firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 06 Sep 2022 14:04:18 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: nhPDVq5dOQrL2tzfbug4HOz3ClEw9idwu-NzwiHQrhqMe_iI162Yiw==
Age: 500
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d931e0142ef5ffe9cdb4c4c6bfcb9bc9
d9c4caf525e8926b042a14f38d374cc4033ed768
f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3286
Expires: Tue, 06 Sep 2022 15:07:24 GMT
Date: Tue, 06 Sep 2022 14:12:38 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ioZr13lOFW-2mhbSVnKMRGmbK4c-vgzruACcdvxCwJ7JhH7-RE0HXQ==
age: 46641
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Sep 2022 14:12:39 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
pracuj2.pl/
200 OK 17 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7165), with CRLF line terminators
Hash fc4ea55d0633ea8b876a141c6e602c2e
a29810d306bc055acf07ffe063233dcb69b3e70a
8cc56271140c7b7e34a00755f73b361f08adcd0ab9c947ead2b67aee2f72364f
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET / HTTP/1.1
Host: pracuj2.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: dclassifieds__8966a7a7c2e7e3d9f4833a09f25b46ac=848pmv0ocivceft9t9jhf30os4; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Encoding: gzip
Vary: Accept-Encoding
fonts.googleapis.com/css?family=Cuprum&subset=latin,cyrillic
200 OK 494 B URL HTTP/1.1 fonts.googleapis.com/css?family=Cuprum&subset=latin,cyrillic
IP
Hash a7da9c492166f2f694bc10ec95ebdb48
4bcc83deeed6e0bc749cd941c748a165e961ef5f
d6870ae0171d1ba232ca67e71ad7725c0c3ed791f72a905cb4808792a3dd468b
GET /css?family=Cuprum&subset=latin,cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Tue, 06 Sep 2022 14:12:39 GMT
Date: Tue, 06 Sep 2022 14:12:39 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
200 OK 33 kB URL HTTP/1.1 ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash 18351732b1849ba758e98884e186b3c8
d735af8661eda41ff4ffbf76e6a284a0e2deb81c
bfac625d304d52e04f2caeb19266354749929c888ca09d3d1e3edcbb8770d0f0
GET /ajax/libs/jquery/1.7.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 33333
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 05 Sep 2022 16:46:55 GMT
Expires: Tue, 05 Sep 2023 16:46:55 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Age: 77144
pracuj2.pl/themes/basic/front/style/reset.css
200 OK 956 B URL HTTP/1.1 pracuj2.pl/themes/basic/front/style/reset.css
IP
File type ASCII text, with CRLF line terminators
Hash 759e8f0ce009ce152480d0a7885d93a8
5d4b1d45045394a6a693db8fdf02be088933b7ff
87c882bdafc825e5028144d52b3b0e1aef4d7732e21af908b7cf794e359e26f7
Analyzer Verdict Alert quad9 Sinkholed
GET /themes/basic/front/style/reset.css HTTP/1.1
Host: pracuj2.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: dclassifieds__8966a7a7c2e7e3d9f4833a09f25b46ac=848pmv0ocivceft9t9jhf30os4
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:39 GMT
Content-Type: text/css
Content-Length: 956
Last-Modified: Fri, 09 Nov 2018 05:23:45 GMT
Connection: keep-alive
ETag: "5be519e1-3bc"
Accept-Ranges: bytes
pracuj2.pl/themes/basic/front/style/style.css
200 OK 9.3 kB URL HTTP/1.1 pracuj2.pl/themes/basic/front/style/style.css
IP
File type ASCII text, with CRLF line terminators
Hash 7e7660baf1f381c9be69cec20d345f3e
1c3bc716aee979b962b9e287832833ee4d9de445
2d89de889ff0fcc799f833d5cd3908607c7fd5e40a8317083c476668dc54314a
Analyzer Verdict Alert quad9 Sinkholed
GET /themes/basic/front/style/style.css HTTP/1.1
Host: pracuj2.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: dclassifieds__8966a7a7c2e7e3d9f4833a09f25b46ac=848pmv0ocivceft9t9jhf30os4
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:39 GMT
Content-Type: text/css
Content-Length: 9297
Last-Modified: Fri, 09 Nov 2018 05:23:45 GMT
Connection: keep-alive
ETag: "5be519e1-2451"
Accept-Ranges: bytes
pracuj2.pl/themes/basic/front/style/droplinebar.css
200 OK 975 B URL HTTP/1.1 pracuj2.pl/themes/basic/front/style/droplinebar.css
IP
File type ASCII text, with CRLF line terminators
Hash 8903d91b93a3b352051b0506159caa7b
58c40c95021cbc8669b68c216bfd72bd8607b776
78354ee5455478ac9c9058397e62ce3ce9959c7c094394be310f2dab4013e214
Analyzer Verdict Alert quad9 Sinkholed
GET /themes/basic/front/style/droplinebar.css HTTP/1.1
Host: pracuj2.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: dclassifieds__8966a7a7c2e7e3d9f4833a09f25b46ac=848pmv0ocivceft9t9jhf30os4
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:39 GMT
Content-Type: text/css
Content-Length: 975
Last-Modified: Fri, 09 Nov 2018 05:23:45 GMT
Connection: keep-alive
ETag: "5be519e1-3cf"
Accept-Ranges: bytes
pracuj2.pl/themes/basic/front/js/lightbox/css/jquery.lightbox-0.5.css
200 OK 2.4 kB URL HTTP/1.1 pracuj2.pl/themes/basic/front/js/lightbox/css/jquery.lightbox-0.5.css
IP
File type ASCII text, with CRLF line terminators
Hash 9b59532be9e0c07485ec647042111ab1
eb3ea2e0fdb878ea76bef2308d59f84ce019b7c5
8ae4039d237a452a91309a05f5022b2534cb3e709b1226e2ae052c26596c4dbf
Analyzer Verdict Alert quad9 Sinkholed
GET /themes/basic/front/js/lightbox/css/jquery.lightbox-0.5.css HTTP/1.1
Host: pracuj2.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: dclassifieds__8966a7a7c2e7e3d9f4833a09f25b46ac=848pmv0ocivceft9t9jhf30os4
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:39 GMT
Content-Type: text/css
Content-Length: 2376
Last-Modified: Fri, 09 Nov 2018 05:24:21 GMT
Connection: keep-alive
ETag: "5be51a05-948"
Accept-Ranges: bytes
pracuj2.pl/themes/basic/front/js/droplinemenu.js
200 OK 3.8 kB URL HTTP/1.1 pracuj2.pl/themes/basic/front/js/droplinemenu.js
IP
File type ASCII text, with very long lines (1289), with CRLF line terminators
Hash 7e18cb0b72275748d1e01e6e02125454
e4d7a84f8c58bd46b5b67d3a97bcdf6f61f4a102
34e029c68a8e118e04db25e84a4c9c6b3f50a4b69df5f5cf988d55410a5603c5
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /themes/basic/front/js/droplinemenu.js HTTP/1.1
Host: pracuj2.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: dclassifieds__8966a7a7c2e7e3d9f4833a09f25b46ac=848pmv0ocivceft9t9jhf30os4
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:39 GMT
Content-Type: application/javascript
Content-Length: 3841
Last-Modified: Fri, 09 Nov 2018 05:23:44 GMT
Connection: keep-alive
ETag: "5be519e0-f01"
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4b5cc7826455202a28c1d96455fd043c
11db9914596c1cb39926785010aa271b6a57e0ac
a34bb23885bc0a257df78926385de07131dcd027b04d386bc40035790aa88319
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A34BB23885BC0A257DF78926385DE07131DCD027B04D386BC40035790AA88319"
Last-Modified: Mon, 05 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5208
Expires: Tue, 06 Sep 2022 15:39:27 GMT
Date: Tue, 06 Sep 2022 14:12:39 GMT
Connection: keep-alive
pracuj2.pl/themes/basic/front/i/no_photo_small.jpg
200 OK 4.8 kB URL HTTP/1.1 pracuj2.pl/themes/basic/front/i/no_photo_small.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Adobe Photoshop CC (Macintosh), datetime=2016-08-30T00:24:06+03:00], baseline, precision 8, 120x90, components 3\012- data
Hash 104f9af30f8a05a8885a8ac4b6b60517
9f12587a597d58ea753787699e6ad9edb2a1ca80
3251ee80be70964cfc89ac71220b5fd1ddd8a976fd89db7ca59ea5505038af63
Analyzer Verdict Alert quad9 Sinkholed
GET /themes/basic/front/i/no_photo_small.jpg HTTP/1.1
Host: pracuj2.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: dclassifieds__8966a7a7c2e7e3d9f4833a09f25b46ac=848pmv0ocivceft9t9jhf30os4
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:39 GMT
Content-Type: image/jpeg
Content-Length: 4762
Last-Modified: Fri, 09 Nov 2018 05:23:43 GMT
Connection: keep-alive
ETag: "5be519df-129a"
Accept-Ranges: bytes
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 06 Sep 2022 13:38:18 GMT
Expires: Tue, 06 Sep 2022 14:36:13 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: QNBJ_XnA88Fs626urerOxXaR3SFjVpjPwVqHntZcwI27hfK7toCEXg==
Age: 2061
cdn-rtb.sape.ru/rtb-b/js/308/2/94308.js
200 OK 47 kB URL HTTP/1.1 cdn-rtb.sape.ru/rtb-b/js/308/2/94308.js
IP
File type ASCII text, with very long lines (5594)
Hash 435bdb140f838fb97c995d88d859f725
48ad1b5f434b22a0f4cd824b3195ab54671ffc3e
fb29e771611db86cf495150483ffd3eaf03de4f3d424d3cdfb86fb8f5ea3812f
GET /rtb-b/js/308/2/94308.js HTTP/1.1
Host: cdn-rtb.sape.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 06 Sep 2022 14:12:39 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: W/"ad3623dad67704ccb5080f8cec5ba94e"
Last-Modified: Fri, 02 Sep 2022 04:25:16 GMT
Vary: Origin
X-Amz-Request-Id: 1710F0850AB283A6
X-Xss-Protection: 1; mode=block
Expires: Tue, 06 Sep 2022 15:12:39 GMT
Cache-Control: max-age=3600
X-Cache-Status: HIT
Content-Encoding: gzip
www.googletagservices.com/tag/js/gpt.js
200 OK 29 kB URL HTTP/1.1 www.googletagservices.com/tag/js/gpt.js
IP
File type ASCII text, with very long lines (44995)
Hash c5e617f5ef49553923a3813050744c2c
d7516771120b8cd862c8ad1000f7ebb0d189aeb0
fbe32dabcc7389f39213543374fc8daf70b0f28a44917b44037022fe306be8ad
GET /tag/js/gpt.js HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs"
Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
Timing-Allow-Origin: *
Content-Length: 28581
Date: Tue, 06 Sep 2022 14:12:39 GMT
Expires: Tue, 06 Sep 2022 14:12:39 GMT
Cache-Control: private, max-age=900, stale-while-revalidate=3600
ETag: "1325 / 946 of 1000 / last-modified: 1662462430"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76c6ad39ad355f829170427e9076311a
26a82c7dd26986900a4964464e43d9837dfef1f8
40c6ca74d92e002befb684bce24ba4714c260ba30918cc4e9a4bb02ed4f809dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 14:12:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash e8952752ad4a452a575522a7eb737217
c5554fa2af05d7a7117032b0f99352de08988346
8c182bed7bbd843774a2136823b30a4cb707e2a5386f71d01640aa3558888bf7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 995
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 14:12:39 GMT
Last-Modified: Tue, 06 Sep 2022 13:56:04 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
securepubads.g.doubleclick.net/gpt/pubads_impl_2022083001.js
200 OK 132 kB URL HTTP/2 securepubads.g.doubleclick.net/gpt/pubads_impl_2022083001.js
IP
File type ASCII text, with very long lines (65439)
Size 132 kB (131975 bytes)
Hash 8ce7ad29516f8ac092bd1d9204a81427
cac93b05fbc2bd9806c103f9c4853c54f165835c
d88c48f340c73a27163eb22458d202374a804afa49f06a4c5e21dcf0e5882d3f
GET /gpt/pubads_impl_2022083001.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 131975
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 04 Sep 2022 21:50:38 GMT
expires: Mon, 04 Sep 2023 21:50:38 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Tue, 30 Aug 2022 08:35:16 GMT
content-type: text/javascript
age: 145321
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76c6ad39ad355f829170427e9076311a
26a82c7dd26986900a4964464e43d9837dfef1f8
40c6ca74d92e002befb684bce24ba4714c260ba30918cc4e9a4bb02ed4f809dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 14:12:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pracuj2.pl/themes/basic/front/i/body_back.jpg
200 OK 358 B URL HTTP/1.1 pracuj2.pl/themes/basic/front/i/body_back.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 4x82, components 3\012- data
Hash 96cb7e4d88aae53302fb08b57aa103c5
e7bfd5672dae2dd239d0e1f09c52f0f2d00c75b5
b7856be0595f1b646ada084cbf72cc5c1fe6fb68f3f7e4d8fbf53ff7d68f2ed4
Analyzer Verdict Alert quad9 Sinkholed
GET /themes/basic/front/i/body_back.jpg HTTP/1.1
Host: pracuj2.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/themes/basic/front/style/style.css
Cookie: dclassifieds__8966a7a7c2e7e3d9f4833a09f25b46ac=848pmv0ocivceft9t9jhf30os4
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:39 GMT
Content-Type: image/jpeg
Content-Length: 358
Last-Modified: Fri, 09 Nov 2018 05:23:43 GMT
Connection: keep-alive
ETag: "5be519df-166"
Accept-Ranges: bytes
fonts.gstatic.com/s/cuprum/v20/dg45_pLmvrkcOkBnKsOzXyGWTBcmg-X6VjXYJwQj.woff2
200 OK 3.9 kB URL HTTP/1.1 fonts.gstatic.com/s/cuprum/v20/dg45_pLmvrkcOkBnKsOzXyGWTBcmg-X6VjXYJwQj.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 3868, version 1.0\012- data
Hash 00dfe34d0cca4a8e678f0133bc178350
2d3571a26aecae2749cfa29fb38c23832f78a46f
5e20bd9ff77576840464532e372ce92ade3b63863429600e41820cf78459a169
GET /s/cuprum/v20/dg45_pLmvrkcOkBnKsOzXyGWTBcmg-X6VjXYJwQj.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pracuj2.pl
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 3868
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 05 Sep 2022 08:07:09 GMT
Expires: Tue, 05 Sep 2023 08:07:09 GMT
Cache-Control: public, max-age=31536000
Age: 108330
Last-Modified: Mon, 11 Jul 2022 20:32:08 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/cuprum/v20/dg45_pLmvrkcOkBnKsOzXyGWTBcmg-X6VjvYJw.woff2
200 OK 8.1 kB URL HTTP/1.1 fonts.gstatic.com/s/cuprum/v20/dg45_pLmvrkcOkBnKsOzXyGWTBcmg-X6VjvYJw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 8116, version 1.0\012- data
Hash 909b40322aa2cd7a2aea613953eae0b1
84e061807b392a887239d91f34a26dd77fc30487
f18d57747180068b241552c0f59bcc16dee612baca3fdc9b9e6ba3cfb94c7b33
GET /s/cuprum/v20/dg45_pLmvrkcOkBnKsOzXyGWTBcmg-X6VjvYJw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pracuj2.pl
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 8116
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 05 Sep 2022 04:59:49 GMT
Expires: Tue, 05 Sep 2023 04:59:49 GMT
Cache-Control: public, max-age=31536000
Age: 119570
Last-Modified: Mon, 11 Jul 2022 20:37:47 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/cuprum/v20/dg45_pLmvrkcOkBnKsOzXyGWTBcmg-X6Vj_YJwQj.woff2
200 OK 5.7 kB URL HTTP/1.1 fonts.gstatic.com/s/cuprum/v20/dg45_pLmvrkcOkBnKsOzXyGWTBcmg-X6Vj_YJwQj.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 5704, version 1.0\012- data
Hash 4c52c76e414a7e568358fc68ce6548be
84af09115f2dbf69111654ee27028c180ba0f129
264be19c450af10a1c301cb6ed000c22ac8942ad7224c93df78f72327df9b923
GET /s/cuprum/v20/dg45_pLmvrkcOkBnKsOzXyGWTBcmg-X6Vj_YJwQj.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pracuj2.pl
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 5704
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 03 Sep 2022 06:58:01 GMT
Expires: Sun, 03 Sep 2023 06:58:01 GMT
Cache-Control: public, max-age=31536000
Age: 285278
Last-Modified: Mon, 11 Jul 2022 20:35:54 GMT
Content-Type: font/woff2
ad.a-ads.com/1008955?size=728x90
200 OK 4.7 kB URL HTTP/1.1 ad.a-ads.com/1008955?size=728x90
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (11122)
Hash 6817e4955b3f19d32cb45e007dfd4fc4
76e0c8ed6324b1af8b130234806a68d7eaad430c
7d83e95dd25066710562d480db27a402e72a9fab4908b6370f90b8e2dca28b57
GET /1008955?size=728x90 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:39 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
Status: 200 OK
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Powered-By: Phusion Passenger(R)
X-Original-Referer: http://pracuj2.pl/
X-Robots-Tag: noindex, nofollow, nosnippet, noarchive
Content-Encoding: gzip
ad.a-ads.com/1008957?size=160x600
200 OK 4.7 kB URL HTTP/1.1 ad.a-ads.com/1008957?size=160x600
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (11122)
Hash 355639dec80fa2a927b2932ad38b240e
e6354af2fa4971c873c141cb2399f71c105c815a
a376949adf2f8fa375ec352dea3958f91d2ad4f806c21a6281057d45983d93a6
GET /1008957?size=160x600 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
Status: 200 OK
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Powered-By: Phusion Passenger(R)
X-Original-Referer: http://pracuj2.pl/
X-Robots-Tag: noindex, nofollow, nosnippet, noarchive
Content-Encoding: gzip
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: CoAuaRl/cme1/yrBn9q8fg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: YGfIRV+XJS9oQUMBC+pcAQOWyAA=
pracuj2.pl/themes/basic/front/i/down.gif
200 OK 854 B URL HTTP/1.1 pracuj2.pl/themes/basic/front/i/down.gif
IP
File type GIF image data, version 89a, 11 x 8\012- data
Hash 03c263d5ddd8c9bd93501572e064bb1a
561824b1dd9ad56a7284ecb2ed1763beb018ad92
c4701cacedfda8d2883e40d3f0f88e01e3a927880a7b6a4fcc5060cc0d105a34
Analyzer Verdict Alert quad9 Sinkholed
GET /themes/basic/front/i/down.gif HTTP/1.1
Host: pracuj2.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: dclassifieds__8966a7a7c2e7e3d9f4833a09f25b46ac=848pmv0ocivceft9t9jhf30os4
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: image/gif
Content-Length: 854
Last-Modified: Fri, 09 Nov 2018 05:23:43 GMT
Connection: keep-alive
ETag: "5be519df-356"
Accept-Ranges: bytes
ad.a-ads.com/1008955?size=728x90
200 OK 4.7 kB URL HTTP/1.1 ad.a-ads.com/1008955?size=728x90
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (11122)
Hash 6817e4955b3f19d32cb45e007dfd4fc4
76e0c8ed6324b1af8b130234806a68d7eaad430c
7d83e95dd25066710562d480db27a402e72a9fab4908b6370f90b8e2dca28b57
GET /1008955?size=728x90 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
Status: 200 OK
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Powered-By: Phusion Passenger(R)
X-Original-Referer: http://pracuj2.pl/
X-Robots-Tag: noindex, nofollow, nosnippet, noarchive
Content-Encoding: gzip
ad.a-ads.com/1008957?size=160x600
200 OK 4.7 kB URL HTTP/1.1 ad.a-ads.com/1008957?size=160x600
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (11122)
Hash 7f7ab0e5677dc2b409dbbec55e341122
7e5e35a7de6af4b64b609e6f9258d14ef67fd6a7
7a2d47ae55970b74cb205649ca97440c1e91d0a4de8d664cc3546f24ea650055
GET /1008957?size=160x600 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
Status: 200 OK
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Powered-By: Phusion Passenger(R)
X-Original-Referer: http://pracuj2.pl/
X-Robots-Tag: noindex, nofollow, nosnippet, noarchive
Content-Encoding: gzip
ad.a-ads.com/1008957?size=160x600
200 OK 4.7 kB URL HTTP/1.1 ad.a-ads.com/1008957?size=160x600
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (11122)
Hash dba9b71173444a1b10f62d036e25615d
17551c8f0b9b7dbaa6fbbae29db6a49202f55e2f
b160dd7b06ac06da8fa8b5ba31201c2f5ef2eb86542660db599e03b852b565a7
GET /1008957?size=160x600 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
Status: 200 OK
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Powered-By: Phusion Passenger(R)
X-Original-Referer: http://pracuj2.pl/
X-Robots-Tag: noindex, nofollow, nosnippet, noarchive
Content-Encoding: gzip
pracuj2.pl/p.php
200 OK 22 kB IP
File type ASCII text, with very long lines (1786)
Hash 27ef78fecf8f5c86ff07fb87673ece1b
1dfa56536a7397230984e58459271e9e222ea76b
de13ebf3e8ac4ad93fc7e1665e9207f60c86d33c50f52262d56f7d321da419ed
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /p.php HTTP/1.1
Host: pracuj2.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: dclassifieds__8966a7a7c2e7e3d9f4833a09f25b46ac=848pmv0ocivceft9t9jhf30os4
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 14:12:39 GMT
Content-Encoding: gzip
Vary: Accept-Encoding, Accept-Encoding
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9a1218af6fd7da8fb60506d76410b98e
249c5e9ceb01e601d19f672972b23cefe60e1685
dc78421a03a527bb516f7af4a56618230ecb043a6939d0fbf84384e3f75c41d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DC78421A03A527BB516F7AF4A56618230ECB043A6939D0FBF84384E3F75C41D1"
Last-Modified: Tue, 06 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18078
