r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7786cd9bd97e024b3a1d16215defaad2
786ddbb74b0b6bd9270622dbe0258d6caee407c1
9c297ccfd178eec7e472fb64a6b2e34d4c7a6dec32870f49982353e590196ba0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C297CCFD178EEC7E472FB64A6B2E34D4C7A6DEC32870F49982353E590196BA0"
Last-Modified: Mon, 14 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4174
Expires: Tue, 15 Nov 2022 06:37:50 GMT
Date: Tue, 15 Nov 2022 05:28:16 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 832aecaba9f06ee2d39d4d4bea65f13c
7195d6ffadfdbc6fc8e92c63ae28d4a3038a72dc
a437509314a97065de6c7b9e5e2b4b61f0234b45f5f5bf2649cbdf499577bfd3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3899
Cache-Control: max-age=108480
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 05:28:16 GMT
Etag: "637218f5-1d7"
Expires: Wed, 16 Nov 2022 11:36:16 GMT
Last-Modified: Mon, 14 Nov 2022 10:31:17 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4736bac84ca28f2b1e961159fb4ea098
1319612979f53896fcfeacd4215c2715d4951e4c
5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 15 Nov 2022 04:44:37 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2619
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c88bc06741ab9fb81c2544acfcc34aa2
362cab19cff5aba27f472cc00071d5dfa38192e4
314ba27975f458e13917b2be91c9d5989a3e57c9e94b5a84dd52d0e21d27ae7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "314BA27975F458E13917B2BE91C9D5989A3E57C9E94B5A84DD52D0E21D27AE7F"
Last-Modified: Mon, 14 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2724
Expires: Tue, 15 Nov 2022 06:13:40 GMT
Date: Tue, 15 Nov 2022 05:28:16 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Xb/NEi5hA+V5e+W0IRZMCXZYftMSsEONLm8P90Q2sIJLlErFeKwlq1WitwJDpwflCHoqgE7O82M=
x-amz-request-id: R537XVN8GXK693D6
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 15 Nov 2022 05:14:08 GMT
age: 848
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
www.ladylib.net/js_scripti/style.js
193.111.63.132200 OK 1.2 kB URL HTTP/1.1 www.ladylib.net/js_scripti/style.js
IP 193.111.63.132:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
Hash 07a7990deff274ac2e0d7328c37d519c
7953247f124648f98ca4f8695cd62ff2c66a1b8f
f72e65d1cfc6866aee2a423926f98139103b0ee4aacf771a4d6d85e91f47f147
GET /js_scripti/style.js HTTP/1.1
Host: www.ladylib.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ladylib.net/sovrem_romani.php
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 05:28:16 GMT
Server: Apache/2.2.31 (Unix)
Last-Modified: Wed, 27 Mar 2013 23:55:57 GMT
ETag: "55253d2-4d4-4d8f0c7761d40"
Accept-Ranges: bytes
Content-Length: 1236
Connection: close
Content-Type: application/javascript
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 05:28:16 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.ladylib.net/image/torch.gif
193.111.63.132200 OK 13 kB URL HTTP/1.1 www.ladylib.net/image/torch.gif
IP 193.111.63.132:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type GIF image data, version 89a, 65 x 128\012- data
Hash 2d47f3b35f94793efedfceb9a6211ca7
1e99073daf24996eb96479b2017b07d7b4437493
c9fede383eddc8d8b0cae5e30b380b3c18c853714ce1387ab55105515db37b78
GET /image/torch.gif HTTP/1.1
Host: www.ladylib.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ladylib.net/sovrem_romani.php
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 05:28:16 GMT
Server: Apache/2.2.31 (Unix)
Last-Modified: Sun, 03 Jan 2010 08:39:36 GMT
ETag: "55253b2-32f5-47c3e8b6f8200"
Accept-Ranges: bytes
Content-Length: 13045
Connection: close
Content-Type: image/gif
X-Pad: avoid browser bug
ladylib.net/Style/main.css
193.111.63.132200 OK 11 kB URL HTTP/1.1 ladylib.net/Style/main.css
IP 193.111.63.132:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
Hash ac1eec09ec3f07eaa9021d1cf9a7fc98
38df529f4c8675acdd128fc9d71da6c50f50caa2
d32b23eb5b0ec407bce289e31760c637d9da71724006e4c792cc59d7681229a0
GET /Style/main.css HTTP/1.1
Host: ladylib.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ladylib.net/
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 05:28:16 GMT
Server: Apache/2.2.31 (Unix)
Last-Modified: Fri, 19 Jun 2020 08:22:18 GMT
ETag: "54e094a-2c83-5a86b975d6280"
Accept-Ranges: bytes
Content-Length: 11395
Connection: close
Content-Type: text/css
ladylib.net/image/zekotum63.jpg
193.111.63.132200 OK 6.7 kB URL HTTP/1.1 ladylib.net/image/zekotum63.jpg
IP 193.111.63.132:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash 1b9ca8d29371487ab14e64630998153b
401b72f95be6452bc5a3d4b2afee22f9ee454c28
ad3a0cccc96de8e1c6e6513d39671600a234cf6a7660f240873281295f8ee2e4
GET /image/zekotum63.jpg HTTP/1.1
Host: ladylib.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ladylib.net/Style/main.css
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 05:28:16 GMT
Server: Apache/2.2.31 (Unix)
Last-Modified: Fri, 12 Feb 2010 16:45:30 GMT
ETag: "55253b6-1a46-47f69fecd3e80"
Accept-Ranges: bytes
Content-Length: 6726
Connection: close
Content-Type: image/jpeg
X-Pad: avoid browser bug
ladylib.net/image/asf.gif
193.111.63.132200 OK 12 kB URL HTTP/1.1 ladylib.net/image/asf.gif
IP 193.111.63.132:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type GIF image data, version 89a, 300 x 165\012- data
Hash dc15bf1091025e8ce7c643020f2eb26a
908f81eb3b144dc88ba2887ed09ef78f7108019d
87e38492bcce83e68f42cc2f49518890737e66ed311e62732332086561c807c5
GET /image/asf.gif HTTP/1.1
Host: ladylib.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ladylib.net/Style/main.css
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 05:28:16 GMT
Server: Apache/2.2.31 (Unix)
Last-Modified: Sun, 07 Feb 2010 09:15:11 GMT
ETag: "5525352-2ce8-47eff1f2325c0"
Accept-Ranges: bytes
Content-Length: 11496
Connection: close
Content-Type: image/gif
X-Pad: avoid browser bug
ladylib.net/image/embl.gif
193.111.63.132200 OK 6.5 kB URL HTTP/1.1 ladylib.net/image/embl.gif
IP 193.111.63.132:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type GIF image data, version 89a, 300 x 160\012- data
Hash 7d7ce27a9f90f477ab657013928b086e
7d3f092694d1ef569e9912be7d1a1b70195f7fb7
bbb0e9f85d6ac38667c1b0a19b41889a32a7747812075599568730430ad47193
GET /image/embl.gif HTTP/1.1
Host: ladylib.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ladylib.net/Style/main.css
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 05:28:16 GMT
Server: Apache/2.2.31 (Unix)
Last-Modified: Thu, 25 Feb 2010 17:27:28 GMT
ETag: "552536c-1958-4807018d2c000"
Accept-Ranges: bytes
Content-Length: 6488
Connection: close
Content-Type: image/gif
ladylib.net/image/bord_acanthus.gif
193.111.63.132200 OK 7.4 kB URL HTTP/1.1 ladylib.net/image/bord_acanthus.gif
IP 193.111.63.132:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type GIF image data, version 89a, 240 x 240\012- data
Hash b56b5e0212ab2827d29d1f89d14423af
3e5e44473d2225ea98f540471f63573585957150
b4ee58c9962c50d7da0f9d76ca41acabfdc05de61e1c8714b48aa17dfd391b39
GET /image/bord_acanthus.gif HTTP/1.1
Host: ladylib.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ladylib.net/Style/main.css
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 05:28:16 GMT
Server: Apache/2.2.31 (Unix)
Last-Modified: Thu, 09 Jun 2011 03:37:54 GMT
ETag: "5525359-1d02-4a53f2da2a880"
Accept-Ranges: bytes
Content-Length: 7426
Connection: close
Content-Type: image/gif
ladylib.net/image/park.jpg
193.111.63.132200 OK 30 kB URL HTTP/1.1 ladylib.net/image/park.jpg
IP 193.111.63.132:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1150x330, components 3\012- data
Hash 01bc9dadb9dd7d5237d44bb2fb9a2302
42b38102dfdd2cd1251b7ca3b002951154df1f4c
78a2ba9f0d9c2c5510dbb15171850e922f78e8b6a1bcb74ac1a9e98d3f6df8fb
GET /image/park.jpg HTTP/1.1
Host: ladylib.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ladylib.net/Style/main.css
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 05:28:16 GMT
Server: Apache/2.2.31 (Unix)
Last-Modified: Sun, 03 Jan 2010 08:39:23 GMT
ETag: "552539d-7362-47c3e8aa924c0"
Accept-Ranges: bytes
Content-Length: 29538
Connection: close
Content-Type: image/jpeg
X-Pad: avoid browser bug
ladylib.net/image/knopka.gif
193.111.63.132200 OK 2.3 kB URL HTTP/1.1 ladylib.net/image/knopka.gif
IP 193.111.63.132:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type GIF image data, version 89a, 190 x 32\012- data
Hash d74518a3527ecbfebd6fe33a5d735a54
4bdade410d773d0d76d9fa98348a7713aaa6bc3f
d5c6073f9b2f8eb9dc0918c2620fdf24b4998bc1aa8baf412e200b6c4871a5f7
GET /image/knopka.gif HTTP/1.1
Host: ladylib.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ladylib.net/Style/main.css
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 05:28:16 GMT
Server: Apache/2.2.31 (Unix)
Last-Modified: Sun, 03 Jan 2010 08:39:17 GMT
ETag: "5525386-8eb-47c3e8a4d9740"
Accept-Ranges: bytes
Content-Length: 2283
Connection: close
Content-Type: image/gif
ladylib.net/image/lady.png
193.111.63.132200 OK 80 kB URL HTTP/1.1 ladylib.net/image/lady.png
IP 193.111.63.132:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type PNG image data, 491 x 451, 8-bit colormap, non-interlaced\012- data
Hash b9597e14b1da9608cf2fcc8fe17aa743
36da1d7caf78b1e061e5bd67151247eb52ea8ad9
a9d9de57aa8137d7a85c9d2e71686fd77edf42c3942b4e16500ab10249e65849
GET /image/lady.png HTTP/1.1
Host: ladylib.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ladylib.net/Style/main.css
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 05:28:16 GMT
Server: Apache/2.2.31 (Unix)
Last-Modified: Fri, 08 Jan 2010 08:02:52 GMT
ETag: "5525395-13a22-47ca29d460300"
Accept-Ranges: bytes
Content-Length: 80418
Connection: close
Content-Type: image/png
X-Pad: avoid browser bug
www.ladylib.net/sovrem_romani.php
193.111.63.132200 OK 118 kB URL HTTP/1.1 www.ladylib.net/sovrem_romani.php
IP 193.111.63.132:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Non-ISO extended-ASCII text, with very long lines (44011), with LF, NEL line terminators
Size 118 kB (117546 bytes)
Hash 1c4b14b65b9621b91924d3055ea4b030
77f66f68b167e416eb21e4d43e91c63692b9ee50
a7d2a385c22e37466c5785b265369486ed618a2ec1f744cc6fd4b5096040b374
GET /sovrem_romani.php HTTP/1.1
Host: www.ladylib.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 05:28:15 GMT
Server: Apache/2.2.31 (Unix)
X-Powered-By: PHP/5.3.29
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1251
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Cache-Control, Pragma, Retry-After, ETag, Alert, Expires, Backoff, Content-Type, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 15 Nov 2022 05:25:01 GMT
cache-control: public,max-age=3600
age: 195
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ddnk.advertur.ru/v1/s/loader.js
88.99.165.109200 OK 4.0 kB URL HTTP/1.1 ddnk.advertur.ru/v1/s/loader.js
IP 88.99.165.109:0
ASN #24940 Hetzner Online GmbH
Hash 5910531e7309d3485afcd13cce8ac624
637f217ace623afee8e3c8f2a1933d558575846d
26a0b97ae7dacb47edeae029e6ab53adf0181f4d3faa515b99d64a5904401348
GET /v1/s/loader.js HTTP/1.1
Host: ddnk.advertur.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ladylib.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 05:28:16 GMT
Content-Type: application/javascript;charset=UTF-8
Content-Length: 4041
Connection: keep-alive
Access-Control-Allow-Origin: *
Expires: Tue, 15 Nov 2022 05:29:16 GMT
Cache-Control: public, max-age=60
ETag: "aa099a07b27ee5dd29f708309442592e4ef3b318eed63969d7e43c21af043dbc"
Last-Modified: Mon, 27 Sep 2021 09:24:47 GMT
Content-Encoding: gzip
X-Powered-By: React/alpha
ladylib.net/image/bra.gif
193.111.63.132200 OK 7.9 kB URL HTTP/1.1 ladylib.net/image/bra.gif
IP 193.111.63.132:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type GIF image data, version 89a, 300 x 120\012- data
Hash 4d4beae9ff98755154f096b97902ed4f
ebaccc18cdec2a8be1ea3f129d9bf191e200f7dd
578b200e95e85c291f83f27d3568acedf78d688e352e98c66a8ff1e9a448dde4
GET /image/bra.gif HTTP/1.1
Host: ladylib.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ladylib.net/Style/main.css
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 05:28:16 GMT
Server: Apache/2.2.31 (Unix)
Last-Modified: Fri, 08 Jan 2010 08:07:00 GMT
ETag: "5525364-1ec3-47ca2ac0e3100"
Accept-Ranges: bytes
Content-Length: 7875
Connection: close
Content-Type: image/gif
www.directadvert.ru/show.cgi?adp=45120&div=DIV_DA_45120
85.17.178.17301 Moved Permanently 162 B URL HTTP/1.1 www.directadvert.ru/show.cgi?adp=45120&div=DIV_DA_45120
IP 85.17.178.17:0
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /show.cgi?adp=45120&div=DIV_DA_45120 HTTP/1.1
Host: www.directadvert.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ladylib.net/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 15 Nov 2022 05:28:16 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://www.directadvert.ru/show.cgi?adp=45120&div=DIV_DA_45120
pwhukl.com/x921l7291ilv/0pm/30yq8h/867qvu867ykp678zf.php
62.76.25.28200 OK 23 kB URL HTTP/1.1 pwhukl.com/x921l7291ilv/0pm/30yq8h/867qvu867ykp678zf.php
IP 62.76.25.28:0
File type Unicode text, UTF-8 text, with very long lines (50460)
Hash b2c2c9729bd24b4594cc6c675aeaa02c
04d9ffb2bbe26ca1dd591268d806a6692e569476
b65cc18990f21cf8b55bec7ec5a2b70d014ab66a0e56d99b01b234dfbf11281b
GET /x921l7291ilv/0pm/30yq8h/867qvu867ykp678zf.php HTTP/1.1
Host: pwhukl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ladylib.net/
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Tue, 15 Nov 2022 05:28:16 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 22828
Last-Modified: Wed, 02 Nov 2022 09:55:51 GMT
Connection: keep-alive
ETag: "63623ea7-592c"
Content-Encoding: gzip
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 35dc952e23dbe80a33f909c4540387c6
3a5832b5b1eb3f54f9107bf15b74ce67b3cbdc3f
b3858eb7aa90c8e9c38b73eafcfa2b920e7c2c8a22df3318acd4e631630a9642
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B3858EB7AA90C8E9C38B73EAFCFA2B920E7C2C8A22DF3318ACD4E631630A9642"
Last-Modified: Sun, 13 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2143
Expires: Tue, 15 Nov 2022 06:03:59 GMT
Date: Tue, 15 Nov 2022 05:28:16 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 103a84487c622ef500c42724b4c67a60
ae097d478f4010281f15016efe8fafaea644a279
cd45a783a32adb200cac1b8e7f28b2cba50a14b067237ec1c40a0ce214dedc84
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CD45A783A32ADB200CAC1B8E7F28B2CBA50A14B067237EC1C40A0CE214DEDC84"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7645
Expires: Tue, 15 Nov 2022 07:35:41 GMT
Date: Tue, 15 Nov 2022 05:28:16 GMT
Connection: keep-alive
www.directadvert.ru/show.cgi?adp=45120&div=DIV_DA_45120
85.17.178.17301 Moved Permanently 162 B URL HTTP/2 www.directadvert.ru/show.cgi?adp=45120&div=DIV_DA_45120
IP 85.17.178.17:0
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /show.cgi?adp=45120&div=DIV_DA_45120 HTTP/1.1
Host: www.directadvert.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ladylib.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 15 Nov 2022 05:28:16 GMT
content-type: text/html
content-length: 162
location: https://code.directadvert.ru/show.cgi?adp=45120&div=DIV_DA_45120
set-cookie: nid=VRGyEWNzI3B58RU/A188Ag==; expires=Wed, 15-Nov-23 05:28:16 GMT; domain=directadvert.ru; path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 3200044057cb585f1a435c0efece61c8
8305d5b5891288aa9996b4b4ca6fce2265413194
df45704534a24928e7659a6d8cd1b5ac9ffa9b224b02b34a2d6aed5ef69fd586
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3981
Cache-Control: max-age=103506
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 05:28:16 GMT
Etag: "63720535-1d7"
Expires: Wed, 16 Nov 2022 10:13:22 GMT
Last-Modified: Mon, 14 Nov 2022 09:07:01 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
www.acint.net/aci.js
193.3.184.227200 OK 7.5 kB IP 193.3.184.227:0
File type ASCII text, with very long lines (1408)
Hash ae0aab6c5a2ae2e1168e74f6e6ae4741
2c00f69ee4bbe2ec96c0f7bb33b5f827a6195af8
a47a88a9b6c7635e5074c25c6e3c92f399fdf8772376e94f077167241e59f9de
GET /aci.js HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ladylib.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Tue, 15 Nov 2022 05:28:16 GMT
content-type: application/x-javascript
content-length: 7461
last-modified: Tue, 25 Oct 2022 14:21:14 GMT
etag: "6357f0da-1d25"
content-encoding: gzip
expires: Tue, 15 Nov 2022 17:28:16 GMT
cache-control: max-age=43200
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 1ae644be5170c91cf57f86c4ec381b0a
1fec4507a6d7fa9fa94fb862947415e38b96e59a
a95ebc3562d04face1f3e6f7fde2171c089a4b6cf2c84c70ea9b689b16ff7b4f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A95EBC3562D04FACE1F3E6F7FDE2171C089A4B6CF2C84C70EA9B689B16FF7B4F"
Last-Modified: Mon, 14 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9887
Expires: Tue, 15 Nov 2022 08:13:04 GMT
Date: Tue, 15 Nov 2022 05:28:17 GMT
Connection: keep-alive
code.directadvert.ru/show.cgi?adp=45120&div=DIV_DA_45120
95.168.170.7404 Not Found 0 B URL HTTP/2 code.directadvert.ru/show.cgi?adp=45120&div=DIV_DA_45120
IP 95.168.170.7:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /show.cgi?adp=45120&div=DIV_DA_45120 HTTP/1.1
Host: code.directadvert.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ladylib.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: nginx
date: Tue, 15 Nov 2022 05:28:17 GMT
content-length: 0
set-cookie: nid=X6iqB2NzI3FjyFMhFNcmAg==; expires=Wed, 15-Nov-23 05:28:17 GMT; domain=directadvert.ru; path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
X-Firefox-Spdy: h2
www.acint.net/mc/?dp=10
193.3.184.227302 Moved Temporarily 142 B IP 193.3.184.227:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /mc/?dp=10 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ladylib.net/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Tue, 15 Nov 2022 05:28:17 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/mc/?dp=10
www.acint.net/hit/?v=0.4.0&uid=67846b74-20d3-4104-82e8-9deb959bfd1f&dp=10&tz=%2B00%3A00&nc=01681479&u=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&r=&rs=1280x1024&t=%D0%A1%D0%BE%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%BB%D1%8E%D0%B1%D0%BE%D0%B2%D0%BD%D1%8B%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%20%D0%BD%D0%B0%20%D0%B1%D1%83%D0%BA%D0%B2%D1%83%20%D0%90&oE=1&oP=1&dT=2022-11-15T05%3A28%3A16.849&fu=5058e871-d1b7-4c13-880a-e44003bc3b46
