{"report_id":"c569fa28-9720-4d3b-bafb-f52b01396d85","version":6,"status":"done","tags":[],"date":"2025-12-01T20:04:47Z","url":{"schema":"http","addr":"clubrubionu.com/","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"172.67.183.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"clubrubionu.com/","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"title":"CRB - Health Information","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"clubrubionu.com/","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"172.67.183.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-05T20:04:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.acint.net","ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"domain_registered":"2014-02-06","domain_rank":175167,"first_seen":"2014-02-14T21:23:16Z","last_seen":"2025-11-25T19:26:21.959721Z","alert_count":0,"request_count":11,"received_data":94298,"sent_data":14649,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"exchange.buzzoola.com","ip":{"addr":"45.138.161.75","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2010-08-11","domain_rank":80108,"first_seen":"2014-10-17T15:20:27Z","last_seen":"2025-11-24T22:42:42.681737Z","alert_count":0,"request_count":4,"received_data":1939,"sent_data":2723,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"5--2--692df4cd7011cb0001e9132a.stbid.ru","ip":{"addr":"188.120.247.136","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"domain_registered":"2023-02-28","domain_rank":0,"first_seen":"2025-12-01T20:04:47.952477Z","last_seen":"2025-12-01T20:04:47.952477Z","alert_count":0,"request_count":1,"received_data":348,"sent_data":677,"comment":"","tags":null,"fingerprints":[{"name":"Angie:1.10.3","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]},{"fqdn":"otclick-adv.ru","ip":{"addr":"139.45.228.140","port":443,"asn":57304,"as":"JSC RetnNet","country":"Russia","country_code":"RU"},"domain_registered":"2011-01-17","domain_rank":27130,"first_seen":"2015-09-17T11:20:30Z","last_seen":"2025-11-25T19:26:20.987566Z","alert_count":0,"request_count":1,"received_data":724,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kimberlite.io","ip":{"addr":"37.0.127.86","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-03-16","domain_rank":17539,"first_seen":"2017-09-14T05:18:59Z","last_seen":"2025-11-24T22:42:42.136464Z","alert_count":0,"request_count":3,"received_data":2016,"sent_data":1611,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.lotus-dsp.ru","ip":{"addr":"213.171.19.207","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2023-12-05","domain_rank":395207,"first_seen":"2023-12-09T00:32:38Z","last_seen":"2025-11-25T19:26:21.939773Z","alert_count":0,"request_count":1,"received_data":565,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.adspector.io","ip":{"addr":"172.67.161.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-02","domain_rank":213577,"first_seen":"2024-06-28T02:35:48Z","last_seen":"2025-11-25T05:34:34.128074Z","alert_count":0,"request_count":1,"received_data":922,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sp.kombinat.digital","ip":{"addr":"77.223.120.36","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2025-04-16","domain_rank":596572,"first_seen":"2025-07-09T21:59:17.553875Z","last_seen":"2025-11-24T22:42:42.070409Z","alert_count":0,"request_count":1,"received_data":494,"sent_data":516,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.dvgroup.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"1998-09-12","domain_rank":429256,"first_seen":"2024-09-03T12:22:07Z","last_seen":"2025-11-25T09:28:46.01458Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":470,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sync.upravel.com","ip":{"addr":"185.131.67.10","port":443,"asn":56630,"as":"Melbikomas UAB","country":"Russia","country_code":"RU"},"domain_registered":"2017-03-25","domain_rank":187521,"first_seen":"2017-05-29T09:13:46Z","last_seen":"2025-11-25T11:54:38.444589Z","alert_count":0,"request_count":5,"received_data":4134,"sent_data":2536,"comment":"","tags":null,"fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}]},{"fqdn":"match.ohmy.bid","ip":{"addr":"37.0.127.207","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"domain_registered":"2022-06-09","domain_rank":283479,"first_seen":"2023-05-23T09:17:10Z","last_seen":"2025-11-25T19:26:21.468127Z","alert_count":0,"request_count":1,"received_data":488,"sent_data":511,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.videohead.tech","ip":{"addr":"213.171.19.235","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2023-05-30","domain_rank":516081,"first_seen":"2023-06-07T20:20:13Z","last_seen":"2025-11-25T09:28:46.264206Z","alert_count":0,"request_count":1,"received_data":566,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dm.hybrid.ai","ip":{"addr":"37.230.131.22","port":443,"asn":200197,"as":"Hybrid Adtech Sp.z.o.o.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-12-19","domain_rank":93939,"first_seen":"2018-08-22T12:51:55Z","last_seen":"2025-11-28T11:03:47.173371Z","alert_count":0,"request_count":1,"received_data":344,"sent_data":399,"comment":"","tags":null,"fingerprints":null},{"fqdn":"a.utraff.com","ip":{"addr":"213.171.19.199","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2016-09-27","domain_rank":179342,"first_seen":"2019-02-27T10:01:37Z","last_seen":"2025-11-24T23:54:41.391189Z","alert_count":0,"request_count":2,"received_data":1322,"sent_data":899,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssp.bidster.net","ip":{"addr":"212.41.29.69","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2023-04-13","domain_rank":430502,"first_seen":"2023-08-04T01:03:10Z","last_seen":"2025-11-29T11:31:02.6962Z","alert_count":0,"request_count":1,"received_data":517,"sent_data":573,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cs.agency2.ru","ip":{"addr":"23.105.255.196","port":443,"asn":39134,"as":"Edinaya Set Limited Liability Company","country":"Russia","country_code":"RU"},"domain_registered":"2008-10-06","domain_rank":520394,"first_seen":"2022-04-29T14:24:02Z","last_seen":"2025-11-24T23:54:42.186784Z","alert_count":0,"request_count":1,"received_data":767,"sent_data":466,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mediatoday.ru","ip":{"addr":"194.186.91.198","port":443,"asn":3216,"as":"PVimpelCom","country":"Russia","country_code":"RU"},"domain_registered":"2008-03-02","domain_rank":40250,"first_seen":"2013-05-20T20:53:32Z","last_seen":"2025-11-25T09:28:46.726975Z","alert_count":0,"request_count":1,"received_data":865,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bid.sspnet.tech","ip":{"addr":"5.35.15.14","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2023-10-17","domain_rank":512084,"first_seen":"2025-08-19T17:30:43.164294Z","last_seen":"2025-11-25T09:28:46.343138Z","alert_count":0,"request_count":2,"received_data":874,"sent_data":1101,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"a.adiam.tech","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-12-23","domain_rank":297000,"first_seen":"2024-03-15T20:38:51Z","last_seen":"2025-11-25T14:53:09.551187Z","alert_count":0,"request_count":1,"received_data":912,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ssp.al-adtech.com","ip":{"addr":"45.139.25.122","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"domain_registered":"2024-01-16","domain_rank":164448,"first_seen":"2024-01-30T10:38:38Z","last_seen":"2025-11-25T14:53:08.703674Z","alert_count":0,"request_count":1,"received_data":713,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dm-eu.hybrid.ai","ip":{"addr":"37.230.131.22","port":443,"asn":200197,"as":"Hybrid Adtech Sp.z.o.o.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-12-19","domain_rank":74067,"first_seen":"2021-01-25T11:48:59Z","last_seen":"2025-11-25T19:26:20.359Z","alert_count":0,"request_count":1,"received_data":404,"sent_data":472,"comment":"","tags":null,"fingerprints":null},{"fqdn":"1026--db0ac286-d6bb-4b50-ae85-d9741d68b9a2.stbid.ru","ip":{"addr":"62.109.24.241","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"domain_registered":"2023-02-28","domain_rank":0,"first_seen":"2025-12-01T20:04:47.965697Z","last_seen":"2025-12-01T20:04:47.965697Z","alert_count":0,"request_count":1,"received_data":204,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"Angie:1.10.3","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-30T22:14:19.793229Z","alert_count":0,"request_count":1,"received_data":8078,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"match.qtarget.tech","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-12-26","domain_rank":701462,"first_seen":"2023-01-28T17:26:52Z","last_seen":"2025-11-25T09:28:46.555554Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":479,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mc.acint.net","ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"domain_registered":"2014-02-06","domain_rank":245226,"first_seen":"2024-01-29T15:31:01Z","last_seen":"2025-11-25T09:28:44.921904Z","alert_count":0,"request_count":15,"received_data":6462,"sent_data":29661,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.bumlam.com","ip":{"addr":"31.172.81.147","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2015-08-10","domain_rank":29016,"first_seen":"2015-08-10T21:04:25Z","last_seen":"2025-11-24T23:54:41.872852Z","alert_count":0,"request_count":3,"received_data":1959,"sent_data":1563,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"acint.net","ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"domain_registered":"2014-02-06","domain_rank":7617,"first_seen":"2014-02-14T21:23:16Z","last_seen":"2025-11-25T11:57:57.589286Z","alert_count":0,"request_count":10,"received_data":4046,"sent_data":19922,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cm.pxltag.com","ip":{"addr":"212.41.11.107","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2025-05-25","domain_rank":0,"first_seen":"2025-11-18T10:18:49.548967Z","last_seen":"2025-11-25T13:00:47.753552Z","alert_count":0,"request_count":1,"received_data":366,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pixel.dsp.onetarget.ru","ip":{"addr":"130.193.53.230","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2019-04-18","domain_rank":456581,"first_seen":"2024-03-13T16:04:45Z","last_seen":"2025-11-24T22:42:42.977893Z","alert_count":0,"request_count":1,"received_data":637,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cr-frontend.weborama-tech.ru","ip":{"addr":"178.154.212.160","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2022-03-09","domain_rank":183201,"first_seen":"2023-07-27T11:09:06Z","last_seen":"2025-11-24T23:54:42.240984Z","alert_count":0,"request_count":1,"received_data":440,"sent_data":587,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sp.linkssp.ru","ip":{"addr":"31.184.215.90","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2024-09-18","domain_rank":431263,"first_seen":"2025-05-28T20:33:39.660871Z","last_seen":"2025-11-25T19:26:21.563156Z","alert_count":0,"request_count":1,"received_data":488,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"clubrubionu.com","ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":21,"received_data":635371,"sent_data":10298,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"statmedia.ru","ip":{"addr":"82.202.225.227","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2022-03-25","domain_rank":27502,"first_seen":"2015-08-17T13:20:07Z","last_seen":"2025-11-25T19:26:20.623295Z","alert_count":0,"request_count":1,"received_data":265,"sent_data":513,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-30T22:13:37.547558Z","alert_count":0,"request_count":2,"received_data":48290,"sent_data":1060,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ssp.bidvol.com","ip":{"addr":"194.85.16.25","port":443,"asn":8985,"as":"Join-stock company Internet ExchangeMSK-IX","country":"Russia","country_code":"RU"},"domain_registered":"2019-09-24","domain_rank":199701,"first_seen":"2020-02-22T12:37:29Z","last_seen":"2025-11-28T07:58:49.883341Z","alert_count":0,"request_count":1,"received_data":672,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.techdsp.ru","ip":{"addr":"37.48.253.133","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"domain_registered":"2024-10-09","domain_rank":660524,"first_seen":"2024-11-01T12:08:52Z","last_seen":"2025-11-25T09:28:45.68187Z","alert_count":0,"request_count":2,"received_data":889,"sent_data":952,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ssp.bestssp.com","ip":{"addr":"83.222.96.170","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"domain_registered":"2016-05-05","domain_rank":673248,"first_seen":"2017-06-10T08:55:20Z","last_seen":"2025-11-25T09:28:46.457275Z","alert_count":0,"request_count":1,"received_data":375,"sent_data":555,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pix.bumlam.com","ip":{"addr":"31.172.81.3","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2015-08-10","domain_rank":386640,"first_seen":"2022-03-29T09:19:43Z","last_seen":"2025-11-25T00:45:53.457131Z","alert_count":0,"request_count":3,"received_data":2243,"sent_data":1532,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ck.silvermob.com","ip":{"addr":"212.95.41.187","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2015-08-25","domain_rank":416424,"first_seen":"2025-03-13T10:51:02.742077Z","last_seen":"2025-11-25T09:28:45.012828Z","alert_count":0,"request_count":1,"received_data":636,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"adx.com.ru","ip":{"addr":"83.222.105.118","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-05-19","domain_rank":4001,"first_seen":"2017-06-05T16:30:42Z","last_seen":"2025-11-25T09:28:45.820069Z","alert_count":0,"request_count":2,"received_data":928,"sent_data":1020,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.sosiago.id","ip":{"addr":"206.189.82.246","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"domain_registered":"2018-01-25","domain_rank":4465915,"first_seen":"2019-03-10T17:37:19Z","last_seen":"2025-11-22T06:04:43.700571Z","alert_count":0,"request_count":1,"received_data":935,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssp-statistics.dsp.nt.technology","ip":{"addr":"54.77.2.128","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2019-02-02","domain_rank":50490,"first_seen":"2025-01-30T05:42:21.300558Z","last_seen":"2025-11-25T09:28:47.594806Z","alert_count":0,"request_count":1,"received_data":587,"sent_data":792,"comment":"","tags":null,"fingerprints":null},{"fqdn":"a.bringads.ru","ip":{"addr":"213.171.19.210","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2025-02-06","domain_rank":412835,"first_seen":"2025-05-20T10:33:46.598539Z","last_seen":"2025-11-25T09:28:46.439408Z","alert_count":0,"request_count":1,"received_data":566,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.opendsp.ru","ip":{"addr":"176.114.85.200","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2022-08-24","domain_rank":261604,"first_seen":"2022-09-01T11:01:38Z","last_seen":"2025-11-28T07:58:49.342206Z","alert_count":0,"request_count":2,"received_data":500,"sent_data":941,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rtb.dynotech.io","ip":{"addr":"77.223.121.51","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2024-04-24","domain_rank":372920,"first_seen":"2024-06-21T10:32:20Z","last_seen":"2025-11-25T09:28:47.246582Z","alert_count":0,"request_count":1,"received_data":201,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.adspend.space","ip":{"addr":"5.189.234.227","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2022-02-11","domain_rank":345453,"first_seen":"2022-10-20T06:12:42Z","last_seen":"2025-11-25T09:28:45.013485Z","alert_count":0,"request_count":2,"received_data":1336,"sent_data":1010,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.26.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"2-692df4cd7011cb0001e9132a.id.adx.com.ru","ip":{"addr":"83.222.105.226","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-05-19","domain_rank":0,"first_seen":"2025-12-01T20:04:47.962797Z","last_seen":"2025-12-01T20:04:47.962797Z","alert_count":0,"request_count":1,"received_data":434,"sent_data":764,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssp-rtb.sape.ru","ip":{"addr":"193.3.184.93","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"domain_registered":"2006-06-19","domain_rank":153781,"first_seen":"2016-02-02T17:01:03Z","last_seen":"2025-11-25T14:52:10.892174Z","alert_count":0,"request_count":7,"received_data":3647,"sent_data":4039,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.dsp.solta.io","ip":{"addr":"217.199.220.73","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"domain_registered":"2022-07-19","domain_rank":369782,"first_seen":"2022-09-21T16:47:56Z","last_seen":"2025-11-25T09:28:46.883747Z","alert_count":0,"request_count":1,"received_data":250,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"f16b1518-cef0-11f0-86e0-002590c0647c.n5.sync.bumlam.com","ip":{"addr":"185.115.93.200","port":443,"asn":42881,"as":"Sc Itns.net Srl","country":"Moldova","country_code":"MD"},"domain_registered":"2015-08-10","domain_rank":0,"first_seen":"2025-12-01T20:04:47.999261Z","last_seen":"2025-12-01T20:04:47.999261Z","alert_count":0,"request_count":1,"received_data":293,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"Angie:1.10.3","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]},{"fqdn":"match.new-programmatic.com","ip":{"addr":"217.65.2.150","port":443,"asn":3175,"as":"Citytelecom LLC","country":"Russia","country_code":"RU"},"domain_registered":"2020-02-18","domain_rank":172258,"first_seen":"2020-02-18T20:50:06Z","last_seen":"2025-11-24T23:54:41.78829Z","alert_count":0,"request_count":1,"received_data":215,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.dmp.otm-r.com","ip":{"addr":"194.55.244.184","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"domain_registered":"2014-01-16","domain_rank":124233,"first_seen":"2017-02-03T07:19:51Z","last_seen":"2025-11-25T14:53:09.301342Z","alert_count":0,"request_count":2,"received_data":792,"sent_data":1005,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.27.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cmr.bidderstack.com","ip":{"addr":"185.149.242.234","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2017-04-25","domain_rank":274973,"first_seen":"2024-06-26T06:54:13Z","last_seen":"2025-11-25T19:26:21.093112Z","alert_count":0,"request_count":1,"received_data":271,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]},{"fqdn":"id.adx.bid","ip":{"addr":"172.67.70.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-17","domain_rank":667222,"first_seen":"2025-05-16T21:23:24.922522Z","last_seen":"2025-11-25T09:28:45.708466Z","alert_count":0,"request_count":1,"received_data":769,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ssp-statistics.dev.dsp1.nominaltechno.com","ip":{"addr":"52.212.195.119","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2015-10-09","domain_rank":503952,"first_seen":"2024-09-06T07:52:31Z","last_seen":"2025-11-25T19:26:20.970739Z","alert_count":0,"request_count":1,"received_data":587,"sent_data":782,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"clubrubionu.