Expires: Tue, 06 Sep 2022 19:13:58 GMT
Date: Tue, 06 Sep 2022 14:12:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9a1218af6fd7da8fb60506d76410b98e
249c5e9ceb01e601d19f672972b23cefe60e1685
dc78421a03a527bb516f7af4a56618230ecb043a6939d0fbf84384e3f75c41d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DC78421A03A527BB516F7AF4A56618230ECB043A6939D0FBF84384E3F75C41D1"
Last-Modified: Tue, 06 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18078
Expires: Tue, 06 Sep 2022 19:13:58 GMT
Date: Tue, 06 Sep 2022 14:12:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9a1218af6fd7da8fb60506d76410b98e
249c5e9ceb01e601d19f672972b23cefe60e1685
dc78421a03a527bb516f7af4a56618230ecb043a6939d0fbf84384e3f75c41d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DC78421A03A527BB516F7AF4A56618230ECB043A6939D0FBF84384E3F75C41D1"
Last-Modified: Tue, 06 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18078
Expires: Tue, 06 Sep 2022 19:13:58 GMT
Date: Tue, 06 Sep 2022 14:12:40 GMT
Connection: keep-alive
static.a-ads.com/a-ads-banners/137986/160x600?region=eu-central-1
200 OK 287 kB URL HTTP/1.1 static.a-ads.com/a-ads-banners/137986/160x600?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 160 x 600\012- data
Size 287 kB (287248 bytes)
Hash b64a86ea750d6d39d7b06e2c0a571ad9
e9002470274db985335701103dc1f299859d2921
fb6e73336b455ea60aa286f00bacf47967e114b0bf4331d18e02d25eefb73a90
GET /a-ads-banners/137986/160x600?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ad.a-ads.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: image/gif
Content-Length: 287248
Connection: keep-alive
x-amz-id-2: rN0VqmlV0ZNXcM7CWax6ZbXwazsVCsdJtNKSGSmWisF1d73hI0pXpI+PjlvrVCgN9rrcQIQCS2c=
x-amz-request-id: SC3D4D6VMN7GCA87
Last-Modified: Wed, 03 Feb 2021 19:46:10 GMT
ETag: "b64a86ea750d6d39d7b06e2c0a571ad9"
Cache-Control: max-age=315360000
x-amz-version-id: null
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9a1218af6fd7da8fb60506d76410b98e
249c5e9ceb01e601d19f672972b23cefe60e1685
dc78421a03a527bb516f7af4a56618230ecb043a6939d0fbf84384e3f75c41d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DC78421A03A527BB516F7AF4A56618230ECB043A6939D0FBF84384E3F75C41D1"
Last-Modified: Tue, 06 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18078
Expires: Tue, 06 Sep 2022 19:13:58 GMT
Date: Tue, 06 Sep 2022 14:12:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9a1218af6fd7da8fb60506d76410b98e
249c5e9ceb01e601d19f672972b23cefe60e1685
dc78421a03a527bb516f7af4a56618230ecb043a6939d0fbf84384e3f75c41d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DC78421A03A527BB516F7AF4A56618230ECB043A6939D0FBF84384E3F75C41D1"
Last-Modified: Tue, 06 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18078
Expires: Tue, 06 Sep 2022 19:13:58 GMT
Date: Tue, 06 Sep 2022 14:12:40 GMT
Connection: keep-alive
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441181%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441181%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441181%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=sAkJCmMXVVg/rQBtcxx7AsUf1D6zjIUVUnWgYmu+mx+QyVu7; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/aci.js
200 OK 7.5 kB IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1408)
Hash ae0aab6c5a2ae2e1168e74f6e6ae4741
2c00f69ee4bbe2ec96c0f7bb33b5f827a6195af8
a47a88a9b6c7635e5074c25c6e3c92f399fdf8772376e94f077167241e59f9de
GET /aci.js HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: application/x-javascript
content-length: 7461
last-modified: Wed, 08 Jun 2022 16:58:23 GMT
etag: "62a0d52f-1d25"
content-encoding: gzip
expires: Wed, 07 Sep 2022 02:12:40 GMT
cache-control: max-age=43200
X-Firefox-Spdy: h2
ssp-rtb.sape.ru/data/?callback=sapeRTB_631755527_85242764&srtbid=94308&scids=161944657,161232304&sx=1268&sy=939&ref=&u=http%3A%2F%2Fpracuj2.pl%2F&allimps=1&fl=0&v=3&tz=%2B00%3A00
200 OK 50 B URL HTTP/1.1 ssp-rtb.sape.ru/data/?callback=sapeRTB_631755527_85242764&srtbid=94308&scids=161944657,161232304&sx=1268&sy=939&ref=&u=http%3A%2F%2Fpracuj2.pl%2F&allimps=1&fl=0&v=3&tz=%2B00%3A00
IP
File type ASCII text, with no line terminators
Hash dc0a0aca2e80fa23fb57862a3c4eab27
23aebea0a515e793821c1e78dba90341dcf9bc7b
c617865f57062b8b373a8b856caba2fcb7a1349fe48ee7ba00b1d315fdb2a248
GET /data/?callback=sapeRTB_631755527_85242764&srtbid=94308&scids=161944657,161232304&sx=1268&sy=939&ref=&u=http%3A%2F%2Fpracuj2.pl%2F&allimps=1&fl=0&v=3&tz=%2B00%3A00 HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 50
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Content-Encoding: gzip
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=wQO4pWMXVVgJeAEzCZSyAtx65l3AvBc6y4iedQvpRF0vMLbF; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
static.a-ads.com/a-ads-banners/407259/160x600?region=eu-central-1
200 OK 604 kB URL HTTP/1.1 static.a-ads.com/a-ads-banners/407259/160x600?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 160 x 600\012- data
Size 604 kB (603625 bytes)
Hash 96bf0fd671d85dfc09dbf314e00c1da9
0ecf85be29942816464468c332506f824a8494fe
5b365b1844e553dd753f5fa741441091617afa337c7870381730272a8b3c2742
GET /a-ads-banners/407259/160x600?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ad.a-ads.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: image/gif
Content-Length: 603625
Connection: keep-alive
x-amz-id-2: YsBlqd2iQGcRdwEfKaNLccTVDtrN9he9PD8XTf3KBuW/4S/fMdXklxWs1o4mv3jDGY/x0LDuGX8=
x-amz-request-id: Z76HFMAE0ABA8NJY
x-amz-replication-status: COMPLETED
Last-Modified: Fri, 05 Aug 2022 10:27:24 GMT
ETag: "96bf0fd671d85dfc09dbf314e00c1da9"
Cache-Control: max-age=315360000
x-amz-version-id: uPUDqksSzjggXKLiI9s_jqWehtEgBgyU
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Accept-Ranges: bytes
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441182%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441182%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441182%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=LgRybWMXVViNqgBiFbMwArg4sVLOrJkNEN08Xs8f+mztA1Nb; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/pxl/1?dp=16&id=94308.441181.161944657.0.0.0&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/pxl/1?dp=16&id=94308.441181.161944657.0.0.0&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/1?dp=16&id=94308.441181.161944657.0.0.0&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=fwAAAWMXVVgaagBkyIOHAgLSMvi25D6FphrrfYVQ8sKbC3Fd; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441183%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441183%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441183%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=fwAAAWMXVVgaZgBj+HPsAhNDlpEsSwW2OEqs8XEmom2VFKMi; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441182%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441182%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441182%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=nVqzHGMXVVgaYABi9NnHAhPMH84BwgNb6PgOx7Jnm2WtEiyW; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441181%2C%22ev%22%3A%22loadFree%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441181%2C%22ev%22%3A%22loadFree%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441181%2C%22ev%22%3A%22loadFree%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=LgR5GmMXVVhCKABjqgQiAnMuM76EjuAoQ8C9eS8/udZaLhLE; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/pxl/1?dp=16&id=94308.441183.161232304.0.0.0&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/pxl/1?dp=16&id=94308.441183.161232304.0.0.0&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/1?dp=16&id=94308.441183.161232304.0.0.0&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=LgR5GmMXVVhCKABjqgQlAozYCVQngPHpKX2rkh91DswEnJ+F; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441184%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441184%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441184%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=LgRybWMXVViNfQBh3YvQAshX8cJ+AZjpK1FvF7I8aTX4fVyO; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/pxl/1?dp=68&id=94308.441185.161232311.1.0.112&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/pxl/1?dp=68&id=94308.441185.161232311.1.0.112&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/1?dp=68&id=94308.441185.161232311.1.0.112&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=sAkJCmMXVVg/4QBw5pPJAuX0pyZvdElqtPlNB+iJgTI282vO; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441183%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441183%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441183%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=sAkJCmMXVVhAZABxEiq+AgjC+U9ruAAQ3ve8yXHDZoP1nGpb; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/pxl/1?dp=16&id=94308.441180.161232283.9.3.68&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/pxl/1?dp=16&id=94308.441180.161232283.9.3.68&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/1?dp=16&id=94308.441180.161232283.9.3.68&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=sAkJCmMXVVg/rQBtcx0QAqkNHOa4mQE4R3ltRlCVDMz6vNtD; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441186%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441186%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441186%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=LgRybWMXVViNQABfcF7nAg4vQsRKLXd8Ow/ot5H9kZle4IHi; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=sAkJCmMXVVhAZgBuRgu1AsmVX/nBM0edaoPcnJy9Zc/e3GXn; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441180%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441180%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441180%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=LgRybWMXVViNqgBiFbOiAodtCFxD9pc0D+e7l3LAnbnAdca9; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441180%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441180%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441180%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=LgR5GmMXVVhCHABig26jAuo84OXlrZ90NW3VL2EEU6rPxOS1; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441180%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441180%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441180%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=LgR5GmMXVVhCHABig268AljhkbgHhcRMS4d2wW7oCLEGOcdq; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441184%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441184%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441184%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=LgR5GmMXVVhCKABjqgR2AoM97yynlFMi2IaAAEHAAKlhT2AS; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441186%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441186%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441186%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=nVqzHGMXVVgaYABi9No7AhL7NSqdUd9FKqmphZNNeMI++4YI; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441185%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441185%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441185%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=LgR5GmMXVVhCdgBhCdTjAjTtzLQFW/5m4Z8GcVO0IeyG5RTz; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A440839%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A440839%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A440839%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=fwAAAWMXVVgaZgBj+HR1AuIuK/fs/SxYUO950JSKME5Sytft; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441185%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441185%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441185%2C%22ev%22%3A%22loadDiv%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=nVqzHGMXVVgapgBl2ZAOAsOrqvtTUE0dtNCTqJ9TaJmqN+FY; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/pxl/3?dp=121&id=94308.441180.161232286.9.0.138&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/pxl/3?dp=121&id=94308.441180.161232286.9.0.138&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/3?dp=121&id=94308.441180.161232286.9.0.138&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=fwAAAWMXVVgapgBl2ZAPArjVfoTZKBdsqaof6sOnHWBSU8lO; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441185%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441185%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441185%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=fwAAAWMXVVgacABmCGj8Ao1f/HW2/Rk22T8xaazINQS1/jq1; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1040%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1040%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1040%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473554 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
static.a-ads.com/a-ads-banners/117607/160x600?region=eu-central-1
200 OK 75 kB URL HTTP/1.1 static.a-ads.com/a-ads-banners/117607/160x600?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 160 x 600\012- data
Hash b59aabb1f87114b8f4f16a385f2a6faf
e3e4cd4e6c89039d7cde2e6a567387a41983e05d
267875329f6307ddcceab8c2d53d92c49e6c151e6d2b5737dcc1823f4999cc12
GET /a-ads-banners/117607/160x600?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ad.a-ads.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: image/gif
Content-Length: 75017
Connection: keep-alive
x-amz-id-2: HEejVSuks/AMfW6AVov2uCw7VuzetTsX7gWNkExet9QWBt6neMhHUGpRzIg8Te14BG/E1KX5LaU=
x-amz-request-id: Z90CWCN3N1WDS1CZ
Last-Modified: Sun, 19 Apr 2020 16:06:32 GMT
ETag: "b59aabb1f87114b8f4f16a385f2a6faf"
Cache-Control: max-age=315360000
x-amz-version-id: _8e25L6LLwCnm5fyqnlKwZQfgSJIw1O5
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Accept-Ranges: bytes
static.a-ads.com/a-ads-banners/413686/728x90?region=eu-central-1
200 OK 105 kB URL HTTP/1.1 static.a-ads.com/a-ads-banners/413686/728x90?region=eu-central-1
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, baseline, precision 8, 728x90, components 3\012- data
Size 105 kB (104852 bytes)
Hash 13a345ef402879cadeb45653e350b5e5
621e871d7d6f97cd7e855ac6bd64d5bd366c10ba
18473179cb10d7f7dced87630ad6242240ba0ef80bd25c7c7ec9a9d610956086
GET /a-ads-banners/413686/728x90?region=eu-central-1 HTTP/1.1
Host: static.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ad.a-ads.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: image/jpeg
Content-Length: 104852
Connection: keep-alive
x-amz-id-2: OFD6QWmAiFOXhiQkDsYcnQgD1mzUoCSLX433kIlOTpL+W0lX1Hi0daUDIuwGRQ1jl+Hl4t3ROJk=
x-amz-request-id: AVSE80TVR04WCV2F
x-amz-replication-status: COMPLETED
Last-Modified: Tue, 06 Sep 2022 08:04:03 GMT
ETag: "13a345ef402879cadeb45653e350b5e5"
Cache-Control: max-age=315360000
x-amz-version-id: kV7.W59Ap1QUHYZH45G2tgqXW9EMCCGj
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Accept-Ranges: bytes
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441181%2C%22ev%22%3A%22stub%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441181%2C%22ev%22%3A%22stub%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441181%2C%22ev%22%3A%22stub%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: aid=fwAAAWMXVVgacABmCGj8Ao1f/HW2/Rk22T8xaazINQS1/jq1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441183%2C%22ev%22%3A%22stub%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441183%2C%22ev%22%3A%22stub%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441183%2C%22ev%22%3A%22stub%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/pxl/3?dp=16&id=94308.441183.161232304.0.0.0&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555
200 OK 43 B URL HTTP/2 www.acint.net/pxl/3?dp=16&id=94308.441183.161232304.0.0.0&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/3?dp=16&id=94308.441183.161232304.0.0.0&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 2a0caf82bc05570a4a33e1fd2b133624
db1b12c0864b7d47f43fb1db6715c653c3f6c7a3
1a282f9efa805b9298c00dff21ab3b3702631425c3bddb822dedd5afc8e1d8aa
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sat, 10 Sep 2022 10:47:40 GMT
ETag: "db1b12c0864b7d47f43fb1db6715c653c3f6c7a3"
Last-Modified: Tue, 06 Sep 2022 10:47:41 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 907
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7467cd08fadcb524-OSL
www.acint.net/pxl/3?dp=16&id=94308.441181.161944657.0.0.0&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555
200 OK 43 B URL HTTP/2 www.acint.net/pxl/3?dp=16&id=94308.441181.161944657.0.0.0&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/3?dp=16&id=94308.441181.161944657.0.0.0&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: aid=fwAAAWMXVVgapgBl2ZAPArjVfoTZKBdsqaof6sOnHWBSU8lO
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/mc/?dp=14
302 Moved Temporarily 142 B IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /mc/?dp=14 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/mc/?dp=14
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441183%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441183%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441183%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/hit/?v=0.4.0&uid=2572476f-f5cb-476d-8825-4ad6b6e212bb&dp=14&tz=%2B00%3A00&nc=73183464&u=http%3A%2F%2Fpracuj2.pl%2F&r=&rs=1280x1024&t=Oferty%20Pracy&oE=1&oP=1&dT=2022-09-06T14%3A12%3A34.824&fu=6204e4e9-1f70-4760-a5af-103f33d77d42
302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/hit/?v=0.4.0&uid=2572476f-f5cb-476d-8825-4ad6b6e212bb&dp=14&tz=%2B00%3A00&nc=73183464&u=http%3A%2F%2Fpracuj2.pl%2F&r=&rs=1280x1024&t=Oferty%20Pracy&oE=1&oP=1&dT=2022-09-06T14%3A12%3A34.824&fu=6204e4e9-1f70-4760-a5af-103f33d77d42
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /hit/?v=0.4.0&uid=2572476f-f5cb-476d-8825-4ad6b6e212bb&dp=14&tz=%2B00%3A00&nc=73183464&u=http%3A%2F%2Fpracuj2.pl%2F&r=&rs=1280x1024&t=Oferty%20Pracy&oE=1&oP=1&dT=2022-09-06T14%3A12%3A34.824&fu=6204e4e9-1f70-4760-a5af-103f33d77d42 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/hit/?v=0.4.0&uid=2572476f-f5cb-476d-8825-4ad6b6e212bb&dp=14&tz=%2B00%3A00&nc=73183464&u=http%3A%2F%2Fpracuj2.pl%2F&r=&rs=1280x1024&t=Oferty%20Pracy&oE=1&oP=1&dT=2022-09-06T14%3A12%3A34.824&fu=6204e4e9-1f70-4760-a5af-103f33d77d42
ssp.otm-r.com/adjson?tz=0&w=300&h=250&s=ck6s195mdyv1m0868lv9fis3e&bidid=2236a6a47c3f84&transactionid=56e48f5c-2a65-4c15-9562-b151d3520fea&auctionid=2a556e44-d883-45b9-bd95-4b3493b1f469&bidfloor=9
200 OK 2 B URL HTTP/2 ssp.otm-r.com/adjson?tz=0&w=300&h=250&s=ck6s195mdyv1m0868lv9fis3e&bidid=2236a6a47c3f84&transactionid=56e48f5c-2a65-4c15-9562-b151d3520fea&auctionid=2a556e44-d883-45b9-bd95-4b3493b1f469&bidfloor=9
IP
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /adjson?tz=0&w=300&h=250&s=ck6s195mdyv1m0868lv9fis3e&bidid=2236a6a47c3f84&transactionid=56e48f5c-2a65-4c15-9562-b151d3520fea&auctionid=2a556e44-d883-45b9-bd95-4b3493b1f469&bidfloor=9 HTTP/1.1
Host: ssp.otm-r.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://pracuj2.pl
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.17.10
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: application/javascript
content-length: 2
access-control-allow-credentials: true
access-control-allow-origin: http://pracuj2.pl