193.3.184.227302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/hit/?v=0.4.0&uid=67846b74-20d3-4104-82e8-9deb959bfd1f&dp=10&tz=%2B00%3A00&nc=01681479&u=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&r=&rs=1280x1024&t=%D0%A1%D0%BE%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%BB%D1%8E%D0%B1%D0%BE%D0%B2%D0%BD%D1%8B%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%20%D0%BD%D0%B0%20%D0%B1%D1%83%D0%BA%D0%B2%D1%83%20%D0%90&oE=1&oP=1&dT=2022-11-15T05%3A28%3A16.849&fu=5058e871-d1b7-4c13-880a-e44003bc3b46
IP 193.3.184.227:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /hit/?v=0.4.0&uid=67846b74-20d3-4104-82e8-9deb959bfd1f&dp=10&tz=%2B00%3A00&nc=01681479&u=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&r=&rs=1280x1024&t=%D0%A1%D0%BE%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%BB%D1%8E%D0%B1%D0%BE%D0%B2%D0%BD%D1%8B%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%20%D0%BD%D0%B0%20%D0%B1%D1%83%D0%BA%D0%B2%D1%83%20%D0%90&oE=1&oP=1&dT=2022-11-15T05%3A28%3A16.849&fu=5058e871-d1b7-4c13-880a-e44003bc3b46 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ladylib.net/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Tue, 15 Nov 2022 05:28:17 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/hit/?v=0.4.0&uid=67846b74-20d3-4104-82e8-9deb959bfd1f&dp=10&tz=%2B00%3A00&nc=01681479&u=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&r=&rs=1280x1024&t=%D0%A1%D0%BE%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%BB%D1%8E%D0%B1%D0%BE%D0%B2%D0%BD%D1%8B%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%20%D0%BD%D0%B0%20%D0%B1%D1%83%D0%BA%D0%B2%D1%83%20%D0%90&oE=1&oP=1&dT=2022-11-15T05%3A28%3A16.849&fu=5058e871-d1b7-4c13-880a-e44003bc3b46
pwhukl.com/v4/render?surfer_uuid=b8d209ef-477d-4266-816f-545730c88ee6&referrer=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&page_load_uuid=8f4fd166-4992-4234-84d7-44ff83975667&page_depth=1&5vbjy8zcbt=f25677e4-c0d2-4d93-973a-68be11442ed2&block_uuid=f25677e4-c0d2-4d93-973a-68be11442ed2&refresh_depth=1&safari_multiple_request=328
62.76.25.28200 OK 3.1 kB URL HTTP/1.1 pwhukl.com/v4/render?surfer_uuid=b8d209ef-477d-4266-816f-545730c88ee6&referrer=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&page_load_uuid=8f4fd166-4992-4234-84d7-44ff83975667&page_depth=1&5vbjy8zcbt=f25677e4-c0d2-4d93-973a-68be11442ed2&block_uuid=f25677e4-c0d2-4d93-973a-68be11442ed2&refresh_depth=1&safari_multiple_request=328
IP 62.76.25.28:0
File type HTML document, Unicode text, UTF-8 text, with very long lines (8416)
Hash 305e0e75a8169f9a78bd88503658946b
85ba08092b7daa17698c007ebd882d686b4ea882
deb1dfc491c8d9d577fb3756cc4cf525336ef8a5b62f0c18e82b05e4c8597bc8
GET /v4/render?surfer_uuid=b8d209ef-477d-4266-816f-545730c88ee6&referrer=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&page_load_uuid=8f4fd166-4992-4234-84d7-44ff83975667&page_depth=1&5vbjy8zcbt=f25677e4-c0d2-4d93-973a-68be11442ed2&block_uuid=f25677e4-c0d2-4d93-973a-68be11442ed2&refresh_depth=1&safari_multiple_request=328 HTTP/1.1
Host: pwhukl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
Origin: http://www.ladylib.net
Connection: keep-alive
Referer: http://www.ladylib.net/
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Tue, 15 Nov 2022 05:28:17 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, private
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Content-Encoding: gzip
ddnk.advertur.ru/v2/sections/info?id%5B%5D=3162&id%5B%5D=122220
88.99.165.109200 OK 135 B URL HTTP/1.1 ddnk.advertur.ru/v2/sections/info?id%5B%5D=3162&id%5B%5D=122220
IP 88.99.165.109:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash 015b84e34110306f3415450787fd5dde
6f02eabea15955b1c761ff2c84578919ee23889e
06b117232aa1798dba7d9081c36e55542aafa0364db038ff086001438d363f90
GET /v2/sections/info?id%5B%5D=3162&id%5B%5D=122220 HTTP/1.1
Host: ddnk.advertur.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://www.ladylib.net
Connection: keep-alive
Referer: http://www.ladylib.net/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 05:28:17 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 135
Connection: keep-alive
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Content-Encoding: gzip
X-Powered-By: React/alpha
www.acint.net/mc/?dp=10
193.3.184.227302 Found 154 B IP 193.3.184.227:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /mc/?dp=10 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ladylib.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: text/html
content-length: 154
location: /mc/?dp=10&tc=1
set-cookie: test_cookie=CheckForPermission; path=/; Secure; SameSite=None; domain=.acint.net; expires=Tue, 15-Nov-22 05:38:17 GMT
aid=CkIDFWNzI3GDUAGmD1zeAgoORRyeWZGUWiz3pmSY0gLf5RLv; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/hit/?v=0.4.0&uid=67846b74-20d3-4104-82e8-9deb959bfd1f&dp=10&tz=%2B00%3A00&nc=01681479&u=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&r=&rs=1280x1024&t=%D0%A1%D0%BE%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%BB%D1%8E%D0%B1%D0%BE%D0%B2%D0%BD%D1%8B%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%20%D0%BD%D0%B0%20%D0%B1%D1%83%D0%BA%D0%B2%D1%83%20%D0%90&oE=1&oP=1&dT=2022-11-15T05%3A28%3A16.849&fu=5058e871-d1b7-4c13-880a-e44003bc3b46
193.3.184.227200 OK 43 B URL HTTP/2 www.acint.net/hit/?v=0.4.0&uid=67846b74-20d3-4104-82e8-9deb959bfd1f&dp=10&tz=%2B00%3A00&nc=01681479&u=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&r=&rs=1280x1024&t=%D0%A1%D0%BE%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%BB%D1%8E%D0%B1%D0%BE%D0%B2%D0%BD%D1%8B%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%20%D0%BD%D0%B0%20%D0%B1%D1%83%D0%BA%D0%B2%D1%83%20%D0%90&oE=1&oP=1&dT=2022-11-15T05%3A28%3A16.849&fu=5058e871-d1b7-4c13-880a-e44003bc3b46
IP 193.3.184.227:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hit/?v=0.4.0&uid=67846b74-20d3-4104-82e8-9deb959bfd1f&dp=10&tz=%2B00%3A00&nc=01681479&u=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&r=&rs=1280x1024&t=%D0%A1%D0%BE%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%BB%D1%8E%D0%B1%D0%BE%D0%B2%D0%BD%D1%8B%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%20%D0%BD%D0%B0%20%D0%B1%D1%83%D0%BA%D0%B2%D1%83%20%D0%90&oE=1&oP=1&dT=2022-11-15T05%3A28%3A16.849&fu=5058e871-d1b7-4c13-880a-e44003bc3b46 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ladylib.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=CkIDE2NzI3GTewFbRLEfAh8eccCGkAZ0CEJW2cF9alQpKlYX; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash b2d6aeeb303eaefc4cc6900e30da3b1b
4c3c027013211aa1b987006d0eb6c72f18c6a657
f542eab7c032d6c5f59710ee8993a01537e0fa2bf3882a6a699de85bba020999
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 05:28:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
44.242.41.15101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.242.41.15:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: gHHg+XgPqwG73x+a3HgdPA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: GI1mI6fZ0m1bX/mVFtz1ViNP7rw=
fonts.googleapis.com/css?family=Roboto:100,200,300,400,500,600,700,800,900
142.250.74.10200 OK 1.3 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto:100,200,300,400,500,600,700,800,900
IP 142.250.74.10:0
Hash 19ae2bacfb3c8408eb12f328070e610f
e3fa6d3aa44e71f7ebebb71278189351d646ead8
481a9f60c22748f1de6a0d22a2ce4195db63c0b616748853681b2c21c17be3cb
GET /css?family=Roboto:100,200,300,400,500,600,700,800,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ladylib.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 15 Nov 2022 05:28:17 GMT
date: Tue, 15 Nov 2022 05:28:17 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dm-eu.hybrid.ai/match?id=106&vid=1303420A712373635B017B93021FB144
37.18.103.22204 No Content 0 B URL HTTP/2 dm-eu.hybrid.ai/match?id=106&vid=1303420A712373635B017B93021FB144
IP 37.18.103.22:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /match?id=106&vid=1303420A712373635B017B93021FB144 HTTP/1.1
Host: dm-eu.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 15 Nov 2022 05:28:17 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
set-cookie: vid=63280fda25439c66874c; expires=Wed, 15 Nov 2023 05:28:16 GMT; domain=.hybrid.ai; path=/; samesite=none
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 521
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: Hybrid Web Server
X-Firefox-Spdy: h2
sync.upravel.com/sape/sync
148.251.236.115302 Found 0 B URL HTTP/2 sync.upravel.com/sape/sync
IP 148.251.236.115:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: image/png
content-length: 0
location: https://sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
set-cookie: session_tptc=1668490097442;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
session_tptc-legacy=1668490097442;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 66c3cf27cf19d3edf4f66c7cfbc2d9df
fc3f9b880465822d5272dc01b1475a87dd106b69
2012d249ac43eda04b72016f939534c152515bbcf15f94ab67e45747b52991f8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5489
Cache-Control: max-age=128416
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 05:28:17 GMT
Etag: "637260a0-118"
Expires: Wed, 16 Nov 2022 17:08:33 GMT
Last-Modified: Mon, 14 Nov 2022 15:37:04 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 280
pwhukl.com/v4/confirm/block?uuid=b9ebea4b-9939-0c8d-d750-e5c8c090faa9
62.76.25.28200 OK 26 B URL HTTP/1.1 pwhukl.com/v4/confirm/block?uuid=b9ebea4b-9939-0c8d-d750-e5c8c090faa9
IP 62.76.25.28:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 1504bb1fa7f0d3488a7858108875057a
9cfc808fef5f280cc9dfe5ca503c57718ff7d9dc
79d733937528a966339f37ccfc9f76b0c22cc03cdb5011925e6fa7db07f93e9a
POST /v4/confirm/block?uuid=b9ebea4b-9939-0c8d-d750-e5c8c090faa9 HTTP/1.1
Host: pwhukl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
Content-Length: 15
Origin: http://www.ladylib.net
Connection: keep-alive
Referer: http://www.ladylib.net/
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Tue, 15 Nov 2022 05:28:17 GMT
Content-Type: application/json
Content-Length: 26
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: *
Access-Control-Allow-Headers: *
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f534a24dc4609c985ab2b3805f1f5a6c
d7126848f8cd4df16bc7df359291e3ca64c88fb0
e348d6c08e05d58c05debee1d88d0c53cbf0b734a151b02af993e2e0663eff9a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E348D6C08E05D58C05DEBEE1D88D0C53CBF0B734A151B02AF993E2E0663EFF9A"
Last-Modified: Sun, 13 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5173
Expires: Tue, 15 Nov 2022 06:54:30 GMT
Date: Tue, 15 Nov 2022 05:28:17 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 7ef13d122ff54d814e5ecc2ef29d3408
100dc2a1329797916209755b1dbfe4594e208ab4
977b16c98a79ee3af1adc11d25863996116994ecf75e9af92d73590416a5112e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2557
Cache-Control: max-age=152828
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 05:28:17 GMT
Etag: "6372cb70-117"
Expires: Wed, 16 Nov 2022 23:55:25 GMT
Last-Modified: Mon, 14 Nov 2022 23:12:48 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279
sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
148.251.236.115302 Found 0 B URL HTTP/2 sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
IP 148.251.236.115:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0 HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: session_tptc=1668490097442
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: image/png
content-length: 0
location: https://61e52ed1-2430-459a-a52b-c9d08bf81423.sync.upravel.com/sape/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyIsImh0dHBzOi8vd3d3LmFjaW50Lm5ldC8iXX19
set-cookie: user_id=61e52ed1-2430-459a-a52b-c9d08bf81423;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
user_id-legacy=61e52ed1-2430-459a-a52b-c9d08bf81423;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
ut.rktch.com/matchspm?pi=1000005&pui=1303420A712373635B017B93021FB144
89.108.97.2302 Found 0 B URL HTTP/1.1 ut.rktch.com/matchspm?pi=1000005&pui=1303420A712373635B017B93021FB144
IP 89.108.97.2:0
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /matchspm?pi=1000005&pui=1303420A712373635B017B93021FB144 HTTP/1.1
Host: ut.rktch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Tue, 15 Nov 2022 05:28:17 GMT
Content-Length: 0
Connection: keep-alive
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
Set-Cookie: b_uid=60c9a927e000b4ea6157e589680cd1b3909b; Max-Age=2592000; Expires=Thu, 15 Dec 2022 05:28:17 GMT; Domain=rktch.com; Secure; SameSite=None
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Access-Control-Allow-Headers: Content-Type, Accept, Authorization
Access-Control-Allow-Credentials: true
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f534a24dc4609c985ab2b3805f1f5a6c
d7126848f8cd4df16bc7df359291e3ca64c88fb0
e348d6c08e05d58c05debee1d88d0c53cbf0b734a151b02af993e2e0663eff9a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E348D6C08E05D58C05DEBEE1D88D0C53CBF0B734A151B02AF993E2E0663EFF9A"
Last-Modified: Sun, 13 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5173
Expires: Tue, 15 Nov 2022 06:54:30 GMT
Date: Tue, 15 Nov 2022 05:28:17 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5ec279fa3b5dd0cead0798de2cd0eb67
f96173f6aace030cf678c1bb98b659224b97014f
362882c9fa1941b1328b9c67e36d0625435a21f3654d57b56ca5bc7e39b08656
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "362882C9FA1941B1328B9C67E36D0625435A21F3654D57B56CA5BC7E39B08656"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10434
Expires: Tue, 15 Nov 2022 08:22:11 GMT
Date: Tue, 15 Nov 2022 05:28:17 GMT
Connection: keep-alive
www.acint.net/mc/?dp=10&tc=1
193.3.184.227200 OK 1.5 kB URL HTTP/2 www.acint.net/mc/?dp=10&tc=1
IP 193.3.184.227:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash d133ee53a9ad22eea63e0c3a6403bfa8
b052be78ef637d42ae2295f0de9b13073b5feb18
e07477d9f518d91af6ee3e16348f812e77de1e03c53157043f4b5fcaab2cb459
GET /mc/?dp=10&tc=1 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ladylib.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2NzI3GTewFbRLEfAh8eccCGkAZ0CEJW2cF9alQpKlYX
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: text/html
set-cookie: cSyncDp7v2=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp14v3=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp17=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp32=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp45v3=1668490097; expires=Wed, 16-Nov-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp53=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp54v2=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp62=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp67v2=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp68=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp71=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp77=1668490097; expires=Tue, 29-Nov-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp84=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp85=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp95v3=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp101=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp104v2=1668490097; expires=Tue, 29-Nov-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp107=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp110=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp111v2=1668490097; expires=Tue, 29-Nov-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp112v2=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp125v2=1668490097; expires=Wed, 30-Nov-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp126=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp127=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp129=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp136v2=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp138=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp144=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp146=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp148=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp149v2=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp151=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp178=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp179=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp186=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp221=1668490097; expires=Thu, 15-Dec-22 05:28:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ec9befeba22dbf834024c8567336a222
b3d95109792dbecda20988d61415f660614b3ad4
f2bd25c759d4c27c17c3e30e6e51f943b28ee7470c394aa6d7ba1ed2eecfe3cd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F2BD25C759D4C27C17C3E30E6E51F943B28EE7470C394AA6D7BA1ED2EECFE3CD"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11014
Expires: Tue, 15 Nov 2022 08:31:51 GMT
Date: Tue, 15 Nov 2022 05:28:17 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 74325552b72dd8944d547ad0d7ad7eb4
95da8359e9d26e54ce736a7d79d2c9138d1e15aa
9a0deb278c322983eef18df87246f60f3718c2acb8dad3adcfbb55c559a6d1fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9A0DEB278C322983EEF18DF87246F60F3718C2ACB8DAD3ADCFBB55C559A6D1FD"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2367
Expires: Tue, 15 Nov 2022 06:07:44 GMT
Date: Tue, 15 Nov 2022 05:28:17 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b78c26866729ac64cc91f08f2f040236
5e7a5e284a80b2a16bddf522d0677bb137a3f75b
e0262420af76132e82462f9ba3bd2c685a913b20ae85b40bf5fc0bc27c38b8bc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E0262420AF76132E82462F9BA3BD2C685A913B20AE85B40BF5FC0BC27C38B8BC"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5996
Expires: Tue, 15 Nov 2022 07:08:13 GMT
Date: Tue, 15 Nov 2022 05:28:17 GMT
Connection: keep-alive
ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
193.3.184.216302 Moved Temporarily 142 B URL HTTP/1.1 ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
IP 193.3.184.216:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Tue, 15 Nov 2022 05:28:17 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/match?dp=14&euid=2B03420A712373631B002171022DF067
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=CkIDK2NzI3FxIQAbZ/AtAg4GpmmqG/kWOOGw+lMtudBr+rzL; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
acint.net/match?dp=110&euid=0d6fdfb095484134b403b76d4c66864b
193.3.184.227200 OK 43 B URL HTTP/2 acint.net/match?dp=110&euid=0d6fdfb095484134b403b76d4c66864b
