hdvb-player.github.io/actualize.js
200 OK 1.0 kB URL GET HTTP/2 hdvb-player.github.io/actualize.js
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerDigiCert Inc
Subject*.github.io
FingerprintA1:46:14:C7:2A:1D:52:79:F6:AA:2B:B2:C5:0A:3B:D3:F5:02:06:75
ValidityTue, 21 Feb 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (618)
Hash 3c317d48c3c2186ac8961426225b64c5
20b04fe92b40651f4dc4ec2deded9f340b6f4fdc
684c4c1a48749fe7970543a2ef8f26d9b92fee382a27f6af5cba27cc8b5a6993
GET /actualize.js HTTP/1.1
Host: hdvb-player.github.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: GitHub.com
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Fri, 24 Feb 2023 23:27:39 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"63f947eb-964"
expires: Tue, 05 Sep 2023 01:20:54 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 21DC:77A2:749D91:76F7F2:64F6801A
accept-ranges: bytes
date: Sat, 09 Dec 2023 02:26:14 GMT
via: 1.1 varnish
age: 411
x-served-by: cache-bma1642-BMA
x-cache: HIT
x-cache-hits: 10
x-timer: S1702088775.605420,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 734491416eb5385dc6d1ee78b011765edf1f90d6
content-length: 1040
X-Firefox-Spdy: h2
ag.hdrezka.best/templates/rezka/images/hdrezka-logo.png
200 OK 9.2 kB URL GET HTTP/3 ag.hdrezka.best/templates/rezka/images/hdrezka-logo.png
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type PNG image data, 264 x 160, 8-bit gray+alpha, non-interlaced\012- data
Hash d0b42b88af171a94c6f10761a281c633
194e0acd4d268814793cadc570312a9f0d27bd00
589c243ef1d8835726d20c3ea2936379ef3e254b1ad6550bd18bc53f87026b2a
GET /templates/rezka/images/hdrezka-logo.png HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/templates/rezka/css/styles.css
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: image/png
content-length: 9161
last-modified: Sat, 01 Oct 2022 21:47:01 GMT
etag: "6338b555-23c9"
expires: Sat, 09 Dec 2023 10:22:03 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 57851
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yi9wDBsiVPBnNoNYn2oyB9%2FZ8fu8ISo4TsQDrVmsJs49c7vUY84ZmyE3vN4cdN9%2BB81VD%2FEgWvyiGzMGOUKDKbOvfe1EYK8KhBlhn1Rn%2BIBNOEV4KpiWPwZLeE2BbJJ7GrU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8329cd5a2c150b59-OSL
alt-svc: h3=":443"; ma=86400
ag.hdrezka.best/templates/rezka/images/sprite.png
41 kB URL ag.hdrezka.best/templates/rezka/images/sprite.png
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type PNG image data, 259 x 628, 8-bit/color RGBA, non-interlaced\012- data
Hash bba9594ec71fec546ea5459867418794
d040b44ca1cd8668094c619f8ffe5597918b5fd3
10deb67244790a0e11133cf4a49f8d248f940b917d04a1e93eacef00e1d26ffa
GET /templates/rezka/images/sprite.png HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/templates/rezka/css/styles.css
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: image/png
content-length: 40823
last-modified: Sat, 01 Oct 2022 21:47:01 GMT
etag: "6338b555-9f77"
expires: Sat, 09 Dec 2023 09:27:05 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 61149
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BEgXWiZI5g3utE6%2BpyCcgfZqupc6%2F%2BeSaNNZ2Una%2Bi32%2FpOC3yhzrVNQXT%2FTrmfFNSn59PJ5K7zLk4k1yUIozBITgbfAtEYX%2FUYoMVSPCXHdwilAC2d8MjC4QiIX0C7OVFQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8329cd5a2c170b59-OSL
alt-svc: h3=":443"; ma=86400
ag.hdrezka.best/templates/rezka/images/christmas-menu_icon.png
3.7 kB URL ag.hdrezka.best/templates/rezka/images/christmas-menu_icon.png
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type PNG image data, 126 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 1fbc8d960f8a646c5a5dfa3aed761103
ac8e69a34598b8c129d622f16cfa7c0dec6e2675
73680d9a67178c267fe5b3808341ca33b3eb2ef8b34113f732ca5d16cbef2da2
GET /templates/rezka/images/christmas-menu_icon.png HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/templates/rezka/css/styles.css
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: image/png
content-length: 3650
last-modified: Sat, 01 Oct 2022 21:47:01 GMT
etag: "6338b555-e42"
expires: Sat, 09 Dec 2023 10:14:06 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 58328
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GwSWpQ9DB82pi%2FQoJftwDrpJ8J3Z460XcXB6WZLAaIJ5KO4O3YcXatOnYmJsgxzimYm99vm0UixdvX5CinifKagTsqx10eAVUl1HQ1HKZwfXD8uFuA9arXgnipH39dgmEeA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8329cd5a2c180b59-OSL
alt-svc: h3=":443"; ma=86400
vak345.com/s.js?v=5b872a9d6ccdd73f7af99247d38e6849
200 OK 2.1 kB URL GET HTTP/2 vak345.com/s.js?v=5b872a9d6ccdd73f7af99247d38e6849
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF4:50:2C:D7:5C:84:E6:10:5D:32:80:62:FC:FE:E8:A0:40:4B:99:C4
ValidityFri, 10 Mar 2023 00:00:00 GMT - Sat, 09 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (3715)
Hash b40ea3b1505a43556b0c6a66720bf2ad
f7bec10d291d740a458fc11ef5af8cfca260d268
605503b75da30f05328667408ffc3da016f1349c0ac790d05fc99ddb50ee7c18
GET /s.js?v=5b872a9d6ccdd73f7af99247d38e6849 HTTP/1.1
Host: vak345.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: text/javascript;charset=UTF-8
vary: Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-movieads-country: NO
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FDFBqozmlF15zivjDFzhtWNTqMhQUPPKCWcADwxtTNYpzLHnSzwNa5JziH2sxyElvoWDMqUx%2BIdX8LEQHAgdEbB5mg58Uf59LJ3qUJsoUI7DXEgAQTynBzECYpR9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8329cd591e27b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ag.hdrezka.best/engine/classes/min/index.php?g=general&v=1f75d
200 OK 32 kB URL GET HTTP/3 ag.hdrezka.best/engine/classes/min/index.php?g=general&v=1f75d
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (32065), with CRLF line terminators