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: mpid=NjMxNzU1NTgxMGFmYWFhZA==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
www.acint.net/hit/?v=0.4.0&uid=2572476f-f5cb-476d-8825-4ad6b6e212bb&dp=14&tz=%2B00%3A00&nc=73183464&u=http%3A%2F%2Fpracuj2.pl%2F&r=&rs=1280x1024&t=Oferty%20Pracy&oE=1&oP=1&dT=2022-09-06T14%3A12%3A34.824&fu=6204e4e9-1f70-4760-a5af-103f33d77d42
200 OK 43 B URL HTTP/2 www.acint.net/hit/?v=0.4.0&uid=2572476f-f5cb-476d-8825-4ad6b6e212bb&dp=14&tz=%2B00%3A00&nc=73183464&u=http%3A%2F%2Fpracuj2.pl%2F&r=&rs=1280x1024&t=Oferty%20Pracy&oE=1&oP=1&dT=2022-09-06T14%3A12%3A34.824&fu=6204e4e9-1f70-4760-a5af-103f33d77d42
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hit/?v=0.4.0&uid=2572476f-f5cb-476d-8825-4ad6b6e212bb&dp=14&tz=%2B00%3A00&nc=73183464&u=http%3A%2F%2Fpracuj2.pl%2F&r=&rs=1280x1024&t=Oferty%20Pracy&oE=1&oP=1&dT=2022-09-06T14%3A12%3A34.824&fu=6204e4e9-1f70-4760-a5af-103f33d77d42 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pracuj2.pl/
Connection: keep-alive
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
302 Moved Temporarily 142 B URL HTTP/1.1 ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Cookie: sspuid=wQO4pWMXVVgJeAEzCZSyAtx65l3AvBc6y4iedQvpRF0vMLbF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/match?dp=14&euid=A5B803C1585517633301780902B29409
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
a.utraff.com/sync?ssp=sape
204 No Content 0 B URL HTTP/2 a.utraff.com/sync?ssp=sape
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?ssp=sape HTTP/1.1
Host: a.utraff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: text/plain
set-cookie: preutid=1; Expires=Thu, 06 Oct 2022 17:12:40 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/
preutid=1; Expires=Thu, 06 Oct 2022 17:12:40 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-expose-headers: Content-Length,Content-Range
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OMRzIQh9O77ttp6jAEhFq8gPEglI6pAaYlh9untti4mO0EYh7nD%2Bz3YPXO9EIn62XV3oq9W6OXTweEPFeDzigIG6pUqy%2BmY1qnLXuEDv8Q3gp%2BFzC0q5pQ%2FzAvgnjUE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7467cd09f8f3b51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.acint.net/pxl/1?dp=112&id=94308.441185.161232314.1.1.183&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555
200 OK 43 B URL HTTP/2 www.acint.net/pxl/1?dp=112&id=94308.441185.161232314.1.1.183&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/1?dp=112&id=94308.441185.161232314.1.1.183&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; cSyncDp7v2=1662473560; cSyncDp14v3=1662473560; cSyncDp17=1662473560; cSyncDp32=1662473560; cSyncDp45v3=1662473560; cSyncDp53=1662473560; cSyncDp54v2=1662473560; cSyncDp62=1662473560; cSyncDp67v2=1662473560; cSyncDp68=1662473560; cSyncDp71=1662473560; cSyncDp77=1662473560; cSyncDp84=1662473560; cSyncDp85=1662473560; cSyncDp95v3=1662473560; cSyncDp101=1662473560; cSyncDp104v2=1662473560; cSyncDp107=1662473560; cSyncDp110=1662473560; cSyncDp111v2=1662473560; cSyncDp112v2=1662473560; cSyncDp125v2=1662473560; cSyncDp126=1662473560; cSyncDp127=1662473560; cSyncDp129=1662473560; cSyncDp136v2=1662473560; cSyncDp138=1662473560; cSyncDp144=1662473560; cSyncDp146=1662473560; cSyncDp148=1662473560; cSyncDp149=1662473560; cSyncDp151=1662473560; cSyncDp179=1662473560; cSyncDp186=1662473560
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
dm-eu.hybrid.ai/match?id=106&vid=1CB35A9D585517636600701A02FD6808
204 No Content 0 B URL HTTP/2 dm-eu.hybrid.ai/match?id=106&vid=1CB35A9D585517636600701A02FD6808
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?id=106&vid=1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: dm-eu.hybrid.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 06 Sep 2022 14:12:40 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
set-cookie: vid=59289da7453e1ef8894f; expires=Wed, 06 Sep 2023 14:12:39 GMT; domain=.hybrid.ai; path=/; samesite=none
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 523
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: Hybrid Web Server
X-Firefox-Spdy: h2
www.acint.net/pxl/3?dp=68&id=94308.441185.161232311.1.0.112&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555
200 OK 43 B URL HTTP/2 www.acint.net/pxl/3?dp=68&id=94308.441185.161232311.1.0.112&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/3?dp=68&id=94308.441185.161232311.1.0.112&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; cSyncDp7v2=1662473560; cSyncDp14v3=1662473560; cSyncDp17=1662473560; cSyncDp32=1662473560; cSyncDp45v3=1662473560; cSyncDp53=1662473560; cSyncDp54v2=1662473560; cSyncDp62=1662473560; cSyncDp67v2=1662473560; cSyncDp68=1662473560; cSyncDp71=1662473560; cSyncDp77=1662473560; cSyncDp84=1662473560; cSyncDp85=1662473560; cSyncDp95v3=1662473560; cSyncDp101=1662473560; cSyncDp104v2=1662473560; cSyncDp107=1662473560; cSyncDp110=1662473560; cSyncDp111v2=1662473560; cSyncDp112v2=1662473560; cSyncDp125v2=1662473560; cSyncDp126=1662473560; cSyncDp127=1662473560; cSyncDp129=1662473560; cSyncDp136v2=1662473560; cSyncDp138=1662473560; cSyncDp144=1662473560; cSyncDp146=1662473560; cSyncDp148=1662473560; cSyncDp149=1662473560; cSyncDp151=1662473560; cSyncDp179=1662473560; cSyncDp186=1662473560
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 2a3c36627d65ac7bc09b12bbc8a5891f
1ca20402a5ca454b8c6b0f5294a3b95027169ad9
7c487e4b00b7505614245e2d1b7639ff676b506cd42ff5dc998928c656f827dc
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sat, 10 Sep 2022 10:32:43 GMT
ETag: "1ca20402a5ca454b8c6b0f5294a3b95027169ad9"
Last-Modified: Tue, 06 Sep 2022 10:32:44 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2152
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7467cd0a7ccab524-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83bd024cc02b3299917f70916d4f0282
80acdfa7ef806862834efe053ed0d2bc1b0b0a6f
c1fc9234937fa16ba9be560a4313321f12f3d244a01a40b1d5c97265b04aa499
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C1FC9234937FA16BA9BE560A4313321F12F3D244A01A40B1D5C97265B04AA499"
Last-Modified: Sun, 04 Sep 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11735
Expires: Tue, 06 Sep 2022 17:28:15 GMT
Date: Tue, 06 Sep 2022 14:12:40 GMT
Connection: keep-alive
ads.adlook.me/csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
302 Found 0 B URL HTTP/2 ads.adlook.me/csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
IP
ASN #48096 Enterprise Cloud Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /csync?url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://acint.net/match?dp=110&euid=2afb627bc5f841969fe92e2ccf8529f6
server: Kestrel
set-cookie: adlm_userId=2afb627bc5f841969fe92e2ccf8529f6; expires=Tue, 05 Sep 2023 21:00:00 GMT; path=/; SameSite=None; secure
date: Tue, 06 Sep 2022 14:12:40 GMT
content-length: 0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6189b9d9b5bdbba86eed57258bb2fdcc
639a6cf1fa77c07b7bcbb5913fbe07ae1e29a798
c07a394db8c5da0e058d28ade4d775a1ceecd0984a5d63a83faff3595bc378cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C07A394DB8C5DA0E058D28ADE4D775A1CEECD0984A5D63A83FAFF3595BC378CF"
Last-Modified: Sun, 04 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5274
Expires: Tue, 06 Sep 2022 15:40:34 GMT
Date: Tue, 06 Sep 2022 14:12:40 GMT
Connection: keep-alive
acint.net/match?dp=14&euid=A5B803C1585517633301780902B29409
200 OK 43 B URL HTTP/2 acint.net/match?dp=14&euid=A5B803C1585517633301780902B29409
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=14&euid=A5B803C1585517633301780902B29409 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; cSyncDp7v2=1662473560; cSyncDp14v3=1662473560; cSyncDp17=1662473560; cSyncDp32=1662473560; cSyncDp45v3=1662473560; cSyncDp53=1662473560; cSyncDp54v2=1662473560; cSyncDp62=1662473560; cSyncDp67v2=1662473560; cSyncDp68=1662473560; cSyncDp71=1662473560; cSyncDp77=1662473560; cSyncDp84=1662473560; cSyncDp85=1662473560; cSyncDp95v3=1662473560; cSyncDp101=1662473560; cSyncDp104v2=1662473560; cSyncDp107=1662473560; cSyncDp110=1662473560; cSyncDp111v2=1662473560; cSyncDp112v2=1662473560; cSyncDp125v2=1662473560; cSyncDp126=1662473560; cSyncDp127=1662473560; cSyncDp129=1662473560; cSyncDp136v2=1662473560; cSyncDp138=1662473560; cSyncDp144=1662473560; cSyncDp146=1662473560; cSyncDp148=1662473560; cSyncDp149=1662473560; cSyncDp151=1662473560; cSyncDp179=1662473560; cSyncDp186=1662473560
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.dmp.otm-r.com/match/sape?id=1CB35A9D585517636600701A02FD6808
204 No Content 0 B URL HTTP/2 sync.dmp.otm-r.com/match/sape?id=1CB35A9D585517636600701A02FD6808
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Cookie: mpid=NjMxNzU1NTgxMGFmYWFhZA==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.19.7
date: Tue, 06 Sep 2022 14:12:40 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0257bf71f232921a64ef745e483249bf
d1c9e7485cbc2ca37dc49866422a73c33b868233
fc307f8316fddd387b7fb6c8baea148255d13f55388ac5eff5cbae4ccc83746f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC307F8316FDDD387B7FB6C8BAEA148255D13F55388AC5EFF5CBAE4CCC83746F"
Last-Modified: Tue, 06 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20176
Expires: Tue, 06 Sep 2022 19:48:56 GMT
Date: Tue, 06 Sep 2022 14:12:40 GMT
Connection: keep-alive
ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
302 Found 0 B URL HTTP/1.1 ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D HTTP/1.1
Host: ssp.bestssp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.16.1
Date: Tue, 06 Sep 2022 14:12:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.acint.net/match?dp=95&euid=ALUDRKWB
Set-Cookie: uid=ALUDRKWB; Expires=Tue, 06 Sep 2032 00:00:00 GMT; mf2=1; Expires=Thu, 06 Oct 2022 00:00:00 GMT;
s.uuidksinc.net/match/396/?remote_uid=1CB35A9D585517636600701A02FD6808
302 Found 0 B URL HTTP/2 s.uuidksinc.net/match/396/?remote_uid=1CB35A9D585517636600701A02FD6808
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/396/?remote_uid=1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: s.uuidksinc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.19.0
date: Tue, 06 Sep 2022 14:12:40 GMT
content-length: 0
location: https://www.acint.net/match?dp=127&euid=oQT91e8oi5GvqL7WUxRD
set-cookie: jcsuuid=oQT91e8oi5GvqL7WUxRD; expires=Wed, 06 Sep 2023 14:12:40 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
acint.net/match?dp=110&euid=2afb627bc5f841969fe92e2ccf8529f6
200 OK 43 B URL HTTP/2 acint.net/match?dp=110&euid=2afb627bc5f841969fe92e2ccf8529f6
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=110&euid=2afb627bc5f841969fe92e2ccf8529f6 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; cSyncDp7v2=1662473560; cSyncDp14v3=1662473560; cSyncDp17=1662473560; cSyncDp32=1662473560; cSyncDp45v3=1662473560; cSyncDp53=1662473560; cSyncDp54v2=1662473560; cSyncDp62=1662473560; cSyncDp67v2=1662473560; cSyncDp68=1662473560; cSyncDp71=1662473560; cSyncDp77=1662473560; cSyncDp84=1662473560; cSyncDp85=1662473560; cSyncDp95v3=1662473560; cSyncDp101=1662473560; cSyncDp104v2=1662473560; cSyncDp107=1662473560; cSyncDp110=1662473560; cSyncDp111v2=1662473560; cSyncDp112v2=1662473560; cSyncDp125v2=1662473560; cSyncDp126=1662473560; cSyncDp127=1662473560; cSyncDp129=1662473560; cSyncDp136v2=1662473560; cSyncDp138=1662473560; cSyncDp144=1662473560; cSyncDp146=1662473560; cSyncDp148=1662473560; cSyncDp149=1662473560; cSyncDp151=1662473560; cSyncDp179=1662473560; cSyncDp186=1662473560
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fab2a3b54efd251657ecfd1b99e0d3cc
53fbbbe7a82364bcd724f206f205cc8b5351f3ad
9d119cf1a65ce9075ee0347a139dc4dedc5c526b6130d984cc9889c80be511f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9D119CF1A65CE9075EE0347A139DC4DEDC5C526B6130D984CC9889C80BE511F3"
Last-Modified: Sun, 04 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6091
Expires: Tue, 06 Sep 2022 15:54:11 GMT
Date: Tue, 06 Sep 2022 14:12:40 GMT
Connection: keep-alive
cdn-rtb.sape.ru/js/vast/player.min.js
200 OK 50 kB URL HTTP/2 cdn-rtb.sape.ru/js/vast/player.min.js
IP
Hash 27a7221a1592eaa61ec5fe0ac193fc8f
f5b84e60b2ce2c010a5ec2648656961198869657
1366d604f4074245ac638fa7ba57aa12b4fb609d58f3f5102f5d99f7f128916f
GET /js/vast/player.min.js HTTP/1.1
Host: cdn-rtb.sape.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: text/javascript
content-security-policy: block-all-mixed-content
etag: W/"c0c4d45a67dc519d35e131ca2a48f55f"
last-modified: Tue, 30 Aug 2022 08:10:09 GMT
vary: Origin
x-amz-request-id: 171011757F410AEC
x-xss-protection: 1; mode=block
expires: Wed, 07 Sep 2022 14:12:40 GMT
cache-control: max-age=86400
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
co9.rktch.com/static/rb.js
200 OK 1.9 kB URL HTTP/1.1 co9.rktch.com/static/rb.js
IP
ASN #49352 Domain names registrar REG.RU, Ltd
Hash 064f86ddb1de270b60b863de7d515d72
6a5e0a59dee764694cf4ebcdabc00b850902ae51
18f06f27699ff338360436376865c71bc66b4a72e62e7858ed2f5a13a3a5a767
GET /static/rb.js HTTP/1.1
Host: co9.rktch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: application/javascript
Last-Modified: Thu, 13 Aug 2020 09:34:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"5f350939-1945"
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Content-Encoding: gzip
sync.republer.com/match?dsp=sape
204 No Content 0 B URL HTTP/2 sync.republer.com/match?dsp=sape
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?dsp=sape HTTP/1.1
Host: sync.republer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Tue, 06 Sep 2022 14:12:40 GMT
strict-transport-security: max-age=0
X-Firefox-Spdy: h2
www.acint.net/match?dp=95&euid=ALUDRKWB
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=95&euid=ALUDRKWB
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=95&euid=ALUDRKWB HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; cSyncDp7v2=1662473560; cSyncDp14v3=1662473560; cSyncDp17=1662473560; cSyncDp32=1662473560; cSyncDp45v3=1662473560; cSyncDp53=1662473560; cSyncDp54v2=1662473560; cSyncDp62=1662473560; cSyncDp67v2=1662473560; cSyncDp68=1662473560; cSyncDp71=1662473560; cSyncDp77=1662473560; cSyncDp84=1662473560; cSyncDp85=1662473560; cSyncDp95v3=1662473560; cSyncDp101=1662473560; cSyncDp104v2=1662473560; cSyncDp107=1662473560; cSyncDp110=1662473560; cSyncDp111v2=1662473560; cSyncDp112v2=1662473560; cSyncDp125v2=1662473560; cSyncDp126=1662473560; cSyncDp127=1662473560; cSyncDp129=1662473560; cSyncDp136v2=1662473560; cSyncDp138=1662473560; cSyncDp144=1662473560; cSyncDp146=1662473560; cSyncDp148=1662473560; cSyncDp149=1662473560; cSyncDp151=1662473560; cSyncDp179=1662473560; cSyncDp186=1662473560
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash a16a4e2f91cae5ae08ce280758e69f6b
3e34616a0d831ff945fb1cf1b17a94a44639b2c1
68775af4972f41e8b4689186ff180743d7759cddf55758509e25048953758733
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 00:21:02 GMT
Expires: Sun, 11 Sep 2022 00:21:01 GMT
Etag: "3e34616a0d831ff945fb1cf1b17a94a44639b2c1"
Cache-Control: max-age=381500,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7467cd0b1bdd0b69-OSL
www.acint.net/match?dp=127&euid=oQT91e8oi5GvqL7WUxRD
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=127&euid=oQT91e8oi5GvqL7WUxRD
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=127&euid=oQT91e8oi5GvqL7WUxRD HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; cSyncDp7v2=1662473560; cSyncDp14v3=1662473560; cSyncDp17=1662473560; cSyncDp32=1662473560; cSyncDp45v3=1662473560; cSyncDp53=1662473560; cSyncDp54v2=1662473560; cSyncDp62=1662473560; cSyncDp67v2=1662473560; cSyncDp68=1662473560; cSyncDp71=1662473560; cSyncDp77=1662473560; cSyncDp84=1662473560; cSyncDp85=1662473560; cSyncDp95v3=1662473560; cSyncDp101=1662473560; cSyncDp104v2=1662473560; cSyncDp107=1662473560; cSyncDp110=1662473560; cSyncDp111v2=1662473560; cSyncDp112v2=1662473560; cSyncDp125v2=1662473560; cSyncDp126=1662473560; cSyncDp127=1662473560; cSyncDp129=1662473560; cSyncDp136v2=1662473560; cSyncDp138=1662473560; cSyncDp144=1662473560; cSyncDp146=1662473560; cSyncDp148=1662473560; cSyncDp149=1662473560; cSyncDp151=1662473560; cSyncDp179=1662473560; cSyncDp186=1662473560
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1CB35A9D585517636600701A02FD6808
302 Found 0 B URL HTTP/2 sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1CB35A9D585517636600701A02FD6808
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: sync.1dmp.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 06 Sep 2022 14:12:40 GMT
content-length: 0
expires: 0
cache-control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
set-cookie: uid=f7efcb63-2ded-11ed-acfd-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Wed, 06 Sep 2023 14:12:40 GMT; SameSite=None; Secure
uid-legacy=f7efcb63-2ded-11ed-acfd-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Wed, 06 Sep 2023 14:12:40 GMT
location: /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1CB35A9D585517636600701A02FD6808&cs=1
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 57 kB URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
File type ASCII text, with very long lines (2897)
Hash 501d9cb8b1e3e8ee03516bb91f8fd6f5
8d888de595f3c5904d85be71ffe361d2020f58c9
6d71ea0ca8d57e71223b7406c86762dd3e21d6aa541e86fbf734264cf6ba9662
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Date: Tue, 06 Sep 2022 14:12:40 GMT
Expires: Tue, 06 Sep 2022 14:12:40 GMT
Cache-Control: private, max-age=3600
Content-Type: text/javascript; charset=UTF-8
ETag: 12159090348587770562
Vary: Accept-Encoding, Origin
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 57422
X-XSS-Protection: 0
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2fbd67356cbea8ab34b4734c3e38bcb5
0ff9d499bf343eb4ef5b76a33dbe75d866a3a7b9
0d74d94af247e62a0c94f0971dd1b1f8b81a221a59cfa3c7d15af8c94ce57db4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0D74D94AF247E62A0C94F0971DD1B1F8B81A221A59CFA3C7D15AF8C94CE57DB4"
Last-Modified: Sun, 04 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11218
Expires: Tue, 06 Sep 2022 17:19:38 GMT
Date: Tue, 06 Sep 2022 14:12:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cb5e2e192c06df91b7881140651cbf63
b8d89ebd6c93bf320c816eb859e42490647c4a99
f566e3ed45e1e379fea2e6102fe020409f852f420309341ca7d6539d00327617
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F566E3ED45E1E379FEA2E6102FE020409F852F420309341CA7D6539D00327617"
Last-Modified: Sun, 04 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5279
Expires: Tue, 06 Sep 2022 15:40:39 GMT
Date: Tue, 06 Sep 2022 14:12:40 GMT
Connection: keep-alive
sync.upravel.com/sape/sync
302 Found 0 B URL HTTP/2 sync.upravel.com/sape/sync
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/png
content-length: 0
location: https://sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
set-cookie: session_tptc=1662473560874;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
session_tptc-legacy=1662473560874;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
ut.rktch.com/matchspm?pi=1000005&pui=1CB35A9D585517636600701A02FD6808
302 Found 0 B URL HTTP/1.1 ut.rktch.com/matchspm?pi=1000005&pui=1CB35A9D585517636600701A02FD6808