IP 193.3.184.227:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=110&euid=0d6fdfb095484134b403b76d4c66864b HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2NzI3GTewFbRLEfAh8eccCGkAZ0CEJW2cF9alQpKlYX; cSyncDp7v2=1668490097; cSyncDp14v3=1668490097; cSyncDp17=1668490097; cSyncDp32=1668490097; cSyncDp45v3=1668490097; cSyncDp53=1668490097; cSyncDp54v2=1668490097; cSyncDp62=1668490097; cSyncDp67v2=1668490097; cSyncDp68=1668490097; cSyncDp71=1668490097; cSyncDp77=1668490097; cSyncDp84=1668490097; cSyncDp85=1668490097; cSyncDp95v3=1668490097; cSyncDp101=1668490097; cSyncDp104v2=1668490097; cSyncDp107=1668490097; cSyncDp110=1668490097; cSyncDp111v2=1668490097; cSyncDp112v2=1668490097; cSyncDp125v2=1668490097; cSyncDp126=1668490097; cSyncDp127=1668490097; cSyncDp129=1668490097; cSyncDp136v2=1668490097; cSyncDp138=1668490097; cSyncDp144=1668490097; cSyncDp146=1668490097; cSyncDp148=1668490097; cSyncDp149v2=1668490097; cSyncDp151=1668490097; cSyncDp178=1668490097; cSyncDp179=1668490097; cSyncDp186=1668490097; cSyncDp221=1668490097
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8e361ba61ff763966dc85bc72b986198
5df18e01e56bd0c4b787dd6c22b6b32e669949cd
2d774c9128e5b9e4d386d4aa786e745bc64d82988323e5d331996f0a4028d20e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2D774C9128E5B9E4D386D4AA786E745BC64D82988323E5D331996F0A4028D20E"
Last-Modified: Mon, 14 Nov 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 15 Nov 2022 11:28:17 GMT
Date: Tue, 15 Nov 2022 05:28:17 GMT
Connection: keep-alive
ocsp2.globalsign.com/gsalphasha2g2
151.101.86.133200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP 151.101.86.133:0
Hash b669228a0bbbf1b17f4e581c1f6a29c9
435fdb0c1686afe86f6f9fd4febb91abd099c248
8038da5fab2f8db7bf0f34beb32b6bc2e42667e63b01bf02e893a4a6d7a8ac39
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1423
Server: nginx
Content-Type: application/ocsp-response
Expires: Sat, 19 Nov 2022 04:11:25 GMT
ETag: "435fdb0c1686afe86f6f9fd4febb91abd099c248"
Last-Modified: Tue, 15 Nov 2022 04:11:26 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 15 Nov 2022 05:28:17 GMT
Age: 1008
X-Served-By: cache-qpg1259-QPG, cache-bma1648-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 3, 4
X-Timer: S1668490098.622351,VS0,VE0
stat.adlabs.ru/merge_gpsid/?sid=50&id=1303420A712373635B017B93021FB144
109.248.237.37302 Found 0 B URL HTTP/2 stat.adlabs.ru/merge_gpsid/?sid=50&id=1303420A712373635B017B93021FB144
IP 109.248.237.37:0
ASN #201009 Centre of server systems Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /merge_gpsid/?sid=50&id=1303420A712373635B017B93021FB144 HTTP/1.1
Host: stat.adlabs.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 15 Nov 2022 05:28:17 GMT
content-length: 0
location: //adlmerge.com/merge_gpsid/?sid=50&id=1303420A712373635B017B93021FB144
X-Firefox-Spdy: h2
sync.republer.com/match?dsp=sape
23.88.82.46204 No Content 0 B URL HTTP/2 sync.republer.com/match?dsp=sape
IP 23.88.82.46:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?dsp=sape HTTP/1.1
Host: sync.republer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Tue, 15 Nov 2022 05:28:17 GMT
strict-transport-security: max-age=0
X-Firefox-Spdy: h2
s.uuidksinc.net/match/396/?remote_uid=1303420A712373635B017B93021FB144
31.220.27.134302 Found 0 B URL HTTP/2 s.uuidksinc.net/match/396/?remote_uid=1303420A712373635B017B93021FB144
IP 31.220.27.134:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/396/?remote_uid=1303420A712373635B017B93021FB144 HTTP/1.1
Host: s.uuidksinc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.19.0
date: Tue, 15 Nov 2022 05:28:17 GMT
content-length: 0
location: https://www.acint.net/match?dp=127&euid=w3pAWcudYxXVFV4LPIg5
set-cookie: jcsuuid=w3pAWcudYxXVFV4LPIg5; expires=Wed, 15 Nov 2023 05:28:17 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d4cb4698e29ca6631d0d1a7cea2f25dc
46ad0b7286115d722c306fb05d58d5350cd58582
41b236d593acdeba3513cf70c3db6f4e16f1058fd3b1dc2667d1846448641b9e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41B236D593ACDEBA3513CF70C3DB6F4E16F1058FD3B1DC2667D1846448641B9E"
Last-Modified: Sun, 13 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7045
Expires: Tue, 15 Nov 2022 07:25:42 GMT
Date: Tue, 15 Nov 2022 05:28:17 GMT
Connection: keep-alive
acint.net/match?dp=14&euid=2B03420A712373631B002171022DF067
193.3.184.227200 OK 43 B URL HTTP/2 acint.net/match?dp=14&euid=2B03420A712373631B002171022DF067
IP 193.3.184.227:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=14&euid=2B03420A712373631B002171022DF067 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2NzI3GTewFbRLEfAh8eccCGkAZ0CEJW2cF9alQpKlYX; cSyncDp7v2=1668490097; cSyncDp14v3=1668490097; cSyncDp17=1668490097; cSyncDp32=1668490097; cSyncDp45v3=1668490097; cSyncDp53=1668490097; cSyncDp54v2=1668490097; cSyncDp62=1668490097; cSyncDp67v2=1668490097; cSyncDp68=1668490097; cSyncDp71=1668490097; cSyncDp77=1668490097; cSyncDp84=1668490097; cSyncDp85=1668490097; cSyncDp95v3=1668490097; cSyncDp101=1668490097; cSyncDp104v2=1668490097; cSyncDp107=1668490097; cSyncDp110=1668490097; cSyncDp111v2=1668490097; cSyncDp112v2=1668490097; cSyncDp125v2=1668490097; cSyncDp126=1668490097; cSyncDp127=1668490097; cSyncDp129=1668490097; cSyncDp136v2=1668490097; cSyncDp138=1668490097; cSyncDp144=1668490097; cSyncDp146=1668490097; cSyncDp148=1668490097; cSyncDp149v2=1668490097; cSyncDp151=1668490097; cSyncDp178=1668490097; cSyncDp179=1668490097; cSyncDp186=1668490097; cSyncDp221=1668490097
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1303420A712373635B017B93021FB144
136.243.148.229302 Found 0 B URL HTTP/2 sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1303420A712373635B017B93021FB144
IP 136.243.148.229:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1303420A712373635B017B93021FB144 HTTP/1.1
Host: sync.1dmp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 15 Nov 2022 05:28:17 GMT
content-length: 0
expires: 0
cache-control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
set-cookie: uid=4f5199d0-64a6-11ed-acfd-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Wed, 15 Nov 2023 05:28:17 GMT; SameSite=None; Secure
uid-legacy=4f5199d0-64a6-11ed-acfd-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Wed, 15 Nov 2023 05:28:17 GMT
location: /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1303420A712373635B017B93021FB144&cs=1
X-Firefox-Spdy: h2
sync.dmp.otm-r.com/match/sape?id=1303420A712373635B017B93021FB144
178.63.43.235204 No Content 0 B URL HTTP/2 sync.dmp.otm-r.com/match/sape?id=1303420A712373635B017B93021FB144
IP 178.63.43.235:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=1303420A712373635B017B93021FB144 HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.17.10
date: Tue, 15 Nov 2022 05:28:17 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 818b02c4b252e3e878057cebd5d8e158
6e29b7ef1f6d5f4236c3995f6fb9f55b0777b351
d12087514ebec7e5747099400269d75858f057767da74ca718834ff0e66fb58c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D12087514EBEC7E5747099400269D75858F057767DA74CA718834FF0E66FB58C"
Last-Modified: Sun, 13 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10175
Expires: Tue, 15 Nov 2022 08:17:52 GMT
Date: Tue, 15 Nov 2022 05:28:17 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 6ea606a3c83b6b14b9375c84e37870d8
d73a898c2f3eba8e71d6d4f675c47107df0a5795
0dc0268899f946356be887d4ee84b411136f373200ce90464b331697b6cd9487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 05:28:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash c241bae1117ae62307e229d65090e577
92e1cab11c89109d8da6ce3c79155dff285a3930
c8674f6d41bbd5020d2ebba8381be63f13a6409b1fdb83e8af2f272368cb2980
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 05:28:17 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2022 03:41:05 GMT
Expires: Sat, 19 Nov 2022 03:41:04 GMT
Etag: "92e1cab11c89109d8da6ce3c79155dff285a3930"
Cache-Control: max-age=338566,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76a595263facb4fa-OSL
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.ladylib.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 19:34:08 GMT
expires: Thu, 09 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 467649
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.acint.net/match?dp=127&euid=w3pAWcudYxXVFV4LPIg5
193.3.184.227200 OK 43 B URL HTTP/2 www.acint.net/match?dp=127&euid=w3pAWcudYxXVFV4LPIg5
IP 193.3.184.227:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=127&euid=w3pAWcudYxXVFV4LPIg5 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2NzI3GTewFbRLEfAh8eccCGkAZ0CEJW2cF9alQpKlYX; cSyncDp7v2=1668490097; cSyncDp14v3=1668490097; cSyncDp17=1668490097; cSyncDp32=1668490097; cSyncDp45v3=1668490097; cSyncDp53=1668490097; cSyncDp54v2=1668490097; cSyncDp62=1668490097; cSyncDp67v2=1668490097; cSyncDp68=1668490097; cSyncDp71=1668490097; cSyncDp77=1668490097; cSyncDp84=1668490097; cSyncDp85=1668490097; cSyncDp95v3=1668490097; cSyncDp101=1668490097; cSyncDp104v2=1668490097; cSyncDp107=1668490097; cSyncDp110=1668490097; cSyncDp111v2=1668490097; cSyncDp112v2=1668490097; cSyncDp125v2=1668490097; cSyncDp126=1668490097; cSyncDp127=1668490097; cSyncDp129=1668490097; cSyncDp136v2=1668490097; cSyncDp138=1668490097; cSyncDp144=1668490097; cSyncDp146=1668490097; cSyncDp148=1668490097; cSyncDp149v2=1668490097; cSyncDp151=1668490097; cSyncDp178=1668490097; cSyncDp179=1668490097; cSyncDp186=1668490097; cSyncDp221=1668490097
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 818b02c4b252e3e878057cebd5d8e158
6e29b7ef1f6d5f4236c3995f6fb9f55b0777b351
d12087514ebec7e5747099400269d75858f057767da74ca718834ff0e66fb58c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D12087514EBEC7E5747099400269D75858F057767DA74CA718834FF0E66FB58C"
Last-Modified: Sun, 13 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10175
Expires: Tue, 15 Nov 2022 08:17:52 GMT
Date: Tue, 15 Nov 2022 05:28:17 GMT
Connection: keep-alive
sync.bumlam.com/?src=sap1&uid=1303420A712373635B017B93021FB144
31.172.81.159302 Moved Temporarily 0 B URL HTTP/1.1 sync.bumlam.com/?src=sap1&uid=1303420A712373635B017B93021FB144
IP 31.172.81.159:0
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&uid=1303420A712373635B017B93021FB144 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Tue, 15 Nov 2022 05:28:17 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQ0ZjU3NjBjYy02NGE2LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Mon, 10 Nov 2042 05:28:17 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync.bumlam.com/?src=sap1&s_data=CAIQARjxxsybBmIgMTMwMzQyMEE3MTIzNzM2MzVCMDE3QjkzMDIxRkIxNDSiARBPV2DMZKYR7YbgACWQwGR8
ETag: 4f5760cc-64a6-11ed-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1303420A712373635B017B93021FB144&cs=1
136.243.148.229200 OK 35 B URL HTTP/2 sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1303420A712373635B017B93021FB144&cs=1
IP 136.243.148.229:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1303420A712373635B017B93021FB144&cs=1 HTTP/1.1
Host: sync.1dmp.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: uid=4f5199d0-64a6-11ed-acfd-901b0e8b2a6e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: image/gif
content-length: 35
expires: 0
cache-control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
set-cookie: uid=4f5199d0-64a6-11ed-acfd-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Wed, 15 Nov 2023 05:28:17 GMT; SameSite=None; Secure
uid-legacy=4f5199d0-64a6-11ed-acfd-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Wed, 15 Nov 2023 05:28:17 GMT
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.ladylib.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 18:53:49 GMT
expires: Thu, 09 Nov 2023 18:53:49 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 470068
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
151.101.86.133200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP 151.101.86.133:0
Hash 3a557e19b569a683e353ce7b1087aa07
b9895ff461d928f867358ae526c07f8bcf1252f1
0759c5bf26b2e244c56be85c01e1032362aadf4b3ed4baf83d8a6559b5820383
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1414
Server: nginx
Content-Type: application/ocsp-response
Expires: Sat, 19 Nov 2022 02:27:55 GMT
ETag: "b9895ff461d928f867358ae526c07f8bcf1252f1"
Last-Modified: Tue, 15 Nov 2022 02:27:56 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 15 Nov 2022 05:28:17 GMT
Age: 3597
X-Served-By: cache-qpg1250-QPG, cache-bma1666-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 2, 10
X-Timer: S1668490098.709510,VS0,VE0
pwhukl.com/.cdn/3a8241/d72d18/460043ec5d084ea4a94a989c8a179c76/d0b62e4092af3bf1.jpeg
62.76.25.28200 OK 34 kB URL HTTP/2 pwhukl.com/.cdn/3a8241/d72d18/460043ec5d084ea4a94a989c8a179c76/d0b62e4092af3bf1.jpeg
IP 62.76.25.28:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 250x250, components 3\012- data
Hash d9e5261217c2e82afe17970dbe86e48d
b1a56640f2dc257b3dba9bfc1971a632bda63cef
08fe6172e70fb0bf4e96d907f45c324aa0ca33fe93f1ccce971265db3c93a22f
GET /.cdn/3a8241/d72d18/460043ec5d084ea4a94a989c8a179c76/d0b62e4092af3bf1.jpeg HTTP/1.1
Host: pwhukl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ladylib.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.2
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: image/jpeg
content-length: 33546
last-modified: Fri, 29 Jul 2022 16:22:02 GMT
etag: "62e4092a-830a"
access-control-allow-headers: *
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
116.202.236.171301 Moved Permanently 115 B URL HTTP/2 exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
IP 116.202.236.171:0
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text
Hash 13294bdac85b744895ea411169e566c3
288bef878af5b3a372931d93d9033246895fa0f0
0299ef3ac7aa0e487fcfaf50218c15cb3ca20d44d3ef86780894069d8b857589
GET /cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: text/html; charset=utf-8
content-length: 115
location: https://www.acint.net/match?dp=126&euid=240e005b-2cac-4d29-473d-a063ff834e51
serverid: TODO
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2
216.58.207.195200 OK 9.6 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 9644, version 1.0\012- data
Hash 6f112ec2b932ee12379442c42853244e
b2e73c8c70d6261e1d187f41693c43ac4fe0809d
6a84eeee6a25e7c9a8a03191007a6720566b5a2aa2384d36168fb07f49e97e9e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.ladylib.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9644
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 19:34:41 GMT
expires: Thu, 09 Nov 2023 19:34:41 GMT
cache-control: public, max-age=31536000
age: 467616
last-modified: Wed, 11 May 2022 19:24:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.acint.net/match?dp=129&euid=dc0hdxlh1d
193.3.184.227200 OK 43 B URL HTTP/2 www.acint.net/match?dp=129&euid=dc0hdxlh1d
IP 193.3.184.227:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=129&euid=dc0hdxlh1d HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2NzI3GTewFbRLEfAh8eccCGkAZ0CEJW2cF9alQpKlYX; cSyncDp7v2=1668490097; cSyncDp14v3=1668490097; cSyncDp17=1668490097; cSyncDp32=1668490097; cSyncDp45v3=1668490097; cSyncDp53=1668490097; cSyncDp54v2=1668490097; cSyncDp62=1668490097; cSyncDp67v2=1668490097; cSyncDp68=1668490097; cSyncDp71=1668490097; cSyncDp77=1668490097; cSyncDp84=1668490097; cSyncDp85=1668490097; cSyncDp95v3=1668490097; cSyncDp101=1668490097; cSyncDp104v2=1668490097; cSyncDp107=1668490097; cSyncDp110=1668490097; cSyncDp111v2=1668490097; cSyncDp112v2=1668490097; cSyncDp125v2=1668490097; cSyncDp126=1668490097; cSyncDp127=1668490097; cSyncDp129=1668490097; cSyncDp136v2=1668490097; cSyncDp138=1668490097; cSyncDp144=1668490097; cSyncDp146=1668490097; cSyncDp148=1668490097; cSyncDp149v2=1668490097; cSyncDp151=1668490097; cSyncDp178=1668490097; cSyncDp179=1668490097; cSyncDp186=1668490097; cSyncDp221=1668490097
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash a640af9bcbd470777258b00a9f9016f4
c94a35d08e5c86436b7e4bd2c8c8bcc34a07bc39
a70c7261aadd2712e8e375164230f414366e56287a0b057877d0fa9f4dddce8e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A70C7261AADD2712E8E375164230F414366E56287A0B057877D0FA9F4DDDCE8E"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6819
Expires: Tue, 15 Nov 2022 07:21:56 GMT
Date: Tue, 15 Nov 2022 05:28:17 GMT
Connection: keep-alive
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A58275%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1110%7D&sid=63732371-8872-b01v-g3v6-xy3wrwk0cvom&ref=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&r=1668490098
193.3.184.227200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A58275%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1110%7D&sid=63732371-8872-b01v-g3v6-xy3wrwk0cvom&ref=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&r=1668490098
IP 193.3.184.227:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A58275%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1110%7D&sid=63732371-8872-b01v-g3v6-xy3wrwk0cvom&ref=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&r=1668490098 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ladylib.net/
Cookie: test_cookie=CheckForPermission; aid=CkIDE2NzI3GTewFbRLEfAh8eccCGkAZ0CEJW2cF9alQpKlYX; cSyncDp7v2=1668490097; cSyncDp14v3=1668490097; cSyncDp17=1668490097; cSyncDp32=1668490097; cSyncDp45v3=1668490097; cSyncDp53=1668490097; cSyncDp54v2=1668490097; cSyncDp62=1668490097; cSyncDp67v2=1668490097; cSyncDp68=1668490097; cSyncDp71=1668490097; cSyncDp77=1668490097; cSyncDp84=1668490097; cSyncDp85=1668490097; cSyncDp95v3=1668490097; cSyncDp101=1668490097; cSyncDp104v2=1668490097; cSyncDp107=1668490097; cSyncDp110=1668490097; cSyncDp111v2=1668490097; cSyncDp112v2=1668490097; cSyncDp125v2=1668490097; cSyncDp126=1668490097; cSyncDp127=1668490097; cSyncDp129=1668490097; cSyncDp136v2=1668490097; cSyncDp138=1668490097; cSyncDp144=1668490097; cSyncDp146=1668490097; cSyncDp148=1668490097; cSyncDp149v2=1668490097; cSyncDp151=1668490097; cSyncDp178=1668490097; cSyncDp179=1668490097; cSyncDp186=1668490097; cSyncDp221=1668490097
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
pix.bumlam.com/sync/sape/check?sspuid=1303420A712373635B017B93021FB144
31.172.81.160302 Found 0 B URL HTTP/1.1 pix.bumlam.com/sync/sape/check?sspuid=1303420A712373635B017B93021FB144
IP 31.172.81.160:0
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/sape/check?sspuid=1303420A712373635B017B93021FB144 HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 15 Nov 2022 05:28:17 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://sync.bumlam.com/?src=sape
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 2d622154e450734e642651a2766d369c
dbaea96a1c22c61b47db738a1bb098c00e3fb89b
e156b754dce9fe7fc6844065ce0a09a8b456b78b5774a316e10e243651985874
