldKFkRIyOFhCS2ESkoKxiqv9SyyBEFFJvNVU_wSHGfziLFf637MVEOxEpU5s1_X8_o5PtzqxwXm9yTZm6TKfx4U9qMXeOHb3qsreN5EGd8ZhBBJUwv_fdz6ZfgO5z4nYXf6WP4bGz7giGXRxfkQrsuTbQPAusWZaQ7k8CinQNXWhIoOmpm6nrr84g_JQ2Qh3obnCxQDOyO3P21U-onmh1PuTwovbWMIutyufZFto_NlA1suIyzj3zI5fv2Ip3E94-hGkfuosbeMdlGKglNGSyZfifbD3yGxVZ-5nLCveDEJj4paFdDj0GnVLDCydz7O_vvakGDzkhfL69WKfAs8uJeFpCJOSNwFVkR1AbmnfV3XYLm3dlZWTM4m5Chs4Iv6hF1vwjNRo1TgAAixZk8rDPVw_hqk2amjodgkuM7ujmk9QVy7-z7PTp155g%26adurl%3D&documentReferer=https%3A%2F%2Fdevid.info%2F&ancestorOrigins=null&random=791591460594&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0 HTTP/1.1
Host: hal900017.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d78366f658f7ddb7c3a93e693ce6121c.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Mon, 27 Mar 2023 10:01:57 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Mon, 27 Mar 2023 11:01:57 +0200
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 8lcfmzhxc8d6_uid=1dffdc5d53a09392; expires=Sun, 25-Jun-2023 10:01:57 GMT; Max-Age=7776000; path=/; domain=.redintelligence.net; secure; SameSite=None
Location: request.php?zone=hs81rewhznnj&nw=20&renderingType=javascript&namespace=d3e2187fb0&subid=&uid=a3313990133926a2&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=200x200&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCnaCnk2khZIG5OIPgZfTCh_AIybminGn0wc3O1Q_wLhABIK2bmFhgw4SAgJgYyAEJqQJX7qvQOQ2yPqgDAaoE1QFP0KT6RMHdbv6YNexlkBxaEHwOaqzcHTqVlYBVr-mZoyPNJDU1pogsvpe0DAmZ8OuPYS2MicL9X20eSWKhl_lyvM5MSUJZmEwLPJKPW2EiPOaYRm32w_JtoRnoOdiuAMZ2ZJ3l9pwJefug7Bk2Ydbj5PfQSPxQVrV5t0kNGE2E0rywxCeh4XWzcS8rXRXgPWijh6eWlJJaH8NEcgRhGWpWcTjrufXbgkZp-ZvQraF8Y02J8ZhI1L_Phs6LxFo_7k0N51LYs7S4bLPAyI8sqF9_Nq6qzpHABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDUE5ymYe-OdRVXghvfQBPf9o5V8YvldloQKyZjrX3V3LGwOxScxza5zk_OjwD4fbaJxJJyqAAD5WfITL7j800sSXA_k7MmsB23YhgB%26sig%3DAOD64_2yCe-b08zn5s_B0fbNdrZnEDLmZw%26client%3Dca-pub-6044557359746051%26dbm_c%3DAKAmf-C0K0D2tVY7b2P5Nm4uMUtFPAfPm3gAR_a4dIefcee2nWPQGvYLl_GPRTAYiCmU0I7Sq-MHPb2BY111IyVO-g8_xqSc7SuUnwr_YzK8iWPlMlOf9VikQ63HxOfY3FMtuzoqzxz0GeSmWUOUvVkrmuKylShWnjEiEl287ukso6XO-brLbsQ%26cry%3D1%26dbm_d%3DAKAmf-BZOM1qRHaHCSw6T46Ek6XbBwGZSH2HgJ7KBkU63A5cW8o3jeAK5qtJzVc3KcqSNaz0GFpTzS8_w1sny95WmeBGfxgLz8rYRUzp-qGI2dlzlYPB2G4wThrdA8ldKFkRIyOFhCS2ESkoKxiqv9SyyBEFFJvNVU_wSHGfziLFf637MVEOxEpU5s1_X8_o5PtzqxwXm9yTZm6TKfx4U9qMXeOHb3qsreN5EGd8ZhBBJUwv_fdz6ZfgO5z4nYXf6WP4bGz7giGXRxfkQrsuTbQPAusWZaQ7k8CinQNXWhIoOmpm6nrr84g_JQ2Qh3obnCxQDOyO3P21U-onmh1PuTwovbWMIutyufZFto_NlA1suIyzj3zI5fv2Ip3E94-hGkfuosbeMdlGKglNGSyZfifbD3yGxVZ-5nLCveDEJj4paFdDj0GnVLDCydz7O_vvakGDzkhfL69WKfAs8uJeFpCJOSNwFVkR1AbmnfV3XYLm3dlZWTM4m5Chs4Iv6hF1vwjNRo1TgAAixZk8rDPVw_hqk2amjodgkuM7ujmk9QVy7-z7PTp155g%26adurl%3D&documentReferer=https%3A%2F%2Fdevid.info%2F&ancestorOrigins=null&random=791591460594&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 8d51b13a6018234a2d68562f32f81946
83ac05fe90b2c2087a403dfab04440b696719edc
e5ac554745afc073b36f50793a9665d24dc92403c8e9b0eeea5f9fd9749f6e79
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 27 Mar 2023 10:01:57 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 26 Mar 2023 20:54:54 GMT
Expires: Mon, 27 Mar 2023 20:54:54 GMT
ETag: "83ac05fe90b2c2087a403dfab04440b696719edc"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.godaddy.com/
200 OK 2.4 kB IP
File type gzip compressed data, max compression\012- data
Hash fc255fe386841850f821261f6aa4e6df
6bbf53285a5772c6d3f92ee29852922e4cf7026e
97221e1ec933c0bbd13d26bfe734ac5edebcbb3f86f2ffeeefb0b9e3e3b423ef
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 27 Mar 2023 10:01:57 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 26 Mar 2023 20:28:43 GMT
Expires: Mon, 27 Mar 2023 20:28:43 GMT
ETag: "5d4a492262c3dc0cff70e1843ff42f494c20aa9f"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true
302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58237/sync?&gdpr=&gdpr_consent=&redir=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Mon, 27 Mar 2023 10:01:57 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBJVpIWQCEN26GjDOU2_pk7UU1RkLWEQFEgEBAQG7ImQrZAAAAAAA_eMAAA&S=AQAAAnnIAw3hl_12_yqX-HWHtU0; Expires=Tue, 26 Mar 2024 16:01:57 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3a82d6ba269bbd7545c7e90beb25981c
77e8051cb5e1a4ce832645300ce530da8892a1d7
8b0d909b5a6ba32953ce292c528fd263872534a91fb44484311640c2e331ab91
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6108
Cache-Control: max-age=147520
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:57 GMT
Etag: "6420eefa-1d7"
Expires: Wed, 29 Mar 2023 03:00:37 GMT
Last-Modified: Mon, 27 Mar 2023 01:18:50 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471
hal900019.redintelligence.net/request.php?zone=hs81rewhznnj&nw=20&renderingType=javascript&namespace=8030ddfea7&subid=&uid=f590558a602f559a&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=200x200&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCciF4k2khZIK5OIPgZfTCh_AIybminGn0wc3O1Q_wLhABIK2bmFhgw4SAgJgYyAEJqQJX7qvQOQ2yPqgDAaoE1QFP0PzMeJA02TlvdkGr6C8tMd_LUZSXHLYDl_GXEVOH5Gr94POzjm0uQbeBrPDIOH24F1JqkoRc7w4uS23hG47DMKDyEbCzHuUPB0Mgeoj8u0M5KAES6Rd3oSWu_x1DhMAhyTyPloPkiOBIVJtoUycPwC145Bs3Nk5N4WaaGAh-YZF7l2KxzU4EtrsLCCXW-QRoALuLkn9ZIgDiFugiFoXyXbdQjbmeI-pZVoraiiSsQlgaK41ANmLzcpqLqrWifYZrovv0GK_qw8PD9kwT_HJa9nD-o9zABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDUE5ymYe-OdRVXghvfQBPf9o5V8YvldloQKyZjrX3V3LGwOxScxza5zk_OjwD4fbaJxJJyqAAD5WfITL7j800sSXA_k7MmsB23YhgB%26sig%3DAOD64_1IeijAYpAAeQaaWskaB6etUGTVvw%26client%3Dca-pub-6044557359746051%26dbm_c%3DAKAmf-DqYTqApAwM5CxBBBzGyqyX4WgwG6xFcQbBYi-ldiWXRQs4u6_NwJ1u1NhH7foLfdAHk1HSsJy10FwWCbIkq931PsthZVqchjOwRyqeKEdwKX0cKcLoPs4LAtSIaRZtphO1sGBYhXyhe2qAoyPXOlrbDVj3Wcq3_YNTG5XNtSMot4U2y3k%26cry%3D1%26dbm_d%3DAKAmf-CYLro9Nin6vyPvTfRhUT9-2Xlrar0PGZEOCRGaMyM5sgNWY-2lFzXbhMrrVF8RboByB5CZC1hIo8bJCpzdNs6aYrUg3ZvBv-bkGVp0cjm3ioKC28HSEM0NFoCa6hrjAug1XoVMgyyBXoSY2r4_bzHlAu0wQbRIrPcUnYN9xu0OZ40qbg15e85o-PRWwv4dqS5DouD33uEJBsehDCe4wKgrUNyRuACJ7UPXG68_VaUGcgHq61end9bYb1KNVuxC5IY0A7O9RWI75wgPHXSJQPOC7T6PyO9_R-UURNOg2_UJt3t8b-A84qc-RDj9drhu5IUsM4hGJbn8bVnALQ1Ngw7Oe-LaT1VSRQmUG2_r74cPGrs73-sA8hTPbzIv5OpkGrR9O6Lp1rFn96lBEfBsLhJxBnIObKe0f57cx4gvKD06372-X4pVGkW8Z5hy9PZhIAN45Zea1-8sN7xrQ1FAw6dE93hHz1O3ZQWz84-GJbuxQ9kwjwjOiR0i6I2hULbayzol8fmdEMc3Xj21vmZtun1gkEs8dgw5S4qYaok681z6KnFAmR8%26adurl%3D&documentReferer=https%3A%2F%2Fdevid.info%2F&ancestorOrigins=null&random=7904789757816&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0
302 Found 0 B URL HTTP/1.1 hal900019.redintelligence.net/request.php?zone=hs81rewhznnj&nw=20&renderingType=javascript&namespace=8030ddfea7&subid=&uid=f590558a602f559a&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=200x200&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCciF4k2khZIK5OIPgZfTCh_AIybminGn0wc3O1Q_wLhABIK2bmFhgw4SAgJgYyAEJqQJX7qvQOQ2yPqgDAaoE1QFP0PzMeJA02TlvdkGr6C8tMd_LUZSXHLYDl_GXEVOH5Gr94POzjm0uQbeBrPDIOH24F1JqkoRc7w4uS23hG47DMKDyEbCzHuUPB0Mgeoj8u0M5KAES6Rd3oSWu_x1DhMAhyTyPloPkiOBIVJtoUycPwC145Bs3Nk5N4WaaGAh-YZF7l2KxzU4EtrsLCCXW-QRoALuLkn9ZIgDiFugiFoXyXbdQjbmeI-pZVoraiiSsQlgaK41ANmLzcpqLqrWifYZrovv0GK_qw8PD9kwT_HJa9nD-o9zABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDUE5ymYe-OdRVXghvfQBPf9o5V8YvldloQKyZjrX3V3LGwOxScxza5zk_OjwD4fbaJxJJyqAAD5WfITL7j800sSXA_k7MmsB23YhgB%26sig%3DAOD64_1IeijAYpAAeQaaWskaB6etUGTVvw%26client%3Dca-pub-6044557359746051%26dbm_c%3DAKAmf-DqYTqApAwM5CxBBBzGyqyX4WgwG6xFcQbBYi-ldiWXRQs4u6_NwJ1u1NhH7foLfdAHk1HSsJy10FwWCbIkq931PsthZVqchjOwRyqeKEdwKX0cKcLoPs4LAtSIaRZtphO1sGBYhXyhe2qAoyPXOlrbDVj3Wcq3_YNTG5XNtSMot4U2y3k%26cry%3D1%26dbm_d%3DAKAmf-CYLro9Nin6vyPvTfRhUT9-2Xlrar0PGZEOCRGaMyM5sgNWY-2lFzXbhMrrVF8RboByB5CZC1hIo8bJCpzdNs6aYrUg3ZvBv-bkGVp0cjm3ioKC28HSEM0NFoCa6hrjAug1XoVMgyyBXoSY2r4_bzHlAu0wQbRIrPcUnYN9xu0OZ40qbg15e85o-PRWwv4dqS5DouD33uEJBsehDCe4wKgrUNyRuACJ7UPXG68_VaUGcgHq61end9bYb1KNVuxC5IY0A7O9RWI75wgPHXSJQPOC7T6PyO9_R-UURNOg2_UJt3t8b-A84qc-RDj9drhu5IUsM4hGJbn8bVnALQ1Ngw7Oe-LaT1VSRQmUG2_r74cPGrs73-sA8hTPbzIv5OpkGrR9O6Lp1rFn96lBEfBsLhJxBnIObKe