{"report_id":"a76f50de-3559-47dc-991d-59f565bc7520","version":6,"status":"done","tags":[],"date":"2025-12-19T21:52:27Z","url":{"schema":"http","addr":"dignomaden.com","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"104.21.26.108","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dignomaden.com/","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"title":"dignomaden - Dig Nomaden","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dignomaden.com","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"104.21.26.108","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-23T21:52:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-19T21:52:08Z","timestamp":1766181128,"ip_dst":{"addr":"172.18.0.10","port":32874,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"185.115.93.200","port":443,"asn":42881,"as":"Sc Itns.net Srl","country":"Moldova","country_code":"MD"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 36","source":"{\"timestamp\":\"2025-12-19T21:52:08.439690+0000\",\"flow_id\":533704598897881,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"185.115.93.200\",\"src_port\":443,\"dest_ip\":\"172.18.0.10\",\"dest_port\":32874,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400035,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 36\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2025-12-19T21:52:08.410841+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"otclick-adv.ru","ip":{"addr":"139.45.228.134","port":443,"asn":57304,"as":"JSC RetnNet","country":"Russia","country_code":"RU"},"domain_registered":"2011-01-17","domain_rank":27130,"first_seen":"2015-09-17T11:20:30Z","last_seen":"2025-12-17T10:03:56.775332Z","alert_count":0,"request_count":1,"received_data":724,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.dvgroup.com","ip":{"addr":"82.148.21.217","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"1998-09-12","domain_rank":429256,"first_seen":"2024-09-03T12:22:07Z","last_seen":"2025-12-17T06:52:56.921748Z","alert_count":0,"request_count":1,"received_data":250,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sync.dmp.otm-r.com","ip":{"addr":"194.55.244.179","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"domain_registered":"2014-01-16","domain_rank":124233,"first_seen":"2017-02-03T07:19:51Z","last_seen":"2025-12-17T05:28:32.625027Z","alert_count":0,"request_count":2,"received_data":792,"sent_data":1005,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.adspend.space","ip":{"addr":"5.189.234.229","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2022-02-11","domain_rank":345453,"first_seen":"2022-10-20T06:12:42Z","last_seen":"2025-12-16T20:12:59.793464Z","alert_count":0,"request_count":2,"received_data":1059,"sent_data":998,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.26.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dm.hybrid.ai","ip":{"addr":"37.230.131.22","port":443,"asn":200197,"as":"Hybrid Adtech Sp.z.o.o.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-12-19","domain_rank":93939,"first_seen":"2018-08-22T12:51:55Z","last_seen":"2025-12-14T16:55:14.352991Z","alert_count":0,"request_count":1,"received_data":344,"sent_data":399,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pixel.dsp.onetarget.ru","ip":{"addr":"130.193.53.230","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2019-04-18","domain_rank":456581,"first_seen":"2024-03-13T16:04:45Z","last_seen":"2025-12-16T06:24:48.329004Z","alert_count":0,"request_count":1,"received_data":637,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"id.seedbacklink.com","ip":{"addr":"103.146.203.63","port":443,"asn":136052,"as":"PT Cloud Hosting Indonesia","country":"Indonesia","country_code":"ID"},"domain_registered":"2022-05-06","domain_rank":2862761,"first_seen":"2022-09-15T17:10:01Z","last_seen":"2025-12-19T13:56:12.908395Z","alert_count":0,"request_count":1,"received_data":48574,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"id.adx.bid","ip":{"addr":"172.67.70.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-17","domain_rank":667222,"first_seen":"2025-05-16T21:23:24.922522Z","last_seen":"2025-12-17T04:46:09.923426Z","alert_count":0,"request_count":1,"received_data":769,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ssp.bidster.net","ip":{"addr":"87.228.58.107","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2023-04-13","domain_rank":430502,"first_seen":"2023-08-04T01:03:10Z","last_seen":"2025-12-15T20:46:01.201756Z","alert_count":0,"request_count":1,"received_data":517,"sent_data":573,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"exchange.buzzoola.com","ip":{"addr":"176.114.74.35","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2010-08-11","domain_rank":80108,"first_seen":"2014-10-17T15:20:27Z","last_seen":"2025-12-16T06:16:39.23062Z","alert_count":0,"request_count":4,"received_data":1939,"sent_data":2723,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssp.bestssp.com","ip":{"addr":"83.222.96.170","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"domain_registered":"2016-05-05","domain_rank":673248,"first_seen":"2017-06-10T08:55:20Z","last_seen":"2025-12-16T06:16:38.850192Z","alert_count":0,"request_count":1,"received_data":332,"sent_data":555,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"rtb.dynotech.io","ip":{"addr":"82.202.197.102","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2024-04-24","domain_rank":372920,"first_seen":"2024-06-21T10:32:20Z","last_seen":"2025-12-16T18:11:47.348835Z","alert_count":0,"request_count":1,"received_data":201,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ssp-statistics.dsp.nt.technology","ip":{"addr":"52.213.188.202","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2019-02-02","domain_rank":50490,"first_seen":"2025-01-30T05:42:21.300558Z","last_seen":"2025-12-18T18:34:53.217971Z","alert_count":0,"request_count":1,"received_data":545,"sent_data":792,"comment":"","tags":null,"fingerprints":null},{"fqdn":"a.bringads.ru","ip":{"addr":"213.171.19.210","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2025-02-06","domain_rank":412835,"first_seen":"2025-05-20T10:33:46.598539Z","last_seen":"2025-12-18T18:34:52.524809Z","alert_count":0,"request_count":1,"received_data":566,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.acint.net","ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"domain_registered":"2014-02-06","domain_rank":175167,"first_seen":"2014-02-14T21:23:16Z","last_seen":"2025-12-17T16:24:46.473346Z","alert_count":0,"request_count":10,"received_data":93709,"sent_data":12721,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"cm.pxltag.com","ip":{"addr":"87.228.57.56","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2025-05-25","domain_rank":0,"first_seen":"2025-11-18T10:18:49.548967Z","last_seen":"2025-12-18T12:24:45.158333Z","alert_count":0,"request_count":1,"received_data":366,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dm-eu.hybrid.ai","ip":{"addr":"37.230.131.22","port":443,"asn":200197,"as":"Hybrid Adtech Sp.z.o.o.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-12-19","domain_rank":74067,"first_seen":"2021-01-25T11:48:59Z","last_seen":"2025-12-13T11:23:22.649557Z","alert_count":0,"request_count":1,"received_data":404,"sent_data":472,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cmr.bidderstack.com","ip":{"addr":"185.149.242.234","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2017-04-25","domain_rank":274973,"first_seen":"2024-06-26T06:54:13Z","last_seen":"2025-12-18T12:24:46.159503Z","alert_count":0,"request_count":1,"received_data":271,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}]},{"fqdn":"mc.acint.net","ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"domain_registered":"2014-02-06","domain_rank":245226,"first_seen":"2024-01-29T15:31:01Z","last_seen":"2025-12-16T20:12:58.998341Z","alert_count":0,"request_count":15,"received_data":6765,"sent_data":29460,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.upravel.com","ip":{"addr":"65.21.90.246","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2017-03-25","domain_rank":187521,"first_seen":"2017-05-29T09:13:46Z","last_seen":"2025-12-17T10:03:57.280379Z","alert_count":0,"request_count":5,"received_data":4134,"sent_data":2536,"comment":"","tags":null,"fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]},{"fqdn":"sync.opendsp.ru","ip":{"addr":"176.114.85.126","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2022-08-24","domain_rank":261604,"first_seen":"2022-09-01T11:01:38Z","last_seen":"2025-12-13T07:10:43.074912Z","alert_count":0,"request_count":2,"received_data":500,"sent_data":941,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"acint.net","ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"domain_registered":"2014-02-06","domain_rank":7617,"first_seen":"2014-02-14T21:23:16Z","last_seen":"2025-12-16T18:11:47.145006Z","alert_count":0,"request_count":7,"received_data":2547,"sent_data":14024,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.adiam.tech","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-12-23","domain_rank":297000,"first_seen":"2024-03-15T20:38:51Z","last_seen":"2025-12-17T04:46:10.700743Z","alert_count":0,"request_count":1,"received_data":914,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"a.videohead.tech","ip":{"addr":"213.171.19.231","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2023-05-30","domain_rank":516081,"first_seen":"2023-06-07T20:20:13Z","last_seen":"2025-12-17T04:46:10.15418Z","alert_count":0,"request_count":1,"received_data":566,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"statmedia.ru","ip":{"addr":"82.148.14.194","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2022-03-25","domain_rank":27502,"first_seen":"2015-08-17T13:20:07Z","last_seen":"2025-12-17T04:46:09.346993Z","alert_count":0,"request_count":1,"received_data":265,"sent_data":513,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mediatoday.ru","ip":{"addr":"194.186.91.198","port":443,"asn":3216,"as":"PVimpelCom","country":"Russia","country_code":"RU"},"domain_registered":"2008-03-02","domain_rank":40250,"first_seen":"2013-05-20T20:53:32Z","last_seen":"2025-12-18T12:24:45.229569Z","alert_count":0,"request_count":1,"received_data":865,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.adspector.io","ip":{"addr":"172.67.161.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-02","domain_rank":213577,"first_seen":"2024-06-28T02:35:48Z","last_seen":"2025-12-18T01:51:28.980621Z","alert_count":0,"request_count":1,"received_data":920,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-14T22:13:59.416786Z","alert_count":0,"request_count":6,"received_data":161466,"sent_data":3290,"comment":"","tags":null,"fingerprints":null},{"fqdn":"a.utraff.com","ip":{"addr":"213.171.19.244","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2016-09-27","domain_rank":179342,"first_seen":"2019-02-27T10:01:37Z","last_seen":"2025-12-16T06:16:38.189679Z","alert_count":0,"request_count":2,"received_data":1322,"sent_data":899,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.lotus-dsp.ru","ip":{"addr":"213.171.19.241","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2023-12-05","domain_rank":395207,"first_seen":"2023-12-09T00:32:38Z","last_seen":"2025-12-18T20:06:25.59316Z","alert_count":0,"request_count":1,"received_data":565,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssp-rtb.sape.ru","ip":{"addr":"193.3.184.93","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"domain_registered":"2006-06-19","domain_rank":153781,"first_seen":"2016-02-02T17:01:03Z","last_seen":"2025-12-14T00:05:25.748382Z","alert_count":0,"request_count":4,"received_data":2165,"sent_data":2400,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ck.silvermob.com","ip":{"addr":"212.95.41.187","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2015-08-25","domain_rank":416424,"first_seen":"2025-03-13T10:51:02.742077Z","last_seen":"2025-12-17T04:46:10.258917Z","alert_count":0,"request_count":1,"received_data":636,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"sync.gonet-ads.com","ip":{"addr":"188.42.104.140","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2022-04-05","domain_rank":164679,"first_seen":"2023-02-03T11:32:31Z","last_seen":"2025-12-16T06:16:39.648851Z","alert_count":0,"request_count":1,"received_data":345,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssp-statistics.dev.dsp1.nominaltechno.com","ip":{"addr":"34.242.40.37","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2015-10-09","domain_rank":503952,"first_seen":"2024-09-06T07:52:31Z","last_seen":"2025-12-18T12:24:46.158657Z","alert_count":0,"request_count":1,"received_data":545,"sent_data":782,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sync.bumlam.com","ip":{"addr":"31.172.81.170","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2015-08-10","domain_rank":29016,"first_seen":"2015-08-10T21:04:25Z","last_seen":"2025-12-16T06:16:38.275034Z","alert_count":0,"request_count":3,"received_data":1959,"sent_data":1563,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dignomaden.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-04","domain_rank":0,"first_seen":"2025-12-19T21:52:28.718997Z","last_seen":"2025-12-19T21:52:28.718997Z","alert_count":0,"request_count":25,"received_data":2141297,"sent_data":12154,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Easy Pie Chart","description":"Lightweight jQuery plugin to render and animate nice pie charts with the HTML5 canvas element.","website":"https://rendro.github.io/easy-pie-chart/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Divi:4.22.2","description":"Divi is a WordPress Theme and standalone WordPress plugin from Elegant themes that allows users to build websites using the visual drag-and-drop Divi page builder.","website":"https://www.elegantthemes.com/gallery/divi","common_platform_enumeration":"","icon":"Divi.svg","categories":["Page builders","WordPress themes","WordPress plugins"]},{"name":"FitVids.JS:4.22.2","description":"jQuery plugin for fluid width video embeds","website":"https://fitvidsjs.com/","common_platform_enumeration":"","icon":"FitVids.JS.png","categories":["Widgets","Video players"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"match.qtarget.tech","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-12-26","domain_rank":701462,"first_seen":"2023-01-28T17:26:52Z","last_seen":"2025-12-17T04:46:10.764454Z","alert_count":0,"request_count":5,"received_data":0,"sent_data":2329,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sync.dsp.solta.io","ip":{"addr":"217.199.220.72","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"domain_registered":"2022-07-19","domain_rank":369782,"first_seen":"2022-09-21T16:47:56Z","last_seen":"2025-12-17T04:46:10.717263Z","alert_count":0,"request_count":1,"received_data":250,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bid.sspnet.tech","ip":{"addr":"212.41.25.244","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2023-10-17","domain_rank":512084,"first_seen":"2025-08-19T17:30:43.164294Z","last_seen":"2025-12-17T04:46:10.124569Z","alert_count":0,"request_count":2,"received_data":798,"sent_data":1101,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"match.new-programmatic.com","ip":{"addr":"217.65.2.150","port":443,"asn":3175,"as":"Citytelecom LLC","country":"Russia","country_code":"RU"},"domain_registered":"2020-02-18","domain_rank":172258,"first_seen":"2020-02-18T20:50:06Z","last_seen":"2025-12-16T06:16:39.72996Z","alert_count":0,"request_count":1,"received_data":215,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.techdsp.ru","ip":{"addr":"37.48.253.136","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"domain_registered":"2024-10-09","domain_rank":660524,"first_seen":"2024-11-01T12:08:52Z","last_seen":"2025-12-18T01:51:29.018579Z","alert_count":0,"request_count":2,"received_data":890,"sent_data":952,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pix.bumlam.com","ip":{"addr":"31.172.81.160","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2015-08-10","domain_rank":386640,"first_seen":"2022-03-29T09:19:43Z","last_seen":"2025-12-16T06:16:39.822372Z","alert_count":0,"request_count":3,"received_data":2243,"sent_data":1532,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sp.kombinat.digital","ip":{"addr":"77.223.120.36","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2025-04-16","domain_rank":596572,"first_seen":"2025-07-09T21:59:17.553875Z","last_seen":"2025-12-16T06:16:38.416948Z","alert_count":0,"request_count":1,"received_data":494,"sent_data":516,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kimberlite.io","ip":{"addr":"37.0.127.92","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-03-16","domain_rank":17539,"first_seen":"2017-09-14T05:18:59Z","last_seen":"2025-12-16T06:16:39.08931Z","alert_count":0,"request_count":3,"received_data":2015,"sent_data":1611,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssp.al-adtech.com","ip":{"addr":"45.139.25.124","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"domain_registered":"2024-01-16","domain_rank":164448,"first_seen":"2024-01-30T10:38:38Z","last_seen":"2025-12-16T19:48:52.968222Z","alert_count":0,"request_count":1,"received_data":670,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sp.linkssp.ru","ip":{"addr":"188.246.224.210","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2024-09-18","domain_rank":431263,"first_seen":"2025-05-28T20:33:39.660871Z","last_seen":"2025-12-18T20:06:25.499176Z","alert_count":0,"request_count":1,"received_data":488,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"adx.com.ru","ip":{"addr":"83.222.104.70","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-05-19","domain_rank":4001,"first_seen":"2017-06-05T16:30:42Z","last_seen":"2025-12-19T09:50:11.269499Z","alert_count":0,"request_count":1,"received_data":104,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"match.ohmy.bid","ip":{"addr":"37.0.127.204","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"domain_registered":"2022-06-09","domain_rank":283479,"first_seen":"2023-05-23T09:17:10Z","last_seen":"2025-12-16T06:16:39.422162Z","alert_count":0,"request_count":1,"received_data":488,"sent_data":511,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cr-frontend.weborama-tech.ru","ip":{"addr":"178.154.231.214","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2022-03-09","domain_rank":183201,"first_seen":"2023-07-27T11:09:06Z","last_seen":"2025-12-16T06:16:39.75284Z","alert_count":0,"request_count":1,"received_data":440,"sent_data":587,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ssp.bidvol.com","ip":{"addr":"194.85.16.29","port":443,"asn":8985,"as":"Join-stock company Internet ExchangeMSK-IX","country":"Russia","country_code":"RU"},"domain_registered":"2019-09-24","domain_rank":199701,"first_seen":"2020-02-22T12:37:29Z","last_seen":"2025-12-19T09:50:11.218717Z","alert_count":0,"request_count":1,"received_data":672,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cs.agency2.ru","ip":{"addr":"88.212.234.237","port":443,"asn":39134,"as":"Edinaya Set Limited Liability Company","country":"Russia","country_code":"RU"},"domain_registered":"2008-10-06","domain_rank":520394,"first_seen":"2022-04-29T14:24:02Z","last_seen":"2025-12-16T06:16:38.923345Z","alert_count":0,"request_count":1,"received_data":766,"sent_data":466,"comment":"","tags":null,"fingerprints":null},{"fqdn":"f55c3dae-dd24-11f0-86e0-002590c0647c.n2.sync.bumlam.com","ip":{"addr":"80.87.198.111","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"domain_registered":"2015-08-10","domain_rank":0,"first_seen":"2025-12-19T21:52:28.72709Z","last_seen":"2025-12-19T21:52:28.72709Z","alert_count":0,"request_count":1,"received_data":386,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"Angie:1.10.3","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]},{"fqdn":"1026--d0d3fcbf-427d-473a-ab5e-0cc7b0dacc53.stbid.ru","ip":{"addr":"185.115.93.200","port":443,"asn":42881,"as":"Sc Itns.net