Hash 710458dd559c957714ac4a8e95357eb5
f694238d616f579a0690001f37984af430c19963
b409c14a10b4caad6b54844aa63a5faf748b83eecc2dd0d4fb1d913f8de55365
GET /engine/classes/min/index.php?g=general&v=1f75d HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: application/x-javascript; charset=utf-8
x-powered-by: PHP/7.4.26
expires: Sun, 08 Dec 2024 02:26:14 GMT
vary: Accept-Encoding
last-modified: Sat, 01 Oct 2022 21:47:00 GMT
etag: W/"pub1664660820;gz"
cache-control: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d0ZtcYr47zTx%2FV%2F7MKV0ucBBVr4ucxaSwTBhtrkl%2BhUN3ryveCt%2BPhRt501sqQ3GknfmN1gKfGZVGt1nuQrvZITuPbai32byC3Jo79IsifaCkHVTY16NLzxvz1SlqaX%2Fa9w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8329cd58bbec0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ag.hdrezka.best/templates/rezka/js/libs.js
200 OK 16 kB URL GET HTTP/3 ag.hdrezka.best/templates/rezka/js/libs.js
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (31997), with CRLF line terminators
Hash 5b1b338b614938bf3b91aac78cf1cbf7
f28c6d76e99c332b56e4d07ce76374d6a7cbc5cb
3ff7675fdf102be66b4a280369c2cd1ace51677c44df472218f91d3520fc796e
GET /templates/rezka/js/libs.js HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: application/javascript
last-modified: Sat, 01 Oct 2022 21:47:01 GMT
etag: W/"6338b555-d6a6"
expires: Sat, 09 Dec 2023 09:51:58 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 59656
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=imqHPTl9cvh9BUOQVkOI%2FUXmg6aQeGGqhepa56geV%2F7LyUfp7gw6c06rk%2FV6LzzVwHzKrpjL68hm7JMUdlbxRXhkv6545Q9ZOtoqvwAG3fTrICgjYD6nQ8Yb8JDDzCWHGwk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8329cd58cbee0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ag.hdrezka.best/templates/rezka/lazydev/dle_filter/assets/dle_filter.js
7.4 kB URL ag.hdrezka.best/templates/rezka/lazydev/dle_filter/assets/dle_filter.js
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
Hash 424d183f01d1f9b2c1c8a8858d5aa56b
cb055c12b2467c00642b3b30513207d41ce7b86c
3680417a6d5bc8dca72576e0e04e770b19c45a534ba592bdb3afbda4a92f86d5
GET /templates/rezka/lazydev/dle_filter/assets/dle_filter.js HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: application/javascript
last-modified: Sat, 01 Oct 2022 21:47:01 GMT
etag: W/"6338b555-94bd"
expires: Sat, 09 Dec 2023 08:14:17 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 65517
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eTClqNhtL76H1VWdrCPpUHAbmv13QK0m9U7O9xj2DS9SmXgy83bFpDJYGPSInN1RKiGmrcfvyZUm%2B8mBmcuAzMmL7WOjJQKErzdnnqe8CRZKYeDjO65sfQ8CLwjzK5%2BHrYs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8329cd58ebf40b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ag.hdrezka.best/templates/rezka/images/sprite.png?v10
41 kB URL ag.hdrezka.best/templates/rezka/images/sprite.png?v10
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type PNG image data, 259 x 628, 8-bit/color RGBA, non-interlaced\012- data
Hash bba9594ec71fec546ea5459867418794
d040b44ca1cd8668094c619f8ffe5597918b5fd3
10deb67244790a0e11133cf4a49f8d248f940b917d04a1e93eacef00e1d26ffa
GET /templates/rezka/images/sprite.png?v10 HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/templates/rezka/css/styles.css
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: image/png
content-length: 40823
last-modified: Sat, 01 Oct 2022 21:47:01 GMT
etag: "6338b555-9f77"
expires: Sat, 09 Dec 2023 09:33:44 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 60750
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N9BQ7H8dRXqCgykUsD6r6OIR5RfMqYcCM82HgQj4KwXJhjIdcu5ciObQSZHs7rEiJCBQVv26BjjOGVGJnU8fLlthm2m9L0FfTaCjohcmAGdKTL4dT1kWnTbtNHBpmSE9KKk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8329cd5a7c230b59-OSL
alt-svc: h3=":443"; ma=86400
ag.hdrezka.best/templates/rezka/images/icon-entity.png
200 OK 1.1 kB URL GET HTTP/3 ag.hdrezka.best/templates/rezka/images/icon-entity.png
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type PNG image data, 21 x 85, 8-bit gray+alpha, non-interlaced\012- data
Hash 7fcf1a335159f93d46d0316472d91a2e
d48425d4723e103e4cbdf2781b4f0313df2a442a
da4db87c0fc84fdbf31df269cd6bcbc6c47b771126b4d999c6fbb6b4208040d8
GET /templates/rezka/images/icon-entity.png HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/templates/rezka/css/styles.css
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: image/png
content-length: 1134
last-modified: Sat, 01 Oct 2022 21:47:01 GMT
etag: "6338b555-46e"
expires: Sat, 09 Dec 2023 08:57:17 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 62937
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uP68wh0WSZTdHz0sRw8LI13MuaLKeQtdOgPARSKnMxKvjKtAz2ymR2seaqvHw%2FzoXbRar2XqxdKvXrbzmbW7I8sTnspygrM4ApJ0a3G0k5BPZsgPdVjPIdAanX%2FH%2BEgkExM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8329cd5a7c240b59-OSL
alt-svc: h3=":443"; ma=86400
ag.hdrezka.best/templates/rezka/images/trailer-icon-small.png
200 OK 523 B URL GET HTTP/3 ag.hdrezka.best/templates/rezka/images/trailer-icon-small.png
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 704f763d4c8915f8ba212626e1194043
0486796664c3803f208541b68d4bc4c67f197e87
5c82dd752d6adcc727a3820ce509cd99b8d09e7e952cb358e76705fa62ab6c53
GET /templates/rezka/images/trailer-icon-small.png HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/templates/rezka/css/styles.css
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: image/png
content-length: 523
last-modified: Sat, 01 Oct 2022 21:47:01 GMT
etag: "6338b555-20b"
expires: Sat, 09 Dec 2023 08:57:17 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 62937