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /matchspm?pi=1000005&pui=1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: ut.rktch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Length: 0
Connection: keep-alive
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
Set-Cookie: b_uid=f1f6dbfaa18e310111bc10acdab3d8f01383; Max-Age=2592000; Expires=Thu, 06 Oct 2022 14:12:40 GMT; Domain=rktch.com; Secure; SameSite=None
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Access-Control-Allow-Headers: Content-Type, Accept, Authorization
Access-Control-Allow-Credentials: true
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6e906a17ce4ff56ad70b4595f5f2e958
7361c11d4642e53f523b8fc347a8dd0179511902
1831f5877dcf03b677527dbe6ed6735275700f38f234e810f4dd3f830e36e1ae
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1831F5877DCF03B677527DBE6ED6735275700F38F234E810F4DD3F830E36E1AE"
Last-Modified: Sun, 04 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3266
Expires: Tue, 06 Sep 2022 15:07:06 GMT
Date: Tue, 06 Sep 2022 14:12:40 GMT
Connection: keep-alive
sync.bumlam.com/?src=sap1&uid=1CB35A9D585517636600701A02FD6808
302 Moved Temporarily 0 B URL HTTP/1.1 sync.bumlam.com/?src=sap1&uid=1CB35A9D585517636600701A02FD6808
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&uid=1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiRmN2Y1YWYwOC0yZGVkLTExZWQtOTAwMy0wMDI1OTBjODI0Mzc*; Path=/; Expires=Mon, 01 Sep 2042 14:12:40 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync.bumlam.com/?src=sap1&s_data=CAIQARjYqt2YBmIgMUNCMzVBOUQ1ODU1MTc2MzY2MDA3MDFBMDJGRDY4MDiiARD39a8ILe0R7ZADACWQyCQ3
ETag: f7f5af08-2ded-11ed-9003-002590c82437
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
pracuj2.pl/favicon-16x16.png
200 OK 1.2 kB URL HTTP/1.1 pracuj2.pl/favicon-16x16.png
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 06d63a8dfd8f8d3f19ef732798e4b959
0730903eebed701d9ff9f3cc2ebd7388f6652814
a4238854e6a2cc17470940b335cf8144252b2241f11a1526065a1865bf57a9c6
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon-16x16.png HTTP/1.1
Host: pracuj2.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: dclassifieds__8966a7a7c2e7e3d9f4833a09f25b46ac=848pmv0ocivceft9t9jhf30os4; _pk_id.53.8e7b=abda949f497243d4.1662473555.1.1662473555.1662473555.; _pk_ses.53.8e7b=*; fid=6204e4e9-1f70-4760-a5af-103f33d77d42
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: image/png
Content-Length: 1156
Last-Modified: Fri, 09 Nov 2018 05:21:10 GMT
Connection: keep-alive
ETag: "5be51946-484"
Accept-Ranges: bytes
www.acint.net/match?dp=129&euid=bfnm41tzrn
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=129&euid=bfnm41tzrn
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=129&euid=bfnm41tzrn HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; cSyncDp7v2=1662473560; cSyncDp14v3=1662473560; cSyncDp17=1662473560; cSyncDp32=1662473560; cSyncDp45v3=1662473560; cSyncDp53=1662473560; cSyncDp54v2=1662473560; cSyncDp62=1662473560; cSyncDp67v2=1662473560; cSyncDp68=1662473560; cSyncDp71=1662473560; cSyncDp77=1662473560; cSyncDp84=1662473560; cSyncDp85=1662473560; cSyncDp95v3=1662473560; cSyncDp101=1662473560; cSyncDp104v2=1662473560; cSyncDp107=1662473560; cSyncDp110=1662473560; cSyncDp111v2=1662473560; cSyncDp112v2=1662473560; cSyncDp125v2=1662473560; cSyncDp126=1662473560; cSyncDp127=1662473560; cSyncDp129=1662473560; cSyncDp136v2=1662473560; cSyncDp138=1662473560; cSyncDp144=1662473560; cSyncDp146=1662473560; cSyncDp148=1662473560; cSyncDp149=1662473560; cSyncDp151=1662473560; cSyncDp179=1662473560; cSyncDp186=1662473560
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
301 Moved Permanently 115 B URL HTTP/2 exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
IP
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text
Hash 89555e0f51a49d2977937cb20b6a91ac
350f50ee1193aac11a7ac94dd601420c254ba9ac
0ee0faab565a12180d5b3ae3c9db4b0984830c92d0ff5c177c4a9ed2229d28f5
GET /cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: text/html; charset=utf-8
content-length: 115
location: https://www.acint.net/match?dp=126&euid=869ed7d0-cb88-43ae-5a4c-c9961c601c1f
serverid: TODO
X-Firefox-Spdy: h2
mediatoday.ru/core/match.gif?s=32&id=1CB35A9D585517636600701A02FD6808
200 OK 43 B URL HTTP/2 mediatoday.ru/core/match.gif?s=32&id=1CB35A9D585517636600701A02FD6808
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /core/match.gif?s=32&id=1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: mediatoday.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.22.0
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 43
p3p: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
cache-control: no-cache, max-age=0, must-revalidate, no-store
pragma: no-cache
expires: Thursday, 01-Jan-1970 00:00:00 GMT
set-cookie: idntfy=VU0oZ4H0uIFUKqa; expires=Fri, 03-Sep-2032 14:12:40 GMT; domain=mediatoday.ru; path=/core; SameSite=None; Secure
X-Firefox-Spdy: h2
sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1CB35A9D585517636600701A02FD6808&cs=1
200 OK 35 B URL HTTP/2 sync.1dmp.io/pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1CB35A9D585517636600701A02FD6808&cs=1
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /pixel.gif?cid=4c144084-0ce0-4f71-a147-2abe600b8908&brid=ba2b253b-6888-4e47-a573-9ffc06d95cd1&pid=w&uid=1CB35A9D585517636600701A02FD6808&cs=1 HTTP/1.1
Host: sync.1dmp.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: uid=f7efcb63-2ded-11ed-acfd-901b0e8b2a6e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/gif
content-length: 35
expires: 0
cache-control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
set-cookie: uid=f7efcb63-2ded-11ed-acfd-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Wed, 06 Sep 2023 14:12:40 GMT; SameSite=None; Secure
uid-legacy=f7efcb63-2ded-11ed-acfd-901b0e8b2a6e; Version=1; Path=/; Domain=.1dmp.io; Expires=Wed, 06 Sep 2023 14:12:40 GMT
X-Firefox-Spdy: h2
cs.agency2.ru/p?ssp=sp&uid=1CB35A9D585517636600701A02FD6808
301 Moved Permanently 0 B URL HTTP/1.1 cs.agency2.ru/p?ssp=sp&uid=1CB35A9D585517636600701A02FD6808
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&uid=1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: cs.agency2.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Length: 0
Connection: keep-alive
Server: fasthttp
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.acint.net/match?dp=186&euid=b55c7a4b-6910-478a-bc6e-28dc215d2eb5
Set-Cookie: uuid=b55c7a4b-6910-478a-bc6e-28dc215d2eb5; expires=Mon, 28 Aug 2023 14:12:40 GMT; domain=agency2.ru; path=/; secure; SameSite=None
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.107.44
stat.adlabs.ru/merge_gpsid/?sid=50&id=1CB35A9D585517636600701A02FD6808
302 Found 0 B URL HTTP/2 stat.adlabs.ru/merge_gpsid/?sid=50&id=1CB35A9D585517636600701A02FD6808
IP
ASN #201009 Centre of server systems Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /merge_gpsid/?sid=50&id=1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: stat.adlabs.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 06 Sep 2022 14:12:40 GMT
content-length: 0
location: //adlmerge.com/merge_gpsid/?sid=50&id=1CB35A9D585517636600701A02FD6808
X-Firefox-Spdy: h2
match.new-programmatic.com/userbind?src=sape&id=1CB35A9D585517636600701A02FD6808
204 No Content 0 B URL HTTP/1.1 match.new-programmatic.com/userbind?src=sape&id=1CB35A9D585517636600701A02FD6808
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=sape&id=1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: match.new-programmatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.18.0
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
sync.bumlam.com/?src=sap1&s_data=CAIQARjYqt2YBmIgMUNCMzVBOUQ1ODU1MTc2MzY2MDA3MDFBMDJGRDY4MDiiARD39a8ILe0R7ZADACWQyCQ3
200 OK 0 B URL HTTP/1.1 sync.bumlam.com/?src=sap1&s_data=CAIQARjYqt2YBmIgMUNCMzVBOUQ1ODU1MTc2MzY2MDA3MDFBMDJGRDY4MDiiARD39a8ILe0R7ZADACWQyCQ3
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&s_data=CAIQARjYqt2YBmIgMUNCMzVBOUQ1ODU1MTc2MzY2MDA3MDFBMDJGRDY4MDiiARD39a8ILe0R7ZADACWQyCQ3 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: suuid3=IiRmN2Y1YWYwOC0yZGVkLTExZWQtOTAwMy0wMDI1OTBjODI0Mzc*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiRmN2Y1YWYwOC0yZGVkLTExZWQtOTAwMy0wMDI1OTBjODI0Mzc*; Path=/; Expires=Mon, 01 Sep 2042 14:12:40 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
pracuj2.pl/p.php?action_name=Oferty%20Pracy&idsite=53&rec=1&r=970211&h=14&m=12&s=34&url=http%3A%2F%2Fpracuj2.pl%2F&_id=abda949f497243d4&_idts=1662473555&_idvc=1&_idn=0&_refts=0&_viewts=1662473555&send_image=1&cookie=1&res=1280x1024>_ms=537&pv_id=PWPoAX
200 OK 43 B URL HTTP/1.1 pracuj2.pl/p.php?action_name=Oferty%20Pracy&idsite=53&rec=1&r=970211&h=14&m=12&s=34&url=http%3A%2F%2Fpracuj2.pl%2F&_id=abda949f497243d4&_idts=1662473555&_idvc=1&_idn=0&_refts=0&_viewts=1662473555&send_image=1&cookie=1&res=1280x1024>_ms=537&pv_id=PWPoAX
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
Analyzer Verdict Alert quad9 Sinkholed
GET /p.php?action_name=Oferty%20Pracy&idsite=53&rec=1&r=970211&h=14&m=12&s=34&url=http%3A%2F%2Fpracuj2.pl%2F&_id=abda949f497243d4&_idts=1662473555&_idvc=1&_idn=0&_refts=0&_viewts=1662473555&send_image=1&cookie=1&res=1280x1024>_ms=537&pv_id=PWPoAX HTTP/1.1
Host: pracuj2.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: dclassifieds__8966a7a7c2e7e3d9f4833a09f25b46ac=848pmv0ocivceft9t9jhf30os4; _pk_id.53.8e7b=abda949f497243d4.1662473555.1.1662473555.1662473555.; _pk_ses.53.8e7b=*
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
302 Found 0 B URL HTTP/2 sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0 HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: session_tptc=1662473560874
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: image/png
content-length: 0
location: https://9ba374a2-7f84-466d-bf70-d7c369fab3e3.sync.upravel.com/sape/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyIsImh0dHBzOi8vd3d3LmFjaW50Lm5ldC8iXX19
set-cookie: user_id=9ba374a2-7f84-466d-bf70-d7c369fab3e3;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
user_id-legacy=9ba374a2-7f84-466d-bf70-d7c369fab3e3;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash b206b7db9a266efc1b92ad399c4b6f07
cade31dfd089733bd264d46e945ca60db81c03b5
6c5f3c31f6bd31d74e31d904089feebf9fcd2af92bfa69f07841a0d3db2032d9
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Sat, 10 Sep 2022 12:02:59 GMT
ETag: "cade31dfd089733bd264d46e945ca60db81c03b5"
Last-Modified: Tue, 06 Sep 2022 12:03:00 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1178
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7467cd0c1cacb512-OSL
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash d4713adc336acaef2286870eb4add632
f2d793c4e1d228389ea8738a0c556bae3b71949c
67fbea155d3f958b95b9629ea8249661e5e49052f7db1d40c0c749ed63552c98
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sat, 10 Sep 2022 11:51:29 GMT
ETag: "f2d793c4e1d228389ea8738a0c556bae3b71949c"
Last-Modified: Tue, 06 Sep 2022 11:51:30 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 72
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7467cd0c19941c16-OSL
tg.rktch.com/v0?i=11693&p=1&vw=300&vh=250&sw=1280&sh=1024&rk=HUptYW&url=http%3A%2F%2Fpracuj2.pl%2F&siteid=161232314
200 OK 487 B URL HTTP/1.1 tg.rktch.com/v0?i=11693&p=1&vw=300&vh=250&sw=1280&sh=1024&rk=HUptYW&url=http%3A%2F%2Fpracuj2.pl%2F&siteid=161232314
IP
ASN #49352 Domain names registrar REG.RU, Ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (487), with no line terminators
Hash 51a960f73fa460b329aa8c4f14a51ea9
880db1d952626a4b90c34a6c9a2964901755e775
e12660b52898efbaffcfe29089d96902fbc9a67eeb59fdffcfa81a6b5fc3ce62
GET /v0?i=11693&p=1&vw=300&vh=250&sw=1280&sh=1024&rk=HUptYW&url=http%3A%2F%2Fpracuj2.pl%2F&siteid=161232314 HTTP/1.1
Host: tg.rktch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 06 Sep 2022 14:11:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST
Access-Control-Allow-Credentials: false
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: Content-Type, Authorization, x-ad4-*
Set-Cookie: b_uid=46ce7771f88cc22fb5bd6458151da82bb158; Max-Age=36000; Expires=Wed, 07 Sep 2022 00:11:06 GMT; Domain=rktch.com; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000
www.acint.net/match?dp=126&euid=869ed7d0-cb88-43ae-5a4c-c9961c601c1f
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=126&euid=869ed7d0-cb88-43ae-5a4c-c9961c601c1f
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=126&euid=869ed7d0-cb88-43ae-5a4c-c9961c601c1f HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; cSyncDp7v2=1662473560; cSyncDp14v3=1662473560; cSyncDp17=1662473560; cSyncDp32=1662473560; cSyncDp45v3=1662473560; cSyncDp53=1662473560; cSyncDp54v2=1662473560; cSyncDp62=1662473560; cSyncDp67v2=1662473560; cSyncDp68=1662473560; cSyncDp71=1662473560; cSyncDp77=1662473560; cSyncDp84=1662473560; cSyncDp85=1662473560; cSyncDp95v3=1662473560; cSyncDp101=1662473560; cSyncDp104v2=1662473560; cSyncDp107=1662473560; cSyncDp110=1662473560; cSyncDp111v2=1662473560; cSyncDp112v2=1662473560; cSyncDp125v2=1662473560; cSyncDp126=1662473560; cSyncDp127=1662473560; cSyncDp129=1662473560; cSyncDp136v2=1662473560; cSyncDp138=1662473560; cSyncDp144=1662473560; cSyncDp146=1662473560; cSyncDp148=1662473560; cSyncDp149=1662473560; cSyncDp151=1662473560; cSyncDp179=1662473560; cSyncDp186=1662473560
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/match?dp=186&euid=b55c7a4b-6910-478a-bc6e-28dc215d2eb5
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=186&euid=b55c7a4b-6910-478a-bc6e-28dc215d2eb5
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=186&euid=b55c7a4b-6910-478a-bc6e-28dc215d2eb5 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; cSyncDp7v2=1662473560; cSyncDp14v3=1662473560; cSyncDp17=1662473560; cSyncDp32=1662473560; cSyncDp45v3=1662473560; cSyncDp53=1662473560; cSyncDp54v2=1662473560; cSyncDp62=1662473560; cSyncDp67v2=1662473560; cSyncDp68=1662473560; cSyncDp71=1662473560; cSyncDp77=1662473560; cSyncDp84=1662473560; cSyncDp85=1662473560; cSyncDp95v3=1662473560; cSyncDp101=1662473560; cSyncDp104v2=1662473560; cSyncDp107=1662473560; cSyncDp110=1662473560; cSyncDp111v2=1662473560; cSyncDp112v2=1662473560; cSyncDp125v2=1662473560; cSyncDp126=1662473560; cSyncDp127=1662473560; cSyncDp129=1662473560; cSyncDp136v2=1662473560; cSyncDp138=1662473560; cSyncDp144=1662473560; cSyncDp146=1662473560; cSyncDp148=1662473560; cSyncDp149=1662473560; cSyncDp151=1662473560; cSyncDp179=1662473560; cSyncDp186=1662473560
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ca2f987e176300de91c28f24c4b1b39
02cd65a9595c4679d09f1126bd25d00a638ade11
76d7fbb15dbdeb1ac908ac565f9c1a7b7bc253aa984c56605edfcde2759985f7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "76D7FBB15DBDEB1AC908AC565F9C1A7B7BC253AA984C56605EDFCDE2759985F7"
Last-Modified: Sun, 04 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10958
Expires: Tue, 06 Sep 2022 17:15:19 GMT
Date: Tue, 06 Sep 2022 14:12:41 GMT
Connection: keep-alive
ssp.bidvol.com/usersync?dspcsid=8&redirect=1
302 Found 471 B URL HTTP/2 ssp.bidvol.com/usersync?dspcsid=8&redirect=1
IP
ASN #24940 Hetzner Online GmbH
Hash da4692f1529a23a6cfb04391e382c936
7befa8be966f1128ff3c25be47986e7fa7087de9
d8460cc7719813509b4e38be06b8d184306f9451695c3e1974c1d06e5c29039c
GET /usersync?dspcsid=8&redirect=1 HTTP/1.1
Host: ssp.bidvol.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.22.0
date: Tue, 06 Sep 2022 14:12:40 GMT
x-request-id: 9b48739a-e4ca-4ff3-8612-94ab837cc58b
set-cookie: bvuid=bfnm41tzrn; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None
bvuid2=bfnm41tzrn; Max-Age=2147483647; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT
vary: Origin
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
surrogate-control: no-store
location: https://www.acint.net/match?dp=129&euid=bfnm41tzrn
X-Firefox-Spdy: h2
www.acint.net/pxl/3?dp=112&id=94308.441185.161232314.1.1.183&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555
200 OK 43 B URL HTTP/2 www.acint.net/pxl/3?dp=112&id=94308.441185.161232314.1.1.183&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/3?dp=112&id=94308.441185.161232314.1.1.183&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; cSyncDp7v2=1662473560; cSyncDp14v3=1662473560; cSyncDp17=1662473560; cSyncDp32=1662473560; cSyncDp45v3=1662473560; cSyncDp53=1662473560; cSyncDp54v2=1662473560; cSyncDp62=1662473560; cSyncDp67v2=1662473560; cSyncDp68=1662473560; cSyncDp71=1662473560; cSyncDp77=1662473560; cSyncDp84=1662473560; cSyncDp85=1662473560; cSyncDp95v3=1662473560; cSyncDp101=1662473560; cSyncDp104v2=1662473560; cSyncDp107=1662473560; cSyncDp110=1662473560; cSyncDp111v2=1662473560; cSyncDp112v2=1662473560; cSyncDp125v2=1662473560; cSyncDp126=1662473560; cSyncDp127=1662473560; cSyncDp129=1662473560; cSyncDp136v2=1662473560; cSyncDp138=1662473560; cSyncDp144=1662473560; cSyncDp146=1662473560; cSyncDp148=1662473560; cSyncDp149=1662473560; cSyncDp151=1662473560; cSyncDp179=1662473560; cSyncDp186=1662473560
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 80f29cbbe260408ee1418a6fbce5a537
96cfe52bcf90cfdba5cba7907d49a91f44adc032
de264b42b7c59bdadf606387adaca04af680705a947096d048f288c3e5be8517
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 14:12:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ssp-rtb.sape.ru/data/?callback=sapeRTB_631755537_89387945&srtbid=94308&scids=161232310&sx=1268&sy=939&ref=&u=http%3A%2F%2Fpracuj2.pl%2F&allimps=0&fl=0&v=3&tz=%2B00%3A00
200 OK 50 B URL HTTP/1.1 ssp-rtb.sape.ru/data/?callback=sapeRTB_631755537_89387945&srtbid=94308&scids=161232310&sx=1268&sy=939&ref=&u=http%3A%2F%2Fpracuj2.pl%2F&allimps=0&fl=0&v=3&tz=%2B00%3A00
IP
File type ASCII text, with no line terminators
Hash d8c1f6671518d003960740a64b3e462e
30892db564d7e90a936addc3afb3221e84fafff4
67f4a74d2eebeaa44faed2c0a66bda666eb96e1d0c261f6032c4e509c02dbce8
GET /data/?callback=sapeRTB_631755537_89387945&srtbid=94308&scids=161232310&sx=1268&sy=939&ref=&u=http%3A%2F%2Fpracuj2.pl%2F&allimps=0&fl=0&v=3&tz=%2B00%3A00 HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: sspuid=wQO4pWMXVVgJeAEzCZSyAtx65l3AvBc6y4iedQvpRF0vMLbF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 06 Sep 2022 14:12:41 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 50
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Content-Encoding: gzip
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
adservice.google.no/adsid/integrator.js?domain=pracuj2.pl
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=pracuj2.pl
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=pracuj2.pl HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 06 Sep 2022 14:12:41 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.acint.net/pxl/1?dp=16&id=94308.441185.161232310.1.5.0&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555