Srl","country":"Moldova","country_code":"MD"},"domain_registered":"2023-02-28","domain_rank":0,"first_seen":"2025-12-19T21:52:28.749316Z","last_seen":"2025-12-19T21:52:28.749316Z","alert_count":0,"request_count":1,"received_data":204,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"Angie:1.10.3","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dignomaden.com/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.9","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a5c9689ae636c452b6808740ba04136","sha1":"8d2c85d7779d00c12aeb6b55a99443952d9a144e","sha256":"79cb399203843f65199bec32bc4abac5dfd20f141d3e4ec1424bf00c7108fa45","sha512":"a80491b5c34e4719b042d1ef0dc8cff0e2ad29343ac8926a3cab36202b02dc360000b430b3141e474fe08bffc54329eb47082d530af6b44727490c4cd0f0ed0c","ssdeep":"","tlshash":"ee11f3d43e84757909d75428a47f0b18a0fb4d76804e0db0ee54b63e7d7cd409196a4a","size":1107,"data":"","first_seen":"2023-03-29T22:52:25Z","last_seen":"2026-04-23T14:47:57.616403Z","times_seen":40584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f518cfc8223c53c44094f57eacc972f","sha1":"a919f586352875054a0a7f438c3e3d33cb5768b3","sha256":"1d89df5c4aeb93c45e67d479e74ca02e5a104d7e421e4f2415e4a204c9816b0b","sha512":"b0b11da06de176b1a2a32a7bd76695391b698221d21f5e22734b765244034dc2c6b90f301075f5a1aaab3ee37c846750489f8ef040d283e16e792d3a9d106175","ssdeep":"","tlshash":"7b900271681948340649100d722882d43cb4405066423c00806c64484060d824400948","size":47,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-04-23T15:38:33.623227Z","times_seen":53388,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e53ec3d6e21be78115810135f5e956fe","sha1":"523892839b88351523e0498ba881c4431197b54e","sha256":"b15c3ea03d50c2430490e7416733a254feea4237bb60b54181bd3473ebe4149f","sha512":"84b080eaaa043928f038421ceb18bba7483afee5b6480a92ee01992317cde2361a6dd255b16ec036e51e8a1fef46b5379c6a5ff5c9ec69d682f96deaa03a8842","ssdeep":"3072:cWdIxUMz/tGzT3+XtHi2iX6JPMupdggt1YHWyFxAcDHzEJLDnWTnWNBEBysX6qMa:dwhggc1l7","tlshash":"14f31849718473b246c720ee653f1b0e7137ce69d009d060a936faf61eb8f8a512bf65","size":158005,"data":"","first_seen":"2023-03-08T14:26:25Z","last_seen":"2026-04-23T14:47:57.667686Z","times_seen":42840,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"537357420024d824760d7686fbdf31fe","sha1":"5e14660b667fdc602c82300ccf3253afc242e4bb","sha256":"ca2f5769fc415a62dd2cd8af83b9b64604715e602f6de4c7741f9992a7003a29","sha512":"56b633cc459e789b0505809ba091fcd36ec59d62c94205b1f66578c566186f89676e626c45767d3f59eeb0715a139d7f65cd3f54bc41d247bed58438e47c1e53","ssdeep":"","tlshash":"88d0976a3d06043c930838aab6bec288f433b0b4aa94c08180cfc854b32dee14800b8e","size":250,"data":"","first_seen":"2023-03-07T01:42:22Z","last_seen":"2026-04-22T16:52:14.473649Z","times_seen":2136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-23T15:12:36.712546Z","times_seen":311007,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/divi-custom-script-js-extra","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"68952f531b09e8c43952ae4ec0df4909","sha1":"5620c2221a80589db0204511ccf55b975e91851f","sha256":"9c4b05c9c2bc26203e402cc433bdd9ef9cc6fc60ecbafbdf04727c983362f4b2","sha512":"5fb0294e69bcfbb021e2ebc24802f2ceb367a7be74a901ec506ca666dd51d0d903c91f9f29ae6c690d046760cb343eb63ee2e4f9fc23f326c8e9520b865ad8e9","ssdeep":"","tlshash":"775106a6c8855e321ff744bda92ebb47d8a60075e7c45c18df8d440913c9e577163708","size":2535,"data":"","first_seen":"2025-12-19T21:52:38.077506Z","last_seen":"2025-12-19T21:52:38.077506Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.9","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51300497928562f8c86c7aaba99237cd","sha1":"e5826832b85c6afc6502b74cbb8ac5394b04c363","sha256":"6d161e98e47ae150b51211443eef37040fb6269dcf85ad2048548066dca99e6f","sha512":"04bfdf1a41712238902bc6a0e07efaf356217e98560c52fa5d175c29191617c35853382ce2f69966bdd5e1b40114b872d962a5fad26a9e0b7d4fc016a6dcb833","ssdeep":"","tlshash":"c72121daa848111a51c7246c70e7131c32bdd354d0108528b92ee9df29f5bc9647eb70","size":1191,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-04-23T15:45:04.553912Z","times_seen":43151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.22.2","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa07f10043b891dacdb82f26fd2b42bc","sha1":"9c1dc49e9747758e033c0e9a7d016401bd78602c","sha256":"462747422c6af30aa81a0373fa1cfd736455cef52bdbb816f67be9531d84eace","sha512":"828f723649ae5a7b996de43fefc9b904d1a1d54f83671cc6998fdc7e0bb75c7761c8e0bb4a4497f2e4658606c193953c7019d7859e6ebab3db34c794ec575618","ssdeep":"","tlshash":"1361316932a6282d4d5330ef1eaf4014b619c0b707ebe86c78be85c98f849480625bfd","size":3349,"data":"","first_seen":"2023-03-07T01:11:43Z","last_seen":"2026-04-23T15:07:31.836077Z","times_seen":34345,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/easypiechart.js?ver=4.22.2","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00346ced8d8b5c664b826381bdcd7c48","sha1":"1cb0ab506f3892db432c81ab6982fe6837004d23","sha256":"5aa24e4ab926693e29ffb0d0ca1557141defd3ca61b3b4e7caebaa2fcd5bf327","sha512":"7d286c00c0c334d39de610daa7bbdd0ff2a52dab124833e5d44a16664705d0a6b014d8f3498a122702056139a0224cc095a88afe327c23042666c267819a49a6","ssdeep":"192:le+s1ul0lG2Ywr+o53PsoSOBDP4lO0EHIjgn7Bt1En7IeayvKOXjkETqK:leN11l+o53PsoTDP4M5ugnM7sAT","tlshash":"ce124285d7de632a81e331d9406f308c963dd232740e5c696c1893aa1dac839d3fbf69","size":9318,"data":"","first_seen":"2023-03-07T01:42:32Z","last_seen":"2026-04-23T15:07:31.894638Z","times_seen":10370,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"87b659c90b81604997dd06a67e8b773e","sha1":"bc13329ca575a3e32c93e0e1cf791f47f91b0c2f","sha256":"1ac445488ebead2ed0b74a9c86ad76fa1a81f363806218afb2ae4aae5f127448","sha512":"a2f82c520753c0b9093fec4ee7b367523cb2d7156efd5587b0c15b385661beda71050b73710a80f4d4ccc38d7921d5f01a590fa7744f204468dd63411d16509d","ssdeep":"","tlshash":"db90000c0a20c0882b00af00e000c202a0c2202f0220a38ce823bce2a83c888808fea0","size":39,"data":"","first_seen":"2023-04-11T03:58:47Z","last_seen":"2026-04-23T15:07:32.008625Z","times_seen":26630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-23T15:10:01.48645Z","times_seen":736370,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/mediaelement-core-js-before","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"eeaa58eeb7908a98cb67f3748fdc8594","sha1":"90ba571fefbd74e06a352b30c59e370d8198273f","sha256":"bee70db7bcd0a4c5874fb3299da6dd71b38f32c5eaa825b46f6d76e09d08447b","sha512":"42232ed1af44e778aa43c8e5f8cd80a4dba6807a6cb49e008d06f566a2e967c87bc4c41317bb083938147a9e8ef7591f93cb9b7f71598b3f74f1568e7901ca83","ssdeep":"","tlshash":"fb61ba1ac002383b072843b6bc8a47e685fdcb93d1815847a9ff8da9b3d7c38a137654","size":3343,"data":"","first_seen":"2025-12-07T03:39:07.238323Z","last_seen":"2025-12-22T04:09:52.923158Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"07e9c861c1c83600ac7426e47e61cdbd","sha1":"1df3edd9de6c56d1ad5cc30e57b6a94f7c23ad0f","sha256":"6d2fb6e9a09e16a15c027691ade540df83df183e959cc10580f77ff9d78cf43b","sha512":"77031a91adb234d9f1932f9150d5f20968cae73adf935082eb93431b1d24fdc51104a697b088bc77718056b8dace9b954448a5d0e25d2aa5f8bab539e04d878c","ssdeep":"","tlshash":"b241afda663ecdbb55af22aa893e530b40fcb58096cc0cc3ede94c28c7446754012d2d","size":1971,"data":"","first_seen":"2025-12-19T21:52:38.0812Z","last_seen":"2025-12-19T21:52:38.0812Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-content/themes/Divi/js/scripts.min.js?ver=4.22.2","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fc417c1e986d6295b90e1dbc23491cb","sha1":"158771df38a3c373adc43fa9ff1a31b8999c665d","sha256":"9d11051974ce27674b687dbb3fec1c919eee2f0a59366cce8294d9582a557bad","sha512":"6c6ff803d99aa0f0044182bbe26006373e0d3e7fe948017d653c445f987b442da3e16b289901fbaa4f0b1e1d1ffc741b521754af490014b863edb83fe92cb06c","ssdeep":"3072:NuofUPwD3g+hDJ6eJOIZGrwtux3E0pyPNnSuAtPE9OrDGUAn7OS:RcPwDdn2ctux3xmNSJPRDGUM","tlshash":"0c44c74cb360b8f162fb65b5116f670ab1726917a40688c0e172e0f45db8d8e6263f7e","size":274307,"data":"","first_seen":"2023-09-21T10:50:45Z","last_seen":"2026-04-23T14:50:13.607913Z","times_seen":575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/oci.js?t=1766181124909","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3fa5133b6899a2abb39fb79ed94300f","sha1":"dc1d5c75420b38cd7509a783ed09345d0ff78ac4","sha256":"66b141eb9ae44c86efc510844a71cf208c02d02abe03af3a7d8cc26736d3e19c","sha512":"db171b491636ef67596c4874d2b3e553eac016e303a713f12eb1e5c5116cab5f5c904b6aaf358268c04011016484b6920b227cf2d72c2de30f79bd16eba59bad","ssdeep":"384:ixcLKIHRnN2xFRhKv3E6mXHHKvaloLG2+KlLqK/CSuxAjUd0jJFKOEyEqWiodJVb:1BHRN6AIeJZKOgIJANJVEEvDHIoOI","tlshash":"64e219ccb2c3b02d0263a9ba047f6046763bbd59250c4883d5bad5d17ca9e5a513bfb8","size":32169,"data":"","first_seen":"2023-03-12T19:09:04Z","last_seen":"2026-03-15T10:53:33.326269Z","times_seen":5562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-23T15:10:40.543141Z","times_seen":683903,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/aci.js","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"20f0381069e78a636d53b3d505e967c7","sha1":"800464b5f1400a923482d4298b472e17cda20737","sha256":"7b2d18d3dc9861604cbbde63dd9218e12a6cac1a06f52b877eddf61f9f7c3b37","sha512":"5aa6d98aca4d9881d5bf2c8dd71ff3d35e534a09ee749bf248c3d6f838f240f0d77edf06f8f2eae1b7a3797d9d447fe2da922395243f22547a13c4b6ea9981a2","ssdeep":"768:EMNY2uNr6tm67+DVRhNk6L0Wbha0XByPcf0:EMN/uNWo67+DLhNZaMByks","tlshash":"1ce2f98a7191f47306d3a179c12f050bf136696620e8d0e4f536dce0aeb858e6577f3a","size":31372,"data":"","first_seen":"2024-10-20T11:06:54.910201Z","last_seen":"2026-01-29T05:23:48.922533Z","times_seen":4303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/mc/?dp=10\u0026tc=1","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"14f49d3e1bd76258d1c9b35df8130d65","sha1":"09c85f7b546b508d0ee23ee229dfefc31c52bd43","sha256":"0d7e0facdf9a6f7ba5cb645d4f4311605ea813f1f747b215cc3526822fba7468","sha512":"69935704da93ce1c3842a41bfbccd4424dfd5297116a5c2b2161bfa4c080848c6234bc80140db95e72a0015feafb6648199c67abcf3d00abcd0069bb53cce0c5","ssdeep":"","tlshash":"34f0c02a05f70c22019408f8e3fe0220b802335f2c8ac44ebdddea495f1884ad057acc","size":525,"data":"","first_seen":"2025-12-19T21:52:38.082615Z","last_seen":"2025-12-19T21:52:38.082615Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-23T15:16:39.266596Z","times_seen":135737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/salvattore.js?ver=4.22.2","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf7fe805ab945e4b2c4d56da59476811","sha1":"307135fd2987f477c7bd50fcd0cc28a1cff1f568","sha256":"b6205029e1016596807b655c8f57818736a787e32ceb1407effa152ac3bb9380","sha512":"1237ac2a5bd2bd37b403f747d0ce3db65ed1e9c67b92aa4018b08c0747167470de113e36a01950f3a266b815806170f4c15068cad18ab71eb32957fef2d6ffa4","ssdeep":"192:dPmRQHMXDHcCC3fxqC0TN6ZbucRm5i5HHQpcaQGcFjAW90YgtKryaxggy6cqF4/8:dP+TXjcCC3fslQucYu0ca7cFjAW90gxr","tlshash":"1102d99db62430616b9b36bd233fa11ef573213ea4090094956dc8ec6971c4b82e7edc","size":8574,"data":"","first_seen":"2023-03-07T01:26:02Z","last_seen":"2026-04-23T15:07:31.9055Z","times_seen":11076,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/mediaelement-js-extra","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1829d32432fb365d4f9820d9463784fa","sha1":"b7ea5ea4e8350108cf070d8d6d9f7035545c6638","sha256":"5fec3d1ff7565d095a77531b88db431a3e88177195d24c0f188054f6106fd16d","sha512":"ff3de7f96c2167db9d6b123e722e8c87fe064371526812854bc797dd9a8eb1d51bd773d1c4aa28910018c88b29c7bc01a0aa22a2bab7b62e815152a59b8988c6","ssdeep":"","tlshash":"ad212b88e618024002d7483d1215421e868a0fa6c0029d3f9ebca46a0dbbd80a182f21","size":1192,"data":"","first_seen":"2025-12-07T03:39:07.253771Z","last_seen":"2025-12-22T04:09:52.94295Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-content/themes/Divi/core/admin/js/common.js?ver=4.22.2","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d71b75b2327258b1d01d50590c1f67ca","sha1":"b7820e4ffb6becc133c48f66d9f683545530b959","sha256":"1ca76922f55b389b8f590ae7e3bcc3a2dccdce3aff1e5a4335af081b76a414ea","sha512":"1a1930881b4d4d4f092999d6449248aea68bf1756f6dc32a4efce5e7bf240a14633e76988321e5aa3e11144fe5e8c9a443adf0fbf09a9b57a98c4d2d3a9347a2","ssdeep":"","tlshash":"bb218b4947ac9015cd2230f6141a70f8b9be90a7cbe00d7bfeb3e618d6c04a6127de9d","size":1343,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-04-23T15:38:33.608041Z","times_seen":51545,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"a.adspector.io/sync?ssp=6","fqdn":"a.adspector.io","domain":"adspector.io","tld":"io"},"ip":{"addr":"172.67.161.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adspector.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 03:16:35 GMT","end":"Wed, 11 Feb 2026 04:14:56 GMT"},"fingerprint":{"sha1":"70:93:AE:0A:86:B3:EC:6A:26:43:0C:59:15:5C:6D:1C:C5:C6:F8:11","sha256":"16:49:F6:10:DA:6C:F1:EC:DB:5E:3C:6B:52:FE:1B:B8:2A:EC:A0:D1:73:71:15:1E:94:F3:29:C7:95:AB:81:A3"}}},"request":{"raw":"GET /sync?ssp=6 HTTP/1.1\r\nHost: a.adspector.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: preadspector=1; Expires=Mon, 19 Jan 2026 00:52:05 GMT; Domain=.adspector.io; SameSite=None; Secure; Path=/\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AvC7bb4OFKmMW4tCpYnD5TmgohjO21IITOMeSB8TWfcwG9GeG0iZFaYDGplu30odKRMEVmka%2BSG4%2BXO0I%2FSVGe90GGMVs6kV5Vh72KgY\"}]}\r\ncf-ray: 9b0a2003cd73b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":157,"dns":14,"connect":5,"send":0,"wait":99,"receive":0,"ssl":265},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.buzzoola.com/cookiesync/redirect?redirect_url=https%3A%2F%2Fbid.sspnet.tech%2Fsync%2Freverse%3Fdsp_slug%3Dbuzzoola%26dsp_user_id%3D%24%7BUUID%7D%26sync_id%3Dbbc03016-729f-426d-b2a2-55278a71ecf3","fqdn":"exchange.buzzoola.com","domain":"buzzoola.com","tld":"com"},"ip":{"addr":"176.114.74.35","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buzzoola.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:11:29 GMT","end":"Mon, 09 Mar 2026 06:11:28 GMT"},"fingerprint":{"sha1":"6D:1A:28:D1:AB:8D:18:D1:38:1A:55:28:34:A1:03:2A:BC:7A:1C:5A","sha256":"AB:C0:F2:6B:07:6C:D6:89:63:34:97:78:29:CD:C6:D1:2A:75:3D:C0:7C:E0:05:94:11:71:82:6B:67:8C:2D:36"}}},"request":{"raw":"GET /cookiesync/redirect?redirect_url=https%3A%2F%2Fbid.sspnet.tech%2Fsync%2Freverse%3Fdsp_slug%3Dbuzzoola%26dsp_user_id%3D%24%7BUUID%7D%26sync_id%3Dbbc03016-729f-426d-b2a2-55278a71ecf3 HTTP/1.1\r\nHost: exchange.buzzoola.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uuid=dc9f3926-86a9-421d-5ccf-499949244772\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 179\r\nlocation: https://bid.sspnet.tech/sync/reverse?dsp_slug=buzzoola\u0026dsp_user_id=dc9f3926-86a9-421d-5ccf-499949244772\u0026sync_id=bbc03016-729f-426d-b2a2-55278a71ecf3\r\nset-cookie: uuid=dc9f3926-86a9-421d-5ccf-499949244772; Path=/; Domain=buzzoola.com; Expires=Sun, 18 Jan 2026 21:52:06 GMT; Max-Age=2592000; Secure; SameSite=None\r\nserverid: TODO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.dvgroup.com/match/sape?id=0700007F04C945692C05C20F02170623","fqdn":"sync.dvgroup.com","domain":"dvgroup.com","tld":"com"},"ip":{"addr":"82.148.21.217","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtb.dvgroup.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 11:37:34 GMT","end":"Sat, 31 Jan 2026 11:37:33 GMT"},"fingerprint":{"sha1":"A8:46:6D:9C:F3:36:47:77:5A:7D:E0:13:19:BC:F3:96:D5:2A:86:F0","sha256":"E5:FC:4C:96:76:05:51:82:82:91:C6:98:76:9A:8F:B4:03:09:E7:D4:88:C0:12:BA:E8:B1:03:AF:3D:C4:D0:32"}}},"request":{"raw":"GET /match/sape?id=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: sync.dvgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-23T15:07:26.563561Z","times_seen":33826,"resource_available":true,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":19,"connect":267,"send":0,"wait":30,"receive":0,"ssl":298},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.bumlam.com/?src=sap1\u0026s_data=CAIQARiFkpfKBmIgMDcwMDAwN0YwNEM5NDU2OTJDMDVDMjBGMDIxNzA2MjOiARD1XD2u3SQR8IbgACWQwGR8","fqdn":"sync.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.170","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 15:01:44 GMT","end":"Thu, 19 Mar 2026 15:01:43 GMT"},"fingerprint":{"sha1":"73:09:47:20:FC:A8:0D:DC:79:F0:08:58:30:EF:F6:AE:72:A0:E1:0B","sha256":"73:92:7B:67:F8:0C:85:9F:42:64:89:B1:B4:BA:C5:BB:D0:C1:72:38:91:59:BA:0B:54:55:C0:4E:84:7F:12:34"}}},"request":{"raw":"GET /?src=sap1\u0026s_data=CAIQARiFkpfKBmIgMDcwMDAwN0YwNEM5NDU2OTJDMDVDMjBGMDIxNzA2MjOiARD1XD2u3SQR8IbgACWQwGR8 HTTP/1.1\r\nHost: sync.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: suuid3=IiRmNTVjM2RhZS1kZDI0LTExZjAtODZlMC0wMDI1OTBjMDY0N2M*\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 19 Dec 2025 21:52:05 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: suuid3=IiRmNTVjM2RhZS1kZDI0LTExZjAtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Thu, 14 Dec 2045 21:52:05 GMT; Domain=bumlam.com; SameSite=None; Secure\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nCache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-content/uploads/2023/07/cropped-dignomaden-logo-192x192.png","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:05.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-content/uploads/2023/07/cropped-dignomaden-logo-192x192.png HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nCookie: fid=10114f38-8c56-42a8-9c9c-19899852f9cd; _ac_oid=52c23a0593a416c46c93b04c0a432175%3A1766184725315\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 49306\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:05 GMT\r\nlast-modified: Thu, 03 Aug 2023 06:27:49 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0J33Uw8hdcd7ri6xhrHw7qoSy4ajHWtPPXough9Saa1NXHuL6OuJPxt2bxGMGM%2BM9PLWeEL1YyZKI1cuwGn6N%2FlN4TfmaXfx6XUG4%2BK%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a20029abc120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49306,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"32256fefdb1e2828bd6fb2c066d1a38c","sha1":"eea3f0342cd789f170eb76706ba02a5f9ce8edbc","sha256":"05fcb865fb34ebd80b6fc31e796d3ea068b6d86886d5ac1e12917db87268d878","sha512":"77cf60a51a76cf5263c3024909f23cfdfb868d66c3350e023dfbd39697c73cf244547ed9bb7251677d6de096f16fcf5f929336718b5df4e4187aa1ff603322ea","ssdeep":"1536:TMlhSxAQ4BW45OtQebiAKKrgUiPXnBr53:SQxx4BxAU3BrR","tlshash":"1923f16fe768e6b029d075b7e524441876ec7874bd1fb72ff4c218d041ca2a30e8996d","first_seen":"2025-12-19T21:52:38.033137Z","last_seen":"2025-12-19T21:52:38.033137Z","times_seen":1,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":449,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match?dp=385\u0026euid=d7bed9c1dad5f1c4914cb","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=385\u0026euid=d7bed9c1dad5f1c4914cb HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125; cSyncDp7v3=1766181125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-23T15:13:06.163658Z","times_seen":339718,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=313","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /cmatch?dp=313 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125; cSyncDp7v3=1766181125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://match.qtarget.tech/userbind?src=sape\u0026id=0200007F04C945692F05F70F02B5A907\r\nset-cookie: cSyncDp241v2=1766181126; expires=Sun, 18-Jan-26 21:52:06 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/mc/?dp=10","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:04.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /mc/?dp=10 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: /mc/?dp=10\u0026tc=1\r\nset-cookie: test_cookie=CheckForPermission; path=/; Secure; SameSite=None; domain=.acint.net; expires=Fri, 19-Dec-25 22:02:04 GMT\naid=fwAAB2lFyQQPwgUsIwYXAsmMCWSQroXAhKItTaNi7UdcK13E; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":10140,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sp.kombinat.digital/cm?ssp=sape\u0026redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D433%26euid%3D%7Buid%7D","fqdn":"sp.kombinat.digital","domain":"kombinat.digital","tld":"digital"},"ip":{"addr":"77.223.120.36","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.kombinat.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Dec 2025 10:23:18 GMT","end":"Sun, 01 Mar 2026 10:23:17 GMT"},"fingerprint":{"sha1":"8F:91:B2:43:1C:1F:A6:7C:68:6E:71:E2:4A:D8:77:95:57:07:CE:0C","sha256":"3F:EC:8A:F1:CB:4E:59:7A:CB:F6:B0:F9:54:88:5C:B3:1A:7B:72:38:BF:75:51:79:B2:E6:7D:62:32:10:45:03"}}},"request":{"raw":"GET /cm?ssp=sape\u0026redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D433%26euid%3D%7Buid%7D HTTP/1.1\r\nHost: sp.kombinat.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Fri, 19 Dec 2025 21:52:05 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nBidder: bid-01 1.105.a1db8cf\r\nLocation: https://mc.acint.net/match?dp=433\u0026euid=a8d4021f-a010-409a-b260-c0ebdf5fce7b\r\nSet-Cookie: uid=a8d4021f-a010-409a-b260-c0ebdf5fce7b.6945c905.7308117ed6e9fc96; domain=.kombinat.digital; path=/; expires=Sun, 18-Jan-2026 21:52:05 GMT; SameSite=None; Secure;\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":649,"timings":{"blocked":299,"dns":2,"connect":28,"send":0,"wait":27,"receive":0,"ssl":289},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.buzzoola.com/cookiesync/dsp/sape-banner?set_buzzoola_cookie=t\u0026uid=0700007F04C945692C05C20F02170623\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126","fqdn":"exchange.buzzoola.com","domain":"buzzoola.com","tld":"com"},"ip":{"addr":"176.114.74.35","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buzzoola.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:11:29 GMT","end":"Mon, 09 Mar 2026 06:11:28 GMT"},"fingerprint":{"sha1":"6D:1A:28:D1:AB:8D:18:D1:38:1A:55:28:34:A1:03:2A:BC:7A:1C:5A","sha256":"AB:C0:F2:6B:07:6C:D6:89:63:34:97:78:29:CD:C6:D1:2A:75:3D:C0:7C:E0:05:94:11:71:82:6B:67:8C:2D:36"}}},"request":{"raw":"GET /cookiesync/dsp/sape-banner?set_buzzoola_cookie=t\u0026uid=0700007F04C945692C05C20F02170623\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126 HTTP/1.1\r\nHost: exchange.buzzoola.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uuid=dc9f3926-86a9-421d-5ccf-499949244772\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 156\r\nlocation: https://mc.acint.net/rmatch?dp=126\u0026euid=dc9f3926-86a9-421d-5ccf-499949244772\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126\r\nserverid: TODO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.9","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:03.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.9 HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 982\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:04 GMT\r\nlast-modified: Fri, 07 Jun 2019 20:45:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q33O6%2FD8A4d4yxAEWHX3zpCkHwAguYcCtJ%2BZUV2eQxfoc%2BtvVNeCcmUXfcAwG39f8%2FjEbH7xwp8T4ac%2FwblgVAN77MqrrPjmiyaFiZ2h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a1ff71a69120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4186,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4186), with no line terminators","md5":"ea958276b7de454bd3c2873f0dc47e5f","sha1":"b143f6e8e8f79d8f104c26b0057ef5514d763219","sha256":"2e10d353ff038c2cad3492fc17801af3e6ef2669c9e9713bdb78b1dcb104c4fe","sha512":"2d40a1e713355eff88fa3bbf5471b4db5acc48fa2b978a555c034f2e5c7f131fcaf48e849d5d048df9d5dae068c4b6467a97b1dde99115e6b32f57e928569fc1","ssdeep":"48:wFfAeWkkqEsKO+TBxaBIIj+NqUFQW76d7JrOv2bN:wueWkkrLoI7U","tlshash":"d9810c1084149d2cf4eab33766cec75db43ad747fe75e7b86936e2b8c098a842073484","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-04-23T15:07:31.907985Z","times_seen":73910,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":682,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-content/uploads/2023/07/business-coach-017.jpg","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:04.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-content/uploads/2023/07/business-coach-017.jpg HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58685\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:04 GMT\r\nlast-modified: Thu, 03 Aug 2023 06:27:49 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bXMRq28T8%2B%2BbtI%2BoOJxpzhLAAbWxGPbrcnN7TaiXSaF27DkFdBdjZmasFG2zdPMuX9Z3HxJLNQKDhPClflc6hUvVx1nuBPLLF9EBqOKK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a1ffc5a89120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58685,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x853, components 3","md5":"fb5ffd297fbbcba37c592c7639dc448c","sha1":"75637f543327a776b41d4399d573a59663a3a975","sha256":"3904426a3ec4981f0cdb4215253dbb1588710419774d0ab13ece9ad2524ab022","sha512":"2af029fde1184681dac6cd63889406976ca50dd3c0db306a5c7338a60c4f0abeb173c37eef76fcf6c94fd8ed08a5342fc26c93342d90cf450a9e3fe66887de5d","ssdeep":"1536:/8+jopU9LCzOTDCit9umtPC0LQOcvnEPN63yvXBdP5lzD:rjoWLClUQOcvnwXBdP","tlshash":"614302ff891f4719ca24420dc4b1a32b5ba2bb97e9fe945457da15cce6810a3a0314ff","first_seen":"2024-08-19T18:29:12.43483Z","last_seen":"2026-01-10T20:50:44.927423Z","times_seen":8,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:04.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"FF:92:1F:D0:E9:98:18:CB:FA:1B:90:BE:3E:B9:41:44:DE:05:28:15","sha256":"0C:A2:FB:F0:F6:40:B0:82:E4:FB:1A:51:96:48:D8:22:C9:05:C4:41:67:1F:41:D4:8C:F2:B6:85:A4:D2:3A:AF"}}},"request":{"raw":"GET /s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dignomaden.