Overview

URLe-pitanie.ru/
IP 82.146.33.243 (Russia)
ASN#29182 JSC IOT
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-11-11 18:45:20 UTC
StatusLoading report..
IDS alerts0
Blocklist alert11
urlquery alerts No alerts detected
Tags None

Domain Summary (65)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-10T05:10:02Z 606 127 52.41.252.32
sync.1dmp.io (2) 10017 2016-02-09T12:52:58Z 2023-03-09T22:54:34Z 1073 1169 136.243.148.229
s.uuidksinc.net (1) 3423 2015-07-20T14:00:35Z 2023-03-10T12:52:50Z 424 322 31.220.27.155
sync.bumlam.com (3) 3243 2015-08-10T23:04:25Z 2023-03-09T22:54:34Z 1404 1910 31.172.81.159
sm.rtb.mts.ru (2) 27154 2019-03-26T15:10:01Z 2023-03-10T09:38:23Z 838 1031 217.66.147.33
ut.rktch.com (1) 41215 2018-06-04T12:29:18Z 2023-02-13T13:41:38Z 423 593 89.108.97.2
nr.bidderstack.com (1) 352019 2019-02-11T15:43:50Z 2023-03-09T22:54:34Z 421 349 148.251.217.100
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-10T05:12:35Z 413 5844 34.160.144.191
exchange.buzzoola.com (1) 18389 2014-10-17T17:20:27Z 2023-03-10T12:50:39Z 483 382 116.202.236.171
pix.bumlam.com (2) 92002 2022-03-29T11:19:43Z 2023-03-09T22:54:34Z 949 1386 31.172.81.160
img-getpocket.cdn.mozilla.net (3) 1631 2018-06-22T01:36:00Z 2023-03-10T05:10:04Z 1623 28832 34.120.237.76
ads.betweendigital.com (4) 1571 2012-10-30T06:08:04Z 2023-03-10T12:50:39Z 1890 2419 188.42.191.196
ysa-static.passport.yandex.ru (1) 21278 2017-01-30T05:32:10Z 2023-03-10T15:07:21Z 437 398 87.250.250.114
dm-eu.hybrid.ai (1) 28847 2021-01-25T12:48:59Z 2023-03-09T23:38:55Z 419 460 37.18.103.16
ocsp2.globalsign.com (3) 1544 2012-05-23T20:10:04Z 2023-03-10T05:13:37Z 1071 5690 104.18.21.226
www.googleadservices.com (2) 107 2012-06-26T16:53:06Z 2023-03-10T16:05:03Z 900 1851 142.250.74.66
www.acint.net (12) 29072 2014-02-14T22:23:16Z 2023-03-10T07:16:10Z 13228 16239 193.3.184.226
counter.yadro.ru (1) 7275 2014-09-09T20:41:17Z 2023-03-10T08:11:24Z 439 498 88.212.201.204
ssp-rtb.sape.ru (1) 31166 2016-02-02T18:01:03Z 2023-03-10T12:50:39Z 447 773 193.3.184.201
match.new-programmatic.com (1) 33613 2020-02-18T21:50:06Z 2023-03-09T22:38:22Z 434 213 217.65.2.150
dmp.gotechnology.io (2) 48839 2019-06-17T18:08:58Z 2023-02-25T12:17:28Z 875 904 142.132.209.138
redirect.frontend.weborama.fr (1) 8348 2017-05-04T17:00:27Z 2023-03-09T20:31:32Z 475 784 35.190.24.218
ad.mail.ru (1) 7643 2012-06-22T21:38:09Z 2023-03-10T12:50:39Z 412 756 95.163.41.56
sape-sync.rutarget.ru (1) 173587 2018-08-07T16:11:47Z 2023-03-09T22:54:34Z 380 409 188.72.109.103
px.adhigh.net (2) 10272 2013-01-03T22:02:08Z 2023-03-10T12:50:39Z 848 1040 193.232.148.144
dmg.digitaltarget.ru (4) 21471 2015-04-23T16:50:51Z 2023-03-10T12:52:51Z 2704 3226 185.15.175.157
www.google.no (5) 25607 2016-04-05T21:50:59Z 2023-03-10T07:09:08Z 3984 3785 142.250.74.35
r3.o.lencr.org (20) 344 2020-12-02T09:52:13Z 2023-03-10T05:09:10Z 6760 17728 23.36.76.226
ssp.bidvol.com (1) 31817 2020-02-22T13:37:29Z 2023-03-10T15:07:21Z 398 674 65.109.65.188
an.yandex.ru (12) 2577 2017-01-30T06:11:51Z 2023-03-03T18:27:36Z 16469 55080 77.88.21.90
ad.adriver.ru (2) 19548 2012-08-31T19:10:27Z 2023-03-09T23:57:16Z 875 1392 195.209.108.49
tag.digitaltarget.ru (2) 98193 2015-07-21T16:24:58Z 2023-03-09T22:54:34Z 745 19436 185.15.175.147
x01.aidata.io (2) 12188 2016-03-31T17:36:46Z 2023-03-10T07:16:17Z 865 1286 89.108.120.76
ocsp.globalsign.com (11) 2075 2012-07-20T19:46:16Z 2023-03-10T05:11:21Z 3955 17441 104.18.20.226
ssp.bestssp.com (1) 90974 2017-06-10T10:55:20Z 2023-03-10T07:16:25Z 438 302 185.147.80.35
mediatoday.ru (1) 136083 2013-05-20T22:53:32Z 2023-03-10T13:35:36Z 423 521 139.45.228.111
cs.agency2.ru (1) 0 2022-04-29T16:24:02Z 2023-03-09T22:54:34Z 413 721 23.111.107.44
status.thawte.com (1) 5123 2017-11-27T13:33:51Z 2023-03-10T05:17:36Z 341 797 93.184.220.29
e-pitanie.ru (26) 0 2013-08-02T16:00:04Z 2023-03-06T10:28:58Z 11057 1720621 82.146.33.243
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-10T05:10:00Z 782 2370 34.102.187.140
yastatic.net (8) 72282 2014-03-11T08:15:28Z 2023-03-10T12:50:36Z 3508 246636 178.154.131.215
adlmerge.com (1) 146521 2017-04-06T09:10:27Z 2023-02-26T22:31:40Z 436 129 95.211.66.35
acint.net (2) 22962 2014-02-14T22:23:16Z 2023-03-10T12:27:15Z 2715 780 193.3.184.226
a.utraff.com (1) 39874 2019-02-27T11:01:37Z 2023-03-09T22:54:34Z 380 1065 172.67.217.151
stat.adlabs.ru (1) 200922 2012-07-23T17:58:30Z 2023-02-13T00:04:16Z 424 191 109.248.237.36
cm.g.doubleclick.net (1) 202 2012-05-22T11:58:28Z 2023-03-10T15:09:43Z 447 657 142.250.74.130
ocsp.usertrust.com (1) 899 2012-05-21T17:43:18Z 2023-03-10T05:21:21Z 342 1015 104.18.32.68
ocsp.sectigo.com (5) 487 2019-11-29T12:50:24Z 2023-03-10T14:35:32Z 1700 4817 104.18.32.68
f84b6aba-61f0-11ed-86e0-002590c0647c.n1.sync.bumlam.com (1) 0 488 178 82.146.53.26
ocsp.godaddy.com (2) 698 2012-05-20T21:28:57Z 2023-03-10T05:13:22Z 680 4572 192.124.249.24
ocsp.digicert.com (5) 86 2012-05-21T09:02:23Z 2023-03-10T13:49:44Z 1705 3406 93.184.220.29
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-10T05:10:00Z 333 229 34.117.237.239
w.uptolike.com (3) 101818 2013-08-05T15:26:12Z 2023-03-10T13:12:09Z 1287 24487 95.163.114.204
mc.yandex.ru (11) 2672 2012-05-21T11:38:30Z 2023-03-10T13:34:13Z 14187 74412 93.158.134.119
sync.adkernel.com (1) 4993 2017-04-19T11:25:22Z 2023-03-10T05:32:02Z 469 107 77.245.57.72
avatars.mds.yandex.net (1) 6545 2014-12-15T12:43:59Z 2023-03-10T14:44:38Z 421 3599 87.250.247.184
www.google.com (6) 7 2015-05-10T13:11:19Z 2023-03-10T12:19:40Z 4920 4971 142.250.74.164
sync.dmp.otm-r.com (1) 19534 2017-02-03T08:19:51Z 2023-03-10T13:01:48Z 419 135 88.99.28.61
ocsp.pki.goog (15) 175 2018-07-01T08:43:07Z 2023-03-10T05:11:10Z 5145 10491 142.250.74.35
ssp.adriver.ru (2) 12439 2014-01-10T14:39:33Z 2023-03-10T07:15:13Z 881 376 195.209.111.4
sync.upravel.com (2) 28097 2017-05-29T11:13:46Z 2023-03-10T09:38:23Z 890 1775 136.243.48.22
sync.republer.com (1) 45392 2015-04-29T13:49:27Z 2023-03-05T23:18:18Z 386 133 23.88.82.46
1503420a35986e63440140bc0214cd18-sp.ops.beeline.ru (1) 0 449 828 37.9.245.57
fcgi4.gnezdo.ru (1) 69027 2020-06-11T14:55:54Z 2023-03-10T13:17:40Z 431 284 93.95.102.105
ads.adlook.me (1) 43352 2018-11-28T13:50:19Z 2023-03-09T22:54:34Z 442 325 5.200.50.170

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-11 medium e-pitanie.ru/ Malware
2022-11-11 medium e-pitanie.ru/ Malware
2022-11-11 medium e-pitanie.ru/wp-content/themes/nirvana/fonts/fontfaces.css?ver=1.4.4 Malware
2022-11-11 medium e-pitanie.ru/wp-content/themes/nirvana/style.css?ver=1.4.4 Malware
2022-11-11 medium e-pitanie.ru/wp-content/themes/nirvana/js/nivo.slider.min.js?ver=1.4.4 Malware
2022-11-11 medium e-pitanie.ru/wp-content/themes/nirvana/js/ajax.js?ver=1.4.4 Malware
2022-11-11 medium e-pitanie.ru/wp-content/themes/nirvana/fonts/elusive.woff Malware
2022-11-11 medium e-pitanie.ru/wp-content/themes/nirvana/fonts/sourcesanspro-regular-webfont.woff Malware
2022-11-11 medium e-pitanie.ru/wp-content/themes/nirvana/fonts/sourcesanspro-light-webfont.woff Malware
2022-11-11 medium e-pitanie.ru/wp-content/themes/nirvana/fonts/sourcesanspro-bold-webfont.woff Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-11-11 medium hybrid.ai Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 4 reports on IP: 82.146.33.243
Date UQ / IDS / BL URL IP
2023-04-11 09:39:33 UTC 0 - 0 - 4 e-pitanie.ru/vitamini/holin.php 82.146.33.243
2023-04-04 14:44:29 UTC 0 - 0 - 3 e-pitanie.ru/pishchevie_dobavki/emulgatori/e1 (...) 82.146.33.243
2022-11-11 18:45:20 UTC 0 - 0 - 11 e-pitanie.ru/ 82.146.33.243
2022-12-23 15:05:35 UTC 0 - 0 - 3 e-pitanie.ru/orehi/muskatniy_oreh.php 82.146.33.243


Last 5 reports on ASN: JSC IOT
Date UQ / IDS / BL URL IP
2023-06-07 03:07:22 UTC 0 - 0 - 1 loop.denisedonovan.com/ 188.120.235.116
2023-06-06 20:57:51 UTC 0 - 4 - 0 test.personne.ru/h3x2h682 92.63.109.74
2023-06-06 18:48:17 UTC 0 - 1 - 1 83.136.232.242/games/dota2/installer/sounds/a (...) 83.136.232.242
2023-06-06 18:48:19 UTC 0 - 1 - 1 83.136.232.242/games/dota2/installer/sounds/l (...) 83.136.232.242
2023-06-06 18:48:17 UTC 0 - 1 - 1 83.136.232.242/games/dota2/installer/sounds/k (...) 83.136.232.242


Last 4 reports on domain: e-pitanie.ru
Date UQ / IDS / BL URL IP
2023-04-11 09:39:33 UTC 0 - 0 - 4 e-pitanie.ru/vitamini/holin.php 82.146.33.243
2023-04-04 14:44:29 UTC 0 - 0 - 3 e-pitanie.ru/pishchevie_dobavki/emulgatori/e1 (...) 82.146.33.243
2022-11-11 18:45:20 UTC 0 - 0 - 11 e-pitanie.ru/ 82.146.33.243
2022-12-23 15:05:35 UTC 0 - 0 - 3 e-pitanie.ru/orehi/muskatniy_oreh.php 82.146.33.243


No other reports with similar screenshot

JavaScript

Executed Scripts (35)

Executed Evals (0)

Executed Writes (2)
#1 JavaScript::Write (size: 293) - SHA256: 78ef4dbd048817d84e63e301fbe7af0dc3183d02b8806923e5ba1d4d89cfdd11
< a href = '//www.liveinternet.ru/click'
target = _blank > < img src = '//counter.yadro.ru/hit?t17.1;r;s1280*1024*24;uhttps%3A//e-pitanie.ru/;0.6914160579463254'
alt = ''
title = 'LiveInternet: ?>:070=> G8A;> ?@>A<>B@>2 70 24 G0A0, ?>A5B8B5;59 70 24 G0A0 8 70 A53>4=O'
border = '0'
width = '88'
height = '31' > < /a>
#2 JavaScript::Write (size: 1391) - SHA256: 060f6b753d3f8095ba9d8e9a776e6b0bfb667d4e5593752bbf03c275165e20e7
< script > "use strict";
var p = ["https://yastatic.net/q/set/s/rsya-tag-users/bundle.js"],
    m = /^(?:(?:https?:)?\/\/)?(?:an\.)?yandex\.[a-z]+\//gi,
    t = window.parent;
window.addEventListener("message", function(e) {
    if ("string" == typeof e.data) try {
        t = JSON.parse(e.data)
    } catch (e) {
        return
    } else t = e.data;
    var t = (e = t || {}).name,
        n = e.namespace,
        a = e.days,
        r = e.urls,
        o = e.adblockCountToXhr,
        i = e.countToXhr,
        e = e.bundle,
        s = "load_image" === t || "load_script" === t,
        n = function(e, t) {
            if (t && e) {
                e = "".concat(e, "=1");
                if (-1 !== document.cookie.indexOf(e)) return !1;
                var t = 86400 * t * 1e3,
                    n = new Date,
                    n = new Date(Number(n) + t).toUTCString();
                document.cookie = "".concat(e, "; expires=").concat(n, "; SameSite=None; Secure")
            }
            return !0
        }(n, a),
        a = Array.isArray(r) && 0 < r.length;
    if (s && n && a)
        if ("load_image" === t)
            for (var c = r, d = o, u = i, f = e, l = 0; l < c.length; l++)(u && m.test(c[l]) || "adblock" === f && d ? function(e) {
                var t = new XMLHttpRequest;
                t.open("GET", e, !0), t.withCredentials = !0, t.send()
            } : function(e) {
                (new Image).src = e
            })(c[l]);
        else "load_script" === t && r.filter(function(e) {
            return p.includes(e)
        }).forEach(function(e) {
            return e = e, (t = document.createElement("script")).src = e, void document.body.appendChild(t);
            var t
        })
});

function n(e) {
    "pagehide" === e.type && e.persisted || a || (a = !0, t.postMessage({
        name: "CONFIRM_FRAME_UNLOADED"
    }, "*"))
}
var a = !1;
["beforeunload", "pagehide", "unload"].forEach(function(e) {
    return window.addEventListener(e, n)
}), t.postMessage({
    name: "CONFIRM_FRAME_READY"
}, "*"); < /script>