200 OK 43 B URL HTTP/2 www.acint.net/pxl/1?dp=16&id=94308.441185.161232310.1.5.0&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/1?dp=16&id=94308.441185.161232310.1.5.0&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473555 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; cSyncDp7v2=1662473560; cSyncDp14v3=1662473560; cSyncDp17=1662473560; cSyncDp32=1662473560; cSyncDp45v3=1662473560; cSyncDp53=1662473560; cSyncDp54v2=1662473560; cSyncDp62=1662473560; cSyncDp67v2=1662473560; cSyncDp68=1662473560; cSyncDp71=1662473560; cSyncDp77=1662473560; cSyncDp84=1662473560; cSyncDp85=1662473560; cSyncDp95v3=1662473560; cSyncDp101=1662473560; cSyncDp104v2=1662473560; cSyncDp107=1662473560; cSyncDp110=1662473560; cSyncDp111v2=1662473560; cSyncDp112v2=1662473560; cSyncDp125v2=1662473560; cSyncDp126=1662473560; cSyncDp127=1662473560; cSyncDp129=1662473560; cSyncDp136v2=1662473560; cSyncDp138=1662473560; cSyncDp144=1662473560; cSyncDp146=1662473560; cSyncDp148=1662473560; cSyncDp149=1662473560; cSyncDp151=1662473560; cSyncDp179=1662473560; cSyncDp186=1662473560
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=pracuj2.pl
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=pracuj2.pl
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=pracuj2.pl HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 06 Sep 2022 14:12:41 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1cb35a9d585517636600701a02fd6808-sp.ops.beeline.ru/p?ssp=sp&id=1CB35A9D585517636600701A02FD6808
301 Moved Permanently 0 B URL HTTP/2 1cb35a9d585517636600701a02fd6808-sp.ops.beeline.ru/p?ssp=sp&id=1CB35A9D585517636600701A02FD6808
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&id=1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: 1cb35a9d585517636600701a02fd6808-sp.ops.beeline.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 06 Sep 2022 14:12:41 GMT
content-length: 0
location: https://www.acint.net/match?dp=111&euid=047607b8-a74c-445d-9c5f-654c17e1c93d
access-control-allow-origin: *
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: BeeAID=047607b8-a74c-445d-9c5f-654c17e1c93d; expires=Mon, 28 Aug 2023 14:12:41 GMT; domain=ops.beeline.ru; path=/; secure; SameSite=None
access-control-allow-credentials: true, true
access-control-allow-methods: HEAD,GET,POST,PUT,DELETE,OPTIONS, GET, HEAD, POST, OPTIONS, PUT, DELETE
access-control-allow-headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
x-route: http://upstream_cookiesync
x-host: 192.168.152.60
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash da4692f1529a23a6cfb04391e382c936
7befa8be966f1128ff3c25be47986e7fa7087de9
d8460cc7719813509b4e38be06b8d184306f9451695c3e1974c1d06e5c29039c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 14:12:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 80f29cbbe260408ee1418a6fbce5a537
96cfe52bcf90cfdba5cba7907d49a91f44adc032
de264b42b7c59bdadf606387adaca04af680705a947096d048f288c3e5be8517
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 14:12:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mc.yandex.ru/metrika/watch.js
200 OK 57 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (569)
Hash c88af7521379660d8b1c4cfaad1362f4
f4a277fbd562a31d329bf4561878c2512be3b4a0
3e33643c480df9268cc54e0086082dd14e1791ba6bc161c0ec81c5855b0acca5
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 56896
date: Tue, 06 Sep 2022 14:12:41 GMT
access-control-allow-origin: *
etag: "6315c3a4-de40"
expires: Tue, 06 Sep 2022 15:12:41 GMT
last-modified: Mon, 05 Sep 2022 12:38:44 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3503
Expires: Tue, 06 Sep 2022 15:11:04 GMT
Date: Tue, 06 Sep 2022 14:12:41 GMT
Connection: keep-alive
www.acint.net/match?dp=111&euid=047607b8-a74c-445d-9c5f-654c17e1c93d
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=111&euid=047607b8-a74c-445d-9c5f-654c17e1c93d
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=111&euid=047607b8-a74c-445d-9c5f-654c17e1c93d HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; cSyncDp7v2=1662473560; cSyncDp14v3=1662473560; cSyncDp17=1662473560; cSyncDp32=1662473560; cSyncDp45v3=1662473560; cSyncDp53=1662473560; cSyncDp54v2=1662473560; cSyncDp62=1662473560; cSyncDp67v2=1662473560; cSyncDp68=1662473560; cSyncDp71=1662473560; cSyncDp77=1662473560; cSyncDp84=1662473560; cSyncDp85=1662473560; cSyncDp95v3=1662473560; cSyncDp101=1662473560; cSyncDp104v2=1662473560; cSyncDp107=1662473560; cSyncDp110=1662473560; cSyncDp111v2=1662473560; cSyncDp112v2=1662473560; cSyncDp125v2=1662473560; cSyncDp126=1662473560; cSyncDp127=1662473560; cSyncDp129=1662473560; cSyncDp136v2=1662473560; cSyncDp138=1662473560; cSyncDp144=1662473560; cSyncDp146=1662473560; cSyncDp148=1662473560; cSyncDp149=1662473560; cSyncDp151=1662473560; cSyncDp179=1662473560; cSyncDp186=1662473560
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1756524-f0d1-4149-aa44-603b827f87d4.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1756524-f0d1-4149-aa44-603b827f87d4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 983e705542fa78b4d5c876e0c1eada7e
5fc951e5236edd282d4975853ca35dab2e55fb17
fa6e478fc213f6cb6c9f33c96c51105262c857bfe313b3d310755be30b1feeb3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1756524-f0d1-4149-aa44-603b827f87d4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6656
x-amzn-requestid: 2703eaf4-1a5a-41a6-859b-47255865efb0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAX-3F2ZIAMFpLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166d2b-6df026de5a9230ed429d08c1;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:42:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FIIvB2jeQ_PBDzi8XRN0jnNxze3OwDbz8TBaIcadRvmQd2EFhCwX7Q==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:45:42 GMT
age: 59219
etag: "5fc951e5236edd282d4975853ca35dab2e55fb17"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ec466c0d472e43c11d36bf6fce068205
720d3624a76d060b8e2699e9aa7a320e3efd4878
5553fc24713aae808f5ab81671551b0ae719435f3ced9f25df97d8edf6bfe86f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12683
x-amzn-requestid: 6127e5b6-72f6-40df-b400-41a1f147f6da
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xz8XmEe0IAMFQDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63117430-2b27a2683d2d320172cef32e;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 03:10:40 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Mj_IT5g7hGu2AunKK7mvierv5BQ8cAxhnbGaUNsL6hRNu6MRAzIBDw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 04:36:52 GMT
age: 34549
etag: "720d3624a76d060b8e2699e9aa7a320e3efd4878"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=pracuj2.pl
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=pracuj2.pl
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=pracuj2.pl HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 06 Sep 2022 14:12:41 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf271bbd-cebf-41d8-a0c3-8f16d4423a79.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf271bbd-cebf-41d8-a0c3-8f16d4423a79.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8ce50dfa23e7f34ff68cc6426c2823f7
b1685694999272feb4d9fc39296418cd95480678
4df89827b1b34bb577f28f281ed85067a2e34dd48923b9bae1561e81f67be49b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdf271bbd-cebf-41d8-a0c3-8f16d4423a79.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7152
x-amzn-requestid: 2571ff54-e2f8-4072-8a26-3d0dd4cd3523
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAWsfHz_IAMFaXQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166b1c-6a598849314cdc433f9f82f7;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:33:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: XjbO8y9D7PhQcN0XaBkmhcjzWCMRczO80wxAJa4gUFQZPrS6eb3Z3A==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:48:59 GMT
age: 59022
etag: "b1685694999272feb4d9fc39296418cd95480678"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ad09c5e-a115-4ff7-9742-809e93046365.jpeg
200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ad09c5e-a115-4ff7-9742-809e93046365.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c81f3df885bdee8cac46ea9495e6b63b
fc766bca874a352a4acb569577d4cf6527f4f074
e21473f88c613ca33ba6bbe1e0cab338274a06744cdcb088f14873c972445b36
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ad09c5e-a115-4ff7-9742-809e93046365.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4426
x-amzn-requestid: b5b68557-e46d-41cd-9b11-d996aabc0de7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzfYTHHFIAMFjFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631145ce-1d3504367cf6ef724a345564;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 23:52:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bSBSzzRMdrVdoV3Ld8hYWq2AwO7Mswcwa8Tk_AKa44j1SlrFugNqpg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:48:06 GMT
age: 59075
etag: "fc766bca874a352a4acb569577d4cf6527f4f074"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed40d152-6303-4f00-ad80-054a81ea5425.webp
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed40d152-6303-4f00-ad80-054a81ea5425.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0efc32eccbf76ac0d89f324d09a7fd1f
f8589eb3907582137d8b9373af745d80eddbf1bb
ee0f5e56c97e50e1c20801ad0a5379982feef16a11137f784f404d14e9c65824
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed40d152-6303-4f00-ad80-054a81ea5425.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6482
x-amzn-requestid: 5e5b342b-0224-4916-8656-237b4c90ae66
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAX-5FaYIAMFzjw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166d2b-412f897b451130af70026eab;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:42:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8UExY-3ojiqMEfyXXKG6kJcB5CRiNnfgG5JQS3gWnd4t4bbKNzbsYA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:45:43 GMT
age: 59218
etag: "f8589eb3907582137d8b9373af745d80eddbf1bb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441185%2C%22ev%22%3A%22stub%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473556
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441185%2C%22ev%22%3A%22stub%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473556
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441185%2C%22ev%22%3A%22stub%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473556 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; cSyncDp7v2=1662473560; cSyncDp14v3=1662473560; cSyncDp17=1662473560; cSyncDp32=1662473560; cSyncDp45v3=1662473560; cSyncDp53=1662473560; cSyncDp54v2=1662473560; cSyncDp62=1662473560; cSyncDp67v2=1662473560; cSyncDp68=1662473560; cSyncDp71=1662473560; cSyncDp77=1662473560; cSyncDp84=1662473560; cSyncDp85=1662473560; cSyncDp95v3=1662473560; cSyncDp101=1662473560; cSyncDp104v2=1662473560; cSyncDp107=1662473560; cSyncDp110=1662473560; cSyncDp111v2=1662473560; cSyncDp112v2=1662473560; cSyncDp125v2=1662473560; cSyncDp126=1662473560; cSyncDp127=1662473560; cSyncDp129=1662473560; cSyncDp136v2=1662473560; cSyncDp138=1662473560; cSyncDp144=1662473560; cSyncDp146=1662473560; cSyncDp148=1662473560; cSyncDp149=1662473560; cSyncDp151=1662473560; cSyncDp179=1662473560; cSyncDp186=1662473560
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e36fad7-34cb-448b-b231-07f66a5adf7e.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e36fad7-34cb-448b-b231-07f66a5adf7e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3fe4a321dcd6a94a637a528d74f9321a
3f3aad2cc71226b39549db1a9baa6837d4f1d897
a19b6749429e8ecaeac8fc0849abc4d891bfc628489762b1619a3ee3064536e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e36fad7-34cb-448b-b231-07f66a5adf7e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12573
x-amzn-requestid: 92e03b26-883b-41e2-9033-379a6d02210c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAYCdGy8oAMFQZw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166d42-1c4ea2f74b796623574bde87;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:42:26 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: u1hKGB5UKEuuIVqcQ_Lx5wfBjy_hB32Jnp7_mDnF2BrsN4a6Mj_WJQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:46:16 GMT
etag: "3f3aad2cc71226b39549db1a9baa6837d4f1d897"
content-type: image/jpeg
age: 59185
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441185%2C%22ev%22%3A%22vis100%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473556
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441185%2C%22ev%22%3A%22vis100%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473556
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441185%2C%22ev%22%3A%22vis100%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473556 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; cSyncDp7v2=1662473560; cSyncDp14v3=1662473560; cSyncDp17=1662473560; cSyncDp32=1662473560; cSyncDp45v3=1662473560; cSyncDp53=1662473560; cSyncDp54v2=1662473560; cSyncDp62=1662473560; cSyncDp67v2=1662473560; cSyncDp68=1662473560; cSyncDp71=1662473560; cSyncDp77=1662473560; cSyncDp84=1662473560; cSyncDp85=1662473560; cSyncDp95v3=1662473560; cSyncDp101=1662473560; cSyncDp104v2=1662473560; cSyncDp107=1662473560; cSyncDp110=1662473560; cSyncDp111v2=1662473560; cSyncDp112v2=1662473560; cSyncDp125v2=1662473560; cSyncDp126=1662473560; cSyncDp127=1662473560; cSyncDp129=1662473560; cSyncDp136v2=1662473560; cSyncDp138=1662473560; cSyncDp144=1662473560; cSyncDp146=1662473560; cSyncDp148=1662473560; cSyncDp149=1662473560; cSyncDp151=1662473560; cSyncDp179=1662473560; cSyncDp186=1662473560
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/pxl/3?dp=16&id=94308.441185.161232310.1.5.0&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473556
200 OK 43 B URL HTTP/2 www.acint.net/pxl/3?dp=16&id=94308.441185.161232310.1.5.0&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473556
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/3?dp=16&id=94308.441185.161232310.1.5.0&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473556 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; cSyncDp7v2=1662473560; cSyncDp14v3=1662473560; cSyncDp17=1662473560; cSyncDp32=1662473560; cSyncDp45v3=1662473560; cSyncDp53=1662473560; cSyncDp54v2=1662473560; cSyncDp62=1662473560; cSyncDp67v2=1662473560; cSyncDp68=1662473560; cSyncDp71=1662473560; cSyncDp77=1662473560; cSyncDp84=1662473560; cSyncDp85=1662473560; cSyncDp95v3=1662473560; cSyncDp101=1662473560; cSyncDp104v2=1662473560; cSyncDp107=1662473560; cSyncDp110=1662473560; cSyncDp111v2=1662473560; cSyncDp112v2=1662473560; cSyncDp125v2=1662473560; cSyncDp126=1662473560; cSyncDp127=1662473560; cSyncDp129=1662473560; cSyncDp136v2=1662473560; cSyncDp138=1662473560; cSyncDp144=1662473560; cSyncDp146=1662473560; cSyncDp148=1662473560; cSyncDp149=1662473560; cSyncDp151=1662473560; cSyncDp179=1662473560; cSyncDp186=1662473560
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2daf90ca7ff3170c8ff9c94a049c8428
e98f05039236ff1602325ce7f5fbbcdc847eb474
1fc019e794628a930a136b133e637cc0b2ddb560a969159e5029ea396535f297
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 14:12:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
9ba374a2-7f84-466d-bf70-d7c369fab3e3.sync.upravel.com/sape/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyIsImh0dHBzOi8vd3d3LmFjaW50Lm5ldC8iXX19
302 Found 0 B URL HTTP/2 9ba374a2-7f84-466d-bf70-d7c369fab3e3.sync.upravel.com/sape/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyIsImh0dHBzOi8vd3d3LmFjaW50Lm5ldC8iXX19
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync?ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyIsImh0dHBzOi8vd3d3LmFjaW50Lm5ldC8iXX19 HTTP/1.1
Host: 9ba374a2-7f84-466d-bf70-d7c369fab3e3.sync.upravel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: session_tptc=1662473560874; user_id=9ba374a2-7f84-466d-bf70-d7c369fab3e3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 06 Sep 2022 14:12:41 GMT
content-type: image/png
content-length: 0
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: user_id=9ba374a2-7f84-466d-bf70-d7c369fab3e3;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
user_id-legacy=9ba374a2-7f84-466d-bf70-d7c369fab3e3;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
location: https://www.acint.net/match?dp=71&euid=9ba374a2-7f84-466d-bf70-d7c369fab3e3
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
partner.googleadservices.com/gampad/cookie.js?domain=pracuj2.pl&callback=_gfp_s_&client=ca-pub-8318585403899809
200 OK 201 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=pracuj2.pl&callback=_gfp_s_&client=ca-pub-8318585403899809
IP
File type ASCII text, with no line terminators
Hash 9d1abdc21e32a367db63bb4037b3be78
880f023a0b1e0488954b2927afcb35352ac288df
84b82084414be7581afcf9b4226fb67d7acdba02ca577f9796e2e73b07f3c76a
GET /gampad/cookie.js?domain=pracuj2.pl&callback=_gfp_s_&client=ca-pub-8318585403899809 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 06 Sep 2022 14:12:41 GMT
server: cafe
cache-control: private
content-length: 201
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2daf90ca7ff3170c8ff9c94a049c8428
e98f05039236ff1602325ce7f5fbbcdc847eb474
1fc019e794628a930a136b133e637cc0b2ddb560a969159e5029ea396535f297
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 14:12:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
7a412b96bf1785a59b878fdbc7348795.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html
200 OK 3.1 kB URL HTTP/2 7a412b96bf1785a59b878fdbc7348795.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5835)
Hash 3fa5e95a358d660ddb3c45769ae1357f
5f6164fbaf8cfbccfd061b00ae48dedfc16bbcd9
d32f4b680031c0e11222eb17385aa9d3b11d2903b05bff34c3d4eb6292631137
GET /safeframe/1-0-38/html/container.html HTTP/1.1
Host: 7a412b96bf1785a59b878fdbc7348795.safeframe.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 3108
date: Tue, 06 Sep 2022 14:12:41 GMT
expires: Wed, 06 Sep 2023 14:12:41 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Tue, 02 Mar 2021 20:17:03 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.acint.net/match?dp=71&euid=9ba374a2-7f84-466d-bf70-d7c369fab3e3
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=71&euid=9ba374a2-7f84-466d-bf70-d7c369fab3e3
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=71&euid=9ba374a2-7f84-466d-bf70-d7c369fab3e3 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; cSyncDp7v2=1662473560; cSyncDp14v3=1662473560; cSyncDp17=1662473560; cSyncDp32=1662473560; cSyncDp45v3=1662473560; cSyncDp53=1662473560; cSyncDp54v2=1662473560; cSyncDp62=1662473560; cSyncDp67v2=1662473560; cSyncDp68=1662473560; cSyncDp71=1662473560; cSyncDp77=1662473560; cSyncDp84=1662473560; cSyncDp85=1662473560; cSyncDp95v3=1662473560; cSyncDp101=1662473560; cSyncDp104v2=1662473560; cSyncDp107=1662473560; cSyncDp110=1662473560; cSyncDp111v2=1662473560; cSyncDp112v2=1662473560; cSyncDp125v2=1662473560; cSyncDp126=1662473560; cSyncDp127=1662473560; cSyncDp129=1662473560; cSyncDp136v2=1662473560; cSyncDp138=1662473560; cSyncDp144=1662473560; cSyncDp146=1662473560; cSyncDp148=1662473560; cSyncDp149=1662473560; cSyncDp151=1662473560; cSyncDp179=1662473560; cSyncDp186=1662473560
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71281900?wmode=7&page-url=http%3A%2F%2Fpracuj2.pl%2F&charset=utf-8&site-info=%7B%22site_id%22%3A94308%2C%22srtb_sid%22%3A%2263175552-60c4-9cjv-1zhf-bvfofpygoj81%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ocpriggyfyr946elviuuw%3Afp%3A1327%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A1398879172200%3Ahid%3A286511495%3Az%3A0%3Ai%3A20220906141235%3Aet%3A1662473556%3Ac%3A1%3Arn%3A155193678%3Arqn%3A1%3Au%3A166247355668809395%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662473553050%3Ads%3A3%2C37%2C494%2C0%2C-8%2C0%2C%2C657%2C12%2C%2C%2C%2C1313%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662473556%3At%3AOferty%20Pracy&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