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mEWLSlqaT9OtTXOGNuw4LyLugOZr%2Bdb25ouTnNs9IzKKwka6W%2FgSjAi6bOf%2BLsz4eoiQRykkyo8VZSkcMMjtuHUGvvcHEWjc6z6H%2Fs2MGlrXs%2BvspGOgVTkFNOUr2Lpgtfc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8329cd5a7c260b59-OSL
alt-svc: h3=":443"; ma=86400
ag.hdrezka.best/templates/rezka/images/icon-subscribe.svg
200 OK 1.9 kB URL GET HTTP/3 ag.hdrezka.best/templates/rezka/images/icon-subscribe.svg
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 8196264618a2798d60656b28b2e674db
f93362ecf5af5b0a8bf69ac24426445fa7478651
c928c0067f7a4bba66ae2de318e804810b024509cea3d8d49fc5fd3b59702eb4
GET /templates/rezka/images/icon-subscribe.svg HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/templates/rezka/css/styles.css
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: image/svg+xml
last-modified: Sat, 01 Oct 2022 21:47:01 GMT
etag: W/"6338b555-35d"
expires: Sat, 09 Dec 2023 08:14:16 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 65518
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sBlsABjMpDtlD5Mpy4td5SB5WQlgo8%2F07fYG3NgiAgb%2FDb0Vn6UnOylOQWK7ZjU%2Bsg3ijGg4g19U2cvqCsPGbhU173JfRI9tqHMocq28kX2dlgM49Y8hAIj4X9Mes6cyVrQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8329cd5a2c160b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ag.hdrezka.best/templates/rezka/css/engine.css
200 OK 11 kB URL GET HTTP/3 ag.hdrezka.best/templates/rezka/css/engine.css
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 9e1f6f68989e31d7577a765393dd9969
cae8f24cd8d52c66303cb4dd33642b8641d72b47
cae4e09a09323a0db0bb011a65f9f5d327456bbaa0229a5eb80c73e69610c53e
GET /templates/rezka/css/engine.css HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: text/css
last-modified: Sat, 01 Oct 2022 21:47:01 GMT
vary: Accept-Encoding
etag: W/"6338b555-8499"
expires: Sat, 09 Dec 2023 09:27:04 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 61150
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Na3qZ8OJcU9j1f4tC1hQhd6it%2BP%2Fb5y8yuMl1mO1%2F2vowre8t%2F%2BmRGF1XzoOeXLVwrnsYGN22AsQz5k6Y9yoiCQOFJ5JyNBr6%2F%2FbabFyk263x810lHN0eUJ4QRn7a6kfOcs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8329cd58bbe80b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ag.hdrezka.best/templates/rezka/images/icon-menu-best.png
200 OK 2.3 kB URL GET HTTP/3 ag.hdrezka.best/templates/rezka/images/icon-menu-best.png
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type PNG image data, 126 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 39abebd1b85e0b8f8686f3d85a7555e7
0bb6600a5a617dc50a41d68f12ef0bde1db4ff5c
2456f67a429bfd0e12c1c37281b717e05fa04bdc4ef8072482406d2489f3a15e
GET /templates/rezka/images/icon-menu-best.png HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: image/png
content-length: 2303
last-modified: Sat, 01 Oct 2022 21:47:01 GMT
etag: "6338b555-8ff"
expires: Sat, 09 Dec 2023 10:14:06 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 58328
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MuKp%2FVXKNDVsOpXXNN4iSL0wYj8qlK4%2Fmhm3cTJllzpWOREIW9H3hIdlltOzg%2FI2qIrV0gWkA1qxeed%2FV5F2meg%2B2EvMqBiEQVx0czYMrbhurKScFYHkYVcdm%2FvxECc1Dzc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8329cd5b1c2e0b59-OSL
alt-svc: h3=":443"; ma=86400
ag.hdrezka.best/templates/rezka/images/comment-like.png
394 B URL ag.hdrezka.best/templates/rezka/images/comment-like.png
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type PNG image data, 18 x 36, 8-bit/color RGBA, non-interlaced\012- data
Hash ed187bdfeb1544f22e7fcd7db329cc51
83b396b484a0c2f31ff5b48ea72c75cf5658d4f9
20e16269641515ff7ae240dba83a1ff433b11cda1039dcc2b1be3150051a954b
GET /templates/rezka/images/comment-like.png HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/templates/rezka/css/styles.css
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: image/png
content-length: 394
last-modified: Sat, 01 Oct 2022 21:47:01 GMT
etag: "6338b555-18a"
expires: Sat, 09 Dec 2023 09:33:44 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 60750
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WMsuMKTcw%2Boio%2BF7evMnUuiubiv6apKSBsFHTX79OUE5AS0%2B9WNWEXKXC22%2Fktl4Xeb9hivO4iVFvrAqHWamxrBzR8dshGTPI4Xt5TCluk8PPhqCuy5jUEg27NIYMhBBHU4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8329cd5b4c380b59-OSL
alt-svc: h3=":443"; ma=86400
cdn.adlook.me/js/rlf.js
200 OK 22 kB IP
ASN #210756 G-Core Rus LLC
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File type Unicode text, UTF-8 text, with very long lines (65513), with no line terminators
Hash 51f38746340fcb986a6d44e77bd8eb4d
12bff93482ed08e8958b43312daf49298d925a53
2a8dc04af2b0d0221c7e36719a34281c0bb7bc91dcb9323a3f50fd30b07ba5b7
GET /js/rlf.js HTTP/1.1
Host: cdn.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: application/javascript,application/javascript;charset=utf-8
content-length: 22309
content-encoding: gzip
last-modified: Thu, 07 Dec 2023 16:02:55 GMT
etag: "8061cbd62629da1:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache: HIT
x-cached-since: 2023-12-09T02:16:31+00:00
x-node: m9p-up-gc50
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.adlook.me/js/vbf.js
21 kB IP
ASN #210756 G-Core Rus LLC
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File type Unicode text, UTF-8 text, with very long lines (65513), with no line terminators
Hash ccec8ae069055e49c32e84edb5080e16
307c6d306b20321180b588f856d80f975024132d
7743b63ac500a8ec1524fd44769c7a307dbb6b9290b7aa5a36a496a772da864f
GET /js/vbf.js HTTP/1.1
Host: cdn.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: application/javascript,application/javascript;charset=utf-8
content-length: 20786
content-encoding: gzip
last-modified: Thu, 07 Dec 2023 12:28:05 GMT