HTTP Transactions (217)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             82.146.33.243
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                            
Date: Fri, 11 Nov 2022 18:42:51 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Location: https://e-pitanie.ru/
Content-Length: 229
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   229
Md5:    f12457953572ad6e18a45238645216e6
Sha1:   587abd069c6628138cd6fa3c0ef3e13def8b4bf4
Sha256: 554be903bcfbd54dd41e78b0c71afe513beafb7db4b3f352fa0dd526641ea39e

Blocklists:
  - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D3F75D03561D6A47D19370292E821A86E58381466F0C69386A21175DE55882FF"
Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3467
Expires: Fri, 11 Nov 2022 19:42:55 GMT
Date: Fri, 11 Nov 2022 18:45:08 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 6499
Cache-Control: max-age=149678
Date: Fri, 11 Nov 2022 18:45:08 GMT
Etag: "636e247f-1d7"
Expires: Sun, 13 Nov 2022 12:19:46 GMT
Last-Modified: Fri, 11 Nov 2022 10:31:27 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "17894427C471F7FA02CA274795DC55DF1BFC99D7BD83F9EE36249394035110FD"
Last-Modified: Wed, 09 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2257
Expires: Fri, 11 Nov 2022 19:22:45 GMT
Date: Fri, 11 Nov 2022 18:45:08 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Length, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 11 Nov 2022 18:44:04 GMT
cache-control: public,max-age=3600
age: 64
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    4736bac84ca28f2b1e961159fb4ea098
Sha1:   1319612979f53896fcfeacd4215c2715d4951e4c
Sha256: 5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: 7d1f8ZycjGDO1tVIXG8btyaJXz2H/K+lNRkgYONQYi5a76DKZpb19/UBXDqwovDdFgsMjAvtz30=
x-amz-request-id: TJ1NSCTWYYZXTZ0K
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 11 Nov 2022 18:12:40 GMT
age: 1948
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    67d5a988edcda47bc3b3b3f65d32b4b6
Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f
Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Fri, 11 Nov 2022 18:45:08 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "87B6CAF560C2101386856930853008305FE7C874630958C5258C1F270A2053A2"
Last-Modified: Wed, 09 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21592
Expires: Sat, 12 Nov 2022 00:45:00 GMT
Date: Fri, 11 Nov 2022 18:45:08 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Cache-Control, Pragma, Last-Modified, ETag, Alert, Backoff, Content-Type, Retry-After, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 11 Nov 2022 18:44:48 GMT
cache-control: public,max-age=3600
age: 21
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET / HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: text/html
                                            
Date: Fri, 11 Nov 2022 18:42:51 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
X-Powered-By: PHP/5.6.40
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (10813)
Size:   320393
Md5:    df4ec36b6a4ca60b8f2c6fdd8fee69a5
Sha1:   ab7d6aebc9787322b93ab5ff0aeba4de02c4d0d5
Sha256: 3397043187d2df3b3a4cf53c6b299feae9bd6f388e90b2bc42cac466219fa53f

Blocklists:
  - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3233
Cache-Control: max-age=141336
Date: Fri, 11 Nov 2022 18:45:09 GMT
Etag: "636e10ac-1d7"
Expires: Sun, 13 Nov 2022 10:00:45 GMT
Last-Modified: Fri, 11 Nov 2022 09:06:52 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /wp-content/themes/nirvana/fonts/fontfaces.css?ver=1.4.4 HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Date: Fri, 11 Nov 2022 18:42:51 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Wed, 15 May 2019 07:44:26 GMT
ETag: "3d0e-588e851940a80"
Accept-Ranges: bytes
Content-Length: 15630
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   15630
Md5:    5461451ecfaf5aeb6f02808009dfa2ef
Sha1:   97288c5c4f1a0eda272e4fd6a839ed16fd161db2
Sha256: 3794e5daba3b25caca6fc0d0239822473f7897614c437d14b3d786ac5ad40ee0

Blocklists:
  - fortinet: Malware
                                        
                                            GET /wp-content/themes/nirvana/style.css?ver=1.4.4 HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Date: Fri, 11 Nov 2022 18:42:51 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Wed, 10 Mar 2021 06:35:50 GMT
ETag: "f7b2-5bd28e0b73d80"
Accept-Ranges: bytes
Content-Length: 63410
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (1103)
Size:   63410
Md5:    88e97d618df5a773eb3060a12a041e19
Sha1:   025526f5d538bfcb00a4938b6a8446f9a45ef74d
Sha256: 4eff119e3f47f8827f70980622d4fdffc954f8ee945439868632cc498c8c97ba

Blocklists:
  - fortinet: Malware
                                        
                                            GET /wp-content/themes/nirvana/js/nivo.slider.min.js?ver=1.4.4 HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Fri, 11 Nov 2022 18:42:51 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Wed, 15 May 2019 07:44:26 GMT
ETag: "2fa9-588e851940a80"
Accept-Ranges: bytes
Content-Length: 12201
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (11999)
Size:   12201
Md5:    0cf3f8b677dcd27b6d46f4a56d65fdb2
Sha1:   55234f525286ead0ea12dc6c51c34b9b49f23bda
Sha256: 2881a6657e481fa5fccc79681cb91277a111785342d9c9283d71ac9ca6e9b098

Blocklists:
  - fortinet: Malware
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Fri, 11 Nov 2022 18:42:51 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Thu, 04 Mar 2021 13:13:15 GMT
ETag: "2a42-5bcb5baf0d0c0"
Accept-Ranges: bytes
Content-Length: 10818
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (9959)
Size:   10818
Md5:    b258da85646fc0ac484b75906256b668
Sha1:   190ed10c0d45a36f717e32e4731baebc20046cbd
Sha256: 578516c63a947d5dad1a4c206cb674319af3c429ed9f30f4430b98742a95ac91
                                        
                                            GET /wp-content/themes/nirvana/styles/style-mobile.css?ver=1.4.4 HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Date: Fri, 11 Nov 2022 18:42:51 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Wed, 15 May 2019 07:44:26 GMT
ETag: "2e20-588e851940a80"
Accept-Ranges: bytes
Content-Length: 11808
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   11808
Md5:    b07202d8754463c21bf5ec14a5eb60ef
Sha1:   e36e409f0acf034d3ac2a4abdcd84778877c6ed4
Sha256: 901247043923ded8221d52d63edc914562f84da8b27a044c5990499d308e9945
                                        
                                            GET /wp-content/themes/nirvana/js/ajax.js?ver=1.4.4 HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Fri, 11 Nov 2022 18:42:51 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Wed, 15 May 2019 07:44:26 GMT
ETag: "96e-588e851940a80"
Accept-Ranges: bytes
Content-Length: 2414
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   2414
Md5:    15fa958b78d6c3da41d2b8bbdf5ed12e
Sha1:   50e2c20566dcb16e6a72669c52d4f441e5febe21
Sha256: 9926c7a85f3ca5ddb6502430633a364fb50f3df1fa046f968ca57a8f2cf56973

Blocklists:
  - fortinet: Malware
                                        
                                            GET /wp-content/themes/nirvana/js/frontend.js?ver=1.4.4 HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Fri, 11 Nov 2022 18:42:51 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Wed, 15 May 2019 07:44:26 GMT
ETag: "1b14-588e851940a80"
Accept-Ranges: bytes
Content-Length: 6932
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (301)
Size:   6932
Md5:    597d4e111fff993cb8fa2e73e0d848f5
Sha1:   d45c612434908f00fc334325bc78e59d85cb0697
Sha256: 3106a1f246b494ac976c215d8767342d35495a79b83c12de8f2f362e7ba5426d
                                        
                                            GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Fri, 11 Nov 2022 18:42:51 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Thu, 04 Mar 2021 13:13:18 GMT
ETag: "17e9a-5bcb5bb1e9780"
Accept-Ranges: bytes
Content-Length: 97946
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (32077)
Size:   97946
Md5:    97dad705092030d63c10e0dcd623e1b5
Sha1:   921fb47f47ec919ee6386f5e8a02dd46c91d6b7f
Sha256: d3d20dfcaa982eb33f02ec8f399068cbd0ca60e0eb3e9567eede83891c131176
                                        
                                            GET /wp-content/uploads/2020/01/shutterstock_640347634-250x150.jpg HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Fri, 11 Nov 2022 18:42:52 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Tue, 09 Mar 2021 22:38:47 GMT
ETag: "204db-5bd2236a6ebc0"
Accept-Ranges: bytes
Content-Length: 132315
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x400, components 3\012- data
Size:   132315
Md5:    b43989971a5cc883555128df94db40a9
Sha1:   f2c7b701b729e285866a3b3fe75d34d806028fe0
Sha256: 6ae87401755071ac2f78ff357378860492000e4fb91088f88763262af0a7a74a
                                        
                                            GET /wp-content/uploads/2019/12/p-a-new-geneo2-250x150.jpg HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Fri, 11 Nov 2022 18:42:52 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Tue, 09 Mar 2021 22:38:11 GMT
ETag: "1705e-5bd2234819ac0"
Accept-Ranges: bytes
Content-Length: 94302
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 630x420, components 3\012- data
Size:   94302
Md5:    153066dfb806aadcecada4ba28e701ae
Sha1:   dcfcab5b4699cb11e467e4bed4c5d50a086b7b0c
Sha256: 746fc86d4dcf99075e6625c6903646981953e17d21f479736851ecf65bb3302e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "85D5F5646C86A7083311CD761AC931B5C98A2CA67CE447B1BD62279E2AF701A2"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7057
Expires: Fri, 11 Nov 2022 20:42:46 GMT
Date: Fri, 11 Nov 2022 18:45:09 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "85D5F5646C86A7083311CD761AC931B5C98A2CA67CE447B1BD62279E2AF701A2"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7057
Expires: Fri, 11 Nov 2022 20:42:46 GMT
Date: Fri, 11 Nov 2022 18:45:09 GMT
Connection: keep-alive

                                        
                                            GET /wp-content/uploads/2019/12/cancer-imagerie-progres1-250x150.jpg HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Fri, 11 Nov 2022 18:42:52 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Tue, 09 Mar 2021 22:37:41 GMT
ETag: "a022-5bd2232b7d740"
Accept-Ranges: bytes
Content-Length: 40994
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], progressive, precision 8, 511x469, components 3\012- data
Size:   40994
Md5:    d55c6063920fb3023d984e7c7fa4b842
Sha1:   1d495dd9e371a57ddde0844411a4dbc6e3ba19dd
Sha256: 385ffb0b29f69ed197dfedb4862762010133df6da06c6af0aa36bfc41d514fdc
                                        
                                            GET /wp-content/uploads/2019/12/protivopokazaniya_primeneniyu-250x150.jpg HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Fri, 11 Nov 2022 18:42:52 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Tue, 09 Mar 2021 22:38:21 GMT
ETag: "200e8-5bd22351a3140"
Accept-Ranges: bytes
Content-Length: 131304
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 785x1108, components 3\012- data
Size:   131304
Md5:    feb6c6e6f66c21b79bfa6acc1806fd83
Sha1:   0e4ab3217c6cde6dd35a1b3dbd3be19694106207
Sha256: cb5112c27f7ed35586c24efb81c303ff5d5ba001d52bad4ac4611dbf9dce5f83
                                        
                                            GET /wp-content/uploads/2019/12/im2-250x150.jpg HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Fri, 11 Nov 2022 18:42:52 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Tue, 09 Mar 2021 22:37:58 GMT
ETag: "1a064-5bd2233bb3d80"
Accept-Ranges: bytes
Content-Length: 106596
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=487, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=734], progressive, precision 8, 500x332, components 3\012- data
Size:   106596
Md5:    cd87bf80d96de45438f4d56b0d3ea542
Sha1:   cb63adedf9c7f35c0e33fa0741f82be6a5dba12a
Sha256: a4d27469db59ccb02948e4edf29cc6d5c13ad080750d9554201909b235442221
                                        
                                            GET /wp-content/uploads/2020/01/boli-v-kolenyah-v2_orig-250x150.jpg HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Fri, 11 Nov 2022 18:42:52 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Tue, 09 Mar 2021 22:38:31 GMT
ETag: "13c20-5bd2235b2c7c0"
Accept-Ranges: bytes
Content-Length: 80928
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1400x650, components 3\012- data
Size:   80928
Md5:    3c4906817992f276f00bb2a3eebceffd
Sha1:   a728be51b1601e122cb2777c8c415bddbc4e74b4
Sha256: 5e6022f44f5736081eca3a5ef5a87bb2671ded65d428e5a3b069869a4a4a63ea
                                        
                                            GET /wp-content/uploads/2019/04/Cv87SiznBT4-250x150.jpg HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Fri, 11 Nov 2022 18:42:52 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Wed, 10 Mar 2021 07:21:58 GMT
ETag: "12a7c-5bd2985b39180"
Accept-Ranges: bytes
Content-Length: 76412
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Size:   76412
Md5:    91a9b8aded7f0f2502fbced44f830670
Sha1:   a8505766fca1a2e5e88c573d7d62c1bb55edff1b
Sha256: a1819156cebd4591b4abe6af668ab05ab0d317ad4158aa2c2f7f98bb00a56338
                                        
                                            GET /img/logo.png HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Fri, 11 Nov 2022 18:42:52 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Thu, 04 Mar 2021 15:54:46 GMT
ETag: "8f3-5bcb7fc91bd80"
Accept-Ranges: bytes
Content-Length: 2291
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 186 x 51, 8-bit colormap, non-interlaced\012- data
Size:   2291
Md5:    14bd2231f4981a38ba3ba8b740180c12
Sha1:   527c8a63805f31e212273b092bf2926880ae94e6
Sha256: b8844517761950588d07e46482e2de08660a8fc14bdf24727a1e3bcc5b782c38
                                        
                                            GET /wp-content/uploads/2020/02/Trustfillerb4-250x150.jpg HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Fri, 11 Nov 2022 18:42:52 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Tue, 09 Mar 2021 22:38:54 GMT
ETag: "1700f-5bd223711bb80"
Accept-Ranges: bytes
Content-Length: 94223
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, baseline, precision 8, 1000x1000, components 3\012- data
Size:   94223
Md5:    e214736b0f19243f3a838ecb3e7cd726
Sha1:   5d07314556503be08cc79c4df7499a8a4a412216
Sha256: 8fce6f97c0145f27ddc8b0488f7249eb139a2bf2d13d2080c5f369dc21b0961a
                                        
                                            GET /wp-content/uploads/2019/12/NDZNKl-250x150.jpg HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Fri, 11 Nov 2022 18:42:52 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Tue, 09 Mar 2021 22:38:04 GMT
ETag: "3a02d-5bd223416cb00"
Accept-Ranges: bytes
Content-Length: 237613
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2015 (Windows), datetime=2017:12:13 16:22:29], baseline, precision 8, 1700x600, components 3\012- data
Size:   237613
Md5:    aec9f38bbb80d5f702bf5f6bdc17cbd2
Sha1:   4b59f75c1a44814f7e126e2c55ac4650d4fc3d7e
Sha256: d7a4e3aae2a96d9b9b419c3f237d37b52408c763d30b587ae18f5f653eeef007
                                        