0f57cx4gvKD06372-X4pVGkW8Z5hy9PZhIAN45Zea1-8sN7xrQ1FAw6dE93hHz1O3ZQWz84-GJbuxQ9kwjwjOiR0i6I2hULbayzol8fmdEMc3Xj21vmZtun1gkEs8dgw5S4qYaok681z6KnFAmR8%26adurl%3D&documentReferer=https%3A%2F%2Fdevid.info%2F&ancestorOrigins=null&random=7904789757816&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /request.php?zone=hs81rewhznnj&nw=20&renderingType=javascript&namespace=8030ddfea7&subid=&uid=f590558a602f559a&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=200x200&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCciF4k2khZIK5OIPgZfTCh_AIybminGn0wc3O1Q_wLhABIK2bmFhgw4SAgJgYyAEJqQJX7qvQOQ2yPqgDAaoE1QFP0PzMeJA02TlvdkGr6C8tMd_LUZSXHLYDl_GXEVOH5Gr94POzjm0uQbeBrPDIOH24F1JqkoRc7w4uS23hG47DMKDyEbCzHuUPB0Mgeoj8u0M5KAES6Rd3oSWu_x1DhMAhyTyPloPkiOBIVJtoUycPwC145Bs3Nk5N4WaaGAh-YZF7l2KxzU4EtrsLCCXW-QRoALuLkn9ZIgDiFugiFoXyXbdQjbmeI-pZVoraiiSsQlgaK41ANmLzcpqLqrWifYZrovv0GK_qw8PD9kwT_HJa9nD-o9zABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDUE5ymYe-OdRVXghvfQBPf9o5V8YvldloQKyZjrX3V3LGwOxScxza5zk_OjwD4fbaJxJJyqAAD5WfITL7j800sSXA_k7MmsB23YhgB%26sig%3DAOD64_1IeijAYpAAeQaaWskaB6etUGTVvw%26client%3Dca-pub-6044557359746051%26dbm_c%3DAKAmf-DqYTqApAwM5CxBBBzGyqyX4WgwG6xFcQbBYi-ldiWXRQs4u6_NwJ1u1NhH7foLfdAHk1HSsJy10FwWCbIkq931PsthZVqchjOwRyqeKEdwKX0cKcLoPs4LAtSIaRZtphO1sGBYhXyhe2qAoyPXOlrbDVj3Wcq3_YNTG5XNtSMot4U2y3k%26cry%3D1%26dbm_d%3DAKAmf-CYLro9Nin6vyPvTfRhUT9-2Xlrar0PGZEOCRGaMyM5sgNWY-2lFzXbhMrrVF8RboByB5CZC1hIo8bJCpzdNs6aYrUg3ZvBv-bkGVp0cjm3ioKC28HSEM0NFoCa6hrjAug1XoVMgyyBXoSY2r4_bzHlAu0wQbRIrPcUnYN9xu0OZ40qbg15e85o-PRWwv4dqS5DouD33uEJBsehDCe4wKgrUNyRuACJ7UPXG68_VaUGcgHq61end9bYb1KNVuxC5IY0A7O9RWI75wgPHXSJQPOC7T6PyO9_R-UURNOg2_UJt3t8b-A84qc-RDj9drhu5IUsM4hGJbn8bVnALQ1Ngw7Oe-LaT1VSRQmUG2_r74cPGrs73-sA8hTPbzIv5OpkGrR9O6Lp1rFn96lBEfBsLhJxBnIObKe0f57cx4gvKD06372-X4pVGkW8Z5hy9PZhIAN45Zea1-8sN7xrQ1FAw6dE93hHz1O3ZQWz84-GJbuxQ9kwjwjOiR0i6I2hULbayzol8fmdEMc3Xj21vmZtun1gkEs8dgw5S4qYaok681z6KnFAmR8%26adurl%3D&documentReferer=https%3A%2F%2Fdevid.info%2F&ancestorOrigins=null&random=7904789757816&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0 HTTP/1.1
Host: hal900019.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d78366f658f7ddb7c3a93e693ce6121c.safeframe.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Mon, 27 Mar 2023 10:01:57 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Mon, 27 Mar 2023 11:01:57 +0200
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 8lcfmzhxc8d6_uid=ef3a9887bf46cdb8; expires=Sun, 25-Jun-2023 10:01:57 GMT; Max-Age=7776000; path=/; domain=.redintelligence.net; secure; SameSite=None
Location: request.php?zone=hs81rewhznnj&nw=20&renderingType=javascript&namespace=8030ddfea7&subid=&uid=f590558a602f559a&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=200x200&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCciF4k2khZIK5OIPgZfTCh_AIybminGn0wc3O1Q_wLhABIK2bmFhgw4SAgJgYyAEJqQJX7qvQOQ2yPqgDAaoE1QFP0PzMeJA02TlvdkGr6C8tMd_LUZSXHLYDl_GXEVOH5Gr94POzjm0uQbeBrPDIOH24F1JqkoRc7w4uS23hG47DMKDyEbCzHuUPB0Mgeoj8u0M5KAES6Rd3oSWu_x1DhMAhyTyPloPkiOBIVJtoUycPwC145Bs3Nk5N4WaaGAh-YZF7l2KxzU4EtrsLCCXW-QRoALuLkn9ZIgDiFugiFoXyXbdQjbmeI-pZVoraiiSsQlgaK41ANmLzcpqLqrWifYZrovv0GK_qw8PD9kwT_HJa9nD-o9zABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDUE5ymYe-OdRVXghvfQBPf9o5V8YvldloQKyZjrX3V3LGwOxScxza5zk_OjwD4fbaJxJJyqAAD5WfITL7j800sSXA_k7MmsB23YhgB%26sig%3DAOD64_1IeijAYpAAeQaaWskaB6etUGTVvw%26client%3Dca-pub-6044557359746051%26dbm_c%3DAKAmf-DqYTqApAwM5CxBBBzGyqyX4WgwG6xFcQbBYi-ldiWXRQs4u6_NwJ1u1NhH7foLfdAHk1HSsJy10FwWCbIkq931PsthZVqchjOwRyqeKEdwKX0cKcLoPs4LAtSIaRZtphO1sGBYhXyhe2qAoyPXOlrbDVj3Wcq3_YNTG5XNtSMot4U2y3k%26cry%3D1%26dbm_d%3DAKAmf-CYLro9Nin6vyPvTfRhUT9-2Xlrar0PGZEOCRGaMyM5sgNWY-2lFzXbhMrrVF8RboByB5CZC1hIo8bJCpzdNs6aYrUg3ZvBv-bkGVp0cjm3ioKC28HSEM0NFoCa6hrjAug1XoVMgyyBXoSY2r4_bzHlAu0wQbRIrPcUnYN9xu0OZ40qbg15e85o-PRWwv4dqS5DouD33uEJBsehDCe4wKgrUNyRuACJ7UPXG68_VaUGcgHq61end9bYb1KNVuxC5IY0A7O9RWI75wgPHXSJQPOC7T6PyO9_R-UURNOg2_UJt3t8b-A84qc-RDj9drhu5IUsM4hGJbn8bVnALQ1Ngw7Oe-LaT1VSRQmUG2_r74cPGrs73-sA8hTPbzIv5OpkGrR9O6Lp1rFn96lBEfBsLhJxBnIObKe0f57cx4gvKD06372-X4pVGkW8Z5hy9PZhIAN45Zea1-8sN7xrQ1FAw6dE93hHz1O3ZQWz84-GJbuxQ9kwjwjOiR0i6I2hULbayzol8fmdEMc3Xj21vmZtun1gkEs8dgw5S4qYaok681z6KnFAmR8%26adurl%3D&documentReferer=https%3A%2F%2Fdevid.info%2F&ancestorOrigins=null&random=7904789757816&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
image8.pubmatic.com/AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID&rdf=1
200 OK 0 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID&rdf=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /AdServer/ImgSync?p=60809&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D60809%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fusersync%253Fpmuservalue%253D%2523PMUID&rdf=1 HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:56 GMT
content-length: 0
X-Firefox-Spdy: h2
www.gstatic.com/images/icons/material/system/2x/settings_grey600_24dp.png
200 OK 604 B URL HTTP/2 www.gstatic.com/images/icons/material/system/2x/settings_grey600_24dp.png
IP
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 7bd42e5a35b5fb3ff852d6ea9191ca83
8a141eb392a05a2dea3dcd83b97940ef70a81ebc
5c4a713ee4250851232be9f9f68d41586be39b299528cfc7266e0b0e7e582e1b
GET /images/icons/material/system/2x/settings_grey600_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 604
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 27 Mar 2023 08:23:21 GMT
expires: Tue, 26 Mar 2024 08:23:21 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: image/png
vary: Origin
age: 5916
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58422/occ?verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58422/occ?verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58422/occ?verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Mon, 27 Mar 2023 10:01:57 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBJVpIWQCEPG5h5uq_HwgeZt7Rbh6RR0FEgEBAQG7ImQrZAAAAAAA_eMAAA&S=AQAAAiXwiKEQkT2KoeA4h5O5azE; Expires=Tue, 26 Mar 2024 16:01:57 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
www.gstatic.com/images/icons/material/system/2x/feedback_grey600_24dp.png
200 OK 205 B URL HTTP/2 www.gstatic.com/images/icons/material/system/2x/feedback_grey600_24dp.png
IP
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 4087858e2c9db9aa8f6a840aedcfb533
d1ffe861da6bd0e95fd1a365b0c3d3ceb6cd58a3
4d45982f2dc34f36c9045ee46a75a1943666bb7fd64e103cac8c7429e7012840
GET /images/icons/material/system/2x/feedback_grey600_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 205
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 26 Mar 2023 22:11:10 GMT
expires: Mon, 25 Mar 2024 22:11:10 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: image/png
vary: Origin
age: 42647
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
image8.pubmatic.com/AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID&rdf=1
200 OK 0 B URL HTTP/2 image8.pubmatic.com/AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID&rdf=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServer%2FSPug%3Fp%3D156872%26pmc%3DPM_PMC%26pr%3Dhttps%253A%252F%252Frouter.infolinks.com%252Fdyn%252Fpbm-usync%253Fuid%253D%2523PMUID&rdf=1 HTTP/1.1
Host: image8.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:56 GMT
content-length: 0
X-Firefox-Spdy: h2
ssum-sec.casalemedia.com/usermatch?s=191306&cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D
302 Found 0 B URL HTTP/1.1 ssum-sec.casalemedia.com/usermatch?s=191306&cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch?s=191306&cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Mon, 27 Mar 2023 10:01:57 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: /usermatch?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D&s=191306&C=1
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=ZCFplXqWVDG9FlcrwIBz8wAA; Path=/; Domain=casalemedia.com; Expires=Tue, 26 Mar 2024 10:01:57 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=301; Path=/; Domain=casalemedia.com; Expires=Sun, 25 Jun 2023 10:01:57 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=301; Path=/; Domain=casalemedia.com; Expires=Sun, 25 Jun 2023 10:01:57 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fdevid.info%2F&domain=devid.info&cw=1&lsw=1