302 Found 400 B URL HTTP/2 mc.yandex.ru/watch/71281900?wmode=7&page-url=http%3A%2F%2Fpracuj2.pl%2F&charset=utf-8&site-info=%7B%22site_id%22%3A94308%2C%22srtb_sid%22%3A%2263175552-60c4-9cjv-1zhf-bvfofpygoj81%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ocpriggyfyr946elviuuw%3Afp%3A1327%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A1398879172200%3Ahid%3A286511495%3Az%3A0%3Ai%3A20220906141235%3Aet%3A1662473556%3Ac%3A1%3Arn%3A155193678%3Arqn%3A1%3Au%3A166247355668809395%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662473553050%3Ads%3A3%2C37%2C494%2C0%2C-8%2C0%2C%2C657%2C12%2C%2C%2C%2C1313%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662473556%3At%3AOferty%20Pracy&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash eee7fb885d1f271e43a1eb3cb9cfca6a
ef4ba59ed23cf0b256baf7a0fe3155143c7065f2
8899b9dd27075bc4dc88df0b19542ea9031cce98566f33227d6f36f9198ed557
GET /watch/71281900?wmode=7&page-url=http%3A%2F%2Fpracuj2.pl%2F&charset=utf-8&site-info=%7B%22site_id%22%3A94308%2C%22srtb_sid%22%3A%2263175552-60c4-9cjv-1zhf-bvfofpygoj81%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ocpriggyfyr946elviuuw%3Afp%3A1327%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A1398879172200%3Ahid%3A286511495%3Az%3A0%3Ai%3A20220906141235%3Aet%3A1662473556%3Ac%3A1%3Arn%3A155193678%3Arqn%3A1%3Au%3A166247355668809395%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662473553050%3Ads%3A3%2C37%2C494%2C0%2C-8%2C0%2C%2C657%2C12%2C%2C%2C%2C1313%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662473556%3At%3AOferty%20Pracy&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pracuj2.pl
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/71281900/1?wmode=7&page-url=http%3A%2F%2Fpracuj2.pl%2F&charset=utf-8&site-info=%7B%22site_id%22%3A94308%2C%22srtb_sid%22%3A%2263175552-60c4-9cjv-1zhf-bvfofpygoj81%22%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ocpriggyfyr946elviuuw%3Afp%3A1327%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A1398879172200%3Ahid%3A286511495%3Az%3A0%3Ai%3A20220906141235%3Aet%3A1662473556%3Ac%3A1%3Arn%3A155193678%3Arqn%3A1%3Au%3A166247355668809395%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662473553050%3Ads%3A3%2C37%2C494%2C0%2C-8%2C0%2C%2C657%2C12%2C%2C%2C%2C1313%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662473556%3At%3AOferty%20Pracy&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 06 Sep 2022 14:12:41 GMT
access-control-allow-origin: http://pracuj2.pl
set-cookie: yandexuid=2329143971662473561; Expires=Wed, 06-Sep-2023 14:12:41 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=2329143971662473561; Expires=Wed, 06-Sep-2023 14:12:41 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2064769331662473561; Path=/; SameSite=None; Secure
i=uonQTcMxUX9+JVAqqkGZDchgYbCXkB5mXPkQ93o8FxVaDMb43w3ivwPHUJa5fw1W5TI+VkwwPVy7yN7z1u9r91ypbWI=; Expires=Fri, 03-Sep-2032 14:12:40 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1694009561.yrts.1662473561#1694009561.yrtsi.1662473561; Expires=Wed, 06-Sep-2023 14:12:41 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 06-Sep-2022 14:12:41 GMT
last-modified: Tue, 06-Sep-2022 14:12:41 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 06 Sep 2022 14:12:41 GMT
access-control-allow-origin: *
etag: "6315c3a4-2b"
expires: Tue, 06 Sep 2022 15:12:41 GMT
accept-ranges: bytes
last-modified: Mon, 05 Sep 2022 12:38:44 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
cm.g.doubleclick.net/pixel?google_nid=agentstvo_sape_limited&google_hm=HLNanVhVF2NmAHAaAv1oCA
200 OK 170 B URL HTTP/2 cm.g.doubleclick.net/pixel?google_nid=agentstvo_sape_limited&google_hm=HLNanVhVF2NmAHAaAv1oCA
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash e7673c60af825466f83d46da72ca1635
fc0fcbee0835709ba2d28798a612bfd687903fb5
0b8a20373c6dd04e091902226d922b3688143a8938afb9d283d889de7b55ceb5
GET /pixel?google_nid=agentstvo_sape_limited&google_hm=HLNanVhVF2NmAHAaAv1oCA HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
date: Tue, 06 Sep 2022 14:12:41 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
server: HTTP server (unknown)
content-length: 170
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 47d64291d8fc67f957ef1cf0cefcedb2
20fe06c08fe2d322e806f4cd3271b6281b6cfea2
ba5872da30bbe0e76331e34adae3c816c311cdc6373436d748afbb99ed834cb6
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 14:12:41 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sat, 10 Sep 2022 12:19:12 GMT
ETag: "20fe06c08fe2d322e806f4cd3271b6281b6cfea2"
Last-Modified: Tue, 06 Sep 2022 12:19:13 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2994
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7467cd108ded1c16-OSL
ocsp.sectigo.com/
200 OK 472 B IP
Hash eb06856d8626b77967ed070bc7d1ffce
8b064471057dedcaab5b3c488ac444aa77612a62
a328ae2472dd94315bf6b27e28895f2d1c61cf13272d2230cdfb8d27c50cac94
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 14:12:41 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 04:09:17 GMT
Expires: Tue, 13 Sep 2022 04:09:16 GMT
Etag: "8b064471057dedcaab5b3c488ac444aa77612a62"
Cache-Control: max-age=567994,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7467cd105a0f0b69-OSL
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 47d64291d8fc67f957ef1cf0cefcedb2
20fe06c08fe2d322e806f4cd3271b6281b6cfea2
ba5872da30bbe0e76331e34adae3c816c311cdc6373436d748afbb99ed834cb6
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 14:12:41 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Sat, 10 Sep 2022 12:19:12 GMT
ETag: "20fe06c08fe2d322e806f4cd3271b6281b6cfea2"
Last-Modified: Tue, 06 Sep 2022 12:19:13 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2994
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7467cd109e041c16-OSL
fcgi4.gnezdo.ru/cookie_matching_ssp/Sape-dsp/1CB35A9D585517636600701A02FD6808
204 No Content 0 B URL HTTP/2 fcgi4.gnezdo.ru/cookie_matching_ssp/Sape-dsp/1CB35A9D585517636600701A02FD6808
IP
ASN #48347 JSC Mediasoft ekspert
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookie_matching_ssp/Sape-dsp/1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: fcgi4.gnezdo.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Tue, 06 Sep 2022 14:12:41 GMT
set-cookie: uid=XV9maWMXVVlSxl/peoZxAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=gnezdo.ru; path=/; Secure; SameSite=None
p3p: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
X-Firefox-Spdy: h2
ocsp.usertrust.com/
200 OK 472 B IP
Hash 287e9159d269073f63c1d06f50f5ed89
421a39f9b80af60ff29b245ea2ca973652dfe011
734920e0de4408babde1eba9efb3c5286d70d49997e451369b2016924b7f3b1c
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 14:12:41 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 05 Sep 2022 04:18:19 GMT
Expires: Mon, 12 Sep 2022 04:18:18 GMT
Etag: "421a39f9b80af60ff29b245ea2ca973652dfe011"
Cache-Control: max-age=603954,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 790
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7467cd10dd26b50f-OSL
ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D
302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Wed, 06 Sep 2023 14:12:41 GMT; Path=/; Domain=.betweendigital.com
tuuid=a6a4b2ea-2583-52f9-bcb5-6a4ddfa23f14; Max-Age=31536000; Expires=Wed, 06 Sep 2023 14:12:41 GMT; Path=/; Domain=.betweendigital.com
ut=YxdVWQALfWiJULzFQLV3w2QgK8wsKMVbJn8xkw==; Max-Age=31536000; Expires=Wed, 06 Sep 2023 14:12:41 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691
302 Moved Temporarily 0 B URL HTTP/1.1 ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691 HTTP/1.1
Host: ad.adriver.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Tue, 06 Sep 2022 14:12:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-control: no-cache, max-age=0, must-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
Set-Cookie: cid=-6421041768; expires=Thu, 05 Sep 2024 14:12:41 GMT; path=/; domain=.adriver.ru; SameSite=None; Secure
Location: /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-6421041768
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=153&external_id=1CB35A9D585517636600701A02FD6808
200 OK 42 B URL HTTP/1.1 ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=153&external_id=1CB35A9D585517636600701A02FD6808
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cgi-bin/sync.cgi?dsp_id=153&external_id=1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: ssp.adriver.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:41 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash b9ef6f4d2c0f3d987b478b6e302da283
598920365f4ed4e9b59c0527abd4dd109f792307
0b6e9c52812791eafe97a37666428e40d2296c8ada10733497fc76e70ae9cd1f
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 06 Sep 2022 14:12:42 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 06 Sep 2022 03:20:25 GMT
Expires: Wed, 07 Sep 2022 03:20:25 GMT
ETag: "598920365f4ed4e9b59c0527abd4dd109f792307"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 339352e2311a1950abf70b0aa1b7be8a
712e5a7f9bdd29683950008fcb2706089b3a5bb9
2ab6b959a63727a6596c9df7289a0f6a053e28fae078e53ef929a8f493a7bd09
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2AB6B959A63727A6596C9DF7289A0F6A053E28FAE078E53EF929A8F493A7BD09"
Last-Modified: Mon, 05 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5233
Expires: Tue, 06 Sep 2022 15:39:54 GMT
Date: Tue, 06 Sep 2022 14:12:41 GMT
Connection: keep-alive
sape-sync.rutarget.ru/sync
302 Moved Temporarily 0 B URL HTTP/1.1 sape-sync.rutarget.ru/sync
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync HTTP/1.1
Host: sape-sync.rutarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Tue, 06 Sep 2022 14:12:41 GMT
Content-Length: 0
Connection: close
Location: https://www.acint.net/match?dp=104&euid=kE0IhUIjrY1y
P3P: CP="This is not a P3P policy. Please visit http://rutarget.ru/p3p/ to get more information."
Set-Cookie: userId=kE0IhUIjrY1y; Path=/; Domain=.rutarget.ru; Expires=Sun, 05 Mar 2023 14:12:41 GMT; SameSite=None; Secure
status.geotrust.com/
200 OK 279 B IP
Hash 7e70df6e9dfe394a6aa80d8a72722304
41de351d17e75f40638446befa3b8795ad1258b8
475aff8a4bf130e17fe2915c2241883863d1ec5e7c4843f2636e6232d1471170
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3157
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 14:12:41 GMT
Last-Modified: Tue, 06 Sep 2022 13:20:04 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 279
status.thawte.com/
200 OK 471 B IP
Hash 197ee7210b2ee63bb13efc3839600bc5
78d08bdddb2080ce3f7ec3eff24312299077d8d2
d0366b532d81e60a49d437ee2bbfc3d54d2492f5b6163da0b1de2e7ec125b9fb
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4052
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 14:12:41 GMT
Last-Modified: Tue, 06 Sep 2022 13:05:09 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
302 Found 0 B URL HTTP/2 redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D{WEBO_CID}%26noredirect HTTP/1.1
Host: redirect.frontend.weborama.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: Weborama Collect Frontend
date: Tue, 06 Sep 2022 14:12:41 GMT
content-length: 0
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fut.rktch.com%2Fmatchspm%3Fpi%3D1000006%26pui%3D%7BWEBO_CID%7D%26noredirect&bounce=1&random=3559751906
access-control-allow-origin: *
p3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM"
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: Tue, 03 Jul 2001 06:00:00 GMT
last-modified: Tue, 06 Sep 2022 14:12:41 GMT
set-cookie: AFFICHE_W=6z9qfOPyqZPr69; expires=Wed, 04 Oct 2023 14:12:41 GMT; domain=.weborama.fr; path=/; secure; SameSite=None
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash c9c4f6eea71d4057b758dbbd2e357238
8fb6d72f4de7b834ece114b65c9108c499d74e01
b5adcbced611890697f38f19e5a7b7530750a1bf8e46d0ad0a75c947e92af141
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 14:12:41 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 10 Sep 2022 13:33:08 GMT
ETag: "8fb6d72f4de7b834ece114b65c9108c499d74e01"
Last-Modified: Tue, 06 Sep 2022 13:33:09 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 8
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7467cd118ed71c16-OSL
tag.digitaltarget.ru/adcm.js
200 OK 3.1 kB URL HTTP/1.1 tag.digitaltarget.ru/adcm.js
IP
File type ASCII text, with very long lines (3051), with no line terminators
Hash e7097284185069f52fc736bcd50cda13
1cdfdf2d869841202079ddf91e0a00a8610812e6
40f2a96f78f4c8484e9da6e172f5ddd3e4d7786ca29e04b96e1067a365190e80
GET /adcm.js HTTP/1.1
Host: tag.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:41 GMT
Content-Type: application/javascript
Content-Length: 3051
Last-Modified: Tue, 06 Sep 2022 14:05:02 GMT
Connection: keep-alive
ETag: "6317538e-beb"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0b9528d0aa584b0e7b8b95f31ec1c4ed
79afabc0856f6fb3c3e5a9f5675cb0a40ee08e54
2604edd5743acd1487c25665444019555a972492010c10bf3bd6aefeab4661eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 14:12:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 472 B IP
Hash eb06856d8626b77967ed070bc7d1ffce
8b064471057dedcaab5b3c488ac444aa77612a62
a328ae2472dd94315bf6b27e28895f2d1c61cf13272d2230cdfb8d27c50cac94
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 14:12:41 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 04:09:17 GMT
Expires: Tue, 13 Sep 2022 04:09:16 GMT
Etag: "8b064471057dedcaab5b3c488ac444aa77612a62"
Cache-Control: max-age=567994,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7467cd107e77b4fd-OSL
www.gstatic.com/mysidia/0e36d09df9ff74ac9a9a8e304d461f4b.js?tag=client_fast_engine_2019
200 OK 4.5 kB URL HTTP/2 www.gstatic.com/mysidia/0e36d09df9ff74ac9a9a8e304d461f4b.js?tag=client_fast_engine_2019
IP
File type ASCII text, with very long lines (2242)
Hash e85a575447ed17022cce2278131d2562
47d8bd6376d1ab2899529b2d03de032c4d63855f
3e46487d62b20466d46e814d62874853f1e26a5111d7813d869d9758d5f8871d
GET /mysidia/0e36d09df9ff74ac9a9a8e304d461f4b.js?tag=client_fast_engine_2019 HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/mysidia
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="mysidia"
report-to: {"group":"mysidia","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/mysidia"}]}
content-length: 4500
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 02:47:29 GMT
expires: Wed, 30 Nov 2022 02:47:29 GMT
cache-control: public, max-age=7776000
age: 473112
last-modified: Thu, 25 Aug 2022 01:10:52 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 74de108dee89ebf52b9c64f06f650e8d
de9160c9a9a4df6dabbfa8f2caaddbfe83eb70f6
627b8aab3e666183e21089fcb607fabf7058052de2e2576089ea0e32c8ae346f
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 14:12:41 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sat, 10 Sep 2022 12:40:08 GMT
ETag: "de9160c9a9a4df6dabbfa8f2caaddbfe83eb70f6"
Last-Modified: Tue, 06 Sep 2022 12:40:09 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1157
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7467cd11bf021c16-OSL
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0b9528d0aa584b0e7b8b95f31ec1c4ed
79afabc0856f6fb3c3e5a9f5675cb0a40ee08e54
2604edd5743acd1487c25665444019555a972492010c10bf3bd6aefeab4661eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 14:12:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad.mail.ru/cm.gif?p=48&id=1CB35A9D585517636600701A02FD6808
200 OK 43 B URL HTTP/2 ad.mail.ru/cm.gif?p=48&id=1CB35A9D585517636600701A02FD6808
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /cm.gif?p=48&id=1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: ad.mail.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Sep 2022 14:12:41 GMT
content-type: image/gif
content-length: 43
set-cookie: VID=346eKm1eEWIC002EqV0mu1IC:::0-0-0-831ae19:CAASEFuh05Y-93oIPNNAefC4Of8aYMZuADIkl8bWY06GJLcfUA2AmgYaUZjBgTNWkSGppsA9hyJDcxy4-a5RjMePnOwf6xc9eZacu4hQcrbrKzSjb4MMDLBmiKRNvZED3ZmxdSLVVFncaZnKYxyuxD0WVkKT_A; path=/; expires=Thu, 07-Sep-23 14:12:41 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
expires: Tue, 06 Sep 2022 20:12:41 GMT
cache-control: max-age=21600
last-modified: Tue, 06 Sep 2022 14:12:41 GMT
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: require-corp
X-Firefox-Spdy: h2
sm.rtb.mts.ru/p?ssp=sape&id=1CB35A9D585517636600701A02FD6808
301 Moved Permanently 0 B URL HTTP/1.1 sm.rtb.mts.ru/p?ssp=sape&id=1CB35A9D585517636600701A02FD6808
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sape&id=1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: sm.rtb.mts.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 06 Sep 2022 14:12:41 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin
Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
Vary: Origin
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://sm.rtb.mts.ru/match/second?ssp=30&exu=1CB35A9D585517636600701A02FD6808
Set-Cookie: dspid=78aec2e3-0d3f-4c33-96b4-afb9772dd849; expires=Mon, 28 Aug 2023 14:12:41 GMT; domain=.mts.ru; path=/; secure; SameSite=None
www.gstatic.com/mysidia/e2875713480840d8712332133311d4ea.js?tag=pingback
200 OK 7.8 kB URL HTTP/2 www.gstatic.com/mysidia/e2875713480840d8712332133311d4ea.js?tag=pingback
IP
File type ASCII text, with very long lines (2195)
Hash a57f0a9d83f5dcc8918a39a54c958ff2
b122a12d5c72dfed9ae4aa148c05351f35fa0c9c
e5234b92ae6296cd34e10f400e10c56389e27a47f6acb80f8a417b55c2d91000
GET /mysidia/e2875713480840d8712332133311d4ea.js?tag=pingback HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/mysidia
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="mysidia"
report-to: {"group":"mysidia","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/mysidia"}]}
content-length: 7767
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 04:51:55 GMT
expires: Wed, 30 Nov 2022 04:51:55 GMT
cache-control: public, max-age=7776000
last-modified: Thu, 25 Aug 2022 01:10:52 GMT
content-type: text/javascript
age: 465646
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/mysidia/62d0a223bbf42150c8ef2ea95c54930b.js?tag=exit_2019
200 OK 9.3 kB URL HTTP/2 www.gstatic.com/mysidia/62d0a223bbf42150c8ef2ea95c54930b.js?tag=exit_2019
IP
File type ASCII text, with very long lines (1662)
Hash 29812d0a5cdc74cfa65798c7d4008c0b
e6e14afd1d4cc2929a606c2b03d809d3996988e5
949751425c6860c6c8475fcf82615a249c3b3aa1125ba8e0065c967f37ee229a
GET /mysidia/62d0a223bbf42150c8ef2ea95c54930b.js?tag=exit_2019 HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/mysidia
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="mysidia"
report-to: {"group":"mysidia","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/mysidia"}]}
content-length: 9299
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 02:47:44 GMT
expires: Wed, 30 Nov 2022 02:47:44 GMT
cache-control: public, max-age=7776000
age: 473097
last-modified: Thu, 25 Aug 2022 01:10:52 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 282e30bb1ff2decb700d84bebff341b5