                                            GET /wp-content/themes/nirvana/fonts/elusive.woff HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://e-pitanie.ru/wp-content/themes/nirvana/fonts/fontfaces.css?ver=1.4.4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                            
Date: Fri, 11 Nov 2022 18:42:52 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Wed, 15 May 2019 07:44:26 GMT
ETag: "3994-588e851940a80"
Accept-Ranges: bytes
Content-Length: 14740
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 14740, version 1.0\012- data
Size:   14740
Md5:    4af5bc564780a95541ce26e843d9860a
Sha1:   01801dd84676bd6a2d166108a3327a1d21ecced6
Sha256: 91138f3b30a796e5e5cd696f1271356a17e416782e22e05a3c31577e624d1549

Blocklists:
  - fortinet: Malware
                                        
                                            GET /wp-content/themes/nirvana/fonts/sourcesanspro-regular-webfont.woff HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://e-pitanie.ru/wp-content/themes/nirvana/fonts/fontfaces.css?ver=1.4.4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                            
Date: Fri, 11 Nov 2022 18:42:52 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Wed, 15 May 2019 07:44:26 GMT
ETag: "6a70-588e851940a80"
Accept-Ranges: bytes
Content-Length: 27248
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 27248, version 1.1\012- data
Size:   27248
Md5:    c4f39c8cef7f1746da98c25e82b76f29
Sha1:   d368079e8789e98ad4831b570e096ba28ed365d6
Sha256: 13ae7e5a59de6cef3c3cedeaa348b17157b3cbc2b1bc9607c6d84ced4d137269

Blocklists:
  - fortinet: Malware
                                        
                                            GET /wp-content/themes/nirvana/fonts/sourcesanspro-light-webfont.woff HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://e-pitanie.ru/wp-content/themes/nirvana/fonts/fontfaces.css?ver=1.4.4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                            
Date: Fri, 11 Nov 2022 18:42:52 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Wed, 15 May 2019 07:44:26 GMT
ETag: "67ac-588e851940a80"
Accept-Ranges: bytes
Content-Length: 26540
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 26540, version 1.1\012- data
Size:   26540
Md5:    7951903bff82a82e7cde0396dfc9d80c
Sha1:   189f5d517caa3e32f01736fff6a921c5068ecf92
Sha256: e42643595230db6d887cf16ba0e06f4fd0ce9c50e8931cbbd6e0167a0d960743

Blocklists:
  - fortinet: Malware
                                        
                                            GET /wp-content/themes/nirvana/fonts/sourcesanspro-bold-webfont.woff HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://e-pitanie.ru/wp-content/themes/nirvana/fonts/fontfaces.css?ver=1.4.4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                            
Date: Fri, 11 Nov 2022 18:42:52 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Wed, 15 May 2019 07:44:26 GMT
ETag: "67f0-588e851940a80"
Accept-Ranges: bytes
Content-Length: 26608
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 26608, version 1.1\012- data
Size:   26608
Md5:    1146f3f229f5a3d3c711f0922ea2eb87
Sha1:   5534e9eb2be04d8a5223489ea9fc9c305aaab9c9
Sha256: 5a86fa4090ad9e6f6f5d0cb9ccdfd96db22e77bfb787bd28085e6baa376f81e8

Blocklists:
  - fortinet: Malware
                                        
                                            GET /wp-content/uploads/2020/01/i3222-250x150.jpg HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Fri, 11 Nov 2022 18:42:52 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Tue, 09 Mar 2021 22:38:38 GMT
ETag: "12574-5bd22361d9780"
Accept-Ranges: bytes
Content-Length: 75124
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x270, components 3\012- data
Size:   75124
Md5:    a0c5ddf27ecc6f64a6976489e7b0235a
Sha1:   1b01d4c8b3ef23e7fae137982e6767ae0e945285
Sha256: a7ad364edf9c70aa86078ec745fab86374d37683b00373221b332e73f3dbe3e7
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: A556EVy1PHUIiyaxstm+DQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             52.41.252.32
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: qrxdcMcjOdYXruV1+CKKZLRZhU4=

                                        
                                            GET /widgets/v1/zp.js?pid=lff0de46e906197c926ec22838064bd82400985077 HTTP/1.1 
Host: w.uptolike.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             95.163.114.204
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=utf-8
                                            
Server: nginx
Date: Fri, 11 Nov 2022 18:45:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: utl_id2=29547525570; Expires=Sun, 10 Nov 2024 18:45:09 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure utl_dat="CP+iisDGMBAAIP/z1MjGMCj/89TIxjAwABSwz835E8+Am7NM/5lQi/0="; Expires=Sun, 10 Nov 2024 18:45:09 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
Cache-Control: max-age=31556926
P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (585)
Size:   11203
Md5:    66cf14ac333fc6d4bb88bfce27d875ea
Sha1:   e919c8fb6c7bc5ef3c44df72251fcf7bd0a1fcc4
Sha256: 6f0b1846dbbff4b527891fc4f43f919c3c8867e6b6dc029958fd80fd69cb8f96
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "71EF9A40CCAF3B317B74BC513A6839E207C3FA12ACEC77691C6F6C662C028C05"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9565
Expires: Fri, 11 Nov 2022 21:24:34 GMT
Date: Fri, 11 Nov 2022 18:45:09 GMT
Connection: keep-alive

                                        
                                            GET /aci.js HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             193.3.184.226
HTTP/2 200 OK
content-type: application/x-javascript
                                            
server: openresty
date: Fri, 11 Nov 2022 18:45:09 GMT
content-length: 7461
last-modified: Mon, 16 May 2022 07:14:50 GMT
etag: "6281f9ea-1d25"
content-encoding: gzip
expires: Sat, 12 Nov 2022 06:45:09 GMT
cache-control: max-age=43200
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1408)
Size:   7461
Md5:    ae0aab6c5a2ae2e1168e74f6e6ae4741
Sha1:   2c00f69ee4bbe2ec96c0f7bb33b5f827a6195af8
Sha256: a47a88a9b6c7635e5074c25c6e3c92f399fdf8772376e94f077167241e59f9de
                                        
                                            GET /widgets/v1/version.js?cb=cb__utl_cb_share_1668192309392892 HTTP/1.1 
Host: w.uptolike.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Cookie: utl_id2=29547525570; utl_dat="CP+iisDGMBAAIP/z1MjGMCj/89TIxjAwABSwz835E8+Am7NM/5lQi/0="
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             95.163.114.204
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=utf-8
                                            
Server: nginx
Date: Fri, 11 Nov 2022 18:45:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Mon, 31 Oct 2022 16:51:19 GMT
Cache-Control: no-cache,no-store,max-age=0,must-revalidate
Pragma: no-cache
Set-Cookie: utl_id2=29547525570; Expires=Sun, 10 Nov 2024 18:45:09 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure utl_dat="CP+iisDGMBAAIP/z1MjGMCj/89TIxjAwABSwz835E8+Am7NM/5lQi/0="; Expires=Sun, 10 Nov 2024 18:45:09 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   84
Md5:    e4c76c1d1d3e2b4a38d8df575cef58ad
Sha1:   a6935e7bbf4a7b5f59051e74c3e2410918e63bac
Sha256: 05c3d065537e2aeff32eac23bc44159118528d738f3a1120901a14ca0388732e
                                        
                                            GET /mc/?dp=10 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             193.3.184.226
HTTP/2 302 Found
content-type: text/html
                                            
server: openresty
date: Fri, 11 Nov 2022 18:45:09 GMT
content-length: 154
location: /mc/?dp=10&tc=1
set-cookie: test_cookie=CheckForPermission; path=/; Secure; SameSite=None; domain=.acint.net; expires=Fri, 11-Nov-22 18:55:09 GMT aid=CkIDE2NumDWesgEIgfmtAhAzncDIZkFFDwaPHzS3aZNDoFoU; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            GET /hit/?v=0.4.0&uid=4956035a-c22c-438f-8eb6-b172ec83e3d5&dp=10&tz=%2B00%3A00&nc=91426142&u=https%3A%2F%2Fe-pitanie.ru%2F&r=&rs=1280x1024&t=%D0%A1%D0%B0%D0%B9%D1%82%20%D0%BE%20%D0%B7%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%D1%8C%D0%B5%2C%20%D0%B2%D0%BA%D1%83%D1%81%D0%BD%D0%BE%D0%BC%20%D0%B8%20%D0%B7%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%D0%BE%D0%BC%20%D0%BF%D0%B8%D1%82%D0%B0%D0%BD%D0%B8%D0%B8%20-%20E-Pitanie.ru&oE=1&oP=1&dT=2022-11-11T18%3A45%3A09.447&fu=b8ce0d94-5b52-4861-bfba-e796b8283fd5 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             193.3.184.226
HTTP/2 200 OK
content-type: image/gif
                                            
server: openresty
date: Fri, 11 Nov 2022 18:45:09 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=CkIDFWNumDW8QAFEGM0UAmC0oceYJRU84AGQQxM9uHqnmCJU; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /widgets/v1/zp.js?pid=1902757 HTTP/1.1 
Host: w.uptolike.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             95.163.114.204
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=utf-8
                                            
Server: nginx
Date: Fri, 11 Nov 2022 18:45:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: utl_id2=29547525620; Expires=Sun, 10 Nov 2024 18:45:09 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure utl_dat="CI2lisDGMBAAII321MjGMCiN9tTIxjAwAI2BEiRnlNsO3Ww/RVhf0Vc="; Expires=Sun, 10 Nov 2024 18:45:09 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
Cache-Control: max-age=31556926
P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (585)
Size:   11168
Md5:    0558cf6aca10b7c704d5e04e1eb5e69d
Sha1:   1602e7f45e8de77a48ff3ccf56fe57e75fb92050
Sha256: b89cdc34050d77aebc41fd1a273b732d2b0073039aea3d1ed9a53f4a746243db
                                        
                                            GET /match?id=106&vid=1503420A35986E63440140BC0214CD18 HTTP/1.1 
Host: dm-eu.hybrid.ai
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             37.18.103.16
HTTP/2 204 No Content
                                            
date: Fri, 11 Nov 2022 18:45:10 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
set-cookie: vid=af2bbbb5360f09953443; expires=Sat, 11 Nov 2023 18:45:08 GMT; domain=.hybrid.ai; path=/; samesite=none
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 517
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: Hybrid Web Server
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 937
Connection: keep-alive
Expires: Tue, 15 Nov 2022 15:46:58 GMT
ETag: "1eb20ff15da98c124a7123c170bd2148b37e0e5a"
Last-Modified: Fri, 11 Nov 2022 15:46:59 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2721
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76892ef25f93b511-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 796
Cache-Control: max-age=103256
Date: Fri, 11 Nov 2022 18:45:10 GMT
Etag: "636d8572-117"
Expires: Sat, 12 Nov 2022 23:26:06 GMT
Last-Modified: Thu, 10 Nov 2022 23:12:50 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: e-pitanie.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Cookie: fid=b8ce0d94-5b52-4861-bfba-e796b8283fd5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             82.146.33.243
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                            
Date: Fri, 11 Nov 2022 18:42:52 GMT
Server: Apache/2.4.6 (CentOS) mpm-itk/2.4.7-04 OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.6.40
Strict-Transport-Security: max-age=31536000; preload
Last-Modified: Thu, 04 Mar 2021 21:06:34 GMT
ETag: "47e-5bcbc57a72a80"
Accept-Ranges: bytes
Content-Length: 1150
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size:   1150
Md5:    39edc9e9dded6ca12c39dc5a741739b4
Sha1:   d99b08c1982a7113bb4fae90d1fbc988bab8d48d
Sha256: 4d0a3f316dc5e69f4b04c53d1774a423968be2948cdf71a4a68e177800908d6e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3620
Cache-Control: max-age=165137
Date: Fri, 11 Nov 2022 18:45:10 GMT
Etag: "636e6c23-116"
Expires: Sun, 13 Nov 2022 16:37:27 GMT
Last-Modified: Fri, 11 Nov 2022 15:37:07 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 278

                                        
                                            GET /match?dp=110&euid=76794266768145118596ed3bafeda8d0 HTTP/1.1 
Host: acint.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDFWNumDW8QAFEGM0UAmC0oceYJRU84AGQQxM9uHqnmCJU; cSyncDp7v2=1668192309; cSyncDp14v3=1668192309; cSyncDp17=1668192309; cSyncDp32=1668192309; cSyncDp45v3=1668192309; cSyncDp53=1668192309; cSyncDp54v2=1668192309; cSyncDp62=1668192309; cSyncDp67v2=1668192309; cSyncDp68=1668192309; cSyncDp71=1668192309; cSyncDp77=1668192309; cSyncDp84=1668192309; cSyncDp85=1668192309; cSyncDp95v3=1668192309; cSyncDp101=1668192309; cSyncDp104v2=1668192309; cSyncDp107=1668192309; cSyncDp110=1668192309; cSyncDp111v2=1668192309; cSyncDp112v2=1668192309; cSyncDp125v2=1668192309; cSyncDp126=1668192309; cSyncDp127=1668192309; cSyncDp129=1668192309; cSyncDp136v2=1668192309; cSyncDp138=1668192309; cSyncDp144=1668192309; cSyncDp146=1668192309; cSyncDp148=1668192309; cSyncDp149v2=1668192309; cSyncDp151=1668192309; cSyncDp178=1668192309; cSyncDp179=1668192309; cSyncDp186=1668192309; cSyncDp221=1668192309
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             193.3.184.226
HTTP/2 200 OK
content-type: image/gif
                                            
server: openresty
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /sape/sync HTTP/1.1 
Host: sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             136.243.48.22
HTTP/2 302 Found
content-type: image/png
                                            
server: nginx
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 0
location: https://sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
set-cookie: session_tptc=1668192310205;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=180 session_tptc-legacy=1668192310205;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2

                                        
                                            POST /gsalphasha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 1423
Connection: keep-alive
Expires: Tue, 15 Nov 2022 15:38:36 GMT
ETag: "4da8849cd8cde52c617d039711c25621fcd03b37"
Last-Modified: Fri, 11 Nov 2022 15:38:37 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2707
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76892ef3184ab518-OSL


--- Additional Info ---
Magic:  data
Size:   1423
Md5:    5aaf9714a8ace748a495b9d95b4ee76c
Sha1:   4da8849cd8cde52c617d039711c25621fcd03b37
Sha256: 70e71c0bcd651ee8d346f1767cccd7b77d22d85f4f49df3e87190401ac452219
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "7E7B218C8EC9051318D6F6E535BE1D7345806ADAF46A9C69B616A206921A0CCC"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10121
Expires: Fri, 11 Nov 2022 21:33:51 GMT
Date: Fri, 11 Nov 2022 18:45:10 GMT
Connection: keep-alive

                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 938
Connection: keep-alive
Expires: Tue, 15 Nov 2022 16:46:33 GMT
ETag: "2f33676574428b29cc77658fc76e8fafb7923f1e"
Last-Modified: Fri, 11 Nov 2022 16:46:34 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1018
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76892ef328fdb511-OSL

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "E89BC5EE701C144F468638C3D8D343C34F939591F997B1D4768F7E8AEBCEB5B2"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7963
Expires: Fri, 11 Nov 2022 20:57:53 GMT
Date: Fri, 11 Nov 2022 18:45:10 GMT
Connection: keep-alive