etag: "8078c1d3829da1:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache: HIT
x-cached-since: 2023-12-09T02:23:15+00:00
x-node: m9p-up-gc50
accept-ranges: bytes
X-Firefox-Spdy: h2
s.myangular.life/player?hit=script&sub=actualize&host=ag.hdrezka.best
0 B URL s.myangular.life/player?hit=script&sub=actualize&host=ag.hdrezka.best
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /player?hit=script&sub=actualize&host=ag.hdrezka.best HTTP/1.1
Host: s.myangular.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 09 Dec 2023 02:26:15 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
ag.hdrezka.best/templates/rezka/images/iframe-loader.gif
200 OK 1.9 kB URL GET HTTP/3 ag.hdrezka.best/templates/rezka/images/iframe-loader.gif
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 54 x 55\012- data
Hash da868f8439b090d0cd3805471e27e66a
1abb26f2f223e1733be082475dcbafbc7f65c4e7
01c3c75cfdf10b4a322f4875d231c0d504b76873401738ea5a79d8ebcd006041
GET /templates/rezka/images/iframe-loader.gif HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/templates/rezka/css/styles.css
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:15 GMT
content-type: image/gif
content-length: 1924
last-modified: Thu, 10 Nov 2022 22:41:53 GMT
etag: "636d7e31-784"
expires: Sat, 09 Dec 2023 09:33:44 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 60751
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GeVIFphRjLJQM%2B2P4mtqoXmMIr2oNUjBQ6rx2QrDPN9T09dTH660fRexB9iEaIm%2Fz%2F7gzpeV3d5VX2uIpgK5s4o43r3dN2zWfDTD1phmbOCD0yWa0GMsA8iB3B86UC%2FUWUg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8329cd5c8c4f0b59-OSL
alt-svc: h3=":443"; ma=86400
cdn.adlook.me/css/vbf.css?1.51
200 OK 1.1 kB URL GET HTTP/2 cdn.adlook.me/css/vbf.css?1.51
IP
ASN #210756 G-Core Rus LLC
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File type ASCII text, with very long lines (4211), with no line terminators
Hash d7d0582a5606fb476a13e418202b1903
1f15ae43a4cbbf27fd3509db67401364af9e5bcd
a549393e6f5ba8951589bd86018891a8c0dd086ce83073be74405c73bc1ef9db
GET /css/vbf.css?1.51 HTTP/1.1
Host: cdn.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:15 GMT
content-type: text/css
content-length: 1127
content-encoding: gzip
last-modified: Thu, 07 Dec 2023 12:28:04 GMT
etag: "0e228d3829da1:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache: HIT
x-cached-since: 2023-12-09T02:18:53+00:00
x-node: m9p-up-gc50
accept-ranges: bytes
X-Firefox-Spdy: h2
test.takedwn.ws/ping
0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /ping HTTP/1.1
Host: test.takedwn.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ag.hdrezka.best/
Origin: https://ag.hdrezka.best
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 09 Dec 2023 02:26:15 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js
200 OK 205 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type ASCII text, with very long lines (568)
Size 205 kB (204921 bytes)
Hash af51eb6ced1afe3f0f11ee679198808c
02b9d6a7a54f930807a01ae3cdcf462862925b40
6788908efcff931e3c0c4fb54a255932414a22e81971dcc1427c8a4f459a1fbf
GET /recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ag.hdrezka.best
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 204921
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:54:49 GMT
expires: Fri, 06 Dec 2024 15:54:49 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 04 Dec 2023 17:08:31 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 124286
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.adlook.me/u/cds.html
200 OK 1.4 kB IP
ASN #210756 G-Core Rus LLC
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 092b935eec2ba1199c03c1c856472e77
90d533fb895dda57fd0645cf484a4ecb7a64c344
8719a7a7e474f30d7a1d5dbf2ab97bbd73437c28ef567b410361540ad38c985e
GET /u/cds.html HTTP/1.1
Host: cdn.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:15 GMT
content-type: text/html
content-length: 1439
last-modified: Thu, 06 Aug 2020 17:06:57 GMT
etag: "207a2dfe136cd61:0"
x-powered-by: ASP.NET
cache: HIT
x-cached-since: 2023-12-09T02:20:13+00:00
x-node: m9p-up-gc50
accept-ranges: bytes
X-Firefox-Spdy: h2
ag.hdrezka.best/uploads/posts/2022-02/carstvo-nebesnoe-2005.jpg
15 kB URL ag.hdrezka.best/uploads/posts/2022-02/carstvo-nebesnoe-2005.jpg
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85", progressive, precision 8, 200x300, components 3\012- data
Hash 076b4f2e6ac7cbaf7d21797cea757792
74225d52d230e40f45a0bdf2ad9d3659c45505ac
c3782f8ef45986f2a4634ef959247799caf09cc64bf79ee2c0e494784cd9dcde
GET /uploads/posts/2022-02/carstvo-nebesnoe-2005.jpg HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:15 GMT
content-type: image/jpeg
content-length: 14719
last-modified: Sat, 01 Oct 2022 21:46:37 GMT
etag: "6338b53d-397f"
expires: Sat, 09 Dec 2023 18:00:32 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 30343
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c6BXDrEh3rNQNSgC0QOmflt8aK%2BDKY9WA4HPm7dDYUiILNXi%2FrPHxfUOXnlgLeNhoQvhvCqkBhMf59GqVPgmCtmxv6hDoSIAHaRnvi7t%2BKGRsu7S7T3UPLWpowYMhXVVkz4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8329cd5facb90b59-OSL
alt-svc: h3=":443"; ma=86400
ads.adlook.me/vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088782472
2 B URL ads.adlook.me/vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088782472
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088782472 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ag.hdrezka.best
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=c0c3bb0ba14b4e068ecf31afee7f8dfa; expires=Sat, 07 Dec 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=none
access-control-allow-origin: https://ag.hdrezka.best
access-control-allow-credentials: true