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E156B754DCE9FE7FC6844065CE0A09A8B456B78B5774A316E10E243651985874"
Last-Modified: Sun, 13 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2635
Expires: Tue, 15 Nov 2022 06:12:12 GMT
Date: Tue, 15 Nov 2022 05:28:17 GMT
Connection: keep-alive
nr.bidderstack.com/sape/cm?user_id=1303420A712373635B017B93021FB144
148.251.217.100200 OK 44 B URL HTTP/1.1 nr.bidderstack.com/sape/cm?user_id=1303420A712373635B017B93021FB144
IP 148.251.217.100:0
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash f9d60352c70a2ba15616d1c9421f3844
e9abc8bea7721a4b6a50295850d13c515006a95c
82cb517a8f80c91dfcec543c6d140deb3baaf463ea9e77655475096eba7bc7d9
GET /sape/cm?user_id=1303420A712373635B017B93021FB144 HTTP/1.1
Host: nr.bidderstack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 05:28:17 GMT
Content-Type: image/gif
Content-Length: 44
Connection: keep-alive
Set-Cookie: uid=47cf8149-b7a2-4542-978c-ccc068d8d1e7; domain=.bidderstack.com; path=/; expires=Wed, 15-Nov-2023 05:28:17 GMT;
Access-Control-Allow-Credentials: true
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A58275%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63732371-8872-b01v-g3v6-xy3wrwk0cvom&ref=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&r=1668490098
193.3.184.227200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A58275%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63732371-8872-b01v-g3v6-xy3wrwk0cvom&ref=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&r=1668490098
IP 193.3.184.227:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A58275%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63732371-8872-b01v-g3v6-xy3wrwk0cvom&ref=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&r=1668490098 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ladylib.net/
Cookie: test_cookie=CheckForPermission; aid=CkIDE2NzI3GTewFbRLEfAh8eccCGkAZ0CEJW2cF9alQpKlYX; cSyncDp7v2=1668490097; cSyncDp14v3=1668490097; cSyncDp17=1668490097; cSyncDp32=1668490097; cSyncDp45v3=1668490097; cSyncDp53=1668490097; cSyncDp54v2=1668490097; cSyncDp62=1668490097; cSyncDp67v2=1668490097; cSyncDp68=1668490097; cSyncDp71=1668490097; cSyncDp77=1668490097; cSyncDp84=1668490097; cSyncDp85=1668490097; cSyncDp95v3=1668490097; cSyncDp101=1668490097; cSyncDp104v2=1668490097; cSyncDp107=1668490097; cSyncDp110=1668490097; cSyncDp111v2=1668490097; cSyncDp112v2=1668490097; cSyncDp125v2=1668490097; cSyncDp126=1668490097; cSyncDp127=1668490097; cSyncDp129=1668490097; cSyncDp136v2=1668490097; cSyncDp138=1668490097; cSyncDp144=1668490097; cSyncDp146=1668490097; cSyncDp148=1668490097; cSyncDp149v2=1668490097; cSyncDp151=1668490097; cSyncDp178=1668490097; cSyncDp179=1668490097; cSyncDp186=1668490097; cSyncDp221=1668490097
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A58275%2C%22sc%22%3A0%2C%22pl%22%3A240532%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63732371-8872-b01v-g3v6-xy3wrwk0cvom&ref=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&r=1668490098
193.3.184.227200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A58275%2C%22sc%22%3A0%2C%22pl%22%3A240532%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63732371-8872-b01v-g3v6-xy3wrwk0cvom&ref=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&r=1668490098
IP 193.3.184.227:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A58275%2C%22sc%22%3A0%2C%22pl%22%3A240532%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63732371-8872-b01v-g3v6-xy3wrwk0cvom&ref=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&r=1668490098 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ladylib.net/
Cookie: test_cookie=CheckForPermission; aid=CkIDE2NzI3GTewFbRLEfAh8eccCGkAZ0CEJW2cF9alQpKlYX; cSyncDp7v2=1668490097; cSyncDp14v3=1668490097; cSyncDp17=1668490097; cSyncDp32=1668490097; cSyncDp45v3=1668490097; cSyncDp53=1668490097; cSyncDp54v2=1668490097; cSyncDp62=1668490097; cSyncDp67v2=1668490097; cSyncDp68=1668490097; cSyncDp71=1668490097; cSyncDp77=1668490097; cSyncDp84=1668490097; cSyncDp85=1668490097; cSyncDp95v3=1668490097; cSyncDp101=1668490097; cSyncDp104v2=1668490097; cSyncDp107=1668490097; cSyncDp110=1668490097; cSyncDp111v2=1668490097; cSyncDp112v2=1668490097; cSyncDp125v2=1668490097; cSyncDp126=1668490097; cSyncDp127=1668490097; cSyncDp129=1668490097; cSyncDp136v2=1668490097; cSyncDp138=1668490097; cSyncDp144=1668490097; cSyncDp146=1668490097; cSyncDp148=1668490097; cSyncDp149v2=1668490097; cSyncDp151=1668490097; cSyncDp178=1668490097; cSyncDp179=1668490097; cSyncDp186=1668490097; cSyncDp221=1668490097
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A58275%2C%22sc%22%3A0%2C%22pl%22%3A240532%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63732371-8872-b01v-g3v6-xy3wrwk0cvom&ref=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&r=1668490098
193.3.184.227200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A58275%2C%22sc%22%3A0%2C%22pl%22%3A240532%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63732371-8872-b01v-g3v6-xy3wrwk0cvom&ref=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&r=1668490098
IP 193.3.184.227:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A58275%2C%22sc%22%3A0%2C%22pl%22%3A240532%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63732371-8872-b01v-g3v6-xy3wrwk0cvom&ref=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&r=1668490098 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ladylib.net/
Cookie: test_cookie=CheckForPermission; aid=CkIDE2NzI3GTewFbRLEfAh8eccCGkAZ0CEJW2cF9alQpKlYX; cSyncDp7v2=1668490097; cSyncDp14v3=1668490097; cSyncDp17=1668490097; cSyncDp32=1668490097; cSyncDp45v3=1668490097; cSyncDp53=1668490097; cSyncDp54v2=1668490097; cSyncDp62=1668490097; cSyncDp67v2=1668490097; cSyncDp68=1668490097; cSyncDp71=1668490097; cSyncDp77=1668490097; cSyncDp84=1668490097; cSyncDp85=1668490097; cSyncDp95v3=1668490097; cSyncDp101=1668490097; cSyncDp104v2=1668490097; cSyncDp107=1668490097; cSyncDp110=1668490097; cSyncDp111v2=1668490097; cSyncDp112v2=1668490097; cSyncDp125v2=1668490097; cSyncDp126=1668490097; cSyncDp127=1668490097; cSyncDp129=1668490097; cSyncDp136v2=1668490097; cSyncDp138=1668490097; cSyncDp144=1668490097; cSyncDp146=1668490097; cSyncDp148=1668490097; cSyncDp149v2=1668490097; cSyncDp151=1668490097; cSyncDp178=1668490097; cSyncDp179=1668490097; cSyncDp186=1668490097; cSyncDp221=1668490097
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mediatoday.ru/core/match.gif?s=32&id=1303420A712373635B017B93021FB144
139.45.228.100200 OK 43 B URL HTTP/2 mediatoday.ru/core/match.gif?s=32&id=1303420A712373635B017B93021FB144
IP 139.45.228.100:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /core/match.gif?s=32&id=1303420A712373635B017B93021FB144 HTTP/1.1
Host: mediatoday.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.2
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: image/gif
content-length: 43
p3p: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
cache-control: no-cache, max-age=0, must-revalidate, no-store
pragma: no-cache
expires: Thursday, 01-Jan-1970 00:00:00 GMT
set-cookie: idntfy=VUlxgZ7iWkYp5qp; expires=Fri, 12-Nov-2032 05:28:18 GMT; domain=mediatoday.ru; path=/core; SameSite=None; Secure
X-Firefox-Spdy: h2
1303420a712373635b017b93021fb144-sp.ops.beeline.ru/p?ssp=sp&id=1303420A712373635B017B93021FB144
37.9.245.57301 Moved Permanently 0 B URL HTTP/2 1303420a712373635b017b93021fb144-sp.ops.beeline.ru/p?ssp=sp&id=1303420A712373635B017B93021FB144
IP 37.9.245.57:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&id=1303420A712373635B017B93021FB144 HTTP/1.1
Host: 1303420a712373635b017b93021fb144-sp.ops.beeline.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 15 Nov 2022 05:28:17 GMT
content-length: 0
location: https://www.acint.net/match?dp=111&euid=d0782e5c-2102-40a6-bff2-b97404616676
access-control-allow-origin: *
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: BeeAID=d0782e5c-2102-40a6-bff2-b97404616676; expires=Mon, 06 Nov 2023 05:28:17 GMT; domain=ops.beeline.ru; path=/; secure; SameSite=None
access-control-allow-credentials: true, true
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS, GET, HEAD, POST, OPTIONS, PUT, DELETE
access-control-allow-headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
x-route: http://upstream_cookiesync
x-host: 192.168.152.34
X-Firefox-Spdy: h2
cs.agency2.ru/p?ssp=sp&uid=1303420A712373635B017B93021FB144
23.111.107.44301 Moved Permanently 0 B URL HTTP/1.1 cs.agency2.ru/p?ssp=sp&uid=1303420A712373635B017B93021FB144
IP 23.111.107.44:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&uid=1303420A712373635B017B93021FB144 HTTP/1.1
Host: cs.agency2.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Date: Tue, 15 Nov 2022 05:28:17 GMT
Content-Length: 0
Connection: keep-alive
Server: fasthttp
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.acint.net/match?dp=186&euid=daa52941-376c-4227-a16d-453d737d4c53
Set-Cookie: uuid=daa52941-376c-4227-a16d-453d737d4c53; expires=Mon, 06 Nov 2023 05:28:17 GMT; domain=agency2.ru; path=/; secure; SameSite=None
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.107.44
www.acint.net/match?dp=126&euid=240e005b-2cac-4d29-473d-a063ff834e51
193.3.184.227200 OK 43 B URL HTTP/2 www.acint.net/match?dp=126&euid=240e005b-2cac-4d29-473d-a063ff834e51
IP 193.3.184.227:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=126&euid=240e005b-2cac-4d29-473d-a063ff834e51 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2NzI3GTewFbRLEfAh8eccCGkAZ0CEJW2cF9alQpKlYX; cSyncDp7v2=1668490097; cSyncDp14v3=1668490097; cSyncDp17=1668490097; cSyncDp32=1668490097; cSyncDp45v3=1668490097; cSyncDp53=1668490097; cSyncDp54v2=1668490097; cSyncDp62=1668490097; cSyncDp67v2=1668490097; cSyncDp68=1668490097; cSyncDp71=1668490097; cSyncDp77=1668490097; cSyncDp84=1668490097; cSyncDp85=1668490097; cSyncDp95v3=1668490097; cSyncDp101=1668490097; cSyncDp104v2=1668490097; cSyncDp107=1668490097; cSyncDp110=1668490097; cSyncDp111v2=1668490097; cSyncDp112v2=1668490097; cSyncDp125v2=1668490097; cSyncDp126=1668490097; cSyncDp127=1668490097; cSyncDp129=1668490097; cSyncDp136v2=1668490097; cSyncDp138=1668490097; cSyncDp144=1668490097; cSyncDp146=1668490097; cSyncDp148=1668490097; cSyncDp149v2=1668490097; cSyncDp151=1668490097; cSyncDp178=1668490097; cSyncDp179=1668490097; cSyncDp186=1668490097; cSyncDp221=1668490097
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 66c3cf27cf19d3edf4f66c7cfbc2d9df
fc3f9b880465822d5272dc01b1475a87dd106b69
2012d249ac43eda04b72016f939534c152515bbcf15f94ab67e45747b52991f8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5489
Cache-Control: max-age=128416
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 05:28:17 GMT
Etag: "637260a0-118"
Expires: Wed, 16 Nov 2022 17:08:33 GMT
Last-Modified: Mon, 14 Nov 2022 15:37:04 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 280
sync.bumlam.com/?src=sap1&s_data=CAIQARjxxsybBmIgMTMwMzQyMEE3MTIzNzM2MzVCMDE3QjkzMDIxRkIxNDSiARBPV2DMZKYR7YbgACWQwGR8
31.172.81.159200 OK 0 B URL HTTP/1.1 sync.bumlam.com/?src=sap1&s_data=CAIQARjxxsybBmIgMTMwMzQyMEE3MTIzNzM2MzVCMDE3QjkzMDIxRkIxNDSiARBPV2DMZKYR7YbgACWQwGR8
IP 31.172.81.159:0
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&s_data=CAIQARjxxsybBmIgMTMwMzQyMEE3MTIzNzM2MzVCMDE3QjkzMDIxRkIxNDSiARBPV2DMZKYR7YbgACWQwGR8 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQ0ZjU3NjBjYy02NGE2LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 05:28:17 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQ0ZjU3NjBjYy02NGE2LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Mon, 10 Nov 2042 05:28:17 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 725a83036276757502ea4e44fefcb102
e156d6f44af256ff6fc2ae96ed46320a250d0822
592954d0c271743fcef99d68919e6681218a6a5b6e565bd60fc48fd213e99bc0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "592954D0C271743FCEF99D68919E6681218A6A5B6E565BD60FC48FD213E99BC0"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6741
Expires: Tue, 15 Nov 2022 07:20:38 GMT
Date: Tue, 15 Nov 2022 05:28:17 GMT
Connection: keep-alive
match.new-programmatic.com/userbind?src=sape&id=1303420A712373635B017B93021FB144
217.65.2.150204 No Content 0 B URL HTTP/1.1 match.new-programmatic.com/userbind?src=sape&id=1303420A712373635B017B93021FB144
IP 217.65.2.150:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=sape&id=1303420A712373635B017B93021FB144 HTTP/1.1
Host: match.new-programmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0
Date: Tue, 15 Nov 2022 05:28:17 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 156ad8e1174773f87b5b6821be9256f8
20bd5d54ef8f07fa8d068bf01a3e692b128161e9
035a419aaddb68258536627fb18780163f4405431f3540130742bab5fe3607a0
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 05:28:17 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 13 Nov 2022 11:26:45 GMT
Expires: Sun, 20 Nov 2022 11:26:44 GMT
Etag: "20bd5d54ef8f07fa8d068bf01a3e692b128161e9"
Cache-Control: max-age=452906,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76a59526e81cb4fa-OSL
www.acint.net/match?dp=186&euid=daa52941-376c-4227-a16d-453d737d4c53
193.3.184.227200 OK 43 B URL HTTP/2 www.acint.net/match?dp=186&euid=daa52941-376c-4227-a16d-453d737d4c53
IP 193.3.184.227:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=186&euid=daa52941-376c-4227-a16d-453d737d4c53 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2NzI3GTewFbRLEfAh8eccCGkAZ0CEJW2cF9alQpKlYX; cSyncDp7v2=1668490097; cSyncDp14v3=1668490097; cSyncDp17=1668490097; cSyncDp32=1668490097; cSyncDp45v3=1668490097; cSyncDp53=1668490097; cSyncDp54v2=1668490097; cSyncDp62=1668490097; cSyncDp67v2=1668490097; cSyncDp68=1668490097; cSyncDp71=1668490097; cSyncDp77=1668490097; cSyncDp84=1668490097; cSyncDp85=1668490097; cSyncDp95v3=1668490097; cSyncDp101=1668490097; cSyncDp104v2=1668490097; cSyncDp107=1668490097; cSyncDp110=1668490097; cSyncDp111v2=1668490097; cSyncDp112v2=1668490097; cSyncDp125v2=1668490097; cSyncDp126=1668490097; cSyncDp127=1668490097; cSyncDp129=1668490097; cSyncDp136v2=1668490097; cSyncDp138=1668490097; cSyncDp144=1668490097; cSyncDp146=1668490097; cSyncDp148=1668490097; cSyncDp149v2=1668490097; cSyncDp151=1668490097; cSyncDp178=1668490097; cSyncDp179=1668490097; cSyncDp186=1668490097; cSyncDp221=1668490097
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 6ea606a3c83b6b14b9375c84e37870d8
d73a898c2f3eba8e71d6d4f675c47107df0a5795
0dc0268899f946356be887d4ee84b411136f373200ce90464b331697b6cd9487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 05:28:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sync.bumlam.com/?src=sape
31.172.81.159302 Moved Temporarily 0 B URL HTTP/1.1 sync.bumlam.com/?src=sape
IP 31.172.81.159:0
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sape HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQ0ZjU3NjBjYy02NGE2LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Tue, 15 Nov 2022 05:28:17 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQ0ZjU3NjBjYy02NGE2LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Mon, 10 Nov 2042 05:28:17 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: https://pix.bumlam.com/sync/sape/sync_ok?guid=4f5760cc-64a6-11ed-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
Access-Control-Allow-Origin: https://acint.net
Access-Control-Allow-Credentials: true
www.acint.net/match?dp=111&euid=d0782e5c-2102-40a6-bff2-b97404616676
193.3.184.227200 OK 43 B URL HTTP/2 www.acint.net/match?dp=111&euid=d0782e5c-2102-40a6-bff2-b97404616676
IP 193.3.184.227:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=111&euid=d0782e5c-2102-40a6-bff2-b97404616676 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2NzI3GTewFbRLEfAh8eccCGkAZ0CEJW2cF9alQpKlYX; cSyncDp7v2=1668490097; cSyncDp14v3=1668490097; cSyncDp17=1668490097; cSyncDp32=1668490097; cSyncDp45v3=1668490097; cSyncDp53=1668490097; cSyncDp54v2=1668490097; cSyncDp62=1668490097; cSyncDp67v2=1668490097; cSyncDp68=1668490097; cSyncDp71=1668490097; cSyncDp77=1668490097; cSyncDp84=1668490097; cSyncDp85=1668490097; cSyncDp95v3=1668490097; cSyncDp101=1668490097; cSyncDp104v2=1668490097; cSyncDp107=1668490097; cSyncDp110=1668490097; cSyncDp111v2=1668490097; cSyncDp112v2=1668490097; cSyncDp125v2=1668490097; cSyncDp126=1668490097; cSyncDp127=1668490097; cSyncDp129=1668490097; cSyncDp136v2=1668490097; cSyncDp138=1668490097; cSyncDp144=1668490097; cSyncDp146=1668490097; cSyncDp148=1668490097; cSyncDp149v2=1668490097; cSyncDp151=1668490097; cSyncDp178=1668490097; cSyncDp179=1668490097; cSyncDp186=1668490097; cSyncDp221=1668490097
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash ffcbc400cfe4d5d90c1e6425348fbf0a
a16eb4ea13120daea50ac97eada876fa0423c30e
af611e171bf08954d343902af7c0115ca21e4b33e605dfd475e02e4adda17670
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6331
Cache-Control: max-age=141826
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 05:28:17 GMT
Etag: "637291b8-117"
Expires: Wed, 16 Nov 2022 20:52:03 GMT
Last-Modified: Mon, 14 Nov 2022 19:06:32 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279
counter.yadro.ru/hit?t38.6;r;s1280*1024*24;uhttp%3A//www.ladylib.net/sovrem_romani.php;0.6101817540932092
88.212.202.52302 Moved Temporarily 32 B URL HTTP/1.1 counter.yadro.ru/hit?t38.6;r;s1280*1024*24;uhttp%3A//www.ladylib.net/sovrem_romani.php;0.6101817540932092
IP 88.212.202.52:0
ASN #39134 United Network LLC
File type HTML document, ASCII text
Hash 3e9c09a8c5a87f266e047a596f48578c
07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
GET /hit?t38.6;r;s1280*1024*24;uhttp%3A//www.ladylib.net/sovrem_romani.php;0.6101817540932092 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ladylib.net/
HTTP/1.1 302 Moved Temporarily
Date: Tue, 15 Nov 2022 05:28:17 GMT
Server: 0W/0.8c
Content-Type: text/html
Location: https://counter.yadro.ru/hit?t38.6;r;s1280*1024*24;uhttp%3A//www.ladylib.net/sovrem_romani.php;0.6101817540932092
Content-Length: 32
Expires: Sun, 14 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
dmp.gotechnology.io/match/sape?id=1303420A712373635B017B93021FB144
142.132.209.138302 Found 0 B URL HTTP/2 dmp.gotechnology.io/match/sape?id=1303420A712373635B017B93021FB144
IP 142.132.209.138:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=1303420A712373635B017B93021FB144 HTTP/1.1
Host: dmp.gotechnology.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 15 Nov 2022 05:28:17 GMT
content-length: 0
location: https://dmp.gotechnology.io/match/sape?id=1303420A712373635B017B93021FB144&chk=1