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T04:45:42.22765Z","times_seen":684536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c1c4e8148845544b535d3ab81aeb84c7","sha1":"0d043f02eb3c03925e5125e4c9d3a9ec2d4fba65","sha256":"41bda26f5b46bb53c688b38e6c6dbbc79119dcc0dcbfa770ea456c7ba5ad843d","sha512":"d3a573bcd4af58a612b3e44fdc54df9fde6aa497114f210ece6e8a0f3d60dc475d5729199279502a5b80537884f39d543f334075d6e2f52d15b2cbe550ad2727","ssdeep":"","tlshash":"d361ba9e3775348b32b604d26a3f4e07fb7258361a88d434cab9e7541cb1463d37ae4a","size":3412,"data":"","first_seen":"2025-12-01T20:04:58.428311Z","last_seen":"2025-12-01T20:04:58.428311Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/themes/minimalistblogger/js/jquery.flexslider.js?ver=20150423","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d164ed31a1f030cca772428fbc4a353b","sha1":"f6791145eb6527492ffe8d147b12571a88a26b76","sha256":"9f9b8303b4fdf50f85f63fb85b80e9be5d88f6de1e7440bf03380cb9d717ce4a","sha512":"990606ba9766d4f9788fe96a19526c17610f6040331983e764e1c4ccc6e850730233839ab94413c8a1d1158cb98fc38a2e4fc9ad5098cebfa39de27d878485ab","ssdeep":"768:vCn0IniPaY9J6I/xN+hiSoRQb5Gqchfyci1:1PqH1Zb5pchfyci1","tlshash":"4533201a6521166689b373ae6f5adc18ebf743538019866afded020cdf7041843b2ff9","size":54630,"data":"","first_seen":"2023-03-07T01:18:57Z","last_seen":"2026-04-03T19:10:46.138965Z","times_seen":497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/themes/minimalistblogger/js/skip-link-focus-fix.js?ver=20170823","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93d421fd7576b0ca9c359ffe2fa16113","sha1":"eacce35258f14fcd79bea2bc23f4140d25874322","sha256":"14af47320898bd93f367026f7833c9956f14e24856976e4f9e10be31155cdcf2","sha512":"c064c5bbaf7a5a82b047215083a842bfed1dbabcd71e313da319b2315a2a91e0f20f83795c806732c2f50b57b242ed49a7c86098870a56a66be07eb13c15db4c","ssdeep":"","tlshash":"d201c0b2b30d44b6045a3157cd5f61cd297d91e2b819649b8cc908501824d6d13bffb8","size":685,"data":"","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-04-04T04:50:19.423391Z","times_seen":10417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T04:45:42.201299Z","times_seen":638038,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d23f6eb2988796c674061bb2629dc43","sha1":"1712fb671646f8060c86f548e93ae85537c3b099","sha256":"a1d366a17e6fa77c52948968c197add18c0b711e05da2a09281137df8463d945","sha512":"77cd83f3ebac1160f3e7fa7c18ebd74b4dd72f774ad48477cfe26e6377dce5feb593d60d3cc98d2cf56b24525065e5eb7dd399e2a29717bb4da631d4044988ff","ssdeep":"","tlshash":"ab90025760a1935510835b685e467e44162551541a4798e5807853969884350c2d151e","size":52,"data":"","first_seen":"2024-08-19T22:48:29.882489Z","last_seen":"2026-01-21T14:52:58.451932Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/aci.js","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"20f0381069e78a636d53b3d505e967c7","sha1":"800464b5f1400a923482d4298b472e17cda20737","sha256":"7b2d18d3dc9861604cbbde63dd9218e12a6cac1a06f52b877eddf61f9f7c3b37","sha512":"5aa6d98aca4d9881d5bf2c8dd71ff3d35e534a09ee749bf248c3d6f838f240f0d77edf06f8f2eae1b7a3797d9d447fe2da922395243f22547a13c4b6ea9981a2","ssdeep":"768:EMNY2uNr6tm67+DVRhNk6L0Wbha0XByPcf0:EMN/uNWo67+DLhNZaMByks","tlshash":"1ce2f98a7191f47306d3a179c12f050bf136696620e8d0e4f536dce0aeb858e6577f3a","size":31372,"data":"","first_seen":"2024-10-20T11:06:54.910201Z","last_seen":"2026-01-29T05:23:48.922533Z","times_seen":4303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"537357420024d824760d7686fbdf31fe","sha1":"5e14660b667fdc602c82300ccf3253afc242e4bb","sha256":"ca2f5769fc415a62dd2cd8af83b9b64604715e602f6de4c7741f9992a7003a29","sha512":"56b633cc459e789b0505809ba091fcd36ec59d62c94205b1f66578c566186f89676e626c45767d3f59eeb0715a139d7f65cd3f54bc41d247bed58438e47c1e53","ssdeep":"","tlshash":"88d0976a3d06043c930838aab6bec288f433b0b4aa94c08180cfc854b32dee14800b8e","size":250,"data":"","first_seen":"2023-03-07T01:42:22Z","last_seen":"2026-04-03T11:28:06.974219Z","times_seen":2120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/themes/minimalistblogger/js/navigation.js?ver=20170823","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49493316c090bb3d7cca5bc09031037c","sha1":"b77b6525d82691c3d4ca05948e846500ea0cb1d3","sha256":"fbc199bf7f97061c41664b040e84616a0cb54441a2efc5801d5d401d3a049f3c","sha512":"1fa1041574393c5693e1303cd1a3361d74c889060a8c13e3a9c7b37cfced7da28ba3e5866e7f59fe8f86d7d74b188305ad457943c1afb45e73fdb0971092aa67","ssdeep":"","tlshash":"c95103c67fcc333b52d6319665ae64ed363c9072da092c26bc79d540289086502befcd","size":2967,"data":"","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-04-03T19:33:50.399366Z","times_seen":6768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"44cadfafbbc1a691580bd583a042aaa6","sha1":"516a16970c6513181c0169b9f8cb05c6869fc01e","sha256":"477ea1dee83bfe55eeef305d79a7ff60a2b81b50b950e608b4cb7ce1883b507f","sha512":"11f8b6fcd031dfe8d9d900ee9688b9d7561269ab5eef10a6dacb0aea6389068f517ef949464bb7ae2e69b398a8cc5cd8c116c38e2521503a2f1941fc473118e5","ssdeep":"","tlshash":"58217c1e20293873864bf96b39cc2e166abc6aadf1f8445cc0408ed81fcd56f7281d89","size":1189,"data":"","first_seen":"2025-10-21T16:23:44.297484Z","last_seen":"2025-12-01T20:04:58.431602Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/js/app.js?ver=4.33","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"899fb1750b56d301cd77e110cea475c1","sha1":"0f5979b3054a2688890f364e8211438a26d31750","sha256":"aa8420a697fa16219298c3d1b7ce2dd4836d9212075f457918aaed3c5693ddb0","sha512":"e899e3d8b18b8d385a75a978f6b16384a67914faa4ff3f524f5b0081b973fea79bc78362486f553cc088e46c0b056337066c4c1bf189c0f95e5561a7ae12d60b","ssdeep":"384:RFLvKdqyU+wc+Oy7TyHR39IhYJaU+kURqv7yQO:CUKaSHN9a0aU+kURqDyQO","tlshash":"1d62e69c7224b0f405e709fb41bf236bb1b452feb855806459b09dbc29b8cdf52a1e63","size":15549,"data":"","first_seen":"2025-11-21T02:47:00.340893Z","last_seen":"2026-04-03T00:22:03.794251Z","times_seen":694,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/oci.js?t=1764619468299","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3fa5133b6899a2abb39fb79ed94300f","sha1":"dc1d5c75420b38cd7509a783ed09345d0ff78ac4","sha256":"66b141eb9ae44c86efc510844a71cf208c02d02abe03af3a7d8cc26736d3e19c","sha512":"db171b491636ef67596c4874d2b3e553eac016e303a713f12eb1e5c5116cab5f5c904b6aaf358268c04011016484b6920b227cf2d72c2de30f79bd16eba59bad","ssdeep":"384:ixcLKIHRnN2xFRhKv3E6mXHHKvaloLG2+KlLqK/CSuxAjUd0jJFKOEyEqWiodJVb:1BHRN6AIeJZKOgIJANJVEEvDHIoOI","tlshash":"64e219ccb2c3b02d0263a9ba047f6046763bbd59250c4883d5bad5d17ca9e5a513bfb8","size":32169,"data":"","first_seen":"2023-03-12T19:09:04Z","last_seen":"2026-03-15T10:53:33.326269Z","times_seen":5562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/mc/?dp=10\u0026tc=1","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"686505f5ffb46ecb48a007b633a06b7d","sha1":"8995288248d4498afa2f6dc3f7562371fbb320dd","sha256":"0bb36d803b6a1e9ba6f44973b28bc60fb4457480550026f61021ca5660dd27a1","sha512":"6119344f6d6abc8731b48732484a1aecfca3ad81cad3bc8e330d9f5adc184d9029364a12de83629fdb3e2ef5e7e8766eea3bebe410deee671a0e4588ff47ca28","ssdeep":"","tlshash":"c4f0c01a05b60c11115508b8e3ff4520b851330f288ad04fbdcff64a5f1888a905badc","size":525,"data":"","first_seen":"2025-12-01T20:04:58.432184Z","last_seen":"2025-12-01T20:04:58.432184Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.sosiago.id/js/tracking.js","fqdn":"api.sosiago.id","domain":"sosiago.id","tld":"id"},"ip":{"addr":"206.189.82.246","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"33f5cc33133a2e91239840391b2c4586","sha1":"b2670c6d9eb3fc54d430c5b10b5874514b5e520f","sha256":"be546ebb7878ac996b4b0ca736c90a48d25567517f6b24cd9c0a040dbc47c599","sha512":"31e6c5adf64b13bea7a1b9fa3c79b359ac5931a75909996ca84b658b53748dff58c79d41643c1a05f211fdbc48c4502e2525a4a05eeed67329312f1693b88728","ssdeep":"","tlshash":"d8f0d8c6b8812923bc926160c57eb292b96b0006f359c5012909c28a0b7123ac21f5eb","size":608,"data":"","first_seen":"2023-03-10T18:18:16Z","last_seen":"2026-01-22T01:41:23.727941Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/themes/minimalistblogger/js/script.js?ver=20160720","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"61caf6e2f693a88ed96e1b413b90bb41","sha1":"804f26a285cbf49c2aab613ddd5ed1c3889f9c20","sha256":"affd9edd5dc26a271a81e36bade23368d81e7c628a7bb39901ec92376d296705","sha512":"b86366d287e150f651dc7b1d9ef591e53e21ac9128e96b92f209c695047bde94721935ab040e4fc496428a44a67f986334bb77dab04c4c3ce3c895fa9b7ecca9","ssdeep":"","tlshash":"dd8121c4b3afa7a64cbf335ae17f84448a3dc536820c1b96f4f649594e0540823e7a5e","size":3858,"data":"","first_seen":"2023-03-07T01:18:57Z","last_seen":"2026-04-03T12:41:10.338622Z","times_seen":447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/themes/minimalistblogger/js/accessibility.js?ver=20160720","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0c4524b04f4865b70d25d84008525a4","sha1":"f48de144a403632234b4fd6c2eebb83a5cbd0cb9","sha256":"5388cf7a66bfe00e857ab5c353f9703cdae46691d386f9034e9151f5c6c9c6bf","sha512":"ba041e3b2605241f0fc12921b79db98d7c768668c09d5909369cbb4b54231ef3836f1257016f8c30b48ba62c23e5bc0bab4bf0929bc20aecb1b92d4839a70880","ssdeep":"","tlshash":"9121d39cf3edb11304b93858b72d9045062e01365a007d5bfcb949641f97e3911f7c2d","size":1316,"data":"","first_seen":"2023-03-07T01:18:57Z","last_seen":"2026-04-03T12:41:10.331039Z","times_seen":785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-04T04:43:49.269796Z","times_seen":195760,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/themes/minimalistblogger/style.css?ver=6.8.3","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:24.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clubrubionu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 06:29:56 GMT","end":"Wed, 07 Jan 2026 07:27:35 GMT"},"fingerprint":{"sha1":"E6:64:3E:1A:2C:7E:08:E2:16:0D:38:EF:E0:B9:F3:71:31:45:A6:81","sha256":"21:5B:4C:16:EF:1B:9C:AB:20:82:08:CF:EE:F2:33:B9:9A:E8:39:D4:F1:D9:63:77:1B:6D:87:A7:C4:0C:05:76"}}},"request":{"raw":"GET /wp-content/themes/minimalistblogger/style.css?ver=6.8.3 HTTP/1.1\r\nHost: clubrubionu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 20:04:25 GMT\r\ncontent-type: text/css\r\ncontent-length: 9683\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 20:04:25 GMT\r\nlast-modified: Thu, 11 Sep 2025 02:11:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lKSEPvCBsRtOVWjXhPGy%2BxavsWx8roc2pFdHwUhyBbEqkjNQpUWps3u%2FTJ2nwCiL41406ciLgZ5Fw9hSJPJbEIQAU0yuHCIi2N9OsPg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a753187ae59b4ed-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":47527,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2425)","md5":"a2e5e4895f71377215a345737679e024","sha1":"6d8567a39e00fcd80b9807fae05f8fe3c49588a1","sha256":"48f3b094152fc4fb16810d5bee40f58ec2b929d6faf05370d5a2a1fd408332c4","sha512":"d71294961292fd505ba8e1076655bcd6bcc21e4b811aa947fcd77334c71b870a980d992c13a93c9882775427c5018022bcb72223e388de3a397242d8eb518e3e","ssdeep":"768:ID3cXxjpkCDJkR/R1lOIU/bk6iFHVBRqDYNpRLDNMHOo4K:ID3X5zlU7iF1BYDYNpRLDNMHOo4K","tlshash":"4723b76177502988961b52bdff98ef616f190112af0f4eeae850a528d38e6d502f3f4c","first_seen":"2025-10-04T15:41:08.495244Z","last_seen":"2026-04-03T12:41:10.325107Z","times_seen":25,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D14","fqdn":"ssp-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.93","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sape.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 23:35:45 GMT","end":"Tue, 06 Jan 2026 23:35:44 GMT"},"fingerprint":{"sha1":"2D:BB:D2:42:8E:33:F5:EC:A0:48:8C:E1:DC:94:B6:53:E8:CE:11:55","sha256":"B4:2B:99:62:C7:15:73:3C:46:90:97:D1:C8:C7:1A:01:8C:FD:9B:B0:CA:9C:1B:06:7B:83:43:4D:54:A2:D6:25"}}},"request":{"raw":"GET /rmatch/?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D14 HTTP/1.1\r\nHost: ssp-rtb.sape.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: https://acint.net/rmatch?dp=14\u0026euid=3C03420ACCF42D690D01F05B022F1F22\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nset-cookie: sspuid=CkIDPGkt9Mxb8AENIh8vAneUUgSII7lnjsLmy0xU8B02fxUg; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":129,"dns":28,"connect":41,"send":0,"wait":41,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.dsp.solta.io/match/sape?id=0600007FCCF42D69C91D157F0296C18F","fqdn":"sync.dsp.solta.io","domain":"solta.io","tld":"io"},"ip":{"addr":"217.199.220.73","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dsp.solta.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 04 Aug 2025 11:49:51 GMT","end":"Sat, 05 Sep 2026 11:49:50 GMT"},"fingerprint":{"sha1":"47:08:04:35:5D:1F:29:FE:9D:B8:04:FB:41:AA:98:1C:B3:95:76:78","sha256":"F4:28:D6:EC:60:7B:5B:18:1C:90:EA:96:70:90:94:81:60:02:76:08:87:8B:89:2E:6B:35:EB:89:97:42:D1:75"}}},"request":{"raw":"GET /match/sape?id=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: sync.dsp.solta.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-04T03:58:55.614436Z","times_seen":31107,"resource_available":true,"data":null}},"time_used":580,"timings":{"blocked":41,"dns":3,"connect":65,"send":0,"wait":65,"receive":0,"ssl":403},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/rmatch?dp=126\u0026euid=77bdc63f-ca35-43d0-46e3-0b14a369a51c\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=126\u0026euid=77bdc63f-ca35-43d0-46e3-0b14a369a51c\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126\u0026dp=14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nset-cookie: cSyncDp14v4=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match?dp=394\u0026euid=64ba2910-09cb-43b6-96c6-7f8bbe4bca0c","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=394\u0026euid=64ba2910-09cb-43b6-96c6-7f8bbe4bca0c HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nset-cookie: cSyncDp14v4=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14","fqdn":"ssp-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.93","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sape.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 23:35:45 GMT","end":"Tue, 06 Jan 2026 23:35:44 GMT"},"fingerprint":{"sha1":"2D:BB:D2:42:8E:33:F5:EC:A0:48:8C:E1:DC:94:B6:53:E8:CE:11:55","sha256":"B4:2B:99:62:C7:15:73:3C:46:90:97:D1:C8:C7:1A:01:8C:FD:9B:B0:CA:9C:1B:06:7B:83:43:4D:54:A2:D6:25"}}},"request":{"raw":"GET /rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14 HTTP/1.1\r\nHost: ssp-rtb.sape.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sspuid=CkIDPGkt9Mxb8AENIh8vAneUUgSII7lnjsLmy0xU8B02fxUg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: https://acint.net/match?dp=14\u0026euid=3C03420ACCF42D690D01F05B022F1F22\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adx.com.ru/sync/confirm/sapePlazkart?sspSysName=sapePlazkart\u0026uid=0600007FCCF42D69C91D157F0296C18F","fqdn":"adx.com.ru","domain":"adx.com.ru","tld":"com.ru"},"ip":{"addr":"83.222.105.118","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adx.com.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 20 Jun 2025 13:13:33 GMT","end":"Wed, 22 Jul 2026 13:13:32 GMT"},"fingerprint":{"sha1":"0F:34:EC:CE:BC:17:E9:5F:83:40:15:65:EF:68:EC:37:03:9C:C8:9C","sha256":"87:20:22:42:36:6F:88:B8:4D:D7:3A:11:7B:17:9F:56:7B:CD:5A:0C:00:F3:42:3C:BE:28:DE:11:8E:AD:F5:FE"}}},"request":{"raw":"GET /sync/confirm/sapePlazkart?sspSysName=sapePlazkart\u0026uid=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: adx.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user=692df4cd7011cb0001e9132a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.26.3\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 349\r\ncache-control: no-store\r\nlocation: https://2-692df4cd7011cb0001e9132a.id.adx.com.ru/https://5--2--692df4cd7011cb0001e9132a.stbid.ru?r=https%3A%2F%2Fx01.aidata.io%2F0.gif%3Fpid%3D9712851%26id%3D692df4cd7011cb0001e9132a%26dest%3Dhttps%253A%252F%252Fssp.adriver.ru%252Fcgi-bin%252Fsync.cgi%253Fdsp_id%253D162%2526external_id%253D692df4cd7011cb0001e9132a%2526r%253D\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14","fqdn":"ssp-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.93","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sape.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 23:35:45 GMT","end":"Tue, 06 Jan 2026 23:35:44 GMT"},"fingerprint":{"sha1":"2D:BB:D2:42:8E:33:F5:EC:A0:48:8C:E1:DC:94:B6:53:E8:CE:11:55","sha256":"B4:2B:99:62:C7:15:73:3C:46:90:97:D1:C8:C7:1A:01:8C:FD:9B:B0:CA:9C:1B:06:7B:83:43:4D:54:A2:D6:25"}}},"request":{"raw":"GET /rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14 HTTP/1.1\r\nHost: ssp-rtb.sape.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sspuid=CkIDPGkt9Mxb8AENIh8vAneUUgSII7lnjsLmy0xU8B02fxUg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: https://acint.net/match?dp=14\u0026euid=3C03420ACCF42D690D01F05B022F1F22\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/aci.js","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:28.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /aci.js HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 8799\r\nlast-modified: Wed, 13 Aug 2025 13:28:32 GMT\r\netag: \"689c9300-225f\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 02 Dec 2025 08:04:28 GMT\r\ncache-control: max-age=43200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31372,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (31372), with no line terminators","md5":"20f0381069e78a636d53b3d505e967c7","sha1":"800464b5f1400a923482d4298b472e17cda20737","sha256":"7b2d18d3dc9861604cbbde63dd9218e12a6cac1a06f52b877eddf61f9f7c3b37","sha512":"5aa6d98aca4d9881d5bf2c8dd71ff3d35e534a09ee749bf248c3d6f838f240f0d77edf06f8f2eae1b7a3797d9d447fe2da922395243f22547a13c4b6ea9981a2","ssdeep":"768:EMNY2uNr6tm67+DVRhNk6L0Wbha0XByPcf0:EMN/uNWo67+DLhNZaMByks","tlshash":"1ce2f98a7191f47306d3a179c12f050bf136696620e8d0e4f536dce0aeb858e6577f3a","first_seen":"2024-10-20T11:06:54.910201Z","last_seen":"2026-01-29T05:23:48.922533Z","times_seen":4303,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":113,"dns":14,"connect":43,"send":0,"wait":44,"receive":40,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:28.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clubrubionu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 06:29:56 GMT","end":"Wed, 07 Jan 2026 07:27:35 GMT"},"fingerprint":{"sha1":"E6:64:3E:1A:2C:7E:08:E2:16:0D:38:EF:E0:B9:F3:71:31:45:A6:81","sha256":"21:5B:4C:16:EF:1B:9C:AB:20:82:08:CF:EE:F2:33:B9:9A:E8:39:D4:F1:D9:63:77:1B:6D:87:A7:C4:0C:05:76"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.3 HTTP/1.1\r\nHost: clubrubionu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4769\r\nlast-modified: Tue, 15 Jul 2025 21:21:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=unec501L5DDl%2B1JlyoqN26RS114WxqyONDM50Ov%2BF9am2QkECKEHFdT4rvt92NGeBn0t2ujZ8wr23hq5KaEELoMDP0%2BIqfw1UIOP1oo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9a75319bff87b4ed-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19251,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-04T04:43:49.269796Z","times_seen":195760,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":376,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/oci/?v=0.7.1\u0026uid=9bf363b5-e69a-4b3a-8935-baedb8c2b3b4\u0026dp=10\u0026tz=%2B00%3A00\u0026nc=941969\u0026oid=52c23a0593a416c46c93b04c0a432175","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:28.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /oci/?v=0.7.1\u0026uid=9bf363b5-e69a-4b3a-8935-baedb8c2b3b4\u0026dp=10\u0026tz=%2B00%3A00\u0026nc=941969\u0026oid=52c23a0593a416c46c93b04c0a432175 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T04:45:41.790278Z","times_seen":326566,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/uploads/2024/05/clubrubionu.com-Icon.png","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:28.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clubrubionu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 06:29:56 GMT","end":"Wed, 07 Jan 2026 07:27:35 GMT"},"fingerprint":{"sha1":"E6:64:3E:1A:2C:7E:08:E2:16:0D:38:EF:E0:B9:F3:71:31:45:A6:81","sha256":"21:5B:4C:16:EF:1B:9C:AB:20:82:08:CF:EE:F2:33:B9:9A:E8:39:D4:F1:D9:63:77:1B:6D:87:A7:C4:0C:05:76"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/clubrubionu.com-Icon.png HTTP/1.1\r\nHost: clubrubionu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nCookie: fid=27e18018-8332-4cfd-a500-540dcb2f74a9; _ac_oid=52c23a0593a416c46c93b04c0a432175%3A1764623068632\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 2041\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 20:04:29 GMT\r\nlast-modified: Fri, 17 May 2024 10:47:03 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HlStctacgIPHkGlrpqcnt0t9qDdQs0gdH7S4jmh2yaMBHAhBdXVbLp9q8zkw59R4FSoKAdIj7bw7SvkPQJXGvLEeM7ddTEUIWoe7iJI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75319fffbeb4ed-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2041,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 47 x 47, 8-bit/color RGBA, non-interlaced","md5":"83df39398c97cda0e1c9f90ef465cf16","sha1":"0eddc7a314696cb118fbe65bc526e624eb3e0876","sha256":"5ea153cf9a4749f6562ca4bb97abd96aad9fe8521e3fb584e8e998232e03fbc1","sha512":"97814427005456c2bf577c8497e2f5c6097fc29f7537c222a7a98108b4f0f9e1003383d11444ddbac19b0d2cfe2a376ec0a2bfe83e026e39b2c035c59ec81e55","ssdeep":"","tlshash":"82414cd313a95d3a40d691655701d2089907772d52f22911f7151469342f45923effbf","first_seen":"2025-12-01T20:04:58.407449Z","last_seen":"2025-12-01T20:04:58.407449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126\u0026dp=14","fqdn":"ssp-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.93","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sape.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 23:35:45 GMT","end":"Tue, 06 Jan 2026 23:35:44 GMT"},"fingerprint":{"sha1":"2D:BB:D2:42:8E:33:F5:EC:A0:48:8C:E1:DC:94:B6:53:E8:CE:11:55","sha256":"B4:2B:99:62:C7:15:73:3C:46:90:97:D1:C8:C7:1A:01:8C:FD:9B:B0:CA:9C:1B:06:7B:83:43:4D:54:A2:D6:25"}}},"request":{"raw":"GET /rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126\u0026dp=14 HTTP/1.1\r\nHost: ssp-rtb.sape.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sspuid=CkIDPGkt9Mxb8AENIh8vAneUUgSII7lnjsLmy0xU8B02fxUg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: https://acint.net/rmatch?dp=14\u0026euid=3C03420ACCF42D690D01F05B022F1F22\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f16b1518-cef0-11f0-86e0-002590c0647c.n5.sync.bumlam.com/?src=sape","fqdn":"f16b1518-cef0-11f0-86e0-002590c0647c.n5.sync.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"185.115.93.200","port":443,"asn":42881,"as":"Sc Itns.net Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n0.sync.bumlam.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 16:52:42 GMT","end":"Fri, 06 Feb 2026 16:52:41 GMT"},"fingerprint":{"sha1":"D6:13:3A:3E:71:02:DF:C5:96:43:AD:36:A2:BA:99:EC:85:72:1B:47","sha256":"AB:C7:4E:DF:6B:02:15:86:BE:BB:3C:DE:16:88:C1:CE:99:3D:4E:DB:4E:7F:19:6E:C7:9B:85:6F:52:4E:74:D5"}}},"request":{"raw":"GET /?src=sape HTTP/1.1\r\nHost: f16b1518-cef0-11f0-86e0-002590c0647c.n5.sync.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: suuid3=IiRmMTZiMTUxOC1jZWYwLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie/1.10.3\r\nDate: Mon, 01 Dec 2025 20:04:29 GMT\r\nContent-Length: 0\r\nConnection: close\r\nLocation: https://pix.bumlam.com/sync/sape/done\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie:1.10.3","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":131,"dns":44,"connect":30,"send":0,"wait":32,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/hit/?v=0.7.1\u0026uid=9bf363b5-e69a-4b3a-8935-baedb8c2b3b4\u0026dp=10\u0026tz=%2B00%3A00\u0026nc=547738\u0026u=https%3A%2F%2Fclubrubionu.com%2F\u0026r=\u0026rs=1280x1024\u0026t=CRB%20-%20Health%20Information\u0026oE=1\u0026oP=1\u0026dT=2025-12-01T20%3A04%3A28.294\u0026fu=27e18018-8332-4cfd-a500-540dcb2f74a9","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:28.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /hit/?v=0.7.1\u0026uid=9bf363b5-e69a-4b3a-8935-baedb8c2b3b4\u0026dp=10\u0026tz=%2B00%3A00\u0026nc=547738\u0026u=https%3A%2F%2Fclubrubionu.com%2F\u0026r=\u0026rs=1280x1024\u0026t=CRB%20-%20Health%20Information\u0026oE=1\u0026oP=1\u0026dT=2025-12-01T20%3A04%3A28.294\u0026fu=27e18018-8332-4cfd-a500-540dcb2f74a9 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nset-cookie: aid=fwAACmkt9Mx+Vh3B9TP0AloNiFOep7drEdVH2T5TLuRo1R6p; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T04:45:41.790278Z","times_seen":326566,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.buzzoola.com/cookiesync/dsp/sape-banner?set_buzzoola_cookie=t\u0026uid=0600007FCCF42D69C91D157F0296C18F\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126","fqdn":"exchange.buzzoola.com","domain":"buzzoola.com","tld":"com"},"ip":{"addr":"45.138.161.75","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buzzoola.