{"report_id":"ebb89619-561e-45ef-b849-983c6f595e07","version":6,"status":"done","tags":[],"date":"2026-01-04T13:01:07Z","url":{"schema":"http","addr":"upibusiness.xyz/","fqdn":"upibusiness.xyz","domain":"upibusiness.xyz","tld":"xyz"},"ip":{"addr":"172.67.210.76","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"upibusiness.xyz/","fqdn":"upibusiness.xyz","domain":"upibusiness.xyz","tld":"xyz"},"title":"UPB","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"upibusiness.xyz/","fqdn":"upibusiness.xyz","domain":"upibusiness.xyz","tld":"xyz"},"ip":{"addr":"172.67.210.76","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-08T13:01:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-04T13:00:48Z","timestamp":1767531648,"ip_dst":{"addr":"172.18.0.23","port":49770,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"185.115.93.200","port":443,"asn":42881,"as":"Sc Itns.net Srl","country":"Moldova","country_code":"MD"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 36","source":"{\"timestamp\":\"2026-01-04T13:00:48.713749+0000\",\"flow_id\":1263256794591896,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"185.115.93.200\",\"src_port\":443,\"dest_ip\":\"172.18.0.23\",\"dest_port\":49770,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400035,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 36\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2026-01-04T13:00:48.684696+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cr-frontend.weborama-tech.ru","ip":{"addr":"130.193.54.247","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2022-03-09","domain_rank":183201,"first_seen":"2023-07-27T11:09:06Z","last_seen":"2025-12-31T13:05:14.500843Z","alert_count":0,"request_count":1,"received_data":440,"sent_data":587,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"otclick-adv.ru","ip":{"addr":"139.45.228.132","port":443,"asn":57304,"as":"JSC RetnNet","country":"Russia","country_code":"RU"},"domain_registered":"2011-01-17","domain_rank":27130,"first_seen":"2015-09-17T11:20:30Z","last_seen":"2026-01-01T11:55:20.594844Z","alert_count":0,"request_count":1,"received_data":724,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssp.bidvol.com","ip":{"addr":"194.85.16.20","port":443,"asn":8985,"as":"Join-stock company Internet ExchangeMSK-IX","country":"Russia","country_code":"RU"},"domain_registered":"2019-09-24","domain_rank":199701,"first_seen":"2020-02-22T12:37:29Z","last_seen":"2026-01-02T12:43:57.924147Z","alert_count":0,"request_count":1,"received_data":672,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sp.linkssp.ru","ip":{"addr":"37.48.253.168","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"domain_registered":"2024-09-18","domain_rank":431263,"first_seen":"2025-05-28T20:33:39.660871Z","last_seen":"2026-01-01T21:19:49.617483Z","alert_count":0,"request_count":1,"received_data":488,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.adspend.space","ip":{"addr":"5.189.234.227","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2022-02-11","domain_rank":345453,"first_seen":"2022-10-20T06:12:42Z","last_seen":"2025-12-31T07:46:34.262355Z","alert_count":0,"request_count":2,"received_data":1059,"sent_data":998,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.26.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"statmedia.ru","ip":{"addr":"87.228.86.146","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2022-03-25","domain_rank":27502,"first_seen":"2015-08-17T13:20:07Z","last_seen":"2026-01-01T11:55:17.409745Z","alert_count":0,"request_count":1,"received_data":265,"sent_data":513,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.bringads.ru","ip":{"addr":"213.171.19.210","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2025-02-06","domain_rank":412835,"first_seen":"2025-05-20T10:33:46.598539Z","last_seen":"2026-01-01T19:46:39.256101Z","alert_count":0,"request_count":1,"received_data":566,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dm.hybrid.ai","ip":{"addr":"37.230.131.22","port":443,"asn":200197,"as":"Hybrid Adtech Sp.z.o.o.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-12-19","domain_rank":93939,"first_seen":"2018-08-22T12:51:55Z","last_seen":"2025-12-28T19:01:53.545878Z","alert_count":0,"request_count":1,"received_data":344,"sent_data":399,"comment":"","tags":null,"fingerprints":null},{"fqdn":"adx.com.ru","ip":{"addr":"83.222.105.246","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-05-19","domain_rank":4001,"first_seen":"2017-06-05T16:30:42Z","last_seen":"2026-01-02T12:43:58.010158Z","alert_count":0,"request_count":1,"received_data":104,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.lotus-dsp.ru","ip":{"addr":"213.171.19.214","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2023-12-05","domain_rank":395207,"first_seen":"2023-12-09T00:32:38Z","last_seen":"2026-01-01T21:19:49.743909Z","alert_count":0,"request_count":1,"received_data":565,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"match.ohmy.bid","ip":{"addr":"37.0.127.202","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"domain_registered":"2022-06-09","domain_rank":283479,"first_seen":"2023-05-23T09:17:10Z","last_seen":"2026-01-01T11:55:17.165321Z","alert_count":0,"request_count":1,"received_data":488,"sent_data":511,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssp.al-adtech.com","ip":{"addr":"45.139.25.121","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"domain_registered":"2024-01-16","domain_rank":164448,"first_seen":"2024-01-30T10:38:38Z","last_seen":"2026-01-01T11:06:53.923548Z","alert_count":0,"request_count":1,"received_data":670,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssp-rtb.sape.ru","ip":{"addr":"193.3.184.186","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"domain_registered":"2006-06-19","domain_rank":153781,"first_seen":"2016-02-02T17:01:03Z","last_seen":"2025-12-28T02:50:19.709766Z","alert_count":0,"request_count":6,"received_data":3157,"sent_data":3536,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dm-eu.hybrid.ai","ip":{"addr":"37.230.131.22","port":443,"asn":200197,"as":"Hybrid Adtech Sp.z.o.o.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-12-19","domain_rank":74067,"first_seen":"2021-01-25T11:48:59Z","last_seen":"2025-12-27T13:59:05.589112Z","alert_count":0,"request_count":1,"received_data":404,"sent_data":472,"comment":"","tags":null,"fingerprints":null},{"fqdn":"match.new-programmatic.com","ip":{"addr":"217.65.2.150","port":443,"asn":3175,"as":"Citytelecom LLC","country":"Russia","country_code":"RU"},"domain_registered":"2020-02-18","domain_rank":172258,"first_seen":"2020-02-18T20:50:06Z","last_seen":"2025-12-31T07:46:34.137625Z","alert_count":0,"request_count":1,"received_data":215,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssp.bestssp.com","ip":{"addr":"83.222.96.170","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"domain_registered":"2016-05-05","domain_rank":673248,"first_seen":"2017-06-10T08:55:20Z","last_seen":"2026-01-01T11:55:18.924032Z","alert_count":0,"request_count":1,"received_data":332,"sent_data":555,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"upibusiness.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":9,"received_data":958267,"sent_data":4716,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"sync.bumlam.com","ip":{"addr":"31.172.81.160","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2015-08-10","domain_rank":29016,"first_seen":"2015-08-10T21:04:25Z","last_seen":"2025-12-31T10:54:10.973856Z","alert_count":0,"request_count":3,"received_data":1959,"sent_data":1563,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mc.acint.net","ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"domain_registered":"2014-02-06","domain_rank":245226,"first_seen":"2024-01-29T15:31:01Z","last_seen":"2025-12-31T07:46:34.395051Z","alert_count":0,"request_count":15,"received_data":6700,"sent_data":29462,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssp-statistics.dsp.nt.technology","ip":{"addr":"54.228.143.170","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2019-02-02","domain_rank":50490,"first_seen":"2025-01-30T05:42:21.300558Z","last_seen":"2026-01-01T19:46:39.170176Z","alert_count":0,"request_count":1,"received_data":588,"sent_data":792,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kimberlite.io","ip":{"addr":"37.0.127.91","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-03-16","domain_rank":17539,"first_seen":"2017-09-14T05:18:59Z","last_seen":"2025-12-30T07:28:17.795939Z","alert_count":0,"request_count":3,"received_data":2014,"sent_data":1611,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.dvgroup.com","ip":{"addr":"82.148.21.217","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"1998-09-12","domain_rank":429256,"first_seen":"2024-09-03T12:22:07Z","last_seen":"2026-01-01T11:55:17.873437Z","alert_count":0,"request_count":1,"received_data":250,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bid.sspnet.tech","ip":{"addr":"212.41.25.246","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2023-10-17","domain_rank":512084,"first_seen":"2025-08-19T17:30:43.164294Z","last_seen":"2025-12-31T10:00:17.423271Z","alert_count":0,"request_count":1,"received_data":157,"sent_data":554,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.techdsp.ru","ip":{"addr":"37.48.253.136","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"domain_registered":"2024-10-09","domain_rank":660524,"first_seen":"2024-11-01T12:08:52Z","last_seen":"2026-01-01T08:26:07.05934Z","alert_count":0,"request_count":2,"received_data":890,"sent_data":952,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ssp.bidster.net","ip":{"addr":"87.228.58.107","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2023-04-13","domain_rank":430502,"first_seen":"2023-08-04T01:03:10Z","last_seen":"2025-12-29T23:03:02.775509Z","alert_count":0,"request_count":1,"received_data":517,"sent_data":573,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"exchange.buzzoola.com","ip":{"addr":"45.138.161.72","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2010-08-11","domain_rank":80108,"first_seen":"2014-10-17T15:20:27Z","last_seen":"2026-01-01T11:37:49.817924Z","alert_count":0,"request_count":3,"received_data":1447,"sent_data":2063,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.opendsp.ru","ip":{"addr":"176.114.85.200","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2022-08-24","domain_rank":261604,"first_seen":"2022-09-01T11:01:38Z","last_seen":"2025-12-27T08:08:49.489637Z","alert_count":0,"request_count":2,"received_data":500,"sent_data":941,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-28T22:14:05.525046Z","alert_count":0,"request_count":1,"received_data":56312,"sent_data":555,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pixel.dsp.onetarget.ru","ip":{"addr":"130.193.53.230","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2019-04-18","domain_rank":456581,"first_seen":"2024-03-13T16:04:45Z","last_seen":"2025-12-31T11:48:20.06879Z","alert_count":0,"request_count":1,"received_data":637,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"id.adx.bid","ip":{"addr":"104.26.0.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-17","domain_rank":667222,"first_seen":"2025-05-16T21:23:24.922522Z","last_seen":"2026-01-01T10:35:29.684476Z","alert_count":0,"request_count":1,"received_data":763,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cm.pxltag.com","ip":{"addr":"87.228.57.56","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2025-05-25","domain_rank":0,"first_seen":"2025-11-18T10:18:49.548967Z","last_seen":"2026-01-01T12:40:20.773825Z","alert_count":0,"request_count":1,"received_data":366,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.gonet-ads.com","ip":{"addr":"188.42.104.140","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2022-04-05","domain_rank":164679,"first_seen":"2023-02-03T11:32:31Z","last_seen":"2026-01-01T12:28:20.355927Z","alert_count":0,"request_count":1,"received_data":345,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mediatoday.ru","ip":{"addr":"194.186.91.196","port":443,"asn":3216,"as":"PVimpelCom","country":"Russia","country_code":"RU"},"domain_registered":"2008-03-02","domain_rank":40250,"first_seen":"2013-05-20T20:53:32Z","last_seen":"2026-01-01T12:40:21.576738Z","alert_count":0,"request_count":1,"received_data":865,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssp-statistics.dev.dsp1.nominaltechno.com","ip":{"addr":"34.249.245.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2015-10-09","domain_rank":503952,"first_seen":"2024-09-06T07:52:31Z","last_seen":"2026-01-01T12:40:20.708207Z","alert_count":0,"request_count":1,"received_data":588,"sent_data":782,"comment":"","tags":null,"fingerprints":null},{"fqdn":"acint.net","ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"domain_registered":"2014-02-06","domain_rank":7617,"first_seen":"2014-02-14T21:23:16Z","last_seen":"2026-01-01T09:37:13.052861Z","alert_count":0,"request_count":9,"received_data":3614,"sent_data":17964,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.dmp.otm-r.com","ip":{"addr":"194.55.244.180","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"domain_registered":"2014-01-16","domain_rank":124233,"first_seen":"2017-02-03T07:19:51Z","last_seen":"2025-12-31T11:48:19.165374Z","alert_count":0,"request_count":2,"received_data":792,"sent_data":1005,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.27.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.adiam.tech","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-12-23","domain_rank":297000,"first_seen":"2024-03-15T20:38:51Z","last_seen":"2026-01-01T06:50:18.018077Z","alert_count":0,"request_count":1,"received_data":924,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"match.qtarget.tech","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-12-26","domain_rank":701462,"first_seen":"2023-01-28T17:26:52Z","last_seen":"2026-01-01T11:55:19.388739Z","alert_count":0,"request_count":3,"received_data":0,"sent_data":1437,"comment":"","tags":null,"fingerprints":null},{"fqdn":"a.utraff.com","ip":{"addr":"213.171.19.174","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2016-09-27","domain_rank":179342,"first_seen":"2019-02-27T10:01:37Z","last_seen":"2025-12-30T10:28:14.905028Z","alert_count":0,"request_count":2,"received_data":1322,"sent_data":899,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sp.kombinat.digital","ip":{"addr":"77.223.103.139","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2025-04-16","domain_rank":596572,"first_seen":"2025-07-09T21:59:17.553875Z","last_seen":"2026-01-01T11:55:18.314462Z","alert_count":0,"request_count":1,"received_data":494,"sent_data":516,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.adspector.io","ip":{"addr":"104.21.15.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-02","domain_rank":213577,"first_seen":"2024-06-28T02:35:48Z","last_seen":"2026-01-01T11:55:20.312362Z","alert_count":0,"request_count":1,"received_data":922,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cmr.bidderstack.com","ip":{"addr":"185.149.242.236","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2017-04-25","domain_rank":274973,"first_seen":"2024-06-26T06:54:13Z","last_seen":"2026-01-01T12:40:21.25034Z","alert_count":0,"request_count":1,"received_data":271,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}]},{"fqdn":"cs.agency2.ru","ip":{"addr":"88.212.234.238","port":443,"asn":39134,"as":"Edinaya Set Limited Liability Company","country":"Russia","country_code":"RU"},"domain_registered":"2008-10-06","domain_rank":520394,"first_seen":"2022-04-29T14:24:02Z","last_seen":"2026-01-01T10:35:27.965781Z","alert_count":0,"request_count":1,"received_data":791,"sent_data":466,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ck.silvermob.com","ip":{"addr":"212.95.41.187","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2015-08-25","domain_rank":416424,"first_seen":"2025-03-13T10:51:02.742077Z","last_seen":"2026-01-01T10:35:26.917144Z","alert_count":0,"request_count":1,"received_data":368,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"a.videohead.tech","ip":{"addr":"213.171.19.230","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2023-05-30","domain_rank":516081,"first_seen":"2023-06-07T20:20:13Z","last_seen":"2026-01-01T11:55:20.285809Z","alert_count":0,"request_count":1,"received_data":566,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"rtb.dynotech.io","ip":{"addr":"82.202.197.102","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2024-04-24","domain_rank":372920,"first_seen":"2024-06-21T10:32:20Z","last_seen":"2025-12-30T19:57:07.66015Z","alert_count":0,"request_count":1,"received_data":201,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sync.upravel.