200 OK 22 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=https%3A%2F%2Fdevid.info%2F&domain=devid.info&cw=1&lsw=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 91d4898f938e4920ac88f87453b33933
1bd4a04303c2501101656075ad8304e1a84eb91e
93ecc6762eafd376cbe2fd18250fa9f12c90f9a86b481430ef29ec40716d8f35
OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fdevid.info%2F&domain=devid.info&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://devid.info/
Origin: https://devid.info
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: https://devid.info
server-processing-duration-in-ticks: 422077
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D&s=191306&C=1
200 OK 175 B URL HTTP/1.1 ssum-sec.casalemedia.com/usermatch?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D&s=191306&C=1
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash f4bc2e4d88b3f5220d0588259eef6ae0
096a106a5843e950f4a35447cbcd5aab9bdc59ba
02c1f3f845c0b1618e11b9b66e71af8ecc31e877758eb91eb40c924bee0ce2b0
GET /usermatch?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D&s=191306&C=1 HTTP/1.1
Host: ssum-sec.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:57 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: text/html
Expires: 0
Pragma: no-cache
Content-Length: 175
Keep-Alive: timeout=1, max=499
Connection: Keep-Alive
router.infolinks.com/dyn/qc-usync?&uid=AcXJuAHIwrwaxs2_U8jW6weUmrsakMy_UsXgC8Vq
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/qc-usync?&uid=AcXJuAHIwrwaxs2_U8jW6weUmrsakMy_UsXgC8Vq
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/qc-usync?&uid=AcXJuAHIwrwaxs2_U8jW6weUmrsakMy_UsXgC8Vq HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:57 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: QCUSERCOOKIE=AcXJuAHIwrwaxs2_U8jW6weUmrsakMy_UsXgC8Vq; Domain=infolinks.com; Expires=Sun, 25-Jun-2023 10:01:57 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Sun, 27 Mar 2022 10:01:57 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7ae6cb86fe6bb50c-OSL
X-Firefox-Spdy: h2
router.infolinks.com/dyn/apn-usync?user_id=0
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/apn-usync?user_id=0
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/apn-usync?user_id=0 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:57 GMT
content-type: image/gif
content-length: 35
cache-control: no-store
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7ae6cb872e95b50c-OSL
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58237/sync?&gdpr=&gdpr_consent=&redir=true&verify=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58237/sync?&gdpr=&gdpr_consent=&redir=true&verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Mon, 27 Mar 2023 10:01:57 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBJVpIWQCELf0U6YpSineICW8r793UOQFEgEBAQG7ImQrZAAAAAAA_eMAAA&S=AQAAAgjbkqVaSE-tjeAGyxj2lT4; Expires=Tue, 26 Mar 2024 16:01:57 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
sync.1rx.io/usersync2/rmpssp?sub=infolinks&zcc=1&cb=1679911317520
302 Found 1.8 kB URL HTTP/2 sync.1rx.io/usersync2/rmpssp?sub=infolinks&zcc=1&cb=1679911317520
IP
Hash f940795b3e25893b50bf9dfc504fdd68
7bd49d01fa08bb1e854940d7a0af27f62603f5a5
a02a4b0258bb5def2c63b0e1ce18409eb4bc2de9e5294a2680d0cb894e3e8458
GET /usersync2/rmpssp?sub=infolinks&zcc=1&cb=1679911317520 HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Mon, 27 Mar 2023 10:01:57 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
location: https://router.infolinks.com/dyn/ur-usync?uid=OPTOUT
etag: OPTOUT
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 3c40e71388b7ed24811041fa83ba094c
fb69e7370de2fc41cb27c4f768e579bbb01a3fce
62bb54432c0b262ef2585b1cd4c59823fe811ea5cf9ad2ff6440b8a4c42dccb4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:57 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 26 Mar 2023 11:33:42 GMT
Expires: Sun, 02 Apr 2023 11:33:41 GMT
Etag: "fb69e7370de2fc41cb27c4f768e579bbb01a3fce"
Cache-Control: max-age=523303,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ae6cb874ccafac0-OSL
b1sync.zemanta.com/usersync/infolinks/?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fzmn-usync%3Fuid%3D__ZUID__
302 Found 70 B URL HTTP/1.1 b1sync.zemanta.com/usersync/infolinks/?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fzmn-usync%3Fuid%3D__ZUID__
IP
File type HTML document, ASCII text
Hash 16ccc9da763aca428789e4f469fc7ff1
4a873c523b8d9bdbc30b8c48189817413a19ee7a
5be7e833013b4b10333a904010b01217263df39c501a29b146d072110ceea4a1
GET /usersync/infolinks/?cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fzmn-usync%3Fuid%3D__ZUID__ HTTP/1.1
Host: b1sync.zemanta.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Content-Length: 70
Cache-Control: no-cache, no-store, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Location: https://router.infolinks.com/dyn/zmn-usync?uid=
Pragma: no-cache
Date: Mon, 27 Mar 2023 10:01:57 GMT
ocsp.sectigo.com/
200 OK 471 B IP
Hash 99694cadabf5f5ccb2ffe5658a3be56a
f4b247569a3056c2b3f93978c4bab95c77258fea
9548e3cac18bf9dfef48aa812c40e3fedc5e1985a683575b451667ef8173b8ab
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:57 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 25 Mar 2023 14:15:45 GMT
Expires: Sat, 01 Apr 2023 14:15:44 GMT
Etag: "f4b247569a3056c2b3f93978c4bab95c77258fea"
Cache-Control: max-age=446626,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ae6cb8658c5b4f3-OSL
router.infolinks.com/dyn/ur-usync?uid=OPTOUT
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/ur-usync?uid=OPTOUT
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/ur-usync?uid=OPTOUT HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:57 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: URUSERCOOKIE=OPTOUT; Domain=infolinks.com; Expires=Sun, 25-Jun-2023 10:01:57 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Sun, 27 Mar 2022 10:01:57 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7ae6cb87dffdb50c-OSL
X-Firefox-Spdy: h2
p.rfihub.com/cm?pub=43153&in=1
302 Found 0 B URL HTTP/1.1 p.rfihub.com/cm?pub=43153&in=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?pub=43153&in=1 HTTP/1.1
Host: p.rfihub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Mon, 27 Mar 2023 10:01:57 GMT
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: eud=H4sIAAAAAAAA_1slzmtoZm5paWhobGhuYWEKAIy0-VIQAAAA; Path=/; Domain=.rfihub.com; Expires=Sat, 20 Apr 2024 10:01:57 GMT; Secure; SameSite=None
rud=H4sIAAAAAAAA_-MSNjU0MTG1sDA1MrY0NTMxMDUxNRHiM9R1Cq0yr3R21TXPKi0FAIwSS1IlAAAA; Path=/; Domain=.rfihub.com; Expires=Sat, 20 Apr 2024 10:01:57 GMT; Secure; SameSite=None
ruds=H4sIAAAAAAAA_-MSNjU0MTG1sDA1MrY0NTMxMDUxNRHiM9R1Cq0yr3R21TXPKi0FAIwSS1IlAAAA; Path=/; Domain=.rfihub.com; Secure; SameSite=None
Location: https://router.infolinks.com/dyn/zeta-usync?uid=5144588523956405454
Content-Length: 0
Server: Jetty(9.3.29.v20201019)
router.infolinks.com/dyn/ix-usync?uid=0
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/ix-usync?uid=0
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/ix-usync?uid=0 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ssum-sec.casalemedia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:57 GMT
content-type: image/gif
content-length: 35
cache-control: no-store
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7ae6cb883899b50c-OSL
X-Firefox-Spdy: h2