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 14:18:31 GMT","end":"Sun, 04 Jan 2026 14:18:30 GMT"},"fingerprint":{"sha1":"E5:71:B9:31:DB:51:F4:76:FF:21:14:90:EB:54:47:17:13:41:68:37","sha256":"53:82:CA:46:1D:A1:51:03:86:A3:1E:B5:1C:9C:1D:53:3A:22:0F:62:E9:37:B9:4E:6E:08:E5:1D:9F:B5:CF:8A"}}},"request":{"raw":"GET /cookiesync/dsp/sape-banner?set_buzzoola_cookie=t\u0026uid=0600007FCCF42D69C91D157F0296C18F\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126 HTTP/1.1\r\nHost: exchange.buzzoola.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uuid=77bdc63f-ca35-43d0-46e3-0b14a369a51c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 156\r\nlocation: https://mc.acint.net/rmatch?dp=126\u0026euid=77bdc63f-ca35-43d0-46e3-0b14a369a51c\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126\r\nserverid: TODO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match?dp=385\u0026euid=ba61cbac70f790f99a9ab","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=385\u0026euid=ba61cbac70f790f99a9ab HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468; cSyncDp7v3=1764619469; cSyncDp241v2=1764619469\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T04:45:41.790278Z","times_seen":326566,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=95","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /cmatch?dp=95 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468; cSyncDp7v3=1764619469; cSyncDp241v2=1764619469\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T04:45:41.790278Z","times_seen":326566,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statmedia.ru/counter/sync.gif?system=sape\u0026cb=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D399%26euid%3D%24UID","fqdn":"statmedia.ru","domain":"statmedia.ru","tld":"ru"},"ip":{"addr":"82.202.225.227","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statmedia.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 04:55:37 GMT","end":"Thu, 19 Feb 2026 04:55:36 GMT"},"fingerprint":{"sha1":"56:0A:46:B3:31:72:5F:7F:E1:F3:1B:FE:6B:F6:48:C4:63:07:E2:59","sha256":"9E:2E:C9:05:CE:37:BD:2F:CA:81:4D:2C:BC:37:B3:69:F6:4E:DE:D4:39:53:D2:27:88:E1:26:A8:A8:58:46:3B"}}},"request":{"raw":"GET /counter/sync.gif?system=sape\u0026cb=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D399%26euid%3D%24UID HTTP/1.1\r\nHost: statmedia.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 01 Dec 2025 20:04:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-04-04T04:44:38.709836Z","times_seen":91569,"resource_available":true,"data":null}},"time_used":642,"timings":{"blocked":232,"dns":0,"connect":39,"send":0,"wait":40,"receive":0,"ssl":331},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match?dp=433\u0026euid=fc583aa6-2683-479e-8ce7-adc6b1efaa65","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=433\u0026euid=fc583aa6-2683-479e-8ce7-adc6b1efaa65 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468; cSyncDp7v3=1764619469; cSyncDp241v2=1764619469\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T04:45:41.790278Z","times_seen":326566,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.sosiago.id/js/tracking.js","fqdn":"api.sosiago.id","domain":"sosiago.id","tld":"id"},"ip":{"addr":"206.189.82.246","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:24.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"api.sosiago.id","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 04:20:32 GMT","end":"Sun, 08 Feb 2026 04:20:31 GMT"},"fingerprint":{"sha1":"FB:07:6B:8A:81:37:3B:11:D6:D6:01:F3:C1:B2:3B:18:A3:F4:24:9A","sha256":"7C:14:F4:1E:E4:82:7B:94:5E:6E:D9:DD:31:4E:1A:71:18:EB:1E:74:A3:CD:A9:AE:1A:34:BA:BE:98:ED:8C:70"}}},"request":{"raw":"GET /js/tracking.js HTTP/1.1\r\nHost: api.sosiago.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 01 Dec 2025 20:04:26 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 18 Sep 2019 08:51:11 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"5d81efff-260\"\r\nExpires: Wed, 31 Dec 2025 20:04:26 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":608,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"33f5cc33133a2e91239840391b2c4586","sha1":"b2670c6d9eb3fc54d430c5b10b5874514b5e520f","sha256":"be546ebb7878ac996b4b0ca736c90a48d25567517f6b24cd9c0a040dbc47c599","sha512":"31e6c5adf64b13bea7a1b9fa3c79b359ac5931a75909996ca84b658b53748dff58c79d41643c1a05f211fdbc48c4502e2525a4a05eeed67329312f1693b88728","ssdeep":"","tlshash":"d8f0d8c6b8812923bc926160c57eb292b96b0006f359c5012909c28a0b7123ac21f5eb","first_seen":"2023-03-10T18:18:16Z","last_seen":"2026-01-22T01:41:23.727941Z","times_seen":28,"resource_available":true,"data":null}},"time_used":2473,"timings":{"blocked":1059,"dns":79,"connect":331,"send":0,"wait":332,"receive":0,"ssl":669},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:28.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clubrubionu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Nov 2025 09:54:26 GMT\r\nexpires: Fri, 27 Nov 2026 09:54:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 382202\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23040,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-04-04T04:41:25.449387Z","times_seen":134972,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":61,"dns":1,"connect":20,"send":0,"wait":8,"receive":7,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.bidvol.com/usersync?dspcsid=8\u0026redirect=1","fqdn":"ssp.bidvol.com","domain":"bidvol.com","tld":"com"},"ip":{"addr":"194.85.16.25","port":443,"asn":8985,"as":"Join-stock company Internet ExchangeMSK-IX","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ssp.bidvol.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 12:03:09 GMT","end":"Thu, 18 Dec 2025 12:03:08 GMT"},"fingerprint":{"sha1":"09:DC:DF:0F:50:B4:71:4A:97:9D:99:76:2B:49:97:C8:2E:76:7D:86","sha256":"7F:E5:A0:AF:B7:B0:CF:2A:0B:BC:F8:BC:6E:88:34:C8:1E:CC:DF:9E:53:20:43:C3:25:29:62:78:8F:19:15:F0"}}},"request":{"raw":"GET /usersync?dspcsid=8\u0026redirect=1 HTTP/1.1\r\nHost: ssp.bidvol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-request-id: 248ddc96-dea1-4e1f-be65-51684edf4aa1\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\nset-cookie: bvuid=2p94q27w0h; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None\nbvuid2=2p94q27w0h; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":26,"connect":60,"send":0,"wait":69,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/rmatch?dp=71\u0026euid=db0ac286-d6bb-4b50-ae85-d9741d68b9a2\u0026r=https%3A%2F%2Fsync.upravel.com%2Fpbd%2Fsync","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=71\u0026euid=db0ac286-d6bb-4b50-ae85-d9741d68b9a2\u0026r=https%3A%2F%2Fsync.upravel.com%2Fpbd%2Fsync HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://sync.upravel.com/pbd/sync\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14","fqdn":"ssp-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.93","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sape.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 23:35:45 GMT","end":"Tue, 06 Jan 2026 23:35:44 GMT"},"fingerprint":{"sha1":"2D:BB:D2:42:8E:33:F5:EC:A0:48:8C:E1:DC:94:B6:53:E8:CE:11:55","sha256":"B4:2B:99:62:C7:15:73:3C:46:90:97:D1:C8:C7:1A:01:8C:FD:9B:B0:CA:9C:1B:06:7B:83:43:4D:54:A2:D6:25"}}},"request":{"raw":"GET /rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14 HTTP/1.1\r\nHost: ssp-rtb.sape.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sspuid=CkIDPGkt9Mxb8AENIh8vAneUUgSII7lnjsLmy0xU8B02fxUg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: https://acint.net/match?dp=14\u0026euid=3C03420ACCF42D690D01F05B022F1F22\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.bumlam.com/?src=sape","fqdn":"sync.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.147","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 15:20:25 GMT","end":"Fri, 02 Jan 2026 15:20:24 GMT"},"fingerprint":{"sha1":"1D:6A:41:31:8B:54:10:85:1C:5D:59:CD:2C:2A:06:C6:67:15:92:6C","sha256":"39:7A:3D:4E:DA:59:64:82:87:68:80:E7:52:EF:C8:E4:2C:E2:B6:6B:7B:5A:6F:C2:72:5D:92:E2:DC:E5:9F:6B"}}},"request":{"raw":"GET /?src=sape HTTP/1.1\r\nHost: sync.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: suuid3=IiRmMTZiMTUxOC1jZWYwLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Mon, 01 Dec 2025 20:04:29 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: suuid3=IiRmMTZiMTUxOC1jZWYwLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Sun, 26 Nov 2045 20:04:29 GMT; Domain=bumlam.com; SameSite=None; Secure\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nLocation: https://pix.bumlam.com/sync/sape/sync_ok?guid=f16b1518-cef0-11f0-86e0-002590c0647c\r\nCache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0\r\nAccess-Control-Allow-Origin: https://acint.net\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":299,"dns":1,"connect":23,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=261","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /cmatch?dp=261 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468; cSyncDp7v3=1764619469; cSyncDp241v2=1764619469\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T04:45:41.790278Z","times_seen":326566,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/rmatch?dp=14\u0026euid=3C03420ACCF42D690D01F05B022F1F22\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=14\u0026euid=3C03420ACCF42D690D01F05B022F1F22\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=126\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-statistics.dsp.nt.technology/api/cookie-sync/eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJSVEIgU2FwZV8xNzM4MDUyODgwODQ3In0.rWWFhvjxIbuujG1GTFwQklSMJiKgptBwYzz4p8BSesmEm5CqjbMhkVs5mVteVVlfMbT4wiTf22YGI6HFl8Snrw/sync?sspUserId=0600007FCCF42D69C91D157F0296C18F\u0026r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D368%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D368","fqdn":"ssp-statistics.dsp.nt.technology","domain":"nt.technology","tld":"technology"},"ip":{"addr":"54.77.2.128","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsp.nt.technology","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 15 Jan 2025 00:00:00 GMT","end":"Fri, 13 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C2:37:6A:CC:E8:44:B1:19:D2:4B:0D:0B:C2:32:F7:6E:7F:4B:49:3E","sha256":"D6:68:84:30:34:51:0A:CA:62:C7:16:62:E6:3B:C7:B0:BF:04:97:03:A7:C8:87:B8:32:98:C7:1B:2B:BE:80:75"}}},"request":{"raw":"GET /api/cookie-sync/eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJSVEIgU2FwZV8xNzM4MDUyODgwODQ3In0.rWWFhvjxIbuujG1GTFwQklSMJiKgptBwYzz4p8BSesmEm5CqjbMhkVs5mVteVVlfMbT4wiTf22YGI6HFl8Snrw/sync?sspUserId=0600007FCCF42D69C91D157F0296C18F\u0026r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D368%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D368 HTTP/1.1\r\nHost: ssp-statistics.dsp.nt.technology\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-length: 0\r\nlocation: https://acint.net/rmatch?dp=368\u0026euid=NT_2_0600007FCCF42D69C91D157F0296C18F_380615180345046_nRssfr\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D368\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1 ; mode=block\r\nreferrer-policy: no-referrer\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":621,"timings":{"blocked":155,"dns":12,"connect":35,"send":0,"wait":35,"receive":0,"ssl":383},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cm.pxltag.com/rsync?platform_id=aed2070256c34c4c8098476a32bf5b32\u0026sync_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D337%26euid%3D%7Binner_id%7D","fqdn":"cm.pxltag.com","domain":"pxltag.com","tld":"com"},"ip":{"addr":"212.41.11.107","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pxltag.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 06:13:30 GMT","end":"Tue, 24 Feb 2026 06:13:29 GMT"},"fingerprint":{"sha1":"A1:A0:C7:F4:E1:A9:15:33:76:3A:FA:7D:4A:3B:F9:AA:57:8C:EE:E3","sha256":"FD:17:5B:23:FD:89:09:7F:C8:35:5D:2E:AE:99:32:0B:E2:5F:CE:0B:08:72:B0:A3:51:11:63:BB:88:49:10:B6"}}},"request":{"raw":"GET /rsync?platform_id=aed2070256c34c4c8098476a32bf5b32\u0026sync_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D337%26euid%3D%7Binner_id%7D HTTP/1.1\r\nHost: cm.pxltag.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.20.1\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-length: 0\r\nlocation: https://acint.net/match?dp=337\u0026euid=LPTvyZFqR\r\nset-cookie: smi_uid=LPTvyZFqR; max-age=31536000; domain=.pxltag.com; path=/; HttpOnly; secure; SameSite=None\r\nstrict-transport-security: max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":33,"connect":44,"send":0,"wait":91,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.bringads.ru/sync?ssp=17","fqdn":"a.bringads.ru","domain":"bringads.ru","tld":"ru"},"ip":{"addr":"213.171.19.210","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bringads.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 14:54:26 GMT","end":"Sun, 28 Dec 2025 14:54:25 GMT"},"fingerprint":{"sha1":"40:50:A8:C3:0D:34:80:5E:81:99:FF:19:9F:4C:E7:E6:E8:B9:41:80","sha256":"1B:A4:40:16:8E:A4:C1:6F:33:4C:BE:E0:3B:C3:0A:FD:54:1E:ED:D9:FD:94:51:88:9B:1C:1A:FE:06:47:23:68"}}},"request":{"raw":"GET /sync?ssp=17 HTTP/1.1\r\nHost: a.bringads.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0\r\nDate: Mon, 01 Dec 2025 20:04:29 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: prebringads=1; Expires=Wed, 31 Dec 2025 23:04:29 GMT; Domain=.bringads.ru; SameSite=None; Secure; Path=/\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":680,"timings":{"blocked":221,"dns":1,"connect":46,"send":0,"wait":83,"receive":0,"ssl":326},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid.sspnet.tech/sync/sape?redirect=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D203%26euid%3D%24%7BUSER_ID%7D\u0026user_id=0600007FCCF42D69C91D157F0296C18F","fqdn":"bid.sspnet.tech","domain":"sspnet.tech","tld":"tech"},"ip":{"addr":"5.35.15.14","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bid.sspnet.tech","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 05:28:38 GMT","end":"Thu, 29 Jan 2026 05:28:37 GMT"},"fingerprint":{"sha1":"D6:A5:E5:4E:82:95:5B:CF:2F:B8:0F:5D:FD:44:33:2C:5B:BD:AD:E7","sha256":"E3:CF:6E:CA:22:6E:C7:22:9A:94:92:EB:FE:71:82:DE:C0:53:2C:1A:13:82:6A:7E:0B:11:DC:76:AD:31:13:56"}}},"request":{"raw":"GET /sync/sape?redirect=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D203%26euid%3D%24%7BUSER_ID%7D\u0026user_id=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: bid.sspnet.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-length: 0\r\nlocation: https://exchange.buzzoola.com/cookiesync/redirect?redirect_url=https%3A%2F%2Fbid.sspnet.tech%2Fsync%2Freverse%3Fdsp_slug%3Dbuzzoola%26dsp_user_id%3D%24%7BUUID%7D%26sync_id%3D7ad367aa-27ed-4568-b2ab-c4710ce78ba9\r\nx-request-id: 7d2a65a3c9342d2bed36ea3728534b65\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":717,"timings":{"blocked":279,"dns":0,"connect":42,"send":0,"wait":107,"receive":0,"ssl":287},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/uploads/2024/05/clubrubionu.com-Icon.png","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:28.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clubrubionu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 06:29:56 GMT","end":"Wed, 07 Jan 2026 07:27:35 GMT"},"fingerprint":{"sha1":"E6:64:3E:1A:2C:7E:08:E2:16:0D:38:EF:E0:B9:F3:71:31:45:A6:81","sha256":"21:5B:4C:16:EF:1B:9C:AB:20:82:08:CF:EE:F2:33:B9:9A:E8:39:D4:F1:D9:63:77:1B:6D:87:A7:C4:0C:05:76"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/clubrubionu.com-Icon.png HTTP/1.1\r\nHost: clubrubionu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nCookie: fid=27e18018-8332-4cfd-a500-540dcb2f74a9; _ac_oid=52c23a0593a416c46c93b04c0a432175%3A1764623068632\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 2041\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 20:04:29 GMT\r\nlast-modified: Fri, 17 May 2024 10:47:03 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2FYxOvMIxuHH5FPx7FxxGp2IIkAMXkLXWRVW4VwPtaZai98k7ZC%2FZ6ZkpkilndUO1s22I0l4CKoRp%2FyHJDf5IfA8xq5db3sU3DJSrhI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75319fffbfb4ed-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2041,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 47 x 47, 8-bit/color RGBA, non-interlaced","md5":"83df39398c97cda0e1c9f90ef465cf16","sha1":"0eddc7a314696cb118fbe65bc526e624eb3e0876","sha256":"5ea153cf9a4749f6562ca4bb97abd96aad9fe8521e3fb584e8e998232e03fbc1","sha512":"97814427005456c2bf577c8497e2f5c6097fc29f7537c222a7a98108b4f0f9e1003383d11444ddbac19b0d2cfe2a376ec0a2bfe83e026e39b2c035c59ec81e55","ssdeep":"","tlshash":"82414cd313a95d3a40d691655701d2089907772d52f22911f7151469342f45923effbf","first_seen":"2025-12-01T20:04:58.407449Z","last_seen":"2025-12-01T20:04:58.407449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=14","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /cmatch?dp=14 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://ads.betweendigital.com/match?bidder_id=73\u0026external_user_id=0600007FCCF42D69C91D157F0296C18F\r\nset-cookie: cSyncDp7v3=1764619469; expires=Wed, 31-Dec-25 20:04:29 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/match?dp=14\u0026euid=3C03420ACCF42D690D01F05B022F1F22","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=14\u0026euid=3C03420ACCF42D690D01F05B022F1F22 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468; cSyncDp7v3=1764619469\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T04:45:41.790278Z","times_seen":326566,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/themes/minimalistblog-stories/style.css?ver=6.8.3","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:24.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clubrubionu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 06:29:56 GMT","end":"Wed, 07 Jan 2026 07:27:35 GMT"},"fingerprint":{"sha1":"E6:64:3E:1A:2C:7E:08:E2:16:0D:38:EF:E0:B9:F3:71:31:45:A6:81","sha256":"21:5B:4C:16:EF:1B:9C:AB:20:82:08:CF:EE:F2:33:B9:9A:E8:39:D4:F1:D9:63:77:1B:6D:87:A7:C4:0C:05:76"}}},"request":{"raw":"GET /wp-content/themes/minimalistblog-stories/style.css?ver=6.8.3 HTTP/1.1\r\nHost: clubrubionu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 20:04:25 GMT\r\ncontent-type: text/css\r\ncontent-length: 9578\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 20:04:25 GMT\r\nlast-modified: Thu, 27 Feb 2025 06:02:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FmXIEEVlx3E1HlIlJaUUtbdYTcpys3gm3dkJvQR8g2OuIDx8t7GvZFvcleFAsuYsbSlRSKLneSkE752wj99lp2pd3jXszxPY%2BO6F4oo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a753187be5db4ed-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":52566,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1142)","md5":"d86566a3e4e43f73cdcd48f7f8d6ca0c","sha1":"0e6d2bd45118ce2983b9b786ef9ed2e67576db99","sha256":"f5068ae8ff9cdf258b40ab376d48abeeff210e8e0864e3793f57d7e8fe47a0f5","sha512":"c452ea9155c0f4aab4e05b51f6b233ab2808020a5293f35ee5a93ad41c351b5f5bba8f1f1551ea45fd8d8fa68e3938c914e8de9c46f226d98a0b5e538c406103","ssdeep":"768:LP/mrJHrIjpkBDJkWjTC8BvPEgNibkZ/sHS8oFTPaFnF5N8ZeFFFHF5:LPerJLTjVRPEI/CS8oVaZIej1v","tlshash":"493333556bf31a44b5179179efbd975133684103824eede8be8ca344cf8e698c1a3b8c","first_seen":"2025-07-08T06:50:05.882655Z","last_seen":"2026-03-07T20:06:04.447005Z","times_seen":16,"resource_available":false,"data":null}},"time_used":695,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":694,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/mc/?dp=10","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:28.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /mc/?dp=10 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: /mc/?dp=10\u0026tc=1\r\nset-cookie: test_cookie=CheckForPermission; path=/; Secure; SameSite=None; domain=.acint.net; expires=Mon, 01-Dec-25 20:14:28 GMT\naid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10140,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.new-programmatic.com/userbind?src=sape\u0026id=0600007FCCF42D69C91D157F0296C18F","fqdn":"match.new-programmatic.com","domain":"new-programmatic.com","tld":"com"},"ip":{"addr":"217.65.2.150","port":443,"asn":3175,"as":"Citytelecom LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"admanager.geniusgroup.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 12:11:31 GMT","end":"Thu, 11 Dec 2025 12:11:30 GMT"},"fingerprint":{"sha1":"21:6E:11:68:B3:E8:49:45:76:47:46:92:C8:99:2D:61:31:B4:29:54","sha256":"2A:28:74:F4:0D:CC:1A:83:FE:4D:04:CB:15:2D:AB:B6:70:0B:BC:30:81:E9:A0:B6:25:28:B7:72:B9:BD:DF:C2"}}},"request":{"raw":"GET /userbind?src=sape\u0026id=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: match.new-programmatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.22.1\r\nDate: Mon, 01 Dec 2025 20:04:28 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":53,"send":0,"wait":49,"receive":1,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.opendsp.ru/match/sape_ex?id=0600007FCCF42D69C91D157F0296C18F","fqdn":"sync.opendsp.ru","domain":"opendsp.ru","tld":"ru"},"ip":{"addr":"176.114.85.200","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.opendsp.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 05 Aug 2025 11:37:07 GMT","end":"Sun, 06 Sep 2026 11:37:06 GMT"},"fingerprint":{"sha1":"A6:D2:A4:C1:9C:FF:E8:4A:C2:A7:58:7A:3B:98:4B:CC:11:C8:FF:1F","sha256":"26:E3:31:B9:C2:C0:30:F6:85:B7:6E:2F:0E:4F:B0:C6:E5:39:D0:1A:8A:86:02:1E:55:68:94:B1:95:F1:4A:A7"}}},"request":{"raw":"GET /match/sape_ex?id=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: sync.opendsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-04T03:58:55.614436Z","times_seen":31107,"resource_available":true,"data":null}},"time_used":529,"timings":{"blocked":110,"dns":1,"connect":59,"send":0,"wait":45,"receive":0,"ssl":305},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.dynotech.io/sape/sync/","fqdn":"rtb.dynotech.io","domain":"dynotech.io","tld":"io"},"ip":{"addr":"77.223.121.51","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtb.dynotech.io","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 17:57:55 GMT","end":"Sun, 11 Jan 2026 17:57:54 GMT"},"fingerprint":{"sha1":"C1:88:1A:B8:F5:1D:6C:EF:0E:F8:F6:6C:52:ED:EB:07:E2:04:B0:41","sha256":"0C:8E:6C:A8:2D:14:6F:8A:B0:94:08:8D:BF:20:FC:F4:F8:82:0D:76:45:5E:AB:05:87:42:8F:AC:07:59:47:A4"}}},"request":{"raw":"GET /sape/sync/ HTTP/1.1\r\nHost: rtb.dynotech.