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-03-25","domain_rank":187521,"first_seen":"2017-05-29T09:13:46Z","last_seen":"2026-01-01T11:49:34.639609Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":433,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.acint.net","ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"domain_registered":"2014-02-06","domain_rank":175167,"first_seen":"2014-02-14T21:23:16Z","last_seen":"2026-01-01T06:41:34.193123Z","alert_count":0,"request_count":9,"received_data":93357,"sent_data":10640,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pix.bumlam.com","ip":{"addr":"31.172.81.3","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2015-08-10","domain_rank":386640,"first_seen":"2022-03-29T09:19:43Z","last_seen":"2026-01-01T09:30:16.304528Z","alert_count":0,"request_count":3,"received_data":2243,"sent_data":1532,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.dsp.solta.io","ip":{"addr":"217.199.220.72","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"domain_registered":"2022-07-19","domain_rank":369782,"first_seen":"2022-09-21T16:47:56Z","last_seen":"2026-01-01T11:55:18.89175Z","alert_count":0,"request_count":1,"received_data":250,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"635f56ac-e96d-11f0-86e0-002590c0647c.n4.sync.bumlam.com","ip":{"addr":"185.115.93.200","port":443,"asn":42881,"as":"Sc Itns.net Srl","country":"Moldova","country_code":"MD"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":386,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie:1.10.3","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"upibusiness.xyz/wp-content/litespeed/js/2003265aa96e9046eb1e2b1d946d8827.js?ver=22ccb","fqdn":"upibusiness.xyz","domain":"upibusiness.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2003265aa96e9046eb1e2b1d946d8827","sha1":"96b0f0e4f9a901d8b74d54ae10171ddebac67435","sha256":"6537ff2cd0eb7689ebc73e4bf89776deb2a2f30d3ead649b26f3d68751a677d7","sha512":"13c9a2e92a8550450f33b211bfa203e791eeaa348e86a77893c81da1d736c8e8d4a909c5cfb8bb75447d84ef067d375697f0247d16f9365b83ed22a3a33b89e1","ssdeep":"1536:0rP7Q+hMJwYjNAfwKSxfz4MJQtlKzIIOvYFv7warfC1TW5gcUXly6YvoNnm9mKmO:0rPU++lNA4KSxfz4MgKzMgFO1viKK","tlshash":"06f31a8cb244767205db21f6903b860fb37769b86906c054b5a8c9ed1a7cc8961f3ff9","size":159455,"data":"","first_seen":"2026-01-04T13:01:17.851219Z","last_seen":"2026-01-04T13:01:17.851219Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upibusiness.xyz/wp-includes/js/wp-emoji-loader.min.js","fqdn":"upibusiness.xyz","domain":"upibusiness.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"409123a3b1d8a25a3669933ac617fd91","sha1":"d714e685bf6b99bc2d368df162798a70a3c68731","sha256":"421f8903e420a60d30fbc95e1c2662567fcf1320509eb0fc20660a42d4b794c1","sha512":"213704530e74ee7afa69ad16ab7f926a7b6ede7ec7e9a01ee7f0981f092c8f490d605fadd0615e92d5aa495433d40feb6ea597232156cc55ba32121bca45d411","ssdeep":"","tlshash":"fe518796a77638dbb2f900f2697a0d47e761443556c8d038c9bda3141cb5893c274b46","size":2993,"data":"","first_seen":"2026-01-04T13:01:17.856282Z","last_seen":"2026-01-04T13:01:17.856282Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upibusiness.xyz/","fqdn":"upibusiness.xyz","domain":"upibusiness.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9fe207ebca5b02eb81eef2f68485a2ff","sha1":"714ac5edfa405a52311140156cf6123a28843011","sha256":"64a4e6e79a812b17508cee450c50cbd56e1ce27df404494ba02f47d40d9386c4","sha512":"60dee58db9e67a8f62f891f2e0d0d01fba76b059bf995634920fddfdbd5370f2696281be9b34f4a3c8fb12ee5c0a1468bcee6eb6f661afbdbe7955e5fbaf29d7","ssdeep":"","tlshash":"91d0976a3d01043c93083896b5bec288f42230b4aa90808080cbc854b32ced14800b8a","size":237,"data":"","first_seen":"2025-01-01T12:36:20.103982Z","last_seen":"2026-03-22T04:56:40.033593Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/aci.js","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"20f0381069e78a636d53b3d505e967c7","sha1":"800464b5f1400a923482d4298b472e17cda20737","sha256":"7b2d18d3dc9861604cbbde63dd9218e12a6cac1a06f52b877eddf61f9f7c3b37","sha512":"5aa6d98aca4d9881d5bf2c8dd71ff3d35e534a09ee749bf248c3d6f838f240f0d77edf06f8f2eae1b7a3797d9d447fe2da922395243f22547a13c4b6ea9981a2","ssdeep":"768:EMNY2uNr6tm67+DVRhNk6L0Wbha0XByPcf0:EMN/uNWo67+DLhNZaMByks","tlshash":"1ce2f98a7191f47306d3a179c12f050bf136696620e8d0e4f536dce0aeb858e6577f3a","size":31372,"data":"","first_seen":"2024-10-20T11:06:54.910201Z","last_seen":"2026-01-29T05:23:48.922533Z","times_seen":4303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/oci.js?t=1767531647243","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3fa5133b6899a2abb39fb79ed94300f","sha1":"dc1d5c75420b38cd7509a783ed09345d0ff78ac4","sha256":"66b141eb9ae44c86efc510844a71cf208c02d02abe03af3a7d8cc26736d3e19c","sha512":"db171b491636ef67596c4874d2b3e553eac016e303a713f12eb1e5c5116cab5f5c904b6aaf358268c04011016484b6920b227cf2d72c2de30f79bd16eba59bad","ssdeep":"384:ixcLKIHRnN2xFRhKv3E6mXHHKvaloLG2+KlLqK/CSuxAjUd0jJFKOEyEqWiodJVb:1BHRN6AIeJZKOgIJANJVEEvDHIoOI","tlshash":"64e219ccb2c3b02d0263a9ba047f6046763bbd59250c4883d5bad5d17ca9e5a513bfb8","size":32169,"data":"","first_seen":"2023-03-12T19:09:04Z","last_seen":"2026-03-15T10:53:33.326269Z","times_seen":5562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upibusiness.xyz/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"upibusiness.xyz","domain":"upibusiness.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-04T02:32:18.397133Z","times_seen":130924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upibusiness.xyz/ht_ctc_app_js-js-extra","fqdn":"upibusiness.xyz","domain":"upibusiness.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5d54b6273761ed8c8c33570cea58887","sha1":"f12630e713315b465aec730791685edf4bf8468a","sha256":"b219b0b414adc2625c48fd9ce772888830345b8a480e30690ba651bec3db8760","sha512":"9db530f4fa1603cb35a6bd52e69866bfc04025300541439a74e2a7a7b1a719b26da2ebbd1cf2cceda8610d60519d91cfed2a542a5ca62348cc9d42947865a2e8","ssdeep":"","tlshash":"e2315a6eb0397873864bf83b28cc2f9629ec65bdf1f9405881409ec81f9e95fb241d49","size":1608,"data":"","first_seen":"2026-01-04T13:01:17.85859Z","last_seen":"2026-01-04T13:01:17.85859Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upibusiness.xyz/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"upibusiness.xyz","domain":"upibusiness.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T02:29:40.605981Z","times_seen":684324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/mc/?dp=10\u0026tc=1","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c1eab5df617012ab93f1f0c989389108","sha1":"0692dc93540c6f459b8c9717396d24f58215e368","sha256":"4997263bd35901470cab8493e701d6f9e838e405b3120b26e7b5437fe3871330","sha512":"891e26ca593503012a94e92e3d53a8196f75a38ac07d8a755ae7b60c5a9fa04fd495edcff895f18b653dffe11c015d8b26a58481222135abdeab3d1e0d56fe23","ssdeep":"","tlshash":"67f0c01619b71c21415448b9e3fe0220b811770f388ac44ebccde6495f1884ae457a8c","size":525,"data":"","first_seen":"2026-01-04T13:01:17.859629Z","last_seen":"2026-01-04T13:01:17.859629Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"sync.upravel.com/sape/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.489Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sape/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":7598,"timings":{"blocked":7598,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/match?dp=68\u0026euid=Njk1YTY0N2YwNDQzODM3NQ%3D%3D","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=68\u0026euid=Njk1YTY0N2YwNDQzODM3NQ%3D%3D HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647; cSyncDp14v4=1767531647; cSyncDp7v3=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T02:32:17.036778Z","times_seen":326515,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upibusiness.xyz/wp-content/themes/anymags/assets/fonts/fontawesome-webfont3e6e.html?v=4.7.0","fqdn":"upibusiness.xyz","domain":"upibusiness.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upibusiness.xyz/","date":"2026-01-04T13:00:47.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upibusiness.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 02:12:11 GMT","end":"Sat, 14 Mar 2026 03:09:53 GMT"},"fingerprint":{"sha1":"78:A0:7F:17:3D:D2:0E:4C:DA:29:E0:1B:2B:4D:32:C7:76:84:9C:67","sha256":"DE:0F:BA:EF:41:B1:84:44:5A:EE:19:A5:35:79:FF:21:03:E4:69:C5:76:1D:D8:A6:77:DB:28:28:7E:4A:34:DE"}}},"request":{"raw":"GET /wp-content/themes/anymags/assets/fonts/fontawesome-webfont3e6e.html?v=4.7.0 HTTP/1.1\r\nHost: upibusiness.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upibusiness.xyz/wp-content/litespeed/css/51818eb1d7dbc920b9c2ce013111c36a.css?ver=22ccb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 01 Apr 2021 14:19:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oh%2FBpkaknGWdLG1US5E1kxsxEc21Ou5sB%2FtUMapTOv7XWKwEE4IOtEH2QSMuNam8YlEotdZSuE0sbW7NQ5App%2BeqBbusEy4oZrHl%2Bc9SsQ%3D%3D\"}]}\r\ncf-ray: 9b8aebba5b241525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"text/html","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 11534.4","md5":"8be1c8f32747c80cb7774b29ec81beef","sha1":"0240c2c024ff55c02a213159bc8937007babed30","sha256":"26611d99cced0a9dfbbc4f47818921a0ebe247d9d4eb2eccac697da36f89a0eb","sha512":"2bdfcbe54dd175b1cefec1d84b1839d7813b9a341fa3c7bbf1b311d98e2cff830f9d13e9e5302753e9eed2380b6d820857d658536c8555f5de01b63c4a351c2b","ssdeep":"3072:PWGmiOeFF7zjktPaEV2k07DURADtJXhlZePWJeyEKAuDSt:PWGmiOCQPK7DUevhHePye/4c","tlshash":"3db3f1068385f3e0d2fb89f994961ae4a3064b95dbc37990c724c3712dca21873efc96","first_seen":"2023-04-09T23:40:01Z","last_seen":"2026-04-03T14:42:19.357506Z","times_seen":2283,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":325,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.bidvol.com/usersync?dspcsid=8\u0026redirect=1","fqdn":"ssp.bidvol.com","domain":"bidvol.com","tld":"com"},"ip":{"addr":"194.85.16.20","port":443,"asn":8985,"as":"Join-stock company Internet ExchangeMSK-IX","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ssp.bidvol.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 15:36:18 GMT","end":"Sun, 15 Feb 2026 15:36:17 GMT"},"fingerprint":{"sha1":"2C:D4:B1:D6:C7:FD:4D:33:95:41:C0:D4:51:E9:65:02:A5:F5:6A:2E","sha256":"37:63:06:D3:DB:F8:A8:E8:FE:2C:AD:63:85:31:FA:C4:B4:4F:34:34:0B:AF:A7:69:B2:B5:57:6E:1E:EF:45:63"}}},"request":{"raw":"GET /usersync?dspcsid=8\u0026redirect=1 HTTP/1.1\r\nHost: ssp.bidvol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-request-id: 76506399-a379-4cdf-9323-79f8f0814625\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\nset-cookie: bvuid=axx540ltz5; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None\nbvuid2=axx540ltz5; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":25,"connect":73,"send":0,"wait":66,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pix.bumlam.com/sync/sape/check?sspuid=0900007F7F645A69B30E600602A1C580","fqdn":"pix.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.3","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 15:01:44 GMT","end":"Thu, 19 Mar 2026 15:01:43 GMT"},"fingerprint":{"sha1":"73:09:47:20:FC:A8:0D:DC:79:F0:08:58:30:EF:F6:AE:72:A0:E1:0B","sha256":"73:92:7B:67:F8:0C:85:9F:42:64:89:B1:B4:BA:C5:BB:D0:C1:72:38:91:59:BA:0B:54:55:C0:4E:84:7F:12:34"}}},"request":{"raw":"GET /sync/sape/check?sspuid=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: pix.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Sun, 04 Jan 2026 13:00:47 GMT\r\nContent-Type: image/gif\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://www.acint.net\r\nAccess-Control-Allow-Credentials: true\r\nTiming-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0, proxy-revalidate, s-maxage=0\r\nPragma: no-cache\r\nExpires: 05-Jun-2005 22:00:00 GMT\r\nX-Xss-Protection: 0\r\nP3P: policyref=\"https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml\", CP=\"CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nLocation: https://sync.bumlam.com/?src=sape\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":29,"connect":25,"send":0,"wait":24,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cmr.bidderstack.com/sape/cm?user_id=0900007F7F645A69B30E600602A1C580","fqdn":"cmr.bidderstack.com","domain":"bidderstack.com","tld":"com"},"ip":{"addr":"185.149.242.236","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bidderstack.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 26 Dec 2024 14:42:05 GMT","end":"Wed, 14 Jan 2026 11:07:44 GMT"},"fingerprint":{"sha1":"D3:CF:38:0C:FA:18:1C:F8:E8:E3:18:35:3E:3D:E6:82:B4:44:12:C1","sha256":"C6:91:A1:27:F0:56:52:64:73:25:39:60:8B:AA:DA:0C:92:DF:DD:2B:3C:50:92:0B:D8:7F:AF:F4:5B:3C:A8:79"}}},"request":{"raw":"GET /sape/cm?user_id=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: cmr.bidderstack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Sun, 04 Jan 2026 13:00:12 GMT\r\nContent-Type: image/gif\r\nContent-Length: 44\r\nConnection: keep-alive\r\nx-from: nrr-1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":44,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"f9d60352c70a2ba15616d1c9421f3844","sha1":"e9abc8bea7721a4b6a50295850d13c515006a95c","sha256":"82cb517a8f80c91dfcec543c6d140deb3baaf463ea9e77655475096eba7bc7d9","sha512":"c236b22bcd48790ff970b8bc566061eae734e0d34c1a68cd8d6160415303e0b0b51fe5780fafe7349cf71cb10089c9f322495267eee019cc63f879727263df4b","ssdeep":"","tlshash":"49900003eb80c002c2a2c0300e0ccb802b88b030ae28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-06T18:33:49Z","last_seen":"2026-04-03T14:38:25.913479Z","times_seen":4252,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":15,"connect":47,"send":0,"wait":32,"receive":0,"ssl":391},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.techdsp.ru/sync?src=sape\u0026dmp=2\u0026uid=0900007F7F645A69B30E600602A1C580","fqdn":"sync.techdsp.ru","domain":"techdsp.ru","tld":"ru"},"ip":{"addr":"37.48.253.136","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.techdsp.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 19 Feb 2025 14:03:23 GMT","end":"Mon, 23 Mar 2026 14:03:22 GMT"},"fingerprint":{"sha1":"E0:51:62:A1:08:10:67:51:3A:43:8B:07:2F:EC:40:2D:BA:A8:2E:5C","sha256":"8E:DA:37:A7:45:0C:02:8B:99:79:9E:F6:0F:CF:98:2D:C0:9F:74:B4:18:E8:2E:F5:D7:DD:D8:3C:3C:43:5C:85"}}},"request":{"raw":"GET /sync?src=sape\u0026dmp=2\u0026uid=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: sync.techdsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-length: 0\r\nlocation: https://dmg.digitaltarget.ru/1/7686/i/i?a=4110\u0026e=4zP1HlMqRZiGbzkpRP_YAQ\u0026i=13927785926397989254\r\nreferrer-policy: no-referrer\r\nset-cookie: uid=4zP1HlMqRZiGbzkpRP_YAQ; Path=/; Max-Age=31536000; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":714,"timings":{"blocked":140,"dns":9,"connect":29,"send":0,"wait":58,"receive":0,"ssl":471},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.lotus-dsp.ru/sync?ssp=Sape\u0026id=0900007F7F645A69B30E600602A1C580","fqdn":"a.lotus-dsp.ru","domain":"lotus-dsp.ru","tld":"ru"},"ip":{"addr":"213.171.19.214","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lotus-dsp.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 07:52:10 GMT","end":"Tue, 10 Mar 2026 07:52:09 GMT"},"fingerprint":{"sha1":"52:1E:E1:52:CD:27:DF:CC:10:13:C0:C0:B1:F0:C0:C3:8E:5D:F6:12","sha256":"17:BE:57:05:66:36:0F:5C:21:7B:D9:6B:6F:D3:0E:D1:B1:6B:45:4F:0E:70:C0:B4:FB:3D:CD:83:71:7A:2D:3C"}}},"request":{"raw":"GET /sync?ssp=Sape\u0026id=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: a.lotus-dsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0\r\nDate: Sun, 04 Jan 2026 13:00:48 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: adpreudid=1; Expires=Tue, 03 Feb 2026 16:00:48 GMT; Domain=.lotus-dsp.ru; SameSite=None; Secure; Path=/\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":824,"timings":{"blocked":269,"dns":0,"connect":54,"send":0,"wait":61,"receive":0,"ssl":440},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upibusiness.xyz/wp-content/uploads/2024/11/cropped-doubleclick__13_-removebg-preview-150x75.png","fqdn":"upibusiness.xyz","domain":"upibusiness.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upibusiness.xyz/","date":"2026-01-04T13:00:47.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upibusiness.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 02:12:11 GMT","end":"Sat, 14 Mar 2026 03:09:53 GMT"},"fingerprint":{"sha1":"78:A0:7F:17:3D:D2:0E:4C:DA:29:E0:1B:2B:4D:32:C7:76:84:9C:67","sha256":"DE:0F:BA:EF:41:B1:84:44:5A:EE:19:A5:35:79:FF:21:03:E4:69:C5:76:1D:D8:A6:77:DB:28:28:7E:4A:34:DE"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/cropped-doubleclick__13_-removebg-preview-150x75.png HTTP/1.1\r\nHost: upibusiness.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upibusiness.xyz/\r\nCookie: fid=e3a54d22-7e1e-44dc-886c-50f9117dfe4c; _ac_oid=52c23a0593a416c46c93b04c0a432175%3A1767535247531\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 15435\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 04 Jan 2026 13:05:47 GMT\r\nlast-modified: Fri, 22 Nov 2024 06:58:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MZlxytRFnsJ6fyH4xhQcdR2Qk6%2FaUDZFL93M2XXpGWzosRxJWUU6b8EgB0lBUU4YRiWCG%2Fnjx6M%2FYDaDwVXI4Y1bQddi8GVrpKXlh8Q0EA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8aebbdbd461525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 75, 8-bit/color RGBA, non-interlaced","md5":"a4068708a695b74beb8152ce35bea9d1","sha1":"c52e872ec281e9f4aae40136c33c99f69fe8e435","sha256":"8cd011b7623cfd29e13e9daaaecf0e2528c52ce98e425275587ee509957d6790","sha512":"36ecf11712ab4a97e5eed1dc3debf51a21198dd7652c2a69029775e4c4f00a6adeca552aa159f71b36528ca209a1a58f1c264b2669f98f4d73c3f24e61e12710","ssdeep":"384:7uCy7WQW5rxfeRuhJCSMP6ikVRHN71e8Ur7Hy3w5vvbhuAkdmb0:qCEWPTfeRKB86iknHJrsLy8FuLv","tlshash":"bc62d17df891c449987e647fdb3018be5c2a89a5966740a7d48bdb2cf33c481397c036","first_seen":"2026-01-04T13:01:17.843665Z","last_seen":"2026-01-04T13:01:17.843665Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/oci/?v=0.7.1\u0026uid=31f145d0-cf24-4e7e-931b-1d8a4d7f0135\u0026dp=10\u0026tz=%2B00%3A00\u0026nc=139868\u0026oid=52c23a0593a416c46c93b04c0a432175","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upibusiness.xyz/","date":"2026-01-04T13:00:47.