hal900019.redintelligence.net/request.php?zone=hs81rewhznnj&nw=20&renderingType=javascript&namespace=8030ddfea7&subid=&uid=f590558a602f559a&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=200x200&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCciF4k2khZIK5OIPgZfTCh_AIybminGn0wc3O1Q_wLhABIK2bmFhgw4SAgJgYyAEJqQJX7qvQOQ2yPqgDAaoE1QFP0PzMeJA02TlvdkGr6C8tMd_LUZSXHLYDl_GXEVOH5Gr94POzjm0uQbeBrPDIOH24F1JqkoRc7w4uS23hG47DMKDyEbCzHuUPB0Mgeoj8u0M5KAES6Rd3oSWu_x1DhMAhyTyPloPkiOBIVJtoUycPwC145Bs3Nk5N4WaaGAh-YZF7l2KxzU4EtrsLCCXW-QRoALuLkn9ZIgDiFugiFoXyXbdQjbmeI-pZVoraiiSsQlgaK41ANmLzcpqLqrWifYZrovv0GK_qw8PD9kwT_HJa9nD-o9zABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDUE5ymYe-OdRVXghvfQBPf9o5V8YvldloQKyZjrX3V3LGwOxScxza5zk_OjwD4fbaJxJJyqAAD5WfITL7j800sSXA_k7MmsB23YhgB%26sig%3DAOD64_1IeijAYpAAeQaaWskaB6etUGTVvw%26client%3Dca-pub-6044557359746051%26dbm_c%3DAKAmf-DqYTqApAwM5CxBBBzGyqyX4WgwG6xFcQbBYi-ldiWXRQs4u6_NwJ1u1NhH7foLfdAHk1HSsJy10FwWCbIkq931PsthZVqchjOwRyqeKEdwKX0cKcLoPs4LAtSIaRZtphO1sGBYhXyhe2qAoyPXOlrbDVj3Wcq3_YNTG5XNtSMot4U2y3k%26cry%3D1%26dbm_d%3DAKAmf-CYLro9Nin6vyPvTfRhUT9-2Xlrar0PGZEOCRGaMyM5sgNWY-2lFzXbhMrrVF8RboByB5CZC1hIo8bJCpzdNs6aYrUg3ZvBv-bkGVp0cjm3ioKC28HSEM0NFoCa6hrjAug1XoVMgyyBXoSY2r4_bzHlAu0wQbRIrPcUnYN9xu0OZ40qbg15e85o-PRWwv4dqS5DouD33uEJBsehDCe4wKgrUNyRuACJ7UPXG68_VaUGcgHq61end9bYb1KNVuxC5IY0A7O9RWI75wgPHXSJQPOC7T6PyO9_R-UURNOg2_UJt3t8b-A84qc-RDj9drhu5IUsM4hGJbn8bVnALQ1Ngw7Oe-LaT1VSRQmUG2_r74cPGrs73-sA8hTPbzIv5OpkGrR9O6Lp1rFn96lBEfBsLhJxBnIObKe0f57cx4gvKD06372-X4pVGkW8Z5hy9PZhIAN45Zea1-8sN7xrQ1FAw6dE93hHz1O3ZQWz84-GJbuxQ9kwjwjOiR0i6I2hULbayzol8fmdEMc3Xj21vmZtun1gkEs8dgw5S4qYaok681z6KnFAmR8%26adurl%3D&documentReferer=https%3A%2F%2Fdevid.info%2F&ancestorOrigins=null&random=7904789757816&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
200 OK 511 B URL HTTP/1.1 hal900019.redintelligence.net/request.php?zone=hs81rewhznnj&nw=20&renderingType=javascript&namespace=8030ddfea7&subid=&uid=f590558a602f559a&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=200x200&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCciF4k2khZIK5OIPgZfTCh_AIybminGn0wc3O1Q_wLhABIK2bmFhgw4SAgJgYyAEJqQJX7qvQOQ2yPqgDAaoE1QFP0PzMeJA02TlvdkGr6C8tMd_LUZSXHLYDl_GXEVOH5Gr94POzjm0uQbeBrPDIOH24F1JqkoRc7w4uS23hG47DMKDyEbCzHuUPB0Mgeoj8u0M5KAES6Rd3oSWu_x1DhMAhyTyPloPkiOBIVJtoUycPwC145Bs3Nk5N4WaaGAh-YZF7l2KxzU4EtrsLCCXW-QRoALuLkn9ZIgDiFugiFoXyXbdQjbmeI-pZVoraiiSsQlgaK41ANmLzcpqLqrWifYZrovv0GK_qw8PD9kwT_HJa9nD-o9zABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDUE5ymYe-OdRVXghvfQBPf9o5V8YvldloQKyZjrX3V3LGwOxScxza5zk_OjwD4fbaJxJJyqAAD5WfITL7j800sSXA_k7MmsB23YhgB%26sig%3DAOD64_1IeijAYpAAeQaaWskaB6etUGTVvw%26client%3Dca-pub-6044557359746051%26dbm_c%3DAKAmf-DqYTqApAwM5CxBBBzGyqyX4WgwG6xFcQbBYi-ldiWXRQs4u6_NwJ1u1NhH7foLfdAHk1HSsJy10FwWCbIkq931PsthZVqchjOwRyqeKEdwKX0cKcLoPs4LAtSIaRZtphO1sGBYhXyhe2qAoyPXOlrbDVj3Wcq3_YNTG5XNtSMot4U2y3k%26cry%3D1%26dbm_d%3DAKAmf-CYLro9Nin6vyPvTfRhUT9-2Xlrar0PGZEOCRGaMyM5sgNWY-2lFzXbhMrrVF8RboByB5CZC1hIo8bJCpzdNs6aYrUg3ZvBv-bkGVp0cjm3ioKC28HSEM0NFoCa6hrjAug1XoVMgyyBXoSY2r4_bzHlAu0wQbRIrPcUnYN9xu0OZ40qbg15e85o-PRWwv4dqS5DouD33uEJBsehDCe4wKgrUNyRuACJ7UPXG68_VaUGcgHq61end9bYb1KNVuxC5IY0A7O9RWI75wgPHXSJQPOC7T6PyO9_R-UURNOg2_UJt3t8b-A84qc-RDj9drhu5IUsM4hGJbn8bVnALQ1Ngw7Oe-LaT1VSRQmUG2_r74cPGrs73-sA8hTPbzIv5OpkGrR9O6Lp1rFn96lBEfBsLhJxBnIObKe0f57cx4gvKD06372-X4pVGkW8Z5hy9PZhIAN45Zea1-8sN7xrQ1FAw6dE93hHz1O3ZQWz84-GJbuxQ9kwjwjOiR0i6I2hULbayzol8fmdEMc3Xj21vmZtun1gkEs8dgw5S4qYaok681z6KnFAmR8%26adurl%3D&documentReferer=https%3A%2F%2Fdevid.info%2F&ancestorOrigins=null&random=7904789757816&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with CRLF line terminators
Hash e7654fdaf55b9b76087cef94dd2b008e
5bae8a0ca9ddb03ac922b6ed63224c0148a1f7d7
b4e480f1b3ff437cff382c53f16d59c13c3c77fdf8c0d693c89c0d5e7fd02059
GET /request.php?zone=hs81rewhznnj&nw=20&renderingType=javascript&namespace=8030ddfea7&subid=&uid=f590558a602f559a&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=200x200&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCciF4k2khZIK5OIPgZfTCh_AIybminGn0wc3O1Q_wLhABIK2bmFhgw4SAgJgYyAEJqQJX7qvQOQ2yPqgDAaoE1QFP0PzMeJA02TlvdkGr6C8tMd_LUZSXHLYDl_GXEVOH5Gr94POzjm0uQbeBrPDIOH24F1JqkoRc7w4uS23hG47DMKDyEbCzHuUPB0Mgeoj8u0M5KAES6Rd3oSWu_x1DhMAhyTyPloPkiOBIVJtoUycPwC145Bs3Nk5N4WaaGAh-YZF7l2KxzU4EtrsLCCXW-QRoALuLkn9ZIgDiFugiFoXyXbdQjbmeI-pZVoraiiSsQlgaK41ANmLzcpqLqrWifYZrovv0GK_qw8PD9kwT_HJa9nD-o9zABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDUE5ymYe-OdRVXghvfQBPf9o5V8YvldloQKyZjrX3V3LGwOxScxza5zk_OjwD4fbaJxJJyqAAD5WfITL7j800sSXA_k7MmsB23YhgB%26sig%3DAOD64_1IeijAYpAAeQaaWskaB6etUGTVvw%26client%3Dca-pub-6044557359746051%26dbm_c%3DAKAmf-DqYTqApAwM5CxBBBzGyqyX4WgwG6xFcQbBYi-ldiWXRQs4u6_NwJ1u1NhH7foLfdAHk1HSsJy10FwWCbIkq931PsthZVqchjOwRyqeKEdwKX0cKcLoPs4LAtSIaRZtphO1sGBYhXyhe2qAoyPXOlrbDVj3Wcq3_YNTG5XNtSMot4U2y3k%26cry%3D1%26dbm_d%3DAKAmf-CYLro9Nin6vyPvTfRhUT9-2Xlrar0PGZEOCRGaMyM5sgNWY-2lFzXbhMrrVF8RboByB5CZC1hIo8bJCpzdNs6aYrUg3ZvBv-bkGVp0cjm3ioKC28HSEM0NFoCa6hrjAug1XoVMgyyBXoSY2r4_bzHlAu0wQbRIrPcUnYN9xu0OZ40qbg15e85o-PRWwv4dqS5DouD33uEJBsehDCe4wKgrUNyRuACJ7UPXG68_VaUGcgHq61end9bYb1KNVuxC5IY0A7O9RWI75wgPHXSJQPOC7T6PyO9_R-UURNOg2_UJt3t8b-A84qc-RDj9drhu5IUsM4hGJbn8bVnALQ1Ngw7Oe-LaT1VSRQmUG2_r74cPGrs73-sA8hTPbzIv5OpkGrR9O6Lp1rFn96lBEfBsLhJxBnIObKe0f57cx4gvKD06372-X4pVGkW8Z5hy9PZhIAN45Zea1-8sN7xrQ1FAw6dE93hHz1O3ZQWz84-GJbuxQ9kwjwjOiR0i6I2hULbayzol8fmdEMc3Xj21vmZtun1gkEs8dgw5S4qYaok681z6KnFAmR8%26adurl%3D&documentReferer=https%3A%2F%2Fdevid.info%2F&ancestorOrigins=null&random=7904789757816&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1 HTTP/1.1
Host: hal900019.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d78366f658f7ddb7c3a93e693ce6121c.safeframe.googlesyndication.com/
Connection: keep-alive
Cookie: 8lcfmzhxc8d6_uid=ef3a9887bf46cdb8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:57 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Mon, 27 Mar 2023 11:01:57 +0200
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 8lcfmzhxc8d6_uid=ef3a9887bf46cdb8; expires=Sun, 25-Jun-2023 10:01:57 GMT; Max-Age=7776000; path=/; domain=.redintelligence.net; secure; SameSite=None
X-NEORY-SubId: 28434300089623704439906012276019
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 511
Connection: close
Content-Type: application/x-javascript; charset=utf-8
hal900017.redintelligence.net/request.php?zone=hs81rewhznnj&nw=20&renderingType=javascript&namespace=d3e2187fb0&subid=&uid=a3313990133926a2&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=200x200&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCnaCnk2khZIG5OIPgZfTCh_AIybminGn0wc3O1Q_wLhABIK2bmFhgw4SAgJgYyAEJqQJX7qvQOQ2yPqgDAaoE1QFP0KT6RMHdbv6YNexlkBxaEHwOaqzcHTqVlYBVr-mZoyPNJDU1pogsvpe0DAmZ8OuPYS2MicL9X20eSWKhl_lyvM5MSUJZmEwLPJKPW2EiPOaYRm32w_JtoRnoOdiuAMZ2ZJ3l9pwJefug7Bk2Ydbj5PfQSPxQVrV5t0kNGE2E0rywxCeh4XWzcS8rXRXgPWijh6eWlJJaH8NEcgRhGWpWcTjrufXbgkZp-ZvQraF8Y02J8ZhI1L_Phs6LxFo_7k0N51LYs7S4bLPAyI8sqF9_Nq6qzpHABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDUE5ymYe-OdRVXghvfQBPf9o5V8YvldloQKyZjrX3V3LGwOxScxza5zk_OjwD4fbaJxJJyqAAD5WfITL7j800sSXA_k7MmsB23YhgB%26sig%3DAOD64_2yCe-b08zn5s_B0fbNdrZnEDLmZw%26client%3Dca-pub-6044557359746051%26dbm_c%3DAKAmf-C0K0D2tVY7b2P5Nm4uMUtFPAfPm3gAR_a4dIefcee2nWPQGvYLl_GPRTAYiCmU0I7Sq-MHPb2BY111IyVO-g8_xqSc7SuUnwr_YzK8iWPlMlOf9VikQ63HxOfY3FMtuzoqzxz0GeSmWUOUvVkrmuKylShWnjEiEl287ukso6XO-brLbsQ%26cry%3D1%26dbm_d%3DAKAmf-BZOM1qRHaHCSw6T46Ek6XbBwGZSH2HgJ7KBkU63A5cW8o3jeAK5qtJzVc3KcqSNaz0GFpTzS8_w1sny95WmeBGfxgLz8rYRUzp-qGI2dlzlYPB2G4wThrdA8ldKFkRIyOFhCS2ESkoKxiqv9SyyBEFFJvNVU_wSHGfziLFf637MVEOxEpU5s1_X8_o5PtzqxwXm9yTZm6TKfx4U9qMXeOHb3qsreN5EGd8ZhBBJUwv_fdz6ZfgO5z4nYXf6WP4bGz7giGXRxfkQrsuTbQPAusWZaQ7k8CinQNXWhIoOmpm6nrr84g_JQ2Qh3obnCxQDOyO3P21U-onmh1PuTwovbWMIutyufZFto_NlA1suIyzj3zI5fv2Ip3E94-hGkfuosbeMdlGKglNGSyZfifbD3yGxVZ-5nLCveDEJj4paFdDj0GnVLDCydz7O_vvakGDzkhfL69WKfAs8uJeFpCJOSNwFVkR1AbmnfV3XYLm3dlZWTM4m5Chs4Iv6hF1vwjNRo1TgAAixZk8rDPVw_hqk2amjodgkuM7ujmk9QVy7-z7PTp155g%26adurl%3D&documentReferer=https%3A%2F%2Fdevid.info%2F&ancestorOrigins=null&random=791591460594&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