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 17 Dec 2025 21:59:37 GMT\r\nexpires: Thu, 17 Dec 2026 21:59:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 172347\r\nlast-modified: Mon, 15 Sep 2025 16:30:33 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25432, version 1.0","md5":"be54f77ab35610e2c8b2cdc5eacfbbe3","sha1":"a958106a7f47e5fd204be330d2bb7c02eece6c71","sha256":"f3d1673c4fe33490d9431c0c5f2cf942d9e5c292b71a56cc8457aed802af6150","sha512":"1cde572a7e4a5aedb92544cd2c574f46e16be7cbee79fb14a981b4ea939e5d435f0b04315ced08f3dfa0b14ef0405879428ab0c495e75c692c5fb1a0d24266c6","ssdeep":"768:xgn2/aM++CyPp8CSmJSWNzPJo49nGwA4xLtK6CGaRa:xgGacCy6CSpIPJo49nNA4xwNfU","tlshash":"9fb2f2339a4660cee69ce270bbd3316bc5f1bfd3ac0ab67a330930918cc1355c4595a8","first_seen":"2025-09-17T13:23:54.201948Z","last_seen":"2026-04-23T14:32:43.649796Z","times_seen":5638,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":145,"dns":1,"connect":7,"send":0,"wait":9,"receive":2,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.utraff.com/sync?ssp=8\u0026id=0700007F04C945692C05C20F02170623","fqdn":"a.utraff.com","domain":"utraff.com","tld":"com"},"ip":{"addr":"213.171.19.244","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utraff.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 04:18:08 GMT","end":"Thu, 12 Mar 2026 04:18:07 GMT"},"fingerprint":{"sha1":"7F:77:C5:6F:57:1F:C2:53:D7:D3:04:93:B1:75:D8:91:AA:38:A0:78","sha256":"B2:CE:C5:75:9F:E8:F2:94:5D:6D:78:3C:9D:ED:55:DC:C8:2F:EA:4F:D2:50:B2:6F:A7:4A:85:A1:5F:4F:C0:14"}}},"request":{"raw":"GET /sync?ssp=8\u0026id=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: a.utraff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0\r\nDate: Fri, 19 Dec 2025 21:52:05 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: preutid=1; Expires=Mon, 19 Jan 2026 00:52:05 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/\npreutid=1; Expires=Mon, 19 Jan 2026 00:52:05 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":189,"dns":19,"connect":49,"send":0,"wait":88,"receive":0,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-frontend.weborama-tech.ru/cr?key=sape\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D296%26euid%3D%7BWEBO_CID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D296","fqdn":"cr-frontend.weborama-tech.ru","domain":"weborama-tech.ru","tld":"ru"},"ip":{"addr":"178.154.231.214","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weborama-tech.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 Aug 2025 14:42:06 GMT","end":"Tue, 15 Sep 2026 18:38:30 GMT"},"fingerprint":{"sha1":"A5:CA:D7:3C:27:83:66:F7:26:43:0B:05:21:09:FF:7A:7A:AB:7D:A9","sha256":"53:AA:89:0C:4A:26:10:43:C0:A9:5C:10:98:06:D7:D5:6A:76:CC:34:2E:77:15:88:33:37:B6:31:0C:D7:CF:0B"}}},"request":{"raw":"GET /cr?key=sape\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D296%26euid%3D%7BWEBO_CID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D296 HTTP/1.1\r\nHost: cr-frontend.weborama-tech.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\nvary: Origin\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM\"\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0\r\npragma: no-cache\r\nexpires: Tue, 03 Jul 2001 06:00:00 GMT\r\nlast-modified: Fri, 19 Dec 2025 21:52:05 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":615,"timings":{"blocked":111,"dns":7,"connect":48,"send":0,"wait":32,"receive":0,"ssl":401},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/ping/?v=0.7.1\u0026uid=4a76b3e1-225e-4003-a8cf-f38df01cd15e\u0026dp=10\u0026tz=%2B00%3A00\u0026nc=770381\u0026dT=2025-12-19T21%3A52%3A07.909","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:07.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /ping/?v=0.7.1\u0026uid=4a76b3e1-225e-4003-a8cf-f38df01cd15e\u0026dp=10\u0026tz=%2B00%3A00\u0026nc=770381\u0026dT=2025-12-19T21%3A52%3A07.909 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125; cSyncDp7v3=1766181125; cSyncDp241v2=1766181126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:07 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-23T15:13:06.163658Z","times_seen":339718,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/pbd/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"65.21.90.246","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:08.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 18 Jun 2025 16:48:51 GMT","end":"Mon, 20 Jul 2026 16:48:50 GMT"},"fingerprint":{"sha1":"8D:89:EE:F7:48:68:E7:7D:F7:C4:AF:97:AB:98:A3:A3:1E:8D:6A:92","sha256":"08:06:AA:31:11:0F:33:B8:7D:B5:7E:B4:A2:2A:65:C6:77:DE:F6:65:A2:F4:BE:D3:7E:8D:9F:84:17:CE:20:A0"}}},"request":{"raw":"GET /pbd/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1766181128258; user_id=d0d3fcbf-427d-473a-ab5e-0cc7b0dacc53\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Fri, 19 Dec 2025 21:52:08 GMT\r\ncontent-length: 0\r\np3p: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nset-cookie: user_id=d0d3fcbf-427d-473a-ab5e-0cc7b0dacc53;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\nuser_id-legacy=d0d3fcbf-427d-473a-ab5e-0cc7b0dacc53;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\r\nlocation: https://1026--d0d3fcbf-427d-473a-ab5e-0cc7b0dacc53.stbid.ru/?r=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dpbd\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-content/themes/Divi/js/scripts.min.js?ver=4.22.2","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:03.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-content/themes/Divi/js/scripts.min.js?ver=4.22.2 HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 65149\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:04 GMT\r\nlast-modified: Wed, 27 Sep 2023 02:20:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HUDCrR1SLZhS3MhT2xGscK0vpF7r0R9WoINmGk%2B2ndSeclgAw3WSuG%2FXWa95tKHdUX6jOBQG2O%2BxxhM1dMsPCj8x9nOkHV2YWMw7Z8uP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a1ff72a85120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274307,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65467)","md5":"2fc417c1e986d6295b90e1dbc23491cb","sha1":"158771df38a3c373adc43fa9ff1a31b8999c665d","sha256":"9d11051974ce27674b687dbb3fec1c919eee2f0a59366cce8294d9582a557bad","sha512":"6c6ff803d99aa0f0044182bbe26006373e0d3e7fe948017d653c445f987b442da3e16b289901fbaa4f0b1e1d1ffc741b521754af490014b863edb83fe92cb06c","ssdeep":"3072:NuofUPwD3g+hDJ6eJOIZGrwtux3E0pyPNnSuAtPE9OrDGUAn7OS:RcPwDdn2ctux3xmNSJPRDGUM","tlshash":"0c44c74cb360b8f162fb65b5116f670ab1726917a40688c0e172e0f45db8d8e6263f7e","first_seen":"2023-09-21T10:50:45Z","last_seen":"2026-04-23T14:50:13.607913Z","times_seen":575,"resource_available":true,"data":null}},"time_used":936,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":691,"receive":245,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.bidvol.com/usersync?dspcsid=8\u0026redirect=1","fqdn":"ssp.bidvol.com","domain":"bidvol.com","tld":"com"},"ip":{"addr":"194.85.16.29","port":443,"asn":8985,"as":"Join-stock company Internet ExchangeMSK-IX","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ssp.bidvol.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 15:36:18 GMT","end":"Sun, 15 Feb 2026 15:36:17 GMT"},"fingerprint":{"sha1":"2C:D4:B1:D6:C7:FD:4D:33:95:41:C0:D4:51:E9:65:02:A5:F5:6A:2E","sha256":"37:63:06:D3:DB:F8:A8:E8:FE:2C:AD:63:85:31:FA:C4:B4:4F:34:34:0B:AF:A7:69:B2:B5:57:6E:1E:EF:45:63"}}},"request":{"raw":"GET /usersync?dspcsid=8\u0026redirect=1 HTTP/1.1\r\nHost: ssp.bidvol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-request-id: bb3e8b6d-d063-4828-b7d6-87eef1a511a2\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\nset-cookie: bvuid=jyago7odnd; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None\nbvuid2=jyago7odnd; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":13,"connect":69,"send":0,"wait":60,"receive":0,"ssl":174},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.opendsp.ru/match/sape_ex?id=0700007F04C945692C05C20F02170623","fqdn":"sync.opendsp.ru","domain":"opendsp.ru","tld":"ru"},"ip":{"addr":"176.114.85.126","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.opendsp.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 05 Aug 2025 11:37:07 GMT","end":"Sun, 06 Sep 2026 11:37:06 GMT"},"fingerprint":{"sha1":"A6:D2:A4:C1:9C:FF:E8:4A:C2:A7:58:7A:3B:98:4B:CC:11:C8:FF:1F","sha256":"26:E3:31:B9:C2:C0:30:F6:85:B7:6E:2F:0E:4F:B0:C6:E5:39:D0:1A:8A:86:02:1E:55:68:94:B1:95:F1:4A:A7"}}},"request":{"raw":"GET /match/sape_ex?id=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: sync.opendsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-23T15:07:26.563561Z","times_seen":33826,"resource_available":true,"data":null}},"time_used":495,"timings":{"blocked":110,"dns":7,"connect":48,"send":0,"wait":29,"receive":0,"ssl":286},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match?dp=433\u0026euid=a8d4021f-a010-409a-b260-c0ebdf5fce7b","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=433\u0026euid=a8d4021f-a010-409a-b260-c0ebdf5fce7b HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125; cSyncDp7v3=1766181125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-23T15:13:06.163658Z","times_seen":339718,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/image?source=pbd","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"65.21.90.246","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:08.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 18 Jun 2025 16:48:51 GMT","end":"Mon, 20 Jul 2026 16:48:50 GMT"},"fingerprint":{"sha1":"8D:89:EE:F7:48:68:E7:7D:F7:C4:AF:97:AB:98:A3:A3:1E:8D:6A:92","sha256":"08:06:AA:31:11:0F:33:B8:7D:B5:7E:B4:A2:2A:65:C6:77:DE:F6:65:A2:F4:BE:D3:7E:8D:9F:84:17:CE:20:A0"}}},"request":{"raw":"GET /image?source=pbd HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1766181128258; user_id=d0d3fcbf-427d-473a-ab5e-0cc7b0dacc53\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Fri, 19 Dec 2025 21:52:08 GMT\r\ncontent-length: 0\r\nlocation: https://sync.upravel.com/aidata/sync\r\nset-cookie: user_id=d0d3fcbf-427d-473a-ab5e-0cc7b0dacc53;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\nuser_id-legacy=d0d3fcbf-427d-473a-ab5e-0cc7b0dacc53;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\r\np3p: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.dmp.otm-r.com/match/sape?id=0700007F04C945692C05C20F02170623\u0026otcm_check=1766181125","fqdn":"sync.dmp.otm-r.com","domain":"otm-r.com","tld":"com"},"ip":{"addr":"194.55.244.179","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync.dmp.otm-r.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 06:06:37 GMT","end":"Tue, 10 Mar 2026 06:06:36 GMT"},"fingerprint":{"sha1":"C0:50:09:84:7A:D9:92:52:FE:BD:EA:94:B3:65:D6:83:2C:B3:52:8A","sha256":"6A:F5:31:88:A3:2A:6E:A1:F0:48:DA:7C:7D:A2:DD:EF:82:C2:71:12:9E:54:D7:9E:4F:C0:88:FA:C6:F9:E3:B3"}}},"request":{"raw":"GET /match/sape?id=0700007F04C945692C05C20F02170623\u0026otcm_check=1766181125 HTTP/1.1\r\nHost: sync.dmp.otm-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: mpid=Njk0NWM5MDUwM2M5ZjMzZQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.27.5\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nlocation: https://www.acint.net/match?dp=68\u0026euid=Njk0NWM5MDUwM2M5ZjMzZQ%3D%3D\r\nset-cookie: mpid=Njk0NWM5MDUwM2M5ZjMzZQ==; max-age=31536000; domain=otm-r.com; path=/; secure; SameSite=None; Partitioned\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/rmatch?dp=126\u0026euid=dc9f3926-86a9-421d-5ccf-499949244772\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=126\u0026euid=dc9f3926-86a9-421d-5ccf-499949244772\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126\u0026dp=14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nset-cookie: cSyncDp14v4=1766181125; expires=Sun, 18-Jan-26 21:52:05 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":128,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.qtarget.tech/userbind?src=sape\u0026id=0200007F04C945692F05F70F02B5A907","fqdn":"match.qtarget.tech","domain":"qtarget.tech","tld":"tech"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.632Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /userbind?src=sape\u0026id=0200007F04C945692F05F70F02B5A907 HTTP/1.1\r\nHost: match.qtarget.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":9318,"timings":{"blocked":9318,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-content/uploads/2023/07/business-coach-003.jpg","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:03.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-content/uploads/2023/07/business-coach-003.jpg HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55956\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:04 GMT\r\nlast-modified: Thu, 03 Aug 2023 06:27:49 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DhbeeGkYHFIjCS7lkj0BQPY4n5rGCior1ZhA7qZICDpBdhpKi0aboFRALTpDrZgBd8z2lMof8qG%2F009z1jlZHhMPoEZcG1dKD8liujY2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a1ff71a6e120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":55956,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x854, components 3","md5":"0886f7b10facaac8a47262ca4788b91c","sha1":"f40dff46ab7301adeb5d43dbef2a7be62953121a","sha256":"588984c7bebed91dbf1b095cf624c655bcb3eab5ded16bf890bdb827fccad013","sha512":"02e6c0ceee606ccebd94ca366068f44a033613638da4486bed9697a5b8764b2477a51303920ee4f2df1614afc405c698f7a55f20f3a796c69ba04452da157324","ssdeep":"1536:/8oKA5E0JNqVdbXNP5O/+Jp5qpn9P5zGmgTb8:5KUEJHbXNP5k+Jnin9Pwb8","tlshash":"bc43014ceb14e785d4a22bbe3dd51d1a786a450fc921fea60d241c8e27d2568b31cff8","first_seen":"2024-08-19T18:29:12.424865Z","last_seen":"2025-12-19T21:52:38.041709Z","times_seen":3,"resource_available":false,"data":null}},"time_used":876,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":786,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-content/themes/Divi/core/admin/js/common.js?ver=4.22.2","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:03.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-content/themes/Divi/core/admin/js/common.js?ver=4.22.2 HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 490\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:04 GMT\r\nlast-modified: Wed, 27 Sep 2023 02:20:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O0B%2Bgif6qTQmqZ7Zs7q2fscot10G5tL%2Bks8TwDjgD3PBoCZahc%2BvJ2fMrIsWFkPkSyOKvt5%2BtqRfrrypaqttUX6XfEGTeryaQnF7WDjj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a1ff73aa4120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1343,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d71b75b2327258b1d01d50590c1f67ca","sha1":"b7820e4ffb6becc133c48f66d9f683545530b959","sha256":"1ca76922f55b389b8f590ae7e3bcc3a2dccdce3aff1e5a4335af081b76a414ea","sha512":"1a1930881b4d4d4f092999d6449248aea68bf1756f6dc32a4efce5e7bf240a14633e76988321e5aa3e11144fe5e8c9a443adf0fbf09a9b57a98c4d2d3a9347a2","ssdeep":"","tlshash":"bb218b4947ac9015cd2230f6141a70f8b9be90a7cbe00d7bfeb3e618d6c04a6127de9d","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-04-23T15:38:33.608041Z","times_seen":51545,"resource_available":true,"data":null}},"time_used":659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":659,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs.agency2.ru/p?ssp=sp\u0026uid=0700007F04C945692C05C20F02170623","fqdn":"cs.agency2.ru","domain":"agency2.ru","tld":"ru"},"ip":{"addr":"88.212.234.237","port":443,"asn":39134,"as":"Edinaya Set Limited Liability Company","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.agency2.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 08:47:09 GMT","end":"Sun, 13 Sep 2026 08:47:08 GMT"},"fingerprint":{"sha1":"F4:53:6B:6B:EF:0D:F1:45:1E:8B:12:B7:51:88:E4:EB:78:EA:9A:8B","sha256":"B3:B9:DF:C8:91:E7:FA:77:EA:87:6A:FF:93:64:2F:02:53:8D:5C:87:80:F7:EA:F9:DE:2F:E2:5C:11:04:9F:3A"}}},"request":{"raw":"GET /p?ssp=sp\u0026uid=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: cs.agency2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Fri, 19 Dec 2025 21:52:05 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nServer: fasthttp\r\nCache-Control: no-store, no-cache, must-revalidate\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nLocation: https://www.acint.net/match?dp=186\u0026euid=bc9d7f83-e92d-4126-b658-e7532f408ae5\r\nSet-Cookie: uuid=bc9d7f83-e92d-4126-b658-e7532f408ae5; expires=Thu, 10 Dec 2026 21:52:05 GMT; domain=agency2.ru; path=/; secure; SameSite=None\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT\r\nX-Host: 23.111.107.44\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":23,"connect":50,"send":0,"wait":39,"receive":0,"ssl":477},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cm.pxltag.com/rsync?platform_id=aed2070256c34c4c8098476a32bf5b32\u0026sync_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D337%26euid%3D%7Binner_id%7D","fqdn":"cm.pxltag.com","domain":"pxltag.com","tld":"com"},"ip":{"addr":"87.228.57.56","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pxltag.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 06:13:44 GMT","end":"Tue, 10 Mar 2026 06:13:43 GMT"},"fingerprint":{"sha1":"E4:D2:DA:16:48:1F:14:8A:3B:A2:4F:3C:9D:D6:D9:1C:49:B3:5A:0D","sha256":"A5:05:F3:6D:C3:71:05:C2:64:63:4F:3B:F6:68:00:58:3E:45:9B:8A:A8:18:B8:F8:1A:9D:AC:CC:FC:DB:1F:2F"}}},"request":{"raw":"GET /rsync?platform_id=aed2070256c34c4c8098476a32bf5b32\u0026sync_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D337%26euid%3D%7Binner_id%7D HTTP/1.1\r\nHost: cm.pxltag.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.20.1\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-length: 0\r\nlocation: https://acint.net/match?dp=337\u0026euid=BSt8T2NnA\r\nset-cookie: smi_uid=BSt8T2NnA; max-age=31536000; domain=.pxltag.com; path=/; HttpOnly; secure; SameSite=None\r\nstrict-transport-security: max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":33,"connect":66,"send":0,"wait":109,"receive":0,"ssl":234},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/oci/?v=0.7.1\u0026uid=4a76b3e1-225e-4003-a8cf-f38df01cd15e\u0026dp=10\u0026tz=%2B00%3A00\u0026nc=280083\u0026oid=52c23a0593a416c46c93b04c0a432175","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:05.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /oci/?v=0.7.1\u0026uid=4a76b3e1-225e-4003-a8cf-f38df01cd15e\u0026dp=10\u0026tz=%2B00%3A00\u0026nc=280083\u0026oid=52c23a0593a416c46c93b04c0a432175 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-23T15:13:06.163658Z","times_seen":339718,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adspend.space/check?uid=0700007F04C945692C05C20F02170623\u0026ssp=sape","fqdn":"sync.adspend.space","domain":"adspend.space","tld":"space"},"ip":{"addr":"5.189.234.229","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adspend.space","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Oct 2025 12:52:42 GMT","end":"Mon, 26 Jan 2026 12:52:41 GMT"},"fingerprint":{"sha1":"AC:B3:38:66:C2:FC:35:EC:DA:72:49:D5:D9:BF:BD:DF:99:F7:6D:B4","sha256":"30:85:8C:F6:1D:73:6D:12:AE:79:49:D8:B6:3A:64:D8:38:8D:53:42:DC:FA:CD:0E:44:44:C9:0C:E6:4A:08:04"}}},"request":{"raw":"GET /check?uid=0700007F04C945692C05C20F02170623\u0026ssp=sape HTTP/1.1\r\nHost: sync.adspend.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: as-user=f78a47f8-8c88-41b1-8fd2-8cb79bf760be\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.26.2\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 232\r\nlocation: https://x01.aidata.io/0.gif?pid=6472613\u0026id=f78a47f8-8c88-41b1-8fd2-8cb79bf760be\u0026dest=https%3A%2F%2Fprodmp.ru%2Fadspend-sync.gif%3Fdsp_provider_id%3D2%26uid%3Df78a47f8-8c88-41b1-8fd2-8cb79bf760be%26r%3D\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.26.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/rmatch?dp=14\u0026euid=1804420A05C94569140115C10267C26B\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=14\u0026euid=1804420A05C94569140115C10267C26B\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125; cSyncDp7v3=1766181125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=95\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.dsp.solta.io/match/sape?id=0700007F04C945692C05C20F02170623","fqdn":"sync.dsp.solta.io","domain":"solta.io","tld":"io"},"ip":{"addr":"217.199.220.72","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dsp.solta.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 04 Aug 2025 11:49:51 GMT","end":"Sat, 05 Sep 2026 11:49:50 GMT"},"fingerprint":{"sha1":"47:08:04:35:5D:1F:29:FE:9D:B8:04:FB:41:AA:98:1C:B3:95:76:78","sha256":"F4:28:D6:EC:60:7B:5B:18:1C:90:EA:96:70:90:94:81:60:02:76:08:87:8B:89:2E:6B:35:EB:89:97:42:D1:75"}}},"request":{"raw":"GET /match/sape?id=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: sync.dsp.solta.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-23T15:07:26.563561Z","times_seen":33826,"resource_available":true,"data":null}},"time_used":550,"timings":{"blocked":47,"dns":14,"connect":58,"send":0,"wait":57,"receive":0,"ssl":367},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.lotus-dsp.ru/sync?ssp=Sape\u0026id=0700007F04C945692C05C20F02170623","fqdn":"a.lotus-dsp.ru","domain":"lotus-dsp.ru","tld":"ru"},"ip":{"addr":"213.171.19.241","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lotus-dsp.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 07:52:10 GMT","end":"Tue, 10 Mar 2026 07:52:09 GMT"},"fingerprint":{"sha1":"52:1E:E1:52:CD:27:DF:CC:10:13:C0:C0:B1:F0:C0:C3:8E:5D:F6:12","sha256":"17:BE:57:05:66:36:0F:5C:21:7B:D9:6B:6F:D3:0E:D1:B1:6B:45:4F:0E:70:C0:B4:FB:3D:CD:83:71:7A:2D:3C"}}},"request":{"raw":"GET /sync?ssp=Sape\u0026id=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: a.lotus-dsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0\r\nDate: Fri, 19 Dec 2025 21:52:05 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: adpreudid=1; Expires=Mon, 19 Jan 2026 00:52:05 GMT; Domain=.lotus-dsp.ru; SameSite=None; Secure; Path=/\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":712,"timings":{"blocked":311,"dns":0,"connect":53,"send":0,"wait":42,"receive":0,"ssl":289},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=368","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /cmatch?dp=368 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125; cSyncDp7v3=1766181125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://match.qtarget.tech/userbind?src=sape\u0026id=0200007F04C945692F05F70F02B5A907\r\nset-cookie: cSyncDp241v2=1766181126; expires=Sun, 18-Jan-26 21:52:06 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kimberlite.io/rtb/sync/buzzoola?u=dc9f3926-86a9-421d-5ccf-499949244772\u0026f=https%3A%2F%2Fwww.acint.net%2Frmatch%3Fdp%3D243%26euid%3DaUXJBfk9Os4%26r%3Dhttps%253A%252F%252Facint.net%252Fcmatch%253Fdp%253D243\u0026n=1","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.92","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 03 Mar 2025 10:28:30 GMT","end":"Sat, 04 Apr 2026 10:28:29 GMT"},"fingerprint":{"sha1":"D5:F7:CA:61:DC:40:4D:B7:43:BC:F1:6F:13:3A:45:A0:D0:53:09:FA","sha256":"BD:79:98:BE:D4:24:4A:51:5B:6D:A8:A1:58:2B:4E:1D:6B:90:66:40:1F:2C:E3:4A:C4:9F:7E:A3:A2:F6:79:12"}}},"request":{"raw":"GET /rtb/sync/buzzoola?u=dc9f3926-86a9-421d-5ccf-499949244772\u0026f=https%3A%2F%2Fwww.acint.net%2Frmatch%3Fdp%3D243%26euid%3DaUXJBfk9Os4%26r%3Dhttps%253A%252F%252Facint.net%252Fcmatch%253Fdp%253D243\u0026n=1 HTTP/1.1\r\nHost: kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: da=UX4CYAAAAAE; u=aUXJBfk9Os4~uSOVeOdD_IIfKRySSAcBlsHoxRs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx\r\nDate: Fri, 19 Dec 2025 21:52:06 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: as=T72MF2lFyQY; path=/rtb; max-age=604800; samesite=none; httponly; secure\nda=2OZrzwAAAAE; path=/rtb; max-age=604800; samesite=none; httponly; secure\nf=https%3A%2F%2Fwww.acint.net%2Frmatch%3Fdp%3D243%26euid%3DaUXJBfk9Os4%26r%3Dhttps%253A%252F%252Facint.net%252Fcmatch%253Fdp%253D243; max-age=30; samesite=none; httponly; secure\nn=2; max-age=30; samesite=none; httponly; secure\r\nlocation: https://dm.hybrid.ai/match?id=414\r\nreferrer-policy: no-referrer\r\nserver-timing: app;srv=s24a;dur=0.0010\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-content/et-cache/15746/et-divi-dynamic-15746.css?ver=1765275956","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:03.