firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-stale=0
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:08:29 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: IcSjaFByO3e9VUz8h8C5kfI6ElpvLzJ7ueBF4zE-EDXV7FjdELkAzg==
Age: 3541
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 282f6e1328452c1cb41f6a6272fff757
20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262
6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4012
Expires: Wed, 05 Oct 2022 17:14:22 GMT
Date: Wed, 05 Oct 2022 16:07:30 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 05 Oct 2022 04:02:33 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DmImAWXVwEN88MBt-1PhsvH9kfw_da5DGGYIdIBKuLudPYEwPwyQUA==
age: 43498
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 05 Oct 2022 16:07:30 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
faq7.ru/downloads/el2walker10.9.1-full.zip
302 Moved Temporarily 0 B URL HTTP/1.1 faq7.ru/downloads/el2walker10.9.1-full.zip
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /downloads/el2walker10.9.1-full.zip HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Wed, 05 Oct 2022 16:07:31 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
X-Powered-By: PHP/5.5.38
Location: http://faq7.ru/error.php?code=404
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Wed, 05 Oct 2022 15:30:28 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Wed, 05 Oct 2022 15:46:42 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Bvap-E-4LPCojzrl0nRH-1XLqIKJjNLU1kyTUzlYB-3tdoOdpAkW6Q==
Age: 2278
faq7.ru/error.php?code=404
200 OK 14 kB URL HTTP/1.1 faq7.ru/error.php?code=404
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Non-ISO extended-ASCII text, with very long lines (18362), with CRLF, LF line terminators
Hash 5eaefce658ecddeefa2322d644c95b72
5b7c37167b4e971a5db226bdb2c62890af75b1cf
1603c60ad8444e84e5ae2f94a9c28e36ea15266b3b9a9b9bd64050364c254077
GET /error.php?code=404 HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:31 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.5.38
Set-Cookie: fusionQC28M_visited=yes; expires=Thu, 05-Oct-2023 16:07:31 GMT; Max-Age=31536000; path=/
fusionQC28M_lastvisit=1664982451; expires=Wed, 05-Oct-2022 17:07:31 GMT; Max-Age=3600; path=/; domain=faq7.ru; httponly
Content-Encoding: gzip
faq7.ru/includes/sc/tabs.css
200 OK 489 B URL HTTP/1.1 faq7.ru/includes/sc/tabs.css
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash 94b04a9748ba103b1a638a419d2f3e12
1b41edda82191330b0bc2fc3f22b552b02c162ee
21c18592cab013c5a578d3c4930e3d2efd763fce0db24dfa0d34322c89ae45a5
GET /includes/sc/tabs.css HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:31 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 10 May 2018 23:13:07 GMT
Content-Encoding: gzip
faq7.ru/themes/faq7_new/styles.css
200 OK 4.0 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/styles.css
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type assembler source, ISO-8859 text
Hash 29f9a5f94b994d1ed6560a2942f5f68d
0a65d089f66cb06cc18304594cf348ebe97900aa
e500c712570fe5f49405451d11aa8844425255596b95ceb161f12baa2f6ba6c8
GET /themes/faq7_new/styles.css HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:31 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 10 Feb 2012 21:21:42 GMT
Content-Encoding: gzip
faq7.ru/themes/templates/scrollto.css
200 OK 197 B URL HTTP/1.1 faq7.ru/themes/templates/scrollto.css
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash de790ab65c683e4288b5cb608e7538ad
59bfffdd15d94dac2f0787a5820f15fe5289610e
3bb0e839ac9aa0f8a8110b019715f03fae8ef3866ca9b7ac8481ed0503ac661f
GET /themes/templates/scrollto.css HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:31 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 24 Sep 2013 13:55:32 GMT
Content-Encoding: gzip
faq7.ru/includes/jscript.js
200 OK 2.1 kB URL HTTP/1.1 faq7.ru/includes/jscript.js
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type ISO-8859 text, with very long lines (3332)
Hash c6e760336b8ab3156952a91167e54f77
763f8887fe0c9bb0c66cb519d1aca4d73620498a
9d3eeafa976fc7a375ea2a47558d5a799a9eca12fdc4f79b36b8d6d10c1387a7
GET /includes/jscript.js HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:31 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 25 Feb 2012 20:46:11 GMT
Content-Encoding: gzip
userapi.com/js/api/openapi.js?34
301 Moved Permanently 164 B URL HTTP/1.1 userapi.com/js/api/openapi.js?34
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 6d359f551ba4cb27d59e94a6cddaec09
d230318bd921ad8167c2eb9dfdc7b1d7d2c7373f
9ecd8531025e89f5e1ca23d81203a9feddbd5b4b75ca79c9868cb53762293bc8
GET /js/api/openapi.js?34 HTTP/1.1
Host: userapi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 301 Moved Permanently
Server: kittenx
Date: Wed, 05 Oct 2022 16:07:31 GMT
Content-Type: text/html
Content-Length: 164
Connection: keep-alive
Location: https://vk.com/js/api/openapi.js?34
X-Frontend: front220101
Access-Control-Expose-Headers: X-Frontend
Strict-Transport-Security: max-age=15768000
faq7.ru/includes/sc/tabs.js
200 OK 194 B URL HTTP/1.1 faq7.ru/includes/sc/tabs.js
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash 6e90085f150f59cb03edd6ec670fa7da
bb2963ce68d3085312596c54696f9f40dae47fa5
91e0b6352b4d9d8a2a553614385173ab1c7dabc079e3c51f7be80a4c5263afe5
GET /includes/sc/tabs.js HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:31 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 13 Apr 2012 19:51:42 GMT
Content-Encoding: gzip
faq7.ru/infusions/wnavi_panel/tools.js
200 OK 742 B URL HTTP/1.1 faq7.ru/infusions/wnavi_panel/tools.js
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type ASCII text, with very long lines (734)
Hash 0be610858474bc880768546a4c5f5a62
f71db2e0cc15d70866e9cdd6842a328e5343f1c7
ac2034ec0c46e0a1558ac542efddbad8ad2deb136c91dd7d4dc6f6bf82e766bb
GET /infusions/wnavi_panel/tools.js HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:31 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 25 Feb 2012 21:40:59 GMT
Content-Encoding: gzip
faq7.ru/themes/templates/scrollto.js
200 OK 402 B URL HTTP/1.1 faq7.ru/themes/templates/scrollto.js
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash eb3f8a1e0ff48e1d6ac3b6008f6ee905
8a27aaa5271ac5d09bcc4150ddd148bc0eb515ea
86266cec3ff3c340cdd470160199b9d9ab20517fda4d8f306f373d4db5c65d04
GET /themes/templates/scrollto.js HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:31 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 24 Sep 2013 13:55:30 GMT
Content-Encoding: gzip
api-maps.yandex.ru/1.1/index.xml
302 Moved temporarily 0 B URL HTTP/1.1 api-maps.yandex.ru/1.1/index.xml
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1.1/index.xml HTTP/1.1
Host: api-maps.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302 Moved temporarily
Content-Length: 0
Location: https://api-maps.yandex.ru/1.1/index.xml
Set-Cookie: _yasc=Nkd83E1GB8Ii1ulQweJpwc0QRDdkAgCv/+lL8Es2tiTK3A==; domain=.yandex.ru; path=/; expires=Fri, 04-Nov-2022 16:07:31 GMT; secure
userapi.com/js/api/openapi.js?49
301 Moved Permanently 164 B URL HTTP/1.1 userapi.com/js/api/openapi.js?49
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 6d359f551ba4cb27d59e94a6cddaec09
d230318bd921ad8167c2eb9dfdc7b1d7d2c7373f
9ecd8531025e89f5e1ca23d81203a9feddbd5b4b75ca79c9868cb53762293bc8
GET /js/api/openapi.js?49 HTTP/1.1
Host: userapi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 301 Moved Permanently
Server: kittenx
Date: Wed, 05 Oct 2022 16:07:31 GMT
Content-Type: text/html
Content-Length: 164
Connection: keep-alive
Location: https://vk.com/js/api/openapi.js?49
X-Frontend: front220101
Access-Control-Expose-Headers: X-Frontend
Strict-Transport-Security: max-age=15768000
mc.yandex.ru/metrika/watch.js
302 Moved temporarily 0 B URL HTTP/1.1 mc.yandex.ru/metrika/watch.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302 Moved temporarily
Content-Length: 0
Location: https://mc.yandex.ru/metrika/watch.js
ocsp.digicert.com/
200 OK 471 B IP
Hash 1561c6be7c89d1357a80d12de47b6e74
9a705277922ecca583c867af58b3efce099f83bd
e33dc034dbf4b3b627cd3c1af2d942e2ca5704ec9a4aad5c46ad39eb070e82ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3795
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 16:07:31 GMT
Last-Modified: Wed, 05 Oct 2022 15:04:16 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
faq7.ru/infusions/shoutbox_panel/ash.js
200 OK 1.0 kB URL HTTP/1.1 faq7.ru/infusions/shoutbox_panel/ash.js
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash ae01fb6204f511588e8a46e72a75b80f
9955c073c7435f55fac0744b64a32da5f80228c7
cef09f718a9852e0781abde108be3b512d9cb4d2d1e22283460b49578dc0b0a3
GET /infusions/shoutbox_panel/ash.js HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:31 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 25 Feb 2012 21:36:15 GMT
Content-Encoding: gzip
faq7.ru/includes/jquery/jquery.js
200 OK 34 kB URL HTTP/1.1 faq7.ru/includes/jquery/jquery.js
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash 94966b2cdea759e7fdaf47fcb1e787e8
2352ba4d8d0923451def34d56c04391332e1a3ed
fed5742bef8c2a419e554407fc3af8fad8e5a9a10b6ea38da6254fee4ca6e5d7
GET /includes/jquery/jquery.js HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:31 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 13 May 2012 22:02:13 GMT
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7704d9020923a356295deca8ec608639
77f48037e38d705ddf171141c4841e34983b8d8d
07bc4d4b532bf6d2a40a61bce7ed1f653d2122cd64dd4e1ea80b476290ab59ed
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "07BC4D4B532BF6D2A40A61BCE7ED1F653D2122CD64DD4E1EA80B476290AB59ED"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4184
Expires: Wed, 05 Oct 2022 17:17:15 GMT
Date: Wed, 05 Oct 2022 16:07:31 GMT
Connection: keep-alive
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash b129e7bbf46c044428623d74022eb339
88de4925e9bdf6b26f42b616896adab22e67fa56
1519d8c4d0bcf402c184e6bec73bf1638248997a2da35c89caa2c8fea009f3bd
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 16:07:31 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Sun, 09 Oct 2022 14:06:27 GMT
ETag: "88de4925e9bdf6b26f42b616896adab22e67fa56"
Last-Modified: Wed, 05 Oct 2022 14:06:28 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3547
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75576926bda60af6-OSL
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash b129e7bbf46c044428623d74022eb339
88de4925e9bdf6b26f42b616896adab22e67fa56
1519d8c4d0bcf402c184e6bec73bf1638248997a2da35c89caa2c8fea009f3bd
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 16:07:31 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Sun, 09 Oct 2022 14:06:27 GMT
ETag: "88de4925e9bdf6b26f42b616896adab22e67fa56"
Last-Modified: Wed, 05 Oct 2022 14:06:28 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3547
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75576926b8c9b503-OSL
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 346d48f728d1597dfa916fe9ed986017
bf19033a01156b8ce54df5d3a444faccebea9be7
221ef424a4f6433070d1f69e459d7485454e9d98065082558f344f2a1575a389
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 16:07:31 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sun, 09 Oct 2022 14:35:51 GMT
ETag: "bf19033a01156b8ce54df5d3a444faccebea9be7"
Last-Modified: Wed, 05 Oct 2022 14:35:52 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1602
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75576926de941c02-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 3e84b06e9eb6f3cfbdbb58e71937b3eb
b02f1aee58099cc232a795c61a29c657b2ddad12
e223cb948879bd12fc211a3b6174f031d0a71877b02aec31fc6805d6039de975
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 16:07:31 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Sun, 09 Oct 2022 13:24:56 GMT
ETag: "b02f1aee58099cc232a795c61a29c657b2ddad12"
Last-Modified: Wed, 05 Oct 2022 13:24:57 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 640
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75576926db94b4f1-OSL
vk.com/js/api/openapi.js?34
200 OK 23 kB URL HTTP/2 vk.com/js/api/openapi.js?34
IP
File type ASCII text, with very long lines (3849)
Hash b33ff213862515e45744517b207d77db
7d69b309a9c1d918d8dc7b42c510d08321207b9c
a5cd610dc23e643864c8827d58736c15b955328124bfd95661c88a7b96eaed47
GET /js/api/openapi.js?34 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Wed, 05 Oct 2022 16:07:31 GMT
content-type: application/x-javascript
content-length: 23322
last-modified: Wed, 10 Aug 2022 14:44:17 GMT
etag: "62f3c441-5b1a"
content-encoding: br
expires: Sun, 09 Oct 2022 16:07:31 GMT
cache-control: max-age=345600
x-frontend: front512004
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
vk.com/js/api/openapi.js?49
200 OK 23 kB URL HTTP/2 vk.com/js/api/openapi.js?49
IP
File type ASCII text, with very long lines (3849)
Hash b33ff213862515e45744517b207d77db
7d69b309a9c1d918d8dc7b42c510d08321207b9c
a5cd610dc23e643864c8827d58736c15b955328124bfd95661c88a7b96eaed47
GET /js/api/openapi.js?49 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Wed, 05 Oct 2022 16:07:31 GMT
content-type: application/x-javascript
content-length: 23322
last-modified: Wed, 10 Aug 2022 14:44:17 GMT
etag: "62f3c441-5b1a"
content-encoding: br
expires: Sun, 09 Oct 2022 16:07:31 GMT
cache-control: max-age=345600
x-frontend: front512004
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
ulogin.ru/js/widget.js?display=window&fields=email&optional=first_name,last_name,nickname&redirect_uri=http://faq7.ru/ulogin.php
200 OK 17 kB URL HTTP/1.1 ulogin.ru/js/widget.js?display=window&fields=email&optional=first_name,last_name,nickname&redirect_uri=http://faq7.ru/ulogin.php
IP
ASN #12695 LLC Digital Network
File type ASCII text, with very long lines (580)
Hash d0aeb0ca1401db63e0f72da3f101ec9b
4cd78f340a48961518cc99a59c1f7b6c912feb07
8c270aae9c9f946930715147fed929a53cb56cf01a30aad6f78663f49d02fa94
GET /js/widget.js?display=window&fields=email&optional=first_name,last_name,nickname&redirect_uri=http://faq7.ru/ulogin.php HTTP/1.1
Host: ulogin.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:33 GMT
Content-Type: application/x-javascript
Content-Length: 17398
Last-Modified: Tue, 10 Aug 2021 18:41:38 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "6112c862-43f6"
Content-Encoding: gzip
Expires: Sat, 08 Oct 2022 16:07:33 GMT
Cache-Control: max-age=259200
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: dPqNZ4BbBdBxDp5PMJXjlA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: qSxJ7DmCLUAEikaX/8eCmamPLWs=
mc.yandex.ru/metrika/watch.js
200 OK 57 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (570)
Hash 48798013c0390f91a854635fb2e562e6
db45594e537654f93149d519012551fc5fe4d52c
b61e415e48fd94a289c2ccf980631bb1a4a75aebeace394b8c9d988dd879bfa5
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 57234
date: Wed, 05 Oct 2022 16:07:31 GMT
access-control-allow-origin: *
etag: "633be002-df92"
expires: Wed, 05 Oct 2022 17:07:31 GMT
last-modified: Tue, 04 Oct 2022 10:25:54 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
faq7.ru/infusions/shoutbox_panel/ash.css
200 OK 510 B URL HTTP/1.1 faq7.ru/infusions/shoutbox_panel/ash.css
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash 75ca413eb284a7e9875b93e76820a752
4e335a8e427bcfa76c13f930a03f202114a293c9
5ef2da20fca7f2fcc0bcb55c3ae9a9712c74336977f91a4674c798504ffaa4f5
GET /infusions/shoutbox_panel/ash.css HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 18:39:40 GMT
Content-Encoding: gzip
i.ytimg.com/vi/8KGXSjtS5pk/default.jpg
200 OK 4.7 kB URL HTTP/1.1 i.ytimg.com/vi/8KGXSjtS5pk/default.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash b5101b3f4a35e0ce036f55bfd1c77fc3
c769b52027adac7c510ec16be9962e44d50c5a72
cf8a86bf9eac880ff94fbe63c9fd5de5d4c68fe31b070d13ba4a3cfd00af8967
GET /vi/8KGXSjtS5pk/default.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
Timing-Allow-Origin: *
Content-Length: 4723
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 16:07:32 GMT
Expires: Wed, 05 Oct 2022 18:07:32 GMT
Cache-Control: public, max-age=7200
ETag: "1663864940"
Content-Type: image/jpeg
Age: 0
i.ytimg.com/vi/AdUw5RdyZxI/default.jpg
200 OK 4.6 kB URL HTTP/1.1 i.ytimg.com/vi/AdUw5RdyZxI/default.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash 7bc11e5444662f27f29c11f9f5fd7e87
3ec0d11235dcd3e02f700e146f446e20680ea66e
a275339f23ed9fa54b4b8ee543a665fbadf021948cee47fa683dae8b722a780b
GET /vi/AdUw5RdyZxI/default.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
Timing-Allow-Origin: *
Content-Length: 4632
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 16:07:32 GMT
Expires: Wed, 05 Oct 2022 18:07:32 GMT
Cache-Control: public, max-age=7200
ETag: "1620055147"
Content-Type: image/jpeg
Age: 0
i.ytimg.com/vi/ph1vpnYIxJk/default.jpg
200 OK 4.7 kB URL HTTP/1.1 i.ytimg.com/vi/ph1vpnYIxJk/default.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash 964f8376431fa49f7ab7e91aa8bd28e7
fda13bab465e9bd88ed486b2016aa54e6c6c36bb
47374a4eb6736ed92b9118ad2e7e2d92f0ef8492ad70b68f77d07f31d5387076
GET /vi/ph1vpnYIxJk/default.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
Timing-Allow-Origin: *
Content-Length: 4724
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 05 Oct 2022 16:07:32 GMT
Expires: Wed, 05 Oct 2022 18:07:32 GMT
Cache-Control: public, max-age=7200
ETag: "1663773246"
Content-Type: image/jpeg
Age: 0
faq7.ru/images/smiley/cool.gif
200 OK 1.8 kB URL HTTP/1.1 faq7.ru/images/smiley/cool.gif
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type GIF image data, version 89a, 17 x 17\012- data
Hash 299725ce2012b28cac6a7d383b270617
115cba34d2047f06d1e93cd8f316ad814156175f
036ffc84dfc9b92869428c377badc218ce52399bd47a6d9bff3073269cb8230b
GET /images/smiley/cool.gif HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/gif
Content-Length: 1831
Connection: keep-alive
Last-Modified: Wed, 13 Apr 2011 19:41:26 GMT
Accept-Ranges: bytes
faq7.ru/infusions/board/images/rss.png
200 OK 727 B URL HTTP/1.1 faq7.ru/infusions/board/images/rss.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash d0394ddde1e3c9f23030eebe56961596
a36c4fd5a8a0ab52b4369b48599f477a642c3ded
e5563da9d0aca6698a0fe760ae0d38827e6a225be742d166e3cda357b8c13732
GET /infusions/board/images/rss.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:10 GMT
Accept-Ranges: bytes
faq7.ru/images/board/3aedcec787264ea4572420a058095b34.png
200 OK 1.6 kB URL HTTP/1.1 faq7.ru/images/board/3aedcec787264ea4572420a058095b34.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 40x50, components 3\012- data
Hash 7da0454c3fade2e67317d824e4434d4d
e260732d24365ee6b59063eb200a82fb426fe73e
6758b136fe540833d76f10b793def9864122bcbbac0b6c5d1a9a5c501dca6c68
GET /images/board/3aedcec787264ea4572420a058095b34.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 1584
Connection: keep-alive
Last-Modified: Fri, 16 Sep 2022 19:15:35 GMT
Accept-Ranges: bytes
faq7.ru/infusions/ulogin/img/button.png
200 OK 3.5 kB URL HTTP/1.1 faq7.ru/infusions/ulogin/img/button.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 187 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 4c5012f6e5081bdd7fcc8d113a5ebaa1
4e0989f67487426bf07a9d2d7f60ea64426b908a
13f59d25bdc5ea9494f88da550c526f8e11567f42e42ab3e71cee558b75a8027
GET /infusions/ulogin/img/button.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 3473
Connection: keep-alive
Last-Modified: Tue, 06 Mar 2012 18:25:25 GMT
Accept-Ranges: bytes
faq7.ru/infusions/thisrss_panel/feed-icon-12x12.png
200 OK 552 B URL HTTP/1.1 faq7.ru/infusions/thisrss_panel/feed-icon-12x12.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 93affa4fc35c2f847ed1781b18ca0db0
cf44a2580e06c111d77466aa3a917b1534b6680c
98ea718868bb9a520da4777cd8a5ed5c76d123b77aa2e0289ab4bad638439b73
GET /infusions/thisrss_panel/feed-icon-12x12.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 552
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:13 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/abstand.png
200 OK 378 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/abstand.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 320 x 89, 8-bit/color RGBA, non-interlaced\012- data
Hash f5e5d4dc0e3f709449008e171b6a645d
96974be67f6a59cd2e23e0ac7626145475e3c81d
be8e209de5cb151b2b46adce8165087915ffd9ca4284273b904bfb0a72b2c98b
GET /themes/faq7_new/images/abstand.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 378
Connection: keep-alive
Last-Modified: Sun, 18 Dec 2011 18:43:27 GMT
Accept-Ranges: bytes
faq7.ru/infusions/wnavi_panel/img/accept.png
200 OK 781 B URL HTTP/1.1 faq7.ru/infusions/wnavi_panel/img/accept.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 8bfed48756f192ed7afe6eaa4799aae4
8872adf860a379cf6eab4faf35a67301b38325c6
0a733b99fcd03c5e6359d0973a169bbfaf94485227437480d9c703bbe58e4b4c
GET /infusions/wnavi_panel/img/accept.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 781
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 21:19:49 GMT
Accept-Ranges: bytes
faq7.ru/infusions/wnavi_panel/img/information.png
200 OK 778 B URL HTTP/1.1 faq7.ru/infusions/wnavi_panel/img/information.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 3750c701d2ec35a45d289b9b9c1a0667
04b482344d75d0732275727bd73cceb9b049d276
ff9c48d8c2d063932c7aadd5e15ddfdc76b7111bf0715f3a192bba26df2c531c
GET /infusions/wnavi_panel/img/information.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 778
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 21:19:49 GMT
Accept-Ranges: bytes
faq7.ru/infusions/wnavi_panel/img/add.png
200 OK 733 B URL HTTP/1.1 faq7.ru/infusions/wnavi_panel/img/add.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 1988c3cc1384a3ac9b9a4129183248f3
b6244b0027a8c9f702b311cb5b2ab8cc64f3b5f2
c06a52df3361df380a02a45159a0858d6f7cd8cbc3f71ff732a65d6c25ea6af6
GET /infusions/wnavi_panel/img/add.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 733