200 OK 512 B URL HTTP/1.1 hal900017.redintelligence.net/request.php?zone=hs81rewhznnj&nw=20&renderingType=javascript&namespace=d3e2187fb0&subid=&uid=a3313990133926a2&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=200x200&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCnaCnk2khZIG5OIPgZfTCh_AIybminGn0wc3O1Q_wLhABIK2bmFhgw4SAgJgYyAEJqQJX7qvQOQ2yPqgDAaoE1QFP0KT6RMHdbv6YNexlkBxaEHwOaqzcHTqVlYBVr-mZoyPNJDU1pogsvpe0DAmZ8OuPYS2MicL9X20eSWKhl_lyvM5MSUJZmEwLPJKPW2EiPOaYRm32w_JtoRnoOdiuAMZ2ZJ3l9pwJefug7Bk2Ydbj5PfQSPxQVrV5t0kNGE2E0rywxCeh4XWzcS8rXRXgPWijh6eWlJJaH8NEcgRhGWpWcTjrufXbgkZp-ZvQraF8Y02J8ZhI1L_Phs6LxFo_7k0N51LYs7S4bLPAyI8sqF9_Nq6qzpHABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDUE5ymYe-OdRVXghvfQBPf9o5V8YvldloQKyZjrX3V3LGwOxScxza5zk_OjwD4fbaJxJJyqAAD5WfITL7j800sSXA_k7MmsB23YhgB%26sig%3DAOD64_2yCe-b08zn5s_B0fbNdrZnEDLmZw%26client%3Dca-pub-6044557359746051%26dbm_c%3DAKAmf-C0K0D2tVY7b2P5Nm4uMUtFPAfPm3gAR_a4dIefcee2nWPQGvYLl_GPRTAYiCmU0I7Sq-MHPb2BY111IyVO-g8_xqSc7SuUnwr_YzK8iWPlMlOf9VikQ63HxOfY3FMtuzoqzxz0GeSmWUOUvVkrmuKylShWnjEiEl287ukso6XO-brLbsQ%26cry%3D1%26dbm_d%3DAKAmf-BZOM1qRHaHCSw6T46Ek6XbBwGZSH2HgJ7KBkU63A5cW8o3jeAK5qtJzVc3KcqSNaz0GFpTzS8_w1sny95WmeBGfxgLz8rYRUzp-qGI2dlzlYPB2G4wThrdA8ldKFkRIyOFhCS2ESkoKxiqv9SyyBEFFJvNVU_wSHGfziLFf637MVEOxEpU5s1_X8_o5PtzqxwXm9yTZm6TKfx4U9qMXeOHb3qsreN5EGd8ZhBBJUwv_fdz6ZfgO5z4nYXf6WP4bGz7giGXRxfkQrsuTbQPAusWZaQ7k8CinQNXWhIoOmpm6nrr84g_JQ2Qh3obnCxQDOyO3P21U-onmh1PuTwovbWMIutyufZFto_NlA1suIyzj3zI5fv2Ip3E94-hGkfuosbeMdlGKglNGSyZfifbD3yGxVZ-5nLCveDEJj4paFdDj0GnVLDCydz7O_vvakGDzkhfL69WKfAs8uJeFpCJOSNwFVkR1AbmnfV3XYLm3dlZWTM4m5Chs4Iv6hF1vwjNRo1TgAAixZk8rDPVw_hqk2amjodgkuM7ujmk9QVy7-z7PTp155g%26adurl%3D&documentReferer=https%3A%2F%2Fdevid.info%2F&ancestorOrigins=null&random=791591460594&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with CRLF line terminators
Hash 8b738b991b9163b418cb15e9e3d0b3c9
5d76b1a565485a718dc63cb1796e3203af0a0446
b302fc4d0b83703f18560f779fd87b68b5f5f1dded62990c1d641aa15a2ad7d5
GET /request.php?zone=hs81rewhznnj&nw=20&renderingType=javascript&namespace=d3e2187fb0&subid=&uid=a3313990133926a2&screenSize=1280x1024&screenSizeAvail=1280x1002&clientSize=200x200&scrollPos=0x0&extData[]=&envData=&gdpr=-1&gdpr_consent=&ud=&redirectClick=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCnaCnk2khZIG5OIPgZfTCh_AIybminGn0wc3O1Q_wLhABIK2bmFhgw4SAgJgYyAEJqQJX7qvQOQ2yPqgDAaoE1QFP0KT6RMHdbv6YNexlkBxaEHwOaqzcHTqVlYBVr-mZoyPNJDU1pogsvpe0DAmZ8OuPYS2MicL9X20eSWKhl_lyvM5MSUJZmEwLPJKPW2EiPOaYRm32w_JtoRnoOdiuAMZ2ZJ3l9pwJefug7Bk2Ydbj5PfQSPxQVrV5t0kNGE2E0rywxCeh4XWzcS8rXRXgPWijh6eWlJJaH8NEcgRhGWpWcTjrufXbgkZp-ZvQraF8Y02J8ZhI1L_Phs6LxFo_7k0N51LYs7S4bLPAyI8sqF9_Nq6qzpHABMG9lPzzA-AEA5AGAaAGTYAHrK31nwOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggRCIDhgBAQARgdMgKqAjoCgECACgOYCwHICwGADAGwE5yizQ7QEwDYEwPYFAHQFQH4FgGAFwE%26ae%3D1%26num%3D1%26cid%3DCAQSSwDUE5ymYe-OdRVXghvfQBPf9o5V8YvldloQKyZjrX3V3LGwOxScxza5zk_OjwD4fbaJxJJyqAAD5WfITL7j800sSXA_k7MmsB23YhgB%26sig%3DAOD64_2yCe-b08zn5s_B0fbNdrZnEDLmZw%26client%3Dca-pub-6044557359746051%26dbm_c%3DAKAmf-C0K0D2tVY7b2P5Nm4uMUtFPAfPm3gAR_a4dIefcee2nWPQGvYLl_GPRTAYiCmU0I7Sq-MHPb2BY111IyVO-g8_xqSc7SuUnwr_YzK8iWPlMlOf9VikQ63HxOfY3FMtuzoqzxz0GeSmWUOUvVkrmuKylShWnjEiEl287ukso6XO-brLbsQ%26cry%3D1%26dbm_d%3DAKAmf-BZOM1qRHaHCSw6T46Ek6XbBwGZSH2HgJ7KBkU63A5cW8o3jeAK5qtJzVc3KcqSNaz0GFpTzS8_w1sny95WmeBGfxgLz8rYRUzp-qGI2dlzlYPB2G4wThrdA8ldKFkRIyOFhCS2ESkoKxiqv9SyyBEFFJvNVU_wSHGfziLFf637MVEOxEpU5s1_X8_o5PtzqxwXm9yTZm6TKfx4U9qMXeOHb3qsreN5EGd8ZhBBJUwv_fdz6ZfgO5z4nYXf6WP4bGz7giGXRxfkQrsuTbQPAusWZaQ7k8CinQNXWhIoOmpm6nrr84g_JQ2Qh3obnCxQDOyO3P21U-onmh1PuTwovbWMIutyufZFto_NlA1suIyzj3zI5fv2Ip3E94-hGkfuosbeMdlGKglNGSyZfifbD3yGxVZ-5nLCveDEJj4paFdDj0GnVLDCydz7O_vvakGDzkhfL69WKfAs8uJeFpCJOSNwFVkR1AbmnfV3XYLm3dlZWTM4m5Chs4Iv6hF1vwjNRo1TgAAixZk8rDPVw_hqk2amjodgkuM7ujmk9QVy7-z7PTp155g%26adurl%3D&documentReferer=https%3A%2F%2Fdevid.info%2F&ancestorOrigins=null&random=791591460594&isIframe=1&container=&adPos=0x0&adPosCheck=1x1&adtagId=0&uidRedirect=1 HTTP/1.1
Host: hal900017.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d78366f658f7ddb7c3a93e693ce6121c.safeframe.googlesyndication.com/
Connection: keep-alive
Cookie: 8lcfmzhxc8d6_uid=ef3a9887bf46cdb8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:57 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Mon, 27 Mar 2023 11:01:57 +0200
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 8lcfmzhxc8d6_uid=ef3a9887bf46cdb8; expires=Sun, 25-Jun-2023 10:01:57 GMT; Max-Age=7776000; path=/; domain=.redintelligence.net; secure; SameSite=None
X-NEORY-SubId: 55127200067057304439906012276017
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 512
Connection: close
Content-Type: application/x-javascript; charset=utf-8
de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV
200 OK 75 B URL HTTP/2 de.tynt.com/deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 1ca09ed98f39d2adb7fab3878d13c0cb
da2a6f2431a34dfcc99b6f4500833f783f149d19
e170d20dbbd5a22f50118e25fa2eefb1e85d2ad780e5477ed3a9643186090442
GET /deb/?m=xch&rt=html&sid=0010b00002CpYhEAAV HTTP/1.1
Host: de.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=86400
expires: Tue, 28 Mar 2023 10:01:57 GMT
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile
referrer-policy: unsafe-url
content-type: text/html
content-length: 75
date: Mon, 27 Mar 2023 10:01:56 GMT
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 982dbdfb1a85449070feadd9785b9246
513ebf5368da99103f1d271e2f60b506b970332c
94d57b3ec2995940a9a24f65fa5aadc8e0bc67a0fc929135c069743f1ce4b18e
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=167769
Date: Mon, 27 Mar 2023 10:01:57 GMT
Etag: "6421477b-1d7"
Expires: Wed, 29 Mar 2023 08:38:06 GMT
Last-Modified: Mon, 27 Mar 2023 07:36:27 GMT
Server: ECAcc (nya/78CB)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: VaE253-sEjdNeG7Kv3fn0opC2xB-2qpKxrlV48iz41pLLwcNxH9XPw==
Age: 3699
ocsp.sectigo.com/
200 OK 471 B IP
Hash a3fab13674eba4fa324f78a10795d148
f26607983fdc53ab77287e4481642f3f0bd6da6b
adbf6c6f3e40b4f3c60a19755ccf926a4213de6e1d24503785d645f739b529b2
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:58 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 25 Mar 2023 13:57:48 GMT
Expires: Sat, 01 Apr 2023 13:57:47 GMT
Etag: "f26607983fdc53ab77287e4481642f3f0bd6da6b"
Cache-Control: max-age=445548,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ae6cb896ea1fac0-OSL
sync.go.sonobi.com/us?loc=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsonobi-usync%3Fuid%3D%5BUID%5D
302 Found 0 B URL HTTP/1.1 sync.go.sonobi.com/us?loc=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsonobi-usync%3Fuid%3D%5BUID%5D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /us?loc=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fsonobi-usync%3Fuid%3D%5BUID%5D HTTP/1.1
Host: sync.go.sonobi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Mon, 27 Mar 2023 10:01:57 GMT
Content-Type: text/plain; charset=utf8
Content-Length: 0
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, no-store, private
P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Pragma: no-cache
Tcn: Choice
Vary: negotiate,Accept-Encoding
X-Go-Server: go-iad-2-5-177
X-Xss-Protection: 0
Location: https://router.infolinks.com/dyn/sonobi-usync?uid=4f78d134-accb-407d-9883-428a5f4d21ee
Server: sonobi-go
Set-Cookie: __uis=4f78d134-accb-407d-9883-428a5f4d21ee; expires=Wed, 26 Apr 2023 10:01:57 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None
HAPLB8S=s87157|ZCFpm; path=/; domain=.go.sonobi.com; SameSite=None; secure
ssp.disqus.com/redirectuser?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fdisus%3Fuid%3D%24UID&partner=infolinks
302 Found 0 B URL HTTP/2 ssp.disqus.com/redirectuser?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fdisus%3Fuid%3D%24UID&partner=infolinks
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirectuser?r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fdisus%3Fuid%3D%24UID&partner=infolinks HTTP/1.1
Host: ssp.disqus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 27 Mar 2023 10:01:58 GMT
content-length: 0
location: https://router.infolinks.com/dyn/disus?uid=ua-bd93c5a6-a48a-3062-a9eb-49db1b2d204a
server: nginx/1.22.1
cache-control: no-store
pragma: no-cache
expires: 0
set-cookie: zeta-ssp-user-id=ua-bd93c5a6-a48a-3062-a9eb-49db1b2d204a; Max-Age=31536000; Expires=Tue, 26 Mar 2024 10:01:58 GMT; Path=/; Domain=disqus.com; Secure; SameSite=None