date: Sat, 09 Dec 2023 02:26:15 GMT
content-length: 2
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/styles__ltr.css
200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/styles__ltr.css
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf3WUwiAAAAAPSzg5ZbB8RA8S9dCxOs1n2qm8a9&co=aHR0cHM6Ly9hZy5oZHJlemthLmJlc3Q6NDQz&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=invisible&cb=5cr5bnmp2820
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type ASCII text, with very long lines (56398), with no line terminators
Hash eb4bc511f79f7a1573b45f5775b3a99b
d910fb51ad7316aa54f055079374574698e74b35
7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050
GET /recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24606
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 08 Dec 2023 16:24:08 GMT
expires: Sat, 07 Dec 2024 16:24:08 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 04 Dec 2023 17:08:31 GMT
content-type: text/css
vary: Accept-Encoding
age: 36127
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ag.hdrezka.best/templates/rezka/lazydev/dle_filter/assets/dle_filter.css
200 OK 212 kB URL GET HTTP/3 ag.hdrezka.best/templates/rezka/lazydev/dle_filter/assets/dle_filter.css
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (15199)
Size 212 kB (212185 bytes)
Hash b1f4a7e0efe3165c1a8af098d7889d62
387ced2711a4ffb236c0e679276fcf02103881d2
d9df1e523ed6353b2a049f4504633e7d7938462cca3dfc3fb41ff625b8e4a114
GET /templates/rezka/lazydev/dle_filter/assets/dle_filter.css HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: text/css
last-modified: Sat, 01 Oct 2022 21:47:01 GMT
vary: Accept-Encoding
etag: W/"6338b555-9b76"
expires: Sat, 09 Dec 2023 09:27:05 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 61149
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZxODoH8Wv8vsYsjZHjA7vP86ipLLnnH%2FmETG%2FaQyHfkfNaIxIxERuo28dfGzYZ6PPjh5VNMMsdpbhWd918qBPxouR7ui4UMsDL%2Bassx9ie9HbWXTP5IyvzVA7cOwUjpSmfg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8329cd58dbef0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
200 OK 228 kB URL User Request GET HTTP/2 ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2265), with CRLF, LF line terminators
Size 228 kB (227772 bytes)
Hash b36a91d783a7be3576fd809b5aac8955
a9589a318f40907cbf034753879b92422c83efe3
0d3092fcee3769b49eeee40e39ebdba5e10dd447ad8377afab5293df7744e4c3
GET /films/1-action/6882-carstvo-nebesnoe-2005.html HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 02:26:13 GMT
content-type: text/html; charset=utf-8
x-powered-by: PHP/7.4.26
set-cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397; path=/; secure; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kKkNXsjjafTIXN0wKaA4i6%2B%2FJ7P%2FCvtpSdw0egY22JOo4ZA%2BFcINDr2nhsmBbUjfnQ7iuy3xLV4BqBwNtc6wheJDnhSs79iERWOLnTjXQrW80nd8oUe5UOdMb%2FitPoYWwzQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8329cd51da4f1c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088782892
200 OK 2 B URL GET HTTP/2 ads.adlook.me/vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088782892
IP
ASN #48096 Enterprise Cloud Ltd.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088782892 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ag.hdrezka.best
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Cookie: adlm_userId=c0c3bb0ba14b4e068ecf31afee7f8dfa
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=c0c3bb0ba14b4e068ecf31afee7f8dfa; expires=Sat, 07 Dec 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=none
access-control-allow-origin: https://ag.hdrezka.best
access-control-allow-credentials: true
date: Sat, 09 Dec 2023 02:26:15 GMT
content-length: 2
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf3WUwiAAAAAPSzg5ZbB8RA8S9dCxOs1n2qm8a9&co=aHR0cHM6Ly9hZy5oZHJlemthLmJlc3Q6NDQz&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=invisible&cb=5cr5bnmp2820
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:43:10 GMT
expires: Fri, 06 Dec 2024 15:43:10 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 124986
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
15 kB URL fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:54:46 GMT
expires: Fri, 06 Dec 2024 15:54:46 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 124290
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js
200 OK 205 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js
IP
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type ASCII text, with very long lines (568)
Size 205 kB (204921 bytes)
Hash af51eb6ced1afe3f0f11ee679198808c
02b9d6a7a54f930807a01ae3cdcf462862925b40
6788908efcff931e3c0c4fb54a255932414a22e81971dcc1427c8a4f459a1fbf
GET /recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 204921
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:54:49 GMT
expires: Fri, 06 Dec 2024 15:54:49 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 04 Dec 2023 17:08:31 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 124287
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.adlook.me/u/cds.html
200 OK 1.4 kB IP
ASN #210756 G-Core Rus LLC
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 092b935eec2ba1199c03c1c856472e77
90d533fb895dda57fd0645cf484a4ecb7a64c344
8719a7a7e474f30d7a1d5dbf2ab97bbd73437c28ef567b410361540ad38c985e
GET /u/cds.html HTTP/1.1
Host: cdn.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:16 GMT
content-type: text/html
content-length: 1439
last-modified: Thu, 06 Aug 2020 17:06:57 GMT
etag: "207a2dfe136cd61:0"
x-powered-by: ASP.NET
cache: HIT
x-cached-since: 2023-12-09T02:20:13+00:00
x-node: m9p-up-gc50
accept-ranges: bytes
X-Firefox-Spdy: h2