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":646,"timings":{"blocked":233,"dns":0,"connect":39,"send":0,"wait":40,"receive":0,"ssl":333},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/rmatch?dp=95\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95\u0026euid=AEFUHFVW","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=95\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95\u0026euid=AEFUHFVW HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468; cSyncDp7v3=1764619469; cSyncDp241v2=1764619469\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=95\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.buzzoola.com/cookiesync/redirect?redirect_url=https%3A%2F%2Fbid.sspnet.tech%2Fsync%2Freverse%3Fdsp_slug%3Dbuzzoola%26dsp_user_id%3D%24%7BUUID%7D%26sync_id%3D7ad367aa-27ed-4568-b2ab-c4710ce78ba9","fqdn":"exchange.buzzoola.com","domain":"buzzoola.com","tld":"com"},"ip":{"addr":"45.138.161.75","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buzzoola.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 14:18:31 GMT","end":"Sun, 04 Jan 2026 14:18:30 GMT"},"fingerprint":{"sha1":"E5:71:B9:31:DB:51:F4:76:FF:21:14:90:EB:54:47:17:13:41:68:37","sha256":"53:82:CA:46:1D:A1:51:03:86:A3:1E:B5:1C:9C:1D:53:3A:22:0F:62:E9:37:B9:4E:6E:08:E5:1D:9F:B5:CF:8A"}}},"request":{"raw":"GET /cookiesync/redirect?redirect_url=https%3A%2F%2Fbid.sspnet.tech%2Fsync%2Freverse%3Fdsp_slug%3Dbuzzoola%26dsp_user_id%3D%24%7BUUID%7D%26sync_id%3D7ad367aa-27ed-4568-b2ab-c4710ce78ba9 HTTP/1.1\r\nHost: exchange.buzzoola.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uuid=77bdc63f-ca35-43d0-46e3-0b14a369a51c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 179\r\nlocation: https://bid.sspnet.tech/sync/reverse?dsp_slug=buzzoola\u0026dsp_user_id=77bdc63f-ca35-43d0-46e3-0b14a369a51c\u0026sync_id=7ad367aa-27ed-4568-b2ab-c4710ce78ba9\r\nset-cookie: uuid=77bdc63f-ca35-43d0-46e3-0b14a369a51c; Path=/; Domain=buzzoola.com; Expires=Wed, 31 Dec 2025 20:04:29 GMT; Max-Age=2592000; Secure; SameSite=None\r\nserverid: TODO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.techdsp.ru/sync?src=sape\u0026uid=0600007FCCF42D69C91D157F0296C18F","fqdn":"sync.techdsp.ru","domain":"techdsp.ru","tld":"ru"},"ip":{"addr":"37.48.253.133","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.techdsp.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 19 Feb 2025 14:03:23 GMT","end":"Mon, 23 Mar 2026 14:03:22 GMT"},"fingerprint":{"sha1":"E0:51:62:A1:08:10:67:51:3A:43:8B:07:2F:EC:40:2D:BA:A8:2E:5C","sha256":"8E:DA:37:A7:45:0C:02:8B:99:79:9E:F6:0F:CF:98:2D:C0:9F:74:B4:18:E8:2E:F5:D7:DD:D8:3C:3C:43:5C:85"}}},"request":{"raw":"GET /sync?src=sape\u0026uid=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: sync.techdsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-length: 0\r\nlocation: https://x01.aidata.io/0.gif?pid=0914828\u0026id=dckac-4MQv6j9hS3AtUvMg\u0026dest=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D351%26euid%3Ddckac-4MQv6j9hS3AtUvMg%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D351\r\nreferrer-policy: no-referrer\r\nset-cookie: uid=dckac-4MQv6j9hS3AtUvMg; Path=/; Max-Age=31536000; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":653,"timings":{"blocked":166,"dns":3,"connect":44,"send":0,"wait":43,"receive":0,"ssl":393},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dm.hybrid.ai/match?id=414","fqdn":"dm.hybrid.ai","domain":"hybrid.ai","tld":"ai"},"ip":{"addr":"37.230.131.22","port":443,"asn":200197,"as":"Hybrid Adtech Sp.z.o.o.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hybrid.ai","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 22 Sep 2025 00:00:00 GMT","end":"Sun, 04 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:21:9E:FA:EF:FF:FF:F2:8D:68:A8:F9:EB:ED:53:32:CC:17:9B:ED","sha256":"C9:20:9A:53:1E:FA:35:C7:29:64:1F:C3:7B:1E:34:73:C8:15:87:43:EA:35:06:B8:8D:86:E5:11:19:2A:60:FC"}}},"request":{"raw":"GET /match?id=414 HTTP/1.1\r\nHost: dm.hybrid.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 01 Dec 2025 19:59:35 GMT\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nexpires: -1\r\np3p: CP=\"NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC\"\r\nx-mode: 5003\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\nserver: Hybrid Web Server\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.utraff.com/sync?ssp=8\u0026id=0600007FCCF42D69C91D157F0296C18F","fqdn":"a.utraff.com","domain":"utraff.com","tld":"com"},"ip":{"addr":"213.171.19.199","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utraff.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 14:58:41 GMT","end":"Sun, 28 Dec 2025 14:58:40 GMT"},"fingerprint":{"sha1":"5F:B5:C8:A1:80:6E:7D:B1:C9:91:99:E5:F4:53:9A:9E:84:E8:40:49","sha256":"6E:49:55:4D:01:B0:58:BF:F1:09:6C:E6:5E:05:80:83:DF:C2:43:5C:10:4E:A5:16:C9:19:7E:63:D9:F7:06:0E"}}},"request":{"raw":"GET /sync?ssp=8\u0026id=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: a.utraff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0\r\nDate: Mon, 01 Dec 2025 20:04:28 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: preutid=1; Expires=Wed, 31 Dec 2025 23:04:28 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/\npreutid=1; Expires=Wed, 31 Dec 2025 23:04:28 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":140,"dns":27,"connect":41,"send":0,"wait":85,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adspend.space/check?uid=0600007FCCF42D69C91D157F0296C18F\u0026ssp=%2Fsape","fqdn":"sync.adspend.space","domain":"adspend.space","tld":"space"},"ip":{"addr":"5.189.234.227","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adspend.space","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Oct 2025 12:52:42 GMT","end":"Mon, 26 Jan 2026 12:52:41 GMT"},"fingerprint":{"sha1":"AC:B3:38:66:C2:FC:35:EC:DA:72:49:D5:D9:BF:BD:DF:99:F7:6D:B4","sha256":"30:85:8C:F6:1D:73:6D:12:AE:79:49:D8:B6:3A:64:D8:38:8D:53:42:DC:FA:CD:0E:44:44:C9:0C:E6:4A:08:04"}}},"request":{"raw":"GET /check?uid=0600007FCCF42D69C91D157F0296C18F\u0026ssp=%2Fsape HTTP/1.1\r\nHost: sync.adspend.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: as-user=3f0aacd7-22b7-49bf-b13b-148b3f4d48d6; count=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.26.2\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 102\r\nlocation: https://www.acint.net/match?dp=98\u0026euid=3f0aacd7-22b7-49bf-b13b-148b3f4d48d6\r\nset-cookie: count=2; Path=/; Max-Age=4320000; HttpOnly; Secure; SameSite=None\nas-user=3f0aacd7-22b7-49bf-b13b-148b3f4d48d6; Path=/; Max-Age=4320000; HttpOnly; Secure; SameSite=None\ncount=2; Path=/; Max-Age=4320000; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.26.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=313","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /cmatch?dp=313 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468; cSyncDp7v3=1764619469; cSyncDp241v2=1764619469\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T04:45:41.790278Z","times_seen":326566,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adx.com.ru/sync/init/sapePlazkart?uid=0600007FCCF42D69C91D157F0296C18F","fqdn":"adx.com.ru","domain":"adx.com.ru","tld":"com.ru"},"ip":{"addr":"83.222.105.118","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adx.com.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 20 Jun 2025 13:13:33 GMT","end":"Wed, 22 Jul 2026 13:13:32 GMT"},"fingerprint":{"sha1":"0F:34:EC:CE:BC:17:E9:5F:83:40:15:65:EF:68:EC:37:03:9C:C8:9C","sha256":"87:20:22:42:36:6F:88:B8:4D:D7:3A:11:7B:17:9F:56:7B:CD:5A:0C:00:F3:42:3C:BE:28:DE:11:8E:AD:F5:FE"}}},"request":{"raw":"GET /sync/init/sapePlazkart?uid=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: adx.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.26.3\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 114\r\ncache-control: no-store\r\nlocation: /sync/confirm/sapePlazkart?sspSysName=sapePlazkart\u0026uid=0600007FCCF42D69C91D157F0296C18F\r\nset-cookie: user=692df4cd7011cb0001e9132a; Path=/; Domain=adx.com.ru; Max-Age=31536000; HttpOnly; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":12,"dns":10,"connect":153,"send":0,"wait":163,"receive":0,"ssl":433},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.dsp.onetarget.ru/sape/pixel?id=0600007FCCF42D69C91D157F0296C18F","fqdn":"pixel.dsp.onetarget.ru","domain":"onetarget.ru","tld":"ru"},"ip":{"addr":"130.193.53.230","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixel.dsp.onetarget.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:14:20 GMT","end":"Sat, 07 Feb 2026 23:14:19 GMT"},"fingerprint":{"sha1":"5E:A1:72:7E:72:04:53:FC:FF:28:99:DD:EA:11:E7:49:38:B5:24:85","sha256":"2C:03:1F:EA:22:EA:61:57:9A:AB:31:BD:B5:B8:FD:6C:A5:24:D4:F6:BB:D2:20:24:1D:29:F1:F9:3C:F2:DF:D3"}}},"request":{"raw":"GET /sape/pixel?id=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: pixel.dsp.onetarget.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-length: 0\r\nlocation: https://x01.aidata.io/0.gif?pid=5813217\u0026id=25b5507b-6eae-41e5-92f9-eba6d3294669\r\nset-cookie: USER_ID=25b5507b-6eae-41e5-92f9-eba6d3294669;max-age=2147483647;Secure;HttpOnly;SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":89,"dns":5,"connect":30,"send":0,"wait":43,"receive":0,"ssl":251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adiam.tech/sync?ssp=29","fqdn":"a.adiam.tech","domain":"adiam.tech","tld":"tech"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adiam.tech","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 12:10:19 GMT","end":"Thu, 15 Jan 2026 13:08:53 GMT"},"fingerprint":{"sha1":"7E:B5:3E:41:29:6C:5C:22:86:9B:F3:49:C6:C7:80:29:B5:2B:F0:06","sha256":"35:6C:D9:3F:BF:E1:63:A2:D8:D7:90:3A:BC:68:54:6C:31:CB:0D:2A:74:58:24:92:85:5D:5C:45:25:7F:C2:92"}}},"request":{"raw":"GET /sync?ssp=29 HTTP/1.1\r\nHost: a.adiam.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jl8WSvfidBeWiL9BfpIgoYG9phHWsiv9iAD%2FcjL8hLuMlSPItX5UXTvau4BcfIai8WgoWxM%2FE5cSmChKQcx8EBRtYbD3%2BuhOYYQ%3D\"}]}\r\nset-cookie: preadiam=1; SameSite=None; Secure; Path=/; Domain=.adiam.tech; Expires=Wed, 31 Dec 2025 23:04:29 GMT\r\ncf-ray: 9a7531a1de0a569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":568,"timings":{"blocked":200,"dns":1,"connect":1,"send":0,"wait":81,"receive":0,"ssl":284},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/match?dp=14\u0026euid=3C03420ACCF42D690D01F05B022F1F22","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=14\u0026euid=3C03420ACCF42D690D01F05B022F1F22 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468; cSyncDp7v3=1764619469\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T04:45:41.790278Z","times_seen":326566,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/match?dp=186\u0026euid=a94b0825-4aba-4b16-becc-5a067fef860b","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=186\u0026euid=a94b0825-4aba-4b16-becc-5a067fef860b HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468; cSyncDp7v3=1764619469; cSyncDp241v2=1764619469\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T04:45:41.790278Z","times_seen":326566,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2-692df4cd7011cb0001e9132a.id.adx.com.ru/https://5--2--692df4cd7011cb0001e9132a.stbid.ru?r=https%3A%2F%2Fx01.aidata.io%2F0.gif%3Fpid%3D9712851%26id%3D692df4cd7011cb0001e9132a%26dest%3Dhttps%253A%252F%252Fssp.adriver.ru%252Fcgi-bin%252Fsync.cgi%253Fdsp_id%253D162%2526external_id%253D692df4cd7011cb0001e9132a%2526r%253D","fqdn":"2-692df4cd7011cb0001e9132a.id.adx.com.ru","domain":"adx.com.ru","tld":"com.ru"},"ip":{"addr":"83.222.105.226","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id.adx.com.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 22:18:44 GMT","end":"Wed, 01 Jul 2026 22:18:43 GMT"},"fingerprint":{"sha1":"E6:83:1C:38:50:4E:B2:A7:10:AB:4C:C8:FF:8B:E1:FD:27:E6:64:8A","sha256":"E0:20:57:F5:B4:57:09:84:72:9B:96:0D:FF:15:DC:73:EF:87:2B:31:7B:C2:2C:2D:AB:67:4E:7C:C1:FB:1E:9C"}}},"request":{"raw":"GET /https://5--2--692df4cd7011cb0001e9132a.stbid.ru?r=https%3A%2F%2Fx01.aidata.io%2F0.gif%3Fpid%3D9712851%26id%3D692df4cd7011cb0001e9132a%26dest%3Dhttps%253A%252F%252Fssp.adriver.ru%252Fcgi-bin%252Fsync.cgi%253Fdsp_id%253D162%2526external_id%253D692df4cd7011cb0001e9132a%2526r%253D HTTP/1.1\r\nHost: 2-692df4cd7011cb0001e9132a.id.adx.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user=692df4cd7011cb0001e9132a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.26.3\r\ndate: Mon, 01 Dec 2025 20:04:30 GMT\r\ncontent-type: text/html\r\ncontent-length: 145\r\nlocation: https://5--2--692df4cd7011cb0001e9132a.stbid.ru?r=https%3A%2F%2Fx01.aidata.io%2F0.gif%3Fpid%3D9712851%26id%3D692df4cd7011cb0001e9132a%26dest%3Dhttps%253A%252F%252Fssp.adriver.ru%252Fcgi-bin%252Fsync.cgi%253Fdsp_id%253D162%2526external_id%253D692df4cd7011cb0001e9132a%2526r%253D\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":801,"timings":{"blocked":335,"dns":54,"connect":135,"send":0,"wait":129,"receive":0,"ssl":145},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:24.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clubrubionu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 06:29:56 GMT","end":"Wed, 07 Jan 2026 07:27:35 GMT"},"fingerprint":{"sha1":"E6:64:3E:1A:2C:7E:08:E2:16:0D:38:EF:E0:B9:F3:71:31:45:A6:81","sha256":"21:5B:4C:16:EF:1B:9C:AB:20:82:08:CF:EE:F2:33:B9:9A:E8:39:D4:F1:D9:63:77:1B:6D:87:A7:C4:0C:05:76"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: clubrubionu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4678\r\nlast-modified: Fri, 09 Jun 2023 15:19:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BkP7Z8EUUwNRiXawowDWgbMlIq3zZVSRXAON4NULYPqwkDodWOrlrk%2FfSc9czgbxtkZ7o5LzFcB2xlcSKyTpEveII7Tr17jFrbvwoK4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a753187be5fb4ed-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T04:45:42.201299Z","times_seen":638038,"resource_available":true,"data":null}},"time_used":3141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.dmp.otm-r.com/match/sape?id=0600007FCCF42D69C91D157F0296C18F","fqdn":"sync.dmp.otm-r.com","domain":"otm-r.com","tld":"com"},"ip":{"addr":"194.55.244.184","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync.dmp.otm-r.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Sep 2025 09:32:12 GMT","end":"Thu, 25 Dec 2025 09:32:11 GMT"},"fingerprint":{"sha1":"7B:A2:D8:08:4C:C6:AD:4B:5E:FC:C5:62:FE:A9:AC:3D:8B:4F:68:05","sha256":"C9:A1:E8:29:C9:2C:60:8B:EE:CE:29:CE:EA:5C:85:E6:5B:B3:DE:C7:0E:A6:0F:AE:79:83:5B:26:0F:78:65:0B"}}},"request":{"raw":"GET /match/sape?id=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: sync.dmp.otm-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.27.4\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nlocation: /match/sape?id=0600007FCCF42D69C91D157F0296C18F\u0026otcm_check=1764619468\r\nset-cookie: mpid=NjkyZGY0Y2MwOGQ5OGUxMA==; max-age=31536000; domain=otm-r.com; path=/; secure; SameSite=None; Partitioned\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.27.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":129,"dns":27,"connect":53,"send":0,"wait":51,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5--2--692df4cd7011cb0001e9132a.stbid.ru/?r=https%3A%2F%2Fx01.aidata.io%2F0.gif%3Fpid%3D9712851%26id%3D692df4cd7011cb0001e9132a%26dest%3Dhttps%253A%252F%252Fssp.adriver.ru%252Fcgi-bin%252Fsync.cgi%253Fdsp_id%253D162%2526external_id%253D692df4cd7011cb0001e9132a%2526r%253D","fqdn":"5--2--692df4cd7011cb0001e9132a.stbid.ru","domain":"stbid.ru","tld":"ru"},"ip":{"addr":"188.120.247.136","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:30.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.stbid.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Apr 2025 09:20:40 GMT","end":"Sun, 24 May 2026 09:20:39 GMT"},"fingerprint":{"sha1":"CD:D0:42:9B:03:7A:27:A9:42:E1:4D:28:F3:FC:EA:D1:AC:D7:13:7E","sha256":"17:48:80:43:30:8B:5E:01:B8:65:DF:1B:22:DC:DB:13:D8:6B:DF:48:78:50:08:AB:69:B1:90:41:E5:62:3E:C4"}}},"request":{"raw":"GET /?r=https%3A%2F%2Fx01.aidata.io%2F0.gif%3Fpid%3D9712851%26id%3D692df4cd7011cb0001e9132a%26dest%3Dhttps%253A%252F%252Fssp.adriver.ru%252Fcgi-bin%252Fsync.cgi%253Fdsp_id%253D162%2526external_id%253D692df4cd7011cb0001e9132a%2526r%253D HTTP/1.1\r\nHost: 5--2--692df4cd7011cb0001e9132a.stbid.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie/1.10.3\r\nDate: Mon, 01 Dec 2025 20:04:30 GMT\r\nContent-Length: 0\r\nConnection: close\r\nLocation: https://x01.aidata.io/0.gif?pid=9712851\u0026id=692df4cd7011cb0001e9132a\u0026dest=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fdsp_id%3D162%26external_id%3D692df4cd7011cb0001e9132a%26r%3D\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie:1.10.3","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":193,"dns":50,"connect":40,"send":0,"wait":40,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/match?dp=14\u0026euid=3C03420ACCF42D690D01F05B022F1F22","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=14\u0026euid=3C03420ACCF42D690D01F05B022F1F22 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468; cSyncDp7v3=1764619469\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T04:45:41.790278Z","times_seen":326566,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/rmatch?dp=313\u0026euid=NT_2_0600007FCCF42D69C91D157F0296C18F_394646210515730_RraYjO\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D313","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=313\u0026euid=NT_2_0600007FCCF42D69C91D157F0296C18F_394646210515730_RraYjO\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D313 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468; cSyncDp7v3=1764619469; cSyncDp241v2=1764619469\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=313\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid.sspnet.tech/sync/reverse?dsp_slug=buzzoola\u0026dsp_user_id=77bdc63f-ca35-43d0-46e3-0b14a369a51c\u0026sync_id=7ad367aa-27ed-4568-b2ab-c4710ce78ba9","fqdn":"bid.sspnet.tech","domain":"sspnet.tech","tld":"tech"},"ip":{"addr":"5.35.15.14","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bid.sspnet.tech","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 05:28:38 GMT","end":"Thu, 29 Jan 2026 05:28:37 GMT"},"fingerprint":{"sha1":"D6:A5:E5:4E:82:95:5B:CF:2F:B8:0F:5D:FD:44:33:2C:5B:BD:AD:E7","sha256":"E3:CF:6E:CA:22:6E:C7:22:9A:94:92:EB:FE:71:82:DE:C0:53:2C:1A:13:82:6A:7E:0B:11:DC:76:AD:31:13:56"}}},"request":{"raw":"GET /sync/reverse?dsp_slug=buzzoola\u0026dsp_user_id=77bdc63f-ca35-43d0-46e3-0b14a369a51c\u0026sync_id=7ad367aa-27ed-4568-b2ab-c4710ce78ba9 HTTP/1.1\r\nHost: bid.sspnet.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-length: 0\r\nlocation: https://px.adhigh.net/p/cm/yabbi?u=2c2875e52b1a24bd11363ef6935d7b1f\u0026r=https%3A%2F%2Fbid.sspnet.tech%2Fsync%2Freverse%3Fdsp_slug%3Dgetintent%26dsp_user_id%3D%5B%5BUSER_ID%5D%5D%26sync_id%3D7ad367aa-27ed-4568-b2ab-c4710ce78ba9\r\nx-request-id: 655eafefa3e2f31e898da7cf1fb0738a\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-includes/css/dist/block-library/style.min.css?ver=6.8.3","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:24.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clubrubionu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 06:29:56 GMT","end":"Wed, 07 Jan 2026 07:27:35 GMT"},"fingerprint":{"sha1":"E6:64:3E:1A:2C:7E:08:E2:16:0D:38:EF:E0:B9:F3:71:31:45:A6:81","sha256":"21:5B:4C:16:EF:1B:9C:AB:20:82:08:CF:EE:F2:33:B9:9A:E8:39:D4:F1:D9:63:77:1B:6D:87:A7:C4:0C:05:76"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: clubrubionu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 20:04:25 GMT\r\ncontent-type: text/css\r\ncontent-length: 14360\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 20:04:25 GMT\r\nlast-modified: Tue, 15 Jul 2025 21:21:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xXGrgnpcLJSNUORzSuz6lZma9i%2FvuSZRo7%2BVPmaTj8ZmX%2FCg7ZQEClmwPh35Tu3xEKOiBIKzeEYxvKjBVXPWUf3efgvwrsIC%2Bks7B4g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a753187ae58b4ed-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":116345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-04-04T04:38:50.862826Z","times_seen":164185,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":711,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:24.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clubrubionu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 06:29:56 GMT","end":"Wed, 07 Jan 2026 07:27:35 GMT"},"fingerprint":{"sha1":"E6:64:3E:1A:2C:7E:08:E2:16:0D:38:EF:E0:B9:F3:71:31:45:A6:81","sha256":"21:5B:4C:16:EF:1B:9C:AB:20:82:08:CF:EE:F2:33:B9:9A:E8:39:D4:F1:D9:63:77:1B:6D:87:A7:C4:0C:05:76"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: clubrubionu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 20:04:25 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29744\r\nlast-modified: Tue, 29 Aug 2023 02:44:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qgKDG5bdJWLcUP%2BAdAwHD46KM63q%2F6GI9FL7Rk26p5L5H8zRHSBF1NOa3uATyV5VjUytWfX56vK3q0p%2BZfN1ddfnBoUmMSyHBW%2BMvNA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a753187be5eb4ed-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T04:45:42.22765Z","times_seen":684536,"resource_available":true,"data":null}},"time_used":645,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.dvgroup.com/match/sape?id=0600007FCCF42D69C91D157F0296C18F","fqdn":"sync.dvgroup.com","domain":"dvgroup.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.640Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /match/sape?id=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: sync.dvgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":246,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match?dp=217\u0026euid=2c040d9a-604a-4050-95a3-b77e41b77bdb","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=217\u0026euid=2c040d9a-604a-4050-95a3-b77e41b77bdb HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nset-cookie: cSyncDp14v4=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/match?dp=98\u0026euid=3f0aacd7-22b7-49bf-b13b-148b3f4d48d6","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=98\u0026euid=3f0aacd7-22b7-49bf-b13b-148b3f4d48d6 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nset-cookie: cSyncDp14v4=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/ping/?v=0.7.1\u0026uid=9bf363b5-e69a-4b3a-8935-baedb8c2b3b4\u0026dp=10\u0026tz=%2B00%3A00\u0026nc=019677\u0026dT=2025-12-01T20%3A04%3A31.299","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:31.