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /oci/?v=0.7.1\u0026uid=31f145d0-cf24-4e7e-931b-1d8a4d7f0135\u0026dp=10\u0026tz=%2B00%3A00\u0026nc=139868\u0026oid=52c23a0593a416c46c93b04c0a432175 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upibusiness.xyz/\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T02:32:17.036778Z","times_seen":326515,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upibusiness.xyz/wp-content/litespeed/css/51818eb1d7dbc920b9c2ce013111c36a.css?ver=22ccb","fqdn":"upibusiness.xyz","domain":"upibusiness.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upibusiness.xyz/","date":"2026-01-04T13:00:46.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upibusiness.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 02:12:11 GMT","end":"Sat, 14 Mar 2026 03:09:53 GMT"},"fingerprint":{"sha1":"78:A0:7F:17:3D:D2:0E:4C:DA:29:E0:1B:2B:4D:32:C7:76:84:9C:67","sha256":"DE:0F:BA:EF:41:B1:84:44:5A:EE:19:A5:35:79:FF:21:03:E4:69:C5:76:1D:D8:A6:77:DB:28:28:7E:4A:34:DE"}}},"request":{"raw":"GET /wp-content/litespeed/css/51818eb1d7dbc920b9c2ce013111c36a.css?ver=22ccb HTTP/1.1\r\nHost: upibusiness.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upibusiness.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 13:00:46 GMT\r\ncontent-type: text/css\r\ncontent-length: 82552\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 04 Jan 2026 13:05:46 GMT\r\nlast-modified: Thu, 18 Dec 2025 09:00:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DTGftlhiZYgKds4sXZbkB8loDKa4LdSsd5FPu9fTl2HWFeUc3rfMiFKMcfYhXjockfc9atOSKIcBeIfed5fjTJCorQLV1tP%2FeYD52HW5pw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8aebb43f5b1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":533833,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"51818eb1d7dbc920b9c2ce013111c36a","sha1":"abe616e9d1b3db60b47c6b80454920bc8f0b34e9","sha256":"86594f827034ce7b55a20a5c00fcaecfbd84871566d624d6beab3eec19dcbf2e","sha512":"d29b591e5f8710620f758abd27663e9c5652b242126db0e678e1ca087e078dd2c22c18c88acc0c1c016e75a885b3e35f7849b9abb24d54201360592dae45d39e","ssdeep":"12288:VIfYQg5MQBx+qehvX02dclkW45BSyOS2r:VIYQg5MQBx+qehvX02dclkW4TeS2r","tlshash":"73b470a1e59814d9b737c21faf84b77c507af724c2024eaaf01baa1c4ac579505e3f2d","first_seen":"2026-01-04T13:01:17.845072Z","last_seen":"2026-01-04T13:01:17.845072Z","times_seen":1,"resource_available":false,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":666,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.ohmy.bid/cm?ssp=sape\u0026redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D","fqdn":"match.ohmy.bid","domain":"ohmy.bid","tld":"bid"},"ip":{"addr":"37.0.127.202","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ohmy.bid","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 16:38:42 GMT","end":"Wed, 25 Mar 2026 16:38:41 GMT"},"fingerprint":{"sha1":"D4:6E:F1:AE:1C:23:FA:F0:98:EB:9B:60:CD:EA:61:20:C9:2E:6D:7A","sha256":"8C:A4:1E:8E:41:49:E9:8E:F5:EC:DC:B1:15:12:F0:04:D5:DE:70:68:50:50:47:95:B6:AD:6F:87:87:8E:29:63"}}},"request":{"raw":"GET /cm?ssp=sape\u0026redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D HTTP/1.1\r\nHost: match.ohmy.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Sun, 04 Jan 2026 13:00:47 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nBidder: bid-16 1.2265.7b30aa11\r\nLocation: https://mc.acint.net/match?dp=217\u0026euid=cca0b6da-2fa9-40ba-a35c-e4379cdebf03\r\nSet-Cookie: uid=cca0b6da-2fa9-40ba-a35c-e4379cdebf03.695a647f.b33e62231195c2f8; domain=.ohmy.bid; path=/; expires=Tue, 03-Feb-2026 13:00:47 GMT; SameSite=None; Secure;\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":27,"connect":59,"send":0,"wait":58,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.bumlam.com/?src=sap1\u0026s_data=CAIQARj_yOnKBmIgMDkwMDAwN0Y3RjY0NUE2OUIzMEU2MDA2MDJBMUM1ODCiARBjX1as6W0R8IbgACWQwGR8","fqdn":"sync.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.160","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 15:01:44 GMT","end":"Thu, 19 Mar 2026 15:01:43 GMT"},"fingerprint":{"sha1":"73:09:47:20:FC:A8:0D:DC:79:F0:08:58:30:EF:F6:AE:72:A0:E1:0B","sha256":"73:92:7B:67:F8:0C:85:9F:42:64:89:B1:B4:BA:C5:BB:D0:C1:72:38:91:59:BA:0B:54:55:C0:4E:84:7F:12:34"}}},"request":{"raw":"GET /?src=sap1\u0026s_data=CAIQARj_yOnKBmIgMDkwMDAwN0Y3RjY0NUE2OUIzMEU2MDA2MDJBMUM1ODCiARBjX1as6W0R8IbgACWQwGR8 HTTP/1.1\r\nHost: sync.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: suuid3=IiQ2MzVmNTZhYy1lOTZkLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 04 Jan 2026 13:00:47 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: suuid3=IiQ2MzVmNTZhYy1lOTZkLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Sat, 30 Dec 2045 13:00:47 GMT; Domain=bumlam.com; SameSite=None; Secure\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nCache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":271,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/rmatch?dp=126\u0026euid=7d64a341-1d81-4142-6bf7-e9adc555edc0\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=126\u0026euid=7d64a341-1d81-4142-6bf7-e9adc555edc0\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126\u0026dp=14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nset-cookie: cSyncDp14v4=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.al-adtech.com/api/sync/sape","fqdn":"ssp.al-adtech.com","domain":"al-adtech.com","tld":"com"},"ip":{"addr":"45.139.25.121","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.al-adtech.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 07:19:40 GMT","end":"Sun, 18 Jan 2026 07:19:39 GMT"},"fingerprint":{"sha1":"49:E7:E6:61:8C:94:61:60:5D:BD:36:D3:9F:62:39:4D:B0:9E:4F:32","sha256":"5E:4B:55:76:B2:4F:F0:62:A1:AB:66:B8:93:41:28:AD:E7:86:98:99:13:64:E8:01:12:8A:4F:8C:A1:D6:21:97"}}},"request":{"raw":"GET /api/sync/sape HTTP/1.1\r\nHost: ssp.al-adtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.20.1\r\nDate: Sun, 04 Jan 2026 13:00:47 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Credentials: true\r\nLocation: https://mc.acint.net/rmatch?dp=261\u0026euid=023d9f74-3707-4e84-abaf-44f76a2482e5\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D261\r\nSet-Cookie: afp_cookie=gAAAAABpWmR_qgYGykAB4Jtt_8e-n7_QjJlc-LGw7R3kdDcSb8ohOBlZ7aZ5s8pta4KSweu1wNmUmW8UqeHbYK8zIh7G9qXKRHKzdjoVcnFqiGVgZZYhkxGmthUaLp7P3cuCjKJnDhux54u18xUzoNeNCG8pQ0uU0BgzfLXfcjZOoYYsvOCevnE1LMHvggHJpYSdibGI26D2XyeXjKyZ0ikwFKfgvyzvcw==$; expires=Wed, 04 Feb 2026 13:00:47 GMT; path=/; secure; SameSite=None\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":19,"dns":12,"connect":53,"send":0,"wait":53,"receive":0,"ssl":311},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.bidster.net/sync/75b31511-b167-4007-830c-56630c3c6617?id=0900007F7F645A69B30E600602A1C580\u0026redirect=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D385%26euid%3D%7Bid%7D","fqdn":"ssp.bidster.net","domain":"bidster.net","tld":"net"},"ip":{"addr":"87.228.58.107","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ssp.bidster.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:21:55 GMT","end":"Fri, 20 Feb 2026 19:21:54 GMT"},"fingerprint":{"sha1":"BC:CD:E5:41:60:B2:62:54:EC:C0:2A:0F:26:B9:9F:A7:E3:9A:8B:1A","sha256":"6A:5E:5C:25:8D:31:5E:BB:CD:E8:CD:48:AA:F4:B3:AC:F8:77:F3:09:D1:90:1E:81:55:DC:53:76:61:AC:0F:02"}}},"request":{"raw":"GET /sync/75b31511-b167-4007-830c-56630c3c6617?id=0900007F7F645A69B30E600602A1C580\u0026redirect=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D385%26euid%3D%7Bid%7D HTTP/1.1\r\nHost: ssp.bidster.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-length: 0\r\nlocation: https://mc.acint.net/match?dp=385\u0026euid=679c76c8f8d60c6042438\r\nset-cookie: uid=679c76c8f8d60c6042438; Max-Age=34560000; Domain=.bidster.net; Path=/; Expires=Sun, 04 Jan 2026 22:36:48 GMT; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":780,"timings":{"blocked":177,"dns":5,"connect":20,"send":0,"wait":146,"receive":0,"ssl":432},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sp.linkssp.ru/cm?key=edc11c69abfc708136ed44d548263e69\u0026location=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D394%26euid%3D%7Buid%7D%0A","fqdn":"sp.linkssp.ru","domain":"linkssp.ru","tld":"ru"},"ip":{"addr":"37.48.253.168","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sp.linkssp.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 10:39:31 GMT","end":"Thu, 05 Feb 2026 10:39:30 GMT"},"fingerprint":{"sha1":"F1:5A:EB:09:0F:F6:AB:E3:F8:71:55:93:C6:AE:BA:DA:75:94:BE:FD","sha256":"B5:AE:05:DF:F6:07:87:F4:AC:B7:24:E7:72:43:7A:3D:64:AD:DF:4F:17:F7:29:3E:BE:B9:08:55:D7:42:5B:E2"}}},"request":{"raw":"GET /cm?key=edc11c69abfc708136ed44d548263e69\u0026location=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D394%26euid%3D%7Buid%7D%0A HTTP/1.1\r\nHost: sp.linkssp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Sun, 04 Jan 2026 13:00:48 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nBidder: bid-04 1.384.ef52084\r\nLocation: https://mc.acint.net/match?dp=394\u0026euid=b7e0f8d1-49e6-46e3-ad82-8fc43f404849\r\nSet-Cookie: uid=b7e0f8d1-49e6-46e3-ad82-8fc43f404849.695a6480.b0e3bd71c56d795a; domain=.linkssp.ru; path=/; expires=Tue, 03-Feb-2026 13:00:48 GMT; SameSite=None; Secure;\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":757,"timings":{"blocked":198,"dns":0,"connect":28,"send":0,"wait":42,"receive":1,"ssl":483},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upibusiness.xyz/wp-content/uploads/2024/11/cropped-doubleclick__13_-removebg-preview.png","fqdn":"upibusiness.xyz","domain":"upibusiness.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upibusiness.xyz/","date":"2026-01-04T13:00:47.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upibusiness.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 02:12:11 GMT","end":"Sat, 14 Mar 2026 03:09:53 GMT"},"fingerprint":{"sha1":"78:A0:7F:17:3D:D2:0E:4C:DA:29:E0:1B:2B:4D:32:C7:76:84:9C:67","sha256":"DE:0F:BA:EF:41:B1:84:44:5A:EE:19:A5:35:79:FF:21:03:E4:69:C5:76:1D:D8:A6:77:DB:28:28:7E:4A:34:DE"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/cropped-doubleclick__13_-removebg-preview.png HTTP/1.1\r\nHost: upibusiness.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upibusiness.xyz/\r\nCookie: fid=e3a54d22-7e1e-44dc-886c-50f9117dfe4c; _ac_oid=52c23a0593a416c46c93b04c0a432175%3A1767535247531\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 15530\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 04 Jan 2026 13:05:46 GMT\r\nlast-modified: Fri, 22 Nov 2024 06:58:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r71JioDCzug9UDPqIovqI8wfi9srFF%2BrCP4%2BD5MtKnR1mO9lfLbQVkaCQIudpT2nMq8dHRvBS8MoYEhSagyL8nEtc%2FzgUXwlwkqtEyv%2BxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8aebbdbd431525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15530,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 163 x 75, 8-bit/color RGBA, non-interlaced","md5":"9caf7b7aabd0ebddb532a882a1686af7","sha1":"a1fd84c22a86e949d1af74223dde263a437ae1ad","sha256":"c4d739c82bb2cf2f49e7a5b28fdc6d0c2b0e70a04ea13d80ac6e04202561aa0b","sha512":"c7072558286efe5a22c42c09017b981316b6abda49091b0992211f7032b6b87d22fce44b75e8d93fa9db710df7d1a6a480bfba22ea873db23eb1d819a0e35f81","ssdeep":"384:aJFNxd43Sq/6dnyDg9g0j/17v/voLtfsZieC8:aJxd43N8nyG5EGge1","tlshash":"5d62e0376d80acb49b6db2dc639100610cddaa787a905adc22f1dd4a6b58951cfd02d1","first_seen":"2026-01-04T13:01:17.8462Z","last_seen":"2026-01-04T13:01:17.8462Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pix.bumlam.com/sync/sape/sync_ok?guid=635f56ac-e96d-11f0-86e0-002590c0647c","fqdn":"pix.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.3","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 15:01:44 GMT","end":"Thu, 19 Mar 2026 15:01:43 GMT"},"fingerprint":{"sha1":"73:09:47:20:FC:A8:0D:DC:79:F0:08:58:30:EF:F6:AE:72:A0:E1:0B","sha256":"73:92:7B:67:F8:0C:85:9F:42:64:89:B1:B4:BA:C5:BB:D0:C1:72:38:91:59:BA:0B:54:55:C0:4E:84:7F:12:34"}}},"request":{"raw":"GET /sync/sape/sync_ok?guid=635f56ac-e96d-11f0-86e0-002590c0647c HTTP/1.1\r\nHost: pix.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: suuid3=IiQ2MzVmNTZhYy1lOTZkLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Sun, 04 Jan 2026 13:00:48 GMT\r\nContent-Type: image/gif\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://www.acint.net\r\nAccess-Control-Allow-Credentials: true\r\nTiming-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0, proxy-revalidate, s-maxage=0\r\nPragma: no-cache\r\nExpires: 05-Jun-2005 22:00:00 GMT\r\nX-Xss-Protection: 0\r\nP3P: policyref=\"https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml\", CP=\"CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nLocation: https://635f56ac-e96d-11f0-86e0-002590c0647c.n4.sync.bumlam.com/?src=sape\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adspend.space/check?uid=0900007F7F645A69B30E600602A1C580\u0026ssp=sape","fqdn":"sync.adspend.space","domain":"adspend.space","tld":"space"},"ip":{"addr":"5.189.234.227","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adspend.space","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Oct 2025 12:52:42 GMT","end":"Mon, 26 Jan 2026 12:52:41 GMT"},"fingerprint":{"sha1":"AC:B3:38:66:C2:FC:35:EC:DA:72:49:D5:D9:BF:BD:DF:99:F7:6D:B4","sha256":"30:85:8C:F6:1D:73:6D:12:AE:79:49:D8:B6:3A:64:D8:38:8D:53:42:DC:FA:CD:0E:44:44:C9:0C:E6:4A:08:04"}}},"request":{"raw":"GET /check?uid=0900007F7F645A69B30E600602A1C580\u0026ssp=sape HTTP/1.1\r\nHost: sync.adspend.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: as-user=48ac1322-770d-4d33-b466-32a7130ce0e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.26.2\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 232\r\nlocation: https://x01.aidata.io/0.gif?pid=6472613\u0026id=48ac1322-770d-4d33-b466-32a7130ce0e7\u0026dest=https%3A%2F%2Fprodmp.ru%2Fadspend-sync.gif%3Fdsp_provider_id%3D2%26uid%3D48ac1322-770d-4d33-b466-32a7130ce0e7%26r%3D\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.26.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D14","fqdn":"ssp-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.186","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sape.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Dec 2025 23:36:44 GMT","end":"Sat, 07 Mar 2026 23:36:43 GMT"},"fingerprint":{"sha1":"3D:9F:9C:85:A9:AB:7C:9C:83:0D:C2:B6:55:54:6F:89:BB:7F:7F:EE","sha256":"49:D9:BD:BD:C8:71:CC:CD:39:05:E4:44:2E:9E:54:03:9D:A8:07:B3:9E:E4:4E:FD:7A:38:89:6D:8A:12:EA:15"}}},"request":{"raw":"GET /rmatch/?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D14 HTTP/1.1\r\nHost: ssp-rtb.sape.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: https://acint.net/rmatch?dp=14\u0026euid=2004420A7F645A69250057B802FFED0C\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nset-cookie: sspuid=CkIEIGlaZH+4VwAlDO3/ApFw2E557Cr5kZpvMmTh1l6hlfWa; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":357,"timings":{"blocked":147,"dns":53,"connect":30,"send":0,"wait":32,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs.agency2.ru/p?ssp=sp\u0026uid=0900007F7F645A69B30E600602A1C580","fqdn":"cs.agency2.ru","domain":"agency2.ru","tld":"ru"},"ip":{"addr":"88.212.234.238","port":443,"asn":39134,"as":"Edinaya Set Limited Liability Company","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.agency2.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 08:47:09 GMT","end":"Sun, 13 Sep 2026 08:47:08 GMT"},"fingerprint":{"sha1":"F4:53:6B:6B:EF:0D:F1:45:1E:8B:12:B7:51:88:E4:EB:78:EA:9A:8B","sha256":"B3:B9:DF:C8:91:E7:FA:77:EA:87:6A:FF:93:64:2F:02:53:8D:5C:87:80:F7:EA:F9:DE:2F:E2:5C:11:04:9F:3A"}}},"request":{"raw":"GET /p?ssp=sp\u0026uid=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: cs.agency2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 04 Jan 2026 13:00:47 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nServer: fasthttp\r\nCache-Control: no-store, no-cache, must-revalidate\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nLocation: https://www.acint.net/match?dp=186\u0026euid=b98281af-5fe8-4708-8a81-16dde89941b7\r\nSet-Cookie: uuid=b98281af-5fe8-4708-8a81-16dde89941b7; expires=Sat, 26 Dec 2026 13:00:47 GMT; domain=agency2.ru; path=/; secure; SameSite=None\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT\r\nX-Host: 23.105.255.196\r\nContent-type: text/xml\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":2,"connect":50,"send":0,"wait":41,"receive":0,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.dsp.onetarget.ru/sape/pixel?id=0900007F7F645A69B30E600602A1C580","fqdn":"pixel.dsp.onetarget.ru","domain":"onetarget.ru","tld":"ru"},"ip":{"addr":"130.193.53.230","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixel.dsp.onetarget.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:14:20 GMT","end":"Sat, 07 Feb 2026 23:14:19 GMT"},"fingerprint":{"sha1":"5E:A1:72:7E:72:04:53:FC:FF:28:99:DD:EA:11:E7:49:38:B5:24:85","sha256":"2C:03:1F:EA:22:EA:61:57:9A:AB:31:BD:B5:B8:FD:6C:A5:24:D4:F6:BB:D2:20:24:1D:29:F1:F9:3C:F2:DF:D3"}}},"request":{"raw":"GET /sape/pixel?id=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: pixel.dsp.onetarget.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-length: 0\r\nlocation: https://x01.aidata.io/0.gif?pid=5813217\u0026id=c726c3f1-bf5b-4021-9f29-4dd9b9c4098c\r\nset-cookie: USER_ID=c726c3f1-bf5b-4021-9f29-4dd9b9c4098c;max-age=2147483647;Secure;HttpOnly;SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":65,"dns":5,"connect":42,"send":0,"wait":44,"receive":0,"ssl":286},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match?dp=385\u0026euid=679c76c8f8d60c6042438","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=385\u0026euid=679c76c8f8d60c6042438 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647; cSyncDp14v4=1767531647; cSyncDp7v3=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T02:32:17.036778Z","times_seen":326515,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match?dp=366\u0026euid=VUCgsLqvJbsDUxT","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=366\u0026euid=VUCgsLqvJbsDUxT HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647; cSyncDp14v4=1767531647; cSyncDp7v3=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T02:32:17.036778Z","times_seen":326515,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/hit/?v=0.7.1\u0026uid=31f145d0-cf24-4e7e-931b-1d8a4d7f0135\u0026dp=10\u0026tz=%2B00%3A00\u0026nc=364785\u0026u=https%3A%2F%2Fupibusiness.xyz%2F\u0026r=\u0026rs=1280x1024\u0026t=UPB\u0026oE=1\u0026oP=1\u0026dT=2026-01-04T13%3A00%3A47.237\u0026fu=e3a54d22-7e1e-44dc-886c-50f9117dfe4c","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upibusiness.xyz/","date":"2026-01-04T13:00:47.