X-Firefox-Spdy: h2
router.infolinks.com/dyn/zmn-usync?uid=
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/zmn-usync?uid=
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/zmn-usync?uid= HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:58 GMT
content-type: image/gif
content-length: 35
cache-control: no-store
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7ae6cb89aaa4b50c-OSL
X-Firefox-Spdy: h2
router.infolinks.com/dyn/zeta-usync?uid=5144588523956405454
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/zeta-usync?uid=5144588523956405454
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/zeta-usync?uid=5144588523956405454 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:58 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: ZTUSERCOOKIE=5144588523956405454; Domain=infolinks.com; Expires=Sun, 25-Jun-2023 10:01:58 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Sun, 27 Mar 2022 10:01:58 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7ae6cb89babfb50c-OSL
X-Firefox-Spdy: h2
ssc-cms.33across.com/ps/?ri=0010b00002CpYhEAAV&ru=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2F33a-usync%3Fuid%3D33XUSERID33X
204 No Content 0 B URL HTTP/2 ssc-cms.33across.com/ps/?ri=0010b00002CpYhEAAV&ru=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2F33a-usync%3Fuid%3D33XUSERID33X
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ps/?ri=0010b00002CpYhEAAV&ru=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2F33a-usync%3Fuid%3D33XUSERID33X HTTP/1.1
Host: ssc-cms.33across.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
x-33x-status: 2000208
server: 33XP012
date: Mon, 27 Mar 2023 10:01:57 GMT
X-Firefox-Spdy: h2
router.infolinks.com/dyn/sonobi-usync?uid=4f78d134-accb-407d-9883-428a5f4d21ee
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/sonobi-usync?uid=4f78d134-accb-407d-9883-428a5f4d21ee
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/sonobi-usync?uid=4f78d134-accb-407d-9883-428a5f4d21ee HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:58 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: SONOBIUSERCOOKIE=4f78d134-accb-407d-9883-428a5f4d21ee; Domain=infolinks.com; Expires=Sun, 25-Jun-2023 10:01:58 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Sun, 27 Mar 2022 10:01:58 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7ae6cb8b2cc6b50c-OSL
X-Firefox-Spdy: h2
router.infolinks.com/dyn/disus?uid=ua-bd93c5a6-a48a-3062-a9eb-49db1b2d204a
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/disus?uid=ua-bd93c5a6-a48a-3062-a9eb-49db1b2d204a
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/disus?uid=ua-bd93c5a6-a48a-3062-a9eb-49db1b2d204a HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:58 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: DISUSERCOOKIE=ua-bd93c5a6-a48a-3062-a9eb-49db1b2d204a; Domain=infolinks.com; Expires=Sun, 25-Jun-2023 10:01:58 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Sun, 27 Mar 2022 10:01:58 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7ae6cb8b2cd0b50c-OSL
X-Firefox-Spdy: h2
hal900019.redintelligence.net/request_content.php?s=28434300089623704439906012276019&a=87dfc532
200 OK 1.5 kB URL HTTP/1.1 hal900019.redintelligence.net/request_content.php?s=28434300089623704439906012276019&a=87dfc532
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 8570bcdfb6b952a8872595c0a3394e72
88a849c17afe946bfcda87a91791c4205498c60f
ff890ba7759640679b4e112181cca57f5e9261108f872bfc37f5510d942f0ade
GET /request_content.php?s=28434300089623704439906012276019&a=87dfc532 HTTP/1.1
Host: hal900019.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d78366f658f7ddb7c3a93e693ce6121c.safeframe.googlesyndication.com/
Cookie: 8lcfmzhxc8d6_uid=ef3a9887bf46cdb8
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:58 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Mon, 27 Mar 2023 11:01:58 +0200
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1490
Connection: close
Content-Type: text/html; charset=utf-8
hal900017.redintelligence.net/request_content.php?s=55127200067057304439906012276017&a=2a181782
200 OK 2.3 kB URL HTTP/1.1 hal900017.redintelligence.net/request_content.php?s=55127200067057304439906012276017&a=2a181782
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 480ecbfc25ef0f12176e5067b939f349
54b3ad6454331574014996a599a73fafa002f682
775d027f89f7b760a8c4ebfa7efd14a2791916f19cc70d4fd6201ddbb935cadd
GET /request_content.php?s=55127200067057304439906012276017&a=2a181782 HTTP/1.1
Host: hal900017.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d78366f658f7ddb7c3a93e693ce6121c.safeframe.googlesyndication.com/
Cookie: 8lcfmzhxc8d6_uid=ef3a9887bf46cdb8
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:58 GMT
Server: Apache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Expires: Mon, 27 Mar 2023 11:01:58 +0200
Pragma: no-cache
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2277
Connection: close
Content-Type: text/html; charset=utf-8
router.infolinks.com/dyn/r1-usync?uid=OPTOUT
200 OK 35 B URL HTTP/2 router.infolinks.com/dyn/r1-usync?uid=OPTOUT
IP
File type GIF image data, version 87a, 1 x 1\012- data
Hash c0a97b478925284bd94e3271f6197c08
543e1556715b858c654397c62c0894dd6f294703
16957a3bb9422d4ba380be3b630db7a310e87e65f224e2be865dd64dd0b5664d
GET /dyn/r1-usync?uid=OPTOUT HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:58 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, private
set-cookie: R1USERCOOKIE=OPTOUT; Domain=infolinks.com; Expires=Sun, 25-Jun-2023 10:01:58 GMT; Path=/; SameSite=None; Secure
pragma: no-cache
expires: Sun, 27 Mar 2022 10:01:58 GMT
p3p: CP="NON DSP NID OUR COR"
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7ae6cb8cbf50b50c-OSL
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js
200 OK 32 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32764)
Hash 548260b20981c0be2d9dcf8d01c08c24
84230120f8f1bd559eca3fb2fec6acf6cffbf4e7
2f8a612a714e5c928525fdb193f8ec12f7965a6c0d63dd8e58ccae239358c8bb
GET /ajax/libs/jquery/1.6.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hal900017.redintelligence.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 32245
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Mar 2023 18:05:12 GMT
expires: Thu, 21 Mar 2024 18:05:12 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 403007
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
imasdk.googleapis.com/js/sdkloader/ima3.js
200 OK 123 kB URL HTTP/2 imasdk.googleapis.com/js/sdkloader/ima3.js
IP
File type ASCII text, with very long lines (2723)
Size 123 kB (123080 bytes)
Hash 14d75f4c061187204469de0efb779296
e7d5448498e4043d6c3fd835d9da5008a9da9de6
a1d65394e0662a8c448693fca377cdb7e9c909cfeca826f7baaa514fb458ffb4
GET /js/sdkloader/ima3.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 123080
date: Mon, 27 Mar 2023 10:01:59 GMT
expires: Mon, 27 Mar 2023 10:01:59 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
hal900019.redintelligence.net/viewability?s=28434300089623704439906012276019&a=784072db&vb=m
200 OK 0 B URL HTTP/1.1 hal900019.redintelligence.net/viewability?s=28434300089623704439906012276019&a=784072db&vb=m
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /viewability?s=28434300089623704439906012276019&a=784072db&vb=m HTTP/1.1
Host: hal900019.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hal900019.redintelligence.net/request_content.php?s=28434300089623704439906012276019&a=87dfc532
Cookie: 8lcfmzhxc8d6_uid=ef3a9887bf46cdb8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:59 GMT
Server: Apache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
gum.criteo.com/syncframe?origin=publishertag&topUrl=devid.info
200 OK 5.6 kB URL HTTP/2 gum.criteo.com/syncframe?origin=publishertag&topUrl=devid.info
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (13465)
Hash 4f53034a0cd5a3d76b1990d9d3d3d0aa
451b32f75a04ab61a1bd36d6ce80c46dad146b9a
d8f1916c5e58a16b950fe897447c14c31b9567dbd07ff8b0df84500aa1f6babb