set-cookie: chk=1; path=/; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash ffcbc400cfe4d5d90c1e6425348fbf0a
a16eb4ea13120daea50ac97eada876fa0423c30e
af611e171bf08954d343902af7c0115ca21e4b33e605dfd475e02e4adda17670
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6331
Cache-Control: max-age=141826
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 05:28:17 GMT
Etag: "637291b8-117"
Expires: Wed, 16 Nov 2022 20:52:03 GMT
Last-Modified: Mon, 14 Nov 2022 19:06:32 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279
ocsp.globalsign.com/gseccovsslca2018
151.101.86.133200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 151.101.86.133:0
Hash 87b6eb69224b7cb0d8b1873cc4137a7c
e33ff7dc5092ee47527ed58d5be7706cd567becc
9688a0edbdb30b522a87669ee618468f29913b4d7b3b805ebf326cad988ec4a5
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 938
Server: nginx
Content-Type: application/ocsp-response
Expires: Sat, 19 Nov 2022 01:44:01 GMT
ETag: "e33ff7dc5092ee47527ed58d5be7706cd567becc"
Last-Modified: Tue, 15 Nov 2022 01:44:02 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 15 Nov 2022 05:28:17 GMT
Age: 2809
X-Served-By: cache-qpg1244-QPG, cache-bma1666-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 96
X-Timer: S1668490098.849731,VS0,VE0
www.ladylib.net/favicon.ico
193.111.63.132200 OK 894 B URL HTTP/1.1 www.ladylib.net/favicon.ico
IP 193.111.63.132:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel\012- data
Hash 67f105a90d10cc032fa036c0558e15ec
cb573bc309553505e697280f27576875343a65a3
7174caf1751fd43edf670a059456aab2e3ecbb2acfc472e6c0257d09bb070a9c
GET /favicon.ico HTTP/1.1
Host: www.ladylib.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ladylib.net/sovrem_romani.php
Cookie: surfer_uuid=b8d209ef-477d-4266-816f-545730c88ee6; la_page_depth=%7B%22last%22%3A%22http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php%22%2C%22depth%22%3A1%7D; page_load_uuid=8f4fd166-4992-4234-84d7-44ff83975667; fid=5058e871-d1b7-4c13-880a-e44003bc3b46
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 05:28:17 GMT
Server: Apache/2.2.31 (Unix)
Last-Modified: Sun, 11 Apr 2010 05:00:57 GMT
ETag: "5402568-37e-483eee9ee3440"
Accept-Ranges: bytes
Content-Length: 894
Connection: close
Content-Type: image/x-icon
X-Pad: avoid browser bug
pix.bumlam.com/sync/sape/sync_ok?guid=4f5760cc-64a6-11ed-86e0-002590c0647c
31.172.81.160302 Found 0 B URL HTTP/1.1 pix.bumlam.com/sync/sape/sync_ok?guid=4f5760cc-64a6-11ed-86e0-002590c0647c
IP 31.172.81.160:0
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/sape/sync_ok?guid=4f5760cc-64a6-11ed-86e0-002590c0647c HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQ0ZjU3NjBjYy02NGE2LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 15 Nov 2022 05:28:17 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://4f5760cc-64a6-11ed-86e0-002590c0647c.n2.sync.bumlam.com/?src=sape
dmp.gotechnology.io/match/sape?id=1303420A712373635B017B93021FB144&chk=1
142.132.209.138302 Found 0 B URL HTTP/2 dmp.gotechnology.io/match/sape?id=1303420A712373635B017B93021FB144&chk=1
IP 142.132.209.138:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=1303420A712373635B017B93021FB144&chk=1 HTTP/1.1
Host: dmp.gotechnology.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: chk=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Tue, 15 Nov 2022 05:28:17 GMT
content-length: 0
location: https://an.yandex.ru/mapuid/gonetdspis/ODExZTk3YTM1NWEzMWRl
set-cookie: pid=ODExZTk3YTM1NWEzMWRl; expires=Wed, 15 Nov 2023 05:28:17 GMT; domain=.gotechnology.io; path=/; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
151.101.86.133200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP 151.101.86.133:0
Hash 0ddd6f8a51f94e7caffef5aaba2a2ff1
e17e4c072427af03054e30fdf632ca4f108d34d8
91c5784748bfe661bd365d0e0f30ed93ac029ba448239d838738def7642029de
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1423
Server: nginx
Content-Type: application/ocsp-response
Expires: Sat, 19 Nov 2022 04:32:18 GMT
ETag: "e17e4c072427af03054e30fdf632ca4f108d34d8"
Last-Modified: Tue, 15 Nov 2022 04:32:19 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 15 Nov 2022 05:28:17 GMT
Age: 3358
X-Served-By: cache-qpg1269-QPG, cache-bma1648-BMA
X-Cache: MISS, HIT
X-Cache-Hits: 0, 39
X-Timer: S1668490098.912712,VS0,VE0
mc.yandex.ru/metrika/watch.js
77.88.21.119200 OK 58 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP 77.88.21.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (586)
Hash 7b111c54e4ca74c6afb01dccb16a6011
4348abbb3e927a3d20291a71a5e019bbd93923a3
3ad93d272b1bd1296c76105a47276b028046efb94daf54f6b9bef537626a381c
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ladylib.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 57770
date: Tue, 15 Nov 2022 05:28:17 GMT
access-control-allow-origin: *
etag: "63575841-e1aa"
expires: Tue, 15 Nov 2022 06:28:17 GMT
last-modified: Tue, 25 Oct 2022 06:30:09 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
counter.yadro.ru/hit?t38.6;r;s1280*1024*24;uhttp%3A//www.ladylib.net/sovrem_romani.php;0.6101817540932092
88.212.202.52200 OK 445 B URL HTTP/1.1 counter.yadro.ru/hit?t38.6;r;s1280*1024*24;uhttp%3A//www.ladylib.net/sovrem_romani.php;0.6101817540932092
IP 88.212.202.52:0
ASN #39134 United Network LLC
File type GIF image data, version 87a, 31 x 31\012- data
Hash 1bd6eb140ec5e09af54808bce2be74be
00746108650919b88014ce35aabf72b0f20b2046
3e13369e5c528a4598007330a7d572dadd181e268d0cf87ba7b62fd7668597f8
GET /hit?t38.6;r;s1280*1024*24;uhttp%3A//www.ladylib.net/sovrem_romani.php;0.6101817540932092 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ladylib.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Tue, 15 Nov 2022 05:28:17 GMT
Content-Type: image/gif
Content-Length: 445
Connection: keep-alive
Expires: Sun, 14 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7b5af6fb188154abb1b63547fc3a9402
dbe9d49ea5449efc8299bd06ff6d174a5a784fdf
62364c5ab1f880a5159bc2b47e5c633fab80204f19885bb122419569e3a02c36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62364C5AB1F880A5159BC2B47E5C633FAB80204F19885BB122419569E3A02C36"
Last-Modified: Sun, 13 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9619
Expires: Tue, 15 Nov 2022 08:08:37 GMT
Date: Tue, 15 Nov 2022 05:28:18 GMT
Connection: keep-alive
jsc.adskeeper.co.uk/l/a/ladylib.net.1065225.js
104.18.34.236200 OK 3 B URL HTTP/2 jsc.adskeeper.co.uk/l/a/ladylib.net.1065225.js
IP 104.18.34.236:0
File type ASCII text, with no line terminators
Hash cf64b89236d83f0076d28cfa07bc8d51
820f9e6a341ee56a9d0176f30491252763282f2a
ca452a778322112acf74d2542d39fd7e2d2c4687aedcf0fe895d60ca1fbb536b
GET /l/a/ladylib.net.1065225.js HTTP/1.1
Host: jsc.adskeeper.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ladylib.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 05:28:18 GMT
content-type: text/javascript
content-length: 3
x-amz-id-2: IAaYBbRO2ceEjBAx8i9pSWcf7R5J08wziTeCk1TwmMlPhyjXuOSeKiugscVtDL25a8zclyxleh0=
x-amz-request-id: YQ2GAG1BS9SSW6FS
last-modified: Mon, 11 Apr 2022 16:12:54 GMT
etag: "cf64b89236d83f0076d28cfa07bc8d51"
x-amz-version-id: null
cf-cache-status: HIT
expires: Tue, 15 Nov 2022 09:28:18 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a59527987fb4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash ffcbc400cfe4d5d90c1e6425348fbf0a
a16eb4ea13120daea50ac97eada876fa0423c30e
af611e171bf08954d343902af7c0115ca21e4b33e605dfd475e02e4adda17670
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6332
Cache-Control: max-age=141826
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 05:28:18 GMT
Etag: "637291b8-117"
Expires: Wed, 16 Nov 2022 20:52:04 GMT
Last-Modified: Mon, 14 Nov 2022 19:06:32 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279
4f5760cc-64a6-11ed-86e0-002590c0647c.n2.sync.bumlam.com/?src=sape
82.146.53.26302 Moved Temporarily 0 B URL HTTP/1.1 4f5760cc-64a6-11ed-86e0-002590c0647c.n2.sync.bumlam.com/?src=sape
IP 82.146.53.26:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sape HTTP/1.1
Host: 4f5760cc-64a6-11ed-86e0-002590c0647c.n2.sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQ0ZjU3NjBjYy02NGE2LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Tue, 15 Nov 2022 05:28:18 GMT
Content-Length: 0
Connection: close
Location: https://pix.bumlam.com/sync/sape/done
ocsp.globalsign.com/gsgccr3dvtlsca2020
151.101.86.133200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP 151.101.86.133:0
Hash b43b7bea76c53f7f53376b3b13bdb424
0eb1e802eed970b6885758618affa80f29b3bdcb
05c9530f2d4b970bc9fb22450ab07168a210723d81ce5ad9a473a5d2b6dea602
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1414
Server: nginx
Content-Type: application/ocsp-response
Expires: Sat, 19 Nov 2022 04:43:40 GMT
ETag: "0eb1e802eed970b6885758618affa80f29b3bdcb"
Last-Modified: Tue, 15 Nov 2022 04:43:41 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 15 Nov 2022 05:28:18 GMT
Age: 2676
X-Served-By: cache-qpg1268-QPG, cache-bma1666-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 28, 22
X-Timer: S1668490098.177017,VS0,VE0
mc.yandex.ru/watch/90979946/1?wmode=7&page-url=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%2263732371-8872-b01v-g3v6-xy3wrwk0cvom%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A616%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A921%3Acn%3A2%3Adp%3A0%3Als%3A859334214717%3Ahid%3A709454408%3Az%3A0%3Ai%3A20221115052817%3Aet%3A1668490098%3Ac%3A1%3Arn%3A287443417%3Arqn%3A1%3Au%3A1668490098124136152%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A3%2C21%2C56%2C0%2C-6%2C0%2C%2C1080%2C2%2C%2C%2C%2C1200%3Ans%3A1668490095711%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668490098%3At%3A%D0%A1%D0%BE%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%BB%D1%8E%D0%B1%D0%BE%D0%B2%D0%BD%D1%8B%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%20%D0%BD%D0%B0%20%D0%B1%D1%83%D0%BA%D0%B2%D1%83%20%D0%90&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
77.88.21.119200 OK 407 B URL HTTP/2 mc.yandex.ru/watch/90979946/1?wmode=7&page-url=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%2263732371-8872-b01v-g3v6-xy3wrwk0cvom%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A616%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A921%3Acn%3A2%3Adp%3A0%3Als%3A859334214717%3Ahid%3A709454408%3Az%3A0%3Ai%3A20221115052817%3Aet%3A1668490098%3Ac%3A1%3Arn%3A287443417%3Arqn%3A1%3Au%3A1668490098124136152%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A3%2C21%2C56%2C0%2C-6%2C0%2C%2C1080%2C2%2C%2C%2C%2C1200%3Ans%3A1668490095711%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668490098%3At%3A%D0%A1%D0%BE%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%BB%D1%8E%D0%B1%D0%BE%D0%B2%D0%BD%D1%8B%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%20%D0%BD%D0%B0%20%D0%B1%D1%83%D0%BA%D0%B2%D1%83%20%D0%90&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
IP 77.88.21.119:0
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash b563640a281ed35f0c7acd0c3b0ea3ad
042f3a3e5d8ced21527063ca166f227f4f63aaa1
081901f2ccaa2dd1b3661c4178618962418bebca7a13589f1c2a04f8b62184af
GET /watch/90979946/1?wmode=7&page-url=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%2263732371-8872-b01v-g3v6-xy3wrwk0cvom%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A616%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A921%3Acn%3A2%3Adp%3A0%3Als%3A859334214717%3Ahid%3A709454408%3Az%3A0%3Ai%3A20221115052817%3Aet%3A1668490098%3Ac%3A1%3Arn%3A287443417%3Arqn%3A1%3Au%3A1668490098124136152%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A3%2C21%2C56%2C0%2C-6%2C0%2C%2C1080%2C2%2C%2C%2C%2C1200%3Ans%3A1668490095711%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668490098%3At%3A%D0%A1%D0%BE%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%BB%D1%8E%D0%B1%D0%BE%D0%B2%D0%BD%D1%8B%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%20%D0%BD%D0%B0%20%D0%B1%D1%83%D0%BA%D0%B2%D1%83%20%D0%90&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.ladylib.net
Referer: http://www.ladylib.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 407
date: Tue, 15 Nov 2022 05:28:18 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://www.ladylib.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 15-Nov-2022 05:28:18 GMT
last-modified: Tue, 15-Nov-2022 05:28:18 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71281900/1?wmode=7&page-url=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&charset=utf-8&site-info=%7B%22site_id%22%3A58275%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A616%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A231169709943%3Ahid%3A709454408%3Az%3A0%3Ai%3A20221115052817%3Aet%3A1668490098%3Ac%3A1%3Arn%3A231300100%3Arqn%3A1%3Au%3A1668490098124136152%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A3%2C21%2C56%2C0%2C-6%2C0%2C%2C1080%2C2%2C%2C%2C%2C1200%3Ans%3A1668490095711%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668490098%3At%3A%D0%A1%D0%BE%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%BB%D1%8E%D0%B1%D0%BE%D0%B2%D0%BD%D1%8B%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%20%D0%BD%D0%B0%20%D0%B1%D1%83%D0%BA%D0%B2%D1%83%20%D0%90&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
77.88.21.119200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/71281900/1?wmode=7&page-url=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&charset=utf-8&site-info=%7B%22site_id%22%3A58275%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A616%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A231169709943%3Ahid%3A709454408%3Az%3A0%3Ai%3A20221115052817%3Aet%3A1668490098%3Ac%3A1%3Arn%3A231300100%3Arqn%3A1%3Au%3A1668490098124136152%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A3%2C21%2C56%2C0%2C-6%2C0%2C%2C1080%2C2%2C%2C%2C%2C1200%3Ans%3A1668490095711%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668490098%3At%3A%D0%A1%D0%BE%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%BB%D1%8E%D0%B1%D0%BE%D0%B2%D0%BD%D1%8B%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%20%D0%BD%D0%B0%20%D0%B1%D1%83%D0%BA%D0%B2%D1%83%20%D0%90&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
IP 77.88.21.119:0
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash cc8dc6e90b2a04b8e84e89c0d88696ff
80e5b2d9a61c6b109cda00c59b397427463ed97a
09b89b13f1504fec702db2c60d9746eb52be8d1f716a70f4572361a66b617731
GET /watch/71281900/1?wmode=7&page-url=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&charset=utf-8&site-info=%7B%22site_id%22%3A58275%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A616%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A231169709943%3Ahid%3A709454408%3Az%3A0%3Ai%3A20221115052817%3Aet%3A1668490098%3Ac%3A1%3Arn%3A231300100%3Arqn%3A1%3Au%3A1668490098124136152%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A3%2C21%2C56%2C0%2C-6%2C0%2C%2C1080%2C2%2C%2C%2C%2C1200%3Ans%3A1668490095711%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668490098%3At%3A%D0%A1%D0%BE%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%BB%D1%8E%D0%B1%D0%BE%D0%B2%D0%BD%D1%8B%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%20%D0%BD%D0%B0%20%D0%B1%D1%83%D0%BA%D0%B2%D1%83%20%D0%90&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.ladylib.net
Referer: http://www.ladylib.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Tue, 15 Nov 2022 05:28:18 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://www.ladylib.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 15-Nov-2022 05:28:18 GMT
last-modified: Tue, 15-Nov-2022 05:28:18 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
77.88.21.119200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 77.88.21.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ladylib.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 15 Nov 2022 05:28:18 GMT
access-control-allow-origin: *
etag: "63575841-2b"
expires: Tue, 15 Nov 2022 06:28:18 GMT
accept-ranges: bytes
last-modified: Tue, 25 Oct 2022 06:30:09 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=153&external_id=1303420A712373635B017B93021FB144
195.209.111.4200 OK 42 B URL HTTP/1.1 ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=153&external_id=1303420A712373635B017B93021FB144
IP 195.209.111.4:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cgi-bin/sync.cgi?dsp_id=153&external_id=1303420A712373635B017B93021FB144 HTTP/1.1
Host: ssp.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 05:28:18 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 840f46ee307d9be360a4adef81baec84
79cf74158a9548ffb75eff26d95c2ff4fd3fa652
55624b78aaa90226d7ec98152b2855b5cf2b0adeb43ac38aadcdd10adf712294
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 05:28:18 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 15 Nov 2022 04:09:19 GMT
Expires: Tue, 22 Nov 2022 04:09:18 GMT
Etag: "79cf74158a9548ffb75eff26d95c2ff4fd3fa652"
Cache-Control: max-age=599459,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76a59529a998b4fa-OSL
fcgi4.gnezdo.ru/cookie_matching_ssp/Sape-dsp/1303420A712373635B017B93021FB144
93.95.102.105204 No Content 0 B URL HTTP/2 fcgi4.gnezdo.ru/cookie_matching_ssp/Sape-dsp/1303420A712373635B017B93021FB144
IP 93.95.102.105:0
ASN #48347 JSC Mediasoft ekspert
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookie_matching_ssp/Sape-dsp/1303420A712373635B017B93021FB144 HTTP/1.1
Host: fcgi4.gnezdo.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Tue, 15 Nov 2022 05:28:18 GMT
set-cookie: uid=XV9maWNzI3InA4G5dnJBAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=gnezdo.ru; path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
X-Firefox-Spdy: h2
pix.bumlam.com/sync/sape/done
31.172.81.160200 OK 43 B URL HTTP/1.1 pix.bumlam.com/sync/sape/done
IP 31.172.81.160:0
ASN #44066 diva-e Datacenters GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /sync/sape/done HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiQ0ZjU3NjBjYy02NGE2LTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 05:28:18 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 68a04663a52ab4272c25f5afcc09a92d
48b0722227353d06cb1dfd4480b644be6e6fc030
892ba18611f372b6bf390d3628b66efc4a721f0f2bde61ae22546a0948935b7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 05:28:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ads.adlook.me/csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
5.200.50.170302 Found 1.4 kB URL HTTP/2 ads.adlook.me/csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
IP 5.200.50.170:0
ASN #48096 Enterprise Cloud Ltd.