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-content/et-cache/15746/et-divi-dynamic-15746.css?ver=1765275956 HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 9763\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:04 GMT\r\nlast-modified: Tue, 09 Dec 2025 10:25:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KaL%2Bf0QGdr7rOrOuH3sRA249pEDRuJVedOHjWykuIhZ8R6%2BK4D725QAxZe%2F2t85rgUiXxpQ%2FVMFf6c1oIu3UgFMCmqetRcnKis0CDzpR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a1ff71a54120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106228,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13396)","md5":"0ca0beb49b6db4755ec03257c1399582","sha1":"debad23a1a0988fa799831a8d02e4567f6a40048","sha256":"3a4d269d84172132f6813f116549ad108cd9d1f6d22a79ee1f9c9f66b2dbc389","sha512":"6a08e9bcd5acdae046ede3c3fa71f03f357e9909e7aeb9995256f384826b3905e3febbed2b1fa3afa825a4f7507b863064e642c7139756fced144b9d5b17d2b7","ssdeep":"384:kxk46epSqyl/5dh4/BOPcgM5Le+8w8mGwYgjOUJt2VxlURAE/CiS3A8KfTlLJ43a:G6epSrqe+8w8mGwYgWlURAEsb4xJr","tlshash":"9ba3d20faf3932f0724367d4bd86f3d8d1a9d283b98215d97ea0d505ab832da8c7215d","first_seen":"2025-12-19T21:52:38.044812Z","last_seen":"2025-12-19T21:52:38.044812Z","times_seen":1,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":660,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4uaVI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:04.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"FF:92:1F:D0:E9:98:18:CB:FA:1B:90:BE:3E:B9:41:44:DE:05:28:15","sha256":"0C:A2:FB:F0:F6:40:B0:82:E4:FB:1A:51:96:48:D8:22:C9:05:C4:41:67:1F:41:D4:8C:F2:B6:85:A4:D2:3A:AF"}}},"request":{"raw":"GET /s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4uaVI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dignomaden.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Dec 2025 00:03:10 GMT\r\nexpires: Fri, 18 Dec 2026 00:03:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 164934\r\nlast-modified: Mon, 15 Sep 2025 16:30:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25320, version 1.0","md5":"ab5f9cdfc018e9b3273d5d961be2972a","sha1":"63ff6a3ee66d23b379dd424bfd5e8d8e9d12ea21","sha256":"938b98d93a6a57874b667e9b6c84ab6f9ed33f2725c95fcfdcfe729f4a093a08","sha512":"298612a6a8dd3d0b4e898b9d9e7b5eba005e51914f5153220f186fee00dc2dce6707682d9db7e9d0e6ed5c4a821300130a16325d6fb5144fac6d88ca06af38c9","ssdeep":"384:+3XuZZMpH5yQgJ+YRF5oPe5HdRp6tuHrAKtFns1JXGUmtjCFEk2RpjIcRm:+3XYUHEBhRFOPe17p6PGF9sD","tlshash":"e1b2f1564a7aedd28b6a0e25b4f0ddaca270da16f0e0e033c3f24cf9d6247d47a51670","first_seen":"2025-09-17T13:23:54.181964Z","last_seen":"2026-04-23T14:32:43.632513Z","times_seen":4673,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":62,"dns":1,"connect":22,"send":0,"wait":8,"receive":2,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D14","fqdn":"ssp-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.93","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sape.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Dec 2025 23:36:44 GMT","end":"Sat, 07 Mar 2026 23:36:43 GMT"},"fingerprint":{"sha1":"3D:9F:9C:85:A9:AB:7C:9C:83:0D:C2:B6:55:54:6F:89:BB:7F:7F:EE","sha256":"49:D9:BD:BD:C8:71:CC:CD:39:05:E4:44:2E:9E:54:03:9D:A8:07:B3:9E:E4:4E:FD:7A:38:89:6D:8A:12:EA:15"}}},"request":{"raw":"GET /rmatch/?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D14 HTTP/1.1\r\nHost: ssp-rtb.sape.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: https://acint.net/rmatch?dp=14\u0026euid=1804420A05C94569140115C10267C26B\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nset-cookie: sspuid=CkIEGGlFyQXBFQEUa8JnAowfH+Nah9IQZeGqT+Tz/lzIJV/4; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":441,"timings":{"blocked":182,"dns":39,"connect":31,"send":0,"wait":31,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14","fqdn":"ssp-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.93","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sape.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Dec 2025 23:36:44 GMT","end":"Sat, 07 Mar 2026 23:36:43 GMT"},"fingerprint":{"sha1":"3D:9F:9C:85:A9:AB:7C:9C:83:0D:C2:B6:55:54:6F:89:BB:7F:7F:EE","sha256":"49:D9:BD:BD:C8:71:CC:CD:39:05:E4:44:2E:9E:54:03:9D:A8:07:B3:9E:E4:4E:FD:7A:38:89:6D:8A:12:EA:15"}}},"request":{"raw":"GET /rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14 HTTP/1.1\r\nHost: ssp-rtb.sape.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sspuid=CkIEGGlFyQXBFQEUa8JnAowfH+Nah9IQZeGqT+Tz/lzIJV/4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: https://acint.net/match?dp=14\u0026euid=1804420A05C94569140115C10267C26B\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:03.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 29744\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:04 GMT\r\nlast-modified: Tue, 07 Nov 2023 22:52:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yaZEjM%2F7LgZkvjYPDl2ChzPlLUnFROv3R9xqtJUgMoBAHeM%2BGwrrPrO4DxF0xVxpXNY3b3Nre9ipEjTJ9S4id66rz%2FkMqxc5t7qCDEOZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a1ff71a5a120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-23T15:10:01.48645Z","times_seen":736370,"resource_available":true,"data":null}},"time_used":765,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":763,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/mc/?dp=10\u0026tc=1","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:04.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /mc/?dp=10\u0026tc=1 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dignomaden.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAB2lFyQQPwgUsIwYXAsmMCWSQroXAhKItTaNi7UdcK13E; test_cookie=CheckForPermission\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: text/html\r\nset-cookie: cSyncDp14v6=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp17v3=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp45v5=1766181124; expires=Sat, 20-Dec-25 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp53v5=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp553=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp62v4=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp67v5=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp68v3=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp71v2=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp85v2=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp95v4=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp98v3=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp104v3=1766181124; expires=Fri, 02-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp107v2=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp125v5=1766181124; expires=Sat, 03-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp126v3=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp129v2=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp136v3=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp148v2=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp149v3=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp151v2=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp251v3=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp186v2=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp217v2=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp226v1=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp239v3=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp243v2=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp260v2=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp244v2=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp248v3=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp261v1=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp264=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp274=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp289v2=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp296v3=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp312v1=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp313v1=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp368v1=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp331v1=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp337v1=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp351v1=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp361v1=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp353v1=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp362v1=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp366v1=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp385v1=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp390v1=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp399v1=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp394v1=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp415v1=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp420v2=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp431=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp433=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp444=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp203v2=1766181124; expires=Sat, 20-Dec-25 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp450=1766181124; expires=Sun, 18-Jan-26 21:52:04 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10140,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (452), with CRLF, LF line terminators","md5":"861bab0c7fadade63f7186357316f8ec","sha1":"878ad3fd9009dc55e4d1821d7f1ab3d31a2708fb","sha256":"54afde12090cfeb3d3719067eb1179e918de04f66e77229e4f4c4db764e8c588","sha512":"27b6d2e942799b99137cab17e4fb55ccca7b9eff12b1c4cc53d99621597a4ae573fb5ec1a1f52cf44138ad84d08061cf195d2c90dbae492bfec1f974b9c0843b","ssdeep":"192:DSu+QJ7dtBB7PFYZp1aO6XaD6Pmc9rDvLtPVeaPmcosqvGrXviv3/+33X/17z3mg:DTJBB7+ZR/exNvlmGLoGHPlbmyZMC3hT","tlshash":"2122ff7349ca7be72a6ab7c0d18c27c85433368739e7184aee3d59133b464bed5168c4","first_seen":"2025-12-19T21:52:38.048163Z","last_seen":"2025-12-19T21:52:38.048163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dm-eu.hybrid.ai/match?id=106\u0026vid=0700007F04C945692C05C20F02170623","fqdn":"dm-eu.hybrid.ai","domain":"hybrid.ai","tld":"ai"},"ip":{"addr":"37.230.131.22","port":443,"asn":200197,"as":"Hybrid Adtech Sp.z.o.o.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hybrid.ai","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 22 Sep 2025 00:00:00 GMT","end":"Sun, 04 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:21:9E:FA:EF:FF:FF:F2:8D:68:A8:F9:EB:ED:53:32:CC:17:9B:ED","sha256":"C9:20:9A:53:1E:FA:35:C7:29:64:1F:C3:7B:1E:34:73:C8:15:87:43:EA:35:06:B8:8D:86:E5:11:19:2A:60:FC"}}},"request":{"raw":"GET /match?id=106\u0026vid=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: dm-eu.hybrid.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 19 Dec 2025 21:46:56 GMT\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nexpires: -1\r\np3p: CP=\"NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC\"\r\nx-mode: 5031\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://www.acint.net\r\naccess-control-allow-credentials: true\r\nserver: Hybrid Web Server\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":136,"dns":20,"connect":22,"send":0,"wait":27,"receive":0,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/sape/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"65.21.90.246","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 18 Jun 2025 16:48:51 GMT","end":"Mon, 20 Jul 2026 16:48:50 GMT"},"fingerprint":{"sha1":"8D:89:EE:F7:48:68:E7:7D:F7:C4:AF:97:AB:98:A3:A3:1E:8D:6A:92","sha256":"08:06:AA:31:11:0F:33:B8:7D:B5:7E:B4:A2:2A:65:C6:77:DE:F6:65:A2:F4:BE:D3:7E:8D:9F:84:17:CE:20:A0"}}},"request":{"raw":"GET /sape/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Fri, 19 Dec 2025 21:52:08 GMT\r\ncontent-length: 0\r\nlocation: https://sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0=\r\nset-cookie: session_tptc=1766181128258;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=180\nsession_tptc-legacy=1766181128258;Version=1;Domain=.upravel.com;Path=/;Max-Age=180\r\np3p: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":6188,"timings":{"blocked":3054,"dns":33,"connect":3035,"send":0,"wait":27,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.bumlam.com/?src=sap1\u0026uid=0700007F04C945692C05C20F02170623","fqdn":"sync.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.170","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 15:01:44 GMT","end":"Thu, 19 Mar 2026 15:01:43 GMT"},"fingerprint":{"sha1":"73:09:47:20:FC:A8:0D:DC:79:F0:08:58:30:EF:F6:AE:72:A0:E1:0B","sha256":"73:92:7B:67:F8:0C:85:9F:42:64:89:B1:B4:BA:C5:BB:D0:C1:72:38:91:59:BA:0B:54:55:C0:4E:84:7F:12:34"}}},"request":{"raw":"GET /?src=sap1\u0026uid=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: sync.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 19 Dec 2025 21:52:05 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: suuid3=IiRmNTVjM2RhZS1kZDI0LTExZjAtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Thu, 14 Dec 2045 21:52:05 GMT; Domain=bumlam.com; SameSite=None; Secure\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nLocation: //sync.bumlam.com/?src=sap1\u0026s_data=CAIQARiFkpfKBmIgMDcwMDAwN0YwNEM5NDU2OTJDMDVDMjBGMDIxNzA2MjOiARD1XD2u3SQR8IbgACWQwGR8\r\nETag: f55c3dae-dd24-11f0-86e0-002590c0647c\r\nCache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":14,"connect":24,"send":0,"wait":22,"receive":0,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.al-adtech.com/api/sync/sape","fqdn":"ssp.al-adtech.com","domain":"al-adtech.com","tld":"com"},"ip":{"addr":"45.139.25.124","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.al-adtech.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 07:19:40 GMT","end":"Sun, 18 Jan 2026 07:19:39 GMT"},"fingerprint":{"sha1":"49:E7:E6:61:8C:94:61:60:5D:BD:36:D3:9F:62:39:4D:B0:9E:4F:32","sha256":"5E:4B:55:76:B2:4F:F0:62:A1:AB:66:B8:93:41:28:AD:E7:86:98:99:13:64:E8:01:12:8A:4F:8C:A1:D6:21:97"}}},"request":{"raw":"GET /api/sync/sape HTTP/1.1\r\nHost: ssp.al-adtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.20.1\r\nDate: Fri, 19 Dec 2025 21:52:05 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Credentials: true\r\nLocation: https://mc.acint.net/rmatch?dp=261\u0026euid=4f2f0eeb-c24f-4f72-863b-7803d52c49ae\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D261\r\nSet-Cookie: afp_cookie=gAAAAABpRckFI-D3_LlwrDl14FOMKDhNlZ2fckBRkkk0K3lXKjnW6baiHYqYAaQkqcS0qKc7xXgZUcdpLlpIg48zsZwx9bOsh45QomZH6l4UdsfCF6j0wy6ppl-Af-hyeIi5gyYG2J8QA9Z-xIA7lCChYtZjp9RRtLCB9XxO9StjXgB_2Cknb5WIHXPe5P5-7U6fbxmfMJaEsmCqF77IYQUMstroXr_TFw==$; expires=Mon, 19 Jan 2026 21:52:05 GMT; path=/; secure; SameSite=None\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":591,"timings":{"blocked":72,"dns":20,"connect":73,"send":0,"wait":63,"receive":0,"ssl":351},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D95\u0026dp=14","fqdn":"ssp-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.93","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sape.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Dec 2025 23:36:44 GMT","end":"Sat, 07 Mar 2026 23:36:43 GMT"},"fingerprint":{"sha1":"3D:9F:9C:85:A9:AB:7C:9C:83:0D:C2:B6:55:54:6F:89:BB:7F:7F:EE","sha256":"49:D9:BD:BD:C8:71:CC:CD:39:05:E4:44:2E:9E:54:03:9D:A8:07:B3:9E:E4:4E:FD:7A:38:89:6D:8A:12:EA:15"}}},"request":{"raw":"GET /rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D95\u0026dp=14 HTTP/1.1\r\nHost: ssp-rtb.sape.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sspuid=CkIEGGlFyQXBFQEUa8JnAowfH+Nah9IQZeGqT+Tz/lzIJV/4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: https://acint.net/rmatch?dp=14\u0026euid=1804420A05C94569140115C10267C26B\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.9","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:03.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.9 HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 479\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:04 GMT\r\nlast-modified: Fri, 08 Apr 2022 20:07:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YZaRPKIQmDq6wkgcC2n%2B1AJ6KT2M0SoSZiHmRVVM6paRCGzV7N%2FD02zIUPuJl6GZ2dvWmyHb%2B4upAAhpqU55ztqvsW6AqTV8surMPZmH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a1ff73aa8120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1191,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1191), with no line terminators","md5":"51300497928562f8c86c7aaba99237cd","sha1":"e5826832b85c6afc6502b74cbb8ac5394b04c363","sha256":"6d161e98e47ae150b51211443eef37040fb6269dcf85ad2048548066dca99e6f","sha512":"04bfdf1a41712238902bc6a0e07efaf356217e98560c52fa5d175c29191617c35853382ce2f69966bdd5e1b40114b872d962a5fad26a9e0b7d4fc016a6dcb833","ssdeep":"","tlshash":"c72121daa848111a51c7246c70e7131c32bdd354d0108528b92ee9df29f5bc9647eb70","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-04-23T15:45:04.553912Z","times_seen":43151,"resource_available":true,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":677,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.buzzoola.com/cookiesync/redirect?redirect_url=https%3A%2F%2Fkimberlite.io%2Frtb%2Fsync%2Fbuzzoola%3Fu%3D%24%7BUUID%7D%26f%3Dhttps%253A%252F%252Fwww.acint.net%252Frmatch%253Fdp%253D243%2526euid%253DaUXJBfk9Os4%2526r%253Dhttps%25253A%25252F%25252Facint.net%25252Fcmatch%25253Fdp%25253D243%26n%3D1","fqdn":"exchange.buzzoola.com","domain":"buzzoola.com","tld":"com"},"ip":{"addr":"176.114.74.35","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buzzoola.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:11:29 GMT","end":"Mon, 09 Mar 2026 06:11:28 GMT"},"fingerprint":{"sha1":"6D:1A:28:D1:AB:8D:18:D1:38:1A:55:28:34:A1:03:2A:BC:7A:1C:5A","sha256":"AB:C0:F2:6B:07:6C:D6:89:63:34:97:78:29:CD:C6:D1:2A:75:3D:C0:7C:E0:05:94:11:71:82:6B:67:8C:2D:36"}}},"request":{"raw":"GET /cookiesync/redirect?redirect_url=https%3A%2F%2Fkimberlite.io%2Frtb%2Fsync%2Fbuzzoola%3Fu%3D%24%7BUUID%7D%26f%3Dhttps%253A%252F%252Fwww.acint.net%252Frmatch%253Fdp%253D243%2526euid%253DaUXJBfk9Os4%2526r%253Dhttps%25253A%25252F%25252Facint.net%25252Fcmatch%25253Fdp%25253D243%26n%3D1 HTTP/1.1\r\nHost: exchange.buzzoola.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uuid=dc9f3926-86a9-421d-5ccf-499949244772\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 246\r\nlocation: https://kimberlite.io/rtb/sync/buzzoola?u=dc9f3926-86a9-421d-5ccf-499949244772\u0026f=https%3A%2F%2Fwww.acint.net%2Frmatch%3Fdp%3D243%26euid%3DaUXJBfk9Os4%26r%3Dhttps%253A%252F%252Facint.net%252Fcmatch%253Fdp%253D243\u0026n=1\r\nset-cookie: uuid=dc9f3926-86a9-421d-5ccf-499949244772; Path=/; Domain=buzzoola.com; Expires=Sun, 18 Jan 2026 21:52:06 GMT; Max-Age=2592000; Secure; SameSite=None\r\nserverid: TODO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dm.hybrid.ai/match?id=414","fqdn":"dm.hybrid.ai","domain":"hybrid.ai","tld":"ai"},"ip":{"addr":"37.230.131.22","port":443,"asn":200197,"as":"Hybrid Adtech Sp.z.o.o.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hybrid.ai","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 22 Sep 2025 00:00:00 GMT","end":"Sun, 04 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:21:9E:FA:EF:FF:FF:F2:8D:68:A8:F9:EB:ED:53:32:CC:17:9B:ED","sha256":"C9:20:9A:53:1E:FA:35:C7:29:64:1F:C3:7B:1E:34:73:C8:15:87:43:EA:35:06:B8:8D:86:E5:11:19:2A:60:FC"}}},"request":{"raw":"GET /match?id=414 HTTP/1.1\r\nHost: dm.hybrid.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 19 Dec 2025 21:46:58 GMT\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nexpires: -1\r\np3p: CP=\"NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC\"\r\nx-mode: 0589\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\nserver: Hybrid Web Server\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":19,"connect":22,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.22.2","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:03.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.22.2 HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1158\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:04 GMT\r\nlast-modified: Wed, 27 Sep 2023 02:20:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jRjPk%2FsDP7tmOirbIG2NKCMdYx3f%2FJ%2BSFrYS%2Fm5FHhasVPOsR%2FNMy077bZceXFRJrTR4vX3UEfJvEI%2FaBKonNgcBhxrBjWTDeZ9ZUwYH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a1ff72a88120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3349,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"fa07f10043b891dacdb82f26fd2b42bc","sha1":"9c1dc49e9747758e033c0e9a7d016401bd78602c","sha256":"462747422c6af30aa81a0373fa1cfd736455cef52bdbb816f67be9531d84eace","sha512":"828f723649ae5a7b996de43fefc9b904d1a1d54f83671cc6998fdc7e0bb75c7761c8e0bb4a4497f2e4658606c193953c7019d7859e6ebab3db34c794ec575618","ssdeep":"","tlshash":"1361316932a6282d4d5330ef1eaf4014b619c0b707ebe86c78be85c98f849480625bfd","first_seen":"2023-03-07T01:11:43Z","last_seen":"2026-04-23T15:07:31.836077Z","times_seen":34345,"resource_available":true,"data":null}},"time_used":656,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":656,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/salvattore.js?ver=4.22.2","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:03.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/salvattore.js?ver=4.22.2 HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3242\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:04 GMT\r\nlast-modified: Wed, 27 Sep 2023 02:20:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zlYWuZ0bf3rnr3%2FX4QbtIVcvlZisqF4YmgcDnPRhBjdKiaC7fawh2jGO%2BFPFwG3vcpVL6uP9X4V%2FmRQ8Ca1TVQniAKH90b7e7oN6CvJP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a1ff72a9e120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8574,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6322)","md5":"bf7fe805ab945e4b2c4d56da59476811","sha1":"307135fd2987f477c7bd50fcd0cc28a1cff1f568","sha256":"b6205029e1016596807b655c8f57818736a787e32ceb1407effa152ac3bb9380","sha512":"1237ac2a5bd2bd37b403f747d0ce3db65ed1e9c67b92aa4018b08c0747167470de113e36a01950f3a266b815806170f4c15068cad18ab71eb32957fef2d6ffa4","ssdeep":"192:dPmRQHMXDHcCC3fxqC0TN6ZbucRm5i5HHQpcaQGcFjAW90YgtKryaxggy6cqF4/8:dP+TXjcCC3fslQucYu0ca7cFjAW90gxr","tlshash":"1102d99db62430616b9b36bd233fa11ef573213ea4090094956dc8ec6971c4b82e7edc","first_seen":"2023-03-07T01:26:02Z","last_seen":"2026-04-23T15:07:31.9055Z","times_seen":11076,"resource_available":true,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.dsp.onetarget.ru/sape/pixel?id=0700007F04C945692C05C20F02170623","fqdn":"pixel.dsp.onetarget.ru","domain":"onetarget.ru","tld":"ru"},"ip":{"addr":"130.193.53.230","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixel.dsp.onetarget.