                                        
                                            GET /hit?t17.1;r;s1280*1024*24;uhttps%3A//e-pitanie.ru/;0.6914160579463254 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             88.212.201.204
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: nginx/1.17.9
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 195
Connection: keep-alive
Expires: Wed, 10 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400


--- Additional Info ---
Magic:  GIF image data, version 89a, 88 x 31\012- data
Size:   195
Md5:    c34e754359ef3b59d0e653e5c393367a
Sha1:   a3f22e9bcf1fc5f16291edabe0b5f1740bf395eb
Sha256: c6c71f89aef58db96505b6d549edfc154f910f942a5f70ef6383c6098b246d9d
                                        
                                            GET /sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D HTTP/1.1 
Host: ssp.bestssp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.147.80.35
HTTP/1.1 302 Found
                                            
Server: nginx/1.16.1
Date: Fri, 11 Nov 2022 18:45:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.acint.net/match?dp=95&euid=KNKGLJZA
Set-Cookie: uid=KNKGLJZA; Expires=Fri, 11 Nov 2032 00:00:00 GMT; mf2=1; Expires=Sun, 11 Dec 2022 00:00:00 GMT;

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "3CD5986ABF1D345483D72627AFE26FAB2589FE97D0A3D76DCE772D917B826D12"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16349
Expires: Fri, 11 Nov 2022 23:17:39 GMT
Date: Fri, 11 Nov 2022 18:45:10 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "1933D8E7400083B33A5ABD4080B7D771C5172374C3D344D08DA4D0481767ADF2"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11943
Expires: Fri, 11 Nov 2022 22:04:13 GMT
Date: Fri, 11 Nov 2022 18:45:10 GMT
Connection: keep-alive

                                        
                                            GET /matchspm?pi=1000005&pui=1503420A35986E63440140BC0214CD18 HTTP/1.1 
Host: ut.rktch.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             89.108.97.2
HTTP/1.1 302 Found
                                            
Server: nginx/1.22.0
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 0
Connection: keep-alive
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
Set-Cookie: b_uid=d86417bb8d354e5c7632661f8ec54bfb25b1; Max-Age=2592000; Expires=Sun, 11 Dec 2022 18:45:10 GMT; Domain=rktch.com; Secure; SameSite=None
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Access-Control-Allow-Headers: Content-Type, Accept, Authorization
Access-Control-Allow-Credentials: true

                                        
                                            GET /sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0 HTTP/1.1 
Host: sync.upravel.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: session_tptc=1668192310205
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             136.243.48.22
HTTP/2 302 Found
content-type: image/png
                                            
server: nginx
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 0
location: https://f38fcdb9-7ec8-45c3-a03a-ce9a77d6e390.sync.upravel.com/sape/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyIsImh0dHBzOi8vd3d3LmFjaW50Lm5ldC8iXX19
set-cookie: user_id=f38fcdb9-7ec8-45c3-a03a-ce9a77d6e390;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000 user_id-legacy=f38fcdb9-7ec8-45c3-a03a-ce9a77d6e390;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2

                                        
                                            POST /gsalphasha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 1423
Connection: keep-alive
Expires: Tue, 15 Nov 2022 16:56:01 GMT
ETag: "5fa358bfe97fffd780a7fe420c7c8c01b41a6c76"
Last-Modified: Fri, 11 Nov 2022 16:56:02 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3506
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76892ef388fbb518-OSL


--- Additional Info ---
Magic:  data
Size:   1423
Md5:    30203d72e47a7f06956c0fea0da0c304
Sha1:   5fa358bfe97fffd780a7fe420c7c8c01b41a6c76
Sha256: 1b035db912af5c595738a4c626fdcf8ddec523bf378c4231f3e0fca7d18e7a27
                                        
                                            GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1503420A35986E63440140BC0214CD18 HTTP/1.1 
Host: sync.1dmp.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             136.243.148.229
HTTP/2 302 Found
                                            
server: nginx
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 0
expires: 0
cache-control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
set-cookie: uid=f83cc190-61f0-11ed-acfd-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Sat, 11 Nov 2023 18:45:10 GMT; SameSite=None; Secure uid-legacy=f83cc190-61f0-11ed-acfd-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Sat, 11 Nov 2023 18:45:10 GMT
location: /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1503420A35986E63440140BC0214CD18&cs=1
X-Firefox-Spdy: h2

                                        
                                            GET /match?dsp=sape HTTP/1.1 
Host: sync.republer.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             23.88.82.46
HTTP/2 204 No Content
                                            
server: nginx
date: Fri, 11 Nov 2022 18:45:10 GMT
strict-transport-security: max-age=0
X-Firefox-Spdy: h2

                                        
                                            GET /rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D HTTP/1.1 
Host: ssp-rtb.sape.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             193.3.184.201
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Server: openresty
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/match?dp=14&euid=4702420A36986E631D009B3402733C0D
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=CkICR2NumDY0mwAdDTxzAtyPzlEWhmjDiOkRhfFAkZw+DJi/; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   142
Md5:    82c98e8e012b79c922655461171cc2fa
Sha1:   0828d79135573276005b04be42d79a8a3291292b
Sha256: 745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "18C6522233A2257B1AF0EC955F5D283D28C3BA715E36511F4AFC2DC43B17F43D"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13869
Expires: Fri, 11 Nov 2022 22:36:19 GMT
Date: Fri, 11 Nov 2022 18:45:10 GMT
Connection: keep-alive

                                        
                                            GET /match?dp=95&euid=KNKGLJZA HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDFWNumDW8QAFEGM0UAmC0oceYJRU84AGQQxM9uHqnmCJU; cSyncDp7v2=1668192309; cSyncDp14v3=1668192309; cSyncDp17=1668192309; cSyncDp32=1668192309; cSyncDp45v3=1668192309; cSyncDp53=1668192309; cSyncDp54v2=1668192309; cSyncDp62=1668192309; cSyncDp67v2=1668192309; cSyncDp68=1668192309; cSyncDp71=1668192309; cSyncDp77=1668192309; cSyncDp84=1668192309; cSyncDp85=1668192309; cSyncDp95v3=1668192309; cSyncDp101=1668192309; cSyncDp104v2=1668192309; cSyncDp107=1668192309; cSyncDp110=1668192309; cSyncDp111v2=1668192309; cSyncDp112v2=1668192309; cSyncDp125v2=1668192309; cSyncDp126=1668192309; cSyncDp127=1668192309; cSyncDp129=1668192309; cSyncDp136v2=1668192309; cSyncDp138=1668192309; cSyncDp144=1668192309; cSyncDp146=1668192309; cSyncDp148=1668192309; cSyncDp149v2=1668192309; cSyncDp151=1668192309; cSyncDp178=1668192309; cSyncDp179=1668192309; cSyncDp186=1668192309; cSyncDp221=1668192309
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             193.3.184.226
HTTP/2 200 OK
content-type: image/gif
                                            
server: openresty
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /sync?ssp=sape HTTP/1.1 
Host: a.utraff.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.67.217.151
HTTP/2 204 No Content
content-type: text/plain
                                            
date: Fri, 11 Nov 2022 18:45:10 GMT
set-cookie: preutid=1; Expires=Sun, 11 Dec 2022 21:45:10 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/ preutid=1; Expires=Sun, 11 Dec 2022 21:45:10 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-expose-headers: Content-Length,Content-Range
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0dJ7ITgon65mGRATtASqUzBJO%2B0zWYpjLZ5pOSt%2F7TdBIMvgnq5CnHjDZZg2XuJjnW%2BBw7RjOKg6ZCGNzWLOvdX0rbgomzfcMYTTbGOK3lsLt1Xmfwzcp7EqJiv%2BZt0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76892ef31c1a0b02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            GET /merge_gpsid/?sid=50&id=1503420A35986E63440140BC0214CD18 HTTP/1.1 
Host: stat.adlabs.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             109.248.237.36
HTTP/2 302 Found
                                            
server: nginx
date: Fri, 11 Nov 2022 18:31:39 GMT
content-length: 0
location: //adlmerge.com/merge_gpsid/?sid=50&id=1503420A35986E63440140BC0214CD18
X-Firefox-Spdy: h2

                                        
                                            GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1503420A35986E63440140BC0214CD18&cs=1 HTTP/1.1 
Host: sync.1dmp.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: uid=f83cc190-61f0-11ed-acfd-901b0e8b2a6e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             136.243.148.229
HTTP/2 200 OK
content-type: image/gif
                                            
server: nginx
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 35
expires: 0
cache-control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
set-cookie: uid=f83cc190-61f0-11ed-acfd-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Sat, 11 Nov 2023 18:45:10 GMT; SameSite=None; Secure uid-legacy=f83cc190-61f0-11ed-acfd-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Sat, 11 Nov 2023 18:45:10 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            POST /gsgccr3dvtlsca2020 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 1414
Connection: keep-alive
Expires: Tue, 15 Nov 2022 14:40:38 GMT
ETag: "37c4ee9e62cb674f7e900b671cfb7c064ebec912"
Last-Modified: Fri, 11 Nov 2022 14:40:39 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2370
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76892ef3c9c9b511-OSL


--- Additional Info ---
Magic:  data
Size:   1414
Md5:    5e6ba404034811099aa138fae821fdb9
Sha1:   37c4ee9e62cb674f7e900b671cfb7c064ebec912
Sha256: 519641cbc37e0a79959aa28f3e90974328b457c63eb8f698d44f9bb4d0974e67
                                        
                                            GET /match/396/?remote_uid=1503420A35986E63440140BC0214CD18 HTTP/1.1 
Host: s.uuidksinc.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             31.220.27.155
HTTP/2 302 Found
                                            
server: nginx/1.19.0
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 0
location: https://www.acint.net/match?dp=127&euid=AKAKijkxbHhErr9gfMxd
set-cookie: jcsuuid=AKAKijkxbHhErr9gfMxd; expires=Sat, 11 Nov 2023 18:45:10 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A51F0728DF2E635589FFABC66758DFF3EA44F2FA257FA23B1A8F92539369F127"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3987
Expires: Fri, 11 Nov 2022 19:51:37 GMT
Date: Fri, 11 Nov 2022 18:45:10 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "EAAFA570A5A217EA8B2440DC46397A37677A7E3E7740FD59F913204D313F8595"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2757
Expires: Fri, 11 Nov 2022 19:31:07 GMT
Date: Fri, 11 Nov 2022 18:45:10 GMT
Connection: keep-alive

                                        
                                            GET /match?dp=14&euid=4702420A36986E631D009B3402733C0D HTTP/1.1 
Host: acint.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDFWNumDW8QAFEGM0UAmC0oceYJRU84AGQQxM9uHqnmCJU; cSyncDp7v2=1668192309; cSyncDp14v3=1668192309; cSyncDp17=1668192309; cSyncDp32=1668192309; cSyncDp45v3=1668192309; cSyncDp53=1668192309; cSyncDp54v2=1668192309; cSyncDp62=1668192309; cSyncDp67v2=1668192309; cSyncDp68=1668192309; cSyncDp71=1668192309; cSyncDp77=1668192309; cSyncDp84=1668192309; cSyncDp85=1668192309; cSyncDp95v3=1668192309; cSyncDp101=1668192309; cSyncDp104v2=1668192309; cSyncDp107=1668192309; cSyncDp110=1668192309; cSyncDp111v2=1668192309; cSyncDp112v2=1668192309; cSyncDp125v2=1668192309; cSyncDp126=1668192309; cSyncDp127=1668192309; cSyncDp129=1668192309; cSyncDp136v2=1668192309; cSyncDp138=1668192309; cSyncDp144=1668192309; cSyncDp146=1668192309; cSyncDp148=1668192309; cSyncDp149v2=1668192309; cSyncDp151=1668192309; cSyncDp178=1668192309; cSyncDp179=1668192309; cSyncDp186=1668192309; cSyncDp221=1668192309
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             193.3.184.226
HTTP/2 200 OK
content-type: image/gif
                                            
server: openresty
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "0156681B7480582EA9BF2AB80DFEE2AAFE74AEAF116C2096BA5A2AC6AFA7A064"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11963
Expires: Fri, 11 Nov 2022 22:04:33 GMT
Date: Fri, 11 Nov 2022 18:45:10 GMT
Connection: keep-alive

                                        
                                            GET /p?ssp=sp&id=1503420A35986E63440140BC0214CD18 HTTP/1.1 
Host: 1503420a35986e63440140bc0214cd18-sp.ops.beeline.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             37.9.245.57
HTTP/2 301 Moved Permanently
                                            
server: nginx
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 0
location: https://www.acint.net/match?dp=111&euid=1aebf53c-b942-4f2c-947f-e5f15702ccc1
access-control-allow-origin: *
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: BeeAID=1aebf53c-b942-4f2c-947f-e5f15702ccc1; expires=Thu, 02 Nov 2023 18:45:10 GMT; domain=ops.beeline.ru; path=/; secure; SameSite=None
access-control-allow-credentials: true, true
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS, GET, HEAD, POST, OPTIONS, PUT, DELETE
access-control-allow-headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
x-route: http://upstream_cookiesync
x-host: 192.168.152.33
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "EAAFA570A5A217EA8B2440DC46397A37677A7E3E7740FD59F913204D313F8595"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2757
Expires: Fri, 11 Nov 2022 19:31:07 GMT
Date: Fri, 11 Nov 2022 18:45:10 GMT
Connection: keep-alive

                                        
                                            GET /?src=sap1&uid=1503420A35986E63440140BC0214CD18 HTTP/1.1 
Host: sync.bumlam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             31.172.81.159
HTTP/1.1 302 Moved Temporarily
                                            
Server: nginx
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiRmODRiNmFiYS02MWYwLTExZWQtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Thu, 06 Nov 2042 18:45:10 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync.bumlam.com/?src=sap1&s_data=CAIQARi2sLqbBmIgMTUwMzQyMEEzNTk4NkU2MzQ0MDE0MEJDMDIxNENEMTiiARD4S2q6YfAR7YbgACWQwGR8
ETag: f84b6aba-61f0-11ed-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0

                                        
                                            GET /sape/cm?user_id=1503420A35986E63440140BC0214CD18 HTTP/1.1 
Host: nr.bidderstack.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             148.251.217.100
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: nginx
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 44
Connection: keep-alive
Set-Cookie: uid=4436a102-5722-48fe-92cf-3bce2157e46c; domain=.bidderstack.com; path=/; expires=Sat, 11-Nov-2023 18:45:10 GMT;
Access-Control-Allow-Credentials: true


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   44
Md5:    f9d60352c70a2ba15616d1c9421f3844
Sha1:   e9abc8bea7721a4b6a50295850d13c515006a95c
Sha256: 82cb517a8f80c91dfcec543c6d140deb3baaf463ea9e77655475096eba7bc7d9
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "5CBA941E6465F4B0A8767354DF08207BCF4154CACED0560AC8AAB3329EE3F254"
Last-Modified: Fri, 11 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12370
Expires: Fri, 11 Nov 2022 22:11:20 GMT
Date: Fri, 11 Nov 2022 18:45:10 GMT
Connection: keep-alive