Hash b43b7bea76c53f7f53376b3b13bdb424
0eb1e802eed970b6885758618affa80f29b3bdcb
05c9530f2d4b970bc9fb22450ab07168a210723d81ce5ad9a473a5d2b6dea602
GET /csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://acint.net/match?dp=110&euid=0d6fdfb095484134b403b76d4c66864b
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=0d6fdfb095484134b403b76d4c66864b; expires=Tue, 14 Nov 2023 21:00:00 GMT; path=/; SameSite=None; secure; samesite=lax
date: Tue, 15 Nov 2022 05:28:17 GMT
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=agentstvo_sape_limited&google_hm=EwNCCnEjc2NbAXuTAh-xRA
142.250.74.2200 OK 170 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=agentstvo_sape_limited&google_hm=EwNCCnEjc2NbAXuTAh-xRA
IP 142.250.74.2:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash e7673c60af825466f83d46da72ca1635
fc0fcbee0835709ba2d28798a612bfd687903fb5
0b8a20373c6dd04e091902226d922b3688143a8938afb9d283d889de7b55ceb5
GET /pixel?google_nid=agentstvo_sape_limited&google_hm=EwNCCnEjc2NbAXuTAh-xRA HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
date: Tue, 15 Nov 2022 05:28:18 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: HTTP server (unknown)
content-length: 170
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D
188.42.191.196302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D
IP 188.42.191.196:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Wed, 15 Nov 2023 05:28:18 GMT; Path=/; Domain=.betweendigital.com
tuuid=30328d99-6965-523f-817e-ca3ee20de94c; Max-Age=31536000; Expires=Wed, 15 Nov 2023 05:28:18 GMT; Path=/; Domain=.betweendigital.com
ut=Y3MjcgADobCN3_uuIedMKHRkXMf6wFN0VokRwg==; Max-Age=31536000; Expires=Wed, 15 Nov 2023 05:28:18 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
151.101.86.133200 OK 937 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 151.101.86.133:0
Hash ad53f52f46e84a89560887b2b5ac7dc9
c7516e13b2e19d4d03d10910d7d4e199333e178c
4d923c4e183b02c02542e75ab7a485a7e1ec47e1062cfbe515ab8071b167cd0f
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 937
Server: nginx
Content-Type: application/ocsp-response
Expires: Sat, 19 Nov 2022 03:31:57 GMT
ETag: "c7516e13b2e19d4d03d10910d7d4e199333e178c"
Last-Modified: Tue, 15 Nov 2022 03:31:58 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 15 Nov 2022 05:28:18 GMT
Age: 3378
X-Served-By: cache-qpg1272-QPG, cache-bma1666-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 5, 115
X-Timer: S1668490098.262751,VS0,VE0
ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691
195.209.108.48302 Moved Temporarily 0 B URL HTTP/1.1 ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691
IP 195.209.108.48:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691 HTTP/1.1
Host: ad.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Tue, 15 Nov 2022 05:28:18 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-control: no-cache, max-age=0, must-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
Set-Cookie: cid=-4942218474; expires=Thu, 14 Nov 2024 05:28:18 GMT; path=/; domain=.adriver.ru; SameSite=None; Secure
Location: /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-4942218474
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
jsc.adskeeper.co.uk/l/a/ladylib.net.1094888.js
104.18.34.236200 OK 3 B URL HTTP/2 jsc.adskeeper.co.uk/l/a/ladylib.net.1094888.js
IP 104.18.34.236:0
File type ASCII text, with no line terminators
Hash cf64b89236d83f0076d28cfa07bc8d51
820f9e6a341ee56a9d0176f30491252763282f2a
ca452a778322112acf74d2542d39fd7e2d2c4687aedcf0fe895d60ca1fbb536b
GET /l/a/ladylib.net.1094888.js HTTP/1.1
Host: jsc.adskeeper.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ladylib.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 15 Nov 2022 05:28:18 GMT
content-type: text/javascript
content-length: 3
x-amz-id-2: dUQqcBwER6Hz2NqVzcfE1ghH7G0GvVBNJypXsrSj8Gs+eRHVhuvYmTDaXgMG5xVbaeX2rR/c/+s=
x-amz-request-id: FF2P4S34YYE0CR5S
last-modified: Mon, 11 Apr 2022 16:13:16 GMT
etag: "cf64b89236d83f0076d28cfa07bc8d51"
x-amz-version-id: null
cf-cache-status: REVALIDATED
expires: Tue, 15 Nov 2022 09:28:18 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76a59527886ab4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.usertrust.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 2b8d71cd53d5a0b06f79ca787a0c160c
b54fa796a791cb892f69f72624d924c12f672d8f
31c98afa2be33f9617a182a4770ae9f3d359d609a93836216139e2c42d87b6d1
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 05:28:18 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 14 Nov 2022 04:18:20 GMT
Expires: Mon, 21 Nov 2022 04:18:19 GMT
Etag: "b54fa796a791cb892f69f72624d924c12f672d8f"
Cache-Control: max-age=602624,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1724
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76a5952a5e14b521-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 5f1e811d1dc34a0eb6c1dc8a81a54f82
4ec7e357a94ffef2a73fe54e8cdb726a3aeb4069
c37ff89c19485f13d02d550e54e3178ae8a835686bb7d1c8b2396305508e179b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 05:28:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2022 02:18:44 GMT
Expires: Sat, 19 Nov 2022 02:18:43 GMT
Etag: "4ec7e357a94ffef2a73fe54e8cdb726a3aeb4069"
Cache-Control: max-age=333624,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76a5952a2afcb505-OSL
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 072bc89db0a536f52071433f553a2238
36ca99486530c39c06705f4eb83511062592b0e5
c2ce549f80d48dc43ca18552543868594bbaa9204491ccaea8134f350b9e30f6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2CE549F80D48DC43CA18552543868594BBAA9204491CCAEA8134F350B9E30F6"
Last-Modified: Mon, 14 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4400
Expires: Tue, 15 Nov 2022 06:41:38 GMT
Date: Tue, 15 Nov 2022 05:28:18 GMT
Connection: keep-alive
ocsp.globalsign.com/gseccovsslca2018
151.101.86.133200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 151.101.86.133:0
Hash 07294782b6ec21bfdf0840c042b6d116
d9687863ce41ef4f56c134b809ff396c13da3221
4a16351cbcb8b5bd2d30064f8e95c23134f9f5bea14480e0ac7f75c6b7fc74cc
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 938
Server: nginx
Content-Type: application/ocsp-response
Expires: Sat, 19 Nov 2022 02:41:59 GMT
ETag: "d9687863ce41ef4f56c134b809ff396c13da3221"
Last-Modified: Tue, 15 Nov 2022 02:42:00 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 15 Nov 2022 05:28:18 GMT
Age: 3573
X-Served-By: cache-qpg1232-QPG, cache-bma1666-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 4, 85
X-Timer: S1668490098.323342,VS0,VE0
ad.mail.ru/cm.gif?p=48&id=1303420A712373635B017B93021FB144
95.163.41.56200 OK 43 B URL HTTP/2 ad.mail.ru/cm.gif?p=48&id=1303420A712373635B017B93021FB144
IP 95.163.41.56:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /cm.gif?p=48&id=1303420A712373635B017B93021FB144 HTTP/1.1
Host: ad.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 05:28:18 GMT
content-type: image/gif
content-length: 43
set-cookie: VID=2yuNTM2hfhYD002EBc33uUID:::0-0-0-88d7c32:CAASEP2aQ0Z3hX44j_3tpzaso24aYPS9JVELJrPUAh6-fFggAMLOjRg-_uCt-4Buy9mBwuNr2N8tg1PerTPKtZSGv_YGwv41tUtRJWCjTlDYxU9NQy9vunhZM8mqxx36nciQ5UPTbtSg6TNGcWEII4Y5MZoq2g; path=/; expires=Thu, 16-Nov-23 05:28:18 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
expires: Tue, 15 Nov 2022 11:28:18 GMT
cache-control: max-age=21600
last-modified: Tue, 15 Nov 2022 05:28:18 GMT
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: require-corp
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
151.101.86.133200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP 151.101.86.133:0
Hash 0f493195401f593b6f4d03a31eda1bd1
477af92dce8ba19e495cd1e828ee85f755dca7c2
98681abb02683df4fc90c74c6234dfaea19ff184dba0441c93b47f8638bcf4b9
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1423
Server: nginx
Content-Type: application/ocsp-response
Expires: Sat, 19 Nov 2022 03:41:50 GMT
ETag: "477af92dce8ba19e495cd1e828ee85f755dca7c2"
Last-Modified: Tue, 15 Nov 2022 03:41:51 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 15 Nov 2022 05:28:18 GMT
Age: 3851
X-Served-By: cache-qpg1243-QPG, cache-bma1648-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 95, 2
X-Timer: S1668490098.334943,VS0,VE0
x01.aidata.io/0.gif?pid=9401454&id=1303420A712373635B017B93021FB144
89.108.119.43302 Found 0 B URL HTTP/2 x01.aidata.io/0.gif?pid=9401454&id=1303420A712373635B017B93021FB144
IP 89.108.119.43:0
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0.gif?pid=9401454&id=1303420A712373635B017B93021FB144 HTTP/1.1
Host: x01.aidata.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 15 Nov 2022 05:28:18 GMT
content-length: 0
location: https://x01.aidata.io/0.gif?pid=9401454&id=1303420A712373635B017B93021FB144&bounce=1
expires: Tue, 15 Nov 2022 05:28:17 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Tue, 15 Nov 2022 05:28:17 GMT
set-cookie: __upin=BAKO7AVHJYUdHS6jageC5g;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
__upints=1668490098;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.22200 OK 1.8 kB IP 192.124.249.22:0
Hash c4b4fb4b17be58e641f4535ca6e60100
682f6ea178d78d97b9670970fd2c5dd1c7bc0bc7
465176b6d9c213a56b8b28aa4785161ce8fcc810e3756e20c5e3b30aca1ec5eb
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 15 Nov 2022 05:28:18 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 14 Nov 2022 20:58:56 GMT
Expires: Tue, 15 Nov 2022 20:58:56 GMT
ETag: "682f6ea178d78d97b9670970fd2c5dd1c7bc0bc7"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
sape-sync.rutarget.ru/sync
45.9.27.120302 Moved Temporarily 0 B URL HTTP/1.1 sape-sync.rutarget.ru/sync
IP 45.9.27.120:0
ASN #208677 Cloud technology Limited (Ltd.)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync HTTP/1.1
Host: sape-sync.rutarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Tue, 15 Nov 2022 05:28:18 GMT
Content-Length: 0
Connection: close
Location: https://www.acint.net/match?dp=104&euid=pM2ZfTLoc0UN
P3P: CP="This is not a P3P policy. Please visit http://rutarget.ru/p3p/ to get more information."
Set-Cookie: userId=pM2ZfTLoc0UN; Path=/; Domain=.rutarget.ru; Expires=Sun, 14 May 2023 05:28:18 GMT; SameSite=None; Secure
status.thawte.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 3958bb3183c4fea29e22517ac44bb770
e7df24758130a970b5ed15e008168f217ecf596a
5a23fe611468f70a49ff3fabed47da7c3a5ca42eae3d46d62fad866ec43d032d
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2285
Cache-Control: max-age=148606
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 05:28:18 GMT
Etag: "6372bc03-1d7"
Expires: Wed, 16 Nov 2022 22:45:04 GMT
Last-Modified: Mon, 14 Nov 2022 22:06:59 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
ocsp.globalsign.com/gsrsaovsslca2018
151.101.86.133200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 151.101.86.133:0
Hash fc79016c07e94fc4f24f5cbc73e5e14a
c98ddeeb4a6e0cf2ad0283bcff89875ea0cc3221
f4b0471ffcfe61d62f6d03214feded8f4ade759ae2088ca8cac2c88ea0c64264
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1432
Server: nginx
Content-Type: application/ocsp-response
Expires: Sat, 19 Nov 2022 04:25:48 GMT
ETag: "c98ddeeb4a6e0cf2ad0283bcff89875ea0cc3221"
Last-Modified: Tue, 15 Nov 2022 04:25:49 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 15 Nov 2022 05:28:18 GMT
Age: 1148
X-Served-By: cache-qpg1234-QPG, cache-bma1666-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 3, 4
X-Timer: S1668490098.360565,VS0,VE0
cdn-rtb.sape.ru/rtb-b/js/275/2/58275.js
95.181.171.231200 OK 46 kB URL HTTP/2 cdn-rtb.sape.ru/rtb-b/js/275/2/58275.js
IP 95.181.171.231:0
File type ASCII text, with very long lines (5806)
Hash d8f5cb2c3f2a0bc16ce8e424e9c6847c
1c77a29102b34fc8888afc0bfea729bdde3ae168
fd3f1aa6ab1ec9bf1e576151de6d9381c7e4752cef970b08e728e6750daec61f
GET /rtb-b/js/275/2/58275.js HTTP/1.1
Host: cdn-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ladylib.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: block-all-mixed-content
etag: W/"a47797d2188aee49912b7460591a08e9"
last-modified: Mon, 14 Nov 2022 09:37:53 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-request-id: 17276A130180F590
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
expires: Tue, 15 Nov 2022 06:28:17 GMT
cache-control: max-age=3600
x-cache-status: HIT
X-Firefox-Spdy: h2
tag.digitaltarget.ru/adcm.js
185.15.175.131200 OK 3.1 kB URL HTTP/1.1 tag.digitaltarget.ru/adcm.js
IP 185.15.175.131:0
File type ASCII text, with very long lines (3051), with no line terminators
Hash e7097284185069f52fc736bcd50cda13
1cdfdf2d869841202079ddf91e0a00a8610812e6
40f2a96f78f4c8484e9da6e172f5ddd3e4d7786ca29e04b96e1067a365190e80
GET /adcm.js HTTP/1.1
Host: tag.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 05:28:18 GMT
Content-Type: application/javascript
Content-Length: 3051
Last-Modified: Tue, 15 Nov 2022 05:04:10 GMT
Connection: keep-alive
ETag: "63731dca-beb"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 68a04663a52ab4272c25f5afcc09a92d
48b0722227353d06cb1dfd4480b644be6e6fc030
892ba18611f372b6bf390d3628b66efc4a721f0f2bde61ae22546a0948935b7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 15 Nov 2022 05:28:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
35.190.24.218302 Found 0 B URL HTTP/2 redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
IP 35.190.24.218:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect HTTP/1.1
Host: redirect.frontend.weborama.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: Weborama Collect Frontend
date: Tue, 15 Nov 2022 05:28:18 GMT
content-length: 0
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=3403716044
access-control-allow-origin: *
p3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM"
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: Tue, 03 Jul 2001 06:00:00 GMT
last-modified: Tue, 15 Nov 2022 05:28:18 GMT
set-cookie: AFFICHE_W=P7i@yQSWhT0-28; expires=Wed, 13 Dec 2023 05:28:18 GMT; domain=.weborama.fr; path=/; secure; SameSite=None
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
x01.aidata.io/0.gif?pid=9401454&id=1303420A712373635B017B93021FB144&bounce=1
89.108.119.43204 No Content 0 B URL HTTP/2 x01.aidata.io/0.gif?pid=9401454&id=1303420A712373635B017B93021FB144&bounce=1
IP 89.108.119.43:0
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0.gif?pid=9401454&id=1303420A712373635B017B93021FB144&bounce=1 HTTP/1.1
Host: x01.aidata.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 15 Nov 2022 05:28:18 GMT
expires: Tue, 15 Nov 2022 05:28:17 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Tue, 15 Nov 2022 05:28:17 GMT
set-cookie: __upin=HhQTCE9H5J/0t5uTM4DfjQ;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
__upints=1668490098;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
188.42.191.196200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
IP 188.42.191.196:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Wed, 15 Nov 2023 05:28:18 GMT; Path=/; Domain=.betweendigital.com
tuuid=efedb85b-8c52-523f-accb-4d51cfb86e23; Max-Age=31536000; Expires=Wed, 15 Nov 2023 05:28:18 GMT; Path=/; Domain=.betweendigital.com
ut=Y3MjcgAGcHCQiW0wsZ5PQkkwAkQ2XAMvQaYgNA==; Max-Age=31536000; Expires=Wed, 15 Nov 2023 05:28:18 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-4942218474
195.209.108.48302 Moved Temporarily 40 B URL HTTP/1.1 ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-4942218474
IP 195.209.108.48:0
File type ASCII text, with CRLF line terminators
Hash 251630b588179b239e8fab1ac9ef6d3a
91b91a97bc481dd2bbd5e0f3fea6ba1c4e843882
c95661e0ef6975b1df5361695a439f71a021d72c345023c3e668e84f35b3c38b
GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-4942218474 HTTP/1.1
Host: ad.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Tue, 15 Nov 2022 05:28:18 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-control: no-cache, no-cache=Set-Cookie, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref="//adriver.ru/w3c/p3p.xml", CP="NON DSP COR CURa ADMa DEVa OUR BUS UNI COM NAV INT STA"
Set-Cookie: cid=0; expires=Thu, 14 Nov 2024 05:28:18 GMT; path=/; domain=.adriver.ru;
uid=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain=.adriver.ru
Location: https://www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
sm.rtb.mts.ru/p?ssp=sape&id=1303420A712373635B017B93021FB144
217.66.147.42301 Moved Permanently 0 B URL HTTP/1.1 sm.rtb.mts.ru/p?ssp=sape&id=1303420A712373635B017B93021FB144
IP 217.66.147.42:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sape&id=1303420A712373635B017B93021FB144 HTTP/1.1
Host: sm.rtb.mts.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 15 Nov 2022 05:28:18 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin
Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
Vary: Origin
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://sm.rtb.mts.ru/match/second?ssp=30&exu=1303420A712373635B017B93021FB144
Set-Cookie: dspid=86178b3e-37d1-4e6a-9da5-35f572661365; expires=Mon, 06 Nov 2023 05:28:18 GMT; domain=.mts.ru; path=/; secure; SameSite=None
www.acint.net/match?dp=104&euid=pM2ZfTLoc0UN
193.3.184.227200 OK 43 B URL HTTP/2 www.acint.net/match?dp=104&euid=pM2ZfTLoc0UN
IP 193.3.184.227:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=104&euid=pM2ZfTLoc0UN HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2NzI3GTewFbRLEfAh8eccCGkAZ0CEJW2cF9alQpKlYX; cSyncDp7v2=1668490097; cSyncDp14v3=1668490097; cSyncDp17=1668490097; cSyncDp32=1668490097; cSyncDp45v3=1668490097; cSyncDp53=1668490097; cSyncDp54v2=1668490097; cSyncDp62=1668490097; cSyncDp67v2=1668490097; cSyncDp68=1668490097; cSyncDp71=1668490097; cSyncDp77=1668490097; cSyncDp84=1668490097; cSyncDp85=1668490097; cSyncDp95v3=1668490097; cSyncDp101=1668490097; cSyncDp104v2=1668490097; cSyncDp107=1668490097; cSyncDp110=1668490097; cSyncDp111v2=1668490097; cSyncDp112v2=1668490097; cSyncDp125v2=1668490097; cSyncDp126=1668490097; cSyncDp127=1668490097; cSyncDp129=1668490097; cSyncDp136v2=1668490097; cSyncDp138=1668490097; cSyncDp144=1668490097; cSyncDp146=1668490097; cSyncDp148=1668490097; cSyncDp149v2=1668490097; cSyncDp151=1668490097; cSyncDp178=1668490097; cSyncDp179=1668490097; cSyncDp186=1668490097; cSyncDp221=1668490097