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /hit/?v=0.7.1\u0026uid=31f145d0-cf24-4e7e-931b-1d8a4d7f0135\u0026dp=10\u0026tz=%2B00%3A00\u0026nc=364785\u0026u=https%3A%2F%2Fupibusiness.xyz%2F\u0026r=\u0026rs=1280x1024\u0026t=UPB\u0026oE=1\u0026oP=1\u0026dT=2026-01-04T13%3A00%3A47.237\u0026fu=e3a54d22-7e1e-44dc-886c-50f9117dfe4c HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upibusiness.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nset-cookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T02:32:17.036778Z","times_seen":326515,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-statistics.dsp.nt.technology/api/cookie-sync/eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJSVEIgU2FwZV8xNzM4MDUyODgwODQ3In0.rWWFhvjxIbuujG1GTFwQklSMJiKgptBwYzz4p8BSesmEm5CqjbMhkVs5mVteVVlfMbT4wiTf22YGI6HFl8Snrw/sync?sspUserId=0900007F7F645A69B30E600602A1C580\u0026r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D368%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D368","fqdn":"ssp-statistics.dsp.nt.technology","domain":"nt.technology","tld":"technology"},"ip":{"addr":"54.228.143.170","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsp.nt.technology","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Thu, 14 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B8:F8:FC:4E:74:F8:92:8E:25:3D:67:9F:86:DC:9C:44:60:FB:9E:EC","sha256":"05:1C:13:14:4D:C3:00:3F:28:90:AD:59:1E:DF:BC:A6:09:D4:AE:24:83:25:90:22:9E:75:14:2F:59:C5:66:9A"}}},"request":{"raw":"GET /api/cookie-sync/eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJSVEIgU2FwZV8xNzM4MDUyODgwODQ3In0.rWWFhvjxIbuujG1GTFwQklSMJiKgptBwYzz4p8BSesmEm5CqjbMhkVs5mVteVVlfMbT4wiTf22YGI6HFl8Snrw/sync?sspUserId=0900007F7F645A69B30E600602A1C580\u0026r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D368%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D368 HTTP/1.1\r\nHost: ssp-statistics.dsp.nt.technology\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-length: 0\r\nlocation: https://acint.net/rmatch?dp=368\u0026euid=NT_2_0900007F7F645A69B30E600602A1C580_3292794298900163_qDXqGp\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D368\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1 ; mode=block\r\nreferrer-policy: no-referrer\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":781,"timings":{"blocked":124,"dns":1,"connect":43,"send":0,"wait":46,"receive":0,"ssl":507},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/rmatch?dp=95\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95\u0026euid=KKFKBKAO","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=95\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95\u0026euid=KKFKBKAO HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D95\u0026dp=14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nset-cookie: cSyncDp14v4=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kimberlite.io/rtb/sync/sape2?u=0900007F7F645A69B30E600602A1C580","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.91","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 03 Mar 2025 10:28:30 GMT","end":"Sat, 04 Apr 2026 10:28:29 GMT"},"fingerprint":{"sha1":"D5:F7:CA:61:DC:40:4D:B7:43:BC:F1:6F:13:3A:45:A0:D0:53:09:FA","sha256":"BD:79:98:BE:D4:24:4A:51:5B:6D:A8:A1:58:2B:4E:1D:6B:90:66:40:1F:2C:E3:4A:C4:9F:7E:A3:A2:F6:79:12"}}},"request":{"raw":"GET /rtb/sync/sape2?u=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx\r\nDate: Sun, 04 Jan 2026 13:00:48 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nlocation: /rtb/sync/sape2?u=0900007F7F645A69B30E600602A1C580\u0026rc=1\r\nset-cookie: u=aVpkgDn5dtg~enE1Tp1dxfeidS3eZU923m9BWGo; path=/; max-age=7776000; samesite=none; httponly; secure\r\nreferrer-policy: no-referrer\r\nserver-timing: app;srv=s8;dur=0.0002\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":1273,"timings":{"blocked":25,"dns":11,"connect":64,"send":0,"wait":723,"receive":0,"ssl":442},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14","fqdn":"ssp-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.186","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sape.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Dec 2025 23:36:44 GMT","end":"Sat, 07 Mar 2026 23:36:43 GMT"},"fingerprint":{"sha1":"3D:9F:9C:85:A9:AB:7C:9C:83:0D:C2:B6:55:54:6F:89:BB:7F:7F:EE","sha256":"49:D9:BD:BD:C8:71:CC:CD:39:05:E4:44:2E:9E:54:03:9D:A8:07:B3:9E:E4:4E:FD:7A:38:89:6D:8A:12:EA:15"}}},"request":{"raw":"GET /rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14 HTTP/1.1\r\nHost: ssp-rtb.sape.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sspuid=CkIEIGlaZH+4VwAlDO3/ApFw2E557Cr5kZpvMmTh1l6hlfWa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: https://acint.net/match?dp=14\u0026euid=2004420A7F645A69250057B802FFED0C\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/aci.js","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upibusiness.xyz/","date":"2026-01-04T13:00:47.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /aci.js HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upibusiness.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 8799\r\nlast-modified: Thu, 17 Oct 2024 09:42:59 GMT\r\netag: \"6710dc23-225f\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 05 Jan 2026 01:00:47 GMT\r\ncache-control: max-age=43200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31372,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (31372), with no line terminators","md5":"20f0381069e78a636d53b3d505e967c7","sha1":"800464b5f1400a923482d4298b472e17cda20737","sha256":"7b2d18d3dc9861604cbbde63dd9218e12a6cac1a06f52b877eddf61f9f7c3b37","sha512":"5aa6d98aca4d9881d5bf2c8dd71ff3d35e534a09ee749bf248c3d6f838f240f0d77edf06f8f2eae1b7a3797d9d447fe2da922395243f22547a13c4b6ea9981a2","ssdeep":"768:EMNY2uNr6tm67+DVRhNk6L0Wbha0XByPcf0:EMN/uNWo67+DLhNZaMByks","tlshash":"1ce2f98a7191f47306d3a179c12f050bf136696620e8d0e4f536dce0aeb858e6577f3a","first_seen":"2024-10-20T11:06:54.910201Z","last_seen":"2026-01-29T05:23:48.922533Z","times_seen":4303,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":97,"dns":27,"connect":28,"send":0,"wait":26,"receive":25,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upibusiness.xyz/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"upibusiness.xyz","domain":"upibusiness.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upibusiness.xyz/","date":"2026-01-04T13:00:47.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upibusiness.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 02:12:11 GMT","end":"Sat, 14 Mar 2026 03:09:53 GMT"},"fingerprint":{"sha1":"78:A0:7F:17:3D:D2:0E:4C:DA:29:E0:1B:2B:4D:32:C7:76:84:9C:67","sha256":"DE:0F:BA:EF:41:B1:84:44:5A:EE:19:A5:35:79:FF:21:03:E4:69:C5:76:1D:D8:A6:77:DB:28:28:7E:4A:34:DE"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: upibusiness.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upibusiness.xyz/\r\nCookie: fid=e3a54d22-7e1e-44dc-886c-50f9117dfe4c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4949\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 04 Jan 2026 13:05:47 GMT\r\nlast-modified: Wed, 03 Dec 2025 03:11:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C9%2Bx1G%2BUl9nWrGwi1bjY8K0qDyq0jlH7bRuFq4Ju3s985X1xqyaBVvAgS9ChHCGK5%2FIFq411L%2FNSofwJ5UZPN9dm9195VwFzxxNXZuf%2BBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8aebbb4e121525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-04T02:32:18.397133Z","times_seen":130924,"resource_available":true,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.bumlam.com/?src=sap1\u0026uid=0900007F7F645A69B30E600602A1C580","fqdn":"sync.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.160","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 15:01:44 GMT","end":"Thu, 19 Mar 2026 15:01:43 GMT"},"fingerprint":{"sha1":"73:09:47:20:FC:A8:0D:DC:79:F0:08:58:30:EF:F6:AE:72:A0:E1:0B","sha256":"73:92:7B:67:F8:0C:85:9F:42:64:89:B1:B4:BA:C5:BB:D0:C1:72:38:91:59:BA:0B:54:55:C0:4E:84:7F:12:34"}}},"request":{"raw":"GET /?src=sap1\u0026uid=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: sync.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 04 Jan 2026 13:00:47 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: suuid3=IiQ2MzVmNTZhYy1lOTZkLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Sat, 30 Dec 2045 13:00:47 GMT; Domain=bumlam.com; SameSite=None; Secure\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nLocation: //sync.bumlam.com/?src=sap1\u0026s_data=CAIQARj_yOnKBmIgMDkwMDAwN0Y3RjY0NUE2OUIzMEU2MDA2MDJBMUM1ODCiARBjX1as6W0R8IbgACWQwGR8\r\nETag: 635f56ac-e96d-11f0-86e0-002590c0647c\r\nCache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":13,"connect":20,"send":0,"wait":24,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id.adx.bid/match/sape?eid=0900007F7F645A69B30E600602A1C580","fqdn":"id.adx.bid","domain":"adx.bid","tld":"bid"},"ip":{"addr":"104.26.0.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adx.bid","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 20:44:08 GMT","end":"Tue, 10 Feb 2026 21:43:30 GMT"},"fingerprint":{"sha1":"CA:0B:25:51:E0:58:1F:6F:2B:D9:A7:61:0F:2C:11:43:C6:F3:1A:E3","sha256":"EF:58:73:9B:AA:B3:85:BA:14:6F:51:19:2C:A3:B6:EF:27:B5:C5:A0:1A:23:97:91:E8:05:BB:EE:6C:9D:A4:C6"}}},"request":{"raw":"GET /match/sape?eid=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: id.adx.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\nserver: cloudflare\r\nx-error: not_active\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fbEZwgE3lUpG8QVMv%2BxapzY%2BMjGXnZCrYProAVzMVLO6E0bvO2brKVM4lYr%2BfYhgkeQ3rnm7JSmSjJRqUVUuyjaN9tIGGFw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8aebc25ff7569b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":770,"timings":{"blocked":292,"dns":6,"connect":1,"send":0,"wait":31,"receive":0,"ssl":437},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ck.silvermob.com/sync?pid=533\u0026uid=0900007F7F645A69B30E600602A1C580\u0026rd=1\u0026r=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D274%26euid%3D%5BUSER_ID%5D","fqdn":"ck.silvermob.com","domain":"silvermob.com","tld":"com"},"ip":{"addr":"212.95.41.187","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.silvermob.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:3C:57:8B:31:3A:8D:1D:BD:2E:AA:97:E5:85:62:E9:6E:FF:0D:27","sha256":"3F:EB:62:39:C6:44:25:10:53:E0:44:4B:F1:5C:3B:44:D0:D1:9F:17:E1:F5:ED:1D:33:6D:A7:65:3C:9A:91:BD"}}},"request":{"raw":"GET /sync?pid=533\u0026uid=0900007F7F645A69B30E600602A1C580\u0026rd=1\u0026r=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D274%26euid%3D%5BUSER_ID%5D HTTP/1.1\r\nHost: ck.silvermob.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 04 Jan 2026 13:00:48 GMT\r\nConnection: close\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Cookie\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":598,"timings":{"blocked":59,"dns":5,"connect":36,"send":0,"wait":27,"receive":0,"ssl":463},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dm-eu.hybrid.ai/match?id=106\u0026vid=0900007F7F645A69B30E600602A1C580","fqdn":"dm-eu.hybrid.ai","domain":"hybrid.ai","tld":"ai"},"ip":{"addr":"37.230.131.22","port":443,"asn":200197,"as":"Hybrid Adtech Sp.z.o.o.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hybrid.ai","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 22 Sep 2025 00:00:00 GMT","end":"Sun, 04 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:21:9E:FA:EF:FF:FF:F2:8D:68:A8:F9:EB:ED:53:32:CC:17:9B:ED","sha256":"C9:20:9A:53:1E:FA:35:C7:29:64:1F:C3:7B:1E:34:73:C8:15:87:43:EA:35:06:B8:8D:86:E5:11:19:2A:60:FC"}}},"request":{"raw":"GET /match?id=106\u0026vid=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: dm-eu.hybrid.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 04 Jan 2026 12:55:27 GMT\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nexpires: -1\r\np3p: CP=\"NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC\"\r\nx-mode: 5011\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://www.acint.net\r\naccess-control-allow-credentials: true\r\nserver: Hybrid Web Server\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":11,"dns":1,"connect":22,"send":0,"wait":25,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cm.pxltag.com/rsync?platform_id=aed2070256c34c4c8098476a32bf5b32\u0026sync_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D337%26euid%3D%7Binner_id%7D","fqdn":"cm.pxltag.com","domain":"pxltag.com","tld":"com"},"ip":{"addr":"87.228.57.56","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pxltag.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 06:13:44 GMT","end":"Tue, 10 Mar 2026 06:13:43 GMT"},"fingerprint":{"sha1":"E4:D2:DA:16:48:1F:14:8A:3B:A2:4F:3C:9D:D6:D9:1C:49:B3:5A:0D","sha256":"A5:05:F3:6D:C3:71:05:C2:64:63:4F:3B:F6:68:00:58:3E:45:9B:8A:A8:18:B8:F8:1A:9D:AC:CC:FC:DB:1F:2F"}}},"request":{"raw":"GET /rsync?platform_id=aed2070256c34c4c8098476a32bf5b32\u0026sync_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D337%26euid%3D%7Binner_id%7D HTTP/1.1\r\nHost: cm.pxltag.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.20.1\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-length: 0\r\nlocation: https://acint.net/match?dp=337\u0026euid=v5jIE6GG0\r\nset-cookie: smi_uid=v5jIE6GG0; max-age=31536000; domain=.pxltag.com; path=/; HttpOnly; secure; SameSite=None\r\nstrict-transport-security: max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":22,"connect":41,"send":0,"wait":74,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.dvgroup.com/match/sape?id=0900007F7F645A69B30E600602A1C580","fqdn":"sync.dvgroup.com","domain":"dvgroup.com","tld":"com"},"ip":{"addr":"82.148.21.217","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtb.dvgroup.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 11:35:38 GMT","end":"Tue, 31 Mar 2026 11:35:37 GMT"},"fingerprint":{"sha1":"B9:81:19:95:DC:77:A8:27:ED:4D:9C:54:7E:91:76:6B:53:70:10:00","sha256":"E2:45:47:93:69:11:E4:6C:55:F9:83:58:1F:87:24:08:CC:44:35:30:A5:EC:6B:6A:BF:D4:09:FC:C9:AB:B8:6A"}}},"request":{"raw":"GET /match/sape?id=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: sync.dvgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 13:00:51 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-04T01:16:08.66985Z","times_seen":31103,"resource_available":true,"data":null}},"time_used":3727,"timings":{"blocked":233,"dns":0,"connect":3303,"send":0,"wait":151,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/match?dp=14\u0026euid=2004420A7F645A69250057B802FFED0C","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=14\u0026euid=2004420A7F645A69250057B802FFED0C HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647; cSyncDp14v4=1767531647; cSyncDp7v3=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T02:32:17.036778Z","times_seen":326515,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/match?dp=14\u0026euid=2004420A7F645A69250057B802FFED0C","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=14\u0026euid=2004420A7F645A69250057B802FFED0C HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647; cSyncDp14v4=1767531647; cSyncDp7v3=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T02:32:17.036778Z","times_seen":326515,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=313","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /cmatch?dp=313 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647; cSyncDp14v4=1767531647; cSyncDp7v3=1767531647; cSyncDp241v2=1767531648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T02:32:17.036778Z","times_seen":326515,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/mc/?dp=10","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://upibusiness.xyz/","date":"2026-01-04T13:00:47.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /mc/?dp=10 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upibusiness.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: /mc/?dp=10\u0026tc=1\r\nset-cookie: test_cookie=CheckForPermission; path=/; Secure; SameSite=None; domain=.acint.net; expires=Sun, 04-Jan-26 13:10:47 GMT\naid=fwAACmlaZH8FuQ6seX+IArih+ItJTgESPLq0G9WlgAxRZm4K; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10140,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.dmp.otm-r.com/match/sape?id=0900007F7F645A69B30E600602A1C580\u0026otcm_check=1767531647","fqdn":"sync.dmp.otm-r.com","domain":"otm-r.com","tld":"com"},"ip":{"addr":"194.55.244.180","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync.dmp.otm-r.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 06:06:37 GMT","end":"Tue, 10 Mar 2026 06:06:36 GMT"},"fingerprint":{"sha1":"C0:50:09:84:7A:D9:92:52:FE:BD:EA:94:B3:65:D6:83:2C:B3:52:8A","sha256":"6A:F5:31:88:A3:2A:6E:A1:F0:48:DA:7C:7D:A2:DD:EF:82:C2:71:12:9E:54:D7:9E:4F:C0:88:FA:C6:F9:E3:B3"}}},"request":{"raw":"GET /match/sape?id=0900007F7F645A69B30E600602A1C580\u0026otcm_check=1767531647 HTTP/1.1\r\nHost: sync.dmp.otm-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: mpid=Njk1YTY0N2YwNDQzODM3NQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.27.4\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nlocation: https://www.acint.net/match?dp=68\u0026euid=Njk1YTY0N2YwNDQzODM3NQ%3D%3D\r\nset-cookie: mpid=Njk1YTY0N2YwNDQzODM3NQ==; max-age=31536000; domain=otm-r.com; path=/; secure; SameSite=None; Partitioned\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.27.