                                        
                                            GET /core/match.gif?s=32&id=1503420A35986E63440140BC0214CD18 HTTP/1.1 
Host: mediatoday.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             139.45.228.111
HTTP/2 200 OK
content-type: image/gif
                                            
server: nginx/1.22.0
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 43
p3p: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
cache-control: no-cache, max-age=0, must-revalidate, no-store
pragma: no-cache
expires: Thursday, 01-Jan-1970 00:00:00 GMT
set-cookie: idntfy=VUb4L3iYg20UMsB; expires=Mon, 08-Nov-2032 18:45:11 GMT; domain=mediatoday.ru; path=/core; SameSite=None; Secure
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /metrika/watch.js HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             93.158.134.119
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 57770
date: Fri, 11 Nov 2022 18:45:10 GMT
access-control-allow-origin: *
etag: "63575841-e1aa"
expires: Fri, 11 Nov 2022 19:45:10 GMT
last-modified: Tue, 25 Oct 2022 06:30:09 GMT
cache-control: max-age=3600
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (586)
Size:   57770
Md5:    7b111c54e4ca74c6afb01dccb16a6011
Sha1:   4348abbb3e927a3d20291a71a5e019bbd93923a3
Sha256: 3ad93d272b1bd1296c76105a47276b028046efb94daf54f6b9bef537626a381c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3620
Cache-Control: max-age=165137
Date: Fri, 11 Nov 2022 18:45:10 GMT
Etag: "636e6c23-116"
Expires: Sun, 13 Nov 2022 16:37:27 GMT
Last-Modified: Fri, 11 Nov 2022 15:37:07 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 278

                                        
                                            GET /userbind?src=sape&id=1503420A35986E63440140BC0214CD18 HTTP/1.1 
Host: match.new-programmatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             217.65.2.150
HTTP/1.1 204 No Content
                                            
Server: nginx/1.18.0
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin

                                        
                                            GET /p?ssp=sp&uid=1503420A35986E63440140BC0214CD18 HTTP/1.1 
Host: cs.agency2.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             23.111.107.44
HTTP/1.1 301 Moved Permanently
                                            
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 0
Connection: keep-alive
Server: fasthttp
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.acint.net/match?dp=186&euid=c1de5561-9935-48f8-bf3b-b99a57fa2454
Set-Cookie: uuid=c1de5561-9935-48f8-bf3b-b99a57fa2454; expires=Thu, 02 Nov 2023 18:45:10 GMT; domain=agency2.ru; path=/; secure; SameSite=None
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.107.44

                                        
                                            GET /match/sape?id=1503420A35986E63440140BC0214CD18 HTTP/1.1 
Host: sync.dmp.otm-r.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             88.99.28.61
HTTP/2 204 No Content
                                            
server: nginx/1.17.10
date: Fri, 11 Nov 2022 18:45:10 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2

                                        
                                            GET /?src=sap1&s_data=CAIQARi2sLqbBmIgMTUwMzQyMEEzNTk4NkU2MzQ0MDE0MEJDMDIxNENEMTiiARD4S2q6YfAR7YbgACWQwGR8 HTTP/1.1 
Host: sync.bumlam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiRmODRiNmFiYS02MWYwLTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             31.172.81.159
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                            
Server: nginx
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiRmODRiNmFiYS02MWYwLTExZWQtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Thu, 06 Nov 2042 18:45:10 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0

                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 938
Connection: keep-alive
Expires: Tue, 15 Nov 2022 17:18:16 GMT
ETag: "c0bc5d928b6aa65619428697b8216ec609c124bd"
Last-Modified: Fri, 11 Nov 2022 17:18:17 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 615
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76892ef49ad5b511-OSL

                                        
                                            GET /match?dp=129&euid=ubbm8fbpbc HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDFWNumDW8QAFEGM0UAmC0oceYJRU84AGQQxM9uHqnmCJU; cSyncDp7v2=1668192309; cSyncDp14v3=1668192309; cSyncDp17=1668192309; cSyncDp32=1668192309; cSyncDp45v3=1668192309; cSyncDp53=1668192309; cSyncDp54v2=1668192309; cSyncDp62=1668192309; cSyncDp67v2=1668192309; cSyncDp68=1668192309; cSyncDp71=1668192309; cSyncDp77=1668192309; cSyncDp84=1668192309; cSyncDp85=1668192309; cSyncDp95v3=1668192309; cSyncDp101=1668192309; cSyncDp104v2=1668192309; cSyncDp107=1668192309; cSyncDp110=1668192309; cSyncDp111v2=1668192309; cSyncDp112v2=1668192309; cSyncDp125v2=1668192309; cSyncDp126=1668192309; cSyncDp127=1668192309; cSyncDp129=1668192309; cSyncDp136v2=1668192309; cSyncDp138=1668192309; cSyncDp144=1668192309; cSyncDp146=1668192309; cSyncDp148=1668192309; cSyncDp149v2=1668192309; cSyncDp151=1668192309; cSyncDp178=1668192309; cSyncDp179=1668192309; cSyncDp186=1668192309; cSyncDp221=1668192309
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             193.3.184.226
HTTP/2 200 OK
content-type: image/gif
                                            
server: openresty
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /?src=sape HTTP/1.1 
Host: sync.bumlam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiRmODRiNmFiYS02MWYwLTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             31.172.81.159
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=utf-8
                                            
Server: nginx
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiRmODRiNmFiYS02MWYwLTExZWQtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Thu, 06 Nov 2042 18:45:10 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: https://pix.bumlam.com/sync/sape/sync_ok?guid=f84b6aba-61f0-11ed-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
Access-Control-Allow-Origin: https://acint.net
Access-Control-Allow-Credentials: true

                                        
                                            GET /usersync?dspcsid=8&redirect=1 HTTP/1.1 
Host: ssp.bidvol.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             65.109.65.188
HTTP/2 302 Found
                                            
server: nginx/1.22.0
date: Fri, 11 Nov 2022 18:45:10 GMT
x-request-id: ebb7b403-32fa-433a-8a12-1efe3856a42c
set-cookie: bvuid=ubbm8fbpbc; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None bvuid2=ubbm8fbpbc; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT
vary: Origin
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
surrogate-control: no-store
location: https://www.acint.net/match?dp=129&euid=ubbm8fbpbc
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /match?dp=127&euid=AKAKijkxbHhErr9gfMxd HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDFWNumDW8QAFEGM0UAmC0oceYJRU84AGQQxM9uHqnmCJU; cSyncDp7v2=1668192309; cSyncDp14v3=1668192309; cSyncDp17=1668192309; cSyncDp32=1668192309; cSyncDp45v3=1668192309; cSyncDp53=1668192309; cSyncDp54v2=1668192309; cSyncDp62=1668192309; cSyncDp67v2=1668192309; cSyncDp68=1668192309; cSyncDp71=1668192309; cSyncDp77=1668192309; cSyncDp84=1668192309; cSyncDp85=1668192309; cSyncDp95v3=1668192309; cSyncDp101=1668192309; cSyncDp104v2=1668192309; cSyncDp107=1668192309; cSyncDp110=1668192309; cSyncDp111v2=1668192309; cSyncDp112v2=1668192309; cSyncDp125v2=1668192309; cSyncDp126=1668192309; cSyncDp127=1668192309; cSyncDp129=1668192309; cSyncDp136v2=1668192309; cSyncDp138=1668192309; cSyncDp144=1668192309; cSyncDp146=1668192309; cSyncDp148=1668192309; cSyncDp149v2=1668192309; cSyncDp151=1668192309; cSyncDp178=1668192309; cSyncDp179=1668192309; cSyncDp186=1668192309; cSyncDp221=1668192309
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             193.3.184.226
HTTP/2 200 OK
content-type: image/gif
                                            
server: openresty
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 938
Connection: keep-alive
Expires: Tue, 15 Nov 2022 17:18:16 GMT
ETag: "c0bc5d928b6aa65619428697b8216ec609c124bd"
Last-Modified: Fri, 11 Nov 2022 17:18:17 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 615
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76892ef4cb1bb511-OSL

                                        
                                            GET /match?dp=186&euid=c1de5561-9935-48f8-bf3b-b99a57fa2454 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDFWNumDW8QAFEGM0UAmC0oceYJRU84AGQQxM9uHqnmCJU; cSyncDp7v2=1668192309; cSyncDp14v3=1668192309; cSyncDp17=1668192309; cSyncDp32=1668192309; cSyncDp45v3=1668192309; cSyncDp53=1668192309; cSyncDp54v2=1668192309; cSyncDp62=1668192309; cSyncDp67v2=1668192309; cSyncDp68=1668192309; cSyncDp71=1668192309; cSyncDp77=1668192309; cSyncDp84=1668192309; cSyncDp85=1668192309; cSyncDp95v3=1668192309; cSyncDp101=1668192309; cSyncDp104v2=1668192309; cSyncDp107=1668192309; cSyncDp110=1668192309; cSyncDp111v2=1668192309; cSyncDp112v2=1668192309; cSyncDp125v2=1668192309; cSyncDp126=1668192309; cSyncDp127=1668192309; cSyncDp129=1668192309; cSyncDp136v2=1668192309; cSyncDp138=1668192309; cSyncDp144=1668192309; cSyncDp146=1668192309; cSyncDp148=1668192309; cSyncDp149v2=1668192309; cSyncDp151=1668192309; cSyncDp178=1668192309; cSyncDp179=1668192309; cSyncDp186=1668192309; cSyncDp221=1668192309
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             193.3.184.226
HTTP/2 200 OK
content-type: image/gif
                                            
server: openresty
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            POST /gseccovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 938
Connection: keep-alive
Expires: Tue, 15 Nov 2022 17:18:16 GMT
ETag: "c0bc5d928b6aa65619428697b8216ec609c124bd"
Last-Modified: Fri, 11 Nov 2022 17:18:17 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 615
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76892ef4db3fb511-OSL

                                        
                                            GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://e-pitanie.ru
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             178.154.131.215
HTTP/2 200 OK
content-type: font/woff2
                                            
server: nginx/1.17.9
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 26004
access-control-allow-origin: *
cache-control: public, max-age=31556952
etag: "7f0cdaf91230f9789ca4162aedff612e"
expires: Sun, 12 Nov 2023 00:34:02 GMT
last-modified: Mon, 25 Apr 2022 14:02:39 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-amz-meta-owner: {"role":"admin","login":"4eb0da"}
x-nginx-request-id: 09f2a85638cdbae3
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 26004, version 1.0\012- data
Size:   26004
Md5:    7f0cdaf91230f9789ca4162aedff612e
Sha1:   965de571aa794dab64076c3cc64dc8894b843f23
Sha256: 033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9
                                        
                                            GET /safeframe-bundles/0.83/host.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://e-pitanie.ru
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             178.154.131.215
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
server: nginx/1.17.9
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 8878
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "f80882bf67cf261aa08d636da095149a"
expires: Mon, 11 Nov 2052 01:17:01 GMT
last-modified: Wed, 03 Nov 2021 13:42:58 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (33703), with no line terminators
Size:   8878
Md5:    f80882bf67cf261aa08d636da095149a
Sha1:   3e5bf3fbdb45c9696f9b925d3e71b2e9777c82cd
Sha256: 4794febaad77bf94edba1c860dbcf9612722ad0a18b95831dad359b0bba4bed6
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "750C9A1EA87D165D7D5C7BADBAD91F59CF00C761C48FD2FB67076E8277BD2C1E"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9032
Expires: Fri, 11 Nov 2022 21:15:42 GMT
Date: Fri, 11 Nov 2022 18:45:10 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 15:41:02 GMT
Expires: Tue, 15 Nov 2022 15:41:01 GMT
Etag: "155571d859fad27b3295e1df4f7fe7bfe9a4f15e"
Cache-Control: max-age=333950,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76892ef3b9afb50c-OSL

                                        
                                            GET /partner-code-bundles/679108/93ca76526105423526a6.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://e-pitanie.ru
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             178.154.131.215
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
server: nginx/1.17.9
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 98928
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "a9f781a2bfd5e4b0d9f7b14cdf48e369"
expires: Mon, 11 Nov 2052 01:16:45 GMT
last-modified: Thu, 10 Nov 2022 11:28:29 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65497)
Size:   98928
Md5:    a9f781a2bfd5e4b0d9f7b14cdf48e369
Sha1:   49d19c795f54f89ae372c6cfc3caa5b01e8c1e34
Sha256: 561ddad550389f8b0e632bfe7bda7b633a8c76a8e257387baa75df3b4a35d0ae
                                        
                                            GET /partner-code-bundles/679108/88228e019d33c0acb3aa.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://e-pitanie.ru
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             178.154.131.215
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
server: nginx/1.17.9
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 19195
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "007f8cd5a5184dc52b6010455567fef8"
expires: Mon, 11 Nov 2052 01:16:45 GMT
last-modified: Thu, 10 Nov 2022 11:28:29 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (65494)
Size:   19195
Md5:    007f8cd5a5184dc52b6010455567fef8
Sha1:   d18aa4991daefdaaba61d441648b35f13d8ab7de
Sha256: a5393e228be2594c0079899597ae9d88049fe2d5f05a74899f71f1342ae17f86
                                        
                                            GET /partner-code-bundles/679108/3521127290410543dbe9.js HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://e-pitanie.ru
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             178.154.131.215
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
server: nginx/1.17.9
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 4800
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "3231a38ac227a29892c974619bd955b8"
expires: Mon, 11 Nov 2052 01:16:45 GMT
last-modified: Thu, 10 Nov 2022 11:28:29 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (14337)
Size:   4800
Md5:    3231a38ac227a29892c974619bd955b8
Sha1:   c70a1a9e665d090bdbbe8bba1730a5414ca15469
Sha256: 1e7301a9793d6603c54906773623be2609736c57bf2e38c40a85dea22c1b6fb1
                                        
                                            GET /cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D HTTP/1.1 
Host: exchange.buzzoola.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             116.202.236.171
HTTP/2 301 Moved Permanently
content-type: text/html; charset=utf-8
                                            
server: nginx
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 115
location: https://www.acint.net/match?dp=126&euid=05e7ec8f-b80c-4e85-68c9-e96347381229
serverid: TODO
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   115
Md5:    60da05968475b5bd2ae96af0db58ecfc
Sha1:   1d985183a6ec52cc7c800a054022308c19824275
Sha256: b98c970fff0f827a7c2343b876d38b616dcde7e9362ede5e35b5a6945da77413
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 09 Nov 2022 23:26:43 GMT
Expires: Wed, 16 Nov 2022 23:26:42 GMT
Etag: "bfec565e58ded54f59bd1fc3de842aa1d4fc30a4"
Cache-Control: max-age=448291,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76892ef45bb7b4f4-OSL

                                        
                                            GET /match/sape?id=1503420A35986E63440140BC0214CD18 HTTP/1.1 
Host: dmp.gotechnology.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.132.209.138
HTTP/2 302 Found
                                            
server: nginx
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 0
location: https://dmp.gotechnology.io/match/sape?id=1503420A35986E63440140BC0214CD18&chk=1
set-cookie: chk=1; path=/; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2

                                        
                                            GET /sync/sape/sync_ok?guid=f84b6aba-61f0-11ed-86e0-002590c0647c HTTP/1.1 
Host: pix.bumlam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiRmODRiNmFiYS02MWYwLTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             31.172.81.160
HTTP/1.1 302 Found
Content-Type: image/gif
                                            
Server: nginx
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://f84b6aba-61f0-11ed-86e0-002590c0647c.n1.sync.bumlam.com/?src=sape