www.google.com/js/bg/kn2owPU74JTsOwTGty0aoUlXRSKSJihCWxBMzE3aLQs.js
6.9 kB URL www.google.com/js/bg/kn2owPU74JTsOwTGty0aoUlXRSKSJihCWxBMzE3aLQs.js
IP
File type ASCII text, with very long lines (17050), with no line terminators
Hash 387099637df506ffbd3e00cb7d5c474a
f50240a6d036b68bc26812d87f8c887538691178
927da8c0f53be094ec3b04c6b72d1aa149574522922628425b104ccc4dda2d0b
GET /js/bg/kn2owPU74JTsOwTGty0aoUlXRSKSJihCWxBMzE3aLQs.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf3WUwiAAAAAPSzg5ZbB8RA8S9dCxOs1n2qm8a9&co=aHR0cHM6Ly9hZy5oZHJlemthLmJlc3Q6NDQz&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=invisible&cb=5cr5bnmp2820
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 6851
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 08 Dec 2023 17:38:26 GMT
expires: Sat, 07 Dec 2024 17:38:26 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 28 Nov 2023 18:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 31670
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/logo_48.png
200 OK 2.2 kB URL GET HTTP/3 www.gstatic.com/recaptcha/api2/logo_48.png
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf3WUwiAAAAAPSzg5ZbB8RA8S9dCxOs1n2qm8a9&co=aHR0cHM6Ly9hZy5oZHJlemthLmJlc3Q6NDQz&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=invisible&cb=5cr5bnmp2820
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 16:21:15 GMT
expires: Thu, 14 Dec 2023 16:21:15 GMT
cache-control: public, max-age=604800
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
age: 122701
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ads.adlook.me/vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088783165
200 OK 2 B URL GET HTTP/2 ads.adlook.me/vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088783165
IP
ASN #48096 Enterprise Cloud Ltd.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088783165 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ag.hdrezka.best
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Cookie: adlm_userId=c0c3bb0ba14b4e068ecf31afee7f8dfa
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=c0c3bb0ba14b4e068ecf31afee7f8dfa; expires=Sat, 07 Dec 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=none
access-control-allow-origin: https://ag.hdrezka.best
access-control-allow-credentials: true
date: Sat, 09 Dec 2023 02:26:16 GMT
content-length: 2
X-Firefox-Spdy: h2
cdn.adlook.me/u/cds.html
200 OK 1.4 kB IP
ASN #210756 G-Core Rus LLC
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 092b935eec2ba1199c03c1c856472e77
90d533fb895dda57fd0645cf484a4ecb7a64c344
8719a7a7e474f30d7a1d5dbf2ab97bbd73437c28ef567b410361540ad38c985e
GET /u/cds.html HTTP/1.1
Host: cdn.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:16 GMT
content-type: text/html
content-length: 1439
last-modified: Thu, 06 Aug 2020 17:06:57 GMT
etag: "207a2dfe136cd61:0"
x-powered-by: ASP.NET
cache: HIT
x-cached-since: 2023-12-09T02:20:13+00:00
x-node: m9p-up-gc50
accept-ranges: bytes
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088783503
200 OK 2 B URL GET HTTP/2 ads.adlook.me/vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088783503
IP
ASN #48096 Enterprise Cloud Ltd.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088783503 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ag.hdrezka.best
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Cookie: adlm_userId=c0c3bb0ba14b4e068ecf31afee7f8dfa
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=c0c3bb0ba14b4e068ecf31afee7f8dfa; expires=Sat, 07 Dec 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=none
access-control-allow-origin: https://ag.hdrezka.best
access-control-allow-credentials: true
date: Sat, 09 Dec 2023 02:26:16 GMT
content-length: 2
X-Firefox-Spdy: h2
cdn.adlook.me/u/cds.html
200 OK 1.4 kB IP
ASN #210756 G-Core Rus LLC
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 092b935eec2ba1199c03c1c856472e77
90d533fb895dda57fd0645cf484a4ecb7a64c344
8719a7a7e474f30d7a1d5dbf2ab97bbd73437c28ef567b410361540ad38c985e
GET /u/cds.html HTTP/1.1
Host: cdn.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:17 GMT
content-type: text/html
content-length: 1439
last-modified: Thu, 06 Aug 2020 17:06:57 GMT
etag: "207a2dfe136cd61:0"
x-powered-by: ASP.NET
cache: HIT
x-cached-since: 2023-12-09T02:20:13+00:00
x-node: m9p-up-gc50
accept-ranges: bytes
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088784091
2 B URL ads.adlook.me/vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088784091
IP
ASN #48096 Enterprise Cloud Ltd.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088784091 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ag.hdrezka.best
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Cookie: adlm_userId=c0c3bb0ba14b4e068ecf31afee7f8dfa
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=c0c3bb0ba14b4e068ecf31afee7f8dfa; expires=Sat, 07 Dec 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=none
access-control-allow-origin: https://ag.hdrezka.best
access-control-allow-credentials: true
date: Sat, 09 Dec 2023 02:26:17 GMT
content-length: 2
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=gtnt&rnd=1702088777
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=gtnt&rnd=1702088777
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=gtnt&rnd=1702088777 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 09 Dec 2023 02:26:17 GMT
content-length: 0
location: https://px.adhigh.net/p/cm/skyadvert?u=3963c672-624d-cc03-22f9-85615d7edd55
set-cookie: sky_uuid=3963c672-624d-cc03-22f9-85615d7edd55; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=btwcookie&rnd=1702088777
0 B URL code.moviead55.ru/go/cinit?cn=btwcookie&rnd=1702088777
IP
ASN #6681 Rozetka Sp. z o.o.