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 21:19:49 GMT
Accept-Ranges: bytes
api-maps.yandex.ru/1.1/index.xml
200 OK 42 kB URL HTTP/2 api-maps.yandex.ru/1.1/index.xml
IP
Hash 1c0a2f00f9bd4ddedfa598f311862e5c
c08ab863956188ccbd2c58172f241474cb92b23d
5d6159ce3e5383bad2e6eeb791eec9a5bb7a58149fed5b8e02ea2d15ca48c1ea
GET /1.1/index.xml HTTP/1.1
Host: api-maps.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
date: Wed, 05 Oct 2022 16:07:31 GMT
x-content-type-options: nosniff
set-cookie: _yasc=nJ5laaunTJiDiRHRJS00AASglmpImKcCPuT5szaogNq5lg==; domain=.yandex.ru; path=/; expires=Fri, 04-Nov-2022 16:07:31 GMT; secure
i=+tbEXMGGdjBfQXl+Qd1poVLVZcEZOg9U7sEZ7zedcCIENv9IiklENPHO4dYiSySMygdIhT3OHTfGXGFw9r7cZ9zwuAg=; Expires=Fri, 04-Oct-2024 16:07:31 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
etag: W/"151b-QAn6kKq47NRM93exoc2OBBVE/Jc"
x-xss-protection: 1; mode=block
expires: 0
cache-control: max-age=0, must-revalidate, no-cache, no-store, private, proxy-revalidate
content-encoding: gzip
content-type: application/javascript; charset=utf-8
X-Firefox-Spdy: h2
share.pluso.ru/pluso-like.js
200 OK 14 kB URL HTTP/1.1 share.pluso.ru/pluso-like.js
IP
ASN #50340 OOO Network of data-centers Selectel
File type Unicode text, UTF-8 text, with very long lines (32609)
Hash 48e86d29a84837682d6cbfe671811844
55b8310b66964de4951e6b5e7a64f6f893ab6f70
fbdcb71081a284eaf991deeae3e4bb09aafc7709a2c9f24b35e66e1a2ede4560
GET /pluso-like.js HTTP/1.1
Host: share.pluso.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
Vary: Accept-Encoding
Set-Cookie: pluso=5573150546313815446; expires=Mon, 21 Aug 2023 23:42:54 GMT; path=/; domain=.pluso.ru
Cache-control: max-age=259200
ETag: 5573150546313815446
Expires: Sat, 08 Oct 2022 16:07:32 GMT
Last-Modified: Mon, 07 May 2018 16:54:52 GMT
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 00ff08f2951b0806a4c4099da21690fc
25ac550a92c0f18b062252cfb1de488d5064ab99
5394d1aea377576fe6ce38c39a9ed6cf6491a4fb7bd30fd3f474d324a7dcc39f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "5394D1AEA377576FE6CE38C39A9ED6CF6491A4FB7BD30FD3F474D324A7DCC39F"
Last-Modified: Wed, 05 Oct 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19119
Expires: Wed, 05 Oct 2022 21:26:11 GMT
Date: Wed, 05 Oct 2022 16:07:32 GMT
Connection: keep-alive
faq7.ru/images/board/d0f01e9f5780b8400aaeba80e7464ae9.jpg
200 OK 2.5 kB URL HTTP/1.1 faq7.ru/images/board/d0f01e9f5780b8400aaeba80e7464ae9.jpg
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 40x50, components 3\012- data
Hash 79b4399ea83dd73931d18cfc53c21600
70e7743839421c5fb58cedb7aae03c29a1ab6d1c
5ae01b49561c77d26d0e5727511d48670730b00effda6f111aef3a4077fa2a85
GET /images/board/d0f01e9f5780b8400aaeba80e7464ae9.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/jpeg
Content-Length: 2513
Connection: keep-alive
Last-Modified: Sat, 17 Sep 2022 14:19:08 GMT
Accept-Ranges: bytes
faq7.ru/images/photoalbum/album_5/nature110_t1.jpg
200 OK 12 kB URL HTTP/1.1 faq7.ru/images/photoalbum/album_5/nature110_t1.jpg
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 130x73, components 3\012- data
Hash 4e12bc500b8e52c996c63aacd89be6ff
4d55e89e6df86cdc2f43314d4af37a303ff744a8
e1b75285d86337ab7a7f16318e25dfab2255b02fc0512db6b276339dd22b2197
GET /images/photoalbum/album_5/nature110_t1.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/jpeg
Content-Length: 11582
Connection: keep-alive
Last-Modified: Wed, 15 Feb 2012 19:21:16 GMT
Accept-Ranges: bytes
faq7.ru/images/photoalbum/album_6/vglm1mi_t1.jpg
200 OK 13 kB URL HTTP/1.1 faq7.ru/images/photoalbum/album_6/vglm1mi_t1.jpg
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 130x73, components 3\012- data
Hash ca08437539b212831d29fed1db60a3c7
53ed78ddbcd4b852b5c575e7306ba1528c2fdcac
e8920ee259f2cd9af3b1a1422d077e4da54f1f16cbedb21c999906d588824fd8
GET /images/photoalbum/album_6/vglm1mi_t1.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/jpeg
Content-Length: 12893
Connection: keep-alive
Last-Modified: Sat, 02 Feb 2013 13:49:58 GMT
Accept-Ranges: bytes
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/noav2.png
200 OK 5.3 kB URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/noav2.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash ffa23bb64b400147fc7af73d7e243135
e28b289d2fb4c5760fdc3d971e1811da407508a0
ac3b04ebdeeffd7a4b7f2a6d8668e2ffbe5b862ec432bf3dd27bb5fc919c1548
GET /infusions/hayaletsevgili_online_users_panel/images/noav2.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 5270
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
mc.yandex.ru/metrika/watch.js
302 Moved temporarily 0 B URL HTTP/1.1 mc.yandex.ru/metrika/watch.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302 Moved temporarily
Content-Length: 0
Location: https://mc.yandex.ru/metrika/watch.js
faq7.ru/themes/faq7_new/images/header_message.png
200 OK 203 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/header_message.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 22 x 79, 4-bit colormap, non-interlaced\012- data
Hash 6cdc3cdb186b437be450668cbb353812
12ff968298ec4e9e45073ad47dd87157aea88162
914c3c07a764e5d7cec44dca97285f0eb5d46a4b2ac3c6fa4b05841a53b394cc
GET /themes/faq7_new/images/header_message.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 203
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/header_solkenar.png
200 OK 1.3 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/header_solkenar.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 40 x 79, 8-bit colormap, non-interlaced\012- data
Hash a2eeeffdacf7347bb46bf56ea934b8cf
477fafb9f5b27fa32285847c73f49cb1a3127fd2
b3116ade48c4815db351faabf82c338bb4458ded9da83ec5ffc55874d878e0ec
GET /themes/faq7_new/images/header_solkenar.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 1321
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/images/advtab/video.png
200 OK 6.9 kB URL HTTP/1.1 faq7.ru/images/advtab/video.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash e2a040ca9524eb99c8eb08e0fab53672
3e689ba3ac72c9b6137d1a2612d13c9435b64ea6
0476c1fcbecc6ce3e80c83b8a988c40f343016aa5f24d8a735e7128a8ff501e6
GET /images/advtab/video.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 6915
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2011 00:31:08 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/buton.png
200 OK 1.3 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/buton.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 88 x 41, 8-bit colormap, non-interlaced\012- data
Hash ef2b4166202ecbe53a0fead53407dba9
e02676cb5b40f19a7c3928b3e31424d367a01709
4d8c0553c61d4f35e920e803dca53c5dab7ee2ae9f71536db3027da5f4b5d41c
GET /themes/faq7_new/images/buton.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 1260
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/header_sagkenar.png
200 OK 1.1 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/header_sagkenar.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 10 x 120, 8-bit colormap, non-interlaced\012- data
Hash 52030db134ef04b5af0ffd4242943eae
8e674af8d8fca2e5abb8e392cc2d5fd4067300db
8ff0d960d7d4e04d65151c435bc2920d4c53e78bf72fe9a5afd206233efc7b3a
GET /themes/faq7_new/images/header_sagkenar.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 1139
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/arama.png
200 OK 322 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/arama.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 81 x 41, 8-bit colormap, non-interlaced\012- data
Hash 5ef6b593d11fc3323f5a107b8e159c02
2d86f87d801a3da815b1bd597ba21633f939a5c7
e2cac633f04578b76aad42c278e8753aa597b38e2cdb8a9448fee46ba8051eec
GET /themes/faq7_new/images/arama.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 322
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
1ps.ru/identic/120x60_courses_23.jpg
200 OK 3.5 kB URL HTTP/2 1ps.ru/identic/120x60_courses_23.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 120x60, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 053df15eb0b9738de351c59d8afaf5c0
6ea32b36fd8ae8fcdf3991d0536e21574b8d50a1
2167db28ef377bc44c4c78b79757092ef7f5d3602b47be45b8f3bbcc6a7ccdc1
GET /identic/120x60_courses_23.jpg HTTP/1.1
Host: 1ps.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 05 Oct 2022 16:07:32 GMT
content-type: image/webp
content-length: 3530
cf-ray: 7557692b1817b4ff-OSL
accept-ranges: bytes
cache-control: max-age=31536000
content-disposition: inline; filename="120x60_courses_23.webp"
etag: "2519-52e4e6f593f80"
expires: Thu, 17 Aug 2023 06:59:14 GMT
last-modified: Fri, 18 Mar 2016 08:21:34 GMT
vary: Accept, Accept-Encoding
cf-cache-status: HIT
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=jpeg, origSize=9497
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f4JPBqqb7R%2B1Ni8hEL1uA7NBlLvLPCHSW%2FjYGrMJOE2O59Y13qx%2FpdO6DIe%2B%2FVpCHukah51N7RvpLOie6L4fBg1gfHUANAa%2BlF6a7xJyr0O67PnHefVpaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
media.reformal.ru/widgets/v3/reformal.js
200 OK 4.8 kB URL HTTP/1.1 media.reformal.ru/widgets/v3/reformal.js
IP
File type ASCII text, with very long lines (15116)
Hash 206c92e8c010e2f54dc2e76adf56bddc
cc612ba858973a9c384107e4df6453c9ed9ebf10
154e0789792326a4a35496859afd407e299d30d62b86709c6d4387c8f51296b9
GET /widgets/v3/reformal.js HTTP/1.1
Host: media.reformal.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: application/x-javascript; charset=utf-8
Last-Modified: Wed, 27 Apr 2016 09:51:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"57208bb3-3b0d"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip
faq7.ru/themes/faq7_new/images/aramasag.png
200 OK 421 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/aramasag.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 9 x 41, 8-bit colormap, non-interlaced\012- data
Hash b735704ed603c9ce2840f636b3156c31
82762e40aecbc250725517893fef7f83ca715c7d
61e0d1ad171634c69f48012ea6c3356b7ba3db021bcd2298afe2441c164a82c3
GET /themes/faq7_new/images/aramasag.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 421
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/shade.gif
200 OK 949 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/shade.gif
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type GIF image data, version 89a, 5 x 45\012- data
Hash d2406af2a1f0d53749e633cb1b007c29
0b9b5f655eb54059807a2a17c7e199eee917d5ac
d431ff0f801d1909d1859445f776b32fe163f4e5ecedeee6e3f9a6f264099213
GET /themes/faq7_new/images/shade.gif HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/gif
Content-Length: 949
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/menutop.png
200 OK 1.1 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/menutop.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 14 x 174, 8-bit colormap, non-interlaced\012- data
Hash 8d50b3b17a1af019ad91cc3798e86a13
96a53f2a657d74068616c9ce3ec75e0701b3a9e9
3169a60e2414636c9c0ba154d7a9818db1988af81faaedb9b91b94fb56259adc
GET /themes/faq7_new/images/menutop.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 1131
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/mainbody-left.png
200 OK 96 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/mainbody-left.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 4 x 10, 1-bit colormap, non-interlaced\012- data
Hash 5150e8d2e138e7d27bd2092a064d9e85
e0c137cd1d0d855b87a8248ab4db9dd4a3dd4516
6bd68d18838e37b7c2585bdb1c0872c23b3fdf5363072f0c17b3b1696a1573bc
GET /themes/faq7_new/images/mainbody-left.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 96
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/menutop_links.png
200 OK 1.8 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/menutop_links.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 200 x 329, 8-bit colormap, non-interlaced\012- data
Hash 61300238b34d223a5b32750060c121fe
eb146c57a05a1a6ce30bd13b8e13d7e58eeaedf9
71a913b199ae80c4be904450ec9b692d9d7ed80777eaa7344f2d44ebde0f8335
GET /themes/faq7_new/images/menutop_links.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 1800
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
cdn-rtb.sape.ru/teasers/js/219/2/116219.js
200 OK 36 kB URL HTTP/2 cdn-rtb.sape.ru/teasers/js/219/2/116219.js
IP
Hash 30d515ddabe02fc562d7376c03246fb9
2ce8e4f165de6f60d598ebce08c96df763cdf5dd
5cc90ed3471b4b992f29c098a8274c6637894bc6779c9029eb6c277adba83dde
GET /teasers/js/219/2/116219.js HTTP/1.1
Host: cdn-rtb.sape.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Wed, 05 Oct 2022 16:07:31 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: block-all-mixed-content
etag: W/"3559de3302957e8f7e94b1d9372138f3"
last-modified: Sat, 01 Oct 2022 02:05:59 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-request-id: 171B130FD5F5EFFF
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
expires: Wed, 05 Oct 2022 17:07:31 GMT
cache-control: max-age=3600
x-cache-status: REVALIDATED
X-Firefox-Spdy: h2
faq7.ru/themes/faq7_new/images/cap-lefticon.png
200 OK 1.9 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/cap-lefticon.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 30 x 39, 8-bit/color RGBA, non-interlaced\012- data
Hash de36d13a12ccdc85f91b8dea9e61a725
48f05037c6e228b4a9023d0d14e102c2b73cd5ee
c310c544414bbb78f4ef6123a7909367bf5d347366d5de3cdcd906a73e54637d
GET /themes/faq7_new/images/cap-lefticon.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 1930
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/cap.png
200 OK 223 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/cap.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 25 x 39, 8-bit colormap, non-interlaced\012- data
Hash 9ab4e24fd164f38cb35884f11f162d96
ce87410a486af0b72b6ae44dd32b33b67f956a85
1eb934fba42e48ccdb2afe5d2ab8f55944a0983f48e50c89d85137b0059a32a4
GET /themes/faq7_new/images/cap.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 223
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/cap-left.png
200 OK 344 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/cap-left.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 4 x 39, 8-bit/color RGBA, non-interlaced\012- data
Hash 04ef82b4e31ab9658d0d26e177ce2960
2df7fbf73535e30f62cdf9161ead1e7578c81930
0af48db9a727d245daa8cbacdf5c5f9186e44ec147c7cdc46922d4ef47124b55
GET /themes/faq7_new/images/cap-left.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 344
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/cap-right.png
200 OK 340 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/cap-right.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 4 x 39, 8-bit colormap, non-interlaced\012- data
Hash ec3858bb7e54481f53d195592b16cced
c54e5d98d566cedd702db72558e1b21a23dd809e
e7b353ae7fbb5ec9ee656235aaae17694009cac9c4af661af56345d69f994434
GET /themes/faq7_new/images/cap-right.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 340
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fc05f0d46c0aa8da8c703986a2541e43
ebbea634c03890e0b35d77500b87c4b43515a876
9f97b86fe90fc15d63a8473c9d66dd55ddf7fa254e3ff786eda68b1996dbfd4c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9F97B86FE90FC15D63A8473C9D66DD55DDF7FA254E3FF786EDA68B1996DBFD4C"
Last-Modified: Wed, 05 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10955
Expires: Wed, 05 Oct 2022 19:10:07 GMT
Date: Wed, 05 Oct 2022 16:07:32 GMT
Connection: keep-alive
faq7.ru/images/advtab/anketa.png
200 OK 6.0 kB URL HTTP/1.1 faq7.ru/images/advtab/anketa.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 39f631977ceb651efdff94d781221857
4ea28e49ccd9a19f80b10c60a5d7b51f9688e715
b8744b9bc1484d3c4bce03ab46e701a4f3190a78fe94a5878da4274adf8b678e
GET /images/advtab/anketa.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 5999
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2011 00:31:08 GMT
Accept-Ranges: bytes
faq7.ru/images/advtab/mobile.png
200 OK 7.7 kB URL HTTP/1.1 faq7.ru/images/advtab/mobile.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 9b339533cbb2b3de222ee613d3657ef8
077527c4570412274126ca8d6073d91e20f4371d
2ed485e4b5e540e22ad2148454255fd09c0bf7da774747101b52d6621db1700a
GET /images/advtab/mobile.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 7701
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2011 00:31:08 GMT
Accept-Ranges: bytes
faq7.ru/images/advtab/dvd.png
200 OK 6.4 kB URL HTTP/1.1 faq7.ru/images/advtab/dvd.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 1aba653e6205b63208359b5063f65170
ac0ee60f724626edd210f320664ce7c7df02cb0a
07a31aacea778b27060fbc99e0110f3fa23d4be685e3a0afcc8279d4861d03a5
GET /images/advtab/dvd.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 6425
Connection: keep-alive
Last-Modified: Sat, 10 Mar 2012 22:03:04 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/sol_ust.png
200 OK 258 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/sol_ust.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 8 x 45, 8-bit colormap, non-interlaced\012- data
Hash 246b9e737e0ff91965a9716b02d3a82f
c42f6bd27ce0f66c0cf1208397bfeae0bbbc825c
cccb8e940da727e43a272667b78d1352924c3928a116becc3c3796cd2d654504
GET /themes/faq7_new/images/sol_ust.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 258
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/sol_ust_yan.png
200 OK 3.6 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/sol_ust_yan.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced\012- data
Hash abf166fe44402115b260d4343242500d
99d145b8912330803f0f9122c426e8257a9c1dea
a0729cc7d7666a67641780cafc9c37e79e75fe7d85519eaabb7559ff26bbc19e
GET /themes/faq7_new/images/sol_ust_yan.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 3575
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/ust_orta.png
200 OK 197 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/ust_orta.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 10 x 45, 8-bit colormap, non-interlaced\012- data
Hash 3c384583d459815e10ef466e5c28ba8d
e27e16e88557d46099cbe17bb6e91203068591d9
9ebf6a47a6932a5b9064c6abd5dfbcce79397e147c22ebd56d9c0389d94052a7
GET /themes/faq7_new/images/ust_orta.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 197
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/sag_ust.png
200 OK 269 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/sag_ust.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 8 x 45, 8-bit colormap, non-interlaced\012- data
Hash 14ebc364b603c3b652ac79b610dceb05
a14ff530f12382c09c4efdb4e682893c52690a76
c1f975c487d7872c4f28550bf8d8763194d6868e1a18562aa2f8213a02d90c51
GET /themes/faq7_new/images/sag_ust.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 269
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/sol_alt.png
200 OK 229 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/sol_alt.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 8 x 10, 8-bit colormap, non-interlaced\012- data
Hash fc653d7c6065ec60a9a81521fedb7dc1
0ae482fb8b6a61f2df6c4ade790d87af9d3f4d7b
b0e56e0cccfa7a0a2a78254f2e0297379c301aba89bbbacef157a630bc65b72b
GET /themes/faq7_new/images/sol_alt.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 229
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/mainbody-right.png
200 OK 3.6 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/mainbody-right.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 4 x 10, 8-bit colormap, non-interlaced\012- data
Hash f5da826e583edd665f215a5d3b5d14cd
93c8e1987575972040a444d1aa95d96236b9aaf3
6c79b1d1aa7fe6b2dad8d98825a7b7018e988f5f3e9154288877c306820b201e
GET /themes/faq7_new/images/mainbody-right.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 3579
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
app.sharpay.io/api/script.js
200 OK 39 kB URL HTTP/2 app.sharpay.io/api/script.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash e4aa66cdcb3ddab01b3cfffbd5b1662f
e7c5812112dc4525d861cc18a22c79ceebd51345
ef8f93894e872cededa6370bca326a51ff7babdaa99b7ca423248433c0c8126f
GET /api/script.js HTTP/1.1
Host: app.sharpay.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 05 Oct 2022 16:07:31 GMT
content-type: application/javascript
last-modified: Tue, 17 Nov 2020 21:50:02 GMT
etag: W/"5fb4458a-1f245"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j20TB8Irfi1U6Qc9wjnErTr%2F%2FpoEbwD%2BVMNTYhwAuCLMmL8juBNnOnHiI2sZzHHPFyYwO0QPqtqp3CZ9FCdX10UPFusx297Q7R8eQhhBhqYDmeB4gEG6I2BJJSdNZ2jkng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75576925ee2dfac0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
faq7.ru/themes/faq7_new/images/sol_yan.png
200 OK 126 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/sol_yan.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 8 x 5, 4-bit colormap, non-interlaced\012- data
Hash eec9daba94f4cf54d111a1d004bcc3a1
887b0d40d034ce7725be8a9002deaea61bc0e200
cf43c79e011d17b32ea144fd5da55f2bbe89fa9608dac6cf2e242136221b5ee3
GET /themes/faq7_new/images/sol_yan.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 126
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/alt_orta.png
200 OK 145 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/alt_orta.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 5 x 10, 4-bit colormap, non-interlaced\012- data
Hash 25af1732728fb5caad42f93bb0e98955
3c325c86e86cec0756c1e0e94350f1255545e15c
6a9d30fc5253d4b21c47977e892a6d87454e72d0227c66507bdd905d827809f9
GET /themes/faq7_new/images/alt_orta.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 145
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
promo.partner.alawar.ru/images/0c8/120x240.jpg?pid=21363
200 OK 26 kB URL HTTP/1.1 promo.partner.alawar.ru/images/0c8/120x240.jpg?pid=21363
IP
ASN #47723 Softline Trade JSC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 120x240, components 3\012- data
Hash c665bcbbb13966ee2c549fcc8e7b0bcf
367fce8555178a88697a077961c9c8504dea8bf8
e232735258913712e221075e2841476f35e0961eb7e9b149f5e9a07e21c68f66
GET /images/0c8/120x240.jpg?pid=21363 HTTP/1.1
Host: promo.partner.alawar.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/jpeg