                                        
                                            GET /match/sape?id=1503420A35986E63440140BC0214CD18&chk=1 HTTP/1.1 
Host: dmp.gotechnology.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: chk=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.132.209.138
HTTP/2 302 Found
                                            
server: nginx
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 0
location: https://an.yandex.ru/mapuid/gonetdspis/MjI4ZjZkOTc2NmIxNjM5Ng
set-cookie: pid=MjI4ZjZkOTc2NmIxNjM5Ng; expires=Sat, 11 Nov 2023 18:45:10 GMT; domain=.gotechnology.io; path=/; secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2

                                        
                                            GET /match?dp=126&euid=05e7ec8f-b80c-4e85-68c9-e96347381229 HTTP/1.1 
Host: www.acint.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=CkIDFWNumDW8QAFEGM0UAmC0oceYJRU84AGQQxM9uHqnmCJU; cSyncDp7v2=1668192309; cSyncDp14v3=1668192309; cSyncDp17=1668192309; cSyncDp32=1668192309; cSyncDp45v3=1668192309; cSyncDp53=1668192309; cSyncDp54v2=1668192309; cSyncDp62=1668192309; cSyncDp67v2=1668192309; cSyncDp68=1668192309; cSyncDp71=1668192309; cSyncDp77=1668192309; cSyncDp84=1668192309; cSyncDp85=1668192309; cSyncDp95v3=1668192309; cSyncDp101=1668192309; cSyncDp104v2=1668192309; cSyncDp107=1668192309; cSyncDp110=1668192309; cSyncDp111v2=1668192309; cSyncDp112v2=1668192309; cSyncDp125v2=1668192309; cSyncDp126=1668192309; cSyncDp127=1668192309; cSyncDp129=1668192309; cSyncDp136v2=1668192309; cSyncDp138=1668192309; cSyncDp144=1668192309; cSyncDp146=1668192309; cSyncDp148=1668192309; cSyncDp149v2=1668192309; cSyncDp151=1668192309; cSyncDp178=1668192309; cSyncDp179=1668192309; cSyncDp186=1668192309; cSyncDp221=1668192309
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             193.3.184.226
HTTP/2 200 OK
content-type: image/gif
                                            
server: openresty
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /metrika/advert.gif HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             93.158.134.119
HTTP/2 200 OK
content-type: image/gif
                                            
content-length: 43
date: Fri, 11 Nov 2022 18:45:10 GMT
access-control-allow-origin: *
etag: "63575841-2b"
expires: Fri, 11 Nov 2022 19:45:10 GMT
accept-ranges: bytes
last-modified: Tue, 25 Oct 2022 06:30:09 GMT
cache-control: max-age=3600
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /watch/23414332/1?wmode=7&page-url=https%3A%2F%2Fe-pitanie.ru%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A1338%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A1415259113788%3Ahid%3A243059204%3Az%3A0%3Ai%3A20221111184510%3Aet%3A1668192310%3Ac%3A1%3Arn%3A616859490%3Arqn%3A1%3Au%3A1668192310340789903%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A3%2C241%2C76%2C0%2C367%2C0%2C%2C557%2C65%2C%2C%2C%2C1282%3Ans%3A1668192307990%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668192310%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%20%D0%BE%20%D0%B7%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%D1%8C%D0%B5%2C%20%D0%B2%D0%BA%D1%83%D1%81%D0%BD%D0%BE%D0%BC%20%D0%B8%20%D0%B7%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%D0%BE%D0%BC%20%D0%BF%D0%B8%D1%82%D0%B0%D0%BD%D0%B8%D0%B8%20-%20E-Pitanie.ru&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://e-pitanie.ru
Referer: https://e-pitanie.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             93.158.134.119
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
content-length: 407
date: Fri, 11 Nov 2022 18:45:10 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://e-pitanie.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 11-Nov-2022 18:45:10 GMT
last-modified: Fri, 11-Nov-2022 18:45:10 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Size:   407
Md5:    c7a014fe054a58133bc939c4238a667f
Sha1:   d657a90e003b0fba2b4359c142bba31cbd7ea512
Sha256: 4d6a5c6526b44ab81137fc0a7f56d9eb753c3e524afd0cc1e7c6d96664e16316
                                        
                                            GET /meta/746018?target-ref=https%3A%2F%2Fe-pitanie.ru%2F&charset=utf-8&pcode-test-ids=657519%2C0%2C48%3B670496%2C0%2C34%3B675076%2C0%2C72%3B679029%2C0%2C60%3B677689%2C0%2C45%3B673744%2C0%2C92&pcode-flags-map=eJytWGtv2zYU%2FSuDPhednpTUb5RE2UQkUiMpO05REG7jZQaSdGjTx1b0v%2B9Skm1JSelmGxAgTqBzeHQf5176m0MXjAuiayolKXSBFdYNFriWuuRCr2hBuKZM57zOuPPq9Tfn8%2Fb208555ey%2B%2Fum8cB52Hx%2FoNfwZpW4YRc73Ny%2BcFZZakN9aIpVe1bjRpeC1xoWc4JVoyZgAebGfuB0BYTiryOxw%2BFBSRhUBffmFXHKl11Qteas0Bu1K2tShKEJJ8Gzy%2F4MZV5VuBC%2FaXMnHxzyPmgDlM%2FMyIjF5wYXOBcGKroguiCK5opzpQxGQgmJd0oqcSVUUh8g7cpLLRjOy1vICBEE%2BpIITQCe9PM8TxWnHU3MQBOIqnJFKK64HYvurHeHm6VaSkwz4scTIIsQwQWLWJzEm3sCSYcaIsNOgIAjjjqbgmvGeaEWEojmuNF3prFWKMzsJtEGczEkACyQX5wTEgZeGPZbKvhrhfZTpRIUX57CJmz5xLqlITZg6k0pAe32ZyULX%2BFITLKRuiMgBO4H67hQYBj46hV71qomQdBYoFCcuiqbYNHb7eLeMVhwXRHTpwvWkcB4%2BfNqNYKGfBGnvNKZmpOzyO8PMi20EgsqQhECpZ5KI1Swlu%2Fvt29vdBBkgP%2B1VQkuA0zK9JHSxVJop%2B5FhFKR9m20wK8ilFq0ueI0pszqxG%2FsBOp6XCX4BYuEsvRC0sCK9OErQkwdqqCclaGaF%2B56L%2Buq7IszXZQvWt6YF%2BCit8YJYsaEXDu7fYQ%2Flm3FhkipwQVv5y08ybLDR3QsG%2F13jjdXCozCIhzgXZQOjSzacQWEoWhOws1nxuu4UG7pB%2F85NzgsCZgNQZvX1KIyAZiilkkOUiandw3nnbA%2BOjGP%2FMZyWxrPWpomgOv8Nw0HAClftJFuB%2BzS6giZnujazY4UFxfNOnxwaue4Q5UZQLqja6GwDLk3WDRf2gKEYDb13qIuCCphdOpfCCky9OBlVJJU6x0LAdMd5Pve0mUtEaRB53gTbVbE8rh0NLgrKFnaSMAp75TlvmYJSVpuG6MCuOkziaJSeWuQQJ0kzWkHU7MelMfohUsOozysYI2dOP3DUbaVoP%2Fc0GGxJYUOk5iVKnNu7OU38OB7pGEj6kQzTHYqtqfAmgy3IdIwSvKrmRjob9q4Pg6KjXAic%2BfZnoUTd07Na0quJ3sjzXdvzT3S%2BF%2F0AcSiOJenGjyAFkbBPWfV5kY96tFlYBCnBc5a64gua23FJMBgsBK2kojYdJAg7zL1GkMxu8Qg82vcmrQQzUEBdM%2BimJYF8GNuWsCTC0JDSvoB5qRf2ekYg3DTmVRbQGnaw76XRRMmSqu41RmQQzAvF7SqC2Pcna3Le1MMue9x1pd0oUJAG08tH3uT%2FmWN2EyhIiaGjnnkJCCMXoUmYZI2F0nC%2FaokhP5ekCCHUx7nCVxvdOX03q8aob87vu4d3f9TbDzf7%2B6Ha796%2F3d%2Fu5Lvt7f7%2Bxnnlf5%2BsupE7LDVjOeYqkFWmqysYv%2BMDXjt32%2F3tyw%2BfQNtf2%2Fvr3Vf4%2FOv%2Bbnuz%2Bzj51832rvvP9d%2B7%2B%2F7x7ef9w%2Fv%2B493L4x9vnlbT7btLYfbuafQJ%2BL4wDkgZzDcKO1x1JvKxFw%2BOY9bEwcIqzBbtmWUGwUKR9Ct8bq5%2FnA09ikszAWgJ92vSJYLYmzVOUpQeFZSCAk210T2edq32DHx28cgIHyFQGgwdPUI897sA2MtD95SOQ92COxmfN7%2FNu8%2F94fGVwg3T083A6IHdGWZw1YkCJVKB52pe6isg7jTCTDGTuXPHKXuJKzmjh0X5RA%2BzfIruLqHm24vhq4wzWo9kI%2FMy%2B%2FZPOVicun46tUK4D4sfDH3ny%2F76ZvcwZYhRYhi%2B%2FwPGljj7&pcode-icookie=w9NfmTL8fUdhGq6lJd4t0%2FUfe4g%2FeRyCNmySXtpob6jMH%2FdY3pCIXPTp2Ejqe5GnJZedO8wviWwvBUkfFOjnmDid1NM%3D&imp-id=1&enable-flat-highlight=1&comboblock-unencoded-vast=1&test-tag=107752139522050&ad-session-id=3745931668192310076&target-id=6659203&tga-with-creatives=1&top-ancestor=https%3A%2F%2Fe-pitanie.ru&top-ancestor-undetermined=0&pcode-version=679108&pcodever=679108&flash-ver=0&available-width=1248&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A939%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1248%2C%22h%22%3A140%2C%22width%22%3A1248%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A20%2C%22top%22%3A10%2C%22fontFamily%22%3A%22ys%22%2C%22ad_no%22%3A0%2C%22darkTheme%22%3Afalse%2C%22req_no%22%3A0%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjIsImlzX2FzeW5jIjoxLCJvbGRfZ3JhYl9zaXplIjo2MTd9ChqkIpHkOOpBCKyzhyr9XYGXpHH0uUL3daH69y_496ktpSV5I9q3NXeN2rWumzxNZtfRrUdxYvvSjbSuo446wP6GfSKoF2wLYxAzE_C2RvHTab3yJ-vGRMSMGTMGAjEmhQesJ_XQXYLqcasn8sQe1yX0uJ7ExfEC-upJPKGL78o93nLyq-ebEW5ONM93CZZtnucvCkMFrAGsWJFGcUKnIkZK7YHgiRcR6TInXyQlLv5QOYwsSMlyYCyAwOO7sD30YZS7dAaL_DAWeAIXB_yKVI8iuyHVVw_KoHFBXTrlC5e_SPIWxdLn8b70Moe3fOIKEEIYC0NBxPcEi6hw9vOEnrSerNJFFwwrruysAHzZwm1uL9idl1hYs3UdgGiLjvAUiuvyBIeJf0R4Q4Rh5YTP9EpdUJxdoA-RXfxe2D_9_EWewMWpHoi7A8zdlbtEkC7PojF4AD1BxZ-6_1V41YO2A4MGuLMH4sKytJ2I8sODdpIPts9-vJOx2Zq5NQmlC3T2mHkEs5aZQJhl5gT2wFy8erZ360_PZtUMG9qR9rfZy8SX0cWO3X5a_qQprGW04mnT2d86ASiLTvjlpIXLExbsW4SChbkRgTkDA6a6cL7UoPQX5bCybTfbD0siF_bZAnqQries8ETZnucOpwtrprmrygZjXVkPCupMMVjksLp1j69WLNqZdFMs4ktAvNye0wuiZbmXchYwd--Z5jY-LCDBh-7P4Aruoc9MBKXBhbtUHjXasjx7Eb45gkwXKDPrbQjCJZSehhrB4N4sI30_iT6AoSDYUfMyA7MD_1XlbD-9pSNRaLSUOpIkJaPUKWKFNqFkUnbW0TbVOk2iSGuUahJwjWSJklwVqxVxGBkreRgpkkgBrtECq5GWUkfbu1GEZESVXJsqleAaSUJNUim0IWmNYhW8NEoNsSYlTQxhlFTy9OwZlLFGrU3qcqSgxVFi0KZEIbGiqlWJcmlOj7B64V16tGSxUr0oaBwWNUlEbNAm8BVGSh1ZDM-hCH6SkDVvDzFRFeAHV-9OA-DAozTzpJSLVZ2_0btPhfXdKj4XRvfi5HMdbZrhODixNlMz-y492nhY1CnVaUQ5afuVOjUg09Ger5kfJLWxBSZDrEg01QFpUBCpE4M6VCrAHJBW9CEFoBJyRY_Z5iJJlQZyklhLpkoiKw81EoSIjNZ1oZqbXWCn8-HFLG0ummpn7Ebg0Vg2AmHXxdpUSPDSfIEKcrj0fAZvh5gGoWU7gL1YhLPdE66si8GFzdgVqZCYMWR6ZdMYQ4eKEDxTC27incjO4JUR0egtK0M_NqIxFFsR0VBZVsYuWeYOOSOX1ZsxFNqjYHBPLPuLwcTlYPEuaMeLoWkdESJzX6z_O0714laveke4Uzlhe5nZS2bwRlRU5lQOXFnWcTHykMbnlk8kZ-xmCPSm_u-VucWTk7arxOAlEVJRcU7vMTNw_KbA5B8HDN4MPCTmcIR9T12MbPdDbA5OUHbdLZn13N5_4nZbxmVjbGLRI0FsrhIYlnXbCrwDLe5ANK4AYxczFQvUNeN7asjVWdUjpqE2R8IunS2VNp-RfZHoEZtSBhRLaRfb4vbrbcjxpBxjkaF4gNDk-UEpi4pyKJabrRuWkzLndrkLEktLETJwQmdpwwFISoHfeoY7EwO-Db0OvOww0xJrs1lMe7O2gMi2qtX2tYKCdCAZk9c4VBEZiq1mZEOhVlOEoC8HiR4l7KAlut66KQd1bcNRZ561nMjBAHMIEkekRkqI-B2XBmozPfFOPQRTkYA-g1eXdDgb9G087An6OO97lfc_swzbOOc2x6yBAg7IjNpIV4eUdxRx6u2hX-unMRs642SBerb5fVjOB_zHeNmjr39024hx8T7bH6jL4Av-4Y9zq_qs62e4dro_XLvP5GXDn7XD8NIe3N1e-LlfcWeBUd7Qzptrfi7HkhkQf3HrAzu_kH6wFrfvV1gH_ItW8qfRIc7ChD142el4qJEPFZMvFhx7nN1dnHdqeJkI43sLhz3sF2iQb1And_r9_ZVvz0On--uu7nrDvVvSOPRBYg2dLv4O0sGWno5LsBsGdNZ5cVkYC_QWzBuWCW1_dht4vnAgffmnlDPpHii_s818oo29GR4py_aWvZKePByC4VUnbYjOGvrnK160MJcg8oX39At_MAY_xPKBtKAEwxbvg5SeyPb_-OtFivqoXdmSHcZhDtolcXqjH5sgX3Ndl8IhsGgrF9d-xbiFMOYHq88756ayFpgnpavWL5YNTLmxOA6jnPTDKNlcpyXWRDVn3VSliMm1iZNZN4gaENEgoakDsjoBsyoVqYJYaVATU2hjJUmFH6o0qcKwXBFZqiKrEzYPk4KEWEMRpbG2kjz3VPJUkZCGm3LACJWaRBFqQ9KYKDXm-9KUTprzecaE_g-esS9LSFL2Q4rCv-PsZBL26D2HmrFDZEafEitIQlWFR74EmXUzB7FKW-FHNTJSpmSaOGq2Og6WCGgBnkI-PKXsCOkoKGl0tBSUFpScwYx9CyWxRpOqiDoVALNOnNQ2-PrjwP_NYK0y_n-MXX4i_Ws5eFoWl7TpwCj5uDDO0zCVbPg2m36SsTwphmcq9XkVx8FWT0rfnwpBKVb0-sTzP2QmXPv4LDFaXCwPJ5a-Wq6nxrIV_bw5fWf5J9XgaWbyP5zne9ah-_Uk-MLcst9pw_B8JwZbakXceWYSztYB1Kdp_IMRXLUedIwUn9w7sFPzeuFafIbZopkachVlrqTc3790HtaF89h-wsIcbgnvYXOfG6dPeEWLXZL2Q-MiZ2PPJD5L4BI4qUlScsWwJLNmS5jf14Xdo1ySARJSGr51z49gwg8GvcOZpCA3Tf3-f1P3XMxV9onPv9ShcvlzqLQdMqDbN288zT1j8pPsFFeyIqrJUI8EBZIhPCVRaAgNoJGFqhBeAvG5kNkqNcYmQsjb28xPg9h3B3va05aQHTDH0DhURKMrsibprg-sp-HpwaC46MVPDqwVP3VwT9oaUkuAGHe5PWR2N3f8Mnuva-qemZ7XLXt1QscZmNtTkGwhwx346r1c-dRDO5eS1s5M2oGMds0fv5W1peOh07c_1i7OTN5Cww7fHJXbqr6iprhYy0PHVAVEp5qcXbjPzvZjM1-7E9Al9SFWdiWWJczxS4ZatOJJSeAzKxNTI0A-mRjFpOYh9JTMetaQH3YFImC0xOShMl1iJxUckjAiU4WxIo4q2IAGGwg39roh7l3Li2w7SB7IHgz6UjC2vfgSkzrms-juuH8l3is_m6wvzi1r_mR3FxSOgrxWborqiVF-n7tlvO-2iDjS-2RMzDuYI4MtZFJwoaZCPjUN5CSLIeyCR33YfssoPxeJ2jXo_igdNFmmuFcm0WTJj2e8A8Pr6u4n_o3yo_t28vgmW8SGNxbcx2QnHBG8lB_IH6uuBJhHqD6OycwitWdWejWEBPVj5w6AvPgfRQa5FO8NAXl-ZjqCsDrHl6qbxfISILk_ZX3nEz5ZhbdqJSaTlt_2O-aY4LVIy-NwEntyfwcAweun_DYTAxdB-tqCuLc4BSVKiV8rmI4s6GHAsJ7i2LfaO-W3oquJcgz50Rl8-FLIYxlqnY_J1sfMydLUyMUDQHGRQQg9HUO9ifVPT9Qh1nfqKeivvR892cSoHmwrA7GOMN9yuhdh-wUsWgCSvu_G8v8MBMUeEXYk8ktf8ftcm5r70RTcvgnKIcuzL_oR7VtOrN845c1hjW23XkzYNtXUNbIkh3mTO7B_MtHF93C6yju_3xbvcys7QZw2ecCasGi2xrDt-noLnvAngNTyiNHfYa-WsYj_kzpGcRZql184jeAeuX0VlFPR-bdYf6wcUlaTsXDLMeE8GmyJ6XuUc5hJ6ZuG-T52lCpJYkMUwlskYxQ88CFGeIixWRtVBR3zEzfQrXQff1r6ICGtj3mt9OXm-Al86-0tGb0ff7_m02Dc7wfDqT_5Faqc2bjdeYjB637eLqnDtZzwP_R5_b9PbQ2h9TTzVRHQfTU6JwE76tDiYeMXkBhFgw3nz90tfczO1SVPsD37PvtAy3kHklVjguPCrCUwSLN6ebL2bt4K4xaDs1zR96j7wLsFgNX3HVp5zyWt-i2uSMlDmJaLmVeIiTl2Eu-WpePm4faxxJy8jmxuORSRM4DQfXEQWJr6kA4tvcWP4B1G5wgQFeWbz_laDtT_U7Gc5BwMf2H7rfBnDxn3J0ZPdF_AvyoJ1i93Piso39l_w1yOga09E01hBjsYNlP6QSJDxO78Z8IXZoaWXuqU4OT8wMnB_vXJWan0umFvtxweXHymFRViBAgQIKNYAQlQRAMARBRgrqHgWfRWqE-8oRPmduNsrbYhYvU5iuLrsZHveB74E1ZhuaCOGqYobSRWn8HkUPWv_qVtG-Dmhvw9M15WqRtJazrNdrz1OUQrL0mxWrZ0oLct0MrJR9KLG_frXZwDJxTkKPlT2zEXXDz6rnNeQ8HNDnHuHAcy-2pvK13eOXvZhmuXC9aLyCSQ3j70RAVo9tzm73fkmy3qMK4LZ_JfTtZm8ozXP9DClw6ZpIs2s3IuBMLi_xO0hWn7rO2kFrkX5mR3ZPO1IVeIIyHc_72cf6KOoGaIBee1GPtl3kJMVAbX0AObig8VPDYrL--bCMqXJr75LrOGMzNeDDB8jsTMbV0_l21_TolJ5zVnIa2Yl-2Bt7aS86BG75_DlnLNOka0FxCuI5fPZ3PNmVInyEb0FYAOWReEL-cK8ikmbDHP60OFLUCNV37RseFGlBnNkZES7zTg5OPaCc62qrMF2VpbWRQt9HYTXRasvwlJtaH0WmzHLCKsfbYVj_aIYzmFYf9ErMdrVjRyNv1Qae359WTWbWedY_9T9o3lKKi7MGS5yPhFmmeWkdzRKMo99kmahi35PnBtYz1DG4rqaUZQ3ixxy8uPxmpXAfYk9c0HV5Z8mSUwP4kf90Uot53IIoX_SViNXFNEdQxYwLfwjy3IlYW5BMddfPp2ufkOZvane8PafnXWzzSfy0XWs9rK8Cw6WWw9dPYLZtLcjl3WSl6r9ro9MYK7XPifJL8vK16R&uniformat=true&callback=Ya%5B7238484806945%5D HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://e-pitanie.ru
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             77.88.21.90
HTTP/2 200 OK
content-type: application/json
                                            