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 15 Nov 2022 05:28:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
px.adhigh.net/p/cm/sape?u=1303420A712373635B017B93021FB144
194.190.76.44302 Found 0 B URL HTTP/2 px.adhigh.net/p/cm/sape?u=1303420A712373635B017B93021FB144
IP 194.190.76.44:0
ASN #48061 Limited Liability Company GPM Digital Technologies
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/cm/sape?u=1303420A712373635B017B93021FB144 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 15 Nov 2022 05:28:18 GMT
content-length: 0
x-backend-id: f22-ru
access-control-allow-origin: *
access-control-allow-credentials: true
set-cookie: gi_u=8t7qmx9Df1n.AikABlGEecJ24g;Path=/;Domain=.adhigh.net;Expires=Wed, 15-Nov-2023 05:28:18 GMT;Secure;SameSite=None
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
location: https://px.adhigh.net/p/cm/sape?u=1303420A712373635B017B93021FB144&bounced=1
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 840f46ee307d9be360a4adef81baec84
79cf74158a9548ffb75eff26d95c2ff4fd3fa652
55624b78aaa90226d7ec98152b2855b5cf2b0adeb43ac38aadcdd10adf712294
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 15 Nov 2022 05:28:18 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 15 Nov 2022 04:09:19 GMT
Expires: Tue, 22 Nov 2022 04:09:18 GMT
Etag: "79cf74158a9548ffb75eff26d95c2ff4fd3fa652"
Cache-Control: max-age=599459,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76a5952a09f4b4fa-OSL
an.yandex.ru/mapuid/sapeis/1303420A712373635B017B93021FB144?redir-setuniq=1
93.158.134.90200 OK 553 B URL HTTP/2 an.yandex.ru/mapuid/sapeis/1303420A712373635B017B93021FB144?redir-setuniq=1
IP 93.158.134.90:0
Hash b1b08753565287e2cea6dc3f49d6c6ef
dd580d9eefb084090dd25e6de9ce2ef566d1cf2c
29b8196ca1b2d83cae9eccea009780e9eaf9317750c112ba85c5564e33d864dd
GET /mapuid/sapeis/1303420A712373635B017B93021FB144?redir-setuniq=1 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Tue, 15 Nov 2022 05:28:18 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 15 Nov 2022 05:28:18 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Tue, 15 Nov 2022 05:28:18 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif; charset=utf-8
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=73&external_user_id=1303420A712373635B017B93021FB144
188.42.191.196302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=73&external_user_id=1303420A712373635B017B93021FB144
IP 188.42.191.196:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=73&external_user_id=1303420A712373635B017B93021FB144 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /match?bidder_id=73&external_user_id=1303420A712373635B017B93021FB144&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Wed, 15 Nov 2023 05:28:18 GMT; Path=/; Domain=.betweendigital.com
tuuid=21352955-ba3c-523f-8ee6-2635ed950547; Max-Age=31536000; Expires=Wed, 15 Nov 2023 05:28:18 GMT; Path=/; Domain=.betweendigital.com
ut=Y3MjcgAHFIAfK1siaSv_ElnIU0cezhNgWK0JAA==; Max-Age=31536000; Expires=Wed, 15 Nov 2023 05:28:18 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.22200 OK 1.8 kB IP 192.124.249.22:0
Hash c4b4fb4b17be58e641f4535ca6e60100
682f6ea178d78d97b9670970fd2c5dd1c7bc0bc7
465176b6d9c213a56b8b28aa4785161ce8fcc810e3756e20c5e3b30aca1ec5eb
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 15 Nov 2022 05:28:18 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 14 Nov 2022 20:58:56 GMT
Expires: Tue, 15 Nov 2022 20:58:56 GMT
ETag: "682f6ea178d78d97b9670970fd2c5dd1c7bc0bc7"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3077
Expires: Tue, 15 Nov 2022 06:19:35 GMT
Date: Tue, 15 Nov 2022 05:28:18 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4cc31a8-ba2e-4cc0-bf6e-0daaf01962d2.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4cc31a8-ba2e-4cc0-bf6e-0daaf01962d2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9459d8c5ec4b22476e1470e5476f70f7
78118517bfffe997c85f08bd9b7b7ac9270d9b02
647d0898ed6a38191ff91ca316e90a72d9a5ce563c3602a8d4c477c64f096be4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4cc31a8-ba2e-4cc0-bf6e-0daaf01962d2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7504
x-amzn-requestid: 553a2ee3-9dcb-44ac-b0e1-e8ea660eedcc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bOAmqGAyoAMFv5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6368ae2a-7af9fba56c5ae9ca5f513668;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 07:05:14 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Bunxhv8a_oArMEcm7xSLMb3WzYV9xwg7Htdp09E_aT01f3tOH3yAZw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 03:32:43 GMT
age: 6935
etag: "78118517bfffe997c85f08bd9b7b7ac9270d9b02"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cfe73af-53c0-4706-a320-987a036d5df3.png
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cfe73af-53c0-4706-a320-987a036d5df3.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 11b09e0954b0c369b17157cbec3a9faa
e58d41c729265821354d74bf3ede201367c26520
10c5a9996520f504c1fd3e0b7f3d534e67e062067f5708c92ab6bea92f252653
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cfe73af-53c0-4706-a320-987a036d5df3.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13491
x-amzn-requestid: c1c11381-c73e-4068-aafd-4a2e9db024f9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: blxEFG06IAMFk8g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63722ee6-5b5137ae63a9d76c3d4d0957;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 12:04:54 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: l-W-3M52mBUbg8k0CXZzw836bKHu01r3i_7z4CgLbrEneahWNR2n1Q==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 12:17:03 GMT
age: 61875
etag: "e58d41c729265821354d74bf3ede201367c26520"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 29b1503232a9cf0843bd9f0d01c0a9a5
620b3b98a58cd32175d40534dca81ef4a26d880f
1f54c0fa57ea62f131e173d4a365d6d2d4d10e0993eb69eaf9e27d3788a5daf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F54C0FA57EA62F131E173D4A365D6D2D4D10E0993EB69EAF9E27D3788A5DAF8"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3077
Expires: Tue, 15 Nov 2022 06:19:35 GMT
Date: Tue, 15 Nov 2022 05:28:18 GMT
Connection: keep-alive
an.yandex.ru/mapuid/sapeis/1303420A712373635B017B93021FB144
93.158.134.90302 Found 523 B URL HTTP/2 an.yandex.ru/mapuid/sapeis/1303420A712373635B017B93021FB144
IP 93.158.134.90:0
Hash 7c357c1c92993e9f13c0b2c5c5449f6b
2e19a150c59f120f7977e8008a147f9687561191
7d4df5f3d0abb4532727dc87ee24c3b8ce4258085b45a8ab088b5dde344b491c
GET /mapuid/sapeis/1303420A712373635B017B93021FB144 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
timing-allow-origin: *
location: https://an.yandex.ru/mapuid/sapeis/1303420A712373635B017B93021FB144?redir-setuniq=1
date: Tue, 15 Nov 2022 05:28:18 GMT
set-cookie: yandexuid=4084106301668490098; domain=.yandex.ru; path=/; expires=Fri, 12-Nov-2032 05:28:18 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 15 Nov 2022 05:28:18 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Tue, 15 Nov 2022 05:28:18 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9b23464-6c45-4e45-acd1-ac75bde164c7.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9b23464-6c45-4e45-acd1-ac75bde164c7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 508368e91f7702272c5610f905e4204b
0d61ccdb959e45368a9f6ada26679974374d81a2
bd3b3d55264bccbbf647577e3f93c35dd56840967713fcb948e67426c8a71b38
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9b23464-6c45-4e45-acd1-ac75bde164c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7982
x-amzn-requestid: 35753773-2e2d-4def-a9ef-6224343d62e0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bklm8E9qoAMFQgQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371b62c-46372f151eb5ba9f0f5ec3a0;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 03:29:48 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T8ocx27r2N_V74-jyk23ATbGtw9TJBqSRB0MK0Kahre8ESS5kM_9lQ==
via: 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 21:47:48 GMT
age: 27630
etag: "0d61ccdb959e45368a9f6ada26679974374d81a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd5bdc050716bb76afe8090fc81617e7
5109c156b180727767fc03c411190ccc0d3fb5fc
9b13e7838946c6654dda17886c2ca8d42de934acb93f4bddb1008dfa1bd1ea99
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11715
x-amzn-requestid: 20e508bd-6568-4225-9bee-c683a49d44f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhUHkpIAMFfJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-7dc726b94a37fc667e2e6646;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Lp5eW92D8SbFtcQLk-LRSaSKNMNFYCW7XTALdNdrJxN6ebgdH8_1Dw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 21:52:43 GMT
age: 27335
etag: "5109c156b180727767fc03c411190ccc0d3fb5fc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b1ce583-5604-4223-b88e-880659fdc0e7.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b1ce583-5604-4223-b88e-880659fdc0e7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 94c82cd0e4204ea23b9bd86a3f576fa8
1651325ad361d1c86a4b81edb6b75af27f490a39
0173a565be87e87b2a8fccb3bfe4f237ddd9fdafa5711e79f0c4381882238886
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b1ce583-5604-4223-b88e-880659fdc0e7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8025
x-amzn-requestid: c876c502-bde1-4c03-a946-7af2117240ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bg3EUF0foAMFfyA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63703881-0594a8076fb64f570f824ad1;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 00:21:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: eWpoQ8Bkfez0fw2HBZVlPIWIrtjeS6i6V-Dn0NthrKeeDYQEYq62kQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 21:49:06 GMT
etag: "1651325ad361d1c86a4b81edb6b75af27f490a39"
content-type: image/jpeg
age: 27552
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F594089c3-0cc3-4e41-b8df-290b4d9aa986.jpeg
34.120.237.76200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F594089c3-0cc3-4e41-b8df-290b4d9aa986.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c5f45accbd2d3551103631fa77deee8f
7295ef4c52bcea1be24b963d7ff170ef5bacf713
495e2cef9d9ebec66f1ddcf478512af7e37a301b562d7b75e5d28bb7753d2290
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F594089c3-0cc3-4e41-b8df-290b4d9aa986.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9311
x-amzn-requestid: ccbd88f7-a72f-4f7c-868d-907b2dbea1ad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bZ9_UEQ4IAMFmzQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636d76c8-4c0b800d7bf5064346932e15;Sampled=0
x-amzn-remapped-date: Thu, 10 Nov 2022 22:10:16 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: bJa_vwFYVNizWkPP2aLO8cOJiMqMfZmD34-hAnOlmJ0K2OO3dghWvw==
via: 1.1 0a2ce08fa1ec3c33302a7547d3305978.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 05:54:07 GMT
age: 84851
etag: "7295ef4c52bcea1be24b963d7ff170ef5bacf713"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=73&external_user_id=1303420A712373635B017B93021FB144&crf=1
188.42.191.196200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=73&external_user_id=1303420A712373635B017B93021FB144&crf=1
IP 188.42.191.196:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=73&external_user_id=1303420A712373635B017B93021FB144&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Wed, 15 Nov 2023 05:28:18 GMT; Path=/; Domain=.betweendigital.com
tuuid=b32fbb72-c9e3-523f-be53-24a4dd2007d6; Max-Age=31536000; Expires=Wed, 15 Nov 2023 05:28:18 GMT; Path=/; Domain=.betweendigital.com
ut=Y3MjcgAIf8gnii4o6WGfYi5L1DDGOBbxGqAJcA==; Max-Age=31536000; Expires=Wed, 15 Nov 2023 05:28:18 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
193.3.184.227302 Found 154 B URL HTTP/2 www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
IP 193.3.184.227:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2NzI3GTewFbRLEfAh8eccCGkAZ0CEJW2cF9alQpKlYX; cSyncDp7v2=1668490097; cSyncDp14v3=1668490097; cSyncDp17=1668490097; cSyncDp32=1668490097; cSyncDp45v3=1668490097; cSyncDp53=1668490097; cSyncDp54v2=1668490097; cSyncDp62=1668490097; cSyncDp67v2=1668490097; cSyncDp68=1668490097; cSyncDp71=1668490097; cSyncDp77=1668490097; cSyncDp84=1668490097; cSyncDp85=1668490097; cSyncDp95v3=1668490097; cSyncDp101=1668490097; cSyncDp104v2=1668490097; cSyncDp107=1668490097; cSyncDp110=1668490097; cSyncDp111v2=1668490097; cSyncDp112v2=1668490097; cSyncDp125v2=1668490097; cSyncDp126=1668490097; cSyncDp127=1668490097; cSyncDp129=1668490097; cSyncDp136v2=1668490097; cSyncDp138=1668490097; cSyncDp144=1668490097; cSyncDp146=1668490097; cSyncDp148=1668490097; cSyncDp149v2=1668490097; cSyncDp151=1668490097; cSyncDp178=1668490097; cSyncDp179=1668490097; cSyncDp186=1668490097; cSyncDp221=1668490097
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 15 Nov 2022 05:28:18 GMT
content-type: text/html
content-length: 154
location: https://ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=1303420A712373635B017B93021FB144
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sm.rtb.mts.ru/match/second?ssp=30&exu=1303420A712373635B017B93021FB144
217.66.147.42200 OK 0 B URL HTTP/1.1 sm.rtb.mts.ru/match/second?ssp=30&exu=1303420A712373635B017B93021FB144
IP 217.66.147.42:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/second?ssp=30&exu=1303420A712373635B017B93021FB144 HTTP/1.1
Host: sm.rtb.mts.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 05:28:18 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin
Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
Vary: Origin
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
px.adhigh.net/p/cm/sape?u=1303420A712373635B017B93021FB144&bounced=1
194.190.76.44200 OK 49 B URL HTTP/2 px.adhigh.net/p/cm/sape?u=1303420A712373635B017B93021FB144&bounced=1
IP 194.190.76.44:0
ASN #48061 Limited Liability Company GPM Digital Technologies
File type GIF image data, version 89a, 1 x 1\012- data
Hash 889bc1fffc025af4685839fb516a0b8b
7f105137a4eafe93213ecd8cc34dd907c340467c
d0409a1b73dab4e29dc40f92fb431fa9133baa23b4a1ffae4897f39068110e32
GET /p/cm/sape?u=1303420A712373635B017B93021FB144&bounced=1 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 15 Nov 2022 05:28:18 GMT
content-type: image/gif
content-length: 49
x-backend-id: f22-ru
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
X-Firefox-Spdy: h2
ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=1303420A712373635B017B93021FB144
195.209.111.4200 OK 42 B URL HTTP/1.1 ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=1303420A712373635B017B93021FB144
IP 195.209.111.4:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cgi-bin/sync.cgi?ssp_id=43&external_id=1303420A712373635B017B93021FB144 HTTP/1.1
Host: ssp.adriver.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 05:28:18 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
tag.digitaltarget.ru/processor.js?i=92704657667519
185.15.175.131200 OK 16 kB URL HTTP/1.1 tag.digitaltarget.ru/processor.js?i=92704657667519
IP 185.15.175.131:0
File type ASCII text, with very long lines (15897), with no line terminators
Hash c9571a7ce0a22f154c74bdc8e35523e0
101feba577e71fc076ea5bf3f4af08b5d3fe988d
51cf59da6b7e03337540ee3ab9f8e135ff2ead958475c1bacc8683df57823fb0
GET /processor.js?i=92704657667519 HTTP/1.1
Host: tag.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 05:28:18 GMT
Content-Type: application/javascript
Content-Length: 15897
Last-Modified: Tue, 15 Nov 2022 05:04:11 GMT
Connection: keep-alive
ETag: "63731dcb-3e19"
Accept-Ranges: bytes
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3c4ff5da14aae946708cb3b91ff492c6
9782c41c1287dbfe6099b9117d8dd59b9325a01d
c0d41e6916ad510625b55305f3694c9fe8e2d9005dfc117cb1d13b8730c2c9d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C0D41E6916AD510625B55305F3694C9FE8E2D9005DFC117CB1D13B8730C2C9D1"
Last-Modified: Mon, 14 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11206
Expires: Tue, 15 Nov 2022 08:35:04 GMT
Date: Tue, 15 Nov 2022 05:28:18 GMT
Connection: keep-alive
dmg.digitaltarget.ru/1/1093/i/i?i=763533277920120.442582194062665&a=77&e=1303420A712373635B017B93021FB144&pref=http%3A%2F%2Fwww.ladylib.net%2F&c=ss:77.up:1303420A712373635B017B93021FB144.sync:up.xdua:duafYumkLpadcKgKvzRjjMdS.xps:xpsR4suTuvnhfopWkexzGrDgg.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
185.15.175.132307 Temporary Redirect 0 B URL HTTP/1.1 dmg.digitaltarget.ru/1/1093/i/i?i=763533277920120.442582194062665&a=77&e=1303420A712373635B017B93021FB144&pref=http%3A%2F%2Fwww.ladylib.net%2F&c=ss:77.up:1303420A712373635B017B93021FB144.sync:up.xdua:duafYumkLpadcKgKvzRjjMdS.xps:xpsR4suTuvnhfopWkexzGrDgg.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
IP 185.15.175.132:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/1093/i/i?i=763533277920120.442582194062665&a=77&e=1303420A712373635B017B93021FB144&pref=http%3A%2F%2Fwww.ladylib.net%2F&c=ss:77.up:1303420A712373635B017B93021FB144.sync:up.xdua:duafYumkLpadcKgKvzRjjMdS.xps:xpsR4suTuvnhfopWkexzGrDgg.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Tue, 15 Nov 2022 05:28:18 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1668490098845&i=763533277920120.442582194062665&a=77&e=1303420A712373635B017B93021FB144&pref=http%3A%2F%2Fwww.ladylib.net%2F&c=ss:77.up:1303420A712373635B017B93021FB144.sync:up.xdua:duafYumkLpadcKgKvzRjjMdS.xps:xpsR4suTuvnhfopWkexzGrDgg.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
Set-Cookie: viuserid=whOWNSpWwR8QqNT7brVC; Max-Age=93312000; Expires=Thu, 30 Oct 2025 05:28:18 GMT; SameSite=None; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly
Request-Time: 0
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/1/1093/i/i?i=763533277920120.561216527633583&a=77&e=1303420A712373635B017B93021FB144&pref=http%3A%2F%2Fwww.ladylib.net%2F&c=ss:77.up:1303420A712373635B017B93021FB144.sync:up.xdua:duafYumkLpadcKgKvzRjjMdS.xps:xpsR4suTuvnhfopWkexzGrDgg.dn:acint__net.adcm:hit.tg:adcmjs_noorient