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adiam.tech/sync?ssp=29","fqdn":"a.adiam.tech","domain":"adiam.tech","tld":"tech"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adiam.tech","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 13:36:13 GMT","end":"Sun, 15 Mar 2026 14:33:45 GMT"},"fingerprint":{"sha1":"55:AB:2E:8E:B1:CA:24:0F:FB:1D:DB:46:CE:AE:A3:FF:CA:4D:E6:82","sha256":"CA:59:80:58:08:A8:DA:D0:34:C1:52:5B:95:A0:20:A7:1C:ED:5A:8C:F4:A5:38:BD:39:0F:A6:10:30:AC:76:0A"}}},"request":{"raw":"GET /sync?ssp=29 HTTP/1.1\r\nHost: a.adiam.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: preadiam=1; Expires=Tue, 03 Feb 2026 16:00:48 GMT; Domain=.adiam.tech; SameSite=None; Secure; Path=/\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wdyXSr9sfSM7j1dywcia2eOjZCvcG%2B160FComXKlm%2BelcmCS7edXA7%2BS2OA2He1hfzHIB7k%2BMMjGKRmlg7v%2FVhnMvfqBPzQ9D%2F2D4g%3D%3D\"}]}\r\ncf-ray: 9b8aebc0dce30daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":628,"timings":{"blocked":154,"dns":0,"connect":1,"send":0,"wait":113,"receive":0,"ssl":359},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.qtarget.tech/userbind?src=sape\u0026id=0900007F7F645A69B30E600602A1C580","fqdn":"match.qtarget.tech","domain":"qtarget.tech","tld":"tech"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.772Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /userbind?src=sape\u0026id=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: match.qtarget.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.buzzoola.com/cookiesync/redirect?redirect_url=https%3A%2F%2Fkimberlite.io%2Frtb%2Fsync%2Fbuzzoola%3Fu%3D%24%7BUUID%7D%26f%3Dhttps%253A%252F%252Fwww.acint.net%252Frmatch%253Fdp%253D243%2526euid%253DaVpkgDn5dtg%2526r%253Dhttps%25253A%25252F%25252Facint.net%25252Fcmatch%25253Fdp%25253D243%26n%3D1","fqdn":"exchange.buzzoola.com","domain":"buzzoola.com","tld":"com"},"ip":{"addr":"45.138.161.72","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:49.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buzzoola.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:11:29 GMT","end":"Mon, 09 Mar 2026 06:11:28 GMT"},"fingerprint":{"sha1":"6D:1A:28:D1:AB:8D:18:D1:38:1A:55:28:34:A1:03:2A:BC:7A:1C:5A","sha256":"AB:C0:F2:6B:07:6C:D6:89:63:34:97:78:29:CD:C6:D1:2A:75:3D:C0:7C:E0:05:94:11:71:82:6B:67:8C:2D:36"}}},"request":{"raw":"GET /cookiesync/redirect?redirect_url=https%3A%2F%2Fkimberlite.io%2Frtb%2Fsync%2Fbuzzoola%3Fu%3D%24%7BUUID%7D%26f%3Dhttps%253A%252F%252Fwww.acint.net%252Frmatch%253Fdp%253D243%2526euid%253DaVpkgDn5dtg%2526r%253Dhttps%25253A%25252F%25252Facint.net%25252Fcmatch%25253Fdp%25253D243%26n%3D1 HTTP/1.1\r\nHost: exchange.buzzoola.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uuid=7d64a341-1d81-4142-6bf7-e9adc555edc0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 13:00:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 246\r\nlocation: https://kimberlite.io/rtb/sync/buzzoola?u=7d64a341-1d81-4142-6bf7-e9adc555edc0\u0026f=https%3A%2F%2Fwww.acint.net%2Frmatch%3Fdp%3D243%26euid%3DaVpkgDn5dtg%26r%3Dhttps%253A%252F%252Facint.net%252Fcmatch%253Fdp%253D243\u0026n=1\r\nset-cookie: uuid=7d64a341-1d81-4142-6bf7-e9adc555edc0; Path=/; Domain=buzzoola.com; Expires=Tue, 03 Feb 2026 13:00:49 GMT; Max-Age=2592000; Secure; SameSite=None\r\nserverid: TODO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/mc/?dp=10\u0026tc=1","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://upibusiness.xyz/","date":"2026-01-04T13:00:47.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /mc/?dp=10\u0026tc=1 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upibusiness.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: text/html\r\nset-cookie: cSyncDp14v6=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp17v3=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp45v5=1767531647; expires=Mon, 05-Jan-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp53v5=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp553=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp62v4=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp67v5=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp68v3=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp71v2=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp85v2=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp95v4=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp98v3=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp104v3=1767531647; expires=Sun, 18-Jan-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp107v2=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp125v5=1767531647; expires=Mon, 19-Jan-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp126v3=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp129v2=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp136v3=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp148v2=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp149v3=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp151v2=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp251v3=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp186v2=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp217v2=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp226v1=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp239v3=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp243v2=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp260v2=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp244v2=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp248v3=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp261v1=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp264=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp274=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp289v2=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp296v3=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp312v1=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp313v1=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp368v1=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp331v1=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp337v1=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp351v1=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp361v1=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp353v1=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp362v1=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp366v1=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp385v1=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp390v1=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp399v1=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp394v1=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp415v1=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp420v2=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp431=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp433=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp444=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp203v2=1767531647; expires=Mon, 05-Jan-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\ncSyncDp450=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":10140,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (452), with CRLF, LF line terminators","md5":"25edadf4d61a7a7bb1214bafae014a08","sha1":"b7c68d2f772b81593532778393a482578b50d705","sha256":"67255b42489f66f81cb6223fe941f009032370795d51ed1e90b859aaf9f78f7a","sha512":"9c78657a994ac5ad5f230ac28d8c2a2cc821768823a12f69d1bd58396c2278abdde2df23379398e1dc3bd60267191c1ff21ee7718062ee044ba7b91c87e7094d","ssdeep":"192:Df5BB7qZTJ3qvLtBXNqvGfvijyLX/17Xm2v0AMWTv3ZvHCvx0vNbQtovT1vr:Df5BB7qZ13mxBXNmG3MyLPlXmytMC3xL","tlshash":"1c22002389c63fef961ef3c1e54833d85932690776e7188aee2d545732864bee90b4c1","first_seen":"2026-01-04T13:01:17.8494Z","last_seen":"2026-01-04T13:01:17.8494Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.utraff.com/sync?ssp=8\u0026id=0900007F7F645A69B30E600602A1C580","fqdn":"a.utraff.com","domain":"utraff.com","tld":"com"},"ip":{"addr":"213.171.19.174","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utraff.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 04:18:08 GMT","end":"Thu, 12 Mar 2026 04:18:07 GMT"},"fingerprint":{"sha1":"7F:77:C5:6F:57:1F:C2:53:D7:D3:04:93:B1:75:D8:91:AA:38:A0:78","sha256":"B2:CE:C5:75:9F:E8:F2:94:5D:6D:78:3C:9D:ED:55:DC:C8:2F:EA:4F:D2:50:B2:6F:A7:4A:85:A1:5F:4F:C0:14"}}},"request":{"raw":"GET /sync?ssp=8\u0026id=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: a.utraff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0\r\nDate: Sun, 04 Jan 2026 13:00:47 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: preutid=1; Expires=Tue, 03 Feb 2026 16:00:47 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/\npreutid=1; Expires=Tue, 03 Feb 2026 16:00:47 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":434,"timings":{"blocked":156,"dns":24,"connect":41,"send":0,"wait":86,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=14","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /cmatch?dp=14 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://ads.betweendigital.com/match?bidder_id=73\u0026external_user_id=0900007F7F645A69B30E600602A1C580\r\nset-cookie: cSyncDp7v3=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D95\u0026dp=14","fqdn":"ssp-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.186","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sape.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Dec 2025 23:36:44 GMT","end":"Sat, 07 Mar 2026 23:36:43 GMT"},"fingerprint":{"sha1":"3D:9F:9C:85:A9:AB:7C:9C:83:0D:C2:B6:55:54:6F:89:BB:7F:7F:EE","sha256":"49:D9:BD:BD:C8:71:CC:CD:39:05:E4:44:2E:9E:54:03:9D:A8:07:B3:9E:E4:4E:FD:7A:38:89:6D:8A:12:EA:15"}}},"request":{"raw":"GET /rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D95\u0026dp=14 HTTP/1.1\r\nHost: ssp-rtb.sape.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sspuid=CkIEIGlaZH+4VwAlDO3/ApFw2E557Cr5kZpvMmTh1l6hlfWa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: https://acint.net/rmatch?dp=14\u0026euid=2004420A7F645A69250057B802FFED0C\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/rmatch?dp=14\u0026euid=2004420A7F645A69250057B802FFED0C\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=14\u0026euid=2004420A7F645A69250057B802FFED0C\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647; cSyncDp14v4=1767531647; cSyncDp7v3=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=95\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.dsp.solta.io/match/sape?id=0900007F7F645A69B30E600602A1C580","fqdn":"sync.dsp.solta.io","domain":"solta.io","tld":"io"},"ip":{"addr":"217.199.220.72","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dsp.solta.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 04 Aug 2025 11:49:51 GMT","end":"Sat, 05 Sep 2026 11:49:50 GMT"},"fingerprint":{"sha1":"47:08:04:35:5D:1F:29:FE:9D:B8:04:FB:41:AA:98:1C:B3:95:76:78","sha256":"F4:28:D6:EC:60:7B:5B:18:1C:90:EA:96:70:90:94:81:60:02:76:08:87:8B:89:2E:6B:35:EB:89:97:42:D1:75"}}},"request":{"raw":"GET /match/sape?id=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: sync.dsp.solta.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-04T01:16:08.66985Z","times_seen":31103,"resource_available":true,"data":null}},"time_used":645,"timings":{"blocked":-1,"dns":23,"connect":65,"send":0,"wait":63,"receive":0,"ssl":488},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/match?dp=337\u0026euid=v5jIE6GG0","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=337\u0026euid=v5jIE6GG0 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nset-cookie: cSyncDp14v4=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upibusiness.xyz/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"upibusiness.xyz","domain":"upibusiness.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upibusiness.xyz/","date":"2026-01-04T13:00:46.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upibusiness.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 02:12:11 GMT","end":"Sat, 14 Mar 2026 03:09:53 GMT"},"fingerprint":{"sha1":"78:A0:7F:17:3D:D2:0E:4C:DA:29:E0:1B:2B:4D:32:C7:76:84:9C:67","sha256":"DE:0F:BA:EF:41:B1:84:44:5A:EE:19:A5:35:79:FF:21:03:E4:69:C5:76:1D:D8:A6:77:DB:28:28:7E:4A:34:DE"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: upibusiness.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upibusiness.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 13:00:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 29744\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 04 Jan 2026 13:05:46 GMT\r\nlast-modified: Tue, 29 Aug 2023 05:44:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HOVC7pccvYil3uqeJUSDLU%2FUG7WrmBqeAPetx40zd1YEqGPo3q%2FZ0GGsc8j0XYUOA%2Fmvztv9C6JL9xBIKeTN3RWQ3cHG6O3%2Fh9b4h8j3qA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8aebb44f6c1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T02:29:40.605981Z","times_seen":684324,"resource_available":true,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":658,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.buzzoola.com/cookiesync/dsp/sape-banner?uid=0900007F7F645A69B30E600602A1C580\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126","fqdn":"exchange.buzzoola.com","domain":"buzzoola.com","tld":"com"},"ip":{"addr":"45.138.161.72","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buzzoola.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:11:29 GMT","end":"Mon, 09 Mar 2026 06:11:28 GMT"},"fingerprint":{"sha1":"6D:1A:28:D1:AB:8D:18:D1:38:1A:55:28:34:A1:03:2A:BC:7A:1C:5A","sha256":"AB:C0:F2:6B:07:6C:D6:89:63:34:97:78:29:CD:C6:D1:2A:75:3D:C0:7C:E0:05:94:11:71:82:6B:67:8C:2D:36"}}},"request":{"raw":"GET /cookiesync/dsp/sape-banner?uid=0900007F7F645A69B30E600602A1C580\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126 HTTP/1.1\r\nHost: exchange.buzzoola.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 269\r\nlocation: /cookiesync/dsp/sape-banner?set_buzzoola_cookie=t\u0026uid=0900007F7F645A69B30E600602A1C580\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126\r\nset-cookie: uuid=7d64a341-1d81-4142-6bf7-e9adc555edc0; Path=/; Domain=buzzoola.com; Expires=Tue, 03 Feb 2026 13:00:47 GMT; Max-Age=2592000; Secure; SameSite=None\r\nserverid: TODO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":24,"connect":27,"send":0,"wait":31,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.gonet-ads.com/match/sape.js?id=0900007F7F645A69B30E600602A1C580","fqdn":"sync.gonet-ads.com","domain":"gonet-ads.com","tld":"com"},"ip":{"addr":"188.42.104.140","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gonet-ads.com","organization":"Go Mobile Inc"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Jun 2025 00:00:00 GMT","end":"Fri, 19 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:9B:E1:71:D4:17:D5:18:6C:A4:F9:5F:2F:DD:DE:56:8C:CB:EC:5F","sha256":"A2:75:01:34:62:6B:85:83:76:99:89:B4:24:0B:18:DF:F2:6E:B4:35:EE:60:EC:E8:1C:4D:E1:23:9E:07:6B:1D"}}},"request":{"raw":"GET /match/sape.js?id=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: sync.gonet-ads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-04T01:16:08.66985Z","times_seen":31103,"resource_available":true,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":1,"connect":18,"send":0,"wait":65,"receive":0,"ssl":463},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match?dp=217\u0026euid=cca0b6da-2fa9-40ba-a35c-e4379cdebf03","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=217\u0026euid=cca0b6da-2fa9-40ba-a35c-e4379cdebf03 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nset-cookie: cSyncDp14v4=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/match?dp=14\u0026euid=2004420A7F645A69250057B802FFED0C","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=14\u0026euid=2004420A7F645A69250057B802FFED0C HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647; cSyncDp14v4=1767531647; cSyncDp7v3=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T02:32:17.036778Z","times_seen":326515,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/rmatch?dp=261\u0026euid=023d9f74-3707-4e84-abaf-44f76a2482e5\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D261","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=261\u0026euid=023d9f74-3707-4e84-abaf-44f76a2482e5\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D261 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647; cSyncDp14v4=1767531647; cSyncDp7v3=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=261\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=261","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /cmatch?dp=261 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647; cSyncDp14v4=1767531647; cSyncDp7v3=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://match.qtarget.tech/userbind?src=sape\u0026id=0900007F7F645A69B30E600602A1C580\r\nset-cookie: cSyncDp241v2=1767531648; expires=Tue, 03-Feb-26 13:00:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/rmatch?dp=368\u0026euid=NT_2_0900007F7F645A69B30E600602A1C580_3292794298900163_qDXqGp\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D368","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=368\u0026euid=NT_2_0900007F7F645A69B30E600602A1C580_3292794298900163_qDXqGp\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D368 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647; cSyncDp14v4=1767531647; cSyncDp7v3=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=368\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upibusiness.xyz/wp-content/litespeed/js/2003265aa96e9046eb1e2b1d946d8827.js?ver=22ccb","fqdn":"upibusiness.xyz","domain":"upibusiness.