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=btwcookie&rnd=1702088777 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 09 Dec 2023 02:26:17 GMT
content-length: 0
location: https://ads.betweendigital.com/match?bidder_id=34348&callback_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbtwcookie%26bid%3D%24%7BUSER_ID%7D
set-cookie: sky_uuid=d0b27de0-5916-6586-8660-a2b3d2ec8986; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=sapecookie&rnd=1702088777
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=sapecookie&rnd=1702088777
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=sapecookie&rnd=1702088777 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 09 Dec 2023 02:26:17 GMT
content-length: 0
location: https://www.acint.net/rmatch?dp=167&euid=65315c7f-c868-50da-b7c8-8b2115e0ade0&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D
set-cookie: sky_uuid=65315c7f-c868-50da-b7c8-8b2115e0ade0; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=ohmybid&rnd=1702088777
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=ohmybid&rnd=1702088777
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=ohmybid&rnd=1702088777 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 09 Dec 2023 02:26:17 GMT
content-length: 0
location: https://match.ohmy.bid/cm?ssp=skyadv&redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dohmybid%26bid%3D%24%7BUUID%7D
set-cookie: sky_uuid=057f45d9-f402-2f9c-65b9-7e9d5f62e800; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
logger.moviead55.ru/logger.php?t=target_country_load&c=7fdddbc0-784a-416c-903e-c1a5ba451f68&a=&m=%7B%22browser%22%3A%22%7B%5C%22name%5C%22%3A%5C%22firefox%5C%22%2C%5C%22version%5C%22%3A%5C%22105%5C%22%7D%22%2C%22isMobile%22%3Afalse%2C%22format%22%3A%22new%22%7D&v=5b872a9d6ccdd73f7af99247d38e6849&o=undefined
200 OK 81 B URL GET HTTP/2 logger.moviead55.ru/logger.php?t=target_country_load&c=7fdddbc0-784a-416c-903e-c1a5ba451f68&a=&m=%7B%22browser%22%3A%22%7B%5C%22name%5C%22%3A%5C%22firefox%5C%22%2C%5C%22version%5C%22%3A%5C%22105%5C%22%7D%22%2C%22isMobile%22%3Afalse%2C%22format%22%3A%22new%22%7D&v=5b872a9d6ccdd73f7af99247d38e6849&o=undefined
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash b357a19c87624c7c4d131aeeb4ae677f
c7a9c45fd419815a5ab1998503a9f03514c0e229
497790947d4666760ce38f3c00e852c71fdb66cae849bae8e9ede352719e1581
GET /logger.php?t=target_country_load&c=7fdddbc0-784a-416c-903e-c1a5ba451f68&a=&m=%7B%22browser%22%3A%22%7B%5C%22name%5C%22%3A%5C%22firefox%5C%22%2C%5C%22version%5C%22%3A%5C%22105%5C%22%7D%22%2C%22isMobile%22%3Afalse%2C%22format%22%3A%22new%22%7D&v=5b872a9d6ccdd73f7af99247d38e6849&o=undefined HTTP/1.1
Host: logger.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:17 GMT
content-type: Content-Type: image/png
vary: Accept-Encoding
x-movieads-le: true
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=dgm&rnd=1702088777
0 B URL code.moviead55.ru/go/cinit?cn=dgm&rnd=1702088777
IP
ASN #6681 Rozetka Sp. z o.o.