GET /syncframe?origin=publishertag&topUrl=devid.info HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:58 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: optout=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; domain=.criteo.com; path=/
uid=ed668d84-9da0-4781-a8dd-1fb3cd3763dd; expires=Sat, 20 Apr 2024 10:01:58 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 811059
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.contentspread.net/24i/content/soberfb/EN/S-200x200.gif
200 OK 27 kB URL HTTP/1.1 cdn.contentspread.net/24i/content/soberfb/EN/S-200x200.gif
IP
ASN #24961 myLoc managed IT AG
File type GIF image data, version 89a, 200 x 200\012- data
Hash aa3acfbc1376e8006cf79f6d9957b680
1fbc9c1aff280fa0b2300efc8dee51932e162bc9
85741ac752819606028c76e52c03224052cb1edce9aa4beaba43fda445a68550
GET /24i/content/soberfb/EN/S-200x200.gif HTTP/1.1
Host: cdn.contentspread.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hal900019.redintelligence.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 27 Mar 2023 10:01:59 GMT
Content-Type: image/gif
Content-Length: 27413
Last-Modified: Mon, 23 Jul 2018 15:19:53 GMT
Connection: close
ETag: "5b55f219-6b15"
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 313 B IP
Hash 96bff9e8dbe8c53364c5923786fb44ff
7a32e02111f933cd8fbe645810024a13334ac270
bfa3dde0bbfe555b0833e4eb25f91192d8cd88847262967086a27cdca6cc2715
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2619
Cache-Control: max-age=160937
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:59 GMT
Etag: "64213105-139"
Expires: Wed, 29 Mar 2023 06:44:16 GMT
Last-Modified: Mon, 27 Mar 2023 06:00:37 GMT
Server: ECAcc (ska/F7A3)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 96bff9e8dbe8c53364c5923786fb44ff
7a32e02111f933cd8fbe645810024a13334ac270
bfa3dde0bbfe555b0833e4eb25f91192d8cd88847262967086a27cdca6cc2715
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2619
Cache-Control: max-age=160937
Content-Type: application/ocsp-response
Date: Mon, 27 Mar 2023 10:01:59 GMT
Etag: "64213105-139"
Expires: Wed, 29 Mar 2023 06:44:16 GMT
Last-Modified: Mon, 27 Mar 2023 06:00:37 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 313
hal900017.redintelligence.net/viewability?s=55127200067057304439906012276017&a=e5cebaa2&vb=m
200 OK 0 B URL HTTP/1.1 hal900017.redintelligence.net/viewability?s=55127200067057304439906012276017&a=e5cebaa2&vb=m
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /viewability?s=55127200067057304439906012276017&a=e5cebaa2&vb=m HTTP/1.1
Host: hal900017.redintelligence.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hal900017.redintelligence.net/request_content.php?s=55127200067057304439906012276017&a=2a181782
Cookie: 8lcfmzhxc8d6_uid=ef3a9887bf46cdb8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:59 GMT
Server: Apache
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
ocsp.sectigo.com/
200 OK 471 B IP
Hash 29869f4ac263f73c5d635648249bb318
389a867b52935bf0faf892243ec508366154f178
62ecaf4aa7c47b769a496e5314870d627d8e95139737a8fdf3a14f4f702f6a15
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 27 Mar 2023 10:01:59 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 23:23:28 GMT
Expires: Thu, 30 Mar 2023 23:23:27 GMT
Etag: "389a867b52935bf0faf892243ec508366154f178"
Cache-Control: max-age=306687,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ae6cb747f07fac4-OSL
dnacdn.net/dna
200 OK 88 kB IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (46979), with CRLF line terminators
Hash 953fd8b77dd873edbadb46fce99766cd
93626f2948aee0383bebe0b4bc4e79dce887b4df
2004d0a2692982f0c96f3e91a5e7cb9955d8d04c4b37b48300c079db3f5d53cb
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=RUM3F180M0RITmhlJTJCZkMwOUJGQlhaMUN2c3lZeGVUZkRIWVQ1JTJGbiUyQndvJTJGV01wdE5OYzF3aXRkd2RWRUYxVzB6SDN3a1g
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:58 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=2G983F80M0RITmhlJTJCZkMwOUJGQlhaMUN2c3lZeGVUZkRIWVQ1JTJGbiUyQndvJTJGV01wdFB3bGQ1YkN5ckhGYUswallETEUlMkJVSg; expires=Sat, 20 Apr 2024 10:01:59 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 343665
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:58 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 55824
strict-transport-security: max-age=31536000; preload;
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
launchpad-wrapper.privacymanager.io/254e8faf-1bb3-4d9e-abe4-4de67dd858fb/launchpad-liveramp.js
200 OK 0 B URL HTTP/2 launchpad-wrapper.privacymanager.io/254e8faf-1bb3-4d9e-abe4-4de67dd858fb/launchpad-liveramp.js
IP
GET /254e8faf-1bb3-4d9e-abe4-4de67dd858fb/launchpad-liveramp.js HTTP/1.1
Host: launchpad-wrapper.privacymanager.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
x-amz-replication-status: COMPLETED
last-modified: Thu, 29 Dec 2022 10:06:32 GMT
x-amz-server-side-encryption: AES256
content-disposition: attachment; filename="launchpad-liveramp.js"
x-amz-version-id: R7uG3o8.xyzWgZKND2fHAaq6SNIjWHN4
server: AmazonS3
content-encoding: gzip
date: Sun, 26 Mar 2023 23:19:54 GMT
etag: W/"7e6490f7965ad11efd07679c593aaebb"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: exTuZxURW5hyfNzUTCNnBmkyk0-pYU7Lz5ZWFRFtUrtbTUp8ig_Rzw==
age: 38519
X-Firefox-Spdy: h2
shb.richaudience.com/hb/
200 OK 0 B IP
ASN #24940 Hetzner Online GmbH
POST /hb/ HTTP/1.1
Host: shb.richaudience.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 813
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.2
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: https://devid.info
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: gzip
X-Firefox-Spdy: h2
rt3061.infolinks.com/action/doq.htm?pcode=utf-8&r=16799113348601
200 OK 0 B URL HTTP/2 rt3061.infolinks.com/action/doq.htm?pcode=utf-8&r=16799113348601
IP
POST /action/doq.htm?pcode=utf-8&r=16799113348601 HTTP/1.1
Host: rt3061.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 2409
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:57 GMT
content-type: text/html;charset=UTF-8
x-application-context: application:prod
access-control-allow-origin: https://devid.info
vary: Origin
access-control-allow-credentials: true
cache-control: no-cache,no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: cuid=11e62ad1-932e-4c57-b620-67de1d6e02fc; Domain=infolinks.com; Expires=Wed, 26-Mar-2025 10:01:57 GMT; Path=/; SameSite=None
p3p: CP="NON DSP NID OUR COR"
content-language: en-US
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7ae6cb841f3eb51b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
shb.richaudience.com/hb/
200 OK 0 B IP
ASN #24940 Hetzner Online GmbH
POST /hb/ HTTP/1.1
Host: shb.richaudience.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 848
Origin: https://devid.info
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.2
date: Mon, 27 Mar 2023 10:01:54 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: https://devid.info
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: gzip
X-Firefox-Spdy: h2
btloader.com/tag?o=5766703155773440&upapi=true
200 OK 0 B URL HTTP/2 btloader.com/tag?o=5766703155773440&upapi=true
IP
GET /tag?o=5766703155773440&upapi=true HTTP/1.1
Host: btloader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:52 GMT
content-type: application/javascript
cache-control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300
etag: W/"3cf258f75c7a675d42b10122596e7c17"
last-modified: Mon, 27 Mar 2023 09:03:39 GMT
vary: Origin, Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
age: 3330
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WUXDvEQNvgWFJVmD8rFqjVdjSk5TV24%2FQmWQvEBX6zNkhRCONsdI7Y9jf4bzfyiqzvRU7bJcFNohSjHhVAP1hNDIuasD7xr0EzF2VG5DzdbObCu7JpzcQ1P%2BOxHi5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ae6cb64bb431c0e-OSL
content-encoding: br
X-Firefox-Spdy: h2
mrb.upapi.net/org?o=5766703155773440&upapi=true
302 Found 0 B URL HTTP/2 mrb.upapi.net/org?o=5766703155773440&upapi=true
IP
GET /org?o=5766703155773440&upapi=true HTTP/1.1