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upibusiness.xyz/","date":"2026-01-04T13:00:46.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upibusiness.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 02:12:11 GMT","end":"Sat, 14 Mar 2026 03:09:53 GMT"},"fingerprint":{"sha1":"78:A0:7F:17:3D:D2:0E:4C:DA:29:E0:1B:2B:4D:32:C7:76:84:9C:67","sha256":"DE:0F:BA:EF:41:B1:84:44:5A:EE:19:A5:35:79:FF:21:03:E4:69:C5:76:1D:D8:A6:77:DB:28:28:7E:4A:34:DE"}}},"request":{"raw":"GET /wp-content/litespeed/js/2003265aa96e9046eb1e2b1d946d8827.js?ver=22ccb HTTP/1.1\r\nHost: upibusiness.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upibusiness.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 13:00:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 41768\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 04 Jan 2026 13:05:46 GMT\r\nlast-modified: Tue, 30 Dec 2025 07:08:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lvHsTuc2dWL2U4Lc5uKw9nRL0K3VPM3c3o0aRvMeHigzGicbPIx1KBsOom24hP0WXO2UJ2vH5ssEZpQSSIYygrJ1ceO%2FY%2BRUcw3%2Fr4uSkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8aebb44f791525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":159455,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13478)","md5":"2003265aa96e9046eb1e2b1d946d8827","sha1":"96b0f0e4f9a901d8b74d54ae10171ddebac67435","sha256":"6537ff2cd0eb7689ebc73e4bf89776deb2a2f30d3ead649b26f3d68751a677d7","sha512":"13c9a2e92a8550450f33b211bfa203e791eeaa348e86a77893c81da1d736c8e8d4a909c5cfb8bb75447d84ef067d375697f0247d16f9365b83ed22a3a33b89e1","ssdeep":"1536:0rP7Q+hMJwYjNAfwKSxfz4MJQtlKzIIOvYFv7warfC1TW5gcUXly6YvoNnm9mKmO:0rPU++lNA4KSxfz4MgKzMgFO1viKK","tlshash":"06f31a8cb244767205db21f6903b860fb37769b86906c054b5a8c9ed1a7cc8961f3ff9","first_seen":"2026-01-04T13:01:17.851219Z","last_seen":"2026-01-04T13:01:17.851219Z","times_seen":1,"resource_available":true,"data":null}},"time_used":826,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":672,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.new-programmatic.com/userbind?src=sape\u0026id=0900007F7F645A69B30E600602A1C580","fqdn":"match.new-programmatic.com","domain":"new-programmatic.com","tld":"com"},"ip":{"addr":"217.65.2.150","port":443,"asn":3175,"as":"Citytelecom LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"admanager.geniusgroup.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 09:13:46 GMT","end":"Tue, 03 Mar 2026 09:13:45 GMT"},"fingerprint":{"sha1":"8E:DB:65:4E:B4:C0:6B:8E:F4:21:46:D2:07:19:4B:66:31:CA:47:14","sha256":"B3:2D:0D:52:14:DE:FA:E7:6C:F7:2E:51:97:84:95:E1:45:E6:C5:A5:8F:60:9A:B5:00:B9:83:59:83:32:89:8B"}}},"request":{"raw":"GET /userbind?src=sape\u0026id=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: match.new-programmatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.22.1\r\nDate: Sun, 04 Jan 2026 13:00:47 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":1,"connect":56,"send":0,"wait":65,"receive":0,"ssl":144},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/rmatch?dp=14\u0026euid=2004420A7F645A69250057B802FFED0C\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D14","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=14\u0026euid=2004420A7F645A69250057B802FFED0C\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D14 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":1,"dns":11,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upibusiness.xyz/wp-content/uploads/2024/11/cropped-doubleclick__13_-removebg-preview.png","fqdn":"upibusiness.xyz","domain":"upibusiness.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upibusiness.xyz/","date":"2026-01-04T13:00:46.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upibusiness.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 02:12:11 GMT","end":"Sat, 14 Mar 2026 03:09:53 GMT"},"fingerprint":{"sha1":"78:A0:7F:17:3D:D2:0E:4C:DA:29:E0:1B:2B:4D:32:C7:76:84:9C:67","sha256":"DE:0F:BA:EF:41:B1:84:44:5A:EE:19:A5:35:79:FF:21:03:E4:69:C5:76:1D:D8:A6:77:DB:28:28:7E:4A:34:DE"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/cropped-doubleclick__13_-removebg-preview.png HTTP/1.1\r\nHost: upibusiness.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upibusiness.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 13:00:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 15530\r\ncache-control: public, max-age=14400\r\nexpires: Sun, 04 Jan 2026 13:05:46 GMT\r\nlast-modified: Fri, 22 Nov 2024 06:58:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z2oycG7%2FAzBMWDygXewIVGsEIdE3oDkqncfqmgJ%2F%2F7jZJqm1yFZJZH%2BHqADklu%2Bv%2FTOIAJ9VziIkubbZ8E8fOehgrh8LxuRze8Aiyom4qw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8aebb44f731525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15530,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 163 x 75, 8-bit/color RGBA, non-interlaced","md5":"9caf7b7aabd0ebddb532a882a1686af7","sha1":"a1fd84c22a86e949d1af74223dde263a437ae1ad","sha256":"c4d739c82bb2cf2f49e7a5b28fdc6d0c2b0e70a04ea13d80ac6e04202561aa0b","sha512":"c7072558286efe5a22c42c09017b981316b6abda49091b0992211f7032b6b87d22fce44b75e8d93fa9db710df7d1a6a480bfba22ea873db23eb1d819a0e35f81","ssdeep":"384:aJFNxd43Sq/6dnyDg9g0j/17v/voLtfsZieC8:aJxd43N8nyG5EGge1","tlshash":"5d62e0376d80acb49b6db2dc639100610cddaa787a905adc22f1dd4a6b58951cfd02d1","first_seen":"2026-01-04T13:01:17.8462Z","last_seen":"2026-01-04T13:01:17.8462Z","times_seen":1,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14","fqdn":"ssp-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.186","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sape.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Dec 2025 23:36:44 GMT","end":"Sat, 07 Mar 2026 23:36:43 GMT"},"fingerprint":{"sha1":"3D:9F:9C:85:A9:AB:7C:9C:83:0D:C2:B6:55:54:6F:89:BB:7F:7F:EE","sha256":"49:D9:BD:BD:C8:71:CC:CD:39:05:E4:44:2E:9E:54:03:9D:A8:07:B3:9E:E4:4E:FD:7A:38:89:6D:8A:12:EA:15"}}},"request":{"raw":"GET /rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14 HTTP/1.1\r\nHost: ssp-rtb.sape.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sspuid=CkIEIGlaZH+4VwAlDO3/ApFw2E557Cr5kZpvMmTh1l6hlfWa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: https://acint.net/match?dp=14\u0026euid=2004420A7F645A69250057B802FFED0C\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126\u0026dp=14","fqdn":"ssp-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.186","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sape.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Dec 2025 23:36:44 GMT","end":"Sat, 07 Mar 2026 23:36:43 GMT"},"fingerprint":{"sha1":"3D:9F:9C:85:A9:AB:7C:9C:83:0D:C2:B6:55:54:6F:89:BB:7F:7F:EE","sha256":"49:D9:BD:BD:C8:71:CC:CD:39:05:E4:44:2E:9E:54:03:9D:A8:07:B3:9E:E4:4E:FD:7A:38:89:6D:8A:12:EA:15"}}},"request":{"raw":"GET /rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126\u0026dp=14 HTTP/1.1\r\nHost: ssp-rtb.sape.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sspuid=CkIEIGlaZH+4VwAlDO3/ApFw2E557Cr5kZpvMmTh1l6hlfWa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: https://acint.net/rmatch?dp=14\u0026euid=2004420A7F645A69250057B802FFED0C\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match?dp=394\u0026euid=b7e0f8d1-49e6-46e3-ad82-8fc43f404849","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=394\u0026euid=b7e0f8d1-49e6-46e3-ad82-8fc43f404849 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647; cSyncDp14v4=1767531647; cSyncDp7v3=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T02:32:17.036778Z","times_seen":326515,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upibusiness.xyz/","fqdn":"upibusiness.xyz","domain":"upibusiness.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T13:00:44.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upibusiness.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 02:12:11 GMT","end":"Sat, 14 Mar 2026 03:09:53 GMT"},"fingerprint":{"sha1":"78:A0:7F:17:3D:D2:0E:4C:DA:29:E0:1B:2B:4D:32:C7:76:84:9C:67","sha256":"DE:0F:BA:EF:41:B1:84:44:5A:EE:19:A5:35:79:FF:21:03:E4:69:C5:76:1D:D8:A6:77:DB:28:28:7E:4A:34:DE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: upibusiness.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 13:00:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.1.33\r\nlink: \u003chttps://upibusiness.xyz/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-litespeed-cache-control: public,max-age=300\r\nx-litespeed-tag: 067_PGSRP,067_home,067_URL.9a3f44f2538ced0e6d3732d9c1fe3695,067_H,067_,067_MIN.51818eb1d7dbc920b9c2ce013111c36a.css,067_MIN.2003265aa96e9046eb1e2b1d946d8827.js\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-litespeed-cache: miss\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SGgTwO8fsYL5Eg2czcTRv6MGzxob6Js9sfIigIa48M6V70mzlDIQ7AChXOf8Fb75TNieJrnwjlV0XgElGIqRQaV1T93XJhRW385rogo96A%3D%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b8aebab69735a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":24042,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (8613)","md5":"6259b44c5e1fa73b3f78a91cd1eb3cb3","sha1":"2568a4691aca718ce2a8fcfad1f31bbeeef96b68","sha256":"f24acb21c78c0983fac1f4409a2db4f85f9965d83cb1dbdb16923985922ef891","sha512":"15151e863d1b6a4172160e37d6c8740f8026cdfb3c244d1360ab909218d84046d92734aa7051e5ada72cfa6ed7f2f555d1ad4fca02227c3398813a01b4797442","ssdeep":"384://ncXkWPHMAylU0b0WqvpRTX1mZ2Th8jFv7o2JQ5GHhgC6tHyLE0sl9SR:HcHwb01TX1CFv7o2yggC6tSo0sCR","tlshash":"58b22ab203343477529f67a76489674c936bd78fdfa48afd8298c70853cae844963f06","first_seen":"2026-01-04T13:01:17.852421Z","last_seen":"2026-01-04T13:01:17.852421Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1383,"timings":{"blocked":55,"dns":40,"connect":1,"send":0,"wait":1272,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.videohead.tech/sync?ssp=68","fqdn":"a.videohead.tech","domain":"videohead.tech","tld":"tech"},"ip":{"addr":"213.171.19.230","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"videohead.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 04:18:22 GMT","end":"Mon, 16 Mar 2026 04:18:21 GMT"},"fingerprint":{"sha1":"D4:BD:35:64:FD:0D:B7:42:06:E8:84:8A:76:DD:64:2F:67:69:8B:32","sha256":"01:FF:C8:A9:A2:01:4D:06:C1:B0:03:E1:A4:B2:98:E0:05:D8:DC:56:D2:61:B4:9D:77:78:AB:7E:E4:AF:C4:72"}}},"request":{"raw":"GET /sync?ssp=68 HTTP/1.1\r\nHost: a.videohead.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0\r\nDate: Sun, 04 Jan 2026 13:00:48 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: prevhead=1; Expires=Tue, 03 Feb 2026 16:00:48 GMT; Domain=.videohead.tech; SameSite=None; Secure; Path=/\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":748,"timings":{"blocked":148,"dns":3,"connect":42,"send":0,"wait":100,"receive":1,"ssl":453},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediatoday.ru/c/m.gif?s=32\u0026id=366\u0026reference=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D366%26euid%3D%7Bvisitor_id%7D","fqdn":"mediatoday.ru","domain":"mediatoday.ru","tld":"ru"},"ip":{"addr":"194.186.91.196","port":443,"asn":3216,"as":"PVimpelCom","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mediatoday.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 09:53:51 GMT","end":"Sun, 08 Feb 2026 09:53:50 GMT"},"fingerprint":{"sha1":"43:56:05:2D:39:36:28:96:AE:74:07:D6:E8:52:76:1A:89:83:A2:81","sha256":"7F:E0:EE:71:80:3C:CB:DE:47:F8:52:85:81:45:A4:6D:94:9D:8A:08:9F:CC:57:C4:F4:70:0C:0B:5D:3F:33:37"}}},"request":{"raw":"GET /c/m.gif?s=32\u0026id=366\u0026reference=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D366%26euid%3D%7Bvisitor_id%7D HTTP/1.1\r\nHost: mediatoday.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-length: 124\r\ncache-control: no-cache, max-age=0, must-revalidate, no-store\r\npragma: no-cache\r\nexpires: Tue, 11 Sep 2001 12:46:00 GMT\r\nset-cookie: idntfy=VUCgsLqvJbsDUxT; expires=Wed, 02-Jan-2036 13:00:48 GMT; domain=mediatoday.ru; path=/c/; SameSite=None; Secure\nidntfy=VUCgsLqvJbsDUxT; expires=Wed, 02-Jan-2036 13:00:48 GMT; domain=mediatoday.ru; path=/core/; SameSite=None; Secure\nidntfy=deleted; path=/c; domain=mediatoday.ru; expires=Tue, 11 Sep 2001 12:46:00 GMT; SameSite=None; Secure\nidntfy=deleted; path=/core; domain=mediatoday.ru; expires=Tue, 11 Sep 2001 12:46:00 GMT; SameSite=None; Secure\r\nlocation: https://mc.acint.net/match?dp=366\u0026euid=VUCgsLqvJbsDUxT\r\nalt-svc: h3=\":443\"; ma=86400,h3-29=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":785,"timings":{"blocked":166,"dns":3,"connect":66,"send":0,"wait":65,"receive":0,"ssl":483},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sp.kombinat.digital/cm?ssp=sape\u0026redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D433%26euid%3D%7Buid%7D","fqdn":"sp.kombinat.digital","domain":"kombinat.digital","tld":"digital"},"ip":{"addr":"77.223.103.139","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.kombinat.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Dec 2025 10:23:18 GMT","end":"Sun, 01 Mar 2026 10:23:17 GMT"},"fingerprint":{"sha1":"8F:91:B2:43:1C:1F:A6:7C:68:6E:71:E2:4A:D8:77:95:57:07:CE:0C","sha256":"3F:EC:8A:F1:CB:4E:59:7A:CB:F6:B0:F9:54:88:5C:B3:1A:7B:72:38:BF:75:51:79:B2:E6:7D:62:32:10:45:03"}}},"request":{"raw":"GET /cm?ssp=sape\u0026redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D433%26euid%3D%7Buid%7D HTTP/1.1\r\nHost: sp.kombinat.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Sun, 04 Jan 2026 13:00:48 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nBidder: bid-02 1.105.a1db8cf\r\nLocation: https://mc.acint.net/match?dp=433\u0026euid=aa819e3e-62ad-42ea-86d6-f6ab1213f311\r\nSet-Cookie: uid=aa819e3e-62ad-42ea-86d6-f6ab1213f311.695a6480.563bab061a7ae747; domain=.kombinat.digital; path=/; expires=Tue, 03-Feb-2026 13:00:48 GMT; SameSite=None; Secure;\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":260,"dns":2,"connect":29,"send":0,"wait":29,"receive":1,"ssl":451},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.qtarget.tech/userbind?src=sape\u0026id=0900007F7F645A69B30E600602A1C580","fqdn":"match.qtarget.tech","domain":"qtarget.tech","tld":"tech"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.773Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /userbind?src=sape\u0026id=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: match.qtarget.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statmedia.ru/counter/sync.gif?system=sape\u0026cb=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D399%26euid%3D%24UID","fqdn":"statmedia.ru","domain":"statmedia.ru","tld":"ru"},"ip":{"addr":"87.228.86.146","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statmedia.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 04:55:37 GMT","end":"Thu, 19 Feb 2026 04:55:36 GMT"},"fingerprint":{"sha1":"56:0A:46:B3:31:72:5F:7F:E1:F3:1B:FE:6B:F6:48:C4:63:07:E2:59","sha256":"9E:2E:C9:05:CE:37:BD:2F:CA:81:4D:2C:BC:37:B3:69:F6:4E:DE:D4:39:53:D2:27:88:E1:26:A8:A8:58:46:3B"}}},"request":{"raw":"GET /counter/sync.gif?system=sape\u0026cb=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D399%26euid%3D%24UID HTTP/1.1\r\nHost: statmedia.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 04 Jan 2026 13:00:48 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-04-04T02:36:00.835612Z","times_seen":91546,"resource_available":true,"data":null}},"time_used":742,"timings":{"blocked":188,"dns":3,"connect":24,"send":0,"wait":32,"receive":0,"ssl":490},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"635f56ac-e96d-11f0-86e0-002590c0647c.n4.sync.bumlam.com/?src=sape","fqdn":"635f56ac-e96d-11f0-86e0-002590c0647c.n4.sync.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"185.115.93.200","port":443,"asn":42881,"as":"Sc Itns.net Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n0.sync.bumlam.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 16:52:42 GMT","end":"Fri, 06 Feb 2026 16:52:41 GMT"},"fingerprint":{"sha1":"D6:13:3A:3E:71:02:DF:C5:96:43:AD:36:A2:BA:99:EC:85:72:1B:47","sha256":"AB:C7:4E:DF:6B:02:15:86:BE:BB:3C:DE:16:88:C1:CE:99:3D:4E:DB:4E:7F:19:6E:C7:9B:85:6F:52:4E:74:D5"}}},"request":{"raw":"GET /?src=sape HTTP/1.1\r\nHost: 635f56ac-e96d-11f0-86e0-002590c0647c.n4.sync.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: suuid3=IiQ2MzVmNTZhYy1lOTZkLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie/1.10.3\r\nDate: Sun, 04 Jan 2026 13:00:48 GMT\r\nContent-Length: 0\r\nConnection: close\r\nLocation: https://pix.bumlam.com/sync/sape/done\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0\r\nPragma: no-cache\r\nExpires: 0\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie:1.10.3","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":113,"dns":82,"connect":29,"send":0,"wait":32,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.opendsp.ru/match/sape?id=0900007F7F645A69B30E600602A1C580","fqdn":"sync.opendsp.ru","domain":"opendsp.ru","tld":"ru"},"ip":{"addr":"176.114.85.200","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.opendsp.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 05 Aug 2025 11:37:07 GMT","end":"Sun, 06 Sep 2026 11:37:06 GMT"},"fingerprint":{"sha1":"A6:D2:A4:C1:9C:FF:E8:4A:C2:A7:58:7A:3B:98:4B:CC:11:C8:FF:1F","sha256":"26:E3:31:B9:C2:C0:30:F6:85:B7:6E:2F:0E:4F:B0:C6:E5:39:D0:1A:8A:86:02:1E:55:68:94:B1:95:F1:4A:A7"}}},"request":{"raw":"GET /match/sape?id=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: sync.opendsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-04T01:16:08.66985Z","times_seen":31103,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":31,"connect":62,"send":0,"wait":48,"receive":0,"ssl":374},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.bumlam.com/?src=sape","fqdn":"sync.