185.15.175.132307 Temporary Redirect 0 B URL HTTP/1.1 dmg.digitaltarget.ru/1/1093/i/i?i=763533277920120.561216527633583&a=77&e=1303420A712373635B017B93021FB144&pref=http%3A%2F%2Fwww.ladylib.net%2F&c=ss:77.up:1303420A712373635B017B93021FB144.sync:up.xdua:duafYumkLpadcKgKvzRjjMdS.xps:xpsR4suTuvnhfopWkexzGrDgg.dn:acint__net.adcm:hit.tg:adcmjs_noorient
IP 185.15.175.132:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/1093/i/i?i=763533277920120.561216527633583&a=77&e=1303420A712373635B017B93021FB144&pref=http%3A%2F%2Fwww.ladylib.net%2F&c=ss:77.up:1303420A712373635B017B93021FB144.sync:up.xdua:duafYumkLpadcKgKvzRjjMdS.xps:xpsR4suTuvnhfopWkexzGrDgg.dn:acint__net.adcm:hit.tg:adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Tue, 15 Nov 2022 05:28:18 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1668490098834&i=763533277920120.561216527633583&a=77&e=1303420A712373635B017B93021FB144&pref=http%3A%2F%2Fwww.ladylib.net%2F&c=ss:77.up:1303420A712373635B017B93021FB144.sync:up.xdua:duafYumkLpadcKgKvzRjjMdS.xps:xpsR4suTuvnhfopWkexzGrDgg.dn:acint__net.adcm:hit.tg:adcmjs_noorient
Set-Cookie: viuserid=zkGQVXfWZ8YLn5u7H3u7; Max-Age=93312000; Expires=Thu, 30 Oct 2025 05:28:18 GMT; SameSite=None; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly
Request-Time: 1
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1668490098845&i=763533277920120.442582194062665&a=77&e=1303420A712373635B017B93021FB144&pref=http%3A%2F%2Fwww.ladylib.net%2F&c=ss:77.up:1303420A712373635B017B93021FB144.sync:up.xdua:duafYumkLpadcKgKvzRjjMdS.xps:xpsR4suTuvnhfopWkexzGrDgg.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
185.15.175.132200 OK 64 B URL HTTP/1.1 dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1668490098845&i=763533277920120.442582194062665&a=77&e=1303420A712373635B017B93021FB144&pref=http%3A%2F%2Fwww.ladylib.net%2F&c=ss:77.up:1303420A712373635B017B93021FB144.sync:up.xdua:duafYumkLpadcKgKvzRjjMdS.xps:xpsR4suTuvnhfopWkexzGrDgg.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
IP 185.15.175.132:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ffd585dfb1ac6320633a0be46d579437
5a6033d23bc9cd5d1de9ee61de69a44428086dcb
df18d81deb0cc1c48ae87e6481bb4ee375b40cce0fec3d226e002704d49f6cc8
GET /awg/custom/1093/i/i?call_source=awg&ts=1668490098845&i=763533277920120.442582194062665&a=77&e=1303420A712373635B017B93021FB144&pref=http%3A%2F%2Fwww.ladylib.net%2F&c=ss:77.up:1303420A712373635B017B93021FB144.sync:up.xdua:duafYumkLpadcKgKvzRjjMdS.xps:xpsR4suTuvnhfopWkexzGrDgg.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 05:28:18 GMT
Content-Type: image/gif
Content-Length: 64
Connection: keep-alive
Vary: Accept-Encoding
Request-Time: 27
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1668490098834&i=763533277920120.561216527633583&a=77&e=1303420A712373635B017B93021FB144&pref=http%3A%2F%2Fwww.ladylib.net%2F&c=ss:77.up:1303420A712373635B017B93021FB144.sync:up.xdua:duafYumkLpadcKgKvzRjjMdS.xps:xpsR4suTuvnhfopWkexzGrDgg.dn:acint__net.adcm:hit.tg:adcmjs_noorient
185.15.175.132200 OK 64 B URL HTTP/1.1 dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&ts=1668490098834&i=763533277920120.561216527633583&a=77&e=1303420A712373635B017B93021FB144&pref=http%3A%2F%2Fwww.ladylib.net%2F&c=ss:77.up:1303420A712373635B017B93021FB144.sync:up.xdua:duafYumkLpadcKgKvzRjjMdS.xps:xpsR4suTuvnhfopWkexzGrDgg.dn:acint__net.adcm:hit.tg:adcmjs_noorient
IP 185.15.175.132:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ffd585dfb1ac6320633a0be46d579437
5a6033d23bc9cd5d1de9ee61de69a44428086dcb
df18d81deb0cc1c48ae87e6481bb4ee375b40cce0fec3d226e002704d49f6cc8
GET /awg/custom/1093/i/i?call_source=awg&ts=1668490098834&i=763533277920120.561216527633583&a=77&e=1303420A712373635B017B93021FB144&pref=http%3A%2F%2Fwww.ladylib.net%2F&c=ss:77.up:1303420A712373635B017B93021FB144.sync:up.xdua:duafYumkLpadcKgKvzRjjMdS.xps:xpsR4suTuvnhfopWkexzGrDgg.dn:acint__net.adcm:hit.tg:adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 15 Nov 2022 05:28:18 GMT
Content-Type: image/gif
Content-Length: 64
Connection: keep-alive
Vary: Accept-Encoding
Request-Time: 26
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
www.acint.net/ping/?v=0.4.0&uid=67846b74-20d3-4104-82e8-9deb959bfd1f&dp=10&tz=%2B00%3A00&nc=29638226&dT=2022-11-15T05%3A28%3A19.871
193.3.184.227302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/ping/?v=0.4.0&uid=67846b74-20d3-4104-82e8-9deb959bfd1f&dp=10&tz=%2B00%3A00&nc=29638226&dT=2022-11-15T05%3A28%3A19.871
IP 193.3.184.227:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /ping/?v=0.4.0&uid=67846b74-20d3-4104-82e8-9deb959bfd1f&dp=10&tz=%2B00%3A00&nc=29638226&dT=2022-11-15T05%3A28%3A19.871 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ladylib.net/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Tue, 15 Nov 2022 05:28:20 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/ping/?v=0.4.0&uid=67846b74-20d3-4104-82e8-9deb959bfd1f&dp=10&tz=%2B00%3A00&nc=29638226&dT=2022-11-15T05%3A28%3A19.871
www.acint.net/ping/?v=0.4.0&uid=67846b74-20d3-4104-82e8-9deb959bfd1f&dp=10&tz=%2B00%3A00&nc=29638226&dT=2022-11-15T05%3A28%3A19.871
193.3.184.227200 OK 43 B URL HTTP/2 www.acint.net/ping/?v=0.4.0&uid=67846b74-20d3-4104-82e8-9deb959bfd1f&dp=10&tz=%2B00%3A00&nc=29638226&dT=2022-11-15T05%3A28%3A19.871
IP 193.3.184.227:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /ping/?v=0.4.0&uid=67846b74-20d3-4104-82e8-9deb959bfd1f&dp=10&tz=%2B00%3A00&nc=29638226&dT=2022-11-15T05%3A28%3A19.871 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ladylib.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDE2NzI3GTewFbRLEfAh8eccCGkAZ0CEJW2cF9alQpKlYX; cSyncDp7v2=1668490097; cSyncDp14v3=1668490097; cSyncDp17=1668490097; cSyncDp32=1668490097; cSyncDp45v3=1668490097; cSyncDp53=1668490097; cSyncDp54v2=1668490097; cSyncDp62=1668490097; cSyncDp67v2=1668490097; cSyncDp68=1668490097; cSyncDp71=1668490097; cSyncDp77=1668490097; cSyncDp84=1668490097; cSyncDp85=1668490097; cSyncDp95v3=1668490097; cSyncDp101=1668490097; cSyncDp104v2=1668490097; cSyncDp107=1668490097; cSyncDp110=1668490097; cSyncDp111v2=1668490097; cSyncDp112v2=1668490097; cSyncDp125v2=1668490097; cSyncDp126=1668490097; cSyncDp127=1668490097; cSyncDp129=1668490097; cSyncDp136v2=1668490097; cSyncDp138=1668490097; cSyncDp144=1668490097; cSyncDp146=1668490097; cSyncDp148=1668490097; cSyncDp149v2=1668490097; cSyncDp151=1668490097; cSyncDp178=1668490097; cSyncDp179=1668490097; cSyncDp186=1668490097; cSyncDp221=1668490097
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 15 Nov 2022 05:28:20 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mc.yandex.ru/watch/90979946?wmode=7&page-url=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%2263732371-8872-b01v-g3v6-xy3wrwk0cvom%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A616%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A921%3Acn%3A2%3Adp%3A0%3Als%3A859334214717%3Ahid%3A709454408%3Az%3A0%3Ai%3A20221115052817%3Aet%3A1668490098%3Ac%3A1%3Arn%3A287443417%3Arqn%3A1%3Au%3A1668490098124136152%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A3%2C21%2C56%2C0%2C-6%2C0%2C%2C1080%2C2%2C%2C%2C%2C1200%3Ans%3A1668490095711%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668490098%3At%3A%D0%A1%D0%BE%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%BB%D1%8E%D0%B1%D0%BE%D0%B2%D0%BD%D1%8B%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%20%D0%BD%D0%B0%20%D0%B1%D1%83%D0%BA%D0%B2%D1%83%20%D0%90&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
77.88.21.119302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/90979946?wmode=7&page-url=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%2263732371-8872-b01v-g3v6-xy3wrwk0cvom%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A616%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A921%3Acn%3A2%3Adp%3A0%3Als%3A859334214717%3Ahid%3A709454408%3Az%3A0%3Ai%3A20221115052817%3Aet%3A1668490098%3Ac%3A1%3Arn%3A287443417%3Arqn%3A1%3Au%3A1668490098124136152%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A3%2C21%2C56%2C0%2C-6%2C0%2C%2C1080%2C2%2C%2C%2C%2C1200%3Ans%3A1668490095711%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668490098%3At%3A%D0%A1%D0%BE%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%BB%D1%8E%D0%B1%D0%BE%D0%B2%D0%BD%D1%8B%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%20%D0%BD%D0%B0%20%D0%B1%D1%83%D0%BA%D0%B2%D1%83%20%D0%90&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP 77.88.21.119:0
GET /watch/90979946?wmode=7&page-url=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%2263732371-8872-b01v-g3v6-xy3wrwk0cvom%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A616%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A921%3Acn%3A2%3Adp%3A0%3Als%3A859334214717%3Ahid%3A709454408%3Az%3A0%3Ai%3A20221115052817%3Aet%3A1668490098%3Ac%3A1%3Arn%3A287443417%3Arqn%3A1%3Au%3A1668490098124136152%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A3%2C21%2C56%2C0%2C-6%2C0%2C%2C1080%2C2%2C%2C%2C%2C1200%3Ans%3A1668490095711%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668490098%3At%3A%D0%A1%D0%BE%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%BB%D1%8E%D0%B1%D0%BE%D0%B2%D0%BD%D1%8B%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%20%D0%BD%D0%B0%20%D0%B1%D1%83%D0%BA%D0%B2%D1%83%20%D0%90&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.ladylib.net
Connection: keep-alive
Referer: http://www.ladylib.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/90979946/1?wmode=7&page-url=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&charset=utf-8&site-info=%7B%22srtb_sid%22%3A%2263732371-8872-b01v-g3v6-xy3wrwk0cvom%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A616%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A921%3Acn%3A2%3Adp%3A0%3Als%3A859334214717%3Ahid%3A709454408%3Az%3A0%3Ai%3A20221115052817%3Aet%3A1668490098%3Ac%3A1%3Arn%3A287443417%3Arqn%3A1%3Au%3A1668490098124136152%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A3%2C21%2C56%2C0%2C-6%2C0%2C%2C1080%2C2%2C%2C%2C%2C1200%3Ans%3A1668490095711%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668490098%3At%3A%D0%A1%D0%BE%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%BB%D1%8E%D0%B1%D0%BE%D0%B2%D0%BD%D1%8B%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%20%D0%BD%D0%B0%20%D0%B1%D1%83%D0%BA%D0%B2%D1%83%20%D0%90&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 15 Nov 2022 05:28:18 GMT
access-control-allow-origin: http://www.ladylib.net
set-cookie: yandexuid=187616231668490098; Expires=Wed, 15-Nov-2023 05:28:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=187616231668490098; Expires=Wed, 15-Nov-2023 05:28:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=1413523881668490098; Path=/; SameSite=None; Secure
i=mRHrGJW0MSJKGpBo6A3yqOz/qFlmWNTrwx48Oy/VYtzQpHc7mR4CyUiD+llf45clH6XD9qoOvJo6S/7NTtGlyKjBv3s=; Expires=Fri, 12-Nov-2032 05:28:16 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1700026098.yrts.1668490098#1700026098.yrtsi.1668490098; Expires=Wed, 15-Nov-2023 05:28:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 15-Nov-2022 05:28:18 GMT
last-modified: Tue, 15-Nov-2022 05:28:18 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71281900?wmode=7&page-url=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&charset=utf-8&site-info=%7B%22site_id%22%3A58275%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A616%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A231169709943%3Ahid%3A709454408%3Az%3A0%3Ai%3A20221115052817%3Aet%3A1668490098%3Ac%3A1%3Arn%3A231300100%3Arqn%3A1%3Au%3A1668490098124136152%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A3%2C21%2C56%2C0%2C-6%2C0%2C%2C1080%2C2%2C%2C%2C%2C1200%3Ans%3A1668490095711%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668490098%3At%3A%D0%A1%D0%BE%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%BB%D1%8E%D0%B1%D0%BE%D0%B2%D0%BD%D1%8B%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%20%D0%BD%D0%B0%20%D0%B1%D1%83%D0%BA%D0%B2%D1%83%20%D0%90&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
77.88.21.119302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/71281900?wmode=7&page-url=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&charset=utf-8&site-info=%7B%22site_id%22%3A58275%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A616%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A231169709943%3Ahid%3A709454408%3Az%3A0%3Ai%3A20221115052817%3Aet%3A1668490098%3Ac%3A1%3Arn%3A231300100%3Arqn%3A1%3Au%3A1668490098124136152%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A3%2C21%2C56%2C0%2C-6%2C0%2C%2C1080%2C2%2C%2C%2C%2C1200%3Ans%3A1668490095711%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668490098%3At%3A%D0%A1%D0%BE%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%BB%D1%8E%D0%B1%D0%BE%D0%B2%D0%BD%D1%8B%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%20%D0%BD%D0%B0%20%D0%B1%D1%83%D0%BA%D0%B2%D1%83%20%D0%90&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP 77.88.21.119:0
GET /watch/71281900?wmode=7&page-url=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&charset=utf-8&site-info=%7B%22site_id%22%3A58275%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A616%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A231169709943%3Ahid%3A709454408%3Az%3A0%3Ai%3A20221115052817%3Aet%3A1668490098%3Ac%3A1%3Arn%3A231300100%3Arqn%3A1%3Au%3A1668490098124136152%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A3%2C21%2C56%2C0%2C-6%2C0%2C%2C1080%2C2%2C%2C%2C%2C1200%3Ans%3A1668490095711%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668490098%3At%3A%D0%A1%D0%BE%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%BB%D1%8E%D0%B1%D0%BE%D0%B2%D0%BD%D1%8B%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%20%D0%BD%D0%B0%20%D0%B1%D1%83%D0%BA%D0%B2%D1%83%20%D0%90&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.ladylib.net
Connection: keep-alive
Referer: http://www.ladylib.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/71281900/1?wmode=7&page-url=http%3A%2F%2Fwww.ladylib.net%2Fsovrem_romani.php&charset=utf-8&site-info=%7B%22site_id%22%3A58275%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A616%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A231169709943%3Ahid%3A709454408%3Az%3A0%3Ai%3A20221115052817%3Aet%3A1668490098%3Ac%3A1%3Arn%3A231300100%3Arqn%3A1%3Au%3A1668490098124136152%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A3%2C21%2C56%2C0%2C-6%2C0%2C%2C1080%2C2%2C%2C%2C%2C1200%3Ans%3A1668490095711%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668490098%3At%3A%D0%A1%D0%BE%D0%B2%D1%80%D0%B5%D0%BC%D0%B5%D0%BD%D0%BD%D1%8B%D0%B5%20%D0%BB%D1%8E%D0%B1%D0%BE%D0%B2%D0%BD%D1%8B%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%2C%20%D0%B6%D0%B5%D0%BD%D1%81%D0%BA%D0%B8%D0%B5%20%D1%80%D0%BE%D0%BC%D0%B0%D0%BD%D1%8B%20%D0%BD%D0%B0%20%D0%B1%D1%83%D0%BA%D0%B2%D1%83%20%D0%90&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 15 Nov 2022 05:28:18 GMT
access-control-allow-origin: http://www.ladylib.net
set-cookie: yandexuid=4495005531668490098; Expires=Wed, 15-Nov-2023 05:28:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=4495005531668490098; Expires=Wed, 15-Nov-2023 05:28:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=172628071668490098; Path=/; SameSite=None; Secure
i=ThpXnkE7a4raF2nR4t3gDTtdLqvPDhCrQVDtzO+K4U96KbgIy9x/kTeadbh1fp84G8fONTEyJPNrAttYkUB+2TFq+JA=; Expires=Fri, 12-Nov-2032 05:28:13 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1700026098.yrts.1668490098#1700026098.yrtsi.1668490098; Expires=Wed, 15-Nov-2023 05:28:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 15-Nov-2022 05:28:18 GMT
last-modified: Tue, 15-Nov-2022 05:28:18 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
an.yandex.ru/mapuid/gonetdspis/ODExZTk3YTM1NWEzMWRl?redir-setuniq=1
93.158.134.90200 OK 0 B URL HTTP/2 an.yandex.ru/mapuid/gonetdspis/ODExZTk3YTM1NWEzMWRl?redir-setuniq=1
IP 93.158.134.90:0
GET /mapuid/gonetdspis/ODExZTk3YTM1NWEzMWRl?redir-setuniq=1 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Tue, 15 Nov 2022 05:28:18 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 15 Nov 2022 05:28:18 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Tue, 15 Nov 2022 05:28:18 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif; charset=utf-8
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
an.yandex.ru/mapuid/gonetdspis/ODExZTk3YTM1NWEzMWRl
93.158.134.90302 Found 0 B URL HTTP/2 an.yandex.ru/mapuid/gonetdspis/ODExZTk3YTM1NWEzMWRl
IP 93.158.134.90:0
GET /mapuid/gonetdspis/ODExZTk3YTM1NWEzMWRl HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
timing-allow-origin: *
location: https://an.yandex.ru/mapuid/gonetdspis/ODExZTk3YTM1NWEzMWRl?redir-setuniq=1
date: Tue, 15 Nov 2022 05:28:18 GMT
set-cookie: yandexuid=2532024891668490098; domain=.yandex.ru; path=/; expires=Fri, 12-Nov-2032 05:28:18 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 15 Nov 2022 05:28:18 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Tue, 15 Nov 2022 05:28:18 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ssp.bidvol.com/usersync?dspcsid=8&redirect=1
65.109.65.188302 Found 0 B URL HTTP/2 ssp.bidvol.com/usersync?dspcsid=8&redirect=1
IP 65.109.65.188:0
ASN #24940 Hetzner Online GmbH
GET /usersync?dspcsid=8&redirect=1 HTTP/1.1
Host: ssp.bidvol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.22.0
date: Tue, 15 Nov 2022 05:28:17 GMT
x-request-id: 9bebdded-124a-4d5c-af5e-b9e6268a20b1
set-cookie: bvuid=dc0hdxlh1d; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None
bvuid2=dc0hdxlh1d; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT
vary: Origin
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
surrogate-control: no-store
location: https://www.acint.net/match?dp=129&euid=dc0hdxlh1d
X-Firefox-Spdy: h2
adlmerge.com/merge_gpsid/?sid=50&id=1303420A712373635B017B93021FB144
95.211.66.35200 OK 0 B URL HTTP/2 adlmerge.com/merge_gpsid/?sid=50&id=1303420A712373635B017B93021FB144
IP 95.211.66.35:0
ASN #60781 LeaseWeb Netherlands B.V.
GET /merge_gpsid/?sid=50&id=1303420A712373635B017B93021FB144 HTTP/1.1
Host: adlmerge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.16.0
date: Tue, 15 Nov 2022 05:28:17 GMT
content-type: image/gif
iseu: eu
X-Firefox-Spdy: h2