17041adbfb3fd69fbf47f1a86e0816cdd2274a40
3a71f5e28f466482b547f62fbfa8cdc07f64a79fcf57ca56e0c854576ff7bbaa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 14:12:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/mysidia/a44a0b8f447061e92ca19622c4392a02.js?tag=analytics_pingback_2019
200 OK 2.2 kB URL HTTP/2 www.gstatic.com/mysidia/a44a0b8f447061e92ca19622c4392a02.js?tag=analytics_pingback_2019
IP
File type ASCII text, with very long lines (514)
Hash 6059ebd72e57e7630b752a27b22f91cd
8d91f883ba6cbbc80878fe6b71c450c0c1849eed
8eebb8e7d4ceabfe40cbe2b1ed096bd9ef2150f57a3283380ca52bb5db23cc93
GET /mysidia/a44a0b8f447061e92ca19622c4392a02.js?tag=analytics_pingback_2019 HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/mysidia
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="mysidia"
report-to: {"group":"mysidia","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/mysidia"}]}
content-length: 2233
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 17:15:36 GMT
expires: Wed, 30 Nov 2022 17:15:36 GMT
cache-control: public, max-age=7776000
last-modified: Thu, 25 Aug 2022 01:10:52 GMT
content-type: text/javascript
age: 421025
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220831/r20110914/client/qs_click_protection_fy2021.js
200 OK 7.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220831/r20110914/client/qs_click_protection_fy2021.js
IP
File type ASCII text, with very long lines (2276)
Hash ceef0ca095073b4ec419ad144ec336c1
9b3f3d2431b9c0d99435d45d420bbd4b1927b1e1
a6bd3712cc1aeaec9f5a7445c595d52607d34457546a189bf51a775a4112e4e8
GET /pagead/js/r20220831/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 7599
x-xss-protection: 0
date: Tue, 06 Sep 2022 14:11:13 GMT
expires: Tue, 20 Sep 2022 14:11:13 GMT
cache-control: public, max-age=1209600
etag: 9215437806027971270
content-type: text/javascript; charset=UTF-8
age: 88
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=pracuj2.pl
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=pracuj2.pl
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=pracuj2.pl HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 06 Sep 2022 14:12:41 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ads.betweendigital.com/match?bidder_id=73&external_user_id=1CB35A9D585517636600701A02FD6808
302 Found 0 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=73&external_user_id=1CB35A9D585517636600701A02FD6808
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?bidder_id=73&external_user_id=1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /match?bidder_id=73&external_user_id=1CB35A9D585517636600701A02FD6808&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Wed, 06 Sep 2023 14:12:41 GMT; Path=/; Domain=.betweendigital.com
tuuid=2aa073af-b4b3-52f9-87a8-4f4be4bf1a12; Max-Age=31536000; Expires=Wed, 06 Sep 2023 14:12:41 GMT; Path=/; Domain=.betweendigital.com
ut=YxdVWQANqBgVrWIEMFif_01jkBj_-KAW_pwgHQ==; Max-Age=31536000; Expires=Wed, 06 Sep 2023 14:12:41 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
px.adhigh.net/p/cm/sape?u=1CB35A9D585517636600701A02FD6808
302 Found 0 B URL HTTP/2 px.adhigh.net/p/cm/sape?u=1CB35A9D585517636600701A02FD6808
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/cm/sape?u=1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 06 Sep 2022 14:12:41 GMT
content-length: 0
x-backend-id: f3-ru
access-control-allow-origin: *
access-control-allow-credentials: true
set-cookie: gi_u=uPmIX2OM9fn1.AikABlGDEyVnHA;Path=/;Domain=.adhigh.net;Expires=Wed, 06-Sep-2023 14:12:41 GMT;Secure;SameSite=None
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
location: https://px.adhigh.net/p/cm/sape?u=1CB35A9D585517636600701A02FD6808&bounced=1
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220831/r20110914/abg_lite_fy2021.js
200 OK 9.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220831/r20110914/abg_lite_fy2021.js
IP
File type ASCII text, with very long lines (1621)
Hash a4c731f85862faf40d4fae51bf83fb0c
537ddcb9b854155e5f9136d0585dd54e26447baf
0826f7dfc1e4a221aba4cc7c381d0259c54f5fed8a9f50c0a247696f40af2d49
GET /pagead/js/r20220831/r20110914/abg_lite_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 9632
x-xss-protection: 0
date: Tue, 06 Sep 2022 14:08:06 GMT
expires: Tue, 20 Sep 2022 14:08:06 GMT
cache-control: public, max-age=1209600
etag: 2755732409155645664
content-type: text/javascript; charset=UTF-8
age: 275
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0b9528d0aa584b0e7b8b95f31ec1c4ed
79afabc0856f6fb3c3e5a9f5675cb0a40ee08e54
2604edd5743acd1487c25665444019555a972492010c10bf3bd6aefeab4661eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 14:12:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash b9ef6f4d2c0f3d987b478b6e302da283
598920365f4ed4e9b59c0527abd4dd109f792307
0b6e9c52812791eafe97a37666428e40d2296c8ada10733497fc76e70ae9cd1f
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 06 Sep 2022 14:12:42 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 06 Sep 2022 03:20:25 GMT
Expires: Wed, 07 Sep 2022 03:20:25 GMT
ETag: "598920365f4ed4e9b59c0527abd4dd109f792307"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=35313&callback_url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D107%26euid%3D%24%7BUSER_ID%7D&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Wed, 06 Sep 2023 14:12:41 GMT; Path=/; Domain=.betweendigital.com
tuuid=a798a044-b718-52f9-b406-dde3d71188ba; Max-Age=31536000; Expires=Wed, 06 Sep 2023 14:12:41 GMT; Path=/; Domain=.betweendigital.com
ut=YxdVWQAPC5DCATAPzrI0QIsS7q-pNs7FR1YIyA==; Max-Age=31536000; Expires=Wed, 06 Sep 2023 14:12:41 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash d3a0b609ec3ac23a9c38275a8ab6425c
c2c1e22603501e67107cf4bc18fca511235bddbd
c86dec0ff38738b6a63f17c5977d737fc8c503b85cd8d1864eaaff0b56da8f29
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 14:12:42 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 03 Sep 2022 02:18:46 GMT
Expires: Sat, 10 Sep 2022 02:18:45 GMT
Etag: "c2c1e22603501e67107cf4bc18fca511235bddbd"
Cache-Control: max-age=302163,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7467cd116afb0b69-OSL
www.acint.net/match?dp=104&euid=kE0IhUIjrY1y
200 OK 43 B URL HTTP/2 www.acint.net/match?dp=104&euid=kE0IhUIjrY1y
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=104&euid=kE0IhUIjrY1y HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; cSyncDp7v2=1662473560; cSyncDp14v3=1662473560; cSyncDp17=1662473560; cSyncDp32=1662473560; cSyncDp45v3=1662473560; cSyncDp53=1662473560; cSyncDp54v2=1662473560; cSyncDp62=1662473560; cSyncDp67v2=1662473560; cSyncDp68=1662473560; cSyncDp71=1662473560; cSyncDp77=1662473560; cSyncDp84=1662473560; cSyncDp85=1662473560; cSyncDp95v3=1662473560; cSyncDp101=1662473560; cSyncDp104v2=1662473560; cSyncDp107=1662473560; cSyncDp110=1662473560; cSyncDp111v2=1662473560; cSyncDp112v2=1662473560; cSyncDp125v2=1662473560; cSyncDp126=1662473560; cSyncDp127=1662473560; cSyncDp129=1662473560; cSyncDp136v2=1662473560; cSyncDp138=1662473560; cSyncDp144=1662473560; cSyncDp146=1662473560; cSyncDp148=1662473560; cSyncDp149=1662473560; cSyncDp151=1662473560; cSyncDp179=1662473560; cSyncDp186=1662473560
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:42 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sm.rtb.mts.ru/match/second?ssp=30&exu=1CB35A9D585517636600701A02FD6808
301 Moved Permanently 0 B URL HTTP/1.1 sm.rtb.mts.ru/match/second?ssp=30&exu=1CB35A9D585517636600701A02FD6808
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/second?ssp=30&exu=1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: sm.rtb.mts.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 06 Sep 2022 14:12:42 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin
Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: *
Vary: Origin
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://tech.rtb.mts.ru/
x01.aidata.io/0.gif?pid=9401454&id=1CB35A9D585517636600701A02FD6808
302 Found 0 B URL HTTP/2 x01.aidata.io/0.gif?pid=9401454&id=1CB35A9D585517636600701A02FD6808
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0.gif?pid=9401454&id=1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: x01.aidata.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 06 Sep 2022 14:12:41 GMT
content-length: 0
location: https://x01.aidata.io/0.gif?pid=9401454&id=1CB35A9D585517636600701A02FD6808&bounce=1
expires: Tue, 06 Sep 2022 14:12:40 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Tue, 06 Sep 2022 14:12:40 GMT
set-cookie: __upin=FYAiwAtNrQ7OOzyecxqJ1w;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
__upints=1662473562;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=pracuj2.pl
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=pracuj2.pl
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=pracuj2.pl HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Tue, 06 Sep 2022 14:12:42 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-6421041768
302 Moved Temporarily 40 B URL HTTP/1.1 ad.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-6421041768
IP
File type ASCII text, with CRLF line terminators
Hash 251630b588179b239e8fab1ac9ef6d3a
91b91a97bc481dd2bbd5e0f3fea6ba1c4e843882
c95661e0ef6975b1df5361695a439f71a021d72c345023c3e668e84f35b3c38b
GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=6438691&tuid=-6421041768 HTTP/1.1
Host: ad.adriver.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Tue, 06 Sep 2022 14:12:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-control: no-cache, no-cache=Set-Cookie, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
P3P: policyref="//adriver.ru/w3c/p3p.xml", CP="NON DSP COR CURa ADMa DEVa OUR BUS UNI COM NAV INT STA"
Set-Cookie: cid=0; expires=Thu, 05 Sep 2024 14:12:41 GMT; path=/; domain=.adriver.ru;
uid=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain=.adriver.ru
Location: https://www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
ads.betweendigital.com/match?bidder_id=73&external_user_id=1CB35A9D585517636600701A02FD6808&crf=1
200 OK 68 B URL HTTP/2 ads.betweendigital.com/match?bidder_id=73&external_user_id=1CB35A9D585517636600701A02FD6808&crf=1
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /match?bidder_id=73&external_user_id=1CB35A9D585517636600701A02FD6808&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Wed, 06 Sep 2023 14:12:42 GMT; Path=/; Domain=.betweendigital.com
tuuid=5996de03-5a83-52f9-9ba9-2eeef8be7bb4; Max-Age=31536000; Expires=Wed, 06 Sep 2023 14:12:42 GMT; Path=/; Domain=.betweendigital.com
ut=YxdVWgABSCCxpj80Weh4G3eX-S4fDzfTFUj3Aw==; Max-Age=31536000; Expires=Wed, 06 Sep 2023 14:12:42 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
x01.aidata.io/0.gif?pid=9401454&id=1CB35A9D585517636600701A02FD6808&bounce=1
204 No Content 0 B URL HTTP/2 x01.aidata.io/0.gif?pid=9401454&id=1CB35A9D585517636600701A02FD6808&bounce=1
IP
ASN #197695 Domain names registrar REG.RU, Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /0.gif?pid=9401454&id=1CB35A9D585517636600701A02FD6808&bounce=1 HTTP/1.1
Host: x01.aidata.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 06 Sep 2022 14:12:42 GMT
expires: Tue, 06 Sep 2022 14:12:41 GMT
access-control-allow-methods: GET, POST
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
last-modified: Tue, 06 Sep 2022 14:12:41 GMT
set-cookie: __upin=smveLdNDegAhVpOjG4qwbw;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
__upints=1662473562;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure
p3p: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
X-Firefox-Spdy: h2
px.adhigh.net/p/cm/sape?u=1CB35A9D585517636600701A02FD6808&bounced=1
200 OK 49 B URL HTTP/2 px.adhigh.net/p/cm/sape?u=1CB35A9D585517636600701A02FD6808&bounced=1
IP
ASN #48061 Limited Liability Company GPM Digital Technologies
File type GIF image data, version 89a, 1 x 1\012- data
Hash 889bc1fffc025af4685839fb516a0b8b
7f105137a4eafe93213ecd8cc34dd907c340467c
d0409a1b73dab4e29dc40f92fb431fa9133baa23b4a1ffae4897f39068110e32
GET /p/cm/sape?u=1CB35A9D585517636600701A02FD6808&bounced=1 HTTP/1.1
Host: px.adhigh.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 06 Sep 2022 14:12:41 GMT
content-type: image/gif
content-length: 49
x-backend-id: f3-ru
access-control-allow-origin: *
access-control-allow-credentials: true
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
cache-control: no-cache, no-store
X-Firefox-Spdy: h2
www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
302 Found 154 B URL HTTP/2 www.acint.net/rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=45&euid=0&r=https%3A%2F%2Fssp.adriver.ru%2Fcgi-bin%2Fsync.cgi%3Fssp_id%3D43%26external_id%3D%24%7BUSER_ID%7D HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; cSyncDp7v2=1662473560; cSyncDp14v3=1662473560; cSyncDp17=1662473560; cSyncDp32=1662473560; cSyncDp45v3=1662473560; cSyncDp53=1662473560; cSyncDp54v2=1662473560; cSyncDp62=1662473560; cSyncDp67v2=1662473560; cSyncDp68=1662473560; cSyncDp71=1662473560; cSyncDp77=1662473560; cSyncDp84=1662473560; cSyncDp85=1662473560; cSyncDp95v3=1662473560; cSyncDp101=1662473560; cSyncDp104v2=1662473560; cSyncDp107=1662473560; cSyncDp110=1662473560; cSyncDp111v2=1662473560; cSyncDp112v2=1662473560; cSyncDp125v2=1662473560; cSyncDp126=1662473560; cSyncDp127=1662473560; cSyncDp129=1662473560; cSyncDp136v2=1662473560; cSyncDp138=1662473560; cSyncDp144=1662473560; cSyncDp146=1662473560; cSyncDp148=1662473560; cSyncDp149=1662473560; cSyncDp151=1662473560; cSyncDp179=1662473560; cSyncDp186=1662473560
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 06 Sep 2022 14:12:42 GMT
content-type: text/html
content-length: 154
location: https://ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=1CB35A9D585517636600701A02FD6808
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
an.yandex.ru/mapuid/sapeis/1CB35A9D585517636600701A02FD6808?redir-setuniq=1
200 OK 8.4 kB URL HTTP/2 an.yandex.ru/mapuid/sapeis/1CB35A9D585517636600701A02FD6808?redir-setuniq=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 23036bb3ce67629e3aaf5b4ae9e005f0
497f125f0c54f6ce1d8590f6f5a805a688a1f1f8
11eb19d24985c85fc55dbdf3bb302c08a3224c408b769a0da3ed5c6a112bb1b0
GET /mapuid/sapeis/1CB35A9D585517636600701A02FD6808?redir-setuniq=1 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
timing-allow-origin: *
date: Tue, 06 Sep 2022 14:12:42 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 06 Sep 2022 14:12:42 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Tue, 06 Sep 2022 14:12:42 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif; charset=utf-8
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f41565238dc856269109dcc30c34c535
28517f51eb3b6cd08981afbf878446d635430741
9e314961a8fca836481ea022db365cc463bcef3b5003c63ccece611b8ff77fe6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 14:12:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f41565238dc856269109dcc30c34c535
28517f51eb3b6cd08981afbf878446d635430741
9e314961a8fca836481ea022db365cc463bcef3b5003c63ccece611b8ff77fe6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 14:12:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=1CB35A9D585517636600701A02FD6808
200 OK 42 B URL HTTP/1.1 ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=43&external_id=1CB35A9D585517636600701A02FD6808
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cgi-bin/sync.cgi?ssp_id=43&external_id=1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: ssp.adriver.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:42 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441180%2C%22ev%22%3A%22vis50%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473557
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441180%2C%22ev%22%3A%22vis50%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473557
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A94308%2C%22sc%22%3A0%2C%22pl%22%3A441180%2C%22ev%22%3A%22vis50%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473557 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; cSyncDp7v2=1662473560; cSyncDp14v3=1662473560; cSyncDp17=1662473560; cSyncDp32=1662473560; cSyncDp45v3=1662473560; cSyncDp53=1662473560; cSyncDp54v2=1662473560; cSyncDp62=1662473560; cSyncDp67v2=1662473560; cSyncDp68=1662473560; cSyncDp71=1662473560; cSyncDp77=1662473560; cSyncDp84=1662473560; cSyncDp85=1662473560; cSyncDp95v3=1662473560; cSyncDp101=1662473560; cSyncDp104v2=1662473560; cSyncDp107=1662473560; cSyncDp110=1662473560; cSyncDp111v2=1662473560; cSyncDp112v2=1662473560; cSyncDp125v2=1662473560; cSyncDp126=1662473560; cSyncDp127=1662473560; cSyncDp129=1662473560; cSyncDp136v2=1662473560; cSyncDp138=1662473560; cSyncDp144=1662473560; cSyncDp146=1662473560; cSyncDp148=1662473560; cSyncDp149=1662473560; cSyncDp151=1662473560; cSyncDp179=1662473560; cSyncDp186=1662473560
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:42 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f41565238dc856269109dcc30c34c535
28517f51eb3b6cd08981afbf878446d635430741
9e314961a8fca836481ea022db365cc463bcef3b5003c63ccece611b8ff77fe6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 14:12:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tech.rtb.mts.ru/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: tech.rtb.mts.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.2
Date: Tue, 06 Sep 2022 14:12:42 GMT
Content-Type: text/html; charset=utf-8
Connection: keep-alive
Set-Cookie: mts_id=3bb712c2-2a3c-44e9-96b9-48aad6c32a66; Domain=mts.ru; expires=Thu, 15 Jul 2032 14:12:42 GMT; SameSite=None; Secure
mts_id_last_sync=1662473562; Domain=mts.ru; expires=Thu, 15 Jul 2032 14:12:42 GMT; SameSite=None; Secure
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Access-Control-Allow-Headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3df811ac19fde08f49ef246c29cef161
e1c8d54b357adaf32e80427028cc884fa35959e0
e2749178e0bf0c4045a96388a58029ddd92d13a866021737864cd68e11317292
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 14:12:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/drt/ui
302 Found 0 B URL HTTP/2 www.google.com/pagead/drt/ui
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/drt/ui HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA
cache-control: private
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 06 Sep 2022 14:12:42 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tag.digitaltarget.ru/processor.js?i=233575715327060
200 OK 16 kB URL HTTP/1.1 tag.digitaltarget.ru/processor.js?i=233575715327060
IP
File type gzip compressed data, max compression\012- data
Hash 0654e623808577b22a5a01c4cf403271
e8b85664ed775c75e4d3f767a2f7cbaf728bd0ae
de5cf8e3073cdbbca9a5aca5d4c903add87b72fb3ffe074c43a09f98f0a54f7c
GET /processor.js?i=233575715327060 HTTP/1.1
Host: tag.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:42 GMT
Content-Type: application/javascript
Content-Length: 15522
Last-Modified: Tue, 06 Sep 2022 14:05:03 GMT
Connection: keep-alive
ETag: "6317538f-3ca2"
Accept-Ranges: bytes
www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
200 OK 45 kB URL HTTP/2 www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
IP
File type ASCII text, with very long lines (3498)