Host: mrb.upapi.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 27 Mar 2023 10:01:52 GMT
location: https://btloader.com/tag?o=5766703155773440&upapi=true&upapi=true
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j8MBkEKBjSSMDnKWqZiyhvFY8M%2F%2BVx2AdmRs%2Fr%2BZPOFNXQSzg7qTaJrgKaYRZVGQ%2F1hDZWZonxA1UgAD5b%2FjES7xmxNjD9OI2P0RlfuVO3nUTAriHYpKCL6wSLL1T%2Bk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ae6cb654c400b4d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
top-fwz1.mail.ru/js/code.js
200 OK 0 B URL HTTP/2 top-fwz1.mail.ru/js/code.js
IP
GET /js/code.js HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 27 Mar 2023 10:01:55 GMT
content-type: application/javascript
last-modified: Tue, 21 Mar 2023 13:41:37 GMT
set-cookie: FTID=1RMYgQ0tkIIG:1679911315:0:::; path=/; expires=Wed, 27-Mar-24 10:01:55 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
etag: W/"6419b411-85fb"
expires: Mon, 27 Mar 2023 11:01:55 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: max-age=3600, private
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
content-encoding: gzip
X-Firefox-Spdy: h2
ats.rlcdn.com/ats.js
200 OK 0 B IP
GET /ats.js HTTP/1.1
Host: ats.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Thu, 19 Jan 2023 10:03:36 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-codebuild-content-sha256: 3efbae2e7f7f574316dfc685479946d213531c0b483ab4a61e653a0088f0cae8
x-amz-version-id: FdZQKnEndO3mqmnRp7XQ3uMfeJERmMlw
x-amz-meta-codebuild-buildarn: arn:aws:codebuild:eu-west-1:469675294282:build/ATSLibrary-prod:96f94076-69de-4a4b-8bd0-6fb739c06860
x-amz-meta-codebuild-content-md5: e16bd58aa55fcc98af3b10870aad5974
server: AmazonS3
content-encoding: gzip
date: Mon, 27 Mar 2023 01:59:38 GMT
cache-control: must-revalidate,public,max-age=86400
etag: W/"0820c3a8da5dbe428619a7328c53b95f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iGkZCJiXaiBlMIdBPhvhj4zDbPigIfMnEfUbuDTEv8Zkw_Z6gg_gvA==
age: 28935
X-Firefox-Spdy: h2
sync.1rx.io/usersync2/infolinks
302 Found 0 B URL HTTP/2 sync.1rx.io/usersync2/infolinks
IP
GET /usersync2/infolinks HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 27 Mar 2023 10:01:58 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-1593161e-5b64-444a-8885-755e1252e313-003%22%2C%22zdxidn%22%3A%222109%22%7D; path=/; expires=Tue, 26 Mar 2024 10:01:58 GMT; domain=.1rx.io; samesite=none; secure; httponly
p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why"
location: https://sync.1rx.io/usersync2/infolinks?zcc=1&cb=1679911318428
etag: RX1593161e5b64444a8885755e1252e313003
X-Firefox-Spdy: h2
cdn.adapex.io/hb/aaw.devid.js
200 OK 0 B URL HTTP/2 cdn.adapex.io/hb/aaw.devid.js
IP
GET /hb/aaw.devid.js HTTP/1.1
Host: cdn.adapex.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:52 GMT
content-type: application/javascript
last-modified: Thu, 23 Mar 2023 10:19:43 GMT
vary: Accept-Encoding
etag: W/"641c27bf-9bb35"
expires: Sun, 26 Mar 2023 18:55:52 GMT
cache-control: public, max-age=86400
access-control-allow-origin: *
cf-cache-status: HIT
age: 78820
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J%2FLv7F27aiMMo%2F%2B6TRVX0z%2BhyszOAh8LYQKtHpgl4KIAimzMWVEhOFXQUcDOK89q1nypj%2F3A%2BXJ5%2F%2FBticVk%2FK%2B2Cj%2Bq3YpS26OPHsLxWZKUmwcGsLI832w6i1PwwYki"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ae6cb655ae4731b-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
counter.rambler.ru/top100.jcn?2729707
200 OK 0 B URL HTTP/2 counter.rambler.ru/top100.jcn?2729707
IP
ASN #24638 Rambler Internet Holding LLC
GET /top100.jcn?2729707 HTTP/1.1
Host: counter.rambler.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.19.4
date: Mon, 27 Mar 2023 10:01:52 GMT
content-type: application/octet-stream
set-cookie: ruid=1CIAAJBpIWTKQwiuAVFKRAB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
proto_uid=1CIAAJBpIWTKQwiuAVFKRAB=; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.rambler.ru; path=/
p3p: CP="NON DSP NID ADMa DEVa TAIa PSAa PSDa OUR IND UNI COM NAV"
X-Firefox-Spdy: h2
resources.infolinks.com/js/1853.004-3.025/ice.js
200 OK 0 B URL HTTP/2 resources.infolinks.com/js/1853.004-3.025/ice.js
IP
GET /js/1853.004-3.025/ice.js HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:56 GMT
content-type: application/javascript
last-modified: Mon, 20 Mar 2023 11:31:12 GMT
etag: W/"2e0ee-5f75343a79149"
cache-control: max-age=2592000
expires: Wed, 26 Apr 2023 07:23:12 GMT
via: 1.1 google
cf-cache-status: HIT
age: 9524
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ae6cb81af44b50c-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
sync.1rx.io/usersync2/infolinks?zcc=1&cb=1679911318428
302 Found 0 B URL HTTP/2 sync.1rx.io/usersync2/infolinks?zcc=1&cb=1679911318428
IP
GET /usersync2/infolinks?zcc=1&cb=1679911318428 HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://router.infolinks.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Mon, 27 Mar 2023 10:01:58 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
location: https://router.infolinks.com/dyn/r1-usync?uid=OPTOUT
etag: OPTOUT
X-Firefox-Spdy: h2
devid.info/ru/208427/islim310
200 OK 0 B URL HTTP/2 devid.info/ru/208427/islim310
IP
GET /ru/208427/islim310 HTTP/1.1
Host: devid.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:51 GMT
content-type: text/html; charset=utf-8
x-powered-by: LiveStreet CMS
cache-control: max-age=86400, must-revalidate
expires: Mon, 03 Apr 2023 10:01:51 GMT
set-cookie: PHPSESSID=9m59ced72coag24j98l3slc2m3; path=/
pragma: public
last-modified: Mon, 27 Mar 2023 10:01:51 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F6951iV7cFJxfK3woHxr7xR2P4FagKz7BDpck5SnR5WHBL79QzIRFvb0%2BkWljo38hobN%2Fz%2Bka4olHJVb65sSbQEw%2FNrgSFzgHK5ckQYp1IOw%2FVioTi0h0M3wHRnh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ae6cb604a2db517-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
st.vk.com/css/al/fonts_cnt.a289ed70815ffbd082ae.css
200 OK 0 B URL HTTP/2 st.vk.com/css/al/fonts_cnt.a289ed70815ffbd082ae.css
IP
GET /css/al/fonts_cnt.a289ed70815ffbd082ae.css HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Mon, 27 Mar 2023 10:01:53 GMT
content-type: text/css
content-length: 254072
last-modified: Mon, 06 Feb 2023 15:27:38 GMT
etag: "63e11c6a-3e078"
content-encoding: br
expires: Fri, 31 Mar 2023 10:01:53 GMT
cache-control: max-age=345600
x-frontend: front609304
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
sync.1rx.io/usersync2/rmpssp?sub=infolinks
302 Found 0 B URL HTTP/2 sync.1rx.io/usersync2/rmpssp?sub=infolinks
IP
GET /usersync2/rmpssp?sub=infolinks HTTP/1.1
Host: sync.1rx.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://router.infolinks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 27 Mar 2023 10:01:57 GMT
content-type: text/html
cache-control: no-store, no-cache, must-revalidate
expires: 0
pragma: no-cache
set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-57df03e4-ad8c-44ae-8132-90aaf7b2996e-003%22%2C%22zdxidn%22%3A%222069.56%22%7D; path=/; expires=Tue, 26 Mar 2024 10:01:57 GMT; domain=.1rx.io; samesite=none; secure; httponly
p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why"
location: https://sync.1rx.io/usersync2/rmpssp?sub=infolinks&zcc=1&cb=1679911317520
etag: RX57df03e4ad8c44ae813290aaf7b2996e003
X-Firefox-Spdy: h2
resources.infolinks.com/js/1853.004-3.025/bubble.js
200 OK 0 B URL HTTP/2 resources.infolinks.com/js/1853.004-3.025/bubble.js
IP
GET /js/1853.004-3.025/bubble.js HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://devid.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Mar 2023 10:01:58 GMT
content-type: application/javascript
last-modified: Mon, 20 Mar 2023 11:31:12 GMT
etag: W/"26f1b-5f75343a78590"
cache-control: max-age=2592000
expires: Wed, 26 Apr 2023 07:16:03 GMT
via: 1.1 google
cf-cache-status: HIT
age: 9955
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ae6cb8f7b93b50c-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
172.67.219.38
185.239.173.66
104.18.25.185
87.240.185.161
67.220.224.150
178.250.1.3
2.18.172.23
69.173.144.140
185.80.36.245
147.75.85.234