Content-Length: 25532
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2010 07:32:36 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/mainbody-footerleft.png
200 OK 296 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/mainbody-footerleft.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 4 x 39, 8-bit colormap, non-interlaced\012- data
Hash f8f86d18ec78ed25bdd218e4a38d88db
8eaa0d68ae0c721e668df0175ca286cbf607e0bb
f2b75449667e52afc0349201fa02cb9d1bac0f678e775f2776436452db8e0a96
GET /themes/faq7_new/images/mainbody-footerleft.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 296
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/mainbody-footerright.png
200 OK 299 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/mainbody-footerright.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 4 x 39, 8-bit colormap, non-interlaced\012- data
Hash 2a294771672f47a14aa9fffba46aba39
423418df8cd4b1f09bf4a614b3c1d58f2970e94e
bfa1210cd7b2874fd9052e019fc515ae1c25bf88a1cd8c14d2cb287a7d9c1f20
GET /themes/faq7_new/images/mainbody-footerright.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 299
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/mainbody-center.png
200 OK 219 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/mainbody-center.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 10 x 39, 8-bit colormap, non-interlaced\012- data
Hash 8aa7ee36484f1e26f88ebdcdc113c5e6
80b150afae30bff4862ecf2b5d8997625e1c54b8
eb45816c3e3f74874a6a8b01fd024284c12be851dde3ebef15ac0f7dcac41af7
GET /themes/faq7_new/images/mainbody-center.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 219
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/images/advtab/elect.png
200 OK 7.6 kB URL HTTP/1.1 faq7.ru/images/advtab/elect.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash c8d32c8fc630d9f4fd69e954e17aaabe
b298152d6b2211ed33fda4789a18bbc0d1232aeb
509a5109b6875a5b12777c8f8f1c61b7eccfae2e0668e35c4dd17643f02f3209
GET /images/advtab/elect.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 7649
Connection: keep-alive
Last-Modified: Tue, 25 Mar 2014 15:27:43 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/mainbody-right2.png
200 OK 2.8 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/mainbody-right2.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 205 x 10, 8-bit/color RGBA, non-interlaced\012- data
Hash 2b4debf8295bfbfd9f7e1ad03f355a86
734b6d72c293db33416f479c13670dc95885ed98
e7075b79f423d310aceef8a911871d99c4efa5386e598e252e3614e501a9843a
GET /themes/faq7_new/images/mainbody-right2.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 2840
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:26 GMT
Accept-Ranges: bytes
faq7.ru/infusions/shoutbox_panel/sb_imgs.png
200 OK 4.5 kB URL HTTP/1.1 faq7.ru/infusions/shoutbox_panel/sb_imgs.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 160 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 8249d38d90e11a4ff32d3d5d9200e2f2
1c3dcb719ac9c1437291a811ca074cf3af7b97b4
040fdf6c825bec3f191d4c85d48c099558fb913327c37b95861a8d495587b92f
GET /infusions/shoutbox_panel/sb_imgs.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/infusions/shoutbox_panel/ash.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 4461
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 18:39:40 GMT
Accept-Ranges: bytes
faq7.ru/images/advtab/games.png
200 OK 6.1 kB URL HTTP/1.1 faq7.ru/images/advtab/games.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 1bd58a8ccbb8eace56f92318f7c02590
80c55065fa7a297c5cd3df542828fda430adced5
2ac39badffb60411ade1acc34b6bed16e7fb247372298e68ff28870ff1153655
GET /images/advtab/games.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 6094
Connection: keep-alive
Last-Modified: Mon, 05 Mar 2012 19:12:01 GMT
Accept-Ranges: bytes
faq7.ru/images/etxt_3.gif
200 OK 2.6 kB URL HTTP/1.1 faq7.ru/images/etxt_3.gif
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type GIF image data, version 89a, 180 x 60\012- data
Hash b6106b860137c508605a0b357504b3dd
ccf308d2ca24fdd0963c912c3c148534e42c90e2
671847e34c95fd887646a115f0ff84c06b7feb7b98d13b77a88ec08e9f55ff14
GET /images/etxt_3.gif HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/gif
Content-Length: 2565
Connection: keep-alive
Last-Modified: Sun, 27 Mar 2022 16:38:59 GMT
Accept-Ranges: bytes
faq7.ru/infusions/uip_panel/images/ico_keys.png
200 OK 744 B URL HTTP/1.1 faq7.ru/infusions/uip_panel/images/ico_keys.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 93c3eb002f4070b939e29d0a31a90faa
535d2f6d1eec09ca83a7cae2136c9d1326e6daab
45bebc89c3d3b8cde90edafe534b38bbbe75b6494bc8e9dabba704612c5eb603
GET /infusions/uip_panel/images/ico_keys.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 744
Connection: keep-alive
Last-Modified: Sat, 07 May 2011 19:05:42 GMT
Accept-Ranges: bytes
faq7.ru/infusions/uip_panel/images/arrowdown.png
200 OK 1.3 kB URL HTTP/1.1 faq7.ru/infusions/uip_panel/images/arrowdown.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 1f332485c3a13a13256ceb2ba0a2ec1a
231ecee1dfa78e20354882dafc58db490816f242
0e0e531bcd1004ad693a04bed51acc9492c65de807fc3684e654a53945931f26
GET /infusions/uip_panel/images/arrowdown.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 1337
Connection: keep-alive
Last-Modified: Tue, 05 Jul 2016 00:22:04 GMT
Accept-Ranges: bytes
faq7.ru/images/loveplanet.gif
200 OK 6.2 kB URL HTTP/1.1 faq7.ru/images/loveplanet.gif
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type GIF image data, version 89a, 120 x 60\012- data
Hash 893db3a9bf6afc47ed38629743e33ff0
d64a4878b97a48a0f842c48ea9aa70c9e491a0e2
9e2c4204cdf51db95c6d15247213c72e74d1972493cab534e118da77e7edbc06
GET /images/loveplanet.gif HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/gif
Content-Length: 6188
Connection: keep-alive
Last-Modified: Sun, 27 Mar 2022 16:44:45 GMT
Accept-Ranges: bytes
faq7.ru/images/photoalbum/album_6/1_t1.jpg
200 OK 11 kB URL HTTP/1.1 faq7.ru/images/photoalbum/album_6/1_t1.jpg
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100", baseline, precision 8, 130x78, components 3\012- data
Hash 027247148cdde06b89ed61193a11b7af
11759425d82d2372433a7606082f7fd20b9b8a67
60b6b9a7e399ee2880d4e078ef6e1684ed3f718f3b07ec35dafe569610c1b06b
GET /images/photoalbum/album_6/1_t1.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/jpeg
Content-Length: 11235
Connection: keep-alive
Last-Modified: Fri, 05 Oct 2012 11:12:07 GMT
Accept-Ranges: bytes
tab.reformal.ru/T9GC0LfRi9Cy0Ysg0Lgg0L%252FRgNC10LTQu9C%252B0LbQtdC90LjRjw==/FFFFFF/2a94cfe6511106e7a48d0af3904e3090/left/1/tab.png
200 OK 6.3 kB URL HTTP/1.1 tab.reformal.ru/T9GC0LfRi9Cy0Ysg0Lgg0L%252FRgNC10LTQu9C%252B0LbQtdC90LjRjw==/FFFFFF/2a94cfe6511106e7a48d0af3904e3090/left/1/tab.png
IP
File type PNG image data, 21 x 217, 16-bit/color RGBA, non-interlaced\012- data
Hash d04157421f816095076e9907e0284d90
075d70eb0180148c0562fcdb109e82190eea2683
7cf04ed5fa482c73c10c6bca22d9ff45cc4c57311abedfe6f433a10d1ec5190f
GET /T9GC0LfRi9Cy0Ysg0Lgg0L%252FRgNC10LTQu9C%252B0LbQtdC90LjRjw==/FFFFFF/2a94cfe6511106e7a48d0af3904e3090/left/1/tab.png HTTP/1.1
Host: tab.reformal.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 6291
Connection: keep-alive
Last-Modified: Tue, 04 Oct 2022 14:34:06 GMT
Expires: Sat, 15 Oct 2022 16:07:32 GMT
Cache-Control: max-age=864000
log.reformal.ru/st.php?w=3&pid=189983
200 OK 43 B URL HTTP/1.1 log.reformal.ru/st.php?w=3&pid=189983
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 45cf913e5d9d3c9b2058033056d3dd23
30cb5d44e276505b1d4c053c8b25525da228db30
42b976597a2d977d0e300f6d06bc903db389e5c112d33c1c8c249690a522d9f2
GET /st.php?w=3&pid=189983 HTTP/1.1
Host: log.reformal.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
faq7.ru/themes/faq7_new/images/bullet.gif
200 OK 911 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/bullet.gif
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type GIF image data, version 89a, 10 x 10\012- data
Hash b0882e2a62f70dd10bb62cf45f709f0a
6ba9da8faf361347036e493a9b9c0317bc5b71c9
4979c73b740882f8d17134e741bee4d9f648830a1788ba21f89f3e72210caa10
GET /themes/faq7_new/images/bullet.gif HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/gif
Content-Length: 911
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
reformal.ru/human_check/189983|aHR0cDovL2ZhcTcucnUvZXJyb3IucGhwP2NvZGU9NDA0||70151
200 OK 43 B URL HTTP/1.1 reformal.ru/human_check/189983|aHR0cDovL2ZhcTcucnUvZXJyb3IucGhwP2NvZGU9NDA0||70151
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /human_check/189983|aHR0cDovL2ZhcTcucnUvZXJyb3IucGhwP2NvZGU9NDA0||70151 HTTP/1.1
Host: reformal.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Fri, 20 Dec 2013 07:24:29 GMT
Connection: keep-alive
ETag: "52b3f0ad-2b"
Accept-Ranges: bytes
faq7.ru/images/board/3f8934fd3db5fdd2e456997db7eea60a.jpg
200 OK 2.6 kB URL HTTP/1.1 faq7.ru/images/board/3f8934fd3db5fdd2e456997db7eea60a.jpg
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 40x50, components 3\012- data
Hash 66052df75fac8a07d2e571e9495c5c1b
93713a19784f1ab7c325f6338383f21f46106d63
f27a447f2a398d9071c228380c783836766fc3f954212f7bcf85cdb1c0d43526
GET /images/board/3f8934fd3db5fdd2e456997db7eea60a.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/jpeg
Content-Length: 2585
Connection: keep-alive
Last-Modified: Wed, 24 Nov 2021 16:34:48 GMT
Accept-Ranges: bytes
faq7.ru/images/board/0006eb4b602190c369772e6044b2ba70.jpg
200 OK 3.3 kB URL HTTP/1.1 faq7.ru/images/board/0006eb4b602190c369772e6044b2ba70.jpg
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 40x50, components 3\012- data
Hash 6c0a1d402348f83c29b4e035c2b465b6
a15038261a26640da374aa301fa5303e602905e6
3af1c8c96376756601e1cec0e844bb63a8326ad81f2748c0822edda1728f6b67
GET /images/board/0006eb4b602190c369772e6044b2ba70.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/jpeg
Content-Length: 3262
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 19:56:49 GMT
Accept-Ranges: bytes
faq7.ru/images/board/be42c7dc044b7c9a533c87d0b91330ab.jpg
200 OK 2.7 kB URL HTTP/1.1 faq7.ru/images/board/be42c7dc044b7c9a533c87d0b91330ab.jpg
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 40x50, components 3\012- data
Hash 74907b758eacc538d42089951206dfa3
2728b6aab4030067f62209939459e2fa3ca9f402
9a249d030582b47efec5a03ed955266815690e2ce653a5b99f9733268204ca28
GET /images/board/be42c7dc044b7c9a533c87d0b91330ab.jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/jpeg
Content-Length: 2736
Connection: keep-alive
Last-Modified: Wed, 25 Aug 2021 15:45:02 GMT
Accept-Ranges: bytes
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/offline.png
200 OK 780 B URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/offline.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 50 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 1ff203770c42cea237dbee8c496ce7dc
a16df156fd7c1568544139401ac991f373bdc139
844303033c2057761e6b79701273ef57f7b605ace8a7ab6f59396e673ba9f42a
GET /infusions/hayaletsevgili_online_users_panel/images/offline.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 780
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
faq7.ru/images/avatars/admin[1].jpg
200 OK 4.5 kB URL HTTP/1.1 faq7.ru/images/avatars/admin[1].jpg
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash c0650802c88b7bd45b87f1337bc8cc6a
54e375ce6542577facafb22a27facd4518260f43
3ed19b252090bdaa5a17374e5f8eede6db317e35cf4c597184fdda4ff0b568a1
GET /images/avatars/admin[1].jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/jpeg
Content-Length: 4525
Connection: keep-alive
Last-Modified: Sun, 30 Oct 2011 21:55:08 GMT
Accept-Ranges: bytes
share.pluso.ru/process?act=counter&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&w=1280&h=1024&ref=&user=84719068&uid=5573150546313815446&k=XTbB3W1ETmSEVNBo&first=1
200 OK 113 B URL HTTP/1.1 share.pluso.ru/process?act=counter&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&w=1280&h=1024&ref=&user=84719068&uid=5573150546313815446&k=XTbB3W1ETmSEVNBo&first=1
IP
ASN #50340 OOO Network of data-centers Selectel
File type ASCII text, with no line terminators
Hash cb398f5fabc30da59f466462aafcc711
25523d1c0f85842c35b8df39974a6fad7c921256
3384d91650cef8f3e1a0f666668bb52759ac287687cb6f42c2b4275c52de21d0
GET /process?act=counter&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&w=1280&h=1024&ref=&user=84719068&uid=5573150546313815446&k=XTbB3W1ETmSEVNBo&first=1 HTTP/1.1
Host: share.pluso.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
Vary: Accept-Encoding
Set-Cookie: pluso=5573150546313815446; expires=Thu, 05 Oct 2023 16:07:32 GMT; path=/; domain=.pluso.ru
Expires: Sat, 08 Oct 2022 16:07:32 GMT
Cache-Control: max-age=259200
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
faq7.ru/infusions/uip_panel/images/ico_lock.png
200 OK 633 B URL HTTP/1.1 faq7.ru/infusions/uip_panel/images/ico_lock.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 5d0bd6c55026e13a40397dcf97fa0cfa
b8efa6913362d97f94f8ddbfceed60f5404ba5ec
fafc9aaaf2140c94a7a3afc94653ce0ff22cd2713cd524eda1bb9974e67b9a49
GET /infusions/uip_panel/images/ico_lock.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 633
Connection: keep-alive
Last-Modified: Sat, 07 May 2011 19:05:42 GMT
Accept-Ranges: bytes
faq7.ru/themes/templates/scrolltobottom.png
200 OK 2.3 kB URL HTTP/1.1 faq7.ru/themes/templates/scrolltobottom.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 56 x 30, 8-bit/color RGB, non-interlaced\012- data
Hash 9742f054cb49a72057b6015006ffea8c
017a2e400afae7b3b0150337700c65f4367d5839
b6252bc738d151a12640f4f946d2a6446d3b3f12a26338bd609fe5d1e0fa933c
GET /themes/templates/scrolltobottom.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 2294
Connection: keep-alive
Last-Modified: Tue, 24 Sep 2013 13:55:39 GMT
Accept-Ranges: bytes
faq7.ru/infusions/uip_panel/images/ico_users.png
200 OK 444 B URL HTTP/1.1 faq7.ru/infusions/uip_panel/images/ico_users.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash fe23e852cf1626a5eefea593b4f14375
dc4509331e8f2712a323ec252c36b1761431d888
9e3df70006b23420dd9e4314cb84bf0f1585dbfebfc170ef4ec0924f658074b0
GET /infusions/uip_panel/images/ico_users.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 444
Connection: keep-alive
Last-Modified: Sat, 07 May 2011 19:05:42 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/footer_sol.png
200 OK 1.4 kB URL HTTP/1.1 faq7.ru/themes/faq7_new/images/footer_sol.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 110 x 89, 8-bit/color RGBA, non-interlaced\012- data
Hash 3225d1d8cb532b4ccb66587b66e932f5
a2c204ae5c5816497193ed6fc23c589cd9490bf3
367ea106144396bc041b910dc42957084bc61c37e35617957fb02cc312f42c41
GET /themes/faq7_new/images/footer_sol.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 1358
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/footer_orta.png
200 OK 593 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/footer_orta.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 110 x 89, 8-bit colormap, non-interlaced\012- data
Hash 0ac4a6a866974c24abe9b52bd2634df3
b77013e015176b7e9949af086283294d9b03e462
44b086bcf1e37e2a2ef39ff27890672501a4446fd08467fd2e97dd52c320cdb0
GET /themes/faq7_new/images/footer_orta.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 593
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/images/banner88.gif
200 OK 2.0 kB URL HTTP/1.1 faq7.ru/images/banner88.gif
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type GIF image data, version 89a, 88 x 31\012- data
Hash 369f7ad897bb82bb94a18837089579e3
d604882f7952513aa816d11b233ab725c579bbe4
6408f1769dc939fbee5219dfd900e89c1ce548c426fd23f1dcd515dee038a17d
GET /images/banner88.gif HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/gif
Content-Length: 2023
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:38:59 GMT
Accept-Ranges: bytes
share.pluso.ru/img/plus.png
200 OK 2.4 kB URL HTTP/1.1 share.pluso.ru/img/plus.png
IP
ASN #50340 OOO Network of data-centers Selectel
File type PNG image data, 54 x 105, 8-bit/color RGBA, non-interlaced\012- data
Hash 41284080ec1a6df8b48a92d034c5f200
1841522b6e23d66a1e89cdda280b7a4772297bed
784eb14774a9a419af32c02c2d16cf197ef2701afc2ea65b58c3a574ed5458bd
GET /img/plus.png HTTP/1.1
Host: share.pluso.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 2442
Last-Modified: Mon, 13 Apr 2015 11:02:40 GMT
Connection: keep-alive
Keep-Alive: timeout=5
ETag: "552ba250-98a"
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
media.reformal.ru/widgets/v3/gl.png
200 OK 121 B URL HTTP/1.1 media.reformal.ru/widgets/v3/gl.png
IP
File type PNG image data, 6 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 41d0923d21a3d3cee146c41ece00fe7c
524da78bb3babe8f136edfe669dd48e1e7b7f004
aa1740b3e050627a689cba17a89712fa5d3cd4e814f2347c64e7f2d2b1a1c281
GET /widgets/v3/gl.png HTTP/1.1
Host: media.reformal.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx/1.16.1
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 121
Last-Modified: Wed, 27 Apr 2016 09:51:47 GMT
Connection: keep-alive
ETag: "57208bb3-79"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
faq7.ru/themes/faq7_new/images/footer_sag.png
200 OK 750 B URL HTTP/1.1 faq7.ru/themes/faq7_new/images/footer_sag.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 57 x 89, 8-bit/color RGBA, non-interlaced\012- data
Hash 43d4c670b38c9e2194e74ed0dba778f4
8d5795fb6bcbbefa7b28f57ad18f4a14b3e48953
3f5a00d025bc5cd85baebefad3fc414cb2f19b30eba01ff7528869a6fec4f3cb
GET /themes/faq7_new/images/footer_sag.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/themes/faq7_new/styles.css
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451; _ym_uid=16649860521063920349; _ym_d=1664986052
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 750
Connection: keep-alive
Last-Modified: Mon, 11 Apr 2011 14:39:25 GMT
Accept-Ranges: bytes
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/uye.png
200 OK 439 B URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/uye.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash 176ee4cc6f666369fb39425d6d28087a
3944c6acbe2e8207bb2694b2a3b06416dbb0f9ab
354e4c28047959c7dd030d46d641d062df0395f641085bba0eeff711f00ad85a
GET /infusions/hayaletsevgili_online_users_panel/images/uye.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 439
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
faq7.ru/images/avatars/715[2185].jpg
200 OK 9.8 kB URL HTTP/1.1 faq7.ru/images/avatars/715[2185].jpg
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 100x100, components 3\012- data
Hash 187c91d1ebd42c6129ee2641a5a9b7aa
c280f8a2b47679dd62db63925b6b06d664bc1ca2
4c078e1544784792ec4acf9d1d3b65616ae5ead918efb21434f244c405e28c98
GET /images/avatars/715[2185].jpg HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/jpeg
Content-Length: 9849
Connection: keep-alive
Last-Modified: Sat, 27 Mar 2021 18:02:47 GMT
Accept-Ranges: bytes
faq7.ru/themes/templates/scrolltotop.png
200 OK 1.8 kB URL HTTP/1.1 faq7.ru/themes/templates/scrolltotop.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 56 x 30, 8-bit/color RGB, interlaced\012- data
Hash b1c26b831b25fd49cc834fb22cd7c851
380070d45e51d3a1e55999eafe2d16abf9640306
0ba5411b9a88b717e6d756040926e6c3a112a548c5257d3869dee784f66d200b
GET /themes/templates/scrolltotop.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 1834
Connection: keep-alive
Last-Modified: Tue, 24 Sep 2013 13:55:40 GMT
Accept-Ranges: bytes
share.pluso.ru/img/pluso-like/square/big/06.png
200 OK 47 kB URL HTTP/1.1 share.pluso.ru/img/pluso-like/square/big/06.png
IP
ASN #50340 OOO Network of data-centers Selectel
File type PNG image data, 1888 x 40, 8-bit/color RGBA, interlaced\012- data
Hash b59ccd42ad5ff8a5ea01302aa5cc08c3
c4976003a9211a1477a819fee5aeba330bb4b3b1
698e02bba9989882c071a26a99e59f780d695fa27a2af8a57f91a19737467bbc
GET /img/pluso-like/square/big/06.png HTTP/1.1
Host: share.pluso.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 46574
Last-Modified: Mon, 13 Apr 2015 11:02:40 GMT
Connection: keep-alive
Keep-Alive: timeout=5
ETag: "552ba250-b5ee"
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/admin.png
200 OK 472 B URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/admin.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash 866f2f3b6feeef57e7473e74e6973f50
4cbf86eb10bd082b02d1667e45ff778c7631cf4a
25bb27f5f14e5163c9dd73c55d18600441ce5b8198350e66da6e7c1e7967ceea
GET /infusions/hayaletsevgili_online_users_panel/images/admin.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/total.png
200 OK 1.6 kB URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/total.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 618a00e119dd1c7840bfb09a0e3c89e5
4b4ff1c15195db9b51b599ab7a539fec11ab8b30
8bb619e24f7f880c286536a7ab338b13a745494f47ff2e29b08893519d69bbe3
GET /infusions/hayaletsevgili_online_users_panel/images/total.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 1627
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/guest.png
200 OK 1.6 kB URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/guest.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 899c4542cebec8946af0dd230db941b1
721ce680c80039cbd5ef1bbb7f261842b0a734aa
739fe5c2f1c7de8c13378c2f0e752109ccebebbaf51ff0deb7604dd893be2972
GET /infusions/hayaletsevgili_online_users_panel/images/guest.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 1562
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/sadmin.png
200 OK 460 B URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/sadmin.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash 811c619e9c5e4d01f1d4f04a182426a3
b131747b733290cf7e0a8a9f7ac3b699a40d27ca
fc09383faf569e0a6470ff9267f24cc289ec7f567d127766f0601d1fa611dad0
GET /infusions/hayaletsevgili_online_users_panel/images/sadmin.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 460
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
faq7.ru/infusions/hayaletsevgili_online_users_panel/images/member.png