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /ping/?v=0.7.1\u0026uid=9bf363b5-e69a-4b3a-8935-baedb8c2b3b4\u0026dp=10\u0026tz=%2B00%3A00\u0026nc=019677\u0026dT=2025-12-01T20%3A04%3A31.299 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468; cSyncDp7v3=1764619469; cSyncDp241v2=1764619469\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T04:45:41.790278Z","times_seen":326566,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-frontend.weborama-tech.ru/cr?key=sape\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D296%26euid%3D%7BWEBO_CID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D296","fqdn":"cr-frontend.weborama-tech.ru","domain":"weborama-tech.ru","tld":"ru"},"ip":{"addr":"178.154.212.160","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weborama-tech.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 Aug 2025 14:42:06 GMT","end":"Tue, 15 Sep 2026 18:38:30 GMT"},"fingerprint":{"sha1":"A5:CA:D7:3C:27:83:66:F7:26:43:0B:05:21:09:FF:7A:7A:AB:7D:A9","sha256":"53:AA:89:0C:4A:26:10:43:C0:A9:5C:10:98:06:D7:D5:6A:76:CC:34:2E:77:15:88:33:37:B6:31:0C:D7:CF:0B"}}},"request":{"raw":"GET /cr?key=sape\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D296%26euid%3D%7BWEBO_CID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D296 HTTP/1.1\r\nHost: cr-frontend.weborama-tech.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\nvary: Origin\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM\"\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0\r\npragma: no-cache\r\nexpires: Tue, 03 Jul 2001 06:00:00 GMT\r\nlast-modified: Mon, 01 Dec 2025 20:04:29 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":102,"dns":2,"connect":48,"send":0,"wait":29,"receive":0,"ssl":349},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.bidster.net/sync/75b31511-b167-4007-830c-56630c3c6617?id=0600007FCCF42D69C91D157F0296C18F\u0026redirect=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D385%26euid%3D%7Bid%7D","fqdn":"ssp.bidster.net","domain":"bidster.net","tld":"net"},"ip":{"addr":"212.41.29.69","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ssp.bidster.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:21:55 GMT","end":"Fri, 20 Feb 2026 19:21:54 GMT"},"fingerprint":{"sha1":"BC:CD:E5:41:60:B2:62:54:EC:C0:2A:0F:26:B9:9F:A7:E3:9A:8B:1A","sha256":"6A:5E:5C:25:8D:31:5E:BB:CD:E8:CD:48:AA:F4:B3:AC:F8:77:F3:09:D1:90:1E:81:55:DC:53:76:61:AC:0F:02"}}},"request":{"raw":"GET /sync/75b31511-b167-4007-830c-56630c3c6617?id=0600007FCCF42D69C91D157F0296C18F\u0026redirect=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D385%26euid%3D%7Bid%7D HTTP/1.1\r\nHost: ssp.bidster.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-length: 0\r\nlocation: https://mc.acint.net/match?dp=385\u0026euid=ba61cbac70f790f99a9ab\r\nset-cookie: uid=ba61cbac70f790f99a9ab; Max-Age=34560000; Domain=.bidster.net; Path=/; Expires=Tue, 02 Dec 2025 05:40:29 GMT; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":688,"timings":{"blocked":228,"dns":2,"connect":56,"send":0,"wait":58,"receive":0,"ssl":341},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sp.linkssp.ru/cm?key=edc11c69abfc708136ed44d548263e69\u0026location=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D394%26euid%3D%7Buid%7D%0A","fqdn":"sp.linkssp.ru","domain":"linkssp.ru","tld":"ru"},"ip":{"addr":"31.184.215.90","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sp.linkssp.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 10:39:31 GMT","end":"Thu, 05 Feb 2026 10:39:30 GMT"},"fingerprint":{"sha1":"F1:5A:EB:09:0F:F6:AB:E3:F8:71:55:93:C6:AE:BA:DA:75:94:BE:FD","sha256":"B5:AE:05:DF:F6:07:87:F4:AC:B7:24:E7:72:43:7A:3D:64:AD:DF:4F:17:F7:29:3E:BE:B9:08:55:D7:42:5B:E2"}}},"request":{"raw":"GET /cm?key=edc11c69abfc708136ed44d548263e69\u0026location=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D394%26euid%3D%7Buid%7D%0A HTTP/1.1\r\nHost: sp.linkssp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 01 Dec 2025 20:04:28 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nBidder: bid-01 1.360.ff47fe8\r\nLocation: https://mc.acint.net/match?dp=394\u0026euid=64ba2910-09cb-43b6-96c6-7f8bbe4bca0c\r\nSet-Cookie: uid=64ba2910-09cb-43b6-96c6-7f8bbe4bca0c.692df4cc.70ea36c852155754; domain=.linkssp.ru; path=/; expires=Wed, 31-Dec-2025 20:04:28 GMT; SameSite=None; Secure;\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":39,"connect":56,"send":0,"wait":58,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/match?dp=14\u0026euid=3C03420ACCF42D690D01F05B022F1F22","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=14\u0026euid=3C03420ACCF42D690D01F05B022F1F22 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468; cSyncDp7v3=1764619469\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T04:45:41.790278Z","times_seen":326566,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/fonts/6c91ec45b29a6540e99f490b07510d0f.css?ver=6.8.3","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:24.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clubrubionu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 06:29:56 GMT","end":"Wed, 07 Jan 2026 07:27:35 GMT"},"fingerprint":{"sha1":"E6:64:3E:1A:2C:7E:08:E2:16:0D:38:EF:E0:B9:F3:71:31:45:A6:81","sha256":"21:5B:4C:16:EF:1B:9C:AB:20:82:08:CF:EE:F2:33:B9:9A:E8:39:D4:F1:D9:63:77:1B:6D:87:A7:C4:0C:05:76"}}},"request":{"raw":"GET /wp-content/fonts/6c91ec45b29a6540e99f490b07510d0f.css?ver=6.8.3 HTTP/1.1\r\nHost: clubrubionu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 20:04:25 GMT\r\ncontent-type: text/css\r\ncontent-length: 509\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 20:04:25 GMT\r\nlast-modified: Thu, 27 Feb 2025 06:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B1XuDjwRUVD64Ew9s7CHzqYzFIv9oICSsXk%2Bb%2B3t5E2ZxE6nhkMt9P077IpCpMrvBS%2FbPdJB9RonZmogxbvDv1CgETZGSWclsni2dh4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a753187be5bb4ed-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3401,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b974ab301201298c64c93b6319a3a700","sha1":"f60bc5b60f460998795cebfb66c64de55f1353b7","sha256":"543bda0b1e6e73e3ef7802237161a469319758895b4265f30395592a26b767b5","sha512":"a3270e3724437ded66bad124fc4d2e4359d29a95eea3f0b6dc5d9117d7f0ccebd3854dc9b5f678cb9e4e70d47147dc84a9a2702cd65ac1fd7e0fa24163fd19bd","ssdeep":"","tlshash":"a561c0a1056a5200f6934dc726cb7f2659aeb240b085a77caffe189c5c9bd53d290f0e","first_seen":"2025-12-01T20:04:58.415705Z","last_seen":"2025-12-01T20:04:58.415705Z","times_seen":1,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otclick-adv.ru/core/match.gif?s=56\u0026reference=https%3A%2F%2Fmc.acint.net%2Fmatch%2F%3Fdp%3D361%26euid%3D%23%7BUID%7D","fqdn":"otclick-adv.ru","domain":"otclick-adv.ru","tld":"ru"},"ip":{"addr":"139.45.228.140","port":443,"asn":57304,"as":"JSC RetnNet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.otclick-adv.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 15 Sep 2025 18:16:14 GMT","end":"Sat, 17 Oct 2026 18:16:13 GMT"},"fingerprint":{"sha1":"AC:7F:37:A5:93:0B:F1:5C:17:8C:E2:05:1C:18:98:EB:54:71:45:A1","sha256":"D0:29:C5:21:78:51:6F:01:ED:DC:C3:B6:AA:53:D9:5F:7B:59:04:97:33:EE:31:F7:62:1A:DE:FA:03:83:F2:F9"}}},"request":{"raw":"GET /core/match.gif?s=56\u0026reference=https%3A%2F%2Fmc.acint.net%2Fmatch%2F%3Fdp%3D361%26euid%3D%23%7BUID%7D HTTP/1.1\r\nHost: otclick-adv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Mon, 01 Dec 2025 20:04:45 GMT\r\nContent-Length: 124\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nP3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA\r\nCache-Control: no-cache, max-age=0, must-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Thursday, 01-Jan-1970 00:00:00 GMT\r\nSet-Cookie: idntfy=VUnZUsbWsOWu9RE; expires=Thu, 29-Nov-2035 20:04:29 GMT; domain=otclick-adv.ru; path=/c/; SameSite=None; Secure\nidntfy=VUnZUsbWsOWu9RE; expires=Thu, 29-Nov-2035 20:04:29 GMT; domain=otclick-adv.ru; path=/core/; SameSite=None; Secure\r\nLocation: https://mc.acint.net/match/?dp=361\u0026euid=VUnZUsbWsOWu9RE\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":838,"timings":{"blocked":181,"dns":3,"connect":28,"send":0,"wait":28,"receive":0,"ssl":597},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.dmp.otm-r.com/match/sape?id=0600007FCCF42D69C91D157F0296C18F\u0026otcm_check=1764619468","fqdn":"sync.dmp.otm-r.com","domain":"otm-r.com","tld":"com"},"ip":{"addr":"194.55.244.184","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync.dmp.otm-r.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Sep 2025 09:32:12 GMT","end":"Thu, 25 Dec 2025 09:32:11 GMT"},"fingerprint":{"sha1":"7B:A2:D8:08:4C:C6:AD:4B:5E:FC:C5:62:FE:A9:AC:3D:8B:4F:68:05","sha256":"C9:A1:E8:29:C9:2C:60:8B:EE:CE:29:CE:EA:5C:85:E6:5B:B3:DE:C7:0E:A6:0F:AE:79:83:5B:26:0F:78:65:0B"}}},"request":{"raw":"GET /match/sape?id=0600007FCCF42D69C91D157F0296C18F\u0026otcm_check=1764619468 HTTP/1.1\r\nHost: sync.dmp.otm-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: mpid=NjkyZGY0Y2MwOGQ5OGUxMA==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.27.4\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nlocation: https://www.acint.net/match?dp=68\u0026euid=NjkyZGY0Y2MwOGQ5OGUxMA%3D%3D\r\nset-cookie: mpid=NjkyZGY0Y2MwOGQ5OGUxMA==; max-age=31536000; domain=otm-r.com; path=/; secure; SameSite=None; Partitioned\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.27.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kimberlite.io/rtb/sync/buzzoola?u=77bdc63f-ca35-43d0-46e3-0b14a369a51c\u0026f=https%3A%2F%2Fwww.acint.net%2Frmatch%3Fdp%3D243%26euid%3DaS30zcZUEt8%26r%3Dhttps%253A%252F%252Facint.net%252Fcmatch%253Fdp%253D243\u0026n=1","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.86","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 03 Mar 2025 10:28:30 GMT","end":"Sat, 04 Apr 2026 10:28:29 GMT"},"fingerprint":{"sha1":"D5:F7:CA:61:DC:40:4D:B7:43:BC:F1:6F:13:3A:45:A0:D0:53:09:FA","sha256":"BD:79:98:BE:D4:24:4A:51:5B:6D:A8:A1:58:2B:4E:1D:6B:90:66:40:1F:2C:E3:4A:C4:9F:7E:A3:A2:F6:79:12"}}},"request":{"raw":"GET /rtb/sync/buzzoola?u=77bdc63f-ca35-43d0-46e3-0b14a369a51c\u0026f=https%3A%2F%2Fwww.acint.net%2Frmatch%3Fdp%3D243%26euid%3DaS30zcZUEt8%26r%3Dhttps%253A%252F%252Facint.net%252Fcmatch%253Fdp%253D243\u0026n=1 HTTP/1.1\r\nHost: kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: da=UX4CYAAAAAE; u=aS30zcZUEt8~MbF3_yclhSqYcMgxwohnMACaYQs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx\r\nDate: Mon, 01 Dec 2025 20:04:29 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: as=T72MF2kt9M0; path=/rtb; max-age=604800; samesite=none; httponly; secure\nda=2OZrzwAAAAE; path=/rtb; max-age=604800; samesite=none; httponly; secure\nf=https%3A%2F%2Fwww.acint.net%2Frmatch%3Fdp%3D243%26euid%3DaS30zcZUEt8%26r%3Dhttps%253A%252F%252Facint.net%252Fcmatch%253Fdp%253D243; max-age=30; samesite=none; httponly; secure\nn=2; max-age=30; samesite=none; httponly; secure\r\nlocation: https://dm.hybrid.ai/match?id=414\r\nreferrer-policy: no-referrer\r\nserver-timing: app;srv=s23a;dur=0.0010\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14","fqdn":"ssp-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.93","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sape.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 23:35:45 GMT","end":"Tue, 06 Jan 2026 23:35:44 GMT"},"fingerprint":{"sha1":"2D:BB:D2:42:8E:33:F5:EC:A0:48:8C:E1:DC:94:B6:53:E8:CE:11:55","sha256":"B4:2B:99:62:C7:15:73:3C:46:90:97:D1:C8:C7:1A:01:8C:FD:9B:B0:CA:9C:1B:06:7B:83:43:4D:54:A2:D6:25"}}},"request":{"raw":"GET /rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14 HTTP/1.1\r\nHost: ssp-rtb.sape.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sspuid=CkIDPGkt9Mxb8AENIh8vAneUUgSII7lnjsLmy0xU8B02fxUg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: https://acint.net/match?dp=14\u0026euid=3C03420ACCF42D690D01F05B022F1F22\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/themes/minimalistblog-stories/style.css?ver=1.0","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:24.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clubrubionu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 06:29:56 GMT","end":"Wed, 07 Jan 2026 07:27:35 GMT"},"fingerprint":{"sha1":"E6:64:3E:1A:2C:7E:08:E2:16:0D:38:EF:E0:B9:F3:71:31:45:A6:81","sha256":"21:5B:4C:16:EF:1B:9C:AB:20:82:08:CF:EE:F2:33:B9:9A:E8:39:D4:F1:D9:63:77:1B:6D:87:A7:C4:0C:05:76"}}},"request":{"raw":"GET /wp-content/themes/minimalistblog-stories/style.css?ver=1.0 HTTP/1.1\r\nHost: clubrubionu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 20:04:25 GMT\r\ncontent-type: text/css\r\ncontent-length: 9578\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 20:04:25 GMT\r\nlast-modified: Thu, 27 Feb 2025 06:02:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=io1oE1vqfOt4oIZQotJ5kBFfPeRV%2BxwXHsyxP4Os9q6if%2FTGqug8K1yStCuNv6yNsWmxYRTlvbmp3Sx2aM6RrD%2Fye62XrK%2FNLkVvr9M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a753187be5ab4ed-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52566,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1142)","md5":"d86566a3e4e43f73cdcd48f7f8d6ca0c","sha1":"0e6d2bd45118ce2983b9b786ef9ed2e67576db99","sha256":"f5068ae8ff9cdf258b40ab376d48abeeff210e8e0864e3793f57d7e8fe47a0f5","sha512":"c452ea9155c0f4aab4e05b51f6b233ab2808020a5293f35ee5a93ad41c351b5f5bba8f1f1551ea45fd8d8fa68e3938c914e8de9c46f226d98a0b5e538c406103","ssdeep":"768:LP/mrJHrIjpkBDJkWjTC8BvPEgNibkZ/sHS8oFTPaFnF5N8ZeFFFHF5:LPerJLTjVRPEI/CS8oVaZIej1v","tlshash":"493333556bf31a44b5179179efbd975133684103824eede8be8ca344cf8e698c1a3b8c","first_seen":"2025-07-08T06:50:05.882655Z","last_seen":"2026-03-07T20:06:04.447005Z","times_seen":16,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/themes/minimalistblogger/js/skip-link-focus-fix.js?ver=20170823","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:24.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clubrubionu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 06:29:56 GMT","end":"Wed, 07 Jan 2026 07:27:35 GMT"},"fingerprint":{"sha1":"E6:64:3E:1A:2C:7E:08:E2:16:0D:38:EF:E0:B9:F3:71:31:45:A6:81","sha256":"21:5B:4C:16:EF:1B:9C:AB:20:82:08:CF:EE:F2:33:B9:9A:E8:39:D4:F1:D9:63:77:1B:6D:87:A7:C4:0C:05:76"}}},"request":{"raw":"GET /wp-content/themes/minimalistblogger/js/skip-link-focus-fix.js?ver=20170823 HTTP/1.1\r\nHost: clubrubionu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 20:04:25 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 332\r\nlast-modified: Thu, 11 Sep 2025 02:11:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KyvwRmM9APJx8cKxJ4tQBziOpx4%2B92tgOWuGDC54xBKq8NSsdBx6v8a3Pq418eAjfqYr9dRNCxx%2BAfPmsLAA7lTCvz5RAdJsW7hguCE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9a753187ce65b4ed-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"93d421fd7576b0ca9c359ffe2fa16113","sha1":"eacce35258f14fcd79bea2bc23f4140d25874322","sha256":"14af47320898bd93f367026f7833c9956f14e24856976e4f9e10be31155cdcf2","sha512":"c064c5bbaf7a5a82b047215083a842bfed1dbabcd71e313da319b2315a2a91e0f20f83795c806732c2f50b57b242ed49a7c86098870a56a66be07eb13c15db4c","ssdeep":"","tlshash":"d201c0b2b30d44b6045a3157cd5f61cd297d91e2b819649b8cc908501824d6d13bffb8","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-04-04T04:50:19.423391Z","times_seen":10417,"resource_available":true,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D95%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D95%26euid%3D","fqdn":"ssp.bestssp.com","domain":"bestssp.com","tld":"com"},"ip":{"addr":"83.222.96.170","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bestssp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 06:22:36 GMT","end":"Wed, 28 Jan 2026 06:22:35 GMT"},"fingerprint":{"sha1":"95:A8:8C:CC:00:4B:4F:F7:FA:C9:DB:10:E2:5E:90:5F:D2:BE:4F:DE","sha256":"6D:09:43:87:06:3E:CB:12:D7:3E:D4:A3:AA:E3:F9:C3:A4:4C:F9:C2:68:79:63:4A:85:7D:E1:67:41:4D:27:55"}}},"request":{"raw":"GET /sspmatch?url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D95%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D95%26euid%3D HTTP/1.1\r\nHost: ssp.bestssp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.22.0\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 126\r\nlocation: https://mc.acint.net/rmatch?dp=95\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95\u0026euid=AEFUHFVW\r\nset-cookie: uid=AEFUHFVW; Expires=Thu, 29 Nov 2035 20:04:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.22.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":762,"timings":{"blocked":-1,"dns":26,"connect":160,"send":0,"wait":158,"receive":0,"ssl":418},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.buzzoola.com/cookiesync/dsp/sape-banner?uid=0600007FCCF42D69C91D157F0296C18F\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126","fqdn":"exchange.buzzoola.com","domain":"buzzoola.com","tld":"com"},"ip":{"addr":"45.138.161.75","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buzzoola.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 14:18:31 GMT","end":"Sun, 04 Jan 2026 14:18:30 GMT"},"fingerprint":{"sha1":"E5:71:B9:31:DB:51:F4:76:FF:21:14:90:EB:54:47:17:13:41:68:37","sha256":"53:82:CA:46:1D:A1:51:03:86:A3:1E:B5:1C:9C:1D:53:3A:22:0F:62:E9:37:B9:4E:6E:08:E5:1D:9F:B5:CF:8A"}}},"request":{"raw":"GET /cookiesync/dsp/sape-banner?uid=0600007FCCF42D69C91D157F0296C18F\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126 HTTP/1.1\r\nHost: exchange.buzzoola.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 269\r\nlocation: /cookiesync/dsp/sape-banner?set_buzzoola_cookie=t\u0026uid=0600007FCCF42D69C91D157F0296C18F\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126\r\nset-cookie: uuid=77bdc63f-ca35-43d0-46e3-0b14a369a51c; Path=/; Domain=buzzoola.com; Expires=Wed, 31 Dec 2025 20:04:28 GMT; Max-Age=2592000; Secure; SameSite=None\r\nserverid: TODO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":14,"connect":46,"send":0,"wait":43,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.lotus-dsp.ru/sync?ssp=Sape\u0026id=0600007FCCF42D69C91D157F0296C18F","fqdn":"a.lotus-dsp.ru","domain":"lotus-dsp.ru","tld":"ru"},"ip":{"addr":"213.171.19.207","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lotus-dsp.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 14:55:38 GMT","end":"Sun, 28 Dec 2025 14:55:37 GMT"},"fingerprint":{"sha1":"28:90:88:78:51:43:72:2E:7B:70:CB:E6:1D:FE:90:34:6D:C2:EB:7A","sha256":"B0:BB:CA:2B:DA:07:9E:5B:F6:EE:0F:1B:1D:89:22:3A:4B:FF:DF:8B:10:57:D4:25:6B:92:E9:4F:EA:5F:E9:EA"}}},"request":{"raw":"GET /sync?ssp=Sape\u0026id=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: a.lotus-dsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0\r\nDate: Mon, 01 Dec 2025 20:04:29 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: adpreudid=1; Expires=Wed, 31 Dec 2025 23:04:29 GMT; Domain=.lotus-dsp.ru; SameSite=None; Secure; Path=/\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":653,"timings":{"blocked":268,"dns":0,"connect":51,"send":0,"wait":44,"receive":0,"ssl":290},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.bumlam.com/?src=sap1\u0026s_data=CAIQARjM6bfJBmIgMDYwMDAwN0ZDQ0Y0MkQ2OUM5MUQxNTdGMDI5NkMxOEaiARDxaxUYzvAR8IbgACWQwGR8","fqdn":"sync.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.147","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 15:20:25 GMT","end":"Fri, 02 Jan 2026 15:20:24 GMT"},"fingerprint":{"sha1":"1D:6A:41:31:8B:54:10:85:1C:5D:59:CD:2C:2A:06:C6:67:15:92:6C","sha256":"39:7A:3D:4E:DA:59:64:82:87:68:80:E7:52:EF:C8:E4:2C:E2:B6:6B:7B:5A:6F:C2:72:5D:92:E2:DC:E5:9F:6B"}}},"request":{"raw":"GET /?src=sap1\u0026s_data=CAIQARjM6bfJBmIgMDYwMDAwN0ZDQ0Y0MkQ2OUM5MUQxNTdGMDI5NkMxOEaiARDxaxUYzvAR8IbgACWQwGR8 HTTP/1.1\r\nHost: sync.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: suuid3=IiRmMTZiMTUxOC1jZWYwLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 01 Dec 2025 20:04:28 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: suuid3=IiRmMTZiMTUxOC1jZWYwLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Sun, 26 Nov 2045 20:04:28 GMT; Domain=bumlam.com; SameSite=None; Secure\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nCache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":290,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-01T20:04:24.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clubrubionu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 06:29:56 GMT","end":"Wed, 07 Jan 2026 07:27:35 GMT"},"fingerprint":{"sha1":"E6:64:3E:1A:2C:7E:08:E2:16:0D:38:EF:E0:B9:F3:71:31:45:A6:81","sha256":"21:5B:4C:16:EF:1B:9C:AB:20:82:08:CF:EE:F2:33:B9:9A:E8:39:D4:F1:D9:63:77:1B:6D:87:A7:C4:0C:05:76"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: clubrubionu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Dec 2025 20:04:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.0.30\r\nlink: \u003chttps://clubrubionu.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kUQO4AGwkJQ8vmA0AE1H81WsvGVGZBw5frsYZkSHVLb7I%2BpeuAq8ED8M0zs6vw61gnJkcxiiCgaJqQJ5%2Bsfo1ZL%2F1jVlIixY9OGejz4%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9a753183ac6256b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":64703,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856), with CRLF, LF line terminators","md5":"40dd40d0543307a14ab3f95bc106b772","sha1":"dceac480c804e096dc203ff94f8e21c29bb6a089","sha256":"9ed77edb25a8bc638c8ce6c07dc8c7d7558eb20415db281b75cd81b4d453c7a6","sha512":"43ff102bfb5f0d90fef38bf5e94a0c077b6fe627bb18156fbab3c068a3dff2fdf78082b71d1931feda296391cfba25e552c1822986d3c3bff0b765d57c313d6c","ssdeep":"1536:g8dapDC2QYGBgWYGKU/YGLMhYG0ODYG1DaYGpiEYGVQ3YG8LpzosyR+C57kQUrA+:g8MlylXC57kQUrA+","tlshash":"6d532837d2a411333f5b5b86b1447b1ae7f7ca39ca0299b2b0f6a14467c1df7006269e","first_seen":"2025-12-01T20:04:58.417627Z","last_seen":"2025-12-01T20:04:58.417627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":55,"dns":33,"connect":1,"send":0,"wait":487,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/mc/?dp=10\u0026tc=1","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:28.