uniformat: true
uniformat-product-type: Direct
content-encoding: gzip
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
access-control-allow-origin: https://e-pitanie.ru
x-xss-protection: 1; mode=block
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
x-yandex-req-id: 1668192310592297-1608994730195301504600109-production-app-host-sas-pcode-202
last-modified: Fri, 11 Nov 2022 18:45:10 GMT
date: Fri, 11 Nov 2022 18:45:10 GMT
set-cookie: yabs-vdrf=A0; domain=an.yandex.ru; path=/; expires=Fri, 18-Nov-2022 18:45:10 GMT i=O9Ew2KJq+uEENKEZNh9+BvMowHXqMQbww8Xje3+674LqzVS6xY7yArxxZMyTeEsjBMK30p+RbkEgC5FMWBa3O2PmbnY=; Expires=Sun, 10-Nov-2024 18:45:10 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
pragma: no-cache
access-control-allow-credentials: true
timing-allow-origin: *
ssr: true
strict-transport-security: max-age=31536000
expires: Fri, 11 Nov 2022 18:45:10 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   23323
Md5:    6d588a7c376a2dee6edb6b062b1d23b2
Sha1:   695053ffab306e9a8c364645930f823d65df2628
Sha256: 62568f9ddfd9874a022615230cd3dc0bf03f4b58bb3524dd82b0a976695e4c82
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "50058278F326F41BFF8710B9AD2E3B5F9F1943B80ABC525100178246740F9AD5"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5792
Expires: Fri, 11 Nov 2022 20:21:42 GMT
Date: Fri, 11 Nov 2022 18:45:10 GMT
Connection: keep-alive

                                        
                                            GET /s3/games-static/favicons/icon-192.png HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             178.154.131.215
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx/1.17.9
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 24134
access-control-allow-origin: *
cache-control: public, max-age=216013
etag: "7819c957eaa80af5bf14f760d49b64a7"
expires: Mon, 14 Nov 2022 06:41:59 GMT
last-modified: Thu, 14 Apr 2022 12:22:42 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-nginx-request-id: d3398ecc3f1f715d
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Size:   24134
Md5:    7819c957eaa80af5bf14f760d49b64a7
Sha1:   93b670523acd14f884c3a538d59d408da0888a6c
Sha256: ca78c114bba40b141a59c55a9d3fb6db7672bc3effd4337f2b1ce512b4d06c9e
                                        
                                            POST /gsgccr3dvtlsca2020 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 1414
Connection: keep-alive
Expires: Tue, 15 Nov 2022 16:20:26 GMT
ETag: "d7413ee8821e5fb0c1ab5f036598d5e246b6d5bc"
Last-Modified: Fri, 11 Nov 2022 16:20:27 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3241
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76892ef77f62b511-OSL


--- Additional Info ---
Magic:  data
Size:   1414
Md5:    ce0cddb8f3d5abe32adc0478da463e2e
Sha1:   d7413ee8821e5fb0c1ab5f036598d5e246b6d5bc
Sha256: 7c995bdd97e8dc7af5a3eb48920bfdbcdbf3242f8a9d00c5a489285666b804a3
                                        
                                            GET /safeframe-bundles/0.83/1-1-0/render.html HTTP/1.1 
Host: yastatic.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://e-pitanie.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             178.154.131.215
HTTP/2 200 OK
content-type: text/html
                                            
server: nginx/1.17.9
date: Fri, 11 Nov 2022 18:45:10 GMT
content-length: 6262
access-control-allow-origin: *
cache-control: public, max-age=946708560
content-encoding: br
etag: "eb77de48712912aadc9aa8171ac75ede"
expires: Mon, 11 Nov 2052 01:16:11 GMT
last-modified: Wed, 03 Nov 2021 13:42:58 GMT
nel: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
report-to: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
strict-transport-security: max-age=43200000; includeSubDomains;
timing-allow-origin: *
vary: Accept-Encoding
x-robots-tag: noindex, noarchive, nofollow
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (23297)
Size:   6262
Md5:    eb77de48712912aadc9aa8171ac75ede
Sha1:   f375e4ed6b585c4e30b2d56f4f41c3beed909349
Sha256: 437ee0c22002ccd77158d7a7018113f26384324158ab3cef65373007f29b1bcf
                                        
                                            POST /gsalphasha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 1423
Connection: keep-alive
Expires: Tue, 15 Nov 2022 16:25:51 GMT
ETag: "5108e4c6d38989881159b05569b6382eef59522f"
Last-Modified: Fri, 11 Nov 2022 16:25:52 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 358
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76892ef79fafb518-OSL


--- Additional Info ---
Magic:  data
Size:   1423
Md5:    0a03aa32951e908981939ce8876233ff
Sha1:   5108e4c6d38989881159b05569b6382eef59522f
Sha256: 6ff5d72b45a8dad393feae29feee52ee6b3777e5ebf9798286858679184a7ead
                                        
                                            GET /?src=sape HTTP/1.1 
Host: f84b6aba-61f0-11ed-86e0-002590c0647c.n1.sync.bumlam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiRmODRiNmFiYS02MWYwLTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             82.146.53.26
HTTP/1.1 302 Moved Temporarily
                                            
Server: nginx/1.22.1
Date: Fri, 11 Nov 2022 18:45:10 GMT
Content-Length: 0
Connection: close
Location: https://pix.bumlam.com/sync/sape/done

                                        
                                            POST /gsgccr3dvtlsca2020 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:45:11 GMT
Content-Length: 1414
Connection: keep-alive
Expires: Tue, 15 Nov 2022 16:20:26 GMT
ETag: "d7413ee8821e5fb0c1ab5f036598d5e246b6d5bc"
Last-Modified: Fri, 11 Nov 2022 16:20:27 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3242
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76892ef7cfecb511-OSL


--- Additional Info ---
Magic:  data
Size:   1414
Md5:    ce0cddb8f3d5abe32adc0478da463e2e
Sha1:   d7413ee8821e5fb0c1ab5f036598d5e246b6d5bc
Sha256: 7c995bdd97e8dc7af5a3eb48920bfdbcdbf3242f8a9d00c5a489285666b804a3
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:45:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691 HTTP/1.1 
Host: ad.adriver.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             195.209.108.49
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Date: Fri, 11 Nov 2022 18:45:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-control: no-cache, max-age=0, must-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
Set-Cookie: cid=-6114754636; expires=Sun, 10 Nov 2024 18:45:11 GMT; path=/; domain=.adriver.ru; SameSite=None; Secure
Location: /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-6114754636
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true

                                        
                                            GET /user-sync?zone=169736&t=image&r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D221%26euid%3D%7BUID%7D HTTP/1.1 
Host: sync.adkernel.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             77.245.57.72
HTTP/1.1 200 OK
                                            
Server: nginx
Date: Fri, 11 Nov 2022 18:45:11 GMT
Content-Length: 0
Connection: close

                                        
                                            GET /cookie_matching_ssp/Sape-dsp/1503420A35986E63440140BC0214CD18 HTTP/1.1 
Host: fcgi4.gnezdo.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             93.95.102.105
HTTP/2 204 No Content
                                            
server: nginx
date: Fri, 11 Nov 2022 18:45:11 GMT
set-cookie: uid=XV9maWNumDcnJ4G6pnrHAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=gnezdo.ru; path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
X-Firefox-Spdy: h2

                                        
                                            POST /event_confirmation HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 297
Origin: https://e-pitanie.ru
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             77.88.21.90
HTTP/2 200 OK
                                            
timing-allow-origin: *
date: Fri, 11 Nov 2022 18:45:10 GMT
access-control-allow-origin: https://e-pitanie.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 11 Nov 2022 18:45:10 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Fri, 11 Nov 2022 18:45:10 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.124.249.24
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: Sucuri/Cloudproxy
Date: Fri, 11 Nov 2022 18:45:11 GMT
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 11 Nov 2022 17:01:16 GMT
Expires: Sat, 12 Nov 2022 17:01:16 GMT
ETag: "2ba50fc30051de77c9ecc32c1f7653e7e272da83"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1778
Md5:    181ac790edf990cecd9480cb21888ea7
Sha1:   2ba50fc30051de77c9ecc32c1f7653e7e272da83
Sha256: e07ab0b553fa47a3e66a1ac61759c6dfdd21758823e3a8ce50ee6655342f60ad
                                        