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:14:20 GMT","end":"Sat, 07 Feb 2026 23:14:19 GMT"},"fingerprint":{"sha1":"5E:A1:72:7E:72:04:53:FC:FF:28:99:DD:EA:11:E7:49:38:B5:24:85","sha256":"2C:03:1F:EA:22:EA:61:57:9A:AB:31:BD:B5:B8:FD:6C:A5:24:D4:F6:BB:D2:20:24:1D:29:F1:F9:3C:F2:DF:D3"}}},"request":{"raw":"GET /sape/pixel?id=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: pixel.dsp.onetarget.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-length: 0\r\nlocation: https://x01.aidata.io/0.gif?pid=5813217\u0026id=a80cfda8-58e8-475c-9c03-49d87098c684\r\nset-cookie: USER_ID=a80cfda8-58e8-475c-9c03-49d87098c684;max-age=2147483647;Secure;HttpOnly;SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":90,"dns":7,"connect":33,"send":0,"wait":35,"receive":0,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sp.linkssp.ru/cm?key=edc11c69abfc708136ed44d548263e69\u0026location=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D394%26euid%3D%7Buid%7D%0A","fqdn":"sp.linkssp.ru","domain":"linkssp.ru","tld":"ru"},"ip":{"addr":"188.246.224.210","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sp.linkssp.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 10:39:31 GMT","end":"Thu, 05 Feb 2026 10:39:30 GMT"},"fingerprint":{"sha1":"F1:5A:EB:09:0F:F6:AB:E3:F8:71:55:93:C6:AE:BA:DA:75:94:BE:FD","sha256":"B5:AE:05:DF:F6:07:87:F4:AC:B7:24:E7:72:43:7A:3D:64:AD:DF:4F:17:F7:29:3E:BE:B9:08:55:D7:42:5B:E2"}}},"request":{"raw":"GET /cm?key=edc11c69abfc708136ed44d548263e69\u0026location=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D394%26euid%3D%7Buid%7D%0A HTTP/1.1\r\nHost: sp.linkssp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Fri, 19 Dec 2025 21:52:05 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nBidder: bid-03 1.371.7aa7e39\r\nLocation: https://mc.acint.net/match?dp=394\u0026euid=bd8a5c88-a11c-4ed9-bc59-36cf42496d89\r\nSet-Cookie: uid=bd8a5c88-a11c-4ed9-bc59-36cf42496d89.6945c905.13fc4bac49925acc; domain=.linkssp.ru; path=/; expires=Sun, 18-Jan-2026 21:52:05 GMT; SameSite=None; Secure;\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":701,"timings":{"blocked":272,"dns":7,"connect":60,"send":0,"wait":54,"receive":0,"ssl":306},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0=","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"65.21.90.246","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:08.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 18 Jun 2025 16:48:51 GMT","end":"Mon, 20 Jul 2026 16:48:50 GMT"},"fingerprint":{"sha1":"8D:89:EE:F7:48:68:E7:7D:F7:C4:AF:97:AB:98:A3:A3:1E:8D:6A:92","sha256":"08:06:AA:31:11:0F:33:B8:7D:B5:7E:B4:A2:2A:65:C6:77:DE:F6:65:A2:F4:BE:D3:7E:8D:9F:84:17:CE:20:A0"}}},"request":{"raw":"GET /sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0= HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1766181128258\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Fri, 19 Dec 2025 21:52:08 GMT\r\ncontent-length: 0\r\np3p: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nset-cookie: user_id=d0d3fcbf-427d-473a-ab5e-0cc7b0dacc53;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\nuser_id-legacy=d0d3fcbf-427d-473a-ab5e-0cc7b0dacc53;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\r\nlocation: https://www.acint.net/rmatch?dp=71\u0026euid=d0d3fcbf-427d-473a-ab5e-0cc7b0dacc53\u0026r=https%3A%2F%2Fsync.upravel.com%2Fpbd%2Fsync\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id.seedbacklink.com/wp-content/uploads/2023/11/Badge-Seedbacklink_Artboard-1-webp-version.webp","fqdn":"id.seedbacklink.com","domain":"seedbacklink.com","tld":"com"},"ip":{"addr":"103.146.203.63","port":443,"asn":136052,"as":"PT Cloud Hosting Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:03.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"id.seedbacklink.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 04:09:46 GMT","end":"Sat, 28 Feb 2026 04:09:45 GMT"},"fingerprint":{"sha1":"ED:70:35:F9:26:25:B4:0B:91:B0:F0:0B:64:22:1E:28:58:6B:68:2A","sha256":"D2:D2:AF:C6:37:91:2F:0B:B1:76:37:D0:AD:CC:4E:C1:70:74:19:B2:76:85:03:D0:87:00:A4:12:8E:92:97:64"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/Badge-Seedbacklink_Artboard-1-webp-version.webp HTTP/1.1\r\nHost: id.seedbacklink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:04 GMT\r\netag: \"bbca-65641a5c-124e0e;;;\"\r\nlast-modified: Mon, 27 Nov 2023 04:26:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 48074\r\naccept-ranges: bytes\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48074,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9c1d596ea7385108687242d95e28a07d","sha1":"c87045a793b335519926711bf5ecf5de8cb10c61","sha256":"68e5e138413d2cd0fb80e9847dbf3812eb81982a949699b98254bdb71c06a576","sha512":"1a59a1092728517ae8262523529c47c7f697cf3d3d5b19a7dc8d6b892f3b759959ffe49afeac1cb18f52afd59a521d779760c5ae604cb05ba870a383494be2a8","ssdeep":"768:DBcQYi6HcRfFp0PgGmi77hqSip51MC+PW9SEPTbGgjtHgvl2Qf9J3:D2Qvtp7C7Nir6l+95nhlq2SH","tlshash":"eb23f1c4d75a8d0bc55ca7ba1fe604abc094e08c7f6573e7917f5eac881e249996c00b","first_seen":"2024-01-29T23:24:57Z","last_seen":"2026-04-17T09:11:18.508885Z","times_seen":45,"resource_available":false,"data":null}},"time_used":2778,"timings":{"blocked":781,"dns":19,"connect":387,"send":0,"wait":401,"receive":788,"ssl":398},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D95%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D95%26euid%3D","fqdn":"ssp.bestssp.com","domain":"bestssp.com","tld":"com"},"ip":{"addr":"83.222.96.170","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bestssp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 06:22:36 GMT","end":"Wed, 28 Jan 2026 06:22:35 GMT"},"fingerprint":{"sha1":"95:A8:8C:CC:00:4B:4F:F7:FA:C9:DB:10:E2:5E:90:5F:D2:BE:4F:DE","sha256":"6D:09:43:87:06:3E:CB:12:D7:3E:D4:A3:AA:E3:F9:C3:A4:4C:F9:C2:68:79:63:4A:85:7D:E1:67:41:4D:27:55"}}},"request":{"raw":"GET /sspmatch?url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D95%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D95%26euid%3D HTTP/1.1\r\nHost: ssp.bestssp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.22.0\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 126\r\nlocation: https://mc.acint.net/rmatch?dp=95\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95\u0026euid=CTJXWHKQ\r\nset-cookie: uid=CTJXWHKQ; Expires=Mon, 17 Dec 2035 21:52:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.22.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":38,"connect":81,"send":0,"wait":59,"receive":0,"ssl":241},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.opendsp.ru/match/sape?id=0700007F04C945692C05C20F02170623","fqdn":"sync.opendsp.ru","domain":"opendsp.ru","tld":"ru"},"ip":{"addr":"176.114.85.126","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.opendsp.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 05 Aug 2025 11:37:07 GMT","end":"Sun, 06 Sep 2026 11:37:06 GMT"},"fingerprint":{"sha1":"A6:D2:A4:C1:9C:FF:E8:4A:C2:A7:58:7A:3B:98:4B:CC:11:C8:FF:1F","sha256":"26:E3:31:B9:C2:C0:30:F6:85:B7:6E:2F:0E:4F:B0:C6:E5:39:D0:1A:8A:86:02:1E:55:68:94:B1:95:F1:4A:A7"}}},"request":{"raw":"GET /match/sape?id=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: sync.opendsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-23T15:07:26.563561Z","times_seen":33826,"resource_available":true,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":30,"connect":34,"send":0,"wait":30,"receive":1,"ssl":275},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adiam.tech/sync?ssp=29","fqdn":"a.adiam.tech","domain":"adiam.tech","tld":"tech"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adiam.tech","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:36:13 GMT","end":"Sun, 15 Mar 2026 14:33:45 GMT"},"fingerprint":{"sha1":"55:AB:2E:8E:B1:CA:24:0F:FB:1D:DB:46:CE:AE:A3:FF:CA:4D:E6:82","sha256":"CA:59:80:58:08:A8:DA:D0:34:C1:52:5B:95:A0:20:A7:1C:ED:5A:8C:F4:A5:38:BD:39:0F:A6:10:30:AC:76:0A"}}},"request":{"raw":"GET /sync?ssp=29 HTTP/1.1\r\nHost: a.adiam.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: preadiam=1; Expires=Mon, 19 Jan 2026 00:52:05 GMT; Domain=.adiam.tech; SameSite=None; Secure; Path=/\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpFs76GFZEu%2F5%2Fq65%2BMa0Kh6xGSO89H4UaljIQRpu5RFMp5tjvNqLGXHndvar2sRgRBnmtCPBKYMJivFIg2Mds5%2FXjnmjgCwiZc%3D\"}]}\r\ncf-ray: 9b0a20024a260b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":35,"connect":12,"send":0,"wait":104,"receive":0,"ssl":180},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-content/uploads/2023/07/business-coach-006.jpg","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:03.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-content/uploads/2023/07/business-coach-006.jpg HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17727\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:04 GMT\r\nlast-modified: Thu, 03 Aug 2023 06:27:49 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V0OgYEeRA%2FpZmQ6cr0LqHFY2NW6Z3tSxbddcJ9WI%2BBfvtJN7QFUgUXPk2haCqdRsR%2BBI8iFS8sopVRCOX%2BgrZzDhfEjRcLi9XlIPUs8P\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a1ff71a72120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":17727,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"5a0168084d21bf36ebbdc3d94dcf2c4e","sha1":"c4d4d5566e7c51fcb511be13e6459850e51b14c7","sha256":"717e8d046ed116ad0d2e3cd69ccb08cb15cceaf9d55908e4e6c93fa192f6d7e6","sha512":"050f0ac5d329feeb7e106f3532a9c56d90f5f06f42da45a0eedd90ffbc2dc1ae103579a0219fea4edbc2d63439a462d773cb9040e24a22479f67581c38449dca","ssdeep":"384:/8TIOf3cWNzB6xCi4ePnaaT2nlS44v1Mdpz72fxufLhBOV:/8kOf3vV6xZiaejKa776xALq","tlshash":"9a82d04e66a785dbed2c25701998a7cb4d5e9f87b7640632798f0cc1ffe611dc880b11","first_seen":"2024-08-19T18:29:12.423045Z","last_seen":"2025-12-19T21:52:38.053801Z","times_seen":3,"resource_available":false,"data":null}},"time_used":800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":799,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-content/uploads/2023/07/business-coach-024.jpg","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:03.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-content/uploads/2023/07/business-coach-024.jpg HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 629182\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:04 GMT\r\nlast-modified: Thu, 03 Aug 2023 06:27:49 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CNkgDZHf4p4z%2F9MY87R1Sz0cnbZ4kTE1V%2F2FEMx6OUHIXM%2B5VvvxMIo%2Faxc8VfkbjPK0WKI0bY1xt7aThKgYBrjd%2B6IOR8ez3Xsg0TO2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a1ff72a74120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":629182,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1140, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=800], progressive, precision 8, 800x1140, components 3","md5":"71881819c9f80ebff3cc4be6787a2cdf","sha1":"2cd840793d3c8c561fdf2c689142af1ec22ac00f","sha256":"4bcbb034a36af143527a5609704f9c723975dc21c44523dfd2378bce8e1dce4e","sha512":"c73ff9572b86d399773792a5a18f2f0359884f397daf61e3b157b2838718343bf019a53cf32364791027d26160f197b2ce9a59a90c5d03cef6c6054a5e70cb0f","ssdeep":"12288:qTXfDtvqJv3GXeUUTMBE3DFzbR9L1tUdMrVJSr6U97WEcjSvCjlpbPT:qTbtA3GXe3MKFzbRVk+rVg6OcjS6hN","tlshash":"79d423816f4b8820fd7e3479c3f3da579268101812fb3d24bece5d25abd53da2994b06","first_seen":"2024-08-19T18:29:12.420636Z","last_seen":"2025-12-19T21:52:38.055772Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":658,"receive":551,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.videohead.tech/sync?ssp=68","fqdn":"a.videohead.tech","domain":"videohead.tech","tld":"tech"},"ip":{"addr":"213.171.19.231","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"videohead.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 04:18:22 GMT","end":"Mon, 16 Mar 2026 04:18:21 GMT"},"fingerprint":{"sha1":"D4:BD:35:64:FD:0D:B7:42:06:E8:84:8A:76:DD:64:2F:67:69:8B:32","sha256":"01:FF:C8:A9:A2:01:4D:06:C1:B0:03:E1:A4:B2:98:E0:05:D8:DC:56:D2:61:B4:9D:77:78:AB:7E:E4:AF:C4:72"}}},"request":{"raw":"GET /sync?ssp=68 HTTP/1.1\r\nHost: a.videohead.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0\r\nDate: Fri, 19 Dec 2025 21:52:05 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: prevhead=1; Expires=Mon, 19 Jan 2026 00:52:05 GMT; Domain=.videohead.tech; SameSite=None; Secure; Path=/\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":674,"timings":{"blocked":232,"dns":9,"connect":43,"send":0,"wait":84,"receive":0,"ssl":299},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid.sspnet.tech/sync/sape?redirect=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D203%26euid%3D%24%7BUSER_ID%7D\u0026user_id=0700007F04C945692C05C20F02170623","fqdn":"bid.sspnet.tech","domain":"sspnet.tech","tld":"tech"},"ip":{"addr":"212.41.25.244","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sspnet.tech","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 09 May 2025 09:12:30 GMT","end":"Wed, 10 Jun 2026 09:12:29 GMT"},"fingerprint":{"sha1":"74:C6:56:28:7A:24:F3:E7:6F:E4:3C:01:30:57:4F:FB:A4:9F:E5:55","sha256":"4E:E4:15:9F:F0:61:EB:12:FA:CB:DB:21:F4:43:29:CE:73:C1:BA:2A:62:49:B9:83:77:AE:79:3F:C8:24:E1:90"}}},"request":{"raw":"GET /sync/sape?redirect=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D203%26euid%3D%24%7BUSER_ID%7D\u0026user_id=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: bid.sspnet.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.28.0\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-length: 0\r\nx-request-id: 930cd707-c347-42b6-9780-14e5559f856f\r\nlocation: https://exchange.buzzoola.com/cookiesync/redirect?redirect_url=https%3A%2F%2Fbid.sspnet.tech%2Fsync%2Freverse%3Fdsp_slug%3Dbuzzoola%26dsp_user_id%3D%24%7BUUID%7D%26sync_id%3Dbbc03016-729f-426d-b2a2-55278a71ecf3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":907,"timings":{"blocked":319,"dns":0,"connect":31,"send":0,"wait":27,"receive":0,"ssl":527},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match?dp=217\u0026euid=40997328-96d3-47da-b54e-ca9866c95ec0","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=217\u0026euid=40997328-96d3-47da-b54e-ca9866c95ec0 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-23T15:13:06.163658Z","times_seen":339718,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/match?dp=337\u0026euid=BSt8T2NnA","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=337\u0026euid=BSt8T2NnA HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-23T15:13:06.163658Z","times_seen":339718,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match/?dp=361\u0026euid=VUnZUsbWsOWu9RE","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match/?dp=361\u0026euid=VUnZUsbWsOWu9RE HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125; cSyncDp7v3=1766181125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-23T15:13:06.163658Z","times_seen":339718,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:03.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4678\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:04 GMT\r\nlast-modified: Tue, 08 Aug 2023 22:50:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=akY770esEceAdI0uDYV%2B1pfzFNTBY3KkffQ4xcccO%2Be%2B4WcK5669dMGYiimdXXsX94%2B5dkIgPiK9UOwPy2EENjTrSZjb%2FFip%2BKrP2NVM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a1ff71a5e120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-23T15:10:40.543141Z","times_seen":683903,"resource_available":true,"data":null}},"time_used":700,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":697,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:03.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 2394\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:04 GMT\r\nlast-modified: Tue, 29 Sep 2020 15:53:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SGJqeRqe4hJOMQ7151wRJBDhBFXIEQj7UoEL2EjSde%2Fdjvecvr7Vxvrp6c%2BIQIfk8ZJVV9yWWAGkdxyFCj6X3UJulxlaI4HLa4nJjUvu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a1ff71a65120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11256,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11256), with no line terminators","md5":"2b0dd7eecea03b4bdedb94ba622fdb03","sha1":"703becba85161118dd6fc66af465428ef43f561c","sha256":"b7908a015a567ec2363011df2475368dbff34360e9da3fdff50604d6395fb646","sha512":"fe64cff950921bdf83ec09fe79ca5ce52de40f5b8788697eb1d7b28055f2817778347d5d3c81a324801c7ec7151b3ee0eee99b2882c3c3b10bd760342d3bf3e7","ssdeep":"192:xthsVmeDXDanvgZenjAJKdXSMpNO96hDIzL79V1QVSD1CNxn6fR31r:czDanvuenjAkNBhDInSwh31r","tlshash":"713223929c88212cf43795645ac107ec923fc303fd62ededb73c7679caca58a516a943","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-04-23T15:07:31.84571Z","times_seen":73101,"resource_available":false,"data":null}},"time_used":658,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":658,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.9","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:03.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.9 HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 453\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:04 GMT\r\nlast-modified: Tue, 07 Feb 2023 16:00:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RI6iN%2Bb0jhMMaMjpMKhTOztl6mqbakDcmINiAkX9PmHdMIKElQV5ir8zFwjAOipTH7ni6BTSC5pi3Enxk4kPhp3a8UT7qbMIhiZeAppU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a1ff73aac120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1107,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1107), with no line terminators","md5":"8a5c9689ae636c452b6808740ba04136","sha1":"8d2c85d7779d00c12aeb6b55a99443952d9a144e","sha256":"79cb399203843f65199bec32bc4abac5dfd20f141d3e4ec1424bf00c7108fa45","sha512":"a80491b5c34e4719b042d1ef0dc8cff0e2ad29343ac8926a3cab36202b02dc360000b430b3141e474fe08bffc54329eb47082d530af6b44727490c4cd0f0ed0c","ssdeep":"","tlshash":"ee11f3d43e84757909d75428a47f0b18a0fb4d76804e0db0ee54b63e7d7cd409196a4a","first_seen":"2023-03-29T22:52:25Z","last_seen":"2026-04-23T14:47:57.616403Z","times_seen":40584,"resource_available":true,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.utraff.com/sync?ssp=sape","fqdn":"a.utraff.com","domain":"utraff.com","tld":"com"},"ip":{"addr":"213.171.19.244","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utraff.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 04:18:08 GMT","end":"Thu, 12 Mar 2026 04:18:07 GMT"},"fingerprint":{"sha1":"7F:77:C5:6F:57:1F:C2:53:D7:D3:04:93:B1:75:D8:91:AA:38:A0:78","sha256":"B2:CE:C5:75:9F:E8:F2:94:5D:6D:78:3C:9D:ED:55:DC:C8:2F:EA:4F:D2:50:B2:6F:A7:4A:85:A1:5F:4F:C0:14"}}},"request":{"raw":"GET /sync?ssp=sape HTTP/1.1\r\nHost: a.utraff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0\r\nDate: Fri, 19 Dec 2025 21:52:05 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: preutid=1; Expires=Mon, 19 Jan 2026 00:52:05 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/\npreutid=1; Expires=Mon, 19 Jan 2026 00:52:05 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":543,"timings":{"blocked":193,"dns":21,"connect":49,"send":0,"wait":103,"receive":0,"ssl":166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f55c3dae-dd24-11f0-86e0-002590c0647c.n2.sync.bumlam.com/?src=sape","fqdn":"f55c3dae-dd24-11f0-86e0-002590c0647c.n2.sync.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"80.87.198.111","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n0.sync.bumlam.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 16:52:42 GMT","end":"Fri, 06 Feb 2026 16:52:41 GMT"},"fingerprint":{"sha1":"D6:13:3A:3E:71:02:DF:C5:96:43:AD:36:A2:BA:99:EC:85:72:1B:47","sha256":"AB:C7:4E:DF:6B:02:15:86:BE:BB:3C:DE:16:88:C1:CE:99:3D:4E:DB:4E:7F:19:6E:C7:9B:85:6F:52:4E:74:D5"}}},"request":{"raw":"GET /?src=sape HTTP/1.1\r\nHost: f55c3dae-dd24-11f0-86e0-002590c0647c.n2.sync.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: suuid3=IiRmNTVjM2RhZS1kZDI0LTExZjAtODZlMC0wMDI1OTBjMDY0N2M*\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie/1.10.3\r\nDate: Fri, 19 Dec 2025 21:52:06 GMT\r\nContent-Length: 0\r\nConnection: close\r\nLocation: https://pix.bumlam.com/sync/sape/done\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0\r\nPragma: no-cache\r\nExpires: 0\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie:1.10.3","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":150,"dns":75,"connect":26,"send":0,"wait":38,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=126","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /cmatch?dp=126 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125; cSyncDp7v3=1766181125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://match.qtarget.tech/userbind?src=sape\u0026id=0200007F04C945692F05F70F02B5A907\r\nset-cookie: cSyncDp241v2=1766181126; expires=Sun, 18-Jan-26 21:52:06 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:03.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:03 GMT\r\ncontent-type: application/javascript\r\nexpires: Fri, 19 Dec 2025 22:40:03 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LLE0NSkk2gjfRGIwW92R7P7N2aP%2FgL%2FAUWw%2BZTVNX4fyAXByY5OgYylsEV%2FVYi3DGnHEO4yHMXfeZeh3Fifx3ymKdJ9RlNYTByJ2Uw5J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b0a1ff72a80120a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-23T15:12:36.712546Z","times_seen":311007,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ck.silvermob.com/sync?pid=533\u0026uid=0700007F04C945692C05C20F02170623\u0026rd=1\u0026r=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D274%26euid%3D%5BUSER_ID%5D","fqdn":"ck.silvermob.com","domain":"silvermob.com","tld":"com"},"ip":{"addr":"212.95.41.187","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.silvermob.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:3C:57:8B:31:3A:8D:1D:BD:2E:AA:97:E5:85:62:E9:6E:FF:0D:27","sha256":"3F:EB:62:39:C6:44:25:10:53:E0:44:4B:F1:5C:3B:44:D0:D1:9F:17:E1:F5:ED:1D:33:6D:A7:65:3C:9A:91:BD"}}},"request":{"raw":"GET /sync?pid=533\u0026uid=0700007F04C945692C05C20F02170623\u0026rd=1\u0026r=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D274%26euid%3D%5BUSER_ID%5D HTTP/1.1\r\nHost: ck.silvermob.