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /mc/?dp=10\u0026tc=1 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://clubrubionu.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: text/html\r\nset-cookie: cSyncDp14v6=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp17v3=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp45v5=1764619468; expires=Tue, 02-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp53v5=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp553=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp62v4=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp67v5=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp68v3=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp71v2=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp85v2=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp95v4=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp98v3=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp104v3=1764619468; expires=Mon, 15-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp107v2=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp125v5=1764619468; expires=Tue, 16-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp126v3=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp129v2=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp136v3=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp148v2=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp149v3=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp151v2=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp251v3=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp186v2=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp217v2=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp226v1=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp239v3=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp243v2=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp260v2=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp244v2=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp248v3=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp261v1=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp264=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp274=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp289v2=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp296v3=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp312v1=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp313v1=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp368v1=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp331v1=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp337v1=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp351v1=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp361v1=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp353v1=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp362v1=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp366v1=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp385v1=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp390v1=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp399v1=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp394v1=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp415v1=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp420v2=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp431=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp433=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp444=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp203v2=1764619468; expires=Tue, 02-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp450=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10140,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (452), with CRLF, LF line terminators","md5":"c0201a0fe32bf2705b1346724c2b52ac","sha1":"7fd731a9616bb234f0dc654a5947791e3ed8de44","sha256":"8bfbfaa2120d7eb68a8a1146c244cd6c9f77d0d1d449ad9834c9474e06b8a0f1","sha512":"0130f121061863be48c9b2b77f2e6faebaf9b2c79a9ed35db152c16e256c50ca166f5b9539cf014a792172e5a0adf5e42c9f0087f61138e5c2dea5a1a49dbfde","ssdeep":"192:Dw8BB78Z2OHyvLtGZKqvGCvioVQX/170m2vGAMWTv38vHCvx0vNbQt1vTUvR:Dw8BB78ZhHexGZKmGufVQPl0mybMC3Qb","tlshash":"3422ed2385c61fdbba1bf780d24967c85872130739e7284aef2ea51736814fed40b5e4","first_seen":"2025-12-01T20:04:58.418938Z","last_seen":"2025-12-01T20:04:58.418938Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/sape/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"185.131.67.10","port":443,"asn":56630,"as":"Melbikomas UAB","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 18 Jun 2025 16:48:51 GMT","end":"Mon, 20 Jul 2026 16:48:50 GMT"},"fingerprint":{"sha1":"8D:89:EE:F7:48:68:E7:7D:F7:C4:AF:97:AB:98:A3:A3:1E:8D:6A:92","sha256":"08:06:AA:31:11:0F:33:B8:7D:B5:7E:B4:A2:2A:65:C6:77:DE:F6:65:A2:F4:BE:D3:7E:8D:9F:84:17:CE:20:A0"}}},"request":{"raw":"GET /sape/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-length: 0\r\nlocation: https://sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0=\r\nset-cookie: session_tptc=1764619468738;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=180\nsession_tptc-legacy=1764619468738;Version=1;Domain=.upravel.com;Path=/;Max-Age=180\r\np3p: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":483,"timings":{"blocked":170,"dns":22,"connect":43,"send":0,"wait":107,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/rmatch?dp=368\u0026euid=NT_2_0600007FCCF42D69C91D157F0296C18F_380615180345046_nRssfr\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D368","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=368\u0026euid=NT_2_0600007FCCF42D69C91D157F0296C18F_380615180345046_nRssfr\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D368 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468; cSyncDp7v3=1764619469; cSyncDp241v2=1764619469\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=368\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/themes/minimalistblogger/js/script.js?ver=20160720","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:24.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clubrubionu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 06:29:56 GMT","end":"Wed, 07 Jan 2026 07:27:35 GMT"},"fingerprint":{"sha1":"E6:64:3E:1A:2C:7E:08:E2:16:0D:38:EF:E0:B9:F3:71:31:45:A6:81","sha256":"21:5B:4C:16:EF:1B:9C:AB:20:82:08:CF:EE:F2:33:B9:9A:E8:39:D4:F1:D9:63:77:1B:6D:87:A7:C4:0C:05:76"}}},"request":{"raw":"GET /wp-content/themes/minimalistblogger/js/script.js?ver=20160720 HTTP/1.1\r\nHost: clubrubionu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 20:04:25 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 996\r\nlast-modified: Thu, 11 Sep 2025 02:11:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oIwIdaD88U6WylQ51o%2Bwp1q1tFrzIGS3QtQtSKx5Hb%2BN1Cjp8foOF9CyXsFc%2FVuAxaazPxreZ687yRjke5f%2BGraO1OHKpR6QUT0IzUw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9a753187ce66b4ed-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3858,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"61caf6e2f693a88ed96e1b413b90bb41","sha1":"804f26a285cbf49c2aab613ddd5ed1c3889f9c20","sha256":"affd9edd5dc26a271a81e36bade23368d81e7c628a7bb39901ec92376d296705","sha512":"b86366d287e150f651dc7b1d9ef591e53e21ac9128e96b92f209c695047bde94721935ab040e4fc496428a44a67f986334bb77dab04c4c3ce3c895fa9b7ecca9","ssdeep":"","tlshash":"dd8121c4b3afa7a64cbf335ae17f84448a3dc536820c1b96f4f649594e0540823e7a5e","first_seen":"2023-03-07T01:18:57Z","last_seen":"2026-04-03T12:41:10.338622Z","times_seen":447,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/match?dp=14\u0026euid=3C03420ACCF42D690D01F05B022F1F22","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=14\u0026euid=3C03420ACCF42D690D01F05B022F1F22 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468; cSyncDp7v3=1764619469\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T04:45:41.790278Z","times_seen":326566,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pix.bumlam.com/sync/sape/check?sspuid=0600007FCCF42D69C91D157F0296C18F","fqdn":"pix.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.3","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 15:20:25 GMT","end":"Fri, 02 Jan 2026 15:20:24 GMT"},"fingerprint":{"sha1":"1D:6A:41:31:8B:54:10:85:1C:5D:59:CD:2C:2A:06:C6:67:15:92:6C","sha256":"39:7A:3D:4E:DA:59:64:82:87:68:80:E7:52:EF:C8:E4:2C:E2:B6:6B:7B:5A:6F:C2:72:5D:92:E2:DC:E5:9F:6B"}}},"request":{"raw":"GET /sync/sape/check?sspuid=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: pix.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 01 Dec 2025 20:04:28 GMT\r\nContent-Type: image/gif\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://www.acint.net\r\nAccess-Control-Allow-Credentials: true\r\nTiming-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0, proxy-revalidate, s-maxage=0\r\nPragma: no-cache\r\nExpires: 05-Jun-2005 22:00:00 GMT\r\nX-Xss-Protection: 0\r\nP3P: policyref=\"https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml\", CP=\"CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nLocation: https://sync.bumlam.com/?src=sape\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":27,"connect":23,"send":0,"wait":23,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.ohmy.bid/cm?ssp=sape\u0026redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D","fqdn":"match.ohmy.bid","domain":"ohmy.bid","tld":"bid"},"ip":{"addr":"37.0.127.207","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ohmy.bid","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 15:45:39 GMT","end":"Sat, 03 Jan 2026 15:45:38 GMT"},"fingerprint":{"sha1":"EF:A2:21:7D:62:B9:E9:0F:EE:11:F0:38:1C:D6:7A:E7:53:65:15:8D","sha256":"45:80:3D:62:8B:EC:78:D5:D1:84:F8:93:1B:E2:FF:CE:65:BC:36:20:3B:B4:48:50:BD:29:09:74:68:5A:BA:B8"}}},"request":{"raw":"GET /cm?ssp=sape\u0026redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D HTTP/1.1\r\nHost: match.ohmy.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 01 Dec 2025 20:04:28 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nBidder: bid-04 1.2225.143c4793\r\nLocation: https://mc.acint.net/match?dp=217\u0026euid=2c040d9a-604a-4050-95a3-b77e41b77bdb\r\nSet-Cookie: uid=2c040d9a-604a-4050-95a3-b77e41b77bdb.692df4cc.6f90e84bc222cd94; domain=.ohmy.bid; path=/; expires=Wed, 31-Dec-2025 20:04:28 GMT; SameSite=None; Secure;\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":4,"dns":12,"connect":60,"send":0,"wait":57,"receive":0,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cmr.bidderstack.com/sape/cm?user_id=0600007FCCF42D69C91D157F0296C18F","fqdn":"cmr.bidderstack.com","domain":"bidderstack.com","tld":"com"},"ip":{"addr":"185.149.242.234","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bidderstack.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 26 Dec 2024 14:42:05 GMT","end":"Wed, 14 Jan 2026 11:07:44 GMT"},"fingerprint":{"sha1":"D3:CF:38:0C:FA:18:1C:F8:E8:E3:18:35:3E:3D:E6:82:B4:44:12:C1","sha256":"C6:91:A1:27:F0:56:52:64:73:25:39:60:8B:AA:DA:0C:92:DF:DD:2B:3C:50:92:0B:D8:7F:AF:F4:5B:3C:A8:79"}}},"request":{"raw":"GET /sape/cm?user_id=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: cmr.bidderstack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Mon, 01 Dec 2025 20:04:28 GMT\r\nContent-Type: image/gif\r\nContent-Length: 44\r\nConnection: keep-alive\r\nx-from: nrr-2\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":44,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"f9d60352c70a2ba15616d1c9421f3844","sha1":"e9abc8bea7721a4b6a50295850d13c515006a95c","sha256":"82cb517a8f80c91dfcec543c6d140deb3baaf463ea9e77655475096eba7bc7d9","sha512":"c236b22bcd48790ff970b8bc566061eae734e0d34c1a68cd8d6160415303e0b0b51fe5780fafe7349cf71cb10089c9f322495267eee019cc63f879727263df4b","ssdeep":"","tlshash":"49900003eb80c002c2a2c0300e0ccb802b88b030ae28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-06T18:33:49Z","last_seen":"2026-04-03T14:38:25.913479Z","times_seen":4252,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":14,"connect":56,"send":0,"wait":57,"receive":0,"ssl":371},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.videohead.tech/sync?ssp=68","fqdn":"a.videohead.tech","domain":"videohead.tech","tld":"tech"},"ip":{"addr":"213.171.19.235","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"videohead.tech","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 04:18:12 GMT","end":"Wed, 14 Jan 2026 04:18:11 GMT"},"fingerprint":{"sha1":"B0:2C:A0:87:77:93:78:03:02:51:35:13:10:C2:69:60:6C:5A:DC:74","sha256":"56:DC:2F:0F:7D:DA:ED:E7:65:EF:BC:20:D1:25:86:B1:4A:48:4F:BB:20:1B:65:F9:99:1F:9A:E2:05:54:A1:1E"}}},"request":{"raw":"GET /sync?ssp=68 HTTP/1.1\r\nHost: a.videohead.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0\r\nDate: Mon, 01 Dec 2025 20:04:29 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: prevhead=1; Expires=Wed, 31 Dec 2025 23:04:29 GMT; Domain=.videohead.tech; SameSite=None; Secure; Path=/\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":686,"timings":{"blocked":187,"dns":4,"connect":43,"send":0,"wait":88,"receive":0,"ssl":364},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id.adx.bid/match/sape?eid=0600007FCCF42D69C91D157F0296C18F","fqdn":"id.adx.bid","domain":"adx.bid","tld":"bid"},"ip":{"addr":"172.67.70.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adx.bid","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 20:44:08 GMT","end":"Tue, 10 Feb 2026 21:43:30 GMT"},"fingerprint":{"sha1":"CA:0B:25:51:E0:58:1F:6F:2B:D9:A7:61:0F:2C:11:43:C6:F3:1A:E3","sha256":"EF:58:73:9B:AA:B3:85:BA:14:6F:51:19:2C:A3:B6:EF:27:B5:C5:A0:1A:23:97:91:E8:05:BB:EE:6C:9D:A4:C6"}}},"request":{"raw":"GET /match/sape?eid=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: id.adx.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\nserver: cloudflare\r\nx-error: not_active\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l3GiWSV3YsKlD%2FJDIuxO3gIgsvSUiP6gBbw%2BGBmtiycxfmZJjJ6d9j57ecVTlcVxcAAEIpwaecq4%2BDUqwahRxwwI6351vE1OVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7531a2bdbe4c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":622,"timings":{"blocked":292,"dns":3,"connect":1,"send":0,"wait":31,"receive":0,"ssl":294},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.utraff.com/sync?ssp=sape","fqdn":"a.utraff.com","domain":"utraff.com","tld":"com"},"ip":{"addr":"213.171.19.199","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utraff.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 14:58:41 GMT","end":"Sun, 28 Dec 2025 14:58:40 GMT"},"fingerprint":{"sha1":"5F:B5:C8:A1:80:6E:7D:B1:C9:91:99:E5:F4:53:9A:9E:84:E8:40:49","sha256":"6E:49:55:4D:01:B0:58:BF:F1:09:6C:E6:5E:05:80:83:DF:C2:43:5C:10:4E:A5:16:C9:19:7E:63:D9:F7:06:0E"}}},"request":{"raw":"GET /sync?ssp=sape HTTP/1.1\r\nHost: a.utraff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0\r\nDate: Mon, 01 Dec 2025 20:04:28 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: preutid=1; Expires=Wed, 31 Dec 2025 23:04:28 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/\npreutid=1; Expires=Wed, 31 Dec 2025 23:04:28 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":131,"dns":34,"connect":44,"send":0,"wait":87,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adspector.io/sync?ssp=6","fqdn":"a.adspector.io","domain":"adspector.io","tld":"io"},"ip":{"addr":"172.67.161.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adspector.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 03:16:35 GMT","end":"Wed, 11 Feb 2026 04:14:56 GMT"},"fingerprint":{"sha1":"70:93:AE:0A:86:B3:EC:6A:26:43:0C:59:15:5C:6D:1C:C5:C6:F8:11","sha256":"16:49:F6:10:DA:6C:F1:EC:DB:5E:3C:6B:52:FE:1B:B8:2A:EC:A0:D1:73:71:15:1E:94:F3:29:C7:95:AB:81:A3"}}},"request":{"raw":"GET /sync?ssp=6 HTTP/1.1\r\nHost: a.adspector.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YpOP5XC%2FuDYtt5nnUCd6uuwf9oo0Drl7slSTgF04dmL4H2G0LSNV8CmvJkq2WdKiVrQ9DlfMCFhe0YJDw%2Fq6TWR6mdIp0RtjEcs54w%3D%3D\"}]}\r\nset-cookie: preadspector=1; SameSite=None; Secure; Path=/; Domain=.adspector.io; Expires=Wed, 31 Dec 2025 23:04:29 GMT\r\ncf-ray: 9a7531a1895c7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":154,"dns":12,"connect":8,"send":0,"wait":98,"receive":0,"ssl":253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/css/main.css?ver=4.33","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:24.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clubrubionu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 06:29:56 GMT","end":"Wed, 07 Jan 2026 07:27:35 GMT"},"fingerprint":{"sha1":"E6:64:3E:1A:2C:7E:08:E2:16:0D:38:EF:E0:B9:F3:71:31:45:A6:81","sha256":"21:5B:4C:16:EF:1B:9C:AB:20:82:08:CF:EE:F2:33:B9:9A:E8:39:D4:F1:D9:63:77:1B:6D:87:A7:C4:0C:05:76"}}},"request":{"raw":"GET /wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/css/main.css?ver=4.33 HTTP/1.1\r\nHost: clubrubionu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 20:04:26 GMT\r\ncontent-type: text/css\r\ncontent-length: 645\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 20:04:27 GMT\r\nlast-modified: Fri, 21 Nov 2025 03:29:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SU4Gebd1PzeOHUqoa4561qklcnzP%2Bd%2BTfrZ5RZevydd988qgQFYfFvj30n%2FAK40c6dUhABWc6%2Fe%2BLIP7Vwu2Ygv2BcGdr%2BS8Xp2j7g0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a753187ae57b4ed-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1931,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1931), with no line terminators","md5":"90764566e6f527f37570b1106e05042f","sha1":"ede620d28b58974a44d741155ae135a12e1d42eb","sha256":"9aca0676efdad8c371afd0a1afbad9eb27f9ee992480f91d75d6cfeb52638f27","sha512":"15a613ee8b2f407d8ce06af73d72c562bbd27c345107455c40653c025f3bff0b650ba5169893753dd4b8667a04dd917c3f6d11e8eee055d051065116a971965f","ssdeep":"","tlshash":"fa41eddfb2c4f0484263a843756e6b3c1abd40e4eb931e9d2668f33c47c93874162da5","first_seen":"2025-08-11T21:53:49.528474Z","last_seen":"2026-04-04T03:43:38.303213Z","times_seen":3083,"resource_available":false,"data":null}},"time_used":2002,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2002,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/themes/minimalistblogger/js/accessibility.js?ver=20160720","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:24.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clubrubionu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 06:29:56 GMT","end":"Wed, 07 Jan 2026 07:27:35 GMT"},"fingerprint":{"sha1":"E6:64:3E:1A:2C:7E:08:E2:16:0D:38:EF:E0:B9:F3:71:31:45:A6:81","sha256":"21:5B:4C:16:EF:1B:9C:AB:20:82:08:CF:EE:F2:33:B9:9A:E8:39:D4:F1:D9:63:77:1B:6D:87:A7:C4:0C:05:76"}}},"request":{"raw":"GET /wp-content/themes/minimalistblogger/js/accessibility.js?ver=20160720 HTTP/1.1\r\nHost: clubrubionu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 20:04:25 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 439\r\nlast-modified: Thu, 11 Sep 2025 02:11:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nrq%2B%2BxOvzKOdKfjyDL0%2FNeQocWlnyFfAT39Ecq6wmLEroNtojM%2FmCJEyzMKHK0OAHCStCU180q5ffICHsoxeipH4A%2FPzhd%2BFTSVy3ng%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9a753187ce67b4ed-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1316,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"b0c4524b04f4865b70d25d84008525a4","sha1":"f48de144a403632234b4fd6c2eebb83a5cbd0cb9","sha256":"5388cf7a66bfe00e857ab5c353f9703cdae46691d386f9034e9151f5c6c9c6bf","sha512":"ba041e3b2605241f0fc12921b79db98d7c768668c09d5909369cbb4b54231ef3836f1257016f8c30b48ba62c23e5bc0bab4bf0929bc20aecb1b92d4839a70880","ssdeep":"","tlshash":"9121d39cf3edb11304b93858b72d9045062e01365a007d5bfcb949641f97e3911f7c2d","first_seen":"2023-03-07T01:18:57Z","last_seen":"2026-04-03T12:41:10.331039Z","times_seen":785,"resource_available":true,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/themes/minimalistblogger/js/jquery.flexslider.js?ver=20150423","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:24.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clubrubionu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 06:29:56 GMT","end":"Wed, 07 Jan 2026 07:27:35 GMT"},"fingerprint":{"sha1":"E6:64:3E:1A:2C:7E:08:E2:16:0D:38:EF:E0:B9:F3:71:31:45:A6:81","sha256":"21:5B:4C:16:EF:1B:9C:AB:20:82:08:CF:EE:F2:33:B9:9A:E8:39:D4:F1:D9:63:77:1B:6D:87:A7:C4:0C:05:76"}}},"request":{"raw":"GET /wp-content/themes/minimalistblogger/js/jquery.flexslider.js?ver=20150423 HTTP/1.1\r\nHost: clubrubionu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 20:04:25 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 11140\r\nlast-modified: Thu, 11 Sep 2025 02:11:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CxEm3j%2FahshsVRJf7VexSu%2FjXfmGkFOsyRdv6TeuF%2BvRi9WDvyOSryhB9xeDt1xqqbqI1uey3sl8pfh%2B077fUTH4sNshu9Miv15XY%2Fk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9a753187ce64b4ed-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":54630,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d164ed31a1f030cca772428fbc4a353b","sha1":"f6791145eb6527492ffe8d147b12571a88a26b76","sha256":"9f9b8303b4fdf50f85f63fb85b80e9be5d88f6de1e7440bf03380cb9d717ce4a","sha512":"990606ba9766d4f9788fe96a19526c17610f6040331983e764e1c4ccc6e850730233839ab94413c8a1d1158cb98fc38a2e4fc9ad5098cebfa39de27d878485ab","ssdeep":"768:vCn0IniPaY9J6I/xN+hiSoRQb5Gqchfyci1:1PqH1Zb5pchfyci1","tlshash":"4533201a6521166689b373ae6f5adc18ebf743538019866afded020cdf7041843b2ff9","first_seen":"2023-03-07T01:18:57Z","last_seen":"2026-04-03T19:10:46.138965Z","times_seen":497,"resource_available":true,"data":null}},"time_used":730,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":729,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.opendsp.ru/match/sape?id=0600007FCCF42D69C91D157F0296C18F","fqdn":"sync.opendsp.ru","domain":"opendsp.ru","tld":"ru"},"ip":{"addr":"176.114.85.200","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.opendsp.