200 OK 1.5 kB URL HTTP/1.1 faq7.ru/infusions/hayaletsevgili_online_users_panel/images/member.png
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash e83e604605dca02dd1bfc2ae97321031
99a02e39b710687ee7cd6c9d439716b129f74580
e9041471c7f3a53fd8084d44791b0700b8dd85bf673a38f8e7b2768214bad23a
GET /infusions/hayaletsevgili_online_users_panel/images/member.png HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:32 GMT
Content-Type: image/png
Content-Length: 1515
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2011 22:30:49 GMT
Accept-Ranges: bytes
faq7.disqus.com/count.js
301 Moved Permanently 219 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 6b22a8f71ae72ac4b781cff49386dfa9
a8e7202517458752851aeb18c9fb770e931fec34
186d5321baf20106cb6361d9ec524b818d876d773a5bd9dd5530ae5889d74be3
GET /count.js HTTP/1.1
Host: faq7.disqus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 219
Server: Varnish
Location: https://faq7.disqus.com/count.js
Content-Type: text/html
Cache-Control: public, max-age=31536000
Date: Wed, 05 Oct 2022 16:07:33 GMT
Strict-Transport-Security: max-age=300; includeSubdomains
Cross-Origin-Resource-Policy: cross-origin
Link: <https://disqus.com>; rel=preconnect, <https://c.disquscdn.com>; rel=preconnect
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 05 Oct 2022 16:07:33 GMT
access-control-allow-origin: *
etag: "633be002-2b"
expires: Wed, 05 Oct 2022 17:07:33 GMT
accept-ranges: bytes
last-modified: Tue, 04 Oct 2022 10:25:54 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
faq7.ru/images/favicon.ico
200 OK 1.4 kB URL HTTP/1.1 faq7.ru/images/favicon.ico
IP
ASN #197695 Domain names registrar REG.RU, Ltd
File type MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel\012- data
Hash ac0a5a8a6ef2526e94d654f23d4b5d4d
17bf741a8533da11cb197fe64d976d2dd3c3800e
3a396355158a20eb2461ffc49fc4d9c75ebcb9b03a3439331b2213488d999ae9
GET /images/favicon.ico HTTP/1.1
Host: faq7.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/error.php?code=404
Cookie: fusionQC28M_visited=yes; fusionQC28M_lastvisit=1664982451; _ym_uid=16649860521063920349; _ym_d=1664986052
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:33 GMT
Content-Type: image/x-icon
Content-Length: 1406
Connection: keep-alive
Last-Modified: Sun, 30 Oct 2011 21:55:08 GMT
Accept-Ranges: bytes
bs.yandex.ru/informer/5046166/3_0_FFFFFFFF_E6E6FAFF_0_pageviews
302 Moved temporarily 0 B URL HTTP/1.1 bs.yandex.ru/informer/5046166/3_0_FFFFFFFF_E6E6FAFF_0_pageviews
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /informer/5046166/3_0_FFFFFFFF_E6E6FAFF_0_pageviews HTTP/1.1
Host: bs.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302 Moved temporarily
Content-Length: 0
Location: https://mc.yandex.ru/informer/5046166/3_0_FFFFFFFF_E6E6FAFF_0_pageviews
Strict-Transport-Security: max-age=31536000
Timing-Allow-Origin: *
X-XSS-Protection: 1; mode=block
counter.yadro.ru/hit;PLUSO?r;s1280*1024*24;uhttp%3A//faq7.ru/error.php%3Fcode%3D404;hFAQ7.ru;1
302 Moved Temporarily 32 B URL HTTP/1.1 counter.yadro.ru/hit;PLUSO?r;s1280*1024*24;uhttp%3A//faq7.ru/error.php%3Fcode%3D404;hFAQ7.ru;1
IP
ASN #39134 United Network LLC
File type HTML document, ASCII text
Hash 3e9c09a8c5a87f266e047a596f48578c
07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
GET /hit;PLUSO?r;s1280*1024*24;uhttp%3A//faq7.ru/error.php%3Fcode%3D404;hFAQ7.ru;1 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302 Moved Temporarily
Date: Wed, 05 Oct 2022 16:07:33 GMT
Server: 0W/0.8c
Content-Type: text/html
Location: https://counter.yadro.ru/hit;PLUSO?r;s1280*1024*24;uhttp%3A//faq7.ru/error.php%3Fcode%3D404;hFAQ7.ru;1
Content-Length: 32
Expires: Mon, 04 Oct 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
mc.yandex.ru/watch/82412725?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A1853%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A238573182964%3Ahid%3A2331051%3Az%3A0%3Ai%3A20221005160732%3Aet%3A1664986052%3Ac%3A1%3Arn%3A714957623%3Arqn%3A1%3Au%3A16649860521063920349%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C157%2C43%2C700%2C706%2C1%2C1000%2C%2C%2C%2C%2C%3Ans%3A1664986050397%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664986052%3At%3AFAQ7.ru&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
302 Found 503 B URL HTTP/2 mc.yandex.ru/watch/82412725?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A1853%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A238573182964%3Ahid%3A2331051%3Az%3A0%3Ai%3A20221005160732%3Aet%3A1664986052%3Ac%3A1%3Arn%3A714957623%3Arqn%3A1%3Au%3A16649860521063920349%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C157%2C43%2C700%2C706%2C1%2C1000%2C%2C%2C%2C%2C%3Ans%3A1664986050397%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664986052%3At%3AFAQ7.ru&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
GET /watch/82412725?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A1853%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A238573182964%3Ahid%3A2331051%3Az%3A0%3Ai%3A20221005160732%3Aet%3A1664986052%3Ac%3A1%3Arn%3A714957623%3Arqn%3A1%3Au%3A16649860521063920349%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C157%2C43%2C700%2C706%2C1%2C1000%2C%2C%2C%2C%2C%3Ans%3A1664986050397%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664986052%3At%3AFAQ7.ru&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://faq7.ru
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/82412725/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A1853%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A238573182964%3Ahid%3A2331051%3Az%3A0%3Ai%3A20221005160732%3Aet%3A1664986052%3Ac%3A1%3Arn%3A714957623%3Arqn%3A1%3Au%3A16649860521063920349%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C157%2C43%2C700%2C706%2C1%2C1000%2C%2C%2C%2C%2C%3Ans%3A1664986050397%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664986052%3At%3AFAQ7.ru&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Wed, 05 Oct 2022 16:07:33 GMT
access-control-allow-origin: http://faq7.ru
set-cookie: yandexuid=8841498061664986053; Expires=Thu, 05-Oct-2023 16:07:33 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=8841498061664986053; Expires=Thu, 05-Oct-2023 16:07:33 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2517335711664986053; Path=/; SameSite=None; Secure
i=W1/i+FY1rYbKSKEpH0wHb2+xBpMSsjVE9EQNI/QOvo1E5IVaRVVlFjVn67PI5q7qanKwzplT7wpq+5gUBYMbJYgmGNw=; Expires=Sat, 02-Oct-2032 16:07:32 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1696522053.yrts.1664986053#1696522053.yrtsi.1664986053; Expires=Thu, 05-Oct-2023 16:07:33 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 05-Oct-2022 16:07:33 GMT
last-modified: Wed, 05-Oct-2022 16:07:33 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3000
Expires: Wed, 05 Oct 2022 16:57:33 GMT
Date: Wed, 05 Oct 2022 16:07:33 GMT
Connection: keep-alive
mc.yandex.ru/watch/82412725/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A1853%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A238573182964%3Ahid%3A2331051%3Az%3A0%3Ai%3A20221005160732%3Aet%3A1664986052%3Ac%3A1%3Arn%3A714957623%3Arqn%3A1%3Au%3A16649860521063920349%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C157%2C43%2C700%2C706%2C1%2C1000%2C%2C%2C%2C%2C%3Ans%3A1664986050397%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664986052%3At%3AFAQ7.ru&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 407 B URL HTTP/2 mc.yandex.ru/watch/82412725/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A1853%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A238573182964%3Ahid%3A2331051%3Az%3A0%3Ai%3A20221005160732%3Aet%3A1664986052%3Ac%3A1%3Arn%3A714957623%3Arqn%3A1%3Au%3A16649860521063920349%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C157%2C43%2C700%2C706%2C1%2C1000%2C%2C%2C%2C%2C%3Ans%3A1664986050397%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664986052%3At%3AFAQ7.ru&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash aefa18694d9b7e3edd3982f8d390a06c
ac2085783f01e292017ed30ade4756d0cb9af207
6f88faedb6a55ad8994be8366a284cf070127b24bf12d036d8a8cdbf2309f138
GET /watch/82412725/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A1853%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A238573182964%3Ahid%3A2331051%3Az%3A0%3Ai%3A20221005160732%3Aet%3A1664986052%3Ac%3A1%3Arn%3A714957623%3Arqn%3A1%3Au%3A16649860521063920349%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C157%2C43%2C700%2C706%2C1%2C1000%2C%2C%2C%2C%2C%3Ans%3A1664986050397%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664986052%3At%3AFAQ7.ru&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://faq7.ru
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 407
date: Wed, 05 Oct 2022 16:07:33 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://faq7.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 05-Oct-2022 16:07:33 GMT
last-modified: Wed, 05-Oct-2022 16:07:33 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/5046166/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A1853%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A878657237216%3Ahid%3A2331051%3Az%3A0%3Ai%3A20221005160732%3Aet%3A1664986052%3Ac%3A1%3Arn%3A834660469%3Arqn%3A1%3Au%3A16649860521063920349%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C157%2C43%2C700%2C706%2C1%2C1000%2C%2C%2C%2C%2C%3Ans%3A1664986050397%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664986052%3At%3AFAQ7.ru&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 407 B URL HTTP/2 mc.yandex.ru/watch/5046166/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A1853%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A878657237216%3Ahid%3A2331051%3Az%3A0%3Ai%3A20221005160732%3Aet%3A1664986052%3Ac%3A1%3Arn%3A834660469%3Arqn%3A1%3Au%3A16649860521063920349%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C157%2C43%2C700%2C706%2C1%2C1000%2C%2C%2C%2C%2C%3Ans%3A1664986050397%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664986052%3At%3AFAQ7.ru&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash 5a8f1f61e574bad00c5b059bce9aff1e
9b5e7fa4ebc23061cdf95dfa3f412d759a217af4
f19056748023512ca7eee0766d82cb25015d2dd2ee98392936daf2dc0572604d
GET /watch/5046166/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A1853%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A878657237216%3Ahid%3A2331051%3Az%3A0%3Ai%3A20221005160732%3Aet%3A1664986052%3Ac%3A1%3Arn%3A834660469%3Arqn%3A1%3Au%3A16649860521063920349%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C157%2C43%2C700%2C706%2C1%2C1000%2C%2C%2C%2C%2C%3Ans%3A1664986050397%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664986052%3At%3AFAQ7.ru&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://faq7.ru
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 407
date: Wed, 05 Oct 2022 16:07:33 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://faq7.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 05-Oct-2022 16:07:33 GMT
last-modified: Wed, 05-Oct-2022 16:07:33 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8857940-5ca2-44ba-8a66-f396a605d5b4.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8857940-5ca2-44ba-8a66-f396a605d5b4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 229c99cfb655a8c9f1a22de69fdff73c
6b5db8fbfb56f083d54b13e7660d0e4bc866aa00
f4099e9153c3dc481add95b0f24dbb8f6d65cc74ad5631d9cb6c6f2a0351843d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8857940-5ca2-44ba-8a66-f396a605d5b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7021
x-amzn-requestid: 2e30bdac-360e-4d0a-8bb7-c3144e074abe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zf8ucHb1oAMFjYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ca7f5-18ba6bc50cb32b1e14c882bd;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 21:39:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Sd2_YDHr3j7ym7wfFyQh9kg8FP-Et2nJUOo1v_TNbI3PvpzEY5KJ2Q==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 22:07:19 GMT
age: 64814
etag: "6b5db8fbfb56f083d54b13e7660d0e4bc866aa00"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
db.c0.bc.a1.top.mail.ru/counter?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.05289029200866113
302 Moved Temporarily 0 B URL HTTP/1.1 db.c0.bc.a1.top.mail.ru/counter?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.05289029200866113
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.05289029200866113 HTTP/1.1
Host: db.c0.bc.a1.top.mail.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Wed, 05 Oct 2022 16:07:33 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=60
Location: https://top-fwz1.mail.ru/counter?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.05289029200866113
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, HEAD, PUT, OPTIONS
Access-Control-Allow-Headers: *
AMP-Access-Control-Allow-Source-Origin: *
Access-Control-Expose-Headers: AMP-Access-Control-Allow-Source-Origin
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
P3P: CP="NOI DSP COR NID CUR PSA OUR NOR"
Cache-Control: private, no-cache, no-store, max-age=0
Pragma: no-cache
Accept-CH: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
Accept-CH-Lifetime: 86400
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4fc2ddd86450d64d3fb659ab4e78be58
bbe71936b78a8c34d03ab87948dc840b35c6948f
84a760397a5912bd05f61bc8a953c13a88a677e2d17fbbf74bdf7d7ff4d3942f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 10158
x-amzn-requestid: def1fc7e-8008-466f-9271-20fa1ab0fa5a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZaqZCH7doAMFcPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a8aa0-7fd2fb1249366f2277d719d6;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 07:09:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: szhtD9f4RuQaDKXe7LElSR0yOKo9cYa1i2YMeG3eSpBXP8ePcdzQig==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 07:29:32 GMT
age: 31081
etag: "bbe71936b78a8c34d03ab87948dc840b35c6948f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3000
Expires: Wed, 05 Oct 2022 16:57:33 GMT
Date: Wed, 05 Oct 2022 16:07:33 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f763a685d14b05b6ced9792151da30b8
b25be5359245be857ffa1bddcb197cb771a36a45
505ad6dc6417d58207f0d68862c4423f4611660ccc6afe165fd3ec2ccb1c893d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 16:07:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mc.yandex.ru/watch/5046166?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A1853%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A878657237216%3Ahid%3A2331051%3Az%3A0%3Ai%3A20221005160732%3Aet%3A1664986052%3Ac%3A1%3Arn%3A834660469%3Arqn%3A1%3Au%3A16649860521063920349%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C157%2C43%2C700%2C706%2C1%2C1000%2C%2C%2C%2C%2C%3Ans%3A1664986050397%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664986052%3At%3AFAQ7.ru&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
302 Found 1.5 kB URL HTTP/2 mc.yandex.ru/watch/5046166?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A1853%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A878657237216%3Ahid%3A2331051%3Az%3A0%3Ai%3A20221005160732%3Aet%3A1664986052%3Ac%3A1%3Arn%3A834660469%3Arqn%3A1%3Au%3A16649860521063920349%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C157%2C43%2C700%2C706%2C1%2C1000%2C%2C%2C%2C%2C%3Ans%3A1664986050397%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664986052%3At%3AFAQ7.ru&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP
File type PNG image data, 88 x 31, 8-bit/color RGBA, non-interlaced\012- data
Hash 0682e8c04acce3f0a98216338fd5a6a3
537e84e92d8b72f76809f43a411a878cd539178c
2281e91113098f5110ba958b364b12c87ab72c502fc6aaf6693dfa535e2d1af6
GET /watch/5046166?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A1853%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A878657237216%3Ahid%3A2331051%3Az%3A0%3Ai%3A20221005160732%3Aet%3A1664986052%3Ac%3A1%3Arn%3A834660469%3Arqn%3A1%3Au%3A16649860521063920349%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C157%2C43%2C700%2C706%2C1%2C1000%2C%2C%2C%2C%2C%3Ans%3A1664986050397%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664986052%3At%3AFAQ7.ru&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://faq7.ru
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/5046166/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A1853%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A878657237216%3Ahid%3A2331051%3Az%3A0%3Ai%3A20221005160732%3Aet%3A1664986052%3Ac%3A1%3Arn%3A834660469%3Arqn%3A1%3Au%3A16649860521063920349%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C157%2C43%2C700%2C706%2C1%2C1000%2C%2C%2C%2C%2C%3Ans%3A1664986050397%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664986052%3At%3AFAQ7.ru&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Wed, 05 Oct 2022 16:07:33 GMT
access-control-allow-origin: http://faq7.ru
set-cookie: yandexuid=5051829531664986053; Expires=Thu, 05-Oct-2023 16:07:33 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=5051829531664986053; Expires=Thu, 05-Oct-2023 16:07:33 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=1493251761664986053; Path=/; SameSite=None; Secure
i=TQ12xzIpfvP26MZO84xX+qDfFSEr5+Udc+LkTh5x10N3wfI32pPije3JVPghvxNCJudyOnQqwxTo+L3RlZ1/2XThc4o=; Expires=Sat, 02-Oct-2032 16:07:31 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1696522053.yrts.1664986053#1696522053.yrtsi.1664986053; Expires=Thu, 05-Oct-2023 16:07:33 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 05-Oct-2022 16:07:33 GMT
last-modified: Wed, 05-Oct-2022 16:07:33 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1de7c17a0ba9295135e7f8b490b6a8d3
70e8d1589f3daf71378965dd197934e220fb6aa4
ee559ce3166479e2b930be7d18525f5c2d164aed8ca005302ddaf3bfe37eec24
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8926
x-amzn-requestid: 27fc8976-af8d-40a3-b701-0642fa135ec4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zf8s1GSbIAMFTiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ca7eb-4d4c7837576e0fdb5828fe3b;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 21:38:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YzVofPSJC-YVU1Q1V9AnjNeQTa1BQEh6ZiH2HjSeeX5RygysFP7oAA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 21:42:34 GMT
age: 66299
etag: "70e8d1589f3daf71378965dd197934e220fb6aa4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
faq7.disqus.com/count.js
200 OK 871 B IP
File type ASCII text, with very long lines (528)
Hash a487039f9b553cb4f6928743872234e9
b3d835075d1983a8c2fe716285d173fcc3708f9c
364f622ba24e063adcee84f132da53c6e6071745f04a00d10937663deb24b822
GET /count.js HTTP/1.1
Host: faq7.disqus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 871
Content-Type: application/javascript; charset=utf-8
Server: nginx
Last-Modified: Tue, 04 Oct 2022 14:28:56 GMT
ETag: "633c4328-367"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Amz-Cf-Pop: DFW55-C3
X-Amz-Cf-Id: BedK7P4GEFNV333ZS4ZFz0hb-fAP-_ZA5RZMJzNMtBg4SgBylKVVZw==
Cache-Control: public, max-age=300
Date: Wed, 05 Oct 2022 16:07:33 GMT
Age: 272
Vary: Accept-Encoding
Strict-Transport-Security: max-age=300; includeSubdomains
Cross-Origin-Resource-Policy: cross-origin
Link: <https://disqus.com>; rel=preconnect, <https://c.disquscdn.com>; rel=preconnect
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78bf691d-76e8-4176-884d-dbc06604dded.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78bf691d-76e8-4176-884d-dbc06604dded.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 100559d746bedd7c3802661c875c35ee
5261a6c2ee6d6cc87e91ee82e32d8be234db393e
ff06f31267ddcc9a0d84ddc68932872bfed29d072783c3a1dd3790d41c280aec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78bf691d-76e8-4176-884d-dbc06604dded.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8816
x-amzn-requestid: b9f3ec8a-f478-4405-b275-e21f2d7d89d4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZKK7gFPJIAMF-7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6333f1e3-250348e6140f3c74762263ea;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 07:04:03 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: F1ZWwxLKhRC6oSh6gnUxEm5AnYcY-mezJw9mNJ8GmNWnATAKx1JxSg==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 22:42:26 GMT
age: 62707
etag: "5261a6c2ee6d6cc87e91ee82e32d8be234db393e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3000
Expires: Wed, 05 Oct 2022 16:57:33 GMT
Date: Wed, 05 Oct 2022 16:07:33 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg
200 OK 3.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5d7d7df8d4c440f9db445c3d99e818d6
612b6dbd4ba895c167964ff7e6d9263013b52b0a
bf527a814c78f9e010cce4ba593c9146d54a2137d1f147f7a6250fbad81956ac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3585
x-amzn-requestid: ccb6f0c8-4d9b-48b8-aaf6-16781dc4c86b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZaHFlEcFoAMFS3g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a5223-5c9276c873efee993ba54667;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 03:08:19 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: T8m1q2L45TWDVRBa-R2W70yq9BauBK3G4IX54AGIxdRhG736T974kg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 04:05:29 GMT
age: 43324
etag: "612b6dbd4ba895c167964ff7e6d9263013b52b0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Wed, 05 Oct 2022 14:41:09 GMT
expires: Wed, 05 Oct 2022 16:41:09 GMT
cache-control: public, max-age=7200
age: 5184
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23595c4d-609a-48f3-a52f-e88e478d7653.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23595c4d-609a-48f3-a52f-e88e478d7653.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3257b782efae9b64e6e18a547866ec50
4daf0c001e86af8477fb097e8ca932edb8e5f981
899f9692e86405aa288d88dd285a6fe26bedab1a2ca4693212476063890b01a5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23595c4d-609a-48f3-a52f-e88e478d7653.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5832
x-amzn-requestid: c4427edd-3d71-47d0-a2d3-b3bfed089535