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 19 Dec 2025 21:52:05 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: close\r\nX-Powered-By: Express\r\nSet-Cookie: sm_uid=sm_Lq5N8xdUUapn; Domain=ck.silvermob.com; Expires=Sat, 19 Dec 2026 21:52:05 GMT; Path=/; SameSite=None; Secure\r\nx-sm-trace: refresh-2\r\nCache-Control: public, max-age=0\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Cookie\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-23T15:07:26.563561Z","times_seen":33826,"resource_available":true,"data":null}},"time_used":553,"timings":{"blocked":92,"dns":6,"connect":33,"send":0,"wait":33,"receive":0,"ssl":376},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match?dp=394\u0026euid=bd8a5c88-a11c-4ed9-bc59-36cf42496d89","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=394\u0026euid=bd8a5c88-a11c-4ed9-bc59-36cf42496d89 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125; cSyncDp7v3=1766181125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-23T15:13:06.163658Z","times_seen":339718,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adspend.space/sape?uid=0700007F04C945692C05C20F02170623","fqdn":"sync.adspend.space","domain":"adspend.space","tld":"space"},"ip":{"addr":"5.189.234.229","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adspend.space","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Oct 2025 12:52:42 GMT","end":"Mon, 26 Jan 2026 12:52:41 GMT"},"fingerprint":{"sha1":"AC:B3:38:66:C2:FC:35:EC:DA:72:49:D5:D9:BF:BD:DF:99:F7:6D:B4","sha256":"30:85:8C:F6:1D:73:6D:12:AE:79:49:D8:B6:3A:64:D8:38:8D:53:42:DC:FA:CD:0E:44:44:C9:0C:E6:4A:08:04"}}},"request":{"raw":"GET /sape?uid=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: sync.adspend.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.26.2\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 79\r\nlocation: /check?uid=0700007F04C945692C05C20F02170623\u0026ssp=sape\r\nset-cookie: as-user=f78a47f8-8c88-41b1-8fd2-8cb79bf760be; Path=/; Max-Age=4320000; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, authorization\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.26.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":32,"connect":36,"send":0,"wait":32,"receive":0,"ssl":165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id.adx.bid/match/sape?eid=0700007F04C945692C05C20F02170623","fqdn":"id.adx.bid","domain":"adx.bid","tld":"bid"},"ip":{"addr":"172.67.70.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adx.bid","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 20:44:08 GMT","end":"Tue, 10 Feb 2026 21:43:30 GMT"},"fingerprint":{"sha1":"CA:0B:25:51:E0:58:1F:6F:2B:D9:A7:61:0F:2C:11:43:C6:F3:1A:E3","sha256":"EF:58:73:9B:AA:B3:85:BA:14:6F:51:19:2C:A3:B6:EF:27:B5:C5:A0:1A:23:97:91:E8:05:BB:EE:6C:9D:A4:C6"}}},"request":{"raw":"GET /match/sape?eid=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: id.adx.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\nserver: cloudflare\r\nx-error: not_active\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FGuOEInVVTfYqQA%2F71hGgxV84mA18fcAym0ui2ardTIFA9p8ud7IlhxawoaUlpMuwTgsD%2BLw4NjiYG3zL8%2F%2BgZgcVMQJG%2Bg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a2004ec200b4d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":659,"timings":{"blocked":331,"dns":6,"connect":8,"send":0,"wait":32,"receive":0,"ssl":275},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-content/uploads/2023/07/cropped-dignomaden-logo-32x32.png","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:05.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-content/uploads/2023/07/cropped-dignomaden-logo-32x32.png HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nCookie: fid=10114f38-8c56-42a8-9c9c-19899852f9cd; _ac_oid=52c23a0593a416c46c93b04c0a432175%3A1766184725315\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 2738\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:05 GMT\r\nlast-modified: Thu, 03 Aug 2023 06:27:49 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ouhD0vFusuD1EwauZnG4wGMTc4wQz6IzeM4N6Q6oJig0o8Gv%2FRd5cVNYlp5pEzzPp3HOutzs6HbpxIyyGmpyoy1%2BSkAfRBoegfcLhf9d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a20029abe120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2738,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"501227f3fffb6292ba6eeaf277061fbf","sha1":"3b4da388a286f5d007b8dfbb7fa257b0f64caac7","sha256":"f8721b6a236f0a6266df19734f98288be99450173819e917e4a54926e06d5a64","sha512":"deade6c44283cd877418a49b4148bc049de27a2c474f9c4e4fc939fdbbb4d929712c9c2b1921183f0198c9f7ef4cb9fb60280c2a902b125abddb29abd86ab2ae","ssdeep":"","tlshash":"a5512b8ee9bb5c20d070b36ed320f2846f970884c3193c6cd41ac07647f81764b48bb8","first_seen":"2025-12-19T21:52:38.06032Z","last_seen":"2025-12-19T21:52:38.06032Z","times_seen":1,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/oci.js?t=1766181124909","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:04.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /oci.js?t=1766181124909 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Mon, 08 Sep 2025 17:51:43 GMT\r\netag: W/\"68bf17af-7dac\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32169,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32168)","md5":"c3fa5133b6899a2abb39fb79ed94300f","sha1":"dc1d5c75420b38cd7509a783ed09345d0ff78ac4","sha256":"66b141eb9ae44c86efc510844a71cf208c02d02abe03af3a7d8cc26736d3e19c","sha512":"db171b491636ef67596c4874d2b3e553eac016e303a713f12eb1e5c5116cab5f5c904b6aaf358268c04011016484b6920b227cf2d72c2de30f79bd16eba59bad","ssdeep":"384:ixcLKIHRnN2xFRhKv3E6mXHHKvaloLG2+KlLqK/CSuxAjUd0jJFKOEyEqWiodJVb:1BHRN6AIeJZKOgIJANJVEEvDHIoOI","tlshash":"64e219ccb2c3b02d0263a9ba047f6046763bbd59250c4883d5bad5d17ca9e5a513bfb8","first_seen":"2023-03-12T19:09:04Z","last_seen":"2026-03-15T10:53:33.326269Z","times_seen":5562,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.dmp.otm-r.com/match/sape?id=0700007F04C945692C05C20F02170623","fqdn":"sync.dmp.otm-r.com","domain":"otm-r.com","tld":"com"},"ip":{"addr":"194.55.244.179","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync.dmp.otm-r.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 06:06:37 GMT","end":"Tue, 10 Mar 2026 06:06:36 GMT"},"fingerprint":{"sha1":"C0:50:09:84:7A:D9:92:52:FE:BD:EA:94:B3:65:D6:83:2C:B3:52:8A","sha256":"6A:F5:31:88:A3:2A:6E:A1:F0:48:DA:7C:7D:A2:DD:EF:82:C2:71:12:9E:54:D7:9E:4F:C0:88:FA:C6:F9:E3:B3"}}},"request":{"raw":"GET /match/sape?id=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: sync.dmp.otm-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.27.5\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nlocation: /match/sape?id=0700007F04C945692C05C20F02170623\u0026otcm_check=1766181125\r\nset-cookie: mpid=Njk0NWM5MDUwM2M5ZjMzZQ==; max-age=31536000; domain=otm-r.com; path=/; secure; SameSite=None; Partitioned\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":580,"timings":{"blocked":235,"dns":39,"connect":62,"send":0,"wait":60,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.gonet-ads.com/match/sape.js?id=0700007F04C945692C05C20F02170623","fqdn":"sync.gonet-ads.com","domain":"gonet-ads.com","tld":"com"},"ip":{"addr":"188.42.104.140","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gonet-ads.com","organization":"Go Mobile Inc"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Fri, 19 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:9B:E1:71:D4:17:D5:18:6C:A4:F9:5F:2F:DD:DE:56:8C:CB:EC:5F","sha256":"A2:75:01:34:62:6B:85:83:76:99:89:B4:24:0B:18:DF:F2:6E:B4:35:EE:60:EC:E8:1C:4D:E1:23:9E:07:6B:1D"}}},"request":{"raw":"GET /match/sape.js?id=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: sync.gonet-ads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-23T15:07:26.563561Z","times_seen":33826,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":13,"connect":18,"send":0,"wait":187,"receive":0,"ssl":324},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/rmatch?dp=261\u0026euid=4f2f0eeb-c24f-4f72-863b-7803d52c49ae\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D261","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=261\u0026euid=4f2f0eeb-c24f-4f72-863b-7803d52c49ae\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D261 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125; cSyncDp7v3=1766181125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=261\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/rmatch?dp=368\u0026euid=NT_2_0700007F04C945692C05C20F02170623_1942271935793658_xqFmRo\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D368","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=368\u0026euid=NT_2_0700007F04C945692C05C20F02170623_1942271935793658_xqFmRo\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D368 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125; cSyncDp7v3=1766181125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=368\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/rmatch?dp=14\u0026euid=1804420A05C94569140115C10267C26B\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D14","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=14\u0026euid=1804420A05C94569140115C10267C26B\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D14 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":205,"dns":9,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=14","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /cmatch?dp=14 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://ads.betweendigital.com/match?bidder_id=73\u0026external_user_id=0200007F04C945692F05F70F02B5A907\r\nset-cookie: cSyncDp7v3=1766181125; expires=Sun, 18-Jan-26 21:52:05 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.qtarget.tech/userbind?src=sape\u0026id=0200007F04C945692F05F70F02B5A907","fqdn":"match.qtarget.tech","domain":"qtarget.tech","tld":"tech"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.599Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /userbind?src=sape\u0026id=0200007F04C945692F05F70F02B5A907 HTTP/1.1\r\nHost: match.qtarget.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":7548,"timings":{"blocked":7547,"dns":1,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-content/themes/Divi/core/admin/fonts/modules/base/modules.woff","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:04.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-content/themes/Divi/core/admin/fonts/modules/base/modules.woff HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: font/woff\r\ncontent-length: 6152\r\nlast-modified: Wed, 27 Sep 2023 02:20:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uOCM7%2B%2F510M6LLZLMOMrkNcmOyGp81n8AY6u6mWaMkyXLuzCXMVGHiYnaksRp%2BS2mYeiMqiCcZZQswhMJXHSZe4phbu21nWtIaWfpY%2Bd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a1ffc9b6b120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6152,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 6152, version 2.4","md5":"7b72a741a8c6909f6037b51c8973db64","sha1":"195bf95f0bfb83e9abd26fa84b2d04e26fcce59b","sha256":"ef71c937db7d4381cd982493ff9728723d27dd44282cc5adef9e16bc7025ad26","sha512":"3663351a79987b2369bc97203a84a50480c29362d517f0318c4e60945ff2d3098114b34521dc929a6ac0e8b1386e8a2189d1db9c3a51102e68d2d0ea1fd59f93","ssdeep":"192:bAoF0oiGj1iaiU99dF+v7KU12kmqODQUgJ1Y:bAAl7dF+t2pGv","tlshash":"d1c1b9178786cbafc6098f301cba8b1a2ffedb24e26e434e15585e409940bf48e15f85","first_seen":"2023-09-21T10:50:45Z","last_seen":"2026-04-23T14:28:59.766535Z","times_seen":6936,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":478,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/aci.js","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:04.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /aci.js HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 8799\r\nlast-modified: Mon, 08 Sep 2025 17:51:42 GMT\r\netag: \"68bf17ae-225f\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 20 Dec 2025 09:52:04 GMT\r\ncache-control: max-age=43200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":31372,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (31372), with no line terminators","md5":"20f0381069e78a636d53b3d505e967c7","sha1":"800464b5f1400a923482d4298b472e17cda20737","sha256":"7b2d18d3dc9861604cbbde63dd9218e12a6cac1a06f52b877eddf61f9f7c3b37","sha512":"5aa6d98aca4d9881d5bf2c8dd71ff3d35e534a09ee749bf248c3d6f838f240f0d77edf06f8f2eae1b7a3797d9d447fe2da922395243f22547a13c4b6ea9981a2","ssdeep":"768:EMNY2uNr6tm67+DVRhNk6L0Wbha0XByPcf0:EMN/uNWo67+DLhNZaMByks","tlshash":"1ce2f98a7191f47306d3a179c12f050bf136696620e8d0e4f536dce0aeb858e6577f3a","first_seen":"2024-10-20T11:06:54.910201Z","last_seen":"2026-01-29T05:23:48.922533Z","times_seen":4303,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":9,"dns":14,"connect":27,"send":0,"wait":27,"receive":26,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statmedia.ru/counter/sync.gif?system=sape\u0026cb=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D399%26euid%3D%24UID","fqdn":"statmedia.ru","domain":"statmedia.ru","tld":"ru"},"ip":{"addr":"82.148.14.194","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statmedia.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 04:55:37 GMT","end":"Thu, 19 Feb 2026 04:55:36 GMT"},"fingerprint":{"sha1":"56:0A:46:B3:31:72:5F:7F:E1:F3:1B:FE:6B:F6:48:C4:63:07:E2:59","sha256":"9E:2E:C9:05:CE:37:BD:2F:CA:81:4D:2C:BC:37:B3:69:F6:4E:DE:D4:39:53:D2:27:88:E1:26:A8:A8:58:46:3B"}}},"request":{"raw":"GET /counter/sync.gif?system=sape\u0026cb=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D399%26euid%3D%24UID HTTP/1.1\r\nHost: statmedia.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 19 Dec 2025 21:52:05 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-04-23T15:24:15.387711Z","times_seen":97006,"resource_available":true,"data":null}},"time_used":614,"timings":{"blocked":263,"dns":8,"connect":29,"send":0,"wait":30,"receive":0,"ssl":284},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1026--d0d3fcbf-427d-473a-ab5e-0cc7b0dacc53.stbid.ru/?r=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dpbd","fqdn":"1026--d0d3fcbf-427d-473a-ab5e-0cc7b0dacc53.stbid.ru","domain":"stbid.ru","tld":"ru"},"ip":{"addr":"185.115.93.200","port":443,"asn":42881,"as":"Sc Itns.net Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:08.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.stbid.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Apr 2025 09:20:40 GMT","end":"Sun, 24 May 2026 09:20:39 GMT"},"fingerprint":{"sha1":"CD:D0:42:9B:03:7A:27:A9:42:E1:4D:28:F3:FC:EA:D1:AC:D7:13:7E","sha256":"17:48:80:43:30:8B:5E:01:B8:65:DF:1B:22:DC:DB:13:D8:6B:DF:48:78:50:08:AB:69:B1:90:41:E5:62:3E:C4"}}},"request":{"raw":"GET /?r=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dpbd HTTP/1.1\r\nHost: 1026--d0d3fcbf-427d-473a-ab5e-0cc7b0dacc53.stbid.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie/1.10.3\r\nDate: Fri, 19 Dec 2025 21:52:08 GMT\r\nContent-Length: 0\r\nConnection: close\r\nLocation: https://sync.upravel.com/image?source=pbd\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie:1.10.3","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":142,"dns":40,"connect":29,"send":0,"wait":30,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/hit/?v=0.7.1\u0026uid=4a76b3e1-225e-4003-a8cf-f38df01cd15e\u0026dp=10\u0026tz=%2B00%3A00\u0026nc=501483\u0026u=https%3A%2F%2Fdignomaden.com%2F\u0026r=\u0026rs=1280x1024\u0026t=dignomaden%20-%20Dig%20Nomaden\u0026oE=1\u0026oP=1\u0026dT=2025-12-19T21%3A52%3A04.902\u0026fu=10114f38-8c56-42a8-9c9c-19899852f9cd","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:04.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /hit/?v=0.7.1\u0026uid=4a76b3e1-225e-4003-a8cf-f38df01cd15e\u0026dp=10\u0026tz=%2B00%3A00\u0026nc=501483\u0026u=https%3A%2F%2Fdignomaden.com%2F\u0026r=\u0026rs=1280x1024\u0026t=dignomaden%20-%20Dig%20Nomaden\u0026oE=1\u0026oP=1\u0026dT=2025-12-19T21%3A52%3A04.902\u0026fu=10114f38-8c56-42a8-9c9c-19899852f9cd HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nset-cookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-23T15:13:06.163658Z","times_seen":339718,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kimberlite.io/rtb/sync/sape2?u=0700007F04C945692C05C20F02170623\u0026rc=1","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.92","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 03 Mar 2025 10:28:30 GMT","end":"Sat, 04 Apr 2026 10:28:29 GMT"},"fingerprint":{"sha1":"D5:F7:CA:61:DC:40:4D:B7:43:BC:F1:6F:13:3A:45:A0:D0:53:09:FA","sha256":"BD:79:98:BE:D4:24:4A:51:5B:6D:A8:A1:58:2B:4E:1D:6B:90:66:40:1F:2C:E3:4A:C4:9F:7E:A3:A2:F6:79:12"}}},"request":{"raw":"GET /rtb/sync/sape2?u=0700007F04C945692C05C20F02170623\u0026rc=1 HTTP/1.1\r\nHost: kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: u=aUXJBfk9Os4~uSOVeOdD_IIfKRySSAcBlsHoxRs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx\r\nDate: Fri, 19 Dec 2025 21:52:06 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: u=aUXJBfk9Os4~uSOVeOdD_IIfKRySSAcBlsHoxRs; path=/; max-age=7776000; samesite=none; httponly; secure\nda=UX4CYAAAAAE; path=/rtb; max-age=604800; samesite=none; httponly; secure\r\nlocation: https://exchange.buzzoola.com/cookiesync/redirect?redirect_url=https%3A%2F%2Fkimberlite.io%2Frtb%2Fsync%2Fbuzzoola%3Fu%3D%24%7BUUID%7D%26f%3Dhttps%253A%252F%252Fwww.acint.net%252Frmatch%253Fdp%253D243%2526euid%253DaUXJBfk9Os4%2526r%253Dhttps%25253A%25252F%25252Facint.net%25252Fcmatch%25253Fdp%25253D243%26n%3D1\r\nreferrer-policy: no-referrer\r\nserver-timing: app;srv=s6a;dur=0.0007\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.buzzoola.com/cookiesync/dsp/sape-banner?uid=0700007F04C945692C05C20F02170623\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126","fqdn":"exchange.buzzoola.com","domain":"buzzoola.com","tld":"com"},"ip":{"addr":"176.114.74.35","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buzzoola.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:11:29 GMT","end":"Mon, 09 Mar 2026 06:11:28 GMT"},"fingerprint":{"sha1":"6D:1A:28:D1:AB:8D:18:D1:38:1A:55:28:34:A1:03:2A:BC:7A:1C:5A","sha256":"AB:C0:F2:6B:07:6C:D6:89:63:34:97:78:29:CD:C6:D1:2A:75:3D:C0:7C:E0:05:94:11:71:82:6B:67:8C:2D:36"}}},"request":{"raw":"GET /cookiesync/dsp/sape-banner?uid=0700007F04C945692C05C20F02170623\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126 HTTP/1.1\r\nHost: exchange.buzzoola.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\nserver: nginx\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 269\r\nlocation: /cookiesync/dsp/sape-banner?set_buzzoola_cookie=t\u0026uid=0700007F04C945692C05C20F02170623\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126\r\nset-cookie: uuid=dc9f3926-86a9-421d-5ccf-499949244772; Path=/; Domain=buzzoola.com; Expires=Sun, 18 Jan 2026 21:52:05 GMT; Max-Age=2592000; Secure; SameSite=None\r\nserverid: TODO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":14,"connect":32,"send":0,"wait":51,"receive":0,"ssl":161},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otclick-adv.ru/core/match.gif?s=56\u0026reference=https%3A%2F%2Fmc.acint.net%2Fmatch%2F%3Fdp%3D361%26euid%3D%23%7BUID%7D","fqdn":"otclick-adv.ru","domain":"otclick-adv.ru","tld":"ru"},"ip":{"addr":"139.45.228.134","port":443,"asn":57304,"as":"JSC RetnNet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.otclick-adv.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 15 Sep 2025 18:16:14 GMT","end":"Sat, 17 Oct 2026 18:16:13 GMT"},"fingerprint":{"sha1":"AC:7F:37:A5:93:0B:F1:5C:17:8C:E2:05:1C:18:98:EB:54:71:45:A1","sha256":"D0:29:C5:21:78:51:6F:01:ED:DC:C3:B6:AA:53:D9:5F:7B:59:04:97:33:EE:31:F7:62:1A:DE:FA:03:83:F2:F9"}}},"request":{"raw":"GET /core/match.gif?s=56\u0026reference=https%3A%2F%2Fmc.acint.net%2Fmatch%2F%3Fdp%3D361%26euid%3D%23%7BUID%7D HTTP/1.1\r\nHost: otclick-adv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 19 Dec 2025 21:52:05 GMT\r\nContent-Length: 124\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nP3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA\r\nCache-Control: no-cache, max-age=0, must-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Thursday, 01-Jan-1970 00:00:00 GMT\r\nSet-Cookie: idntfy=VUnZUsbWsOWu9RE; expires=Mon, 17-Dec-2035 21:52:05 GMT; domain=otclick-adv.ru; path=/c/; SameSite=None; Secure\nidntfy=VUnZUsbWsOWu9RE; expires=Mon, 17-Dec-2035 21:52:05 GMT; domain=otclick-adv.ru; path=/core/; SameSite=None; Secure\r\nLocation: https://mc.acint.net/match/?dp=361\u0026euid=VUnZUsbWsOWu9RE\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":603,"timings":{"blocked":217,"dns":15,"connect":28,"send":0,"wait":28,"receive":0,"ssl":309},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/rmatch?dp=95\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95\u0026euid=CTJXWHKQ","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=95\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95\u0026euid=CTJXWHKQ HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D95\u0026dp=14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nset-cookie: cSyncDp14v4=1766181125; expires=Sun, 18-Jan-26 21:52:05 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/match?dp=68\u0026euid=Njk0NWM5MDUwM2M5ZjMzZQ%3D%3D","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=68\u0026euid=Njk0NWM5MDUwM2M5ZjMzZQ%3D%3D HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nset-cookie: cSyncDp14v4=1766181125; expires=Sun, 18-Jan-26 21:52:05 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=95","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /cmatch?dp=95 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125; cSyncDp7v3=1766181125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://match.qtarget.tech/userbind?src=sape\u0026id=0200007F04C945692F05F70F02B5A907\r\nset-cookie: cSyncDp241v2=1766181126; expires=Sun, 18-Jan-26 21:52:06 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-content/uploads/2023/07/dignomaden-logo.png","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:03.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-content/uploads/2023/07/dignomaden-logo.png HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 226747\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:04 GMT\r\nlast-modified: Thu, 03 Aug 2023 06:27:49 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DmxmsZ38At0%2BC5iEA8%2FYET5IwQcLvYlTD7K3JOXpvLrNL8H2zQbfNOIIRzgGoJTIx0w1YmsNjZql35hte08aLYhLuFWDutI%2FQM%2BeRehg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a1ff71a6c120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":226747,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 557 x 337, 8-bit/color RGBA, non-interlaced","md5":"03839320d99fa8570fedbe96ee7bd9a9","sha1":"b53efaae76e10351d4de53e6ee613e91f39ee79e","sha256":"730466f5282fd4d593d5ce4f696df1c96b2dcf7a981c28bb6a1ff2dc3f5a6fb9","sha512":"abaf4f76ce237e12ed3a6161cd72c1e45e431d29e2f33de959035f3ddca300181ac6acd202d70e782e22c99e0b43b33ad875211481f52c9d4769028229540115","ssdeep":"6144:wp3gXPNoWFfB7OpjjkkYPETd+6Nh9xIbHdBH:wkPNdfB7ijsKc6f9xIbHdBH","tlshash":"0f2423c202a0ca965649b399bc174fc0bc63f86bebc8d18eb75505b34174a7b8f891f5","first_seen":"2025-12-19T21:52:38.064523Z","last_seen":"2025-12-19T21:52:38.064523Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1085,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":762,"receive":323,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh50XSwaPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:04.