                                            GET /cgi-bin/sync.cgi?dsp_id=153&external_id=1503420A35986E63440140BC0214CD18 HTTP/1.1 
Host: ssp.adriver.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             195.209.111.4
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: nginx
Date: Fri, 11 Nov 2022 18:45:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pixel?google_nid=agentstvo_sape_limited&google_hm=FQNCCjWYbmNEAUC8AhTNGA HTTP/1.1 
Host: cm.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.130
HTTP/2 200 OK
content-type: image/png
                                            
date: Fri, 11 Nov 2022 18:45:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: HTTP server (unknown)
content-length: 170
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Size:   170
Md5:    e7673c60af825466f83d46da72ca1635
Sha1:   fc0fcbee0835709ba2d28798a612bfd687903fb5
Sha256: 0b8a20373c6dd04e091902226d922b3688143a8938afb9d283d889de7b55ceb5
                                        
                                            GET /rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect HTTP/1.1 
Host: redirect.frontend.weborama.fr
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             35.190.24.218
HTTP/2 302 Found
                                            
server: Weborama Collect Frontend
date: Fri, 11 Nov 2022 18:45:11 GMT
content-length: 0
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=3306537490
access-control-allow-origin: *
p3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM"
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: Tue, 03 Jul 2001 06:00:00 GMT
last-modified: Fri, 11 Nov 2022 18:45:11 GMT
set-cookie: AFFICHE_W=aHDLqujrNtNo68; expires=Sat, 09 Dec 2023 18:45:11 GMT; domain=.weborama.fr; path=/; secure; SameSite=None
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            GET /watch/746018/1?wmode=7&page-url=https%3A%2F%2Fe-pitanie.ru%2F&nohit=1&charset=utf-8&cnt-class=1&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A2%3Adp%3A0%3Als%3A690853702806%3Ahid%3A243059204%3Az%3A0%3Ai%3A20221111184510%3Aet%3A1668192311%3Ac%3A1%3Arn%3A240329740%3Au%3A1668192310340789903%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1668192307990%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668192311%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%20%D0%BE%20%D0%B7%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%D1%8C%D0%B5%2C%20%D0%B2%D0%BA%D1%83%D1%81%D0%BD%D0%BE%D0%BC%20%D0%B8%20%D0%B7%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%D0%BE%D0%BC%20%D0%BF%D0%B8%D1%82%D0%B0%D0%BD%D0%B8%D0%B8%20-%20E-Pitanie.ru&t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29aw%281%29ecs%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1 
Host: mc.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://e-pitanie.ru
Referer: https://e-pitanie.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             93.158.134.119
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
content-length: 371
date: Fri, 11 Nov 2022 18:45:11 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://e-pitanie.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 11-Nov-2022 18:45:11 GMT
last-modified: Fri, 11-Nov-2022 18:45:11 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (371), with no line terminators
Size:   371
Md5:    281f50c4471e7a10571f8f34769261a0
Sha1:   bda1af1f8615bac40c10b12e536575dc3ffe62cd
Sha256: aa46624b43eabef5df79f373be7283677c218d42e8eca170928626d7596df44c
                                        
                                            GET /sync/sape/done HTTP/1.1 
Host: pix.bumlam.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiRmODRiNmFiYS02MWYwLTExZWQtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             31.172.81.160
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: nginx
Date: Fri, 11 Nov 2022 18:45:11 GMT
Content-Length: 43
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /cm.gif?p=48&id=1503420A35986E63440140BC0214CD18 HTTP/1.1 
Host: ad.mail.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             95.163.41.56
HTTP/2 200 OK
content-type: image/gif
                                            
server: nginx
date: Fri, 11 Nov 2022 18:45:11 GMT
content-length: 43
set-cookie: VID=1x77go1Yoe2D002Am402m0ID:::0-0-0-888f0f7:CAASEGAYh8oMPws39e__AcfDvGoaYBZa4piRNcMMWDoNP4zY_lh3paJruthI3sdTc1Rg628NuJ_1azjpeYCg_snN-FNJddrbm3zanOQI3Qag9MY5_-mEP5CK3a-Gj8gZ8zO8gAvwNOf-BqcOFy5bCKSSN2Y6yw; path=/; expires=Sun, 12-Nov-23 18:45:11 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
expires: Sat, 12 Nov 2022 00:45:11 GMT
cache-control: max-age=21600
last-modified: Fri, 11 Nov 2022 18:45:11 GMT
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: require-corp
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:45:11 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 10 Nov 2022 16:18:22 GMT
Expires: Thu, 17 Nov 2022 16:18:21 GMT
Etag: "8b9a3c4abed6daae0ef8d22bf730a86d2a3feee8"
Cache-Control: max-age=603764,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 845
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76892ef8a9b1b4eb-OSL

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "69060DDC346362FB6471DBB28DB5C05BF909E0F29D0C379808F514840171A9BB"
Last-Modified: Wed, 09 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12714
Expires: Fri, 11 Nov 2022 22:17:05 GMT
Date: Fri, 11 Nov 2022 18:45:11 GMT
Connection: keep-alive

                                        
                                            GET /rtbcount/1P1LEXEQ0Ti100000000U9nJDDlY6x-5eL30KF-pIdPRpeyOIxCPUSaCGE094mdjCBgS6QkKnCsGoWWKpzJ_d18F4Yy5yMhBWKGh8uZi1F61W8bX9cEj58Iza56D7S9QoHZ1167jPPo_cvVXA9X_bf4PA7AL4QJrBYE330F3NyPPGF6vJ22HfKmtWEorJ550zbcc_q3mYac0SyNA0FtF30nwuk9UPczP6VuoWOnePMO5ahtCYa1oAZD8yrncDf2rp4mC2Y1RMJOosnZN9ZDQ_Z4-oMpcKdDoZeSIsrMmohjWyYUpWnC_nD4iayyqW5ahMFwQR61XtC72Ue25yIOBnFqVx1-o21nKufxszuhzMnQGBnQmyfvatSF51PQ-mDhGqC1oazNCPitM0tr_sRwoWXpUmTR0CeFjok7W1MpTUpPlQFrxPd_PIZQOCGVOF4wmCJzYuorBShRApYg8I0pEI35_oGQpy2USDP5zrQagazu_R-rdiREPcLiQ6bXiO6VQmSvpWbty0NlxwuPTprTS_cByWvq701p2Y8W0 HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://e-pitanie.ru
Connection: keep-alive
Referer: https://e-pitanie.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             77.88.21.90
HTTP/2 200 OK
content-type: image/gif
                                            
timing-allow-origin: *
date: Fri, 11 Nov 2022 18:45:11 GMT
access-control-allow-origin: https://e-pitanie.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 11 Nov 2022 18:45:11 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Fri, 11 Nov 2022 18:45:11 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

                                        
                                            GET /mapuid/sapeis/1503420A35986E63440140BC0214CD18?redir-setuniq=1 HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             77.88.21.90
HTTP/2 200 OK
content-type: image/gif; charset=utf-8
                                            
timing-allow-origin: *
date: Fri, 11 Nov 2022 18:45:10 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 11 Nov 2022 18:45:10 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Fri, 11 Nov 2022 18:45:10 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   50
Md5:    bef53a5c76b7ad469692178eeaeb08d8
Sha1:   aaae1c11fa0b5a086770957c8857d3937ed653e9
Sha256: be24bb564cc16e1fe9113f63db905a1b7a3a653c6642f0c27d5e823729a99ee3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:45:11 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 11 Nov 2022 16:09:16 GMT
Expires: Fri, 18 Nov 2022 16:09:15 GMT
Etag: "4838a0b173b5397a817a6a431615ff9c779c2091"
Cache-Control: max-age=594843,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76892ef899a6b4eb-OSL

                                        
                                            OPTIONS /event_confirmation HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://e-pitanie.ru/
Origin: https://e-pitanie.ru
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             77.88.21.90
HTTP/2 200 OK
                                            
timing-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
date: Fri, 11 Nov 2022 18:45:10 GMT
access-control-max-age: 1728000
access-control-allow-headers: content-type
access-control-allow-origin: https://e-pitanie.ru
access-control-allow-credentials: true
x-xss-protection: 1; mode=block
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   6537
Md5:    c9474b18d5190da7ee576da792dbc6a6
Sha1:   b970785ae535fce7f755807a76abcf1dbfa4f553
Sha256: 48835bf5b9a00031b58d59555fd4e32ea6d0d2d874146a78ca544e6f18a4c93d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50b47142-be82-4ddc-85e8-45dc7102abe9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6696
x-amzn-requestid: 19f91da1-beeb-400a-b4c0-059851ca839f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bNeQ_F3doAMFr6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63687739-2ef73e121ff2c3cf0e95b450;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 03:10:49 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: GgmLFeCzBEuR8gcEDGr8nBYW4xUUkIKZi0m8_TZ5quDeLmkROXm2_g==
via: 1.1 27f6faf9790b5a2877fb528fa31f7922.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 07:45:28 GMT
age: 39583
etag: "7339ad7b4f37cc37cb712207a7b3a5ac9355d9dc"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6696
Md5:    90a78b0f806c0c5ef5e7128cc37b2edf
Sha1:   7339ad7b4f37cc37cb712207a7b3a5ac9355d9dc
Sha256: 770a2247a0f8d6b44c61cecc8a11e9882e4dd39269e181eef52cf6816407022b
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:45:11 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Tue, 15 Nov 2022 17:24:37 GMT
ETag: "7c39de3c1d29824b7937b1a1a44081fc9cf2f654"
Last-Modified: Fri, 11 Nov 2022 17:24:38 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1061
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76892ef8fa00b511-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    c782b52d6a3559c15369d2cc5c76df12
Sha1:   7c39de3c1d29824b7937b1a1a44081fc9cf2f654
Sha256: 3233670c8b3234e95e8daa1c0d3bff54a9e14d0d9a07275c158556e136b894b7
                                        
                                            GET /sync HTTP/1.1 
Host: sape-sync.rutarget.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             188.72.109.103
HTTP/1.1 302 Moved Temporarily
                                            
Server: nginx
Date: Fri, 11 Nov 2022 18:45:11 GMT
Content-Length: 0
Connection: close
Location: https://www.acint.net/match?dp=104&euid=pkx8DxDKWTPs
P3P: CP="This is not a P3P policy. Please visit http://rutarget.ru/p3p/ to get more information."
Set-Cookie: userId=pkx8DxDKWTPs; Path=/; Domain=.rutarget.ru; Expires=Wed, 10 May 2023 18:45:11 GMT; SameSite=None; Secure

                                        
                                            GET /mapuid/sapeis/1503420A35986E63440140BC0214CD18 HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             77.88.21.90
HTTP/2 302 Found
                                            
timing-allow-origin: *
location: https://an.yandex.ru/mapuid/sapeis/1503420A35986E63440140BC0214CD18?redir-setuniq=1
date: Fri, 11 Nov 2022 18:45:10 GMT
set-cookie: yandexuid=4167555651668192310; domain=.yandex.ru; path=/; expires=Mon, 08-Nov-2032 18:45:10 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 11 Nov 2022 18:45:10 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Fri, 11 Nov 2022 18:45:10 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   8601
Md5:    28942649667755ee96a8ecce14580b28
Sha1:   c1511f246aa11355b7aac0321674f211ab832d19
Sha256: 2b0a6cc538b5df025e6e8cd7cc12fbdb9706b893ce624ce967cbe09d8f5b111f
                                        
                                            GET /mapuid/gonetdspis/MjI4ZjZkOTc2NmIxNjM5Ng HTTP/1.1 
Host: an.yandex.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             77.88.21.90
HTTP/2 302 Found
                                            
timing-allow-origin: *
location: https://an.yandex.ru/mapuid/gonetdspis/MjI4ZjZkOTc2NmIxNjM5Ng?redir-setuniq=1
date: Fri, 11 Nov 2022 18:45:10 GMT
set-cookie: yandexuid=3631659611668192310; domain=.yandex.ru; path=/; expires=Mon, 08-Nov-2032 18:45:10 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 11 Nov 2022 18:45:10 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Fri, 11 Nov 2022 18:45:10 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   5603
Md5:    a4812ab86b23e3bac9151d0dcdac1877
Sha1:   2d7554e479a18b33ab9c2dbf1089eaa2ee4590b2
Sha256: e258a406fece9e9cc9971742932f06e28869458c2130d44626fc5261302d6e58
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:45:11 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 14:18:44 GMT
Expires: Tue, 15 Nov 2022 14:18:43 GMT
Etag: "48e86b3a1f0c941923931048b05a1290df9222a9"
Cache-Control: max-age=329011,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76892ef7ce80b50c-OSL

                                        
                                            GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-6114754636 HTTP/1.1 
Host: ad.adriver.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             195.209.108.49
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                            
Date: Fri, 11 Nov 2022 18:45:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-control: no-cache, no-cache=Set-Cookie, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref="//adriver.ru/w3c/p3p.xml", CP="NON DSP COR CURa ADMa DEVa OUR BUS UNI COM NAV INT STA"
Set-Cookie: cid=0; expires=Sun, 10 Nov 2024 18:45:11 GMT; path=/; domain=.adriver.ru; uid=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain=.adriver.ru
Location: https://www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   40
Md5:    251630b588179b239e8fab1ac9ef6d3a
Sha1:   91b91a97bc481dd2bbd5e0f3fea6ba1c4e843882
Sha256: c95661e0ef6975b1df5361695a439f71a021d72c345023c3e668e84f35b3c38b
                                        
                                            GET /adcm.js HTTP/1.1 
Host: tag.digitaltarget.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.15.175.147
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Fri, 11 Nov 2022 18:45:11 GMT
Content-Length: 3051
Last-Modified: Fri, 11 Nov 2022 18:34:34 GMT
Connection: keep-alive
ETag: "636e95ba-beb"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (3051), with no line terminators
Size:   3051
Md5:    e7097284185069f52fc736bcd50cda13
Sha1:   1cdfdf2d869841202079ddf91e0a00a8610812e6
Sha256: 40f2a96f78f4c8484e9da6e172f5ddd3e4d7786ca29e04b96e1067a365190e80
                                        
                                            GET /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D HTTP/1.1 
Host: ads.betweendigital.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             188.42.191.196
HTTP/2 302 Found
                                            
location: /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sat, 11 Nov 2023 18:45:11 GMT; Path=/; Domain=.betweendigital.com tuuid=5960a2fb-f4cd-523b-b644-3d9bd52aa5ac; Max-Age=31536000; Expires=Sat, 11 Nov 2023 18:45:11 GMT; Path=/; Domain=.betweendigital.com ut=Y26YNwADkhAFZVEKCVFxwAVxz8DaQBkesRPSOw==; Max-Age=31536000; Expires=Sat, 11 Nov 2023 18:45:11 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad1abae5-6437-44bf-8428-756b825e5be6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8294
x-amzn-requestid: 5dab4522-fca9-4ada-ad6f-3305c9686315
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bZ4u3H7PoAMF02g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636d6e5e-756c150c40fe6fff3ae7a609;Sampled=0
x-amzn-remapped-date: Thu, 10 Nov 2022 21:34:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FXIS1Gr_-3RUm6WPZCVcjaefD3hehHV-IwO-ieFeUqeoPAE7vajlsg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 10 Nov 2022 21:46:51 GMT
etag: "815a4a1eb8c8e2a138fb3d65ba777b0c18fa15d0"
age: 75500
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8294
Md5:    88c9931a009690991e73c5b37a1aa085
Sha1:   815a4a1eb8c8e2a138fb3d65ba777b0c18fa15d0
Sha256: 74e70391889e4b46742033b1d5daccfec415ba2ee999e429d1013fd4a1ebc61a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e7dc40a-e47f-44b5-b3b4-87b10cd8669d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net