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 05 Aug 2025 11:37:07 GMT","end":"Sun, 06 Sep 2026 11:37:06 GMT"},"fingerprint":{"sha1":"A6:D2:A4:C1:9C:FF:E8:4A:C2:A7:58:7A:3B:98:4B:CC:11:C8:FF:1F","sha256":"26:E3:31:B9:C2:C0:30:F6:85:B7:6E:2F:0E:4F:B0:C6:E5:39:D0:1A:8A:86:02:1E:55:68:94:B1:95:F1:4A:A7"}}},"request":{"raw":"GET /match/sape?id=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: sync.opendsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-04T03:58:55.614436Z","times_seen":31107,"resource_available":true,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":33,"connect":47,"send":0,"wait":44,"receive":0,"ssl":398},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.al-adtech.com/api/sync/sape","fqdn":"ssp.al-adtech.com","domain":"al-adtech.com","tld":"com"},"ip":{"addr":"45.139.25.122","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.al-adtech.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 07:19:40 GMT","end":"Sun, 18 Jan 2026 07:19:39 GMT"},"fingerprint":{"sha1":"49:E7:E6:61:8C:94:61:60:5D:BD:36:D3:9F:62:39:4D:B0:9E:4F:32","sha256":"5E:4B:55:76:B2:4F:F0:62:A1:AB:66:B8:93:41:28:AD:E7:86:98:99:13:64:E8:01:12:8A:4F:8C:A1:D6:21:97"}}},"request":{"raw":"GET /api/sync/sape HTTP/1.1\r\nHost: ssp.al-adtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.20.1\r\nDate: Mon, 01 Dec 2025 20:04:29 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Credentials: true\r\nLocation: https://mc.acint.net/rmatch?dp=261\u0026euid=eb01845e-1cdd-425d-bbe7-f685c4626823\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D261\r\nSet-Cookie: afp_cookie=gAAAAABpLfTN7quJq9-1m3dee3_dIqw-pOPuDzKuXTdnrDGmVQvo_bNYhIhzO6JvXMV1Hg3qWMEMiTw86lkRM6wm-dMQyv6vp-ZdwRLbDNBPVnm7EFIyxaX7KZoDDQnP_o0mbtWjTZL8oKVOK5XfPtgfY1ARDaWxL3hKLBneBWTioFerndnfWhY1acHDznnjqtQbZVJ0_tM8mYkmwueKf70K3WzbowITZg==$; expires=Thu, 01 Jan 2026 20:04:29 GMT; path=/; secure; SameSite=None\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":505,"timings":{"blocked":43,"dns":4,"connect":65,"send":0,"wait":69,"receive":0,"ssl":322},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sp.kombinat.digital/cm?ssp=sape\u0026redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D433%26euid%3D%7Buid%7D","fqdn":"sp.kombinat.digital","domain":"kombinat.digital","tld":"digital"},"ip":{"addr":"77.223.120.36","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.kombinat.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Dec 2025 10:23:18 GMT","end":"Sun, 01 Mar 2026 10:23:17 GMT"},"fingerprint":{"sha1":"8F:91:B2:43:1C:1F:A6:7C:68:6E:71:E2:4A:D8:77:95:57:07:CE:0C","sha256":"3F:EC:8A:F1:CB:4E:59:7A:CB:F6:B0:F9:54:88:5C:B3:1A:7B:72:38:BF:75:51:79:B2:E6:7D:62:32:10:45:03"}}},"request":{"raw":"GET /cm?ssp=sape\u0026redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D433%26euid%3D%7Buid%7D HTTP/1.1\r\nHost: sp.kombinat.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 01 Dec 2025 20:04:29 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nBidder: bid-01 1.105.a1db8cf\r\nLocation: https://mc.acint.net/match?dp=433\u0026euid=fc583aa6-2683-479e-8ce7-adc6b1efaa65\r\nSet-Cookie: uid=fc583aa6-2683-479e-8ce7-adc6b1efaa65.692df4cd.cfda53097893ae05; domain=.kombinat.digital; path=/; expires=Wed, 31-Dec-2025 20:04:29 GMT; SameSite=None; Secure;\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":647,"timings":{"blocked":258,"dns":6,"connect":44,"send":0,"wait":40,"receive":0,"ssl":295},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=126","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /cmatch?dp=126 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468; cSyncDp7v3=1764619469\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://match.qtarget.tech/userbind?src=sape\u0026id=0600007FCCF42D69C91D157F0296C18F\r\nset-cookie: cSyncDp241v2=1764619469; expires=Wed, 31-Dec-25 20:04:29 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/aidata/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"185.131.67.10","port":443,"asn":56630,"as":"Melbikomas UAB","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:33.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 18 Jun 2025 16:48:51 GMT","end":"Mon, 20 Jul 2026 16:48:50 GMT"},"fingerprint":{"sha1":"8D:89:EE:F7:48:68:E7:7D:F7:C4:AF:97:AB:98:A3:A3:1E:8D:6A:92","sha256":"08:06:AA:31:11:0F:33:B8:7D:B5:7E:B4:A2:2A:65:C6:77:DE:F6:65:A2:F4:BE:D3:7E:8D:9F:84:17:CE:20:A0"}}},"request":{"raw":"GET /aidata/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1764619468738; user_id=db0ac286-d6bb-4b50-ae85-d9741d68b9a2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Mon, 01 Dec 2025 20:04:33 GMT\r\ncontent-length: 0\r\np3p: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nset-cookie: user_id=db0ac286-d6bb-4b50-ae85-d9741d68b9a2;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\nuser_id-legacy=db0ac286-d6bb-4b50-ae85-d9741d68b9a2;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\r\nlocation: https://x01.aidata.io/0.gif?pid=MGCOM\u0026id=db0ac286-d6bb-4b50-ae85-d9741d68b9a2\u0026back=\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/fonts/playfair-display/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:28.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clubrubionu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 06:29:56 GMT","end":"Wed, 07 Jan 2026 07:27:35 GMT"},"fingerprint":{"sha1":"E6:64:3E:1A:2C:7E:08:E2:16:0D:38:EF:E0:B9:F3:71:31:45:A6:81","sha256":"21:5B:4C:16:EF:1B:9C:AB:20:82:08:CF:EE:F2:33:B9:9A:E8:39:D4:F1:D9:63:77:1B:6D:87:A7:C4:0C:05:76"}}},"request":{"raw":"GET /wp-content/fonts/playfair-display/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: clubrubionu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/wp-content/fonts/6c91ec45b29a6540e99f490b07510d0f.css?ver=6.8.3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 38372\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 20:04:28 GMT\r\nlast-modified: Thu, 27 Feb 2025 06:02:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0sE0c7fHWkYhmZ%2FAKZbmvOXk3qILyySINvtXmlFK3YQJMloGKk5PokgZwgl5Bt2bEbXE2Xtm0fsGohXTsChlFwSrAGRUnGcdzQLrKRQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75319baf85b4ed-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38372,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38372, version 1.0","md5":"16ecec131289ca4925d35c0515b28d9f","sha1":"e2cbe7ec2bb494226ea423c7a7353b0e18b304c2","sha256":"cb8cac32d5cef83e7674916378c2f47bdbba7e6e6bd936f8026a58ac4e71fa53","sha512":"a7ed6208086801275997fcba3779084400914c74f454fe992fd0af6e38f4f2f975d2cc63cbe5c1cba35fe439ec25b0c6b64dd858d036329a2de720124e70c512","ssdeep":"768:+Yxdr2O1OKvIsc1wqo4CyJBZk0eFs+rCFBVkvQjQRQRjvv+mv9:nV1OKvIBwktQEFB/Rjn/v9","tlshash":"5403f152997d12b4282ea3845e53fb839e533c7d55023bc901a744225e2d3be3ee176e","first_seen":"2024-02-02T05:56:10Z","last_seen":"2026-04-03T09:26:20.070432Z","times_seen":4777,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":551,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ck.silvermob.com/sync?pid=533\u0026uid=0600007FCCF42D69C91D157F0296C18F\u0026rd=1\u0026r=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D274%26euid%3D%5BUSER_ID%5D","fqdn":"ck.silvermob.com","domain":"silvermob.com","tld":"com"},"ip":{"addr":"212.95.41.187","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.silvermob.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:3C:57:8B:31:3A:8D:1D:BD:2E:AA:97:E5:85:62:E9:6E:FF:0D:27","sha256":"3F:EB:62:39:C6:44:25:10:53:E0:44:4B:F1:5C:3B:44:D0:D1:9F:17:E1:F5:ED:1D:33:6D:A7:65:3C:9A:91:BD"}}},"request":{"raw":"GET /sync?pid=533\u0026uid=0600007FCCF42D69C91D157F0296C18F\u0026rd=1\u0026r=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D274%26euid%3D%5BUSER_ID%5D HTTP/1.1\r\nHost: ck.silvermob.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 01 Dec 2025 20:04:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: close\r\nX-Powered-By: Express\r\nSet-Cookie: sm_uid=sm_t9J6yDfjy9eH; Domain=ck.silvermob.com; Expires=Tue, 01 Dec 2026 20:04:29 GMT; Path=/; SameSite=None; Secure\r\nx-sm-trace: refresh-2\r\nCache-Control: public, max-age=0\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Cookie\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-04T03:58:55.614436Z","times_seen":31107,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":78,"dns":3,"connect":33,"send":0,"wait":38,"receive":0,"ssl":367},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.techdsp.ru/sync?src=sape\u0026dmp=2\u0026uid=0600007FCCF42D69C91D157F0296C18F","fqdn":"sync.techdsp.ru","domain":"techdsp.ru","tld":"ru"},"ip":{"addr":"37.48.253.133","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.techdsp.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 19 Feb 2025 14:03:23 GMT","end":"Mon, 23 Mar 2026 14:03:22 GMT"},"fingerprint":{"sha1":"E0:51:62:A1:08:10:67:51:3A:43:8B:07:2F:EC:40:2D:BA:A8:2E:5C","sha256":"8E:DA:37:A7:45:0C:02:8B:99:79:9E:F6:0F:CF:98:2D:C0:9F:74:B4:18:E8:2E:F5:D7:DD:D8:3C:3C:43:5C:85"}}},"request":{"raw":"GET /sync?src=sape\u0026dmp=2\u0026uid=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: sync.techdsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-length: 0\r\nlocation: https://dmg.digitaltarget.ru/1/7686/i/i?a=4110\u0026e=5m-2aojKRR2A6F03AQexLw\u0026i=8932771053347142002\r\nreferrer-policy: no-referrer\r\nset-cookie: uid=5m-2aojKRR2A6F03AQexLw; Path=/; Max-Age=31536000; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":957,"timings":{"blocked":165,"dns":3,"connect":44,"send":0,"wait":42,"receive":0,"ssl":693},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0=","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"185.131.67.10","port":443,"asn":56630,"as":"Melbikomas UAB","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 18 Jun 2025 16:48:51 GMT","end":"Mon, 20 Jul 2026 16:48:50 GMT"},"fingerprint":{"sha1":"8D:89:EE:F7:48:68:E7:7D:F7:C4:AF:97:AB:98:A3:A3:1E:8D:6A:92","sha256":"08:06:AA:31:11:0F:33:B8:7D:B5:7E:B4:A2:2A:65:C6:77:DE:F6:65:A2:F4:BE:D3:7E:8D:9F:84:17:CE:20:A0"}}},"request":{"raw":"GET /sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0= HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1764619468738\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-length: 0\r\np3p: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nset-cookie: user_id=db0ac286-d6bb-4b50-ae85-d9741d68b9a2;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\nuser_id-legacy=db0ac286-d6bb-4b50-ae85-d9741d68b9a2;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\r\nlocation: https://www.acint.net/rmatch?dp=71\u0026euid=db0ac286-d6bb-4b50-ae85-d9741d68b9a2\u0026r=https%3A%2F%2Fsync.upravel.com%2Fpbd%2Fsync\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/uploads/2024/07/image-9.png","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:24.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clubrubionu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 06:29:56 GMT","end":"Wed, 07 Jan 2026 07:27:35 GMT"},"fingerprint":{"sha1":"E6:64:3E:1A:2C:7E:08:E2:16:0D:38:EF:E0:B9:F3:71:31:45:A6:81","sha256":"21:5B:4C:16:EF:1B:9C:AB:20:82:08:CF:EE:F2:33:B9:9A:E8:39:D4:F1:D9:63:77:1B:6D:87:A7:C4:0C:05:76"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/image-9.png HTTP/1.1\r\nHost: clubrubionu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 20:04:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 7913\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 20:04:25 GMT\r\nlast-modified: Fri, 26 Jul 2024 10:42:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1WRBzJjkoSzcjTxsU3BaZfiuqfCOpweF6YL8F0kK5l355f7CXnYT6IhiOqrW54gjTvRG%2BCqYzRiP55ut7lBdpVid05WbdYiv60iTBrQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a753187be61b4ed-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7913,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 285 x 50, 8-bit/color RGBA, non-interlaced","md5":"7eace44550394f4fbbd1de2e69871afe","sha1":"82614810b352bd3a14b4d64ff690d70dccbf8367","sha256":"3c2cd2c911ef551b1617efeab12803fd8df3d4ff997328807b6477b3daf6605a","sha512":"844cd66810b9d7fe44237ae00783de121da9cc290768632e3b7931264c461dc6fab12e2140befe97909b4b9e686ed3a737c8a42df6d965c776d23e9ea4c8980d","ssdeep":"192:4s1D584pseHI6jO7fM3TGg2MX/EEYpESW8dMZkSe+mJh:/d51CeHIYCfM3T520EEPUMCSqL","tlshash":"abf1c0b0c1090ccfc1428d355cb5fdc35f75d95bb60ba4de8e66846c898abd73886e40","first_seen":"2025-12-01T20:04:58.423302Z","last_seen":"2025-12-01T20:04:58.423302Z","times_seen":1,"resource_available":false,"data":null}},"time_used":631,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dm-eu.hybrid.ai/match?id=106\u0026vid=0600007FCCF42D69C91D157F0296C18F","fqdn":"dm-eu.hybrid.ai","domain":"hybrid.ai","tld":"ai"},"ip":{"addr":"37.230.131.22","port":443,"asn":200197,"as":"Hybrid Adtech Sp.z.o.o.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hybrid.ai","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 22 Sep 2025 00:00:00 GMT","end":"Sun, 04 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:21:9E:FA:EF:FF:FF:F2:8D:68:A8:F9:EB:ED:53:32:CC:17:9B:ED","sha256":"C9:20:9A:53:1E:FA:35:C7:29:64:1F:C3:7B:1E:34:73:C8:15:87:43:EA:35:06:B8:8D:86:E5:11:19:2A:60:FC"}}},"request":{"raw":"GET /match?id=106\u0026vid=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: dm-eu.hybrid.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 01 Dec 2025 19:59:33 GMT\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nexpires: -1\r\np3p: CP=\"NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC\"\r\nx-mode: 5051\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://www.acint.net\r\naccess-control-allow-credentials: true\r\nserver: Hybrid Web Server\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":23,"dns":1,"connect":22,"send":0,"wait":26,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kimberlite.io/rtb/sync/sape2?u=0600007FCCF42D69C91D157F0296C18F","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.86","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 03 Mar 2025 10:28:30 GMT","end":"Sat, 04 Apr 2026 10:28:29 GMT"},"fingerprint":{"sha1":"D5:F7:CA:61:DC:40:4D:B7:43:BC:F1:6F:13:3A:45:A0:D0:53:09:FA","sha256":"BD:79:98:BE:D4:24:4A:51:5B:6D:A8:A1:58:2B:4E:1D:6B:90:66:40:1F:2C:E3:4A:C4:9F:7E:A3:A2:F6:79:12"}}},"request":{"raw":"GET /rtb/sync/sape2?u=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx\r\nDate: Mon, 01 Dec 2025 20:04:29 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nlocation: /rtb/sync/sape2?u=0600007FCCF42D69C91D157F0296C18F\u0026rc=1\r\nset-cookie: u=aS30zcZUEt8~MbF3_yclhSqYcMgxwohnMACaYQs; path=/; max-age=7776000; samesite=none; httponly; secure\r\nreferrer-policy: no-referrer\r\nserver-timing: app;srv=s4a;dur=0.0002\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":557,"timings":{"blocked":28,"dns":7,"connect":61,"send":0,"wait":73,"receive":0,"ssl":387},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-statistics.dev.dsp1.nominaltechno.com/api/cookie-sync/eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJSVEIgU2FwZSJ9.VXKxLxZBDKVR7akKD1ukrUZZiwKSy3v1zAZqgO5I0sDyck5wQtI73MuLZMkcYTNASS9UpZ9mSHr5k-r2pAOYRQ/sync?sspUserId=0600007FCCF42D69C91D157F0296C18F\u0026r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D313%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D313","fqdn":"ssp-statistics.dev.dsp1.nominaltechno.com","domain":"nominaltechno.com","tld":"com"},"ip":{"addr":"52.212.195.119","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsp1.nominaltechno.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:69:09:D1:44:FC:EF:3B:DA:E5:87:AC:D5:A8:4B:29:5D:43:A6:FF","sha256":"35:F6:0A:EE:1E:A2:22:52:1B:A8:7E:C4:7A:DE:E3:03:91:D4:13:20:F0:92:EB:AB:51:5E:57:F3:43:76:BE:34"}}},"request":{"raw":"GET /api/cookie-sync/eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJSVEIgU2FwZSJ9.VXKxLxZBDKVR7akKD1ukrUZZiwKSy3v1zAZqgO5I0sDyck5wQtI73MuLZMkcYTNASS9UpZ9mSHr5k-r2pAOYRQ/sync?sspUserId=0600007FCCF42D69C91D157F0296C18F\u0026r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D313%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D313 HTTP/1.1\r\nHost: ssp-statistics.dev.dsp1.nominaltechno.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-length: 0\r\nlocation: https://acint.net/rmatch?dp=313\u0026euid=NT_2_0600007FCCF42D69C91D157F0296C18F_394646210515730_RraYjO\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D313\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1 ; mode=block\r\nreferrer-policy: no-referrer\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":633,"timings":{"blocked":120,"dns":2,"connect":42,"send":0,"wait":34,"receive":0,"ssl":427},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1026--db0ac286-d6bb-4b50-ae85-d9741d68b9a2.stbid.ru/?r=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dpbd","fqdn":"1026--db0ac286-d6bb-4b50-ae85-d9741d68b9a2.stbid.ru","domain":"stbid.ru","tld":"ru"},"ip":{"addr":"62.109.24.241","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.stbid.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Apr 2025 09:20:40 GMT","end":"Sun, 24 May 2026 09:20:39 GMT"},"fingerprint":{"sha1":"CD:D0:42:9B:03:7A:27:A9:42:E1:4D:28:F3:FC:EA:D1:AC:D7:13:7E","sha256":"17:48:80:43:30:8B:5E:01:B8:65:DF:1B:22:DC:DB:13:D8:6B:DF:48:78:50:08:AB:69:B1:90:41:E5:62:3E:C4"}}},"request":{"raw":"GET /?r=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dpbd HTTP/1.1\r\nHost: 1026--db0ac286-d6bb-4b50-ae85-d9741d68b9a2.stbid.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie/1.10.3\r\nDate: Mon, 01 Dec 2025 20:04:29 GMT\r\nContent-Length: 0\r\nConnection: close\r\nLocation: https://sync.upravel.com/image?source=pbd\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie:1.10.3","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":450,"timings":{"blocked":185,"dns":38,"connect":44,"send":0,"wait":44,"receive":0,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=368","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /cmatch?dp=368 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468; cSyncDp7v3=1764619469; cSyncDp241v2=1764619469\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T04:45:41.790278Z","times_seen":326566,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/rmatch?dp=261\u0026euid=eb01845e-1cdd-425d-bbe7-f685c4626823\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D261","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=261\u0026euid=eb01845e-1cdd-425d-bbe7-f685c4626823\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D261 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468; cSyncDp7v3=1764619469\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=261\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:28.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clubrubionu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Nov 2025 12:31:08 GMT\r\nexpires: Thu, 26 Nov 2026 12:31:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 459200\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-04-04T04:43:52.019896Z","times_seen":183818,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":62,"dns":1,"connect":7,"send":0,"wait":8,"receive":6,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs.agency2.ru/p?ssp=sp\u0026uid=0600007FCCF42D69C91D157F0296C18F","fqdn":"cs.agency2.ru","domain":"agency2.ru","tld":"ru"},"ip":{"addr":"23.105.255.196","port":443,"asn":39134,"as":"Edinaya Set Limited Liability Company","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.agency2.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 08:47:09 GMT","end":"Sun, 13 Sep 2026 08:47:08 GMT"},"fingerprint":{"sha1":"F4:53:6B:6B:EF:0D:F1:45:1E:8B:12:B7:51:88:E4:EB:78:EA:9A:8B","sha256":"B3:B9:DF:C8:91:E7:FA:77:EA:87:6A:FF:93:64:2F:02:53:8D:5C:87:80:F7:EA:F9:DE:2F:E2:5C:11:04:9F:3A"}}},"request":{"raw":"GET /p?ssp=sp\u0026uid=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: cs.agency2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Mon, 01 Dec 2025 20:04:29 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nServer: fasthttp\r\nCache-Control: no-store, no-cache, must-revalidate\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nLocation: https://www.acint.net/match?dp=186\u0026euid=a94b0825-4aba-4b16-becc-5a067fef860b\r\nSet-Cookie: uuid=a94b0825-4aba-4b16-becc-5a067fef860b; expires=Sun, 22 Nov 2026 20:04:29 GMT; domain=agency2.ru; path=/; secure; SameSite=None\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT\r\nX-Host: 23.105.255.196\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":3,"connect":46,"send":0,"wait":70,"receive":0,"ssl":480},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14","fqdn":"ssp-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.93","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sape.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Oct 2025 23:35:45 GMT","end":"Tue, 06 Jan 2026 23:35:44 GMT"},"fingerprint":{"sha1":"2D:BB:D2:42:8E:33:F5:EC:A0:48:8C:E1:DC:94:B6:53:E8:CE:11:55","sha256":"B4:2B:99:62:C7:15:73:3C:46:90:97:D1:C8:C7:1A:01:8C:FD:9B:B0:CA:9C:1B:06:7B:83:43:4D:54:A2:D6:25"}}},"request":{"raw":"GET /rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14 HTTP/1.1\r\nHost: ssp-rtb.sape.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sspuid=CkIDPGkt9Mxb8AENIh8vAneUUgSII7lnjsLmy0xU8B02fxUg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: https://acint.net/match?dp=14\u0026euid=3C03420ACCF42D690D01F05B022F1F22\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pix.bumlam.com/sync/sape/sync_ok?guid=f16b1518-cef0-11f0-86e0-002590c0647c","fqdn":"pix.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.3","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 15:20:25 GMT","end":"Fri, 02 Jan 2026 15:20:24 GMT"},"fingerprint":{"sha1":"1D:6A:41:31:8B:54:10:85:1C:5D:59:CD:2C:2A:06:C6:67:15:92:6C","sha256":"39:7A:3D:4E:DA:59:64:82:87:68:80:E7:52:EF:C8:E4:2C:E2:B6:6B:7B:5A:6F:C2:72:5D:92:E2:DC:E5:9F:6B"}}},"request":{"raw":"GET /sync/sape/sync_ok?guid=f16b1518-cef0-11f0-86e0-002590c0647c HTTP/1.1\r\nHost: pix.