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"FF:92:1F:D0:E9:98:18:CB:FA:1B:90:BE:3E:B9:41:44:DE:05:28:15","sha256":"0C:A2:FB:F0:F6:40:B0:82:E4:FB:1A:51:96:48:D8:22:C9:05:C4:41:67:1F:41:D4:8C:F2:B6:85:A4:D2:3A:AF"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh50XSwaPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dignomaden.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24372\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 17 Dec 2025 20:46:19 GMT\r\nexpires: Thu, 17 Dec 2026 20:46:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 176745\r\nlast-modified: Mon, 15 Sep 2025 17:09:19 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24372,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24372, version 1.0","md5":"3c724a6e82b16954e5da261eb026fd17","sha1":"1539b1cdf153d93a8d1ff9388853ab5cf3d461f1","sha256":"da09dd01ba86bee1322d2c9b8dffe36eb6538cd40a86784de17bad7612e9fd2a","sha512":"985eeb1413c78e2279f84c397cd715724441639d37e0537245b62a981ae3bb935973cd5cf4a3c5b2d9b3c43ee17725836788743a684512b01a98a84ccd0b93ee","ssdeep":"384:wGC/t+JLacBV2BZXEwx/BRhZxnRS0dE9FsN8hVnkmXkTpryC1QTd:wG2+JLvQXf/BRhZxnRxsFSenzkTd10","tlshash":"1fb2e14eb4d56701ffb06e69ce9b8554d358a03e3164f121af90a93fa45c1b8cb9f0b0","first_seen":"2025-09-21T12:46:41.022689Z","last_seen":"2026-04-23T03:19:45.471637Z","times_seen":285,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":75,"dns":1,"connect":7,"send":0,"wait":9,"receive":5,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.new-programmatic.com/userbind?src=sape\u0026id=0700007F04C945692C05C20F02170623","fqdn":"match.new-programmatic.com","domain":"new-programmatic.com","tld":"com"},"ip":{"addr":"217.65.2.150","port":443,"asn":3175,"as":"Citytelecom LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"admanager.geniusgroup.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 09:13:46 GMT","end":"Tue, 03 Mar 2026 09:13:45 GMT"},"fingerprint":{"sha1":"8E:DB:65:4E:B4:C0:6B:8E:F4:21:46:D2:07:19:4B:66:31:CA:47:14","sha256":"B3:2D:0D:52:14:DE:FA:E7:6C:F7:2E:51:97:84:95:E1:45:E6:C5:A5:8F:60:9A:B5:00:B9:83:59:83:32:89:8B"}}},"request":{"raw":"GET /userbind?src=sape\u0026id=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: match.new-programmatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.22.1\r\nDate: Fri, 19 Dec 2025 21:52:05 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":38,"receive":0,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.techdsp.ru/sync?src=sape\u0026uid=0700007F04C945692C05C20F02170623","fqdn":"sync.techdsp.ru","domain":"techdsp.ru","tld":"ru"},"ip":{"addr":"37.48.253.136","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.techdsp.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 19 Feb 2025 14:03:23 GMT","end":"Mon, 23 Mar 2026 14:03:22 GMT"},"fingerprint":{"sha1":"E0:51:62:A1:08:10:67:51:3A:43:8B:07:2F:EC:40:2D:BA:A8:2E:5C","sha256":"8E:DA:37:A7:45:0C:02:8B:99:79:9E:F6:0F:CF:98:2D:C0:9F:74:B4:18:E8:2E:F5:D7:DD:D8:3C:3C:43:5C:85"}}},"request":{"raw":"GET /sync?src=sape\u0026uid=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: sync.techdsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-length: 0\r\nlocation: https://x01.aidata.io/0.gif?pid=0914828\u0026id=hcVOWzR6RkeMiBITx0-b0Q\u0026dest=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D351%26euid%3DhcVOWzR6RkeMiBITx0-b0Q%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D351\r\nreferrer-policy: no-referrer\r\nset-cookie: uid=hcVOWzR6RkeMiBITx0-b0Q; Path=/; Max-Age=31536000; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":676,"timings":{"blocked":196,"dns":3,"connect":27,"send":0,"wait":26,"receive":0,"ssl":423},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=261","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /cmatch?dp=261 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125; cSyncDp7v3=1766181125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://match.qtarget.tech/userbind?src=sape\u0026id=0200007F04C945692F05F70F02B5A907\r\nset-cookie: cSyncDp241v2=1766181126; expires=Sun, 18-Jan-26 21:52:06 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.qtarget.tech/userbind?src=sape\u0026id=0200007F04C945692F05F70F02B5A907","fqdn":"match.qtarget.tech","domain":"qtarget.tech","tld":"tech"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.643Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /userbind?src=sape\u0026id=0200007F04C945692F05F70F02B5A907 HTTP/1.1\r\nHost: match.qtarget.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":7504,"timings":{"blocked":7504,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-19T21:52:02.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/7.4.33\r\nlink: \u003chttps://dignomaden.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://dignomaden.com/wp-json/wp/v2/pages/15746\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://dignomaden.com/\u003e; rel=shortlink\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1xvxlrh%2F1CsDH47iCtHhVXiwkw08BgMZISwSH62lzdKbJkSkDUc16xgL4LJBLIDGsV8le3KisB2LkqrRTS0c6YBVuqTRczCfASlfUARp\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b0a1ff2da8b32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Easy Pie Chart","description":"Lightweight jQuery plugin to render and animate nice pie charts with the HTML5 canvas element.","website":"https://rendro.github.io/easy-pie-chart/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Divi:4.22.2","description":"Divi is a WordPress Theme and standalone WordPress plugin from Elegant themes that allows users to build websites using the visual drag-and-drop Divi page builder.","website":"https://www.elegantthemes.com/gallery/divi","common_platform_enumeration":"","icon":"Divi.svg","categories":["Page builders","WordPress themes","WordPress plugins"]},{"name":"FitVids.JS:4.22.2","description":"jQuery plugin for fluid width video embeds","website":"https://fitvidsjs.com/","common_platform_enumeration":"","icon":"FitVids.JS.png","categories":["Widgets","Video players"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":234696,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (33087)","md5":"8f0cc29cea8ffaacef71fe663b385493","sha1":"b9023106dd5b1fbc7054ea79416a29bbca6b7c18","sha256":"e079aa7f7cf5653545eb1cc18c14beb921751a93fbb568e85e02fba0958749ff","sha512":"e07faedc3b9743b6f0a3a5c95decb85a3e24d377dc5503473007fd7d8cfb7c1dc094534abf3c7d7c0d4e8cf3969ebffc4a17e63195a2ed319436a8e7b20c5bc9","ssdeep":"3072:QfgDSG4kowgYNKpPbb5Jzw36XaP1rx3y5lVEulQPo:Q4DSG4kzKThw39P1rxo","tlshash":"7c34d64f977631b171034b55fadab728969d8133965208e6f872d58c8fc3a6302b272f","first_seen":"2025-12-19T21:52:38.066809Z","last_seen":"2025-12-19T21:52:38.066809Z","times_seen":1,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":31,"dns":11,"connect":1,"send":0,"wait":441,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adx.com.ru/sync/init/sapePlazkart?uid=0700007F04C945692C05C20F02170623","fqdn":"adx.com.ru","domain":"adx.com.ru","tld":"com.ru"},"ip":{"addr":"83.222.104.70","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adx.com.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 20 Jun 2025 13:13:33 GMT","end":"Wed, 22 Jul 2026 13:13:32 GMT"},"fingerprint":{"sha1":"0F:34:EC:CE:BC:17:E9:5F:83:40:15:65:EF:68:EC:37:03:9C:C8:9C","sha256":"87:20:22:42:36:6F:88:B8:4D:D7:3A:11:7B:17:9F:56:7B:CD:5A:0C:00:F3:42:3C:BE:28:DE:11:8E:AD:F5:FE"}}},"request":{"raw":"GET /sync/init/sapePlazkart?uid=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: adx.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.28.0\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":594,"timings":{"blocked":30,"dns":18,"connect":79,"send":0,"wait":73,"receive":0,"ssl":391},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.techdsp.ru/sync?src=sape\u0026dmp=2\u0026uid=0700007F04C945692C05C20F02170623","fqdn":"sync.techdsp.ru","domain":"techdsp.ru","tld":"ru"},"ip":{"addr":"37.48.253.136","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.techdsp.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 19 Feb 2025 14:03:23 GMT","end":"Mon, 23 Mar 2026 14:03:22 GMT"},"fingerprint":{"sha1":"E0:51:62:A1:08:10:67:51:3A:43:8B:07:2F:EC:40:2D:BA:A8:2E:5C","sha256":"8E:DA:37:A7:45:0C:02:8B:99:79:9E:F6:0F:CF:98:2D:C0:9F:74:B4:18:E8:2E:F5:D7:DD:D8:3C:3C:43:5C:85"}}},"request":{"raw":"GET /sync?src=sape\u0026dmp=2\u0026uid=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: sync.techdsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-length: 0\r\nlocation: https://dmg.digitaltarget.ru/1/7686/i/i?a=4110\u0026e=otMMDGfvQhm8nJWV4Q8iVA\u0026i=14731843232624595733\r\nreferrer-policy: no-referrer\r\nset-cookie: uid=otMMDGfvQhm8nJWV4Q8iVA; Path=/; Max-Age=31536000; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":805,"timings":{"blocked":218,"dns":15,"connect":36,"send":0,"wait":26,"receive":0,"ssl":504},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.bidster.net/sync/75b31511-b167-4007-830c-56630c3c6617?id=0700007F04C945692C05C20F02170623\u0026redirect=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D385%26euid%3D%7Bid%7D","fqdn":"ssp.bidster.net","domain":"bidster.net","tld":"net"},"ip":{"addr":"87.228.58.107","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ssp.bidster.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:21:55 GMT","end":"Fri, 20 Feb 2026 19:21:54 GMT"},"fingerprint":{"sha1":"BC:CD:E5:41:60:B2:62:54:EC:C0:2A:0F:26:B9:9F:A7:E3:9A:8B:1A","sha256":"6A:5E:5C:25:8D:31:5E:BB:CD:E8:CD:48:AA:F4:B3:AC:F8:77:F3:09:D1:90:1E:81:55:DC:53:76:61:AC:0F:02"}}},"request":{"raw":"GET /sync/75b31511-b167-4007-830c-56630c3c6617?id=0700007F04C945692C05C20F02170623\u0026redirect=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D385%26euid%3D%7Bid%7D HTTP/1.1\r\nHost: ssp.bidster.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-length: 0\r\nlocation: https://mc.acint.net/match?dp=385\u0026euid=d7bed9c1dad5f1c4914cb\r\nset-cookie: uid=d7bed9c1dad5f1c4914cb; Max-Age=34560000; Domain=.bidster.net; Path=/; Expires=Sat, 20 Dec 2025 07:28:05 GMT; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":675,"timings":{"blocked":246,"dns":3,"connect":57,"send":0,"wait":57,"receive":0,"ssl":311},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126\u0026dp=14","fqdn":"ssp-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.93","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sape.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Dec 2025 23:36:44 GMT","end":"Sat, 07 Mar 2026 23:36:43 GMT"},"fingerprint":{"sha1":"3D:9F:9C:85:A9:AB:7C:9C:83:0D:C2:B6:55:54:6F:89:BB:7F:7F:EE","sha256":"49:D9:BD:BD:C8:71:CC:CD:39:05:E4:44:2E:9E:54:03:9D:A8:07:B3:9E:E4:4E:FD:7A:38:89:6D:8A:12:EA:15"}}},"request":{"raw":"GET /rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126\u0026dp=14 HTTP/1.1\r\nHost: ssp-rtb.sape.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sspuid=CkIEGGlFyQXBFQEUa8JnAowfH+Nah9IQZeGqT+Tz/lzIJV/4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: https://acint.net/rmatch?dp=14\u0026euid=1804420A05C94569140115C10267C26B\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/rmatch?dp=313\u0026euid=NT_2_0700007F04C945692C05C20F02170623_1956302840726359_YixUML\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D313","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=313\u0026euid=NT_2_0700007F04C945692C05C20F02170623_1956302840726359_YixUML\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D313 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125; cSyncDp7v3=1766181125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=313\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/rmatch?dp=14\u0026euid=1804420A05C94569140115C10267C26B\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=14\u0026euid=1804420A05C94569140115C10267C26B\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125; cSyncDp7v3=1766181125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=126\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.qtarget.tech/userbind?src=sape\u0026id=0200007F04C945692F05F70F02B5A907","fqdn":"match.qtarget.tech","domain":"qtarget.tech","tld":"tech"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.649Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /userbind?src=sape\u0026id=0200007F04C945692F05F70F02B5A907 HTTP/1.1\r\nHost: match.qtarget.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":7497,"timings":{"blocked":7496,"dns":1,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-content/et-cache/15746/et-core-unified-deferred-15746.min.css?ver=1765275958","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:03.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-content/et-cache/15746/et-core-unified-deferred-15746.min.css?ver=1765275958 HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 1719\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:04 GMT\r\nlast-modified: Tue, 09 Dec 2025 10:25:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zh1hK9Gecf2QDzAGYdDIaRP14I9yCsmHQZEaQlmpg09WMVCIaE8vINnHFohl6s2w6kGoPI%2BShVmnRr1oAPZVGCgpu4WdTNV7n1Q4aMxn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a1ff71a60120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13383,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13383), with no line terminators","md5":"6bd3427b6ca1a864732d1335ef11df0a","sha1":"0ad8323bd28fef518392d8dd7b37b7423425dd65","sha256":"80e6f09be742c23cbdaaa23b49aba86c6a54553dfd8bf82a43a593dfa489fb34","sha512":"bb0ba80ba0153c232cbd12818f88d325dc8bc6b9174603028853775c7aa9cf6902d654e8cc536ac5bd6003fb571fb5660b73a4a7e2f948bc51b7ebd29d6d6561","ssdeep":"192:0Td8T9kdpcT+HhD2FIRivINaBQ44o19UbcGlck69D2F6D2F29UbN:0dm9kdpcT+HyINaB74Hp","tlshash":"6852100eeb773e72b3422850f8533bf9b4eca58395896664fc54c8605bc21ea078167f","first_seen":"2025-12-19T21:52:38.068235Z","last_seen":"2025-12-19T21:52:38.068235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXI3I6Li01BKofiOc5wtlZ2di8HDDsmdTo3jw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:04.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"FF:92:1F:D0:E9:98:18:CB:FA:1B:90:BE:3E:B9:41:44:DE:05:28:15","sha256":"0C:A2:FB:F0:F6:40:B0:82:E4:FB:1A:51:96:48:D8:22:C9:05:C4:41:67:1F:41:D4:8C:F2:B6:85:A4:D2:3A:AF"}}},"request":{"raw":"GET /s/nunito/v32/XRXI3I6Li01BKofiOc5wtlZ2di8HDDsmdTo3jw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dignomaden.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25992\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 17 Dec 2025 12:49:04 GMT\r\nexpires: Thu, 17 Dec 2026 12:49:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 205380\r\nlast-modified: Mon, 15 Sep 2025 17:04:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25992,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25992, version 1.0","md5":"afdae881bddd5301313d91aa7dc3b2b3","sha1":"ba2841e49724d0fe67aa34b35ff24116172aa964","sha256":"34d26973fa029fef3d166541a54d6eb56967d0b0211de9c849f2ec6481e76633","sha512":"6e3a128b42cf5ee750d3fe305b65af79b630b97e91b50851e6ecf78eb7d9007c17f930402b5d009c15763089ef586af7460acf1e39a606026cad0a31ae2ba38c","ssdeep":"768:LHCQlVfFjnVCVLUUuFZSDtu6DwIt7Gj9JOd:LHCQndnYVLUUuzku6sVJOd","tlshash":"28c2e1dc19868e0b8f026cfe5f2c1dd998b6465b35912d40c62eb11e22eb6f8527c1f8","first_seen":"2025-09-26T20:15:23.6743Z","last_seen":"2026-04-23T12:13:21.084925Z","times_seen":33,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":124,"dns":5,"connect":7,"send":0,"wait":11,"receive":2,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.ohmy.bid/cm?ssp=sape\u0026redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D","fqdn":"match.ohmy.bid","domain":"ohmy.bid","tld":"bid"},"ip":{"addr":"37.0.127.204","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ohmy.bid","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 15:45:39 GMT","end":"Sat, 03 Jan 2026 15:45:38 GMT"},"fingerprint":{"sha1":"EF:A2:21:7D:62:B9:E9:0F:EE:11:F0:38:1C:D6:7A:E7:53:65:15:8D","sha256":"45:80:3D:62:8B:EC:78:D5:D1:84:F8:93:1B:E2:FF:CE:65:BC:36:20:3B:B4:48:50:BD:29:09:74:68:5A:BA:B8"}}},"request":{"raw":"GET /cm?ssp=sape\u0026redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D HTTP/1.1\r\nHost: match.ohmy.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Fri, 19 Dec 2025 21:52:05 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nBidder: bid-15 1.2245.f77a67ed\r\nLocation: https://mc.acint.net/match?dp=217\u0026euid=40997328-96d3-47da-b54e-ca9866c95ec0\r\nSet-Cookie: uid=40997328-96d3-47da-b54e-ca9866c95ec0.6945c905.b609b9e70cfafe79; domain=.ohmy.bid; path=/; expires=Sun, 18-Jan-2026 21:52:05 GMT; SameSite=None; Secure;\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":23,"connect":74,"send":0,"wait":60,"receive":0,"ssl":269},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/match?dp=186\u0026euid=bc9d7f83-e92d-4126-b658-e7532f408ae5","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=186\u0026euid=bc9d7f83-e92d-4126-b658-e7532f408ae5 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125; cSyncDp7v3=1766181125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-23T15:13:06.163658Z","times_seen":339718,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid.sspnet.tech/sync/reverse?dsp_slug=buzzoola\u0026dsp_user_id=dc9f3926-86a9-421d-5ccf-499949244772\u0026sync_id=bbc03016-729f-426d-b2a2-55278a71ecf3","fqdn":"bid.sspnet.tech","domain":"sspnet.tech","tld":"tech"},"ip":{"addr":"212.41.25.244","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sspnet.tech","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 09 May 2025 09:12:30 GMT","end":"Wed, 10 Jun 2026 09:12:29 GMT"},"fingerprint":{"sha1":"74:C6:56:28:7A:24:F3:E7:6F:E4:3C:01:30:57:4F:FB:A4:9F:E5:55","sha256":"4E:E4:15:9F:F0:61:EB:12:FA:CB:DB:21:F4:43:29:CE:73:C1:BA:2A:62:49:B9:83:77:AE:79:3F:C8:24:E1:90"}}},"request":{"raw":"GET /sync/reverse?dsp_slug=buzzoola\u0026dsp_user_id=dc9f3926-86a9-421d-5ccf-499949244772\u0026sync_id=bbc03016-729f-426d-b2a2-55278a71ecf3 HTTP/1.1\r\nHost: bid.sspnet.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.28.0\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-length: 0\r\nx-request-id: 24c75685-123d-4dcf-88e9-34dda033c4e2\r\nlocation: https://px.adhigh.net/p/cm/yabbi?u=9aebc2584ed2fd82b3a137a7d8dd7172\u0026r=https%3A%2F%2Fbid.sspnet.tech%2Fsync%2Freverse%3Fdsp_slug%3Dgetintent%26dsp_user_id%3D%5B%5BUSER_ID%5D%5D%26sync_id%3Dbbc03016-729f-426d-b2a2-55278a71ecf3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cmr.bidderstack.com/sape/cm?user_id=0700007F04C945692C05C20F02170623","fqdn":"cmr.bidderstack.com","domain":"bidderstack.com","tld":"com"},"ip":{"addr":"185.149.242.234","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bidderstack.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 26 Dec 2024 14:42:05 GMT","end":"Wed, 14 Jan 2026 11:07:44 GMT"},"fingerprint":{"sha1":"D3:CF:38:0C:FA:18:1C:F8:E8:E3:18:35:3E:3D:E6:82:B4:44:12:C1","sha256":"C6:91:A1:27:F0:56:52:64:73:25:39:60:8B:AA:DA:0C:92:DF:DD:2B:3C:50:92:0B:D8:7F:AF:F4:5B:3C:A8:79"}}},"request":{"raw":"GET /sape/cm?user_id=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: cmr.bidderstack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Fri, 19 Dec 2025 21:52:14 GMT\r\nContent-Type: image/gif\r\nContent-Length: 44\r\nConnection: keep-alive\r\nx-from: nrr-3\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":44,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"f9d60352c70a2ba15616d1c9421f3844","sha1":"e9abc8bea7721a4b6a50295850d13c515006a95c","sha256":"82cb517a8f80c91dfcec543c6d140deb3baaf463ea9e77655475096eba7bc7d9","sha512":"c236b22bcd48790ff970b8bc566061eae734e0d34c1a68cd8d6160415303e0b0b51fe5780fafe7349cf71cb10089c9f322495267eee019cc63f879727263df4b","ssdeep":"","tlshash":"49900003eb80c002c2a2c0300e0ccb802b88b030ae28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-06T18:33:49Z","last_seen":"2026-04-23T15:22:46.53368Z","times_seen":4320,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":18,"connect":62,"send":0,"wait":54,"receive":0,"ssl":454},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kimberlite.io/rtb/sync/sape2?u=0700007F04C945692C05C20F02170623","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.92","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 03 Mar 2025 10:28:30 GMT","end":"Sat, 04 Apr 2026 10:28:29 GMT"},"fingerprint":{"sha1":"D5:F7:CA:61:DC:40:4D:B7:43:BC:F1:6F:13:3A:45:A0:D0:53:09:FA","sha256":"BD:79:98:BE:D4:24:4A:51:5B:6D:A8:A1:58:2B:4E:1D:6B:90:66:40:1F:2C:E3:4A:C4:9F:7E:A3:A2:F6:79:12"}}},"request":{"raw":"GET /rtb/sync/sape2?u=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx\r\nDate: Fri, 19 Dec 2025 21:52:05 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nlocation: /rtb/sync/sape2?u=0700007F04C945692C05C20F02170623\u0026rc=1\r\nset-cookie: u=aUXJBfk9Os4~uSOVeOdD_IIfKRySSAcBlsHoxRs; path=/; max-age=7776000; samesite=none; httponly; secure\r\nreferrer-policy: no-referrer\r\nserver-timing: app;srv=s23;dur=0.0003\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":571,"timings":{"blocked":47,"dns":15,"connect":58,"send":0,"wait":71,"receive":0,"ssl":369},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-statistics.dev.dsp1.nominaltechno.com/api/cookie-sync/eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJSVEIgU2FwZSJ9.VXKxLxZBDKVR7akKD1ukrUZZiwKSy3v1zAZqgO5I0sDyck5wQtI73MuLZMkcYTNASS9UpZ9mSHr5k-r2pAOYRQ/sync?sspUserId=0700007F04C945692C05C20F02170623\u0026r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D313%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D313","fqdn":"ssp-statistics.dev.dsp1.nominaltechno.com","domain":"nominaltechno.com","tld":"com"},"ip":{"addr":"34.242.40.37","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsp1.nominaltechno.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:69:09:D1:44:FC:EF:3B:DA:E5:87:AC:D5:A8:4B:29:5D:43:A6:FF","sha256":"35:F6:0A:EE:1E:A2:22:52:1B:A8:7E:C4:7A:DE:E3:03:91:D4:13:20:F0:92:EB:AB:51:5E:57:F3:43:76:BE:34"}}},"request":{"raw":"GET /api/cookie-sync/eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJSVEIgU2FwZSJ9.VXKxLxZBDKVR7akKD1ukrUZZiwKSy3v1zAZqgO5I0sDyck5wQtI73MuLZMkcYTNASS9UpZ9mSHr5k-r2pAOYRQ/sync?sspUserId=0700007F04C945692C05C20F02170623\u0026r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D313%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D313 HTTP/1.1\r\nHost: ssp-statistics.dev.dsp1.nominaltechno.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-length: 0\r\nlocation: https://acint.net/rmatch?dp=313\u0026euid=NT_2_0700007F04C945692C05C20F02170623_1956302840726359_YixUML\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D313\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1 ; mode=block\r\nreferrer-policy: no-referrer\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":614,"timings":{"blocked":126,"dns":9,"connect":42,"send":0,"wait":33,"receive":0,"ssl":392},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediatoday.ru/c/m.gif?s=32\u0026id=366\u0026reference=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D366%26euid%3D%7Bvisitor_id%7D","fqdn":"mediatoday.ru","domain":"mediatoday.ru","tld":"ru"},"ip":{"addr":"194.186.91.198","port":443,"asn":3216,"as":"PVimpelCom","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mediatoday.