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.160","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 15:01:44 GMT","end":"Thu, 19 Mar 2026 15:01:43 GMT"},"fingerprint":{"sha1":"73:09:47:20:FC:A8:0D:DC:79:F0:08:58:30:EF:F6:AE:72:A0:E1:0B","sha256":"73:92:7B:67:F8:0C:85:9F:42:64:89:B1:B4:BA:C5:BB:D0:C1:72:38:91:59:BA:0B:54:55:C0:4E:84:7F:12:34"}}},"request":{"raw":"GET /?src=sape HTTP/1.1\r\nHost: sync.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: suuid3=IiQ2MzVmNTZhYy1lOTZkLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 04 Jan 2026 13:00:47 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: suuid3=IiQ2MzVmNTZhYy1lOTZkLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Sat, 30 Dec 2045 13:00:47 GMT; Domain=bumlam.com; SameSite=None; Secure\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nLocation: https://pix.bumlam.com/sync/sape/sync_ok?guid=635f56ac-e96d-11f0-86e0-002590c0647c\r\nCache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0\r\nAccess-Control-Allow-Origin: https://acint.net\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":273,"dns":0,"connect":19,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match?dp=433\u0026euid=aa819e3e-62ad-42ea-86d6-f6ab1213f311","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=433\u0026euid=aa819e3e-62ad-42ea-86d6-f6ab1213f311 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647; cSyncDp14v4=1767531647; cSyncDp7v3=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T02:32:17.036778Z","times_seen":326515,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kimberlite.io/rtb/sync/sape2?u=0900007F7F645A69B30E600602A1C580\u0026rc=1","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.91","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 03 Mar 2025 10:28:30 GMT","end":"Sat, 04 Apr 2026 10:28:29 GMT"},"fingerprint":{"sha1":"D5:F7:CA:61:DC:40:4D:B7:43:BC:F1:6F:13:3A:45:A0:D0:53:09:FA","sha256":"BD:79:98:BE:D4:24:4A:51:5B:6D:A8:A1:58:2B:4E:1D:6B:90:66:40:1F:2C:E3:4A:C4:9F:7E:A3:A2:F6:79:12"}}},"request":{"raw":"GET /rtb/sync/sape2?u=0900007F7F645A69B30E600602A1C580\u0026rc=1 HTTP/1.1\r\nHost: kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: u=aVpkgDn5dtg~enE1Tp1dxfeidS3eZU923m9BWGo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx\r\nDate: Sun, 04 Jan 2026 13:00:48 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: u=aVpkgDn5dtg~enE1Tp1dxfeidS3eZU923m9BWGo; path=/; max-age=7776000; samesite=none; httponly; secure\nda=UX4CYAAAAAE; path=/rtb; max-age=604800; samesite=none; httponly; secure\r\nlocation: https://exchange.buzzoola.com/cookiesync/redirect?redirect_url=https%3A%2F%2Fkimberlite.io%2Frtb%2Fsync%2Fbuzzoola%3Fu%3D%24%7BUUID%7D%26f%3Dhttps%253A%252F%252Fwww.acint.net%252Frmatch%253Fdp%253D243%2526euid%253DaVpkgDn5dtg%2526r%253Dhttps%25253A%25252F%25252Facint.net%25252Fcmatch%25253Fdp%25253D243%26n%3D1\r\nreferrer-policy: no-referrer\r\nserver-timing: app;srv=s11;dur=0.0009\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/match/?dp=361\u0026euid=VUnZUsbWsOWu9RE","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match/?dp=361\u0026euid=VUnZUsbWsOWu9RE HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647; cSyncDp14v4=1767531647; cSyncDp7v3=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T02:32:17.036778Z","times_seen":326515,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid.sspnet.tech/sync/sape?redirect=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D203%26euid%3D%24%7BUSER_ID%7D\u0026user_id=0900007F7F645A69B30E600602A1C580","fqdn":"bid.sspnet.tech","domain":"sspnet.tech","tld":"tech"},"ip":{"addr":"212.41.25.246","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sspnet.tech","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 09 May 2025 09:12:30 GMT","end":"Wed, 10 Jun 2026 09:12:29 GMT"},"fingerprint":{"sha1":"74:C6:56:28:7A:24:F3:E7:6F:E4:3C:01:30:57:4F:FB:A4:9F:E5:55","sha256":"4E:E4:15:9F:F0:61:EB:12:FA:CB:DB:21:F4:43:29:CE:73:C1:BA:2A:62:49:B9:83:77:AE:79:3F:C8:24:E1:90"}}},"request":{"raw":"GET /sync/sape?redirect=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D203%26euid%3D%24%7BUSER_ID%7D\u0026user_id=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: bid.sspnet.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\nserver: nginx/1.28.0\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 169\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":939,"timings":{"blocked":279,"dns":0,"connect":44,"send":0,"wait":42,"receive":0,"ssl":565},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mavenpro/v40/7Auup_AqnyWWAxW2Wk3swUz56MS91Eww8SX25nA.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upibusiness.xyz/","date":"2026-01-04T13:00:47.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/mavenpro/v40/7Auup_AqnyWWAxW2Wk3swUz56MS91Eww8SX25nA.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://upibusiness.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upibusiness.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29919\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 31 Dec 2025 23:15:04 GMT\r\nexpires: Thu, 31 Dec 2026 23:15:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 308743\r\nlast-modified: Fri, 29 Aug 2025 03:25:57 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55432,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 9 names, Microsoft, language 0x409","md5":"096ebd2db20d8b23612fad083d900891","sha1":"3fa3476d2e5379d292df3daceed72bc0c889d132","sha256":"0ddcc1a305d092a905fb0f4aa5b98decf73fecc7f0017c404094e64574e321f1","sha512":"a9a146a9c209b9c2081a16ca94231da0b2a1a91e8a1d8ef3574a3d69b6ae824cccfb99728d61c503fda7d15f636006ff943acc2030b91c84c2a9790754d35deb","ssdeep":"768:/+tYUnjeqV+tqRpfd0WjiW/dv/95bxHLgbDZH2hbz7qZzsDOu3CaNA9w:/+SUpuG6SiMt7xHEXdMbz7qBKl1NA9w","tlshash":"bc4319137307cf9bda322dbce59a57a02b61fc75ef0ad747cea23e085c4b0965801699","first_seen":"2025-10-10T06:07:27.377624Z","last_seen":"2026-03-10T07:39:33.225639Z","times_seen":12,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":147,"dns":1,"connect":28,"send":0,"wait":29,"receive":29,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adspend.space/sape?uid=0900007F7F645A69B30E600602A1C580","fqdn":"sync.adspend.space","domain":"adspend.space","tld":"space"},"ip":{"addr":"5.189.234.227","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adspend.space","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Oct 2025 12:52:42 GMT","end":"Mon, 26 Jan 2026 12:52:41 GMT"},"fingerprint":{"sha1":"AC:B3:38:66:C2:FC:35:EC:DA:72:49:D5:D9:BF:BD:DF:99:F7:6D:B4","sha256":"30:85:8C:F6:1D:73:6D:12:AE:79:49:D8:B6:3A:64:D8:38:8D:53:42:DC:FA:CD:0E:44:44:C9:0C:E6:4A:08:04"}}},"request":{"raw":"GET /sape?uid=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: sync.adspend.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.26.2\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 79\r\nlocation: /check?uid=0900007F7F645A69B30E600602A1C580\u0026ssp=sape\r\nset-cookie: as-user=48ac1322-770d-4d33-b466-32a7130ce0e7; Path=/; Max-Age=4320000; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, authorization\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.26.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":19,"connect":30,"send":0,"wait":48,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-statistics.dev.dsp1.nominaltechno.com/api/cookie-sync/eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJSVEIgU2FwZSJ9.VXKxLxZBDKVR7akKD1ukrUZZiwKSy3v1zAZqgO5I0sDyck5wQtI73MuLZMkcYTNASS9UpZ9mSHr5k-r2pAOYRQ/sync?sspUserId=0900007F7F645A69B30E600602A1C580\u0026r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D313%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D313","fqdn":"ssp-statistics.dev.dsp1.nominaltechno.com","domain":"nominaltechno.com","tld":"com"},"ip":{"addr":"34.249.245.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsp1.nominaltechno.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:69:09:D1:44:FC:EF:3B:DA:E5:87:AC:D5:A8:4B:29:5D:43:A6:FF","sha256":"35:F6:0A:EE:1E:A2:22:52:1B:A8:7E:C4:7A:DE:E3:03:91:D4:13:20:F0:92:EB:AB:51:5E:57:F3:43:76:BE:34"}}},"request":{"raw":"GET /api/cookie-sync/eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJSVEIgU2FwZSJ9.VXKxLxZBDKVR7akKD1ukrUZZiwKSy3v1zAZqgO5I0sDyck5wQtI73MuLZMkcYTNASS9UpZ9mSHr5k-r2pAOYRQ/sync?sspUserId=0900007F7F645A69B30E600602A1C580\u0026r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D313%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D313 HTTP/1.1\r\nHost: ssp-statistics.dev.dsp1.nominaltechno.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-length: 0\r\nlocation: https://acint.net/rmatch?dp=313\u0026euid=NT_2_0900007F7F645A69B30E600602A1C580_3306825251404351_gsgqUI\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D313\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1 ; mode=block\r\nreferrer-policy: no-referrer\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":711,"timings":{"blocked":90,"dns":2,"connect":33,"send":0,"wait":50,"receive":1,"ssl":534},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.bringads.ru/sync?ssp=17","fqdn":"a.bringads.ru","domain":"bringads.ru","tld":"ru"},"ip":{"addr":"213.171.19.210","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bringads.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 17:00:48 GMT","end":"Mon, 09 Mar 2026 17:00:47 GMT"},"fingerprint":{"sha1":"C4:8C:87:7A:13:48:E2:3E:31:30:E8:D3:DE:0D:A3:F3:A3:95:AA:8C","sha256":"F9:54:36:CF:E1:48:93:37:0E:AF:14:F7:F7:67:86:C8:8C:AE:40:4B:65:A9:A9:6E:10:E2:D8:9B:C7:26:C9:9B"}}},"request":{"raw":"GET /sync?ssp=17 HTTP/1.1\r\nHost: a.bringads.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0\r\nDate: Sun, 04 Jan 2026 13:00:48 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: prebringads=1; Expires=Tue, 03 Feb 2026 16:00:48 GMT; Domain=.bringads.ru; SameSite=None; Secure; Path=/\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":790,"timings":{"blocked":209,"dns":0,"connect":43,"send":0,"wait":83,"receive":0,"ssl":453},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14","fqdn":"ssp-rtb.sape.ru","domain":"sape.ru","tld":"ru"},"ip":{"addr":"193.3.184.186","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sape.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Dec 2025 23:36:44 GMT","end":"Sat, 07 Mar 2026 23:36:43 GMT"},"fingerprint":{"sha1":"3D:9F:9C:85:A9:AB:7C:9C:83:0D:C2:B6:55:54:6F:89:BB:7F:7F:EE","sha256":"49:D9:BD:BD:C8:71:CC:CD:39:05:E4:44:2E:9E:54:03:9D:A8:07:B3:9E:E4:4E:FD:7A:38:89:6D:8A:12:EA:15"}}},"request":{"raw":"GET /rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14 HTTP/1.1\r\nHost: ssp-rtb.sape.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sspuid=CkIEIGlaZH+4VwAlDO3/ApFw2E557Cr5kZpvMmTh1l6hlfWa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: https://acint.net/match?dp=14\u0026euid=2004420A7F645A69250057B802FFED0C\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D95%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D95%26euid%3D","fqdn":"ssp.bestssp.com","domain":"bestssp.com","tld":"com"},"ip":{"addr":"83.222.96.170","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bestssp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 06:22:36 GMT","end":"Wed, 28 Jan 2026 06:22:35 GMT"},"fingerprint":{"sha1":"95:A8:8C:CC:00:4B:4F:F7:FA:C9:DB:10:E2:5E:90:5F:D2:BE:4F:DE","sha256":"6D:09:43:87:06:3E:CB:12:D7:3E:D4:A3:AA:E3:F9:C3:A4:4C:F9:C2:68:79:63:4A:85:7D:E1:67:41:4D:27:55"}}},"request":{"raw":"GET /sspmatch?url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D95%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D95%26euid%3D HTTP/1.1\r\nHost: ssp.bestssp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.22.0\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 126\r\nlocation: https://mc.acint.net/rmatch?dp=95\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95\u0026euid=KKFKBKAO\r\nset-cookie: uid=KKFKBKAO; Expires=Wed, 02 Jan 2036 13:00:47 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.22.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":26,"connect":65,"send":0,"wait":63,"receive":0,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cr-frontend.weborama-tech.ru/cr?key=sape\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D296%26euid%3D%7BWEBO_CID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D296","fqdn":"cr-frontend.weborama-tech.ru","domain":"weborama-tech.ru","tld":"ru"},"ip":{"addr":"130.193.54.247","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.weborama-tech.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 Aug 2025 14:42:06 GMT","end":"Tue, 15 Sep 2026 18:38:30 GMT"},"fingerprint":{"sha1":"A5:CA:D7:3C:27:83:66:F7:26:43:0B:05:21:09:FF:7A:7A:AB:7D:A9","sha256":"53:AA:89:0C:4A:26:10:43:C0:A9:5C:10:98:06:D7:D5:6A:76:CC:34:2E:77:15:88:33:37:B6:31:0C:D7:CF:0B"}}},"request":{"raw":"GET /cr?key=sape\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D296%26euid%3D%7BWEBO_CID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D296 HTTP/1.1\r\nHost: cr-frontend.weborama-tech.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\nvary: Origin\r\naccess-control-allow-origin: *\r\np3p: CP=\"NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM\"\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0\r\npragma: no-cache\r\nexpires: Tue, 03 Jul 2001 06:00:00 GMT\r\nlast-modified: Sun, 04 Jan 2026 13:00:48 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":983,"timings":{"blocked":72,"dns":3,"connect":282,"send":0,"wait":32,"receive":0,"ssl":593},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.opendsp.ru/match/sape_ex?id=0900007F7F645A69B30E600602A1C580","fqdn":"sync.opendsp.ru","domain":"opendsp.ru","tld":"ru"},"ip":{"addr":"176.114.85.200","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.opendsp.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 05 Aug 2025 11:37:07 GMT","end":"Sun, 06 Sep 2026 11:37:06 GMT"},"fingerprint":{"sha1":"A6:D2:A4:C1:9C:FF:E8:4A:C2:A7:58:7A:3B:98:4B:CC:11:C8:FF:1F","sha256":"26:E3:31:B9:C2:C0:30:F6:85:B7:6E:2F:0E:4F:B0:C6:E5:39:D0:1A:8A:86:02:1E:55:68:94:B1:95:F1:4A:A7"}}},"request":{"raw":"GET /match/sape_ex?id=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: sync.opendsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-04-04T01:16:08.66985Z","times_seen":31103,"resource_available":true,"data":null}},"time_used":594,"timings":{"blocked":80,"dns":4,"connect":34,"send":0,"wait":43,"receive":0,"ssl":427},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adspector.io/sync?ssp=6","fqdn":"a.adspector.io","domain":"adspector.io","tld":"io"},"ip":{"addr":"104.21.15.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adspector.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 03:16:35 GMT","end":"Wed, 11 Feb 2026 04:14:56 GMT"},"fingerprint":{"sha1":"70:93:AE:0A:86:B3:EC:6A:26:43:0C:59:15:5C:6D:1C:C5:C6:F8:11","sha256":"16:49:F6:10:DA:6C:F1:EC:DB:5E:3C:6B:52:FE:1B:B8:2A:EC:A0:D1:73:71:15:1E:94:F3:29:C7:95:AB:81:A3"}}},"request":{"raw":"GET /sync?ssp=6 HTTP/1.1\r\nHost: a.adspector.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: preadspector=1; Expires=Tue, 03 Feb 2026 16:00:48 GMT; Domain=.adspector.io; SameSite=None; Secure; Path=/\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iroJGgUW10W3IXkHF76WVuZiQkBdUW3TBVN5SxD1MFqtYray1rg%2BhaY5BVDhZrMC3GfSSu7kvoMVi1neBxZ%2Bd14Wjx1LtxI0yjY4Qw%3D%3D\"}]}\r\ncf-ray: 9b8aebc04a47b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":571,"timings":{"blocked":130,"dns":1,"connect":6,"send":0,"wait":104,"receive":0,"ssl":323},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.techdsp.ru/sync?src=sape\u0026uid=0900007F7F645A69B30E600602A1C580","fqdn":"sync.techdsp.ru","domain":"techdsp.ru","tld":"ru"},"ip":{"addr":"37.48.253.136","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.techdsp.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 19 Feb 2025 14:03:23 GMT","end":"Mon, 23 Mar 2026 14:03:22 GMT"},"fingerprint":{"sha1":"E0:51:62:A1:08:10:67:51:3A:43:8B:07:2F:EC:40:2D:BA:A8:2E:5C","sha256":"8E:DA:37:A7:45:0C:02:8B:99:79:9E:F6:0F:CF:98:2D:C0:9F:74:B4:18:E8:2E:F5:D7:DD:D8:3C:3C:43:5C:85"}}},"request":{"raw":"GET /sync?src=sape\u0026uid=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: sync.techdsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-length: 0\r\nlocation: https://x01.aidata.io/0.gif?pid=0914828\u0026id=_w63nNQ-TkKtHqYz_TIWXQ\u0026dest=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D351%26euid%3D_w63nNQ-TkKtHqYz_TIWXQ%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D351\r\nreferrer-policy: no-referrer\r\nset-cookie: uid=_w63nNQ-TkKtHqYz_TIWXQ; Path=/; Max-Age=31536000; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":720,"timings":{"blocked":147,"dns":1,"connect":31,"send":0,"wait":50,"receive":8,"ssl":481},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dm.hybrid.ai/match?id=414","fqdn":"dm.hybrid.ai","domain":"hybrid.ai","tld":"ai"},"ip":{"addr":"37.230.131.22","port":443,"asn":200197,"as":"Hybrid Adtech Sp.z.o.o.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:49.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hybrid.ai","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 22 Sep 2025 00:00:00 GMT","end":"Sun, 04 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:21:9E:FA:EF:FF:FF:F2:8D:68:A8:F9:EB:ED:53:32:CC:17:9B:ED","sha256":"C9:20:9A:53:1E:FA:35:C7:29:64:1F:C3:7B:1E:34:73:C8:15:87:43:EA:35:06:B8:8D:86:E5:11:19:2A:60:FC"}}},"request":{"raw":"GET /match?id=414 HTTP/1.1\r\nHost: dm.hybrid.