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: suuid3=IiRmMTZiMTUxOC1jZWYwLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 01 Dec 2025 20:04:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://www.acint.net\r\nAccess-Control-Allow-Credentials: true\r\nTiming-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0, proxy-revalidate, s-maxage=0\r\nPragma: no-cache\r\nExpires: 05-Jun-2005 22:00:00 GMT\r\nX-Xss-Protection: 0\r\nP3P: policyref=\"https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml\", CP=\"CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nLocation: https://f16b1518-cef0-11f0-86e0-002590c0647c.n5.sync.bumlam.com/?src=sape\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/pbd/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"185.131.67.10","port":443,"asn":56630,"as":"Melbikomas UAB","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 18 Jun 2025 16:48:51 GMT","end":"Mon, 20 Jul 2026 16:48:50 GMT"},"fingerprint":{"sha1":"8D:89:EE:F7:48:68:E7:7D:F7:C4:AF:97:AB:98:A3:A3:1E:8D:6A:92","sha256":"08:06:AA:31:11:0F:33:B8:7D:B5:7E:B4:A2:2A:65:C6:77:DE:F6:65:A2:F4:BE:D3:7E:8D:9F:84:17:CE:20:A0"}}},"request":{"raw":"GET /pbd/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1764619468738; user_id=db0ac286-d6bb-4b50-ae85-d9741d68b9a2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-length: 0\r\np3p: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nset-cookie: user_id=db0ac286-d6bb-4b50-ae85-d9741d68b9a2;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\nuser_id-legacy=db0ac286-d6bb-4b50-ae85-d9741d68b9a2;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\r\nlocation: https://1026--db0ac286-d6bb-4b50-ae85-d9741d68b9a2.stbid.ru/?r=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dpbd\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/match?dp=68\u0026euid=NjkyZGY0Y2MwOGQ5OGUxMA%3D%3D","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=68\u0026euid=NjkyZGY0Y2MwOGQ5OGUxMA%3D%3D HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nset-cookie: cSyncDp14v4=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.buzzoola.com/cookiesync/redirect?redirect_url=https%3A%2F%2Fkimberlite.io%2Frtb%2Fsync%2Fbuzzoola%3Fu%3D%24%7BUUID%7D%26f%3Dhttps%253A%252F%252Fwww.acint.net%252Frmatch%253Fdp%253D243%2526euid%253DaS30zcZUEt8%2526r%253Dhttps%25253A%25252F%25252Facint.net%25252Fcmatch%25253Fdp%25253D243%26n%3D1","fqdn":"exchange.buzzoola.com","domain":"buzzoola.com","tld":"com"},"ip":{"addr":"45.138.161.75","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buzzoola.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 14:18:31 GMT","end":"Sun, 04 Jan 2026 14:18:30 GMT"},"fingerprint":{"sha1":"E5:71:B9:31:DB:51:F4:76:FF:21:14:90:EB:54:47:17:13:41:68:37","sha256":"53:82:CA:46:1D:A1:51:03:86:A3:1E:B5:1C:9C:1D:53:3A:22:0F:62:E9:37:B9:4E:6E:08:E5:1D:9F:B5:CF:8A"}}},"request":{"raw":"GET /cookiesync/redirect?redirect_url=https%3A%2F%2Fkimberlite.io%2Frtb%2Fsync%2Fbuzzoola%3Fu%3D%24%7BUUID%7D%26f%3Dhttps%253A%252F%252Fwww.acint.net%252Frmatch%253Fdp%253D243%2526euid%253DaS30zcZUEt8%2526r%253Dhttps%25253A%25252F%25252Facint.net%25252Fcmatch%25253Fdp%25253D243%26n%3D1 HTTP/1.1\r\nHost: exchange.buzzoola.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uuid=77bdc63f-ca35-43d0-46e3-0b14a369a51c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 246\r\nlocation: https://kimberlite.io/rtb/sync/buzzoola?u=77bdc63f-ca35-43d0-46e3-0b14a369a51c\u0026f=https%3A%2F%2Fwww.acint.net%2Frmatch%3Fdp%3D243%26euid%3DaS30zcZUEt8%26r%3Dhttps%253A%252F%252Facint.net%252Fcmatch%253Fdp%253D243\u0026n=1\r\nset-cookie: uuid=77bdc63f-ca35-43d0-46e3-0b14a369a51c; Path=/; Domain=buzzoola.com; Expires=Wed, 31 Dec 2025 20:04:29 GMT; Max-Age=2592000; Secure; SameSite=None\r\nserverid: TODO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pix.bumlam.com/sync/sape/done","fqdn":"pix.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.3","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 15:20:25 GMT","end":"Fri, 02 Jan 2026 15:20:24 GMT"},"fingerprint":{"sha1":"1D:6A:41:31:8B:54:10:85:1C:5D:59:CD:2C:2A:06:C6:67:15:92:6C","sha256":"39:7A:3D:4E:DA:59:64:82:87:68:80:E7:52:EF:C8:E4:2C:E2:B6:6B:7B:5A:6F:C2:72:5D:92:E2:DC:E5:9F:6B"}}},"request":{"raw":"GET /sync/sape/done HTTP/1.1\r\nHost: pix.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: suuid3=IiRmMTZiMTUxOC1jZWYwLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 01 Dec 2025 20:04:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://www.acint.net\r\nAccess-Control-Allow-Credentials: true\r\nTiming-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0, proxy-revalidate, s-maxage=0\r\nPragma: no-cache\r\nExpires: 05-Jun-2005 22:00:00 GMT\r\nX-Xss-Protection: 0\r\nP3P: policyref=\"https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml\", CP=\"CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T04:45:41.790278Z","times_seen":326566,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato%3A300%2C400%2C700%2C900%7CMerriweather%3A400%2C700\u0026ver=6.8.3","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:24.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css?family=Lato%3A300%2C400%2C700%2C900%7CMerriweather%3A400%2C700\u0026ver=6.8.3 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 01 Dec 2025 20:04:25 GMT\r\ndate: Mon, 01 Dec 2025 20:04:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7392,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4df762bcde7cc4a247d0881d207333ac","sha1":"4a6da41525f0d01299dc765829aca047a6fd31bb","sha256":"3dddbbccc681f90fb0b0642b084286c7d6cd2bdff665685f8187147b6d9b00d9","sha512":"374e2356a6a0c4df54b5f2fb67a06e860a49877d24a05abc5da04b7087f1f71c755001801edb58de6785743334313c9742e660067a984d0a5f93cfdb107b00fb","ssdeep":"192:PR6E7nx5u77QidHOd/9dZLdbYdLdHDd/0dZWdbRdv:Ywxs1aA","tlshash":"68e121a1082ba818d7870dc123de3d32ef4f6154a445a575affe18dcbca6c794366b0d","first_seen":"2025-09-17T02:57:47.440078Z","last_seen":"2026-04-03T12:41:10.330133Z","times_seen":239,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":73,"dns":0,"connect":7,"send":0,"wait":19,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/oci.js?t=1764619468299","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:28.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /oci.js?t=1764619468299 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 13 Aug 2025 13:28:32 GMT\r\netag: W/\"689c9300-7dac\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32169,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32168)","md5":"c3fa5133b6899a2abb39fb79ed94300f","sha1":"dc1d5c75420b38cd7509a783ed09345d0ff78ac4","sha256":"66b141eb9ae44c86efc510844a71cf208c02d02abe03af3a7d8cc26736d3e19c","sha512":"db171b491636ef67596c4874d2b3e553eac016e303a713f12eb1e5c5116cab5f5c904b6aaf358268c04011016484b6920b227cf2d72c2de30f79bd16eba59bad","ssdeep":"384:ixcLKIHRnN2xFRhKv3E6mXHHKvaloLG2+KlLqK/CSuxAjUd0jJFKOEyEqWiodJVb:1BHRN6AIeJZKOgIJANJVEEvDHIoOI","tlshash":"64e219ccb2c3b02d0263a9ba047f6046763bbd59250c4883d5bad5d17ca9e5a513bfb8","first_seen":"2023-03-12T19:09:04Z","last_seen":"2026-03-15T10:53:33.326269Z","times_seen":5562,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediatoday.ru/c/m.gif?s=32\u0026id=366\u0026reference=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D366%26euid%3D%7Bvisitor_id%7D","fqdn":"mediatoday.ru","domain":"mediatoday.ru","tld":"ru"},"ip":{"addr":"194.186.91.198","port":443,"asn":3216,"as":"PVimpelCom","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mediatoday.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 09:53:51 GMT","end":"Sun, 08 Feb 2026 09:53:50 GMT"},"fingerprint":{"sha1":"43:56:05:2D:39:36:28:96:AE:74:07:D6:E8:52:76:1A:89:83:A2:81","sha256":"7F:E0:EE:71:80:3C:CB:DE:47:F8:52:85:81:45:A4:6D:94:9D:8A:08:9F:CC:57:C4:F4:70:0C:0B:5D:3F:33:37"}}},"request":{"raw":"GET /c/m.gif?s=32\u0026id=366\u0026reference=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D366%26euid%3D%7Bvisitor_id%7D HTTP/1.1\r\nHost: mediatoday.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-length: 124\r\ncache-control: no-cache, max-age=0, must-revalidate, no-store\r\npragma: no-cache\r\nexpires: Tue, 11 Sep 2001 12:46:00 GMT\r\nset-cookie: idntfy=VUcXlJaAhPInoGs; expires=Thu, 29-Nov-2035 20:04:29 GMT; domain=mediatoday.ru; path=/c/; SameSite=None; Secure\nidntfy=VUcXlJaAhPInoGs; expires=Thu, 29-Nov-2035 20:04:29 GMT; domain=mediatoday.ru; path=/core/; SameSite=None; Secure\nidntfy=deleted; path=/c; domain=mediatoday.ru; expires=Tue, 11 Sep 2001 12:46:00 GMT; SameSite=None; Secure\nidntfy=deleted; path=/core; domain=mediatoday.ru; expires=Tue, 11 Sep 2001 12:46:00 GMT; SameSite=None; Secure\r\nlocation: https://mc.acint.net/match?dp=366\u0026euid=VUcXlJaAhPInoGs\r\nalt-svc: h3=\":443\"; ma=86400,h3-29=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":660,"timings":{"blocked":211,"dns":0,"connect":52,"send":0,"wait":54,"receive":0,"ssl":341},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kimberlite.io/rtb/sync/sape2?u=0600007FCCF42D69C91D157F0296C18F\u0026rc=1","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.86","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 03 Mar 2025 10:28:30 GMT","end":"Sat, 04 Apr 2026 10:28:29 GMT"},"fingerprint":{"sha1":"D5:F7:CA:61:DC:40:4D:B7:43:BC:F1:6F:13:3A:45:A0:D0:53:09:FA","sha256":"BD:79:98:BE:D4:24:4A:51:5B:6D:A8:A1:58:2B:4E:1D:6B:90:66:40:1F:2C:E3:4A:C4:9F:7E:A3:A2:F6:79:12"}}},"request":{"raw":"GET /rtb/sync/sape2?u=0600007FCCF42D69C91D157F0296C18F\u0026rc=1 HTTP/1.1\r\nHost: kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: u=aS30zcZUEt8~MbF3_yclhSqYcMgxwohnMACaYQs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx\r\nDate: Mon, 01 Dec 2025 20:04:29 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: u=aS30zcZUEt8~MbF3_yclhSqYcMgxwohnMACaYQs; path=/; max-age=7776000; samesite=none; httponly; secure\nda=UX4CYAAAAAE; path=/rtb; max-age=604800; samesite=none; httponly; secure\r\nlocation: https://exchange.buzzoola.com/cookiesync/redirect?redirect_url=https%3A%2F%2Fkimberlite.io%2Frtb%2Fsync%2Fbuzzoola%3Fu%3D%24%7BUUID%7D%26f%3Dhttps%253A%252F%252Fwww.acint.net%252Frmatch%253Fdp%253D243%2526euid%253DaS30zcZUEt8%2526r%253Dhttps%25253A%25252F%25252Facint.net%25252Fcmatch%25253Fdp%25253D243%26n%3D1\r\nreferrer-policy: no-referrer\r\nserver-timing: app;srv=s23a;dur=0.0006\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.qtarget.tech/userbind?src=sape\u0026id=0600007FCCF42D69C91D157F0296C18F","fqdn":"match.qtarget.tech","domain":"qtarget.tech","tld":"tech"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.699Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /userbind?src=sape\u0026id=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: match.qtarget.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":7405,"timings":{"blocked":7405,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/image?source=pbd","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"185.131.67.10","port":443,"asn":56630,"as":"Melbikomas UAB","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 18 Jun 2025 16:48:51 GMT","end":"Mon, 20 Jul 2026 16:48:50 GMT"},"fingerprint":{"sha1":"8D:89:EE:F7:48:68:E7:7D:F7:C4:AF:97:AB:98:A3:A3:1E:8D:6A:92","sha256":"08:06:AA:31:11:0F:33:B8:7D:B5:7E:B4:A2:2A:65:C6:77:DE:F6:65:A2:F4:BE:D3:7E:8D:9F:84:17:CE:20:A0"}}},"request":{"raw":"GET /image?source=pbd HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1764619468738; user_id=db0ac286-d6bb-4b50-ae85-d9741d68b9a2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Mon, 01 Dec 2025 20:04:33 GMT\r\ncontent-length: 0\r\nlocation: https://sync.upravel.com/aidata/sync\r\nset-cookie: user_id=db0ac286-d6bb-4b50-ae85-d9741d68b9a2;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\nuser_id-legacy=db0ac286-d6bb-4b50-ae85-d9741d68b9a2;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000\r\np3p: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":3264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/themes/minimalistblogger/css/font-awesome.min.css?ver=6.8.3","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:24.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clubrubionu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 06:29:56 GMT","end":"Wed, 07 Jan 2026 07:27:35 GMT"},"fingerprint":{"sha1":"E6:64:3E:1A:2C:7E:08:E2:16:0D:38:EF:E0:B9:F3:71:31:45:A6:81","sha256":"21:5B:4C:16:EF:1B:9C:AB:20:82:08:CF:EE:F2:33:B9:9A:E8:39:D4:F1:D9:63:77:1B:6D:87:A7:C4:0C:05:76"}}},"request":{"raw":"GET /wp-content/themes/minimalistblogger/css/font-awesome.min.css?ver=6.8.3 HTTP/1.1\r\nHost: clubrubionu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 20:04:25 GMT\r\ncontent-type: text/css\r\ncontent-length: 6658\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 20:04:25 GMT\r\nlast-modified: Thu, 11 Sep 2025 02:11:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TioFwwku%2FqQwT72mgQozJFfrVMsDurxtoaXb4q9NGJsGtBFvXePNZNKz%2Bv7dsUbiD7AEIE4KIrzIK21gkO7lfRZDbfpo9kPxfy5uHFM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a753187be5cb4ed-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-04-04T04:43:00.993903Z","times_seen":236455,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/themes/minimalistblogger/js/navigation.js?ver=20170823","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:24.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clubrubionu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 06:29:56 GMT","end":"Wed, 07 Jan 2026 07:27:35 GMT"},"fingerprint":{"sha1":"E6:64:3E:1A:2C:7E:08:E2:16:0D:38:EF:E0:B9:F3:71:31:45:A6:81","sha256":"21:5B:4C:16:EF:1B:9C:AB:20:82:08:CF:EE:F2:33:B9:9A:E8:39:D4:F1:D9:63:77:1B:6D:87:A7:C4:0C:05:76"}}},"request":{"raw":"GET /wp-content/themes/minimalistblogger/js/navigation.js?ver=20170823 HTTP/1.1\r\nHost: clubrubionu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 20:04:25 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 951\r\nlast-modified: Thu, 11 Sep 2025 02:11:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f8%2Br3B0ZLDlIL0pgPYnJRU3XzjTiqeJZUKK75HQyC7xH3ZbyoTOHHmGupR%2FjoXHR5Kj%2FtQ4BiZjPyiALZ5Vr17gvjNMb%2FRO%2B%2FxHnNLM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9a753187ce63b4ed-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2967,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"49493316c090bb3d7cca5bc09031037c","sha1":"b77b6525d82691c3d4ca05948e846500ea0cb1d3","sha256":"fbc199bf7f97061c41664b040e84616a0cb54441a2efc5801d5d401d3a049f3c","sha512":"1fa1041574393c5693e1303cd1a3361d74c889060a8c13e3a9c7b37cfced7da28ba3e5866e7f59fe8f86d7d74b188305ad457943c1afb45e73fdb0971092aa67","ssdeep":"","tlshash":"c95103c67fcc333b52d6319665ae64ed363c9072da092c26bc79d540289086502befcd","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-04-03T19:33:50.399366Z","times_seen":6768,"resource_available":true,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":502,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adspend.space/sape?uid=0600007FCCF42D69C91D157F0296C18F","fqdn":"sync.adspend.space","domain":"adspend.space","tld":"space"},"ip":{"addr":"5.189.234.227","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adspend.space","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Oct 2025 12:52:42 GMT","end":"Mon, 26 Jan 2026 12:52:41 GMT"},"fingerprint":{"sha1":"AC:B3:38:66:C2:FC:35:EC:DA:72:49:D5:D9:BF:BD:DF:99:F7:6D:B4","sha256":"30:85:8C:F6:1D:73:6D:12:AE:79:49:D8:B6:3A:64:D8:38:8D:53:42:DC:FA:CD:0E:44:44:C9:0C:E6:4A:08:04"}}},"request":{"raw":"GET /sape?uid=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: sync.adspend.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.26.2\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 82\r\nlocation: /check?uid=0600007FCCF42D69C91D157F0296C18F\u0026ssp=%2Fsape\r\nset-cookie: as-user=3f0aacd7-22b7-49bf-b13b-148b3f4d48d6; Path=/; Max-Age=4320000; HttpOnly; Secure; SameSite=None\ncount=1; Path=/; Max-Age=4320000; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, authorization\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.26.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":33,"connect":44,"send":0,"wait":51,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.bumlam.com/?src=sap1\u0026uid=0600007FCCF42D69C91D157F0296C18F","fqdn":"sync.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.147","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 15:20:25 GMT","end":"Fri, 02 Jan 2026 15:20:24 GMT"},"fingerprint":{"sha1":"1D:6A:41:31:8B:54:10:85:1C:5D:59:CD:2C:2A:06:C6:67:15:92:6C","sha256":"39:7A:3D:4E:DA:59:64:82:87:68:80:E7:52:EF:C8:E4:2C:E2:B6:6B:7B:5A:6F:C2:72:5D:92:E2:DC:E5:9F:6B"}}},"request":{"raw":"GET /?src=sap1\u0026uid=0600007FCCF42D69C91D157F0296C18F HTTP/1.1\r\nHost: sync.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Mon, 01 Dec 2025 20:04:28 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: suuid3=IiRmMTZiMTUxOC1jZWYwLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Sun, 26 Nov 2045 20:04:28 GMT; Domain=bumlam.com; SameSite=None; Secure\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nLocation: //sync.bumlam.com/?src=sap1\u0026s_data=CAIQARjM6bfJBmIgMDYwMDAwN0ZDQ0Y0MkQ2OUM5MUQxNTdGMDI5NkMxOEaiARDxaxUYzvAR8IbgACWQwGR8\r\nETag: f16b1518-cef0-11f0-86e0-002590c0647c\r\nCache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":13,"connect":23,"send":0,"wait":27,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match?dp=366\u0026euid=VUcXlJaAhPInoGs","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=366\u0026euid=VUcXlJaAhPInoGs HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468; cSyncDp7v3=1764619469; cSyncDp241v2=1764619469\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T04:45:41.790278Z","times_seen":326566,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match/?dp=361\u0026euid=VUnZUsbWsOWu9RE","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:29.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match/?dp=361\u0026euid=VUnZUsbWsOWu9RE HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468; cSyncDp14v4=1764619468; cSyncDp7v3=1764619469; cSyncDp241v2=1764619469\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T04:45:41.790278Z","times_seen":326566,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clubrubionu.com/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/js/app.js?ver=4.33","fqdn":"clubrubionu.com","domain":"clubrubionu.com","tld":"com"},"ip":{"addr":"104.21.51.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clubrubionu.com/","date":"2025-12-01T20:04:24.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clubrubionu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 06:29:56 GMT","end":"Wed, 07 Jan 2026 07:27:35 GMT"},"fingerprint":{"sha1":"E6:64:3E:1A:2C:7E:08:E2:16:0D:38:EF:E0:B9:F3:71:31:45:A6:81","sha256":"21:5B:4C:16:EF:1B:9C:AB:20:82:08:CF:EE:F2:33:B9:9A:E8:39:D4:F1:D9:63:77:1B:6D:87:A7:C4:0C:05:76"}}},"request":{"raw":"GET /wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/js/app.js?ver=4.33 HTTP/1.1\r\nHost: clubrubionu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clubrubionu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 20:04:25 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4493\r\nlast-modified: Fri, 21 Nov 2025 03:29:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ikaO%2FCl7rhqBrBke%2BM9byUtRW7fuVfmqnCMd1NvqOmCEto3fUOCyrwaSppnT0dC1ahKRV%2BvmgRGRSnMTwg9EX7dOOGE6mL25TQe8mnw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9a753187ce62b4ed-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15549,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15549), with no line terminators","md5":"899fb1750b56d301cd77e110cea475c1","sha1":"0f5979b3054a2688890f364e8211438a26d31750","sha256":"aa8420a697fa16219298c3d1b7ce2dd4836d9212075f457918aaed3c5693ddb0","sha512":"e899e3d8b18b8d385a75a978f6b16384a67914faa4ff3f524f5b0081b973fea79bc78362486f553cc088e46c0b056337066c4c1bf189c0f95e5561a7ae12d60b","ssdeep":"384:RFLvKdqyU+wc+Oy7TyHR39IhYJaU+kURqv7yQO:CUKaSHN9a0aU+kURqDyQO","tlshash":"1d62e69c7224b0f405e709fb41bf236bb1b452feb855806459b09dbc29b8cdf52a1e63","first_seen":"2025-11-21T02:47:00.340893Z","last_seen":"2026-04-03T00:22:03.794251Z","times_seen":694,"resource_available":true,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/rmatch?dp=14\u0026euid=3C03420ACCF42D690D01F05B022F1F22\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D14","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=14\u0026euid=3C03420ACCF42D690D01F05B022F1F22\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D14 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":224,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/match?dp=337\u0026euid=LPTvyZFqR","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.76","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2025-12-01T20:04:28.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=337\u0026euid=LPTvyZFqR HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAABmkt9Mx/FR3Jj8GWArxvy/8VqSGCFiqJDuewqUB2V9m0; test_cookie=CheckForPermission; cSyncDp14v6=1764619468; cSyncDp17v3=1764619468; cSyncDp45v5=1764619468; cSyncDp53v5=1764619468; cSyncDp553=1764619468; cSyncDp62v4=1764619468; cSyncDp67v5=1764619468; cSyncDp68v3=1764619468; cSyncDp71v2=1764619468; cSyncDp85v2=1764619468; cSyncDp95v4=1764619468; cSyncDp98v3=1764619468; cSyncDp104v3=1764619468; cSyncDp107v2=1764619468; cSyncDp125v5=1764619468; cSyncDp126v3=1764619468; cSyncDp129v2=1764619468; cSyncDp136v3=1764619468; cSyncDp148v2=1764619468; cSyncDp149v3=1764619468; cSyncDp151v2=1764619468; cSyncDp251v3=1764619468; cSyncDp186v2=1764619468; cSyncDp217v2=1764619468; cSyncDp226v1=1764619468; cSyncDp239v3=1764619468; cSyncDp243v2=1764619468; cSyncDp260v2=1764619468; cSyncDp244v2=1764619468; cSyncDp248v3=1764619468; cSyncDp261v1=1764619468; cSyncDp264=1764619468; cSyncDp274=1764619468; cSyncDp289v2=1764619468; cSyncDp296v3=1764619468; cSyncDp312v1=1764619468; cSyncDp313v1=1764619468; cSyncDp368v1=1764619468; cSyncDp331v1=1764619468; cSyncDp337v1=1764619468; cSyncDp351v1=1764619468; cSyncDp361v1=1764619468; cSyncDp353v1=1764619468; cSyncDp362v1=1764619468; cSyncDp366v1=1764619468; cSyncDp385v1=1764619468; cSyncDp390v1=1764619468; cSyncDp399v1=1764619468; cSyncDp394v1=1764619468; cSyncDp415v1=1764619468; cSyncDp420v2=1764619468; cSyncDp431=1764619468; cSyncDp433=1764619468; cSyncDp444=1764619468; cSyncDp203v2=1764619468; cSyncDp450=1764619468\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Mon, 01 Dec 2025 20:04:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nset-cookie: cSyncDp14v4=1764619468; expires=Wed, 31-Dec-25 20:04:28 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}