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 09:53:51 GMT","end":"Sun, 08 Feb 2026 09:53:50 GMT"},"fingerprint":{"sha1":"43:56:05:2D:39:36:28:96:AE:74:07:D6:E8:52:76:1A:89:83:A2:81","sha256":"7F:E0:EE:71:80:3C:CB:DE:47:F8:52:85:81:45:A4:6D:94:9D:8A:08:9F:CC:57:C4:F4:70:0C:0B:5D:3F:33:37"}}},"request":{"raw":"GET /c/m.gif?s=32\u0026id=366\u0026reference=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D366%26euid%3D%7Bvisitor_id%7D HTTP/1.1\r\nHost: mediatoday.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-length: 124\r\ncache-control: no-cache, max-age=0, must-revalidate, no-store\r\npragma: no-cache\r\nexpires: Tue, 11 Sep 2001 12:46:00 GMT\r\nset-cookie: idntfy=VUeGbp7NBgnq8Y4; expires=Mon, 17-Dec-2035 21:52:05 GMT; domain=mediatoday.ru; path=/c/; SameSite=None; Secure\nidntfy=VUeGbp7NBgnq8Y4; expires=Mon, 17-Dec-2035 21:52:05 GMT; domain=mediatoday.ru; path=/core/; SameSite=None; Secure\nidntfy=deleted; path=/c; domain=mediatoday.ru; expires=Tue, 11 Sep 2001 12:46:00 GMT; SameSite=None; Secure\nidntfy=deleted; path=/core; domain=mediatoday.ru; expires=Tue, 11 Sep 2001 12:46:00 GMT; SameSite=None; Secure\r\nlocation: https://mc.acint.net/match?dp=366\u0026euid=VUeGbp7NBgnq8Y4\r\nalt-svc: h3=\":443\"; ma=86400,h3-29=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":647,"timings":{"blocked":238,"dns":9,"connect":48,"send":0,"wait":48,"receive":0,"ssl":303},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.dynotech.io/sape/sync/","fqdn":"rtb.dynotech.io","domain":"dynotech.io","tld":"io"},"ip":{"addr":"82.202.197.102","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtb.dynotech.io","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 17:57:55 GMT","end":"Sun, 11 Jan 2026 17:57:54 GMT"},"fingerprint":{"sha1":"C1:88:1A:B8:F5:1D:6C:EF:0E:F8:F6:6C:52:ED:EB:07:E2:04:B0:41","sha256":"0C:8E:6C:A8:2D:14:6F:8A:B0:94:08:8D:BF:20:FC:F4:F8:82:0D:76:45:5E:AB:05:87:42:8F:AC:07:59:47:A4"}}},"request":{"raw":"GET /sape/sync/ HTTP/1.1\r\nHost: rtb.dynotech.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":706,"timings":{"blocked":290,"dns":2,"connect":55,"send":0,"wait":53,"receive":0,"ssl":305},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match?dp=366\u0026euid=VUeGbp7NBgnq8Y4","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=366\u0026euid=VUeGbp7NBgnq8Y4 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125; cSyncDp7v3=1766181125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-23T15:13:06.163658Z","times_seen":339718,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/rmatch?dp=71\u0026euid=d0d3fcbf-427d-473a-ab5e-0cc7b0dacc53\u0026r=https%3A%2F%2Fsync.upravel.com%2Fpbd%2Fsync","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:08.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=71\u0026euid=d0d3fcbf-427d-473a-ab5e-0cc7b0dacc53\u0026r=https%3A%2F%2Fsync.upravel.com%2Fpbd%2Fsync HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125; cSyncDp7v3=1766181125; cSyncDp241v2=1766181126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:08 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://sync.upravel.com/pbd/sync\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:03.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 36433\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:04 GMT\r\nlast-modified: Thu, 29 Sep 2022 14:21:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9HZ9rg9A5hXkcAReAphAA%2FyKJn8%2F7qRJ2HUqYGjX4HEBtEjYTeV0VhRrMmDgSNnrauKY%2B5wyeO%2BsCeTQ%2FKX79jMPv5%2BaLexNnlCkvp1R\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a1ff73aa7120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":158005,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65266)","md5":"e53ec3d6e21be78115810135f5e956fe","sha1":"523892839b88351523e0498ba881c4431197b54e","sha256":"b15c3ea03d50c2430490e7416733a254feea4237bb60b54181bd3473ebe4149f","sha512":"84b080eaaa043928f038421ceb18bba7483afee5b6480a92ee01992317cde2361a6dd255b16ec036e51e8a1fef46b5379c6a5ff5c9ec69d682f96deaa03a8842","ssdeep":"3072:cWdIxUMz/tGzT3+XtHi2iX6JPMupdggt1YHWyFxAcDHzEJLDnWTnWNBEBysX6qMa:dwhggc1l7","tlshash":"14f31849718473b246c720ee653f1b0e7137ce69d009d060a936faf61eb8f8a512bf65","first_seen":"2023-03-08T14:26:25Z","last_seen":"2026-04-23T14:47:57.667686Z","times_seen":42840,"resource_available":true,"data":null}},"time_used":774,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":653,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-statistics.dsp.nt.technology/api/cookie-sync/eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJSVEIgU2FwZV8xNzM4MDUyODgwODQ3In0.rWWFhvjxIbuujG1GTFwQklSMJiKgptBwYzz4p8BSesmEm5CqjbMhkVs5mVteVVlfMbT4wiTf22YGI6HFl8Snrw/sync?sspUserId=0700007F04C945692C05C20F02170623\u0026r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D368%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D368","fqdn":"ssp-statistics.dsp.nt.technology","domain":"nt.technology","tld":"technology"},"ip":{"addr":"52.213.188.202","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsp.nt.technology","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Thu, 14 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B8:F8:FC:4E:74:F8:92:8E:25:3D:67:9F:86:DC:9C:44:60:FB:9E:EC","sha256":"05:1C:13:14:4D:C3:00:3F:28:90:AD:59:1E:DF:BC:A6:09:D4:AE:24:83:25:90:22:9E:75:14:2F:59:C5:66:9A"}}},"request":{"raw":"GET /api/cookie-sync/eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJSVEIgU2FwZV8xNzM4MDUyODgwODQ3In0.rWWFhvjxIbuujG1GTFwQklSMJiKgptBwYzz4p8BSesmEm5CqjbMhkVs5mVteVVlfMbT4wiTf22YGI6HFl8Snrw/sync?sspUserId=0700007F04C945692C05C20F02170623\u0026r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D368%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D368 HTTP/1.1\r\nHost: ssp-statistics.dsp.nt.technology\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-length: 0\r\nlocation: https://acint.net/rmatch?dp=368\u0026euid=NT_2_0700007F04C945692C05C20F02170623_1942271935793658_xqFmRo\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D368\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1 ; mode=block\r\nreferrer-policy: no-referrer\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":716,"timings":{"blocked":161,"dns":14,"connect":46,"send":0,"wait":32,"receive":0,"ssl":452},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pix.bumlam.com/sync/sape/sync_ok?guid=f55c3dae-dd24-11f0-86e0-002590c0647c","fqdn":"pix.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.160","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 15:01:44 GMT","end":"Thu, 19 Mar 2026 15:01:43 GMT"},"fingerprint":{"sha1":"73:09:47:20:FC:A8:0D:DC:79:F0:08:58:30:EF:F6:AE:72:A0:E1:0B","sha256":"73:92:7B:67:F8:0C:85:9F:42:64:89:B1:B4:BA:C5:BB:D0:C1:72:38:91:59:BA:0B:54:55:C0:4E:84:7F:12:34"}}},"request":{"raw":"GET /sync/sape/sync_ok?guid=f55c3dae-dd24-11f0-86e0-002590c0647c HTTP/1.1\r\nHost: pix.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: suuid3=IiRmNTVjM2RhZS1kZDI0LTExZjAtODZlMC0wMDI1OTBjMDY0N2M*\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Fri, 19 Dec 2025 21:52:05 GMT\r\nContent-Type: image/gif\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://www.acint.net\r\nAccess-Control-Allow-Credentials: true\r\nTiming-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0, proxy-revalidate, s-maxage=0\r\nPragma: no-cache\r\nExpires: 05-Jun-2005 22:00:00 GMT\r\nX-Xss-Protection: 0\r\nP3P: policyref=\"https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml\", CP=\"CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nLocation: https://f55c3dae-dd24-11f0-86e0-002590c0647c.n2.sync.bumlam.com/?src=sape\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.qtarget.tech/userbind?src=sape\u0026id=0200007F04C945692F05F70F02B5A907","fqdn":"match.qtarget.tech","domain":"qtarget.tech","tld":"tech"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.636Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /userbind?src=sape\u0026id=0200007F04C945692F05F70F02B5A907 HTTP/1.1\r\nHost: match.qtarget.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":8937,"timings":{"blocked":8937,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/easypiechart.js?ver=4.22.2","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:03.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/easypiechart.js?ver=4.22.2 HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:04 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2935\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:04 GMT\r\nlast-modified: Wed, 27 Sep 2023 02:20:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EsKao%2Fq%2BZkT5%2FVTgPS6zgZNnCvVkaFyVgrh0MLl3wLYXkChn3nvdIYIvpL5q37DOU9Em%2Bo2EjdO91o3zAENxdDs%2Fyx7JRVw0pH%2FUrQ%2Fz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a1ff72a9a120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9318,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"00346ced8d8b5c664b826381bdcd7c48","sha1":"1cb0ab506f3892db432c81ab6982fe6837004d23","sha256":"5aa24e4ab926693e29ffb0d0ca1557141defd3ca61b3b4e7caebaa2fcd5bf327","sha512":"7d286c00c0c334d39de610daa7bbdd0ff2a52dab124833e5d44a16664705d0a6b014d8f3498a122702056139a0224cc095a88afe327c23042666c267819a49a6","ssdeep":"192:le+s1ul0lG2Ywr+o53PsoSOBDP4lO0EHIjgn7Bt1En7IeayvKOXjkETqK:leN11l+o53PsoTDP4M5ugnM7sAT","tlshash":"ce124285d7de632a81e331d9406f308c963dd232740e5c696c1893aa1dac839d3fbf69","first_seen":"2023-03-07T01:42:32Z","last_seen":"2026-04-23T15:07:31.894638Z","times_seen":10370,"resource_available":true,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":676,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pix.bumlam.com/sync/sape/done","fqdn":"pix.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.160","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 15:01:44 GMT","end":"Thu, 19 Mar 2026 15:01:43 GMT"},"fingerprint":{"sha1":"73:09:47:20:FC:A8:0D:DC:79:F0:08:58:30:EF:F6:AE:72:A0:E1:0B","sha256":"73:92:7B:67:F8:0C:85:9F:42:64:89:B1:B4:BA:C5:BB:D0:C1:72:38:91:59:BA:0B:54:55:C0:4E:84:7F:12:34"}}},"request":{"raw":"GET /sync/sape/done HTTP/1.1\r\nHost: pix.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: suuid3=IiRmNTVjM2RhZS1kZDI0LTExZjAtODZlMC0wMDI1OTBjMDY0N2M*\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 19 Dec 2025 21:52:06 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://www.acint.net\r\nAccess-Control-Allow-Credentials: true\r\nTiming-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0, proxy-revalidate, s-maxage=0\r\nPragma: no-cache\r\nExpires: 05-Jun-2005 22:00:00 GMT\r\nX-Xss-Protection: 0\r\nP3P: policyref=\"https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml\", CP=\"CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-23T15:13:06.163658Z","times_seen":339718,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/aidata/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"65.21.90.246","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:08.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 18 Jun 2025 16:48:51 GMT","end":"Mon, 20 Jul 2026 16:48:50 GMT"},"fingerprint":{"sha1":"8D:89:EE:F7:48:68:E7:7D:F7:C4:AF:97:AB:98:A3:A3:1E:8D:6A:92","sha256":"08:06:AA:31:11:0F:33:B8:7D:B5:7E:B4:A2:2A:65:C6:77:DE:F6:65:A2:F4:BE:D3:7E:8D:9F:84:17:CE:20:A0"}}},"request":{"raw":"GET /aidata/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1766181128258; user_id=d0d3fcbf-427d-473a-ab5e-0cc7b0dacc53\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Fri, 19 Dec 2025 21:52:08 GMT\r\ncontent-length: 0\r\np3p: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nset-cookie: user_id=d0d3fcbf-427d-473a-ab5e-0cc7b0dacc53;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\nuser_id-legacy=d0d3fcbf-427d-473a-ab5e-0cc7b0dacc53;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\r\nlocation: https://x01.aidata.io/0.gif?pid=MGCOM\u0026id=d0d3fcbf-427d-473a-ab5e-0cc7b0dacc53\u0026back=\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKeiunDZbtM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:04.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"FF:92:1F:D0:E9:98:18:CB:FA:1B:90:BE:3E:B9:41:44:DE:05:28:15","sha256":"0C:A2:FB:F0:F6:40:B0:82:E4:FB:1A:51:96:48:D8:22:C9:05:C4:41:67:1F:41:D4:8C:F2:B6:85:A4:D2:3A:AF"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKeiunDZbtM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dignomaden.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30504\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 13 Dec 2025 10:59:38 GMT\r\nexpires: Sun, 13 Dec 2026 10:59:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:50:19 GMT\r\ncontent-type: font/woff2\r\nage: 557546\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30504,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30504, version 1.0","md5":"3b6af9133f0bcea6ca4bca9d2b0c8725","sha1":"be79e236d7ddf930300d98ed89c1d21233cf1a63","sha256":"87c9ceb9919ae10ef610d85f07442eb02570f5f1e173ff55e596fda2add989af","sha512":"e84d7bc16b63fdda7809a8307573b10374a9311babcc4f99f5762190ecdc249f426ba2a0efbdbb90dbd334714cd86c53a47454a2600c7389bf6ffcb2d1ed8f4c","ssdeep":"768:ZLUg/BE26JZGbjGR16YiRbn+Xpko+VOHNIvghWWr:ZN/gDM+arVWWohf","tlshash":"efd2e1bfb45459fadecfa872679d4b87c946807713906769301bd07f8891ba5b4c03b0","first_seen":"2025-09-17T18:48:51.048284Z","last_seen":"2026-04-23T03:19:45.499341Z","times_seen":239,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":140,"dns":1,"connect":7,"send":0,"wait":11,"receive":5,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.bringads.ru/sync?ssp=17","fqdn":"a.bringads.ru","domain":"bringads.ru","tld":"ru"},"ip":{"addr":"213.171.19.210","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bringads.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 17:00:48 GMT","end":"Mon, 09 Mar 2026 17:00:47 GMT"},"fingerprint":{"sha1":"C4:8C:87:7A:13:48:E2:3E:31:30:E8:D3:DE:0D:A3:F3:A3:95:AA:8C","sha256":"F9:54:36:CF:E1:48:93:37:0E:AF:14:F7:F7:67:86:C8:8C:AE:40:4B:65:A9:A9:6E:10:E2:D8:9B:C7:26:C9:9B"}}},"request":{"raw":"GET /sync?ssp=17 HTTP/1.1\r\nHost: a.bringads.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0\r\nDate: Fri, 19 Dec 2025 21:52:05 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: prebringads=1; Expires=Mon, 19 Jan 2026 00:52:05 GMT; Domain=.bringads.ru; SameSite=None; Secure; Path=/\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":715,"timings":{"blocked":285,"dns":4,"connect":44,"send":0,"wait":83,"receive":0,"ssl":297},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/match?dp=14\u0026euid=1804420A05C94569140115C10267C26B","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.27","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:06.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=14\u0026euid=1804420A05C94569140115C10267C26B HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAAAmlFyQQP9wUvB6m1AgQOobS88wghIo720q1Yt5fov/0D; test_cookie=CheckForPermission; cSyncDp14v6=1766181124; cSyncDp17v3=1766181124; cSyncDp45v5=1766181124; cSyncDp53v5=1766181124; cSyncDp553=1766181124; cSyncDp62v4=1766181124; cSyncDp67v5=1766181124; cSyncDp68v3=1766181124; cSyncDp71v2=1766181124; cSyncDp85v2=1766181124; cSyncDp95v4=1766181124; cSyncDp98v3=1766181124; cSyncDp104v3=1766181124; cSyncDp107v2=1766181124; cSyncDp125v5=1766181124; cSyncDp126v3=1766181124; cSyncDp129v2=1766181124; cSyncDp136v3=1766181124; cSyncDp148v2=1766181124; cSyncDp149v3=1766181124; cSyncDp151v2=1766181124; cSyncDp251v3=1766181124; cSyncDp186v2=1766181124; cSyncDp217v2=1766181124; cSyncDp226v1=1766181124; cSyncDp239v3=1766181124; cSyncDp243v2=1766181124; cSyncDp260v2=1766181124; cSyncDp244v2=1766181124; cSyncDp248v3=1766181124; cSyncDp261v1=1766181124; cSyncDp264=1766181124; cSyncDp274=1766181124; cSyncDp289v2=1766181124; cSyncDp296v3=1766181124; cSyncDp312v1=1766181124; cSyncDp313v1=1766181124; cSyncDp368v1=1766181124; cSyncDp331v1=1766181124; cSyncDp337v1=1766181124; cSyncDp351v1=1766181124; cSyncDp361v1=1766181124; cSyncDp353v1=1766181124; cSyncDp362v1=1766181124; cSyncDp366v1=1766181124; cSyncDp385v1=1766181124; cSyncDp390v1=1766181124; cSyncDp399v1=1766181124; cSyncDp394v1=1766181124; cSyncDp415v1=1766181124; cSyncDp420v2=1766181124; cSyncDp431=1766181124; cSyncDp433=1766181124; cSyncDp444=1766181124; cSyncDp203v2=1766181124; cSyncDp450=1766181124; cSyncDp14v4=1766181125; cSyncDp7v3=1766181125\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 19 Dec 2025 21:52:06 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-23T15:13:06.163658Z","times_seen":339718,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dignomaden.com/wp-content/uploads/2023/07/business-coach-0034.jpg","fqdn":"dignomaden.com","domain":"dignomaden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:04.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dignomaden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 17:09:09 GMT","end":"Fri, 27 Feb 2026 18:05:42 GMT"},"fingerprint":{"sha1":"81:1D:B3:26:72:D1:AA:0F:C9:9F:1C:29:5D:D6:3A:75:2A:42:DE:30","sha256":"6C:63:D0:80:B9:23:05:18:19:EE:B1:47:3D:13:96:22:CD:F2:BD:42:0F:E3:A6:6F:50:01:9A:CC:16:DE:B3:14"}}},"request":{"raw":"GET /wp-content/uploads/2023/07/business-coach-0034.jpg HTTP/1.1\r\nHost: dignomaden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 19 Dec 2025 21:52:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 146521\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Dec 2025 21:52:04 GMT\r\nlast-modified: Thu, 03 Aug 2023 06:27:49 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5aXbMFfDFSodcRGimp40EbidNQ9GEt%2FQTYaP0n4fX%2FEkUrdgxToqwWfmt2NPet5M%2Fiua1Mo6b1K5mUk9tGpGKHCarSKyhMu69hvHYJT0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b0a1ffc5a87120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":146521,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1707x895, components 3","md5":"e621999d5e68b24cda211815ac2b24a0","sha1":"d3d2a8a9c6a389fdfcd6638e25f49a58c7fea5cc","sha256":"6b4578ff2eb5d6a64d6a6da5eb9ae843c40fe020d15e60e6d0bae63e1d69628a","sha512":"9f0fa5fb9070dde283fe8f0499cb393072a86fff3645f91099f8f3ec5b12bf4106b23164899c6a8bfe390cbde51a689657b552d5e9d67e380d191a36db0da3de","ssdeep":"3072:TqvWjB0yo//OqM0jok8IQ2pllC2zAyqmnN2U03GS/prowCxkm5q:TqvhDuOsGPrlCpA03GS/prPzm5q","tlshash":"59e3123f81319736ca68cc2554b36f9e6ce5ec9bc07c2b7faa4311749c69d46089839b","first_seen":"2024-08-19T18:29:12.433226Z","last_seen":"2026-02-28T19:29:57.69113Z","times_seen":8,"resource_available":false,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":253,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwaPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dignomaden.com/","date":"2025-12-19T21:52:04.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:40:14 GMT","end":"Mon, 16 Feb 2026 08:40:13 GMT"},"fingerprint":{"sha1":"FF:92:1F:D0:E9:98:18:CB:FA:1B:90:BE:3E:B9:41:44:DE:05:28:15","sha256":"0C:A2:FB:F0:F6:40:B0:82:E4:FB:1A:51:96:48:D8:22:C9:05:C4:41:67:1F:41:D4:8C:F2:B6:85:A4:D2:3A:AF"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwaPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dignomaden.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dignomaden.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 13 Dec 2025 10:39:06 GMT\r\nexpires: Sun, 13 Dec 2026 10:39:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:11:39 GMT\r\ncontent-type: font/woff2\r\nage: 558778\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"780719f7be1218afbcdf750abd50418d","sha1":"b18fc87515204dd0424a3e623a8b83a8b122a797","sha256":"6955bd74d2cbf3e73fe9980d1f8e1c49cb0dcdafed154a744d82f288839c4b75","sha512":"be9e5c67e7e571ec31d98e213342727edbe1a29552a2e1592e3ddfc73331ae4ff6a973bea0b2806548e776f43780147a47163dc87c48a1476aa8ea4a63e9abfa","ssdeep":"768:CQ2mm0FI+FaI7BqhUWMCqCTThRXjgJ+BvNlaDv+:C9mm0tvtQaChKJOvnM+","tlshash":"abb2e1bc2514606ac7cf433b7c897a2d1df09976d07c6b04737d82c5d6848b670b8a9d","first_seen":"2025-09-19T21:21:53.069739Z","last_seen":"2026-04-23T12:26:26.973789Z","times_seen":1180,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":168,"dns":2,"connect":24,"send":0,"wait":8,"receive":1,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pix.bumlam.com/sync/sape/check?sspuid=0700007F04C945692C05C20F02170623","fqdn":"pix.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.160","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 15:01:44 GMT","end":"Thu, 19 Mar 2026 15:01:43 GMT"},"fingerprint":{"sha1":"73:09:47:20:FC:A8:0D:DC:79:F0:08:58:30:EF:F6:AE:72:A0:E1:0B","sha256":"73:92:7B:67:F8:0C:85:9F:42:64:89:B1:B4:BA:C5:BB:D0:C1:72:38:91:59:BA:0B:54:55:C0:4E:84:7F:12:34"}}},"request":{"raw":"GET /sync/sape/check?sspuid=0700007F04C945692C05C20F02170623 HTTP/1.1\r\nHost: pix.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Fri, 19 Dec 2025 21:52:05 GMT\r\nContent-Type: image/gif\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://www.acint.net\r\nAccess-Control-Allow-Credentials: true\r\nTiming-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0, proxy-revalidate, s-maxage=0\r\nPragma: no-cache\r\nExpires: 05-Jun-2005 22:00:00 GMT\r\nX-Xss-Protection: 0\r\nP3P: policyref=\"https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml\", CP=\"CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nLocation: https://sync.bumlam.com/?src=sape\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":18,"connect":36,"send":0,"wait":22,"receive":0,"ssl":144},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.bumlam.com/?src=sape","fqdn":"sync.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.170","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-19T21:52:05.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 15:01:44 GMT","end":"Thu, 19 Mar 2026 15:01:43 GMT"},"fingerprint":{"sha1":"73:09:47:20:FC:A8:0D:DC:79:F0:08:58:30:EF:F6:AE:72:A0:E1:0B","sha256":"73:92:7B:67:F8:0C:85:9F:42:64:89:B1:B4:BA:C5:BB:D0:C1:72:38:91:59:BA:0B:54:55:C0:4E:84:7F:12:34"}}},"request":{"raw":"GET /?src=sape HTTP/1.1\r\nHost: sync.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: suuid3=IiRmNTVjM2RhZS1kZDI0LTExZjAtODZlMC0wMDI1OTBjMDY0N2M*\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 19 Dec 2025 21:52:05 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: suuid3=IiRmNTVjM2RhZS1kZDI0LTExZjAtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Thu, 14 Dec 2045 21:52:05 GMT; Domain=bumlam.com; SameSite=None; Secure\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nLocation: https://pix.bumlam.com/sync/sape/sync_ok?guid=f55c3dae-dd24-11f0-86e0-002590c0647c\r\nCache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0\r\nAccess-Control-Allow-Origin: https://acint.net\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":225,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}