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zf8s1FuUoAMFhBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ca7eb-46ddff150da4141d23fc0d8a;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 21:38:51 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: WWClzLGprno--c75q63i1TFi8oBEdAYW-J4lCk9V8IELQXe6q0A05A==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 21:42:34 GMT
age: 66299
etag: "4daf0c001e86af8477fb097e8ca932edb8e5f981"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71281900/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22site_id%22%3A116219%2C%22srtb_sid%22%3A%22633dabc4-9020-c420-vdfs-io9rrgafy2mk%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A1853%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A3%3Adp%3A0%3Als%3A327984090938%3Ahid%3A2331051%3Az%3A0%3Ai%3A20221005160733%3Aet%3A1664986053%3Ac%3A1%3Arn%3A306911901%3Arqn%3A1%3Au%3A16649860521063920349%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C157%2C43%2C700%2C706%2C1%2C1000%2C27%2C%2C%2C%2C2283%3Ans%3A1664986050397%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664986053%3At%3AFAQ7.ru&t=gdpr%2814%29mc%28cm-1-tl-1%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/71281900/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22site_id%22%3A116219%2C%22srtb_sid%22%3A%22633dabc4-9020-c420-vdfs-io9rrgafy2mk%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A1853%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A3%3Adp%3A0%3Als%3A327984090938%3Ahid%3A2331051%3Az%3A0%3Ai%3A20221005160733%3Aet%3A1664986053%3Ac%3A1%3Arn%3A306911901%3Arqn%3A1%3Au%3A16649860521063920349%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C157%2C43%2C700%2C706%2C1%2C1000%2C27%2C%2C%2C%2C2283%3Ans%3A1664986050397%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664986053%3At%3AFAQ7.ru&t=gdpr%2814%29mc%28cm-1-tl-1%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 6de982ea4e706ed88cda7d2cc6723ee7
2a5546f83e03888600e929ddf538c65e05ad5ee9
3f506db227882497a3d87779f8224a5c44f4f35c9e67eafb200bfb97b5f9cbb6
GET /watch/71281900/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22site_id%22%3A116219%2C%22srtb_sid%22%3A%22633dabc4-9020-c420-vdfs-io9rrgafy2mk%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A1853%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A3%3Adp%3A0%3Als%3A327984090938%3Ahid%3A2331051%3Az%3A0%3Ai%3A20221005160733%3Aet%3A1664986053%3Ac%3A1%3Arn%3A306911901%3Arqn%3A1%3Au%3A16649860521063920349%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C157%2C43%2C700%2C706%2C1%2C1000%2C27%2C%2C%2C%2C2283%3Ans%3A1664986050397%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664986053%3At%3AFAQ7.ru&t=gdpr%2814%29mc%28cm-1-tl-1%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://faq7.ru
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Wed, 05 Oct 2022 16:07:33 GMT
x-content-type-options: nosniff
access-control-allow-origin: http://faq7.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 05-Oct-2022 16:07:33 GMT
last-modified: Wed, 05-Oct-2022 16:07:33 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f763a685d14b05b6ced9792151da30b8
b25be5359245be857ffa1bddcb197cb771a36a45
505ad6dc6417d58207f0d68862c4423f4611660ccc6afe165fd3ec2ccb1c893d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 16:07:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
counter.yadro.ru/hit;PLUSO?r;s1280*1024*24;uhttp%3A//faq7.ru/error.php%3Fcode%3D404;hFAQ7.ru;1
200 OK 43 B URL HTTP/1.1 counter.yadro.ru/hit;PLUSO?r;s1280*1024*24;uhttp%3A//faq7.ru/error.php%3Fcode%3D404;hFAQ7.ru;1
IP
ASN #39134 United Network LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit;PLUSO?r;s1280*1024*24;uhttp%3A//faq7.ru/error.php%3Fcode%3D404;hFAQ7.ru;1 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Wed, 05 Oct 2022 16:07:33 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Mon, 04 Oct 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
status.geotrust.com/
200 OK 279 B IP
Hash 801c338fa67edaf785a10301b25e2c8b
3cbce3ccccbd6b40ccbef89e6f52c9745943fe77
a81a7637f14047b311a24f7b89f698582781e2f43b48dcce90b028d98a8a596d
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5548
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 16:07:33 GMT
Last-Modified: Wed, 05 Oct 2022 14:35:05 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
top-fwz1.mail.ru/counter?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.05289029200866113
302 Found 0 B URL HTTP/2 top-fwz1.mail.ru/counter?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.05289029200866113
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.05289029200866113 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 05 Oct 2022 16:07:33 GMT
content-length: 0
location: https://top-fwz1.mail.ru/counter2?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.05289029200866113
set-cookie: FTID=1RMYgQ0tkIIC:1664986053:1837830:::; path=/; expires=Fri, 06-Oct-23 16:07:33 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter2?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.05289029200866113
200 OK 905 B URL HTTP/2 top-fwz1.mail.ru/counter2?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.05289029200866113
IP
File type GIF image data, version 87a, 88 x 31\012- data
Hash 612ab454b245ec822cdd496084ca7978
5b7f7df9dbbdf24fb402747523d5bb552d30f50c
0f84264fc238b87a4cf4856bb54c5fc0874a3f036fb32d3962259936dfb83ff5
GET /counter2?id=1837830;t=211;js=13;r=;j=false;s=1280*1024;d=24;rand=0.05289029200866113 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 05 Oct 2022 16:07:33 GMT
content-type: image/gif
content-length: 905
set-cookie: FTID=1RMYgQ0tkIIC:1664986053:1837830:::; path=/; expires=Fri, 06-Oct-23 16:07:33 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9ea772aa922bd86ac5ac327545783fe6
1d969f1a64b1a64b072f5cad3f200e4c3ff8867a
de95d2f46404083b6359742f25c651c0466ad50399c892252a752aa02c6468ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DE95D2F46404083B6359742F25C651C0466AD50399C892252A752AA02C6468EC"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7629
Expires: Wed, 05 Oct 2022 18:14:42 GMT
Date: Wed, 05 Oct 2022 16:07:33 GMT
Connection: keep-alive
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A116219%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1069%7D&sid=633dabc4-9020-c420-vdfs-io9rrgafy2mk&ref=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=1664986053
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A116219%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1069%7D&sid=633dabc4-9020-c420-vdfs-io9rrgafy2mk&ref=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=1664986053
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A116219%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1069%7D&sid=633dabc4-9020-c420-vdfs-io9rrgafy2mk&ref=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=1664986053 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 05 Oct 2022 16:07:33 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=wQO4iWM9q8WgOAUlOoEnAgPkK+XbR8h0vitR9+RQvDNrRegW; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/aci.js
200 OK 7.5 kB IP
File type ASCII text, with very long lines (1408)
Hash ae0aab6c5a2ae2e1168e74f6e6ae4741
2c00f69ee4bbe2ec96c0f7bb33b5f827a6195af8
a47a88a9b6c7635e5074c25c6e3c92f399fdf8772376e94f077167241e59f9de
GET /aci.js HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Wed, 05 Oct 2022 16:07:33 GMT
content-type: application/x-javascript
content-length: 7461
last-modified: Tue, 22 Mar 2022 06:39:32 GMT
etag: "62396f24-1d25"
content-encoding: gzip
expires: Thu, 06 Oct 2022 04:07:33 GMT
cache-control: max-age=43200
X-Firefox-Spdy: h2
www.acint.net/mc/?dp=14
302 Moved Temporarily 142 B IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /mc/?dp=14 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Wed, 05 Oct 2022 16:07:33 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/mc/?dp=14
www.acint.net/hit/?v=0.4.0&uid=12b87f80-828a-46dd-8d75-059e4f001c25&dp=14&tz=%2B00%3A00&nc=97795615&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=&rs=1280x1024&t=FAQ7.ru&oE=1&oP=1&dT=2022-10-05T16%3A07%3A33.751&fu=bf1d6c51-51b3-49f3-9791-6ddd8ad04e2a
302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/hit/?v=0.4.0&uid=12b87f80-828a-46dd-8d75-059e4f001c25&dp=14&tz=%2B00%3A00&nc=97795615&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=&rs=1280x1024&t=FAQ7.ru&oE=1&oP=1&dT=2022-10-05T16%3A07%3A33.751&fu=bf1d6c51-51b3-49f3-9791-6ddd8ad04e2a
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /hit/?v=0.4.0&uid=12b87f80-828a-46dd-8d75-059e4f001c25&dp=14&tz=%2B00%3A00&nc=97795615&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=&rs=1280x1024&t=FAQ7.ru&oE=1&oP=1&dT=2022-10-05T16%3A07%3A33.751&fu=bf1d6c51-51b3-49f3-9791-6ddd8ad04e2a HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Wed, 05 Oct 2022 16:07:33 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/hit/?v=0.4.0&uid=12b87f80-828a-46dd-8d75-059e4f001c25&dp=14&tz=%2B00%3A00&nc=97795615&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=&rs=1280x1024&t=FAQ7.ru&oE=1&oP=1&dT=2022-10-05T16%3A07%3A33.751&fu=bf1d6c51-51b3-49f3-9791-6ddd8ad04e2a
www.acint.net/hit/?v=0.4.0&uid=12b87f80-828a-46dd-8d75-059e4f001c25&dp=14&tz=%2B00%3A00&nc=97795615&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=&rs=1280x1024&t=FAQ7.ru&oE=1&oP=1&dT=2022-10-05T16%3A07%3A33.751&fu=bf1d6c51-51b3-49f3-9791-6ddd8ad04e2a
200 OK 43 B URL HTTP/2 www.acint.net/hit/?v=0.4.0&uid=12b87f80-828a-46dd-8d75-059e4f001c25&dp=14&tz=%2B00%3A00&nc=97795615&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=&rs=1280x1024&t=FAQ7.ru&oE=1&oP=1&dT=2022-10-05T16%3A07%3A33.751&fu=bf1d6c51-51b3-49f3-9791-6ddd8ad04e2a
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hit/?v=0.4.0&uid=12b87f80-828a-46dd-8d75-059e4f001c25&dp=14&tz=%2B00%3A00&nc=97795615&u=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&r=&rs=1280x1024&t=FAQ7.ru&oE=1&oP=1&dT=2022-10-05T16%3A07%3A33.751&fu=bf1d6c51-51b3-49f3-9791-6ddd8ad04e2a HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Cookie: aid=wQO4iWM9q8WgOAUlOoEnAgPkK+XbR8h0vitR9+RQvDNrRegW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 05 Oct 2022 16:07:33 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71281900?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22site_id%22%3A116219%2C%22srtb_sid%22%3A%22633dabc4-9020-c420-vdfs-io9rrgafy2mk%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A1853%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A3%3Adp%3A0%3Als%3A327984090938%3Ahid%3A2331051%3Az%3A0%3Ai%3A20221005160733%3Aet%3A1664986053%3Ac%3A1%3Arn%3A306911901%3Arqn%3A1%3Au%3A16649860521063920349%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C157%2C43%2C700%2C706%2C1%2C1000%2C27%2C%2C%2C%2C2283%3Ans%3A1664986050397%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664986053%3At%3AFAQ7.ru&t=gdpr(14)mc(cm-1-tl-1)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/71281900?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22site_id%22%3A116219%2C%22srtb_sid%22%3A%22633dabc4-9020-c420-vdfs-io9rrgafy2mk%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A1853%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A3%3Adp%3A0%3Als%3A327984090938%3Ahid%3A2331051%3Az%3A0%3Ai%3A20221005160733%3Aet%3A1664986053%3Ac%3A1%3Arn%3A306911901%3Arqn%3A1%3Au%3A16649860521063920349%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C157%2C43%2C700%2C706%2C1%2C1000%2C27%2C%2C%2C%2C2283%3Ans%3A1664986050397%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664986053%3At%3AFAQ7.ru&t=gdpr(14)mc(cm-1-tl-1)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch/71281900?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22site_id%22%3A116219%2C%22srtb_sid%22%3A%22633dabc4-9020-c420-vdfs-io9rrgafy2mk%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A1853%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A3%3Adp%3A0%3Als%3A327984090938%3Ahid%3A2331051%3Az%3A0%3Ai%3A20221005160733%3Aet%3A1664986053%3Ac%3A1%3Arn%3A306911901%3Arqn%3A1%3Au%3A16649860521063920349%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C157%2C43%2C700%2C706%2C1%2C1000%2C27%2C%2C%2C%2C2283%3Ans%3A1664986050397%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664986053%3At%3AFAQ7.ru&t=gdpr(14)mc(cm-1-tl-1)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://faq7.ru
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/71281900/1?wmode=7&page-url=http%3A%2F%2Ffaq7.ru%2Ferror.php%3Fcode%3D404&charset=utf-8&site-info=%7B%22site_id%22%3A116219%2C%22srtb_sid%22%3A%22633dabc4-9020-c420-vdfs-io9rrgafy2mk%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Abjn60e0bxws6qaf56eoxk%3Afp%3A1853%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A904%3Acn%3A3%3Adp%3A0%3Als%3A327984090938%3Ahid%3A2331051%3Az%3A0%3Ai%3A20221005160733%3Aet%3A1664986053%3Ac%3A1%3Arn%3A306911901%3Arqn%3A1%3Au%3A16649860521063920349%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C157%2C43%2C700%2C706%2C1%2C1000%2C27%2C%2C%2C%2C2283%3Ans%3A1664986050397%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664986053%3At%3AFAQ7.ru&t=gdpr%2814%29mc%28cm-1-tl-1%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Wed, 05 Oct 2022 16:07:33 GMT
access-control-allow-origin: http://faq7.ru
set-cookie: yandexuid=5186291971664986053; Expires=Thu, 05-Oct-2023 16:07:33 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=5186291971664986053; Expires=Thu, 05-Oct-2023 16:07:33 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=71652551664986053; Path=/; SameSite=None; Secure
i=fLhwApZKWHUe9Y8t0oKDLqe/tQcv/NIrbTHplP0s16HaS0OXhNCh0r58Qm5iUFSFLz1u8mUaQhlxyVKSWA9lCNXhknI=; Expires=Sat, 02-Oct-2032 16:07:31 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1696522053.yrts.1664986053#1696522053.yrtsi.1664986053; Expires=Thu, 05-Oct-2023 16:07:33 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 05-Oct-2022 16:07:33 GMT
last-modified: Wed, 05-Oct-2022 16:07:33 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
dm-eu.hybrid.ai/match?id=106&vid=89B803C1C5AB3D63250538A00227813A
204 No Content 0 B URL HTTP/2 dm-eu.hybrid.ai/match?id=106&vid=89B803C1C5AB3D63250538A00227813A
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /match?id=106&vid=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: dm-eu.hybrid.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 05 Oct 2022 16:07:34 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
set-cookie: vid=8dd3438f3774b2d9534b; expires=Thu, 05 Oct 2023 16:07:32 GMT; domain=.hybrid.ai; path=/; samesite=none
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 508
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: Hybrid Web Server
X-Firefox-Spdy: h2
ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
302 Moved Temporarily 142 B URL HTTP/1.1 ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Wed, 05 Oct 2022 16:07:34 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/match?dp=14&euid=A6B803C1C6AB3D639100BDBE0243F5FC
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=wQO4pmM9q8a+vQCR/PVDAvU40Z7DqUfae7k3NUpkFj3YHjWp; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 60dbe55eafcedb17854a01002f904ecd
b42cd50a1dedadcf1d7566ead3b10cb79e48c0ac
ca3afeb99e3d126c21ac8d2241107fa2dbd5a586a1d4bed4acdf03b4ddaae30a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CA3AFEB99E3D126C21AC8D2241107FA2DBD5A586A1D4BED4ACDF03B4DDAAE30A"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8450
Expires: Wed, 05 Oct 2022 18:28:24 GMT
Date: Wed, 05 Oct 2022 16:07:34 GMT
Connection: keep-alive
ads.adlook.me/csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
302 Found 0 B URL HTTP/2 ads.adlook.me/csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
IP
ASN #48096 Enterprise Cloud Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://acint.net/match?dp=110&euid=68356efa2ab9435c9a591e583f0dbbdc
server: Kestrel
set-cookie: adlm_userId=68356efa2ab9435c9a591e583f0dbbdc; expires=Wed, 04 Oct 2023 21:00:00 GMT; path=/; SameSite=None; secure
date: Wed, 05 Oct 2022 16:07:33 GMT
content-length: 0
X-Firefox-Spdy: h2
acint.net/match?dp=110&euid=68356efa2ab9435c9a591e583f0dbbdc
200 OK 43 B URL HTTP/2 acint.net/match?dp=110&euid=68356efa2ab9435c9a591e583f0dbbdc
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=110&euid=68356efa2ab9435c9a591e583f0dbbdc HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=wQO4iWM9q8WgOAUlOoEnAgPkK+XbR8h0vitR9+RQvDNrRegW; cSyncDp7v2=1664986053; cSyncDp14v3=1664986053; cSyncDp17=1664986053; cSyncDp32=1664986053; cSyncDp45v3=1664986053; cSyncDp53=1664986053; cSyncDp54v2=1664986053; cSyncDp62=1664986053; cSyncDp67v2=1664986053; cSyncDp68=1664986053; cSyncDp71=1664986053; cSyncDp77=1664986053; cSyncDp84=1664986053; cSyncDp85=1664986053; cSyncDp95v3=1664986053; cSyncDp101=1664986053; cSyncDp104v2=1664986053; cSyncDp107=1664986053; cSyncDp110=1664986053; cSyncDp111v2=1664986053; cSyncDp112v2=1664986053; cSyncDp125v2=1664986053; cSyncDp126=1664986053; cSyncDp127=1664986053; cSyncDp129=1664986053; cSyncDp136v2=1664986053; cSyncDp138=1664986053; cSyncDp144=1664986053; cSyncDp146=1664986053; cSyncDp148=1664986053; cSyncDp149=1664986053; cSyncDp151=1664986053; cSyncDp178=1664986053; cSyncDp179=1664986053; cSyncDp186=1664986053; cSyncDp221=1664986053
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 05 Oct 2022 16:07:34 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
acint.net/match?dp=14&euid=A6B803C1C6AB3D639100BDBE0243F5FC
200 OK 43 B URL HTTP/2 acint.net/match?dp=14&euid=A6B803C1C6AB3D639100BDBE0243F5FC
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=14&euid=A6B803C1C6AB3D639100BDBE0243F5FC HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=wQO4iWM9q8WgOAUlOoEnAgPkK+XbR8h0vitR9+RQvDNrRegW; cSyncDp7v2=1664986053; cSyncDp14v3=1664986053; cSyncDp17=1664986053; cSyncDp32=1664986053; cSyncDp45v3=1664986053; cSyncDp53=1664986053; cSyncDp54v2=1664986053; cSyncDp62=1664986053; cSyncDp67v2=1664986053; cSyncDp68=1664986053; cSyncDp71=1664986053; cSyncDp77=1664986053; cSyncDp84=1664986053; cSyncDp85=1664986053; cSyncDp95v3=1664986053; cSyncDp101=1664986053; cSyncDp104v2=1664986053; cSyncDp107=1664986053; cSyncDp110=1664986053; cSyncDp111v2=1664986053; cSyncDp112v2=1664986053; cSyncDp125v2=1664986053; cSyncDp126=1664986053; cSyncDp127=1664986053; cSyncDp129=1664986053; cSyncDp136v2=1664986053; cSyncDp138=1664986053; cSyncDp144=1664986053; cSyncDp146=1664986053; cSyncDp148=1664986053; cSyncDp149=1664986053; cSyncDp151=1664986053; cSyncDp178=1664986053; cSyncDp179=1664986053; cSyncDp186=1664986053; cSyncDp221=1664986053
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 05 Oct 2022 16:07:34 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=89B803C1C5AB3D63250538A00227813A
302 Found 0 B URL HTTP/2 sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=89B803C1C5AB3D63250538A00227813A
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: sync.1dmp.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 05 Oct 2022 16:07:34 GMT
content-length: 0
expires: 0
cache-control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
set-cookie: uid=d29dc8d0-44c7-11ed-acfd-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Thu, 05 Oct 2023 16:07:34 GMT; SameSite=None; Secure
uid-legacy=d29dc8d0-44c7-11ed-acfd-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Thu, 05 Oct 2023 16:07:34 GMT
location: /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=89B803C1C5AB3D63250538A00227813A&cs=1
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dbc5f720572bbdc960ba175d74d1d879
d0a6aceb38eb8bef7044fd6cebbef33bde43ee59
acdb7e5c9f7e07fe6d8a8be4e97b3680a810856d3e8d37082e9acbb4e6c71a36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ACDB7E5C9F7E07FE6D8A8BE4E97B3680A810856D3E8D37082E9ACBB4E6C71A36"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2600
Expires: Wed, 05 Oct 2022 16:50:54 GMT
Date: Wed, 05 Oct 2022 16:07:34 GMT
Connection: keep-alive
ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
302 Found 0 B URL HTTP/1.1 ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D HTTP/1.1
Host: ssp.bestssp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.16.1
Date: Wed, 05 Oct 2022 16:07:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.acint.net/match?dp=95&euid=TIVUKNIZ
Set-Cookie: uid=TIVUKNIZ; Expires=Wed, 05 Oct 2032 00:00:00 GMT; mf2=1; Expires=Fri, 04 Nov 2022 00:00:00 GMT;
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5ab1fe386409ffb4ee5366af32943af9
2ba6c03ce6a0b94e55b3bbb6be37bfd768890b60
e9f09b2a2eff5bbf1b2bbeada244046aa8acff94675966e7a1f8eadbe4a380c2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E9F09B2A2EFF5BBF1B2BBEADA244046AA8ACFF94675966E7A1F8EADBE4A380C2"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11302
Expires: Wed, 05 Oct 2022 19:15:56 GMT
Date: Wed, 05 Oct 2022 16:07:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b64d7a49dec1a92c3fb01334504a91b6
84cef9255cd8c08dd111d7bc22799bb985f68ab3
5449ca64e1c9dbecc0fdab614225f77a82cfd6168ea99f31454a98cb49e8641e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5449CA64E1C9DBECC0FDAB614225F77A82CFD6168EA99F31454A98CB49E8641E"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7668
Expires: Wed, 05 Oct 2022 18:15:22 GMT
Date: Wed, 05 Oct 2022 16:07:34 GMT
Connection: keep-alive
sync.upravel.com/sape/sync
302 Found 0 B URL HTTP/2 sync.upravel.com/sape/sync
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 05 Oct 2022 16:07:34 GMT
content-type: image/png
content-length: 0
location: https://sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
set-cookie: session_tptc=1664986054124;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
session_tptc-legacy=1664986054124;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d05eb0bf9b6a4dc9e7eb915bc72d1153
8be61b5802769191cd0909c77574d6a7d23eb040