Hash e233451d114b7f2754d6a4eb131920ce
34aab2498621e84e7946aeb1830c8178c2417f52
8e31af45a596f9d000300c2220b1953f3d6adbb5bfafdf9a493f6b29ac1df323
GET /activeview/js/current/rx_lidar.js?cache=r20110914 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 44792
date: Tue, 06 Sep 2022 14:12:42 GMT
expires: Tue, 06 Sep 2022 14:12:42 GMT
cache-control: private, max-age=3000
etag: "1661945761880069"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Sep 2022 02:02:22 GMT
expires: Sun, 03 Sep 2023 02:02:22 GMT
cache-control: public, max-age=31536000
age: 303020
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 52235329397af274fe1489836ce5523a
cdb7071e8529fcb584c2103f8cdb95fb1934713a
7b61731d53c12884c26d27614f6ca741a31008b652f92051924e6b988440741e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7B61731D53C12884C26D27614F6CA741A31008B652F92051924E6B988440741E"
Last-Modified: Mon, 05 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3538
Expires: Tue, 06 Sep 2022 15:11:40 GMT
Date: Tue, 06 Sep 2022 14:12:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 52235329397af274fe1489836ce5523a
cdb7071e8529fcb584c2103f8cdb95fb1934713a
7b61731d53c12884c26d27614f6ca741a31008b652f92051924e6b988440741e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7B61731D53C12884C26D27614F6CA741A31008B652F92051924E6B988440741E"
Last-Modified: Mon, 05 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3538
Expires: Tue, 06 Sep 2022 15:11:40 GMT
Date: Tue, 06 Sep 2022 14:12:42 GMT
Connection: keep-alive
dmg.digitaltarget.ru/1/1093/i/i?i=886470237304818.665395835287773&a=77&e=1CB35A9D585517636600701A02FD6808&pref=http%3A%2F%2Fpracuj2.pl%2F&c=ss:77.up:1CB35A9D585517636600701A02FD6808.sync:up.xdua:duPA32NMlVDBX8sAHXxCIUiJ.xps:xpsbsjgi5_7x6iBx3egRpax09.dn:acint__net.adcm:hit.tg:adcmjs_noorient
307 Temporary Redirect 0 B URL HTTP/1.1 dmg.digitaltarget.ru/1/1093/i/i?i=886470237304818.665395835287773&a=77&e=1CB35A9D585517636600701A02FD6808&pref=http%3A%2F%2Fpracuj2.pl%2F&c=ss:77.up:1CB35A9D585517636600701A02FD6808.sync:up.xdua:duPA32NMlVDBX8sAHXxCIUiJ.xps:xpsbsjgi5_7x6iBx3egRpax09.dn:acint__net.adcm:hit.tg:adcmjs_noorient
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/1093/i/i?i=886470237304818.665395835287773&a=77&e=1CB35A9D585517636600701A02FD6808&pref=http%3A%2F%2Fpracuj2.pl%2F&c=ss:77.up:1CB35A9D585517636600701A02FD6808.sync:up.xdua:duPA32NMlVDBX8sAHXxCIUiJ.xps:xpsbsjgi5_7x6iBx3egRpax09.dn:acint__net.adcm:hit.tg:adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Tue, 06 Sep 2022 14:12:42 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=886470237304818.665395835287773&a=77&e=1CB35A9D585517636600701A02FD6808&pref=http%3A%2F%2Fpracuj2.pl%2F&c=ss:77.up:1CB35A9D585517636600701A02FD6808.sync:up.xdua:duPA32NMlVDBX8sAHXxCIUiJ.xps:xpsbsjgi5_7x6iBx3egRpax09.dn:acint__net.adcm:hit.tg:adcmjs_noorient
Set-Cookie: viuserid=fzJil.OPFoxd1va7ov8Z; Max-Age=93312000; Expires=Thu, 21 Aug 2025 14:12:42 GMT; SameSite=None; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly
Request-Time: 0
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/1/1093/i/i?i=886470237304818.719594929635138&a=77&e=1CB35A9D585517636600701A02FD6808&pref=http%3A%2F%2Fpracuj2.pl%2F&c=ss:77.up:1CB35A9D585517636600701A02FD6808.sync:up.xdua:duPA32NMlVDBX8sAHXxCIUiJ.xps:xpsbsjgi5_7x6iBx3egRpax09.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
307 Temporary Redirect 0 B URL HTTP/1.1 dmg.digitaltarget.ru/1/1093/i/i?i=886470237304818.719594929635138&a=77&e=1CB35A9D585517636600701A02FD6808&pref=http%3A%2F%2Fpracuj2.pl%2F&c=ss:77.up:1CB35A9D585517636600701A02FD6808.sync:up.xdua:duPA32NMlVDBX8sAHXxCIUiJ.xps:xpsbsjgi5_7x6iBx3egRpax09.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/1093/i/i?i=886470237304818.719594929635138&a=77&e=1CB35A9D585517636600701A02FD6808&pref=http%3A%2F%2Fpracuj2.pl%2F&c=ss:77.up:1CB35A9D585517636600701A02FD6808.sync:up.xdua:duPA32NMlVDBX8sAHXxCIUiJ.xps:xpsbsjgi5_7x6iBx3egRpax09.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Tue, 06 Sep 2022 14:12:42 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=886470237304818.719594929635138&a=77&e=1CB35A9D585517636600701A02FD6808&pref=http%3A%2F%2Fpracuj2.pl%2F&c=ss:77.up:1CB35A9D585517636600701A02FD6808.sync:up.xdua:duPA32NMlVDBX8sAHXxCIUiJ.xps:xpsbsjgi5_7x6iBx3egRpax09.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
Set-Cookie: viuserid=W4MUAO7PFoV7Rrm7EHux; Max-Age=93312000; Expires=Thu, 21 Aug 2025 14:12:42 GMT; SameSite=None; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly
Request-Time: 0
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=886470237304818.719594929635138&a=77&e=1CB35A9D585517636600701A02FD6808&pref=http%3A%2F%2Fpracuj2.pl%2F&c=ss:77.up:1CB35A9D585517636600701A02FD6808.sync:up.xdua:duPA32NMlVDBX8sAHXxCIUiJ.xps:xpsbsjgi5_7x6iBx3egRpax09.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
200 OK 64 B URL HTTP/1.1 dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=886470237304818.719594929635138&a=77&e=1CB35A9D585517636600701A02FD6808&pref=http%3A%2F%2Fpracuj2.pl%2F&c=ss:77.up:1CB35A9D585517636600701A02FD6808.sync:up.xdua:duPA32NMlVDBX8sAHXxCIUiJ.xps:xpsbsjgi5_7x6iBx3egRpax09.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ffd585dfb1ac6320633a0be46d579437
5a6033d23bc9cd5d1de9ee61de69a44428086dcb
df18d81deb0cc1c48ae87e6481bb4ee375b40cce0fec3d226e002704d49f6cc8
GET /awg/custom/1093/i/i?call_source=awg&i=886470237304818.719594929635138&a=77&e=1CB35A9D585517636600701A02FD6808&pref=http%3A%2F%2Fpracuj2.pl%2F&c=ss:77.up:1CB35A9D585517636600701A02FD6808.sync:up.xdua:duPA32NMlVDBX8sAHXxCIUiJ.xps:xpsbsjgi5_7x6iBx3egRpax09.dn:acint__net.adcm:hit.tg:adcmjs_init%20adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:43 GMT
Content-Type: image/gif
Content-Length: 64
Connection: keep-alive
Vary: Accept-Encoding
Request-Time: 0
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=886470237304818.665395835287773&a=77&e=1CB35A9D585517636600701A02FD6808&pref=http%3A%2F%2Fpracuj2.pl%2F&c=ss:77.up:1CB35A9D585517636600701A02FD6808.sync:up.xdua:duPA32NMlVDBX8sAHXxCIUiJ.xps:xpsbsjgi5_7x6iBx3egRpax09.dn:acint__net.adcm:hit.tg:adcmjs_noorient
200 OK 64 B URL HTTP/1.1 dmg.digitaltarget.ru/awg/custom/1093/i/i?call_source=awg&i=886470237304818.665395835287773&a=77&e=1CB35A9D585517636600701A02FD6808&pref=http%3A%2F%2Fpracuj2.pl%2F&c=ss:77.up:1CB35A9D585517636600701A02FD6808.sync:up.xdua:duPA32NMlVDBX8sAHXxCIUiJ.xps:xpsbsjgi5_7x6iBx3egRpax09.dn:acint__net.adcm:hit.tg:adcmjs_noorient
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ffd585dfb1ac6320633a0be46d579437
5a6033d23bc9cd5d1de9ee61de69a44428086dcb
df18d81deb0cc1c48ae87e6481bb4ee375b40cce0fec3d226e002704d49f6cc8
GET /awg/custom/1093/i/i?call_source=awg&i=886470237304818.665395835287773&a=77&e=1CB35A9D585517636600701A02FD6808&pref=http%3A%2F%2Fpracuj2.pl%2F&c=ss:77.up:1CB35A9D585517636600701A02FD6808.sync:up.xdua:duPA32NMlVDBX8sAHXxCIUiJ.xps:xpsbsjgi5_7x6iBx3egRpax09.dn:acint__net.adcm:hit.tg:adcmjs_noorient HTTP/1.1
Host: dmg.digitaltarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:43 GMT
Content-Type: image/gif
Content-Length: 64
Connection: keep-alive
Vary: Accept-Encoding
Request-Time: 5
Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin
X-Frame-Options: DENY
Content-Encoding: gzip
X-XSS-Protection: 1; mode=block
Access-Control-Max-Age: 86400
X-Content-Type-Options: nosniff
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Credentials: true
X-Permitted-Cross-Domain-Policies: master-only
fonts.gstatic.com/s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
200 OK 28 kB URL HTTP/2 fonts.gstatic.com/s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 28288, version 1.0\012- data
Hash 53b5e785dfdca21fa7adf7119fa1f8cc
a3a86dfd216ad29183ba5493ae39d45b62f9d8b8
4a6fab14bfe7b33fe5dc5349a2bb3720037e0ed7ebe621b352340f9514d83c08
GET /s/googlesans/v45/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://googleads.g.doubleclick.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28288
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 Aug 2022 20:35:24 GMT
expires: Thu, 31 Aug 2023 20:35:24 GMT
cache-control: public, max-age=31536000
age: 495439
last-modified: Wed, 01 Jun 2022 19:05:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.acint.net/ping/?v=0.4.0&uid=2572476f-f5cb-476d-8825-4ad6b6e212bb&dp=14&tz=%2B00%3A00&nc=50167826&dT=2022-09-06T14%3A12%3A38.060
302 Moved Temporarily 142 B URL HTTP/1.1 www.acint.net/ping/?v=0.4.0&uid=2572476f-f5cb-476d-8825-4ad6b6e212bb&dp=14&tz=%2B00%3A00&nc=50167826&dT=2022-09-06T14%3A12%3A38.060
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /ping/?v=0.4.0&uid=2572476f-f5cb-476d-8825-4ad6b6e212bb&dp=14&tz=%2B00%3A00&nc=50167826&dT=2022-09-06T14%3A12%3A38.060 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Tue, 06 Sep 2022 14:12:43 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://www.acint.net/ping/?v=0.4.0&uid=2572476f-f5cb-476d-8825-4ad6b6e212bb&dp=14&tz=%2B00%3A00&nc=50167826&dT=2022-09-06T14%3A12%3A38.060
fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500
200 OK 865 B URL HTTP/2 fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500
IP
Hash c3fdd88afbfa82e0af7133d888cacd3c
67b68e270aad64534385d7292029823b23f798c8
61b7177d8df81601ca69f5cca14f444b0ad010f79c1f636fcdaf495643d4b87f
GET /css?family=Google%20Sans%3A400%2C500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 06 Sep 2022 14:12:42 GMT
date: Tue, 06 Sep 2022 14:12:42 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.acint.net/ping/?v=0.4.0&uid=2572476f-f5cb-476d-8825-4ad6b6e212bb&dp=14&tz=%2B00%3A00&nc=50167826&dT=2022-09-06T14%3A12%3A38.060
200 OK 43 B URL HTTP/2 www.acint.net/ping/?v=0.4.0&uid=2572476f-f5cb-476d-8825-4ad6b6e212bb&dp=14&tz=%2B00%3A00&nc=50167826&dT=2022-09-06T14%3A12%3A38.060
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /ping/?v=0.4.0&uid=2572476f-f5cb-476d-8825-4ad6b6e212bb&dp=14&tz=%2B00%3A00&nc=50167826&dT=2022-09-06T14%3A12%3A38.060 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pracuj2.pl/
Connection: keep-alive
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; cSyncDp7v2=1662473560; cSyncDp14v3=1662473560; cSyncDp17=1662473560; cSyncDp32=1662473560; cSyncDp45v3=1662473560; cSyncDp53=1662473560; cSyncDp54v2=1662473560; cSyncDp62=1662473560; cSyncDp67v2=1662473560; cSyncDp68=1662473560; cSyncDp71=1662473560; cSyncDp77=1662473560; cSyncDp84=1662473560; cSyncDp85=1662473560; cSyncDp95v3=1662473560; cSyncDp101=1662473560; cSyncDp104v2=1662473560; cSyncDp107=1662473560; cSyncDp110=1662473560; cSyncDp111v2=1662473560; cSyncDp112v2=1662473560; cSyncDp125v2=1662473560; cSyncDp126=1662473560; cSyncDp127=1662473560; cSyncDp129=1662473560; cSyncDp136v2=1662473560; cSyncDp138=1662473560; cSyncDp144=1662473560; cSyncDp146=1662473560; cSyncDp148=1662473560; cSyncDp149=1662473560; cSyncDp151=1662473560; cSyncDp179=1662473560; cSyncDp186=1662473560
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=16&cd=%7B%22st%22%3A94308%2C%22sc%22%3A161232283%2C%22pl%22%3A441180%2C%22ev%22%3A%22adTime%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A7%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473562
200 OK 43 B URL HTTP/2 www.acint.net/rtbw/1?dp=16&cd=%7B%22st%22%3A94308%2C%22sc%22%3A161232283%2C%22pl%22%3A441180%2C%22ev%22%3A%22adTime%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A7%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473562
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=16&cd=%7B%22st%22%3A94308%2C%22sc%22%3A161232283%2C%22pl%22%3A441180%2C%22ev%22%3A%22adTime%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A7%7D&sid=63175552-60c4-9cjv-1zhf-bvfofpygoj81&ref=http%3A%2F%2Fpracuj2.pl%2F&r=1662473562 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd; cSyncDp7v2=1662473560; cSyncDp14v3=1662473560; cSyncDp17=1662473560; cSyncDp32=1662473560; cSyncDp45v3=1662473560; cSyncDp53=1662473560; cSyncDp54v2=1662473560; cSyncDp62=1662473560; cSyncDp67v2=1662473560; cSyncDp68=1662473560; cSyncDp71=1662473560; cSyncDp77=1662473560; cSyncDp84=1662473560; cSyncDp85=1662473560; cSyncDp95v3=1662473560; cSyncDp101=1662473560; cSyncDp104v2=1662473560; cSyncDp107=1662473560; cSyncDp110=1662473560; cSyncDp111v2=1662473560; cSyncDp112v2=1662473560; cSyncDp125v2=1662473560; cSyncDp126=1662473560; cSyncDp127=1662473560; cSyncDp129=1662473560; cSyncDp136v2=1662473560; cSyncDp138=1662473560; cSyncDp144=1662473560; cSyncDp146=1662473560; cSyncDp148=1662473560; cSyncDp149=1662473560; cSyncDp151=1662473560; cSyncDp179=1662473560; cSyncDp186=1662473560
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:47 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
pracuj2.pl/android-icon-192x192.png
200 OK 0 B URL HTTP/1.1 pracuj2.pl/android-icon-192x192.png
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /android-icon-192x192.png HTTP/1.1
Host: pracuj2.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pracuj2.pl/
Cookie: dclassifieds__8966a7a7c2e7e3d9f4833a09f25b46ac=848pmv0ocivceft9t9jhf30os4; _pk_id.53.8e7b=abda949f497243d4.1662473555.1.1662473555.1662473555.; _pk_ses.53.8e7b=*; fid=6204e4e9-1f70-4760-a5af-103f33d77d42
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Sep 2022 14:12:40 GMT
Content-Type: image/png
Content-Length: 16396
Last-Modified: Fri, 09 Nov 2018 05:21:07 GMT
Connection: keep-alive
ETag: "5be51943-400c"
Accept-Ranges: bytes
adlmerge.com/merge_gpsid/?sid=50&id=1CB35A9D585517636600701A02FD6808
200 OK 0 B URL HTTP/2 adlmerge.com/merge_gpsid/?sid=50&id=1CB35A9D585517636600701A02FD6808
IP
ASN #60781 LeaseWeb Netherlands B.V.
GET /merge_gpsid/?sid=50&id=1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: adlmerge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.16.0
date: Tue, 06 Sep 2022 14:12:41 GMT
content-type: image/gif
iseu: eu
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap
IP
GET /css2?family=Roboto:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 06 Sep 2022 14:12:42 GMT
date: Tue, 06 Sep 2022 14:12:42 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A400%2C700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A400%2C700
IP
GET /css?family=Roboto%3A400%2C700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 06 Sep 2022 14:12:42 GMT
date: Tue, 06 Sep 2022 14:12:42 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.acint.net/mc/?dp=14
200 OK 0 B IP
ASN #24940 Hetzner Online GmbH
GET /mc/?dp=14 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pracuj2.pl/
Connection: keep-alive
Cookie: aid=nVqzHGMXVVgacABmCGj9AgChd10oMK7Jhtr1nXfZukWAHIkd
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: text/html
set-cookie: cSyncDp7v2=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp14v3=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp17=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp32=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp45v3=1662473560; expires=Wed, 07-Sep-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp53=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp54v2=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp62=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp67v2=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp68=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp71=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp77=1662473560; expires=Tue, 20-Sep-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp84=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp85=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp95v3=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp101=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp104v2=1662473560; expires=Tue, 20-Sep-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp107=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp110=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp111v2=1662473560; expires=Tue, 20-Sep-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp112v2=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp125v2=1662473560; expires=Wed, 21-Sep-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp126=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp127=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp129=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp136v2=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp138=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp144=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp146=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp148=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp149=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp151=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp179=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp186=1662473560; expires=Thu, 06-Oct-22 14:12:40 GMT; path=/; Secure; SameSite=None; domain=.acint.net
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
content-encoding: gzip
X-Firefox-Spdy: h2
cdn-rtb.sape.ru/teasers/js/308/2/94308.js
200 OK 0 B URL HTTP/2 cdn-rtb.sape.ru/teasers/js/308/2/94308.js
IP
GET /teasers/js/308/2/94308.js HTTP/1.1
Host: cdn-rtb.sape.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pracuj2.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:39 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: block-all-mixed-content
etag: W/"ad3623dad67704ccb5080f8cec5ba94e"
last-modified: Fri, 02 Sep 2022 04:25:16 GMT
vary: Origin
x-amz-request-id: 1710F0850AB283A6
x-xss-protection: 1; mode=block
expires: Tue, 06 Sep 2022 15:12:39 GMT
cache-control: max-age=3600
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
cdn-rtb.sape.ru/js/prebid/prebid-otm-4.43.4.js
200 OK 0 B URL HTTP/2 cdn-rtb.sape.ru/js/prebid/prebid-otm-4.43.4.js
IP
GET /js/prebid/prebid-otm-4.43.4.js HTTP/1.1
Host: cdn-rtb.sape.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 06 Sep 2022 14:12:40 GMT
content-type: text/javascript
content-security-policy: block-all-mixed-content
etag: W/"f87d42b7563e73c39795752aeeeb48e6"
last-modified: Wed, 20 Oct 2021 14:50:45 GMT
vary: Origin
x-amz-request-id: 16BA2D12949B0946
x-xss-protection: 1; mode=block
expires: Wed, 07 Sep 2022 14:12:40 GMT
cache-control: max-age=86400
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
an.yandex.ru/mapuid/sapeis/1CB35A9D585517636600701A02FD6808
302 Found 0 B URL HTTP/2 an.yandex.ru/mapuid/sapeis/1CB35A9D585517636600701A02FD6808
IP
GET /mapuid/sapeis/1CB35A9D585517636600701A02FD6808 HTTP/1.1
Host: an.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
timing-allow-origin: *
location: https://an.yandex.ru/mapuid/sapeis/1CB35A9D585517636600701A02FD6808?redir-setuniq=1
date: Tue, 06 Sep 2022 14:12:41 GMT
set-cookie: yandexuid=9166668141662473561; domain=.yandex.ru; path=/; expires=Fri, 03-Sep-2032 14:12:41 GMT
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 06 Sep 2022 14:12:41 GMT
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
last-modified: Tue, 06 Sep 2022 14:12:41 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-encoding: gzip
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
5.189.168.99
93.184.220.29
176.99.7.123
142.250.74.66
23.36.76.226
104.18.21.226
31.220.27.155
188.42.196.115