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 04 Jan 2026 12:55:28 GMT\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nexpires: -1\r\np3p: CP=\"NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC\"\r\nx-mode: 5027\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\nserver: Hybrid Web Server\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/ping/?v=0.7.1\u0026uid=31f145d0-cf24-4e7e-931b-1d8a4d7f0135\u0026dp=10\u0026tz=%2B00%3A00\u0026nc=536996\u0026dT=2026-01-04T13%3A00%3A50.243","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upibusiness.xyz/","date":"2026-01-04T13:00:50.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /ping/?v=0.7.1\u0026uid=31f145d0-cf24-4e7e-931b-1d8a4d7f0135\u0026dp=10\u0026tz=%2B00%3A00\u0026nc=536996\u0026dT=2026-01-04T13%3A00%3A50.243 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upibusiness.xyz/\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647; cSyncDp14v4=1767531647; cSyncDp7v3=1767531647; cSyncDp241v2=1767531648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:50 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T02:32:17.036778Z","times_seen":326515,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adx.com.ru/sync/init/sapePlazkart?uid=0900007F7F645A69B30E600602A1C580","fqdn":"adx.com.ru","domain":"adx.com.ru","tld":"com.ru"},"ip":{"addr":"83.222.105.246","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adx.com.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 20 Jun 2025 13:13:33 GMT","end":"Wed, 22 Jul 2026 13:13:32 GMT"},"fingerprint":{"sha1":"0F:34:EC:CE:BC:17:E9:5F:83:40:15:65:EF:68:EC:37:03:9C:C8:9C","sha256":"87:20:22:42:36:6F:88:B8:4D:D7:3A:11:7B:17:9F:56:7B:CD:5A:0C:00:F3:42:3C:BE:28:DE:11:8E:AD:F5:FE"}}},"request":{"raw":"GET /sync/init/sapePlazkart?uid=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: adx.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.28.0\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":480,"timings":{"blocked":24,"dns":11,"connect":63,"send":0,"wait":70,"receive":0,"ssl":307},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/rmatch?dp=14\u0026euid=2004420A7F645A69250057B802FFED0C\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=14\u0026euid=2004420A7F645A69250057B802FFED0C\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647; cSyncDp14v4=1767531647; cSyncDp7v3=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=126\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=126","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /cmatch?dp=126 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647; cSyncDp14v4=1767531647; cSyncDp7v3=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://match.qtarget.tech/userbind?src=sape\u0026id=0900007F7F645A69B30E600602A1C580\r\nset-cookie: cSyncDp241v2=1767531648; expires=Tue, 03-Feb-26 13:00:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otclick-adv.ru/core/match.gif?s=56\u0026reference=https%3A%2F%2Fmc.acint.net%2Fmatch%2F%3Fdp%3D361%26euid%3D%23%7BUID%7D","fqdn":"otclick-adv.ru","domain":"otclick-adv.ru","tld":"ru"},"ip":{"addr":"139.45.228.132","port":443,"asn":57304,"as":"JSC RetnNet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.otclick-adv.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 15 Sep 2025 18:16:14 GMT","end":"Sat, 17 Oct 2026 18:16:13 GMT"},"fingerprint":{"sha1":"AC:7F:37:A5:93:0B:F1:5C:17:8C:E2:05:1C:18:98:EB:54:71:45:A1","sha256":"D0:29:C5:21:78:51:6F:01:ED:DC:C3:B6:AA:53:D9:5F:7B:59:04:97:33:EE:31:F7:62:1A:DE:FA:03:83:F2:F9"}}},"request":{"raw":"GET /core/match.gif?s=56\u0026reference=https%3A%2F%2Fmc.acint.net%2Fmatch%2F%3Fdp%3D361%26euid%3D%23%7BUID%7D HTTP/1.1\r\nHost: otclick-adv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 04 Jan 2026 13:00:48 GMT\r\nContent-Length: 124\r\nConnection: keep-alive\r\nKeep-Alive: timeout=90\r\nP3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA\r\nCache-Control: no-cache, max-age=0, must-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Thursday, 01-Jan-1970 00:00:00 GMT\r\nSet-Cookie: idntfy=VUnZUsbWsOWu9RE; expires=Wed, 02-Jan-2036 13:00:48 GMT; domain=otclick-adv.ru; path=/c/; SameSite=None; Secure\nidntfy=VUnZUsbWsOWu9RE; expires=Wed, 02-Jan-2036 13:00:48 GMT; domain=otclick-adv.ru; path=/core/; SameSite=None; Secure\r\nLocation: https://mc.acint.net/match/?dp=361\u0026euid=VUnZUsbWsOWu9RE\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":709,"timings":{"blocked":148,"dns":3,"connect":29,"send":0,"wait":76,"receive":0,"ssl":450},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acint.net/rmatch?dp=313\u0026euid=NT_2_0900007F7F645A69B30E600602A1C580_3306825251404351_gsgqUI\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D313","fqdn":"acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /rmatch?dp=313\u0026euid=NT_2_0900007F7F645A69B30E600602A1C580_3306825251404351_gsgqUI\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D313 HTTP/1.1\r\nHost: acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647; cSyncDp14v4=1767531647; cSyncDp7v3=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://mc.acint.net/cmatch?dp=313\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.utraff.com/sync?ssp=sape","fqdn":"a.utraff.com","domain":"utraff.com","tld":"com"},"ip":{"addr":"213.171.19.174","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"utraff.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 04:18:08 GMT","end":"Thu, 12 Mar 2026 04:18:07 GMT"},"fingerprint":{"sha1":"7F:77:C5:6F:57:1F:C2:53:D7:D3:04:93:B1:75:D8:91:AA:38:A0:78","sha256":"B2:CE:C5:75:9F:E8:F2:94:5D:6D:78:3C:9D:ED:55:DC:C8:2F:EA:4F:D2:50:B2:6F:A7:4A:85:A1:5F:4F:C0:14"}}},"request":{"raw":"GET /sync?ssp=sape HTTP/1.1\r\nHost: a.utraff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0\r\nDate: Sun, 04 Jan 2026 13:00:47 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: preutid=1; Expires=Tue, 03 Feb 2026 16:00:47 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/\npreutid=1; Expires=Tue, 03 Feb 2026 16:00:47 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":158,"dns":27,"connect":52,"send":0,"wait":84,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.dynotech.io/sape/sync/","fqdn":"rtb.dynotech.io","domain":"dynotech.io","tld":"io"},"ip":{"addr":"82.202.197.102","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtb.dynotech.io","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 17:57:55 GMT","end":"Sun, 11 Jan 2026 17:57:54 GMT"},"fingerprint":{"sha1":"C1:88:1A:B8:F5:1D:6C:EF:0E:F8:F6:6C:52:ED:EB:07:E2:04:B0:41","sha256":"0C:8E:6C:A8:2D:14:6F:8A:B0:94:08:8D:BF:20:FC:F4:F8:82:0D:76:45:5E:AB:05:87:42:8F:AC:07:59:47:A4"}}},"request":{"raw":"GET /sape/sync/ HTTP/1.1\r\nHost: rtb.dynotech.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":221,"dns":4,"connect":35,"send":0,"wait":34,"receive":0,"ssl":480},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pix.bumlam.com/sync/sape/done","fqdn":"pix.bumlam.com","domain":"bumlam.com","tld":"com"},"ip":{"addr":"31.172.81.3","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bumlam.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 15:01:44 GMT","end":"Thu, 19 Mar 2026 15:01:43 GMT"},"fingerprint":{"sha1":"73:09:47:20:FC:A8:0D:DC:79:F0:08:58:30:EF:F6:AE:72:A0:E1:0B","sha256":"73:92:7B:67:F8:0C:85:9F:42:64:89:B1:B4:BA:C5:BB:D0:C1:72:38:91:59:BA:0B:54:55:C0:4E:84:7F:12:34"}}},"request":{"raw":"GET /sync/sape/done HTTP/1.1\r\nHost: pix.bumlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: suuid3=IiQ2MzVmNTZhYy1lOTZkLTExZjAtODZlMC0wMDI1OTBjMDY0N2M*\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 04 Jan 2026 13:00:48 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://www.acint.net\r\nAccess-Control-Allow-Credentials: true\r\nTiming-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0, proxy-revalidate, s-maxage=0\r\nPragma: no-cache\r\nExpires: 05-Jun-2005 22:00:00 GMT\r\nX-Xss-Protection: 0\r\nP3P: policyref=\"https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml\", CP=\"CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T02:32:17.036778Z","times_seen":326515,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kimberlite.io/rtb/sync/buzzoola?u=7d64a341-1d81-4142-6bf7-e9adc555edc0\u0026f=https%3A%2F%2Fwww.acint.net%2Frmatch%3Fdp%3D243%26euid%3DaVpkgDn5dtg%26r%3Dhttps%253A%252F%252Facint.net%252Fcmatch%253Fdp%253D243\u0026n=1","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.91","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:49.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 03 Mar 2025 10:28:30 GMT","end":"Sat, 04 Apr 2026 10:28:29 GMT"},"fingerprint":{"sha1":"D5:F7:CA:61:DC:40:4D:B7:43:BC:F1:6F:13:3A:45:A0:D0:53:09:FA","sha256":"BD:79:98:BE:D4:24:4A:51:5B:6D:A8:A1:58:2B:4E:1D:6B:90:66:40:1F:2C:E3:4A:C4:9F:7E:A3:A2:F6:79:12"}}},"request":{"raw":"GET /rtb/sync/buzzoola?u=7d64a341-1d81-4142-6bf7-e9adc555edc0\u0026f=https%3A%2F%2Fwww.acint.net%2Frmatch%3Fdp%3D243%26euid%3DaVpkgDn5dtg%26r%3Dhttps%253A%252F%252Facint.net%252Fcmatch%253Fdp%253D243\u0026n=1 HTTP/1.1\r\nHost: kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: da=UX4CYAAAAAE; u=aVpkgDn5dtg~enE1Tp1dxfeidS3eZU923m9BWGo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx\r\nDate: Sun, 04 Jan 2026 13:00:49 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: as=T72MF2laZIE; path=/rtb; max-age=604800; samesite=none; httponly; secure\nda=2OZrzwAAAAE; path=/rtb; max-age=604800; samesite=none; httponly; secure\nf=https%3A%2F%2Fwww.acint.net%2Frmatch%3Fdp%3D243%26euid%3DaVpkgDn5dtg%26r%3Dhttps%253A%252F%252Facint.net%252Fcmatch%253Fdp%253D243; max-age=30; samesite=none; httponly; secure\nn=2; max-age=30; samesite=none; httponly; secure\r\nlocation: https://dm.hybrid.ai/match?id=414\r\nreferrer-policy: no-referrer\r\nserver-timing: app;srv=s11a;dur=0.0007\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/oci.js?t=1767531647243","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upibusiness.xyz/","date":"2026-01-04T13:00:47.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /oci.js?t=1767531647243 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upibusiness.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Mon, 09 Jan 2023 08:01:14 GMT\r\netag: W/\"63bbc9ca-7dac\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32169,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32168)","md5":"c3fa5133b6899a2abb39fb79ed94300f","sha1":"dc1d5c75420b38cd7509a783ed09345d0ff78ac4","sha256":"66b141eb9ae44c86efc510844a71cf208c02d02abe03af3a7d8cc26736d3e19c","sha512":"db171b491636ef67596c4874d2b3e553eac016e303a713f12eb1e5c5116cab5f5c904b6aaf358268c04011016484b6920b227cf2d72c2de30f79bd16eba59bad","ssdeep":"384:ixcLKIHRnN2xFRhKv3E6mXHHKvaloLG2+KlLqK/CSuxAjUd0jJFKOEyEqWiodJVb:1BHRN6AIeJZKOgIJANJVEEvDHIoOI","tlshash":"64e219ccb2c3b02d0263a9ba047f6046763bbd59250c4883d5bad5d17ca9e5a513bfb8","first_seen":"2023-03-12T19:09:04Z","last_seen":"2026-03-15T10:53:33.326269Z","times_seen":5562,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.dmp.otm-r.com/match/sape?id=0900007F7F645A69B30E600602A1C580","fqdn":"sync.dmp.otm-r.com","domain":"otm-r.com","tld":"com"},"ip":{"addr":"194.55.244.180","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync.dmp.otm-r.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 06:06:37 GMT","end":"Tue, 10 Mar 2026 06:06:36 GMT"},"fingerprint":{"sha1":"C0:50:09:84:7A:D9:92:52:FE:BD:EA:94:B3:65:D6:83:2C:B3:52:8A","sha256":"6A:F5:31:88:A3:2A:6E:A1:F0:48:DA:7C:7D:A2:DD:EF:82:C2:71:12:9E:54:D7:9E:4F:C0:88:FA:C6:F9:E3:B3"}}},"request":{"raw":"GET /match/sape?id=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: sync.dmp.otm-r.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.acint.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.27.4\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nlocation: /match/sape?id=0900007F7F645A69B30E600602A1C580\u0026otcm_check=1767531647\r\nset-cookie: mpid=Njk1YTY0N2YwNDQzODM3NQ==; max-age=31536000; domain=otm-r.com; path=/; secure; SameSite=None; Partitioned\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.27.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":166,"dns":38,"connect":66,"send":0,"wait":69,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.buzzoola.com/cookiesync/dsp/sape-banner?set_buzzoola_cookie=t\u0026uid=0900007F7F645A69B30E600602A1C580\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126","fqdn":"exchange.buzzoola.com","domain":"buzzoola.com","tld":"com"},"ip":{"addr":"45.138.161.72","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buzzoola.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:11:29 GMT","end":"Mon, 09 Mar 2026 06:11:28 GMT"},"fingerprint":{"sha1":"6D:1A:28:D1:AB:8D:18:D1:38:1A:55:28:34:A1:03:2A:BC:7A:1C:5A","sha256":"AB:C0:F2:6B:07:6C:D6:89:63:34:97:78:29:CD:C6:D1:2A:75:3D:C0:7C:E0:05:94:11:71:82:6B:67:8C:2D:36"}}},"request":{"raw":"GET /cookiesync/dsp/sape-banner?set_buzzoola_cookie=t\u0026uid=0900007F7F645A69B30E600602A1C580\u0026url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126 HTTP/1.1\r\nHost: exchange.buzzoola.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uuid=7d64a341-1d81-4142-6bf7-e9adc555edc0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 156\r\nlocation: https://mc.acint.net/rmatch?dp=126\u0026euid=7d64a341-1d81-4142-6bf7-e9adc555edc0\u0026r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126\r\nserverid: TODO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.acint.net/match?dp=186\u0026euid=b98281af-5fe8-4708-8a81-16dde89941b7","fqdn":"www.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:47.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /match?dp=186\u0026euid=b98281af-5fe8-4708-8a81-16dde89941b7 HTTP/1.1\r\nHost: www.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:47 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D\u0026dp=14\r\np3p: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\nset-cookie: cSyncDp14v4=1767531647; expires=Tue, 03-Feb-26 13:00:47 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=95","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /cmatch?dp=95 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647; cSyncDp14v4=1767531647; cSyncDp7v3=1767531647\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 154\r\nlocation: https://match.qtarget.tech/userbind?src=sape\u0026id=0900007F7F645A69B30E600602A1C580\r\nset-cookie: cSyncDp241v2=1767531648; expires=Tue, 03-Feb-26 13:00:48 GMT; path=/; Secure; SameSite=None; domain=.acint.net\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.acint.net/cmatch?dp=368","fqdn":"mc.acint.net","domain":"acint.net","tld":"net"},"ip":{"addr":"193.3.184.135","port":443,"asn":50214,"as":"QWARTA LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.acint.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 23:34:47 GMT","end":"Mon, 16 Feb 2026 23:34:46 GMT"},"fingerprint":{"sha1":"AC:F1:F0:AE:B9:73:CD:E9:4C:12:65:4C:8E:28:C1:DF:FC:44:BE:51","sha256":"58:33:3D:E8:B5:E5:84:B5:BD:3A:18:88:C0:D8:05:F1:BD:35:00:09:84:06:D0:DC:F9:0E:03:74:B3:96:2E:11"}}},"request":{"raw":"GET /cmatch?dp=368 HTTP/1.1\r\nHost: mc.acint.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: aid=fwAACWlaZH8GYA6zgMWhAj9vjWLnmQG4F3rxLzrQJYwKUbYs; test_cookie=CheckForPermission; cSyncDp14v6=1767531647; cSyncDp17v3=1767531647; cSyncDp45v5=1767531647; cSyncDp53v5=1767531647; cSyncDp553=1767531647; cSyncDp62v4=1767531647; cSyncDp67v5=1767531647; cSyncDp68v3=1767531647; cSyncDp71v2=1767531647; cSyncDp85v2=1767531647; cSyncDp95v4=1767531647; cSyncDp98v3=1767531647; cSyncDp104v3=1767531647; cSyncDp107v2=1767531647; cSyncDp125v5=1767531647; cSyncDp126v3=1767531647; cSyncDp129v2=1767531647; cSyncDp136v3=1767531647; cSyncDp148v2=1767531647; cSyncDp149v3=1767531647; cSyncDp151v2=1767531647; cSyncDp251v3=1767531647; cSyncDp186v2=1767531647; cSyncDp217v2=1767531647; cSyncDp226v1=1767531647; cSyncDp239v3=1767531647; cSyncDp243v2=1767531647; cSyncDp260v2=1767531647; cSyncDp244v2=1767531647; cSyncDp248v3=1767531647; cSyncDp261v1=1767531647; cSyncDp264=1767531647; cSyncDp274=1767531647; cSyncDp289v2=1767531647; cSyncDp296v3=1767531647; cSyncDp312v1=1767531647; cSyncDp313v1=1767531647; cSyncDp368v1=1767531647; cSyncDp331v1=1767531647; cSyncDp337v1=1767531647; cSyncDp351v1=1767531647; cSyncDp361v1=1767531647; cSyncDp353v1=1767531647; cSyncDp362v1=1767531647; cSyncDp366v1=1767531647; cSyncDp385v1=1767531647; cSyncDp390v1=1767531647; cSyncDp399v1=1767531647; cSyncDp394v1=1767531647; cSyncDp415v1=1767531647; cSyncDp420v2=1767531647; cSyncDp431=1767531647; cSyncDp433=1767531647; cSyncDp444=1767531647; cSyncDp203v2=1767531647; cSyncDp450=1767531647; cSyncDp14v4=1767531647; cSyncDp7v3=1767531647; cSyncDp241v2=1767531648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 04 Jan 2026 13:00:48 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nexpires: Wed, 19 Apr 2000 11:43:00 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T02:32:17.036778Z","times_seen":326515,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.qtarget.tech/userbind?src=sape\u0026id=0900007F7F645A69B30E600602A1C580","fqdn":"match.qtarget.tech","domain":"qtarget.tech","tld":"tech"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.acint.net/mc/?dp=10\u0026tc=1","date":"2026-01-04T13:00:48.776Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /userbind?src=sape\u0026id=0900007F7F645A69B30E600602A1C580 HTTP/1.1\r\nHost: match.qtarget.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.acint.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}