ae0433744a96db0a0b625daa43b978b987e6719a3b48518b3529a01718b04d5d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AE0433744A96DB0A0B625DAA43B978B987E6719A3B48518B3529A01718B04D5D"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15163
Expires: Wed, 05 Oct 2022 20:20:17 GMT
Date: Wed, 05 Oct 2022 16:07:34 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 471 B IP
Hash a116b1d81285955e34ce7b24ff5cb1b2
495d1c842868e1e5aa7d5049a419d41fc161bd3d
f6dbbea051048b91ae0276b1acf0831b153878ce039d3218ad10e3676df51684
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 16:07:34 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 04 Oct 2022 15:41:02 GMT
Expires: Tue, 11 Oct 2022 15:41:01 GMT
Etag: "495d1c842868e1e5aa7d5049a419d41fc161bd3d"
Cache-Control: max-age=516206,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 755769364866b506-OSL
www.acint.net/match?dp=95&euid=TIVUKNIZ
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=95&euid=TIVUKNIZ
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=95&euid=TIVUKNIZ HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=wQO4iWM9q8WgOAUlOoEnAgPkK+XbR8h0vitR9+RQvDNrRegW; cSyncDp7v2=1664986053; cSyncDp14v3=1664986053; cSyncDp17=1664986053; cSyncDp32=1664986053; cSyncDp45v3=1664986053; cSyncDp53=1664986053; cSyncDp54v2=1664986053; cSyncDp62=1664986053; cSyncDp67v2=1664986053; cSyncDp68=1664986053; cSyncDp71=1664986053; cSyncDp77=1664986053; cSyncDp84=1664986053; cSyncDp85=1664986053; cSyncDp95v3=1664986053; cSyncDp101=1664986053; cSyncDp104v2=1664986053; cSyncDp107=1664986053; cSyncDp110=1664986053; cSyncDp111v2=1664986053; cSyncDp112v2=1664986053; cSyncDp125v2=1664986053; cSyncDp126=1664986053; cSyncDp127=1664986053; cSyncDp129=1664986053; cSyncDp136v2=1664986053; cSyncDp138=1664986053; cSyncDp144=1664986053; cSyncDp146=1664986053; cSyncDp148=1664986053; cSyncDp149=1664986053; cSyncDp151=1664986053; cSyncDp178=1664986053; cSyncDp179=1664986053; cSyncDp186=1664986053; cSyncDp221=1664986053
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 05 Oct 2022 16:07:34 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=89B803C1C5AB3D63250538A00227813A&cs=1
200 OK 35 B URL HTTP/2 sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=89B803C1C5AB3D63250538A00227813A&cs=1
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=89B803C1C5AB3D63250538A00227813A&cs=1 HTTP/1.1
Host: sync.1dmp.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: uid=d29dc8d0-44c7-11ed-acfd-901b0e8b2a6e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 05 Oct 2022 16:07:34 GMT
content-type: image/gif
content-length: 35
expires: 0
cache-control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
set-cookie: uid=d29dc8d0-44c7-11ed-acfd-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Thu, 05 Oct 2023 16:07:34 GMT; SameSite=None; Secure
uid-legacy=d29dc8d0-44c7-11ed-acfd-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Thu, 05 Oct 2023 16:07:34 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 23c93a8e452fa3c8d5ec35d22b26a5d9
fb7aa2936208194d9bca9d1542665df12c7948db
e8194900d10366f39424fd151346dc767897e8009ddf67e9371f4219001812b7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8194900D10366F39424FD151346DC767897E8009DDF67E9371F4219001812B7"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4595
Expires: Wed, 05 Oct 2022 17:24:09 GMT
Date: Wed, 05 Oct 2022 16:07:34 GMT
Connection: keep-alive
sync.bumlam.com/?src=sap1&uid=89B803C1C5AB3D63250538A00227813A
302 Moved Temporarily 0 B URL HTTP/1.1 sync.bumlam.com/?src=sap1&uid=89B803C1C5AB3D63250538A00227813A
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&uid=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Wed, 05 Oct 2022 16:07:34 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiRkMmE1MWJiMi00NGM3LTExZWQtODY0NC0wMDI1OTBjODI0Mzc*; Path=/; Expires=Tue, 30 Sep 2042 16:07:34 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync.bumlam.com/?src=sap1&s_data=CAIQARjG1_aZBmIgODlCODAzQzFDNUFCM0Q2MzI1MDUzOEEwMDIyNzgxM0GiARDSpRuyRMcR7YZEACWQyCQ3
ETag: d2a51bb2-44c7-11ed-8644-002590c82437
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 8c2e4a1c49e6b1164063632c9172ac82
54bc2e06de8f8f74d5dc3cbd7575a6a24967fbc8
ae46296d6dca4bb308393ecf9bb8dfdb8b4200e616b58629b4e23f405ec93607
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 16:07:34 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sun, 09 Oct 2022 15:06:02 GMT
ETag: "54bc2e06de8f8f74d5dc3cbd7575a6a24967fbc8"
Last-Modified: Wed, 05 Oct 2022 15:06:03 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 967
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75576936994c1c02-OSL
stat.adlabs.ru/merge_gpsid/?sid=50&id=89B803C1C5AB3D63250538A00227813A
302 Found 0 B URL HTTP/2 stat.adlabs.ru/merge_gpsid/?sid=50&id=89B803C1C5AB3D63250538A00227813A
IP
ASN #201009 Centre of server systems Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /merge_gpsid/?sid=50&id=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: stat.adlabs.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 05 Oct 2022 16:07:34 GMT
content-length: 0
location: //adlmerge.com/merge_gpsid/?sid=50&id=89B803C1C5AB3D63250538A00227813A
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 67a144831e0b98302cbbdb47c6a6ddd0
71a95a108b2265f3b6c831c63337dc30519d6759
5a8c0c6b9a1b2d0f0ad4cd7743135f8ba7292b3a8d64a9e21b3a2ede10403c79
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5A8C0C6B9A1B2D0F0AD4CD7743135F8BA7292B3A8D64A9E21B3A2EDE10403C79"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2846
Expires: Wed, 05 Oct 2022 16:55:00 GMT
Date: Wed, 05 Oct 2022 16:07:34 GMT
Connection: keep-alive
ut.rktch.com/matchspm?pi=1000005&pui=89B803C1C5AB3D63250538A00227813A
302 Found 0 B URL HTTP/1.1 ut.rktch.com/matchspm?pi=1000005&pui=89B803C1C5AB3D63250538A00227813A
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /matchspm?pi=1000005&pui=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: ut.rktch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Wed, 05 Oct 2022 16:07:34 GMT
Content-Length: 0
Connection: keep-alive
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
Set-Cookie: b_uid=cb9279d00eed3392ef6aeb941d00bcda041b; Max-Age=2592000; Expires=Fri, 04 Nov 2022 16:07:34 GMT; Domain=rktch.com; Secure; SameSite=None
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Access-Control-Allow-Headers: Content-Type, Accept, Authorization
Access-Control-Allow-Credentials: true
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 28c6778fed721dfdbb45ee002eb7d54a
5eb2c9091a40b882742cb6f05d48113141d9aac2
80561f5f84f1f8bd8b4e91b8e604364042fc83740ce51ddc72a973a2ec526d62
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "80561F5F84F1F8BD8B4E91B8E604364042FC83740CE51DDC72A973A2EC526D62"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11951
Expires: Wed, 05 Oct 2022 19:26:45 GMT
Date: Wed, 05 Oct 2022 16:07:34 GMT
Connection: keep-alive
sync.republer.com/match?dsp=sape
204 No Content 0 B URL HTTP/2 sync.republer.com/match?dsp=sape
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?dsp=sape HTTP/1.1
Host: sync.republer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Wed, 05 Oct 2022 16:07:34 GMT
strict-transport-security: max-age=0
X-Firefox-Spdy: h2
exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
301 Moved Permanently 115 B URL HTTP/2 exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
IP
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text
Hash 36ba6baaf856dbe9e8ef8513a3bc90c3
50a67cdedc65139be1a598e2d9f41b1c67f51a92
11548b59bf4b2935e61387569ad8f52e3625d512a88fdbde371415af95a1d89b
GET /cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Wed, 05 Oct 2022 16:07:31 GMT
content-type: text/html; charset=utf-8
content-length: 115
location: https://www.acint.net/match?dp=126&euid=974c9e39-dc81-421e-6165-161414eb5267
serverid: TODO
X-Firefox-Spdy: h2
89b803c1c5ab3d63250538a00227813a-sp.ops.beeline.ru/p?ssp=sp&id=89B803C1C5AB3D63250538A00227813A
301 Moved Permanently 0 B URL HTTP/2 89b803c1c5ab3d63250538a00227813a-sp.ops.beeline.ru/p?ssp=sp&id=89B803C1C5AB3D63250538A00227813A
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&id=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: 89b803c1c5ab3d63250538a00227813a-sp.ops.beeline.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Wed, 05 Oct 2022 16:07:34 GMT
content-length: 0
location: https://www.acint.net/match?dp=111&euid=067d5e5f-9053-47b4-8d4f-79a22d692f40
access-control-allow-origin: *
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: BeeAID=067d5e5f-9053-47b4-8d4f-79a22d692f40; expires=Tue, 26 Sep 2023 16:07:34 GMT; domain=ops.beeline.ru; path=/; secure; SameSite=None
access-control-allow-credentials: true, true
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS, GET, HEAD, POST, OPTIONS, PUT, DELETE
access-control-allow-headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
x-route: http://upstream_cookiesync
x-host: 192.168.152.60
X-Firefox-Spdy: h2
match.new-programmatic.com/userbind?src=sape&id=89B803C1C5AB3D63250538A00227813A
204 No Content 0 B URL HTTP/1.1 match.new-programmatic.com/userbind?src=sape&id=89B803C1C5AB3D63250538A00227813A
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=sape&id=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: match.new-programmatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0
Date: Wed, 05 Oct 2022 16:07:34 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
mediatoday.ru/core/match.gif?s=32&id=89B803C1C5AB3D63250538A00227813A
200 OK 43 B URL HTTP/2 mediatoday.ru/core/match.gif?s=32&id=89B803C1C5AB3D63250538A00227813A
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /core/match.gif?s=32&id=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: mediatoday.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.22.0
date: Wed, 05 Oct 2022 16:07:34 GMT
content-type: image/gif
content-length: 43
p3p: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
cache-control: no-cache, max-age=0, must-revalidate, no-store
pragma: no-cache
expires: Thursday, 01-Jan-1970 00:00:00 GMT
set-cookie: idntfy=VUzYBb8op18Cr9P; expires=Sat, 02-Oct-2032 16:07:34 GMT; domain=mediatoday.ru; path=/core; SameSite=None; Secure
X-Firefox-Spdy: h2
cs.agency2.ru/p?ssp=sp&uid=89B803C1C5AB3D63250538A00227813A
301 Moved Permanently 0 B URL HTTP/1.1 cs.agency2.ru/p?ssp=sp&uid=89B803C1C5AB3D63250538A00227813A
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&uid=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: cs.agency2.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Date: Wed, 05 Oct 2022 16:07:34 GMT
Content-Length: 0
Connection: keep-alive
Server: fasthttp
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.acint.net/match?dp=186&euid=b8edda09-b5b7-4ed4-bcf7-05b3bd4fe24b
Set-Cookie: uuid=b8edda09-b5b7-4ed4-bcf7-05b3bd4fe24b; expires=Tue, 26 Sep 2023 16:07:34 GMT; domain=agency2.ru; path=/; secure; SameSite=None
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.107.44
www.acint.net/match?dp=129&euid=pi7en5oghg
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=129&euid=pi7en5oghg
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=129&euid=pi7en5oghg HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=wQO4iWM9q8WgOAUlOoEnAgPkK+XbR8h0vitR9+RQvDNrRegW; cSyncDp7v2=1664986053; cSyncDp14v3=1664986053; cSyncDp17=1664986053; cSyncDp32=1664986053; cSyncDp45v3=1664986053; cSyncDp53=1664986053; cSyncDp54v2=1664986053; cSyncDp62=1664986053; cSyncDp67v2=1664986053; cSyncDp68=1664986053; cSyncDp71=1664986053; cSyncDp77=1664986053; cSyncDp84=1664986053; cSyncDp85=1664986053; cSyncDp95v3=1664986053; cSyncDp101=1664986053; cSyncDp104v2=1664986053; cSyncDp107=1664986053; cSyncDp110=1664986053; cSyncDp111v2=1664986053; cSyncDp112v2=1664986053; cSyncDp125v2=1664986053; cSyncDp126=1664986053; cSyncDp127=1664986053; cSyncDp129=1664986053; cSyncDp136v2=1664986053; cSyncDp138=1664986053; cSyncDp144=1664986053; cSyncDp146=1664986053; cSyncDp148=1664986053; cSyncDp149=1664986053; cSyncDp151=1664986053; cSyncDp178=1664986053; cSyncDp179=1664986053; cSyncDp186=1664986053; cSyncDp221=1664986053
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 05 Oct 2022 16:07:34 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/match?dp=126&euid=974c9e39-dc81-421e-6165-161414eb5267
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=126&euid=974c9e39-dc81-421e-6165-161414eb5267
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=126&euid=974c9e39-dc81-421e-6165-161414eb5267 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=wQO4iWM9q8WgOAUlOoEnAgPkK+XbR8h0vitR9+RQvDNrRegW; cSyncDp7v2=1664986053; cSyncDp14v3=1664986053; cSyncDp17=1664986053; cSyncDp32=1664986053; cSyncDp45v3=1664986053; cSyncDp53=1664986053; cSyncDp54v2=1664986053; cSyncDp62=1664986053; cSyncDp67v2=1664986053; cSyncDp68=1664986053; cSyncDp71=1664986053; cSyncDp77=1664986053; cSyncDp84=1664986053; cSyncDp85=1664986053; cSyncDp95v3=1664986053; cSyncDp101=1664986053; cSyncDp104v2=1664986053; cSyncDp107=1664986053; cSyncDp110=1664986053; cSyncDp111v2=1664986053; cSyncDp112v2=1664986053; cSyncDp125v2=1664986053; cSyncDp126=1664986053; cSyncDp127=1664986053; cSyncDp129=1664986053; cSyncDp136v2=1664986053; cSyncDp138=1664986053; cSyncDp144=1664986053; cSyncDp146=1664986053; cSyncDp148=1664986053; cSyncDp149=1664986053; cSyncDp151=1664986053; cSyncDp178=1664986053; cSyncDp179=1664986053; cSyncDp186=1664986053; cSyncDp221=1664986053
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 05 Oct 2022 16:07:34 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sap1&s_data=CAIQARjG1_aZBmIgODlCODAzQzFDNUFCM0Q2MzI1MDUzOEEwMDIyNzgxM0GiARDSpRuyRMcR7YZEACWQyCQ3
200 OK 0 B URL HTTP/1.1 sync.bumlam.com/?src=sap1&s_data=CAIQARjG1_aZBmIgODlCODAzQzFDNUFCM0Q2MzI1MDUzOEEwMDIyNzgxM0GiARDSpRuyRMcR7YZEACWQyCQ3
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&s_data=CAIQARjG1_aZBmIgODlCODAzQzFDNUFCM0Q2MzI1MDUzOEEwMDIyNzgxM0GiARDSpRuyRMcR7YZEACWQyCQ3 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiRkMmE1MWJiMi00NGM3LTExZWQtODY0NC0wMDI1OTBjODI0Mzc*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:34 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiRkMmE1MWJiMi00NGM3LTExZWQtODY0NC0wMDI1OTBjODI0Mzc*; Path=/; Expires=Tue, 30 Sep 2042 16:07:34 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
www.acint.net/match?dp=111&euid=067d5e5f-9053-47b4-8d4f-79a22d692f40
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=111&euid=067d5e5f-9053-47b4-8d4f-79a22d692f40
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=111&euid=067d5e5f-9053-47b4-8d4f-79a22d692f40 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=wQO4iWM9q8WgOAUlOoEnAgPkK+XbR8h0vitR9+RQvDNrRegW; cSyncDp7v2=1664986053; cSyncDp14v3=1664986053; cSyncDp17=1664986053; cSyncDp32=1664986053; cSyncDp45v3=1664986053; cSyncDp53=1664986053; cSyncDp54v2=1664986053; cSyncDp62=1664986053; cSyncDp67v2=1664986053; cSyncDp68=1664986053; cSyncDp71=1664986053; cSyncDp77=1664986053; cSyncDp84=1664986053; cSyncDp85=1664986053; cSyncDp95v3=1664986053; cSyncDp101=1664986053; cSyncDp104v2=1664986053; cSyncDp107=1664986053; cSyncDp110=1664986053; cSyncDp111v2=1664986053; cSyncDp112v2=1664986053; cSyncDp125v2=1664986053; cSyncDp126=1664986053; cSyncDp127=1664986053; cSyncDp129=1664986053; cSyncDp136v2=1664986053; cSyncDp138=1664986053; cSyncDp144=1664986053; cSyncDp146=1664986053; cSyncDp148=1664986053; cSyncDp149=1664986053; cSyncDp151=1664986053; cSyncDp178=1664986053; cSyncDp179=1664986053; cSyncDp186=1664986053; cSyncDp221=1664986053
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 05 Oct 2022 16:07:34 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/match?dp=186&euid=b8edda09-b5b7-4ed4-bcf7-05b3bd4fe24b
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=186&euid=b8edda09-b5b7-4ed4-bcf7-05b3bd4fe24b
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=186&euid=b8edda09-b5b7-4ed4-bcf7-05b3bd4fe24b HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=wQO4iWM9q8WgOAUlOoEnAgPkK+XbR8h0vitR9+RQvDNrRegW; cSyncDp7v2=1664986053; cSyncDp14v3=1664986053; cSyncDp17=1664986053; cSyncDp32=1664986053; cSyncDp45v3=1664986053; cSyncDp53=1664986053; cSyncDp54v2=1664986053; cSyncDp62=1664986053; cSyncDp67v2=1664986053; cSyncDp68=1664986053; cSyncDp71=1664986053; cSyncDp77=1664986053; cSyncDp84=1664986053; cSyncDp85=1664986053; cSyncDp95v3=1664986053; cSyncDp101=1664986053; cSyncDp104v2=1664986053; cSyncDp107=1664986053; cSyncDp110=1664986053; cSyncDp111v2=1664986053; cSyncDp112v2=1664986053; cSyncDp125v2=1664986053; cSyncDp126=1664986053; cSyncDp127=1664986053; cSyncDp129=1664986053; cSyncDp136v2=1664986053; cSyncDp138=1664986053; cSyncDp144=1664986053; cSyncDp146=1664986053; cSyncDp148=1664986053; cSyncDp149=1664986053; cSyncDp151=1664986053; cSyncDp178=1664986053; cSyncDp179=1664986053; cSyncDp186=1664986053; cSyncDp221=1664986053
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 05 Oct 2022 16:07:34 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c95e9ba28af2540107311ab90c4df254
d3f610fc272c476a71503776472655d3c8a340f0
71d586e1ce8c32aec031037d2babd9be51a2e26fd2bdabc2b99e870143ebd62f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "71D586E1CE8C32AEC031037D2BABD9BE51A2E26FD2BDABC2B99E870143EBD62F"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6217
Expires: Wed, 05 Oct 2022 17:51:11 GMT
Date: Wed, 05 Oct 2022 16:07:34 GMT
Connection: keep-alive
sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
302 Found 0 B URL HTTP/2 sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0 HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: session_tptc=1664986054124
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 05 Oct 2022 16:07:34 GMT
content-type: image/png
content-length: 0
location: https://d5dd234e-93bd-47c8-9edf-685a06399583.sync.upravel.com/sape/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyIsImh0dHBzOi8vd3d3LmFjaW50Lm5ldC8iXX19
set-cookie: user_id=d5dd234e-93bd-47c8-9edf-685a06399583;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
user_id-legacy=d5dd234e-93bd-47c8-9edf-685a06399583;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 097e021b2da0e66b5cb9cb4682189a1d
49a1de235f694491202b56b5144b1ed817f31da1
d673a35286f3549f0449c043da65b774591ac08ce459b15b56dee94309f8bdc4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 16:07:34 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 02 Oct 2022 11:26:43 GMT
Expires: Sun, 09 Oct 2022 11:26:42 GMT
Etag: "49a1de235f694491202b56b5144b1ed817f31da1"
Cache-Control: max-age=328147,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75576937096db506-OSL
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 9aecb253a3f78af8634b87c0fae21c57
8c5922bebcef5b8cea1ea043cfc979778cdf34e0
426eb4ee75d5b2fd553f09b7d363fa812df8758fbdeab75c304fea6da56a5da4
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 16:07:34 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sun, 09 Oct 2022 14:36:51 GMT
ETag: "8c5922bebcef5b8cea1ea043cfc979778cdf34e0"
Last-Modified: Wed, 05 Oct 2022 14:36:52 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1883
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75576938ca0d0af6-OSL
adlmerge.com/merge_gpsid/?sid=50&id=89B803C1C5AB3D63250538A00227813A
200 OK 43 B URL HTTP/2 adlmerge.com/merge_gpsid/?sid=50&id=89B803C1C5AB3D63250538A00227813A
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /merge_gpsid/?sid=50&id=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: adlmerge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.16.0
date: Wed, 05 Oct 2022 16:07:34 GMT
content-type: image/gif
iseu: eu
X-Firefox-Spdy: h2
www.acint.net/match?dp=71&euid=d5dd234e-93bd-47c8-9edf-685a06399583
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=71&euid=d5dd234e-93bd-47c8-9edf-685a06399583
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=71&euid=d5dd234e-93bd-47c8-9edf-685a06399583 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=wQO4iWM9q8WgOAUlOoEnAgPkK+XbR8h0vitR9+RQvDNrRegW; cSyncDp7v2=1664986053; cSyncDp14v3=1664986053; cSyncDp17=1664986053; cSyncDp32=1664986053; cSyncDp45v3=1664986053; cSyncDp53=1664986053; cSyncDp54v2=1664986053; cSyncDp62=1664986053; cSyncDp67v2=1664986053; cSyncDp68=1664986053; cSyncDp71=1664986053; cSyncDp77=1664986053; cSyncDp84=1664986053; cSyncDp85=1664986053; cSyncDp95v3=1664986053; cSyncDp101=1664986053; cSyncDp104v2=1664986053; cSyncDp107=1664986053; cSyncDp110=1664986053; cSyncDp111v2=1664986053; cSyncDp112v2=1664986053; cSyncDp125v2=1664986053; cSyncDp126=1664986053; cSyncDp127=1664986053; cSyncDp129=1664986053; cSyncDp136v2=1664986053; cSyncDp138=1664986053; cSyncDp144=1664986053; cSyncDp146=1664986053; cSyncDp148=1664986053; cSyncDp149=1664986053; cSyncDp151=1664986053; cSyncDp178=1664986053; cSyncDp179=1664986053; cSyncDp186=1664986053; cSyncDp221=1664986053
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 05 Oct 2022 16:07:34 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
dmp.gotechnology.io/match/sape?id=89B803C1C5AB3D63250538A00227813A
302 Found 0 B URL HTTP/2 dmp.gotechnology.io/match/sape?id=89B803C1C5AB3D63250538A00227813A
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: dmp.gotechnology.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 05 Oct 2022 16:07:34 GMT
content-length: 0
location: https://dmp.gotechnology.io/match/sape?id=89B803C1C5AB3D63250538A00227813A&chk=1
set-cookie: chk=1; path=/; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
sync.dmp.otm-r.com/match/sape?id=89B803C1C5AB3D63250538A00227813A
204 No Content 0 B URL HTTP/2 sync.dmp.otm-r.com/match/sape?id=89B803C1C5AB3D63250538A00227813A
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.17.6
date: Wed, 05 Oct 2022 16:07:34 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
s.uuidksinc.net/match/396/?remote_uid=89B803C1C5AB3D63250538A00227813A
302 Found 0 B URL HTTP/2 s.uuidksinc.net/match/396/?remote_uid=89B803C1C5AB3D63250538A00227813A
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/396/?remote_uid=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: s.uuidksinc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.19.0
date: Wed, 05 Oct 2022 16:07:34 GMT
content-length: 0
location: https://www.acint.net/match?dp=127&euid=yBMcYeQcumem4N81mKs3
set-cookie: jcsuuid=yBMcYeQcumem4N81mKs3; expires=Thu, 05 Oct 2023 16:07:34 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/match?dp=127&euid=yBMcYeQcumem4N81mKs3
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=127&euid=yBMcYeQcumem4N81mKs3
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=127&euid=yBMcYeQcumem4N81mKs3 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=wQO4iWM9q8WgOAUlOoEnAgPkK+XbR8h0vitR9+RQvDNrRegW; cSyncDp7v2=1664986053; cSyncDp14v3=1664986053; cSyncDp17=1664986053; cSyncDp32=1664986053; cSyncDp45v3=1664986053; cSyncDp53=1664986053; cSyncDp54v2=1664986053; cSyncDp62=1664986053; cSyncDp67v2=1664986053; cSyncDp68=1664986053; cSyncDp71=1664986053; cSyncDp77=1664986053; cSyncDp84=1664986053; cSyncDp85=1664986053; cSyncDp95v3=1664986053; cSyncDp101=1664986053; cSyncDp104v2=1664986053; cSyncDp107=1664986053; cSyncDp110=1664986053; cSyncDp111v2=1664986053; cSyncDp112v2=1664986053; cSyncDp125v2=1664986053; cSyncDp126=1664986053; cSyncDp127=1664986053; cSyncDp129=1664986053; cSyncDp136v2=1664986053; cSyncDp138=1664986053; cSyncDp144=1664986053; cSyncDp146=1664986053; cSyncDp148=1664986053; cSyncDp149=1664986053; cSyncDp151=1664986053; cSyncDp178=1664986053; cSyncDp179=1664986053; cSyncDp186=1664986053; cSyncDp221=1664986053
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 05 Oct 2022 16:07:34 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
dmp.gotechnology.io/match/sape?id=89B803C1C5AB3D63250538A00227813A&chk=1
302 Found 0 B URL HTTP/2 dmp.gotechnology.io/match/sape?id=89B803C1C5AB3D63250538A00227813A&chk=1
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=89B803C1C5AB3D63250538A00227813A&chk=1 HTTP/1.1
Host: dmp.gotechnology.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: chk=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 05 Oct 2022 16:07:34 GMT
content-length: 0
location: https://ads.betweendigital.com/match?bidder_id=98&external_user_id=NTdmYTM4OGRkOTM1ZmI4
set-cookie: pid=NTdmYTM4OGRkOTM1ZmI4; expires=Thu, 05 Oct 2023 16:07:34 GMT; domain=.gotechnology.io; path=/; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eac86f868b3967f1946c7f5fc712b25f
e2ae8eb09715a0af0791c085eb35bf66e0548e30
bceb14e7a478c0e34a0f1d8286eb954566c62051e996bc36189de922a76a6e06
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 16:07:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash d1fc01f4d406cfb496effc0534ca4e0c
3c613aae72d254d77e8d2017447006f51b0dfc55
0d87da52b2ab6f25362cfc70cd643468f5513b1633de7e74dadb3fdcfa67a4d8
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 16:07:35 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sun, 09 Oct 2022 14:18:20 GMT
ETag: "3c613aae72d254d77e8d2017447006f51b0dfc55"
Last-Modified: Wed, 05 Oct 2022 14:18:21 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 653
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7557693cd9d51c02-OSL
cm.g.doubleclick.net/pixel?google_nid=agentstvo_sape_limited&google_hm=ibgDwcWrPWMlBTigAieBOg
200 OK 170 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=agentstvo_sape_limited&google_hm=ibgDwcWrPWMlBTigAieBOg
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash e7673c60af825466f83d46da72ca1635
fc0fcbee0835709ba2d28798a612bfd687903fb5
0b8a20373c6dd04e091902226d922b3688143a8938afb9d283d889de7b55ceb5
GET /pixel?google_nid=agentstvo_sape_limited&google_hm=ibgDwcWrPWMlBTigAieBOg HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
date: Wed, 05 Oct 2022 16:07:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: HTTP server (unknown)
content-length: 170
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691
302 Moved Temporarily 0 B URL HTTP/1.1 ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691 HTTP/1.1
Host: ad.adriver.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Wed, 05 Oct 2022 16:07:35 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-control: no-cache, max-age=0, must-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
Set-Cookie: cid=-6243124375; expires=Fri, 04 Oct 2024 16:07:35 GMT; path=/; domain=.adriver.ru; SameSite=None; Secure
Location: /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-6243124375
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
ocsp.sectigo.com/
200 OK 472 B IP
Hash a5d620515da26a7bcf18c1cfb70f1caa
7a98bf9ee82802278c0d90ebd86403a16dd4bbe9
8b5eecb0afd745c8c2b6726a56b1b33f5c337a73bd12575926f8308c62c688f4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 16:07:35 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 04 Oct 2022 04:09:18 GMT
Expires: Tue, 11 Oct 2022 04:09:17 GMT
Etag: "7a98bf9ee82802278c0d90ebd86403a16dd4bbe9"
Cache-Control: max-age=474701,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7557693d1bacb506-OSL
fcgi4.gnezdo.ru/cookie_matching_ssp/Sape-dsp/89B803C1C5AB3D63250538A00227813A
204 No Content 0 B URL HTTP/2 fcgi4.gnezdo.ru/cookie_matching_ssp/Sape-dsp/89B803C1C5AB3D63250538A00227813A
IP
ASN #48347 JSC Mediasoft ekspert
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookie_matching_ssp/Sape-dsp/89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: fcgi4.gnezdo.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Wed, 05 Oct 2022 16:07:35 GMT
set-cookie: uid=XV9maWM9q8c6pYY5NyosAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=gnezdo.ru; path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash a5d620515da26a7bcf18c1cfb70f1caa
7a98bf9ee82802278c0d90ebd86403a16dd4bbe9
8b5eecb0afd745c8c2b6726a56b1b33f5c337a73bd12575926f8308c62c688f4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 16:07:35 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 04 Oct 2022 04:09:18 GMT
Expires: Tue, 11 Oct 2022 04:09:17 GMT
Etag: "7a98bf9ee82802278c0d90ebd86403a16dd4bbe9"
Cache-Control: max-age=474701,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7557693d4aba0afe-OSL
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash d1fc01f4d406cfb496effc0534ca4e0c
3c613aae72d254d77e8d2017447006f51b0dfc55
0d87da52b2ab6f25362cfc70cd643468f5513b1633de7e74dadb3fdcfa67a4d8
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 16:07:35 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sun, 09 Oct 2022 14:18:20 GMT
ETag: "3c613aae72d254d77e8d2017447006f51b0dfc55"
Last-Modified: Wed, 05 Oct 2022 14:18:21 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 653
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7557693d8aa41c02-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eac86f868b3967f1946c7f5fc712b25f
e2ae8eb09715a0af0791c085eb35bf66e0548e30
bceb14e7a478c0e34a0f1d8286eb954566c62051e996bc36189de922a76a6e06
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 16:07:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
status.thawte.com/
200 OK 471 B IP
Hash aeac60153c06f3624fc386aca79fa944
adbdf26c7d4b5479fd90c1c24ab95a024ef0041d
4085b8e7e9957cb41101a0becf3213a9eaf8c832256d73661b332993922108eb
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1932
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 16:07:35 GMT
Last-Modified: Wed, 05 Oct 2022 15:35:23 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=153&external_id=89B803C1C5AB3D63250538A00227813A
200 OK 42 B URL HTTP/1.1 ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=153&external_id=89B803C1C5AB3D63250538A00227813A
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cgi-bin/sync.cgi?dsp_id=153&external_id=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: ssp.adriver.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:35 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D
302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 05 Oct 2023 16:07:35 GMT; Path=/; Domain=.betweendigital.com
tuuid=6b4747f2-eb0b-5216-8852-d93beb6f72fc; Max-Age=31536000; Expires=Thu, 05 Oct 2023 16:07:35 GMT; Path=/; Domain=.betweendigital.com
ut=Yz2rxwAEk-Be_3XDKHenGHdA817aG54lWOuVow==; Max-Age=31536000; Expires=Thu, 05 Oct 2023 16:07:35 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
ocsp.usertrust.com/
200 OK 472 B IP
Hash 0d1153274175b565c2d1d9cc7e7f4de6
64371dce45dc5640a50e0fe5ad8ab51f53e4a288
b332e35e0d88b7765d34f7831d9579b4c5a1dd17fef98371c8a2f7317dc644ab
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 16:07:35 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 04:18:19 GMT
Expires: Mon, 10 Oct 2022 04:18:18 GMT
Etag: "64371dce45dc5640a50e0fe5ad8ab51f53e4a288"
Cache-Control: max-age=603090,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 365
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7557693dab11b529-OSL
ads.betweendigital.com/match?bidder_id=98&external_user_id=NTdmYTM4OGRkOTM1ZmI4
302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=98&external_user_id=NTdmYTM4OGRkOTM1ZmI4
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=98&external_user_id=NTdmYTM4OGRkOTM1ZmI4 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /match?bidder_id=98&external_user_id=NTdmYTM4OGRkOTM1ZmI4&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 05 Oct 2023 16:07:35 GMT; Path=/; Domain=.betweendigital.com
tuuid=4f696e67-0c59-5216-9882-1a22fbbfb1e5; Max-Age=31536000; Expires=Thu, 05 Oct 2023 16:07:35 GMT; Path=/; Domain=.betweendigital.com
ut=Yz2rxwAEn5gchLBUGJXFnNAGG2j5VOIDIL6EYg==; Max-Age=31536000; Expires=Thu, 05 Oct 2023 16:07:35 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 049f62a147401cf0c6f84143bfa65e8c
4758af274c810c58a82498a4d6e59ceda13db31e
dce1da0dab34c581055c0044d8387aeba2d29118f07616ae51d99bf4444bbd6c
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 16:07:35 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sun, 09 Oct 2022 14:48:12 GMT
ETag: "4758af274c810c58a82498a4d6e59ceda13db31e"
Last-Modified: Wed, 05 Oct 2022 14:48:13 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1597
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7557693dcb011c02-OSL
ads.betweendigital.com/match?bidder_id=73&external_user_id=89B803C1C5AB3D63250538A00227813A
302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=73&external_user_id=89B803C1C5AB3D63250538A00227813A
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=73&external_user_id=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /match?bidder_id=73&external_user_id=89B803C1C5AB3D63250538A00227813A&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 05 Oct 2023 16:07:35 GMT; Path=/; Domain=.betweendigital.com
tuuid=e660adc2-b49b-5216-9283-592cf1bef2eb; Max-Age=31536000; Expires=Thu, 05 Oct 2023 16:07:35 GMT; Path=/; Domain=.betweendigital.com
ut=Yz2rxwAE1kgZFsOH5a7wokPdTHDphAqvmASbYQ==; Max-Age=31536000; Expires=Thu, 05 Oct 2023 16:07:35 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 111601eda6c38449458ae938a2a24056
6d205e292aa6f7119045deaf14dd8fdc99589776
ca4112eb02b282f8de41627cc47a162f422fe9868af850a32d1670de0f706371
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 16:07:35 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sun, 09 Oct 2022 13:50:19 GMT
ETag: "6d205e292aa6f7119045deaf14dd8fdc99589776"
Last-Modified: Wed, 05 Oct 2022 13:50:20 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 63
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7557693deb121c02-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6086c7ae8b2976dfc1d1227f2c96b0ef
ffbb917b019a61946e0f9db793469f65e7a89b88
0d66347ef2b696e7c27ebe4bdccb4f9ee8aa9f1f563b69c80e79b82208406588
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0D66347EF2B696E7C27EBE4BDCCB4F9EE8AA9F1F563B69C80E79B82208406588"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6763
Expires: Wed, 05 Oct 2022 18:00:18 GMT
Date: Wed, 05 Oct 2022 16:07:35 GMT
Connection: keep-alive
ad.mail.ru/cm.gif?p=48&id=89B803C1C5AB3D63250538A00227813A
200 OK 43 B URL HTTP/2 ad.mail.ru/cm.gif?p=48&id=89B803C1C5AB3D63250538A00227813A
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /cm.gif?p=48&id=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: ad.mail.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 05 Oct 2022 16:07:35 GMT
content-type: image/gif
content-length: 43
set-cookie: VID=3WmPR_3sziIC0021Z-3ySSYC:::0-0-0-8580487:CAASEBKg_MZupNszVOQJ44qRJ48aYOAm4xfQZFB0pzcfG2wSoymP4lmVJf2gIvsq5DRm8vJ3dg6xilxWFhfAjedNnLDian41yXUtdVBPBAmycpnAJTFKRANa4rUaO4bWP9Zg1D4wzLDYjbYE2YqQtR02r-s8zQ; path=/; expires=Fri, 06-Oct-23 16:07:35 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
expires: Wed, 05 Oct 2022 22:07:35 GMT
cache-control: max-age=21600
last-modified: Wed, 05 Oct 2022 16:07:35 GMT
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: require-corp
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 05 Oct 2023 16:07:35 GMT; Path=/; Domain=.betweendigital.com
tuuid=eb1ed479-2b60-5216-9f0b-f585fc365e42; Max-Age=31536000; Expires=Thu, 05 Oct 2023 16:07:35 GMT; Path=/; Domain=.betweendigital.com
ut=Yz2rxwAFZtBYZdByfV4pLGyoHaqPb7Aq7DOBvQ==; Max-Age=31536000; Expires=Thu, 05 Oct 2023 16:07:35 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 6cf5ce2fc695932f6c816923b4f150ee
a2e93adc9d362e4c9514a65ae69dcb334c79ad57
e97aa80d8cebe8b3e1b73e2e83e609c5db4ee6bc52cf62722a6acfb15ae59246
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 16:07:35 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sun, 09 Oct 2022 13:39:11 GMT
ETag: "a2e93adc9d362e4c9514a65ae69dcb334c79ad57"
Last-Modified: Wed, 05 Oct 2022 13:39:12 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1075
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7557693e19eeb503-OSL
ads.betweendigital.com/match?bidder_id=98&external_user_id=NTdmYTM4OGRkOTM1ZmI4&crf=1
200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=98&external_user_id=NTdmYTM4OGRkOTM1ZmI4&crf=1
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=98&external_user_id=NTdmYTM4OGRkOTM1ZmI4&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 05 Oct 2023 16:07:35 GMT; Path=/; Domain=.betweendigital.com
tuuid=1f43d3c3-c3e6-5216-8b29-223ae81489fd; Max-Age=31536000; Expires=Thu, 05 Oct 2023 16:07:35 GMT; Path=/; Domain=.betweendigital.com
ut=Yz2rxwAFfkD_PxuYktJpzVprcKOx2Mbqvs_fFA==; Max-Age=31536000; Expires=Thu, 05 Oct 2023 16:07:35 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
sm.rtb.mts.ru/p?ssp=sape&id=89B803C1C5AB3D63250538A00227813A
301 Moved Permanently 0 B URL HTTP/1.1 sm.rtb.mts.ru/p?ssp=sape&id=89B803C1C5AB3D63250538A00227813A
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sape&id=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: sm.rtb.mts.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 05 Oct 2022 16:18:22 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin
Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
Vary: Origin
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://sm.rtb.mts.ru/match/second?ssp=30&exu=89B803C1C5AB3D63250538A00227813A
Set-Cookie: dspid=ff0d0383-ab09-4450-8f70-de7484eed3ce; expires=Tue, 26 Sep 2023 16:07:35 GMT; domain=.mts.ru; path=/; secure; SameSite=None
sape-sync.rutarget.ru/sync
302 Moved Temporarily 0 B URL HTTP/1.1 sape-sync.rutarget.ru/sync
IP
ASN #208677 Cloud technology Limited (Ltd.)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync HTTP/1.1
Host: sape-sync.rutarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Wed, 05 Oct 2022 16:07:35 GMT
Content-Length: 0
Connection: close
Location: https://www.acint.net/match?dp=104&euid=ofbl7yPSpUpO
P3P: CP="This is not a P3P policy. Please visit http://rutarget.ru/p3p/ to get more information."
Set-Cookie: userId=ofbl7yPSpUpO; Path=/; Domain=.rutarget.ru; Expires=Mon, 03 Apr 2023 16:07:35 GMT; SameSite=None; Secure
ads.betweendigital.com/match?bidder_id=73&external_user_id=89B803C1C5AB3D63250538A00227813A&crf=1
200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=73&external_user_id=89B803C1C5AB3D63250538A00227813A&crf=1
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=73&external_user_id=89B803C1C5AB3D63250538A00227813A&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Thu, 05 Oct 2023 16:07:35 GMT; Path=/; Domain=.betweendigital.com
tuuid=15600927-5de2-5216-8103-3e5ae23e959d; Max-Age=31536000; Expires=Thu, 05 Oct 2023 16:07:35 GMT; Path=/; Domain=.betweendigital.com
ut=Yz2rxwAFhhBpjskLqP6TQF9ve28pVrhPB2y9Ng==; Max-Age=31536000; Expires=Thu, 05 Oct 2023 16:07:35 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
sync.adkernel.com/user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D
200 OK 0 B URL HTTP/1.1 sync.adkernel.com/user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D
IP
ASN #36057 WEBAIR-INTERNET-MTL
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D HTTP/1.1
Host: sync.adkernel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:35 GMT
Content-Length: 0
Connection: close
px.adhigh.net/p/cm/sape?u=89B803C1C5AB3D63250538A00227813A
302 Found 0 B URL HTTP/2 px.adhigh.net/p/cm/sape?u=89B803C1C5AB3D63250538A00227813A
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/cm/sape?u=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 05 Oct 2022 16:07:35 GMT
content-length: 0
x-backend-id: f3-ru
access-control-allow-origin: *
access-control-allow-credentials: true
set-cookie: gi_u=5H1pI07MzbP.AikABlGDqOcC0g;Path=/;Domain=.adhigh.net;Expires=Thu, 05-Oct-2023 16:07:35 GMT;Secure;SameSite=None
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
location: https://px.adhigh.net/p/cm/sape?u=89B803C1C5AB3D63250538A00227813A&bounced=1
X-Firefox-Spdy: h2
ssp.bidvol.com/usersync?dspcsid=8&redirect=1
302 Found 40 B URL HTTP/2 ssp.bidvol.com/usersync?dspcsid=8&redirect=1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with CRLF line terminators
Hash 251630b588179b239e8fab1ac9ef6d3a
91b91a97bc481dd2bbd5e0f3fea6ba1c4e843882
c95661e0ef6975b1df5361695a439f71a021d72c345023c3e668e84f35b3c38b
GET /usersync?dspcsid=8&redirect=1 HTTP/1.1
Host: ssp.bidvol.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.22.0
date: Wed, 05 Oct 2022 16:07:34 GMT
x-request-id: 601d65ff-0572-4054-8b8c-1976cdd35423
set-cookie: bvuid=pi7en5oghg; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None
bvuid2=pi7en5oghg; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT
vary: Origin
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
surrogate-control: no-store
location: https://www.acint.net/match?dp=129&euid=pi7en5oghg
X-Firefox-Spdy: h2
www.acint.net/match?dp=104&euid=ofbl7yPSpUpO
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=104&euid=ofbl7yPSpUpO
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=104&euid=ofbl7yPSpUpO HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=wQO4iWM9q8WgOAUlOoEnAgPkK+XbR8h0vitR9+RQvDNrRegW; cSyncDp7v2=1664986053; cSyncDp14v3=1664986053; cSyncDp17=1664986053; cSyncDp32=1664986053; cSyncDp45v3=1664986053; cSyncDp53=1664986053; cSyncDp54v2=1664986053; cSyncDp62=1664986053; cSyncDp67v2=1664986053; cSyncDp68=1664986053; cSyncDp71=1664986053; cSyncDp77=1664986053; cSyncDp84=1664986053; cSyncDp85=1664986053; cSyncDp95v3=1664986053; cSyncDp101=1664986053; cSyncDp104v2=1664986053; cSyncDp107=1664986053; cSyncDp110=1664986053; cSyncDp111v2=1664986053; cSyncDp112v2=1664986053; cSyncDp125v2=1664986053; cSyncDp126=1664986053; cSyncDp127=1664986053; cSyncDp129=1664986053; cSyncDp136v2=1664986053; cSyncDp138=1664986053; cSyncDp144=1664986053; cSyncDp146=1664986053; cSyncDp148=1664986053; cSyncDp149=1664986053; cSyncDp151=1664986053; cSyncDp178=1664986053; cSyncDp179=1664986053; cSyncDp186=1664986053; cSyncDp221=1664986053
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 05 Oct 2022 16:07:35 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
tag.digitaltarget.ru/adcm.js
200 OK 3.1 kB URL HTTP/1.1 tag.digitaltarget.ru/adcm.js
IP
File type ASCII text, with very long lines (3051), with no line terminators
Hash e7097284185069f52fc736bcd50cda13
1cdfdf2d869841202079ddf91e0a00a8610812e6
40f2a96f78f4c8484e9da6e172f5ddd3e4d7786ca29e04b96e1067a365190e80
GET /adcm.js HTTP/1.1
Host: tag.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:35 GMT
Content-Type: application/javascript
Content-Length: 3051
Last-Modified: Wed, 05 Oct 2022 16:04:27 GMT
Connection: keep-alive
ETag: "633dab0b-beb"
Accept-Ranges: bytes
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 9af1e60d62acc971d81f11e57c598398
218178f4e3564fc6e00f4077fb0b6ba4d29f66a8
77f0de6e5d1f3d23fe804675f76cf9cd20d777f5fbf34a356a09daab323f632f
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 05 Oct 2022 16:07:35 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 04 Oct 2022 23:45:06 GMT
Expires: Wed, 05 Oct 2022 23:45:06 GMT
ETag: "218178f4e3564fc6e00f4077fb0b6ba4d29f66a8"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
sm.rtb.mts.ru/match/second?ssp=30&exu=89B803C1C5AB3D63250538A00227813A
301 Moved Permanently 0 B URL HTTP/1.1 sm.rtb.mts.ru/match/second?ssp=30&exu=89B803C1C5AB3D63250538A00227813A
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/second?ssp=30&exu=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: sm.rtb.mts.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 05 Oct 2022 16:18:22 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin
Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
Vary: Origin
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://tech.rtb.mts.ru/
www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
302 Found 154 B URL HTTP/2 www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=wQO4iWM9q8WgOAUlOoEnAgPkK+XbR8h0vitR9+RQvDNrRegW; cSyncDp7v2=1664986053; cSyncDp14v3=1664986053; cSyncDp17=1664986053; cSyncDp32=1664986053; cSyncDp45v3=1664986053; cSyncDp53=1664986053; cSyncDp54v2=1664986053; cSyncDp62=1664986053; cSyncDp67v2=1664986053; cSyncDp68=1664986053; cSyncDp71=1664986053; cSyncDp77=1664986053; cSyncDp84=1664986053; cSyncDp85=1664986053; cSyncDp95v3=1664986053; cSyncDp101=1664986053; cSyncDp104v2=1664986053; cSyncDp107=1664986053; cSyncDp110=1664986053; cSyncDp111v2=1664986053; cSyncDp112v2=1664986053; cSyncDp125v2=1664986053; cSyncDp126=1664986053; cSyncDp127=1664986053; cSyncDp129=1664986053; cSyncDp136v2=1664986053; cSyncDp138=1664986053; cSyncDp144=1664986053; cSyncDp146=1664986053; cSyncDp148=1664986053; cSyncDp149=1664986053; cSyncDp151=1664986053; cSyncDp178=1664986053; cSyncDp179=1664986053; cSyncDp186=1664986053; cSyncDp221=1664986053
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Wed, 05 Oct 2022 16:07:35 GMT
content-type: text/html
content-length: 154
location: https://ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=89B803C1C5AB3D63250538A00227813A
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
px.adhigh.net/p/cm/sape?u=89B803C1C5AB3D63250538A00227813A&bounced=1
200 OK 49 B URL HTTP/2 px.adhigh.net/p/cm/sape?u=89B803C1C5AB3D63250538A00227813A&bounced=1
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
File type GIF image data, version 89a, 1 x 1\012- data
Hash 889bc1fffc025af4685839fb516a0b8b
7f105137a4eafe93213ecd8cc34dd907c340467c
d0409a1b73dab4e29dc40f92fb431fa9133baa23b4a1ffae4897f39068110e32
GET /p/cm/sape?u=89B803C1C5AB3D63250538A00227813A&bounced=1 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 05 Oct 2022 16:07:35 GMT
content-type: image/gif
content-length: 49
x-backend-id: f3-ru
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
X-Firefox-Spdy: h2
redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
302 Found 0 B URL HTTP/2 redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect HTTP/1.1
Host: redirect.frontend.weborama.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: Weborama Collect Frontend
date: Wed, 05 Oct 2022 16:07:34 GMT
content-length: 0
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=3254395633
access-control-allow-origin: *
p3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM"
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: Tue, 03 Jul 2001 06:00:00 GMT
last-modified: Wed, 05 Oct 2022 16:07:35 GMT
set-cookie: AFFICHE_W=EzG3ZR9hJOET54; expires=Thu, 02 Nov 2023 16:07:35 GMT; domain=.weborama.fr; path=/; secure; SameSite=None
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 9af1e60d62acc971d81f11e57c598398
218178f4e3564fc6e00f4077fb0b6ba4d29f66a8
77f0de6e5d1f3d23fe804675f76cf9cd20d777f5fbf34a356a09daab323f632f
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 05 Oct 2022 16:07:35 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 04 Oct 2022 23:45:06 GMT
Expires: Wed, 05 Oct 2022 23:45:06 GMT
ETag: "218178f4e3564fc6e00f4077fb0b6ba4d29f66a8"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=89B803C1C5AB3D63250538A00227813A
200 OK 42 B URL HTTP/1.1 ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=89B803C1C5AB3D63250538A00227813A
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cgi-bin/sync.cgi?ssp_id=43&external_id=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: ssp.adriver.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:35 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
an.yandex.ru/mapuid/sapeis/89B803C1C5AB3D63250538A00227813A?redir-setuniq=1
200 OK 50 B URL HTTP/2 an.yandex.ru/mapuid/sapeis/89B803C1C5AB3D63250538A00227813A?redir-setuniq=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash bef53a5c76b7ad469692178eeaeb08d8
aaae1c11fa0b5a086770957c8857d3937ed653e9
be24bb564cc16e1fe9113f63db905a1b7a3a653c6642f0c27d5e823729a99ee3
GET /mapuid/sapeis/89B803C1C5AB3D63250538A00227813A?redir-setuniq=1 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Wed, 05 Oct 2022 16:07:35 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 05 Oct 2022 16:07:35 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Wed, 05 Oct 2022 16:07:35 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif; charset=utf-8
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash ea12d2d8a38c54298b6916d7e99902d6
79908828cbc4e35ca52495ec617e9ade5335ebff
3c62bd3ad8856f8b32cafa8fb62c49e23c3164024f34ede7476e9e59a48a4933
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 16:07:35 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 04 Oct 2022 14:18:47 GMT
Expires: Tue, 11 Oct 2022 14:18:46 GMT
Etag: "79908828cbc4e35ca52495ec617e9ade5335ebff"
Cache-Control: max-age=511270,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7557693dfce4b506-OSL
tag.digitaltarget.ru/processor.js?i=527918696785043
200 OK 16 kB URL HTTP/1.1 tag.digitaltarget.ru/processor.js?i=527918696785043
IP
File type ASCII text, with very long lines (15892), with no line terminators
Hash 9d8bbf9b7d1aaed9a324a9cf9977dda4
d3365fba7f95ca11a9564b373162d1ddb06fcdbd
0935447866da8ca59df7d65710e0b68377a6dbc62c761e83ebfc83998f905788
GET /processor.js?i=527918696785043 HTTP/1.1
Host: tag.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:35 GMT
Content-Type: application/javascript
Content-Length: 15892
Last-Modified: Wed, 05 Oct 2022 16:04:28 GMT
Connection: keep-alive
ETag: "633dab0c-3e14"
Accept-Ranges: bytes
x01.aidata.io/0.gif?pid=9401454&id=89B803C1C5AB3D63250538A00227813A
302 Found 0 B URL HTTP/2 x01.aidata.io/0.gif?pid=9401454&id=89B803C1C5AB3D63250538A00227813A
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0.gif?pid=9401454&id=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: x01.aidata.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Wed, 05 Oct 2022 16:07:35 GMT
content-length: 0
location: https://x01.aidata.io/0.gif?pid=9401454&id=89B803C1C5AB3D63250538A00227813A&bounce=1
expires: Wed, 05 Oct 2022 16:07:34 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Wed, 05 Oct 2022 16:07:34 GMT
set-cookie: __upin=pc9dZrFGNPVEV4SZT/bzdA;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
__upints=1664986055;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2
x01.aidata.io/0.gif?pid=9401454&id=89B803C1C5AB3D63250538A00227813A&bounce=1
204 No Content 0 B URL HTTP/2 x01.aidata.io/0.gif?pid=9401454&id=89B803C1C5AB3D63250538A00227813A&bounce=1
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0.gif?pid=9401454&id=89B803C1C5AB3D63250538A00227813A&bounce=1 HTTP/1.1
Host: x01.aidata.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Wed, 05 Oct 2022 16:07:35 GMT
expires: Wed, 05 Oct 2022 16:07:34 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Wed, 05 Oct 2022 16:07:34 GMT
set-cookie: __upin=4PsIcvpMGO+4oou65pdEnA;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
__upints=1664986055;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 15d69e9e37a5074bcad19f9279b48e0e
0374a2815f676f8ae290789b4812caef5333695c
09ef9b3b01f3989bc9f426a796dcab2b54b5358e46e8314ca621576ec3134903
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "09EF9B3B01F3989BC9F426A796DCAB2B54B5358E46E8314CA621576EC3134903"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16769
Expires: Wed, 05 Oct 2022 20:47:04 GMT
Date: Wed, 05 Oct 2022 16:07:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 15d69e9e37a5074bcad19f9279b48e0e
0374a2815f676f8ae290789b4812caef5333695c
09ef9b3b01f3989bc9f426a796dcab2b54b5358e46e8314ca621576ec3134903
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "09EF9B3B01F3989BC9F426A796DCAB2B54B5358E46E8314CA621576EC3134903"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16769
Expires: Wed, 05 Oct 2022 20:47:04 GMT
Date: Wed, 05 Oct 2022 16:07:35 GMT
Connection: keep-alive
dmg.digitaltarget.ru/1/1093/i/i?i=702081254026632.858731965287998&a=77&e=89B803C1C5AB3D63250538A00227813A&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:89B803C1C5AB3D63250538A00227813A.sync:up.xdua:dui71KDQwnwtITc7KHWeCbYw.xps:xpsF2wGfRQWMVSuOxYreLudqb.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
307 Temporary Redirect 0 B URL HTTP/1.1 dmg.digitaltarget.ru/1/1093/i/i?i=702081254026632.858731965287998&a=77&e=89B803C1C5AB3D63250538A00227813A&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:89B803C1C5AB3D63250538A00227813A.sync:up.xdua:dui71KDQwnwtITc7KHWeCbYw.xps:xpsF2wGfRQWMVSuOxYreLudqb.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/1093/i/i?i=702081254026632.858731965287998&a=77&e=89B803C1C5AB3D63250538A00227813A&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:89B803C1C5AB3D63250538A00227813A.sync:up.xdua:dui71KDQwnwtITc7KHWeCbYw.xps:xpsF2wGfRQWMVSuOxYreLudqb.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Wed, 05 Oct 2022 16:07:36 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=702081254026632.858731965287998&a=77&e=89B803C1C5AB3D63250538A00227813A&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:89B803C1C5AB3D63250538A00227813A.sync:up.xdua:dui71KDQwnwtITc7KHWeCbYw.xps:xpsF2wGfRQWMVSuOxYreLudqb.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
Set-Cookie: viuserid=PHWDKVDJSvJauUT7u7B9; Max-Age=93312000; Expires=Fri, 19 Sep 2025 16:07:36 GMT; SameSite=None; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly
Request-Time: 0
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/1/1093/i/i?i=702081254026632.571489643823088&a=77&e=89B803C1C5AB3D63250538A00227813A&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:89B803C1C5AB3D63250538A00227813A.sync:up.xdua:dui71KDQwnwtITc7KHWeCbYw.xps:xpsF2wGfRQWMVSuOxYreLudqb.dn:acint__net.adcm:hit.tg:adcmjs_noorient
307 Temporary Redirect 0 B URL HTTP/1.1 dmg.digitaltarget.ru/1/1093/i/i?i=702081254026632.571489643823088&a=77&e=89B803C1C5AB3D63250538A00227813A&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:89B803C1C5AB3D63250538A00227813A.sync:up.xdua:dui71KDQwnwtITc7KHWeCbYw.xps:xpsF2wGfRQWMVSuOxYreLudqb.dn:acint__net.adcm:hit.tg:adcmjs_noorient
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/1093/i/i?i=702081254026632.571489643823088&a=77&e=89B803C1C5AB3D63250538A00227813A&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:89B803C1C5AB3D63250538A00227813A.sync:up.xdua:dui71KDQwnwtITc7KHWeCbYw.xps:xpsF2wGfRQWMVSuOxYreLudqb.dn:acint__net.adcm:hit.tg:adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Wed, 05 Oct 2022 16:07:36 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=702081254026632.571489643823088&a=77&e=89B803C1C5AB3D63250538A00227813A&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:89B803C1C5AB3D63250538A00227813A.sync:up.xdua:dui71KDQwnwtITc7KHWeCbYw.xps:xpsF2wGfRQWMVSuOxYreLudqb.dn:acint__net.adcm:hit.tg:adcmjs_noorient
Set-Cookie: viuserid=BnwT0HXJC80ZC5T7.ow-; Max-Age=93312000; Expires=Fri, 19 Sep 2025 16:07:36 GMT; SameSite=None; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly
Request-Time: 0
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=702081254026632.571489643823088&a=77&e=89B803C1C5AB3D63250538A00227813A&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:89B803C1C5AB3D63250538A00227813A.sync:up.xdua:dui71KDQwnwtITc7KHWeCbYw.xps:xpsF2wGfRQWMVSuOxYreLudqb.dn:acint__net.adcm:hit.tg:adcmjs_noorient
200 OK 64 B URL HTTP/1.1 dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=702081254026632.571489643823088&a=77&e=89B803C1C5AB3D63250538A00227813A&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:89B803C1C5AB3D63250538A00227813A.sync:up.xdua:dui71KDQwnwtITc7KHWeCbYw.xps:xpsF2wGfRQWMVSuOxYreLudqb.dn:acint__net.adcm:hit.tg:adcmjs_noorient
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ffd585dfb1ac6320633a0be46d579437
5a6033d23bc9cd5d1de9ee61de69a44428086dcb
df18d81deb0cc1c48ae87e6481bb4ee375b40cce0fec3d226e002704d49f6cc8
GET /awg/custom/1093/i/i?call_source=awg&i=702081254026632.571489643823088&a=77&e=89B803C1C5AB3D63250538A00227813A&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:89B803C1C5AB3D63250538A00227813A.sync:up.xdua:dui71KDQwnwtITc7KHWeCbYw.xps:xpsF2wGfRQWMVSuOxYreLudqb.dn:acint__net.adcm:hit.tg:adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:36 GMT
Content-Type: image/gif
Content-Length: 64
Connection: keep-alive
Vary: Accept-Encoding
Request-Time: 2
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=702081254026632.858731965287998&a=77&e=89B803C1C5AB3D63250538A00227813A&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:89B803C1C5AB3D63250538A00227813A.sync:up.xdua:dui71KDQwnwtITc7KHWeCbYw.xps:xpsF2wGfRQWMVSuOxYreLudqb.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
200 OK 64 B URL HTTP/1.1 dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=702081254026632.858731965287998&a=77&e=89B803C1C5AB3D63250538A00227813A&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:89B803C1C5AB3D63250538A00227813A.sync:up.xdua:dui71KDQwnwtITc7KHWeCbYw.xps:xpsF2wGfRQWMVSuOxYreLudqb.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ffd585dfb1ac6320633a0be46d579437
5a6033d23bc9cd5d1de9ee61de69a44428086dcb
df18d81deb0cc1c48ae87e6481bb4ee375b40cce0fec3d226e002704d49f6cc8
GET /awg/custom/1093/i/i?call_source=awg&i=702081254026632.858731965287998&a=77&e=89B803C1C5AB3D63250538A00227813A&pref=http%3A%2F%2Ffaq7.ru%2F&c=ss:77.up:89B803C1C5AB3D63250538A00227813A.sync:up.xdua:dui71KDQwnwtITc7KHWeCbYw.xps:xpsF2wGfRQWMVSuOxYreLudqb.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:36 GMT
Content-Type: image/gif
Content-Length: 64
Connection: keep-alive
Vary: Accept-Encoding
Request-Time: 5
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
tech.rtb.mts.ru/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: tech.rtb.mts.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.2
Date: Wed, 05 Oct 2022 16:07:36 GMT
Content-Type: text/html; charset=utf-8
Connection: keep-alive
Set-Cookie: mts_id=97ccdac1-5a45-4599-b39e-184443114594; Domain=mts.ru; expires=Fri, 13 Aug 2032 16:07:36 GMT; SameSite=None; Secure
mts_id_last_sync=1664986056; Domain=mts.ru; expires=Fri, 13 Aug 2032 16:07:36 GMT; SameSite=None; Secure
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Access-Control-Allow-Headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
nr.bidderstack.com/sape/cm?user_id=89B803C1C5AB3D63250538A00227813A
200 OK 44 B URL HTTP/1.1 nr.bidderstack.com/sape/cm?user_id=89B803C1C5AB3D63250538A00227813A
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash f9d60352c70a2ba15616d1c9421f3844
e9abc8bea7721a4b6a50295850d13c515006a95c
82cb517a8f80c91dfcec543c6d140deb3baaf463ea9e77655475096eba7bc7d9
GET /sape/cm?user_id=89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: nr.bidderstack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 05 Oct 2022 16:07:36 GMT
Content-Type: image/gif
Content-Length: 44
Connection: keep-alive
Set-Cookie: uid=980acb87-61c3-43a7-adce-b0ba5cade897; domain=.bidderstack.com; path=/; expires=Thu, 05-Oct-2023 16:07:36 GMT;
Access-Control-Allow-Credentials: true
www.acint.net/ping/?v=0.4.0&uid=12b87f80-828a-46dd-8d75-059e4f001c25&dp=14&tz=%2B00%3A00&nc=43424718&dT=2022-10-05T16%3A07%3A36.759
302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/ping/?v=0.4.0&uid=12b87f80-828a-46dd-8d75-059e4f001c25&dp=14&tz=%2B00%3A00&nc=43424718&dT=2022-10-05T16%3A07%3A36.759
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /ping/?v=0.4.0&uid=12b87f80-828a-46dd-8d75-059e4f001c25&dp=14&tz=%2B00%3A00&nc=43424718&dT=2022-10-05T16%3A07%3A36.759 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://faq7.ru/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Wed, 05 Oct 2022 16:07:36 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/ping/?v=0.4.0&uid=12b87f80-828a-46dd-8d75-059e4f001c25&dp=14&tz=%2B00%3A00&nc=43424718&dT=2022-10-05T16%3A07%3A36.759
www.acint.net/ping/?v=0.4.0&uid=12b87f80-828a-46dd-8d75-059e4f001c25&dp=14&tz=%2B00%3A00&nc=43424718&dT=2022-10-05T16%3A07%3A36.759
200 OK 43 B URL HTTP/2 www.acint.net/ping/?v=0.4.0&uid=12b87f80-828a-46dd-8d75-059e4f001c25&dp=14&tz=%2B00%3A00&nc=43424718&dT=2022-10-05T16%3A07%3A36.759
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /ping/?v=0.4.0&uid=12b87f80-828a-46dd-8d75-059e4f001c25&dp=14&tz=%2B00%3A00&nc=43424718&dT=2022-10-05T16%3A07%3A36.759 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Cookie: aid=wQO4iWM9q8WgOAUlOoEnAgPkK+XbR8h0vitR9+RQvDNrRegW; cSyncDp7v2=1664986053; cSyncDp14v3=1664986053; cSyncDp17=1664986053; cSyncDp32=1664986053; cSyncDp45v3=1664986053; cSyncDp53=1664986053; cSyncDp54v2=1664986053; cSyncDp62=1664986053; cSyncDp67v2=1664986053; cSyncDp68=1664986053; cSyncDp71=1664986053; cSyncDp77=1664986053; cSyncDp84=1664986053; cSyncDp85=1664986053; cSyncDp95v3=1664986053; cSyncDp101=1664986053; cSyncDp104v2=1664986053; cSyncDp107=1664986053; cSyncDp110=1664986053; cSyncDp111v2=1664986053; cSyncDp112v2=1664986053; cSyncDp125v2=1664986053; cSyncDp126=1664986053; cSyncDp127=1664986053; cSyncDp129=1664986053; cSyncDp136v2=1664986053; cSyncDp138=1664986053; cSyncDp144=1664986053; cSyncDp146=1664986053; cSyncDp148=1664986053; cSyncDp149=1664986053; cSyncDp151=1664986053; cSyncDp178=1664986053; cSyncDp179=1664986053; cSyncDp186=1664986053; cSyncDp221=1664986053
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 05 Oct 2022 16:07:36 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
an.yandex.ru/mapuid/sapeis/89B803C1C5AB3D63250538A00227813A
302 Found 0 B URL HTTP/2 an.yandex.ru/mapuid/sapeis/89B803C1C5AB3D63250538A00227813A
IP
GET /mapuid/sapeis/89B803C1C5AB3D63250538A00227813A HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
timing-allow-origin: *
location: https://an.yandex.ru/mapuid/sapeis/89B803C1C5AB3D63250538A00227813A?redir-setuniq=1
date: Wed, 05 Oct 2022 16:07:35 GMT
set-cookie: yandexuid=1218127301664986055; domain=.yandex.ru; path=/; expires=Sat, 02-Oct-2032 16:07:35 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 05 Oct 2022 16:07:35 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Wed, 05 Oct 2022 16:07:35 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
api-maps.yandex.ru/1.1/_YMaps.css?v=0.2.11
200 OK 0 B URL HTTP/2 api-maps.yandex.ru/1.1/_YMaps.css?v=0.2.11
IP
GET /1.1/_YMaps.css?v=0.2.11 HTTP/1.1
Host: api-maps.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
date: Wed, 05 Oct 2022 16:07:31 GMT
set-cookie: _yasc=SJMXh48sbtXl2j+WiSbWk0pODTsoD7OI+nkIIYb3Cyn0lQ==; domain=.yandex.ru; path=/; expires=Fri, 04-Nov-2022 16:07:31 GMT; secure
i=UUqvucCO2UekfEciOzE5N596eAvpLrRtO2NPVPUscUqz0sV1XvNSF4YpxlRXEePg4A1aPpqQ3RdBJt9I+FZTBr7aBlQ=; Expires=Fri, 04-Oct-2024 16:07:31 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
etag: W/"606eaf86-1b99f"
last-modified: Thu, 08 Apr 2021 07:23:50 GMT
content-encoding: gzip
content-type: text/css
X-Firefox-Spdy: h2
api-maps.yandex.ru/1.1/_YMaps.js?v=0.2.11
200 OK 0 B URL HTTP/2 api-maps.yandex.ru/1.1/_YMaps.js?v=0.2.11
IP
GET /1.1/_YMaps.js?v=0.2.11 HTTP/1.1
Host: api-maps.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://faq7.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
date: Wed, 05 Oct 2022 16:07:31 GMT
set-cookie: _yasc=t+J3m92dbNIYI6adNMGHPJHj0u6gmqdAZlgtR9ygAKlv4Q==; domain=.yandex.ru; path=/; expires=Fri, 04-Nov-2022 16:07:31 GMT; secure
i=+YN1wCsLEmtydoXIRvQ8PBwy3UZJXrMXjy2F/oVW1hCiAlLv78Z05zasNwqZKH6BDrMz/2ywe1JebU5FjUNRWDo5Utk=; Expires=Fri, 04-Oct-2024 16:07:31 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
etag: W/"606eaf85-7e686"
last-modified: Thu, 08 Apr 2021 07:23:49 GMT
content-encoding: gzip
content-type: application/javascript
X-Firefox-Spdy: h2
www.acint.net/mc/?dp=14
200 OK 0 B IP
GET /mc/?dp=14 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://faq7.ru/
Connection: keep-alive
Cookie: aid=wQO4iWM9q8WgOAUlOoEnAgPkK+XbR8h0vitR9+RQvDNrRegW
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Wed, 05 Oct 2022 16:07:33 GMT
content-type: text/html
set-cookie: cSyncDp7v2=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp14v3=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp17=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp32=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp45v3=1664986053; expires=Thu, 06-Oct-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp53=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp54v2=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp62=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp67v2=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp68=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp71=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp77=1664986053; expires=Wed, 19-Oct-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp84=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp85=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp95v3=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp101=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp104v2=1664986053; expires=Wed, 19-Oct-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp107=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp110=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp111v2=1664986053; expires=Wed, 19-Oct-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp112v2=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp125v2=1664986053; expires=Thu, 20-Oct-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp126=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp127=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp129=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp136v2=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp138=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp144=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp146=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp148=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp149=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp151=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp178=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp179=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp186=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp221=1664986053; expires=Fri, 04-Nov-22 16:07:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
content-encoding: gzip
X-Firefox-Spdy: h2
31.31.198.198
142.250.74.174
93.184.220.29
23.36.77.32
188.42.196.115
139.162.151.130
95.211.66.35
104.18.20.226
151.101.84.134
46.243.143.249