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=dgm&rnd=1702088777 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 09 Dec 2023 02:26:17 GMT
content-length: 0
location: https://sync.opendsp.ru/match/Movieads?id=${UUID}
set-cookie: sky_uuid=5d4ab514-0481-470d-2022-8de53f88c6aa; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=solta&rnd=1702088777
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=solta&rnd=1702088777
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=solta&rnd=1702088777 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 09 Dec 2023 02:26:17 GMT
content-length: 0
location: https://kimberlite.io/rtb/sync/skyadvert?u=cf042294-c700-c633-edd4-0d558e75f8b0
set-cookie: sky_uuid=cf042294-c700-c633-edd4-0d558e75f8b0; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=otmbid&rnd=1702088777
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=otmbid&rnd=1702088777
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=otmbid&rnd=1702088777 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 09 Dec 2023 02:26:17 GMT
content-length: 0
location: https://sync.dmp.otm-r.com/match/skyadvert
set-cookie: sky_uuid=7b35f12c-105d-67e3-2a97-57059d32bc8a; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=vhd&rnd=1702088777
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=vhd&rnd=1702088777
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=vhd&rnd=1702088777 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 09 Dec 2023 02:26:17 GMT
content-length: 0
location: https://a.videohead.tech/sync?ssp=44
set-cookie: sky_uuid=4a1445bf-002a-b1fb-c2dd-c86808dada86; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=bzcookie&rnd=1702088777
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=bzcookie&rnd=1702088777
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=bzcookie&rnd=1702088777 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 09 Dec 2023 02:26:17 GMT
content-length: 0
location: https://exchange.buzzoola.com/cookiesync/redirect/skyadvert?redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbzcookie%26bid%3D%24%7BUUID%7D
set-cookie: sky_uuid=51b0dc1d-dd9c-9bb8-1f37-9f207658c2a6; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=gonetbid&rnd=1702088777
0 B URL code.moviead55.ru/go/cinit?cn=gonetbid&rnd=1702088777
IP
ASN #6681 Rozetka Sp. z o.o.
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=gonetbid&rnd=1702088777 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 09 Dec 2023 02:26:17 GMT
content-length: 0
location: https://sync.gonet-ads.com/match/SkyAdvert?id=c284f37f-0e99-ebaf-cc17-75c9bb92f41b
set-cookie: sky_uuid=c284f37f-0e99-ebaf-cc17-75c9bb92f41b; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=otclkbid&rnd=1702088777
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=otclkbid&rnd=1702088777
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=otclkbid&rnd=1702088777 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 09 Dec 2023 02:26:17 GMT
content-length: 0
location: https://otclick-adv.ru/core/match.gif?s=30&reference=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dotclkbid%26bid%3D%23%7BUID%7D
set-cookie: sky_uuid=e3b16cc3-5888-7e74-62d5-27f7965bae89; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
www.acint.net/mc/?dp=167
302 Found 154 B IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /mc/?dp=167 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty
date: Sat, 09 Dec 2023 02:26:17 GMT
content-type: text/html
content-length: 154
location: /mc/?dp=167&tc=1
set-cookie: test_cookie=CheckForPermission; path=/; Secure; SameSite=None; domain=.acint.net; expires=Sat, 09-Dec-23 02:36:17 GMT
aid=fwAAAWVz0EktHAfXMYEcAiNgVkj9IOmA6pfJqwjrfVGCfbMk; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
cdn.adlook.me/u/cds.html
200 OK 1.4 kB IP
ASN #210756 G-Core Rus LLC
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 092b935eec2ba1199c03c1c856472e77
90d533fb895dda57fd0645cf484a4ecb7a64c344
8719a7a7e474f30d7a1d5dbf2ab97bbd73437c28ef567b410361540ad38c985e
GET /u/cds.html HTTP/1.1
Host: cdn.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:17 GMT
content-type: text/html
content-length: 1439
last-modified: Thu, 06 Aug 2020 17:06:57 GMT
etag: "207a2dfe136cd61:0"
x-powered-by: ASP.NET
cache: HIT
x-cached-since: 2023-12-09T02:20:13+00:00
x-node: m9p-up-gc50
accept-ranges: bytes
X-Firefox-Spdy: h2
logger.moviead55.ru/logger.php?t=player_frame_loaded_new&c=7fdddbc0-784a-416c-903e-c1a5ba451f68&a=&m=0&v=5b872a9d6ccdd73f7af99247d38e6849&o=
83 B URL logger.moviead55.ru/logger.php?t=player_frame_loaded_new&c=7fdddbc0-784a-416c-903e-c1a5ba451f68&a=&m=0&v=5b872a9d6ccdd73f7af99247d38e6849&o=
IP
ASN #6681 Rozetka Sp. z o.o.
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
File type gzip compressed data, from Unix\012- data
Hash 2eecd382e68ddbb7e208ba686264aaf9
b4ef82f1c447a3f4af0f55f32b8ee4d1e5530899
f33b32d77a23ca55ba35fd44e449ea69e560e806c29de5504c845127c71c962f
GET /logger.php?t=player_frame_loaded_new&c=7fdddbc0-784a-416c-903e-c1a5ba451f68&a=&m=0&v=5b872a9d6ccdd73f7af99247d38e6849&o= HTTP/1.1
Host: logger.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:17 GMT
content-type: Content-Type: image/png
vary: Accept-Encoding
x-movieads-le: true
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
www.acint.net/rmatch?dp=167&euid=65315c7f-c868-50da-b7c8-8b2115e0ade0&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D
302 Found 154 B URL GET HTTP/2 www.acint.net/rmatch?dp=167&euid=65315c7f-c868-50da-b7c8-8b2115e0ade0&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=167&euid=65315c7f-c868-50da-b7c8-8b2115e0ade0&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sat, 09 Dec 2023 02:26:17 GMT
content-type: text/html
content-length: 154
location: /rmatch?r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D&dp=167&tc=1&euid=65315c7f-c868-50da-b7c8-8b2115e0ade0
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: test_cookie=CheckForPermission; path=/; Secure; SameSite=None; domain=.acint.net; expires=Sat, 09-Dec-23 02:36:17 GMT
aid=fwAAAWVz0Eks2gfQ1hF1AuHRHSFcM5hXeDQco8F+D6rVqlKV; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rmatch?r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D&dp=167&tc=1&euid=65315c7f-c868-50da-b7c8-8b2115e0ade0
154 B URL www.acint.net/rmatch?r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D&dp=167&tc=1&euid=65315c7f-c868-50da-b7c8-8b2115e0ade0
IP
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D&dp=167&tc=1&euid=65315c7f-c868-50da-b7c8-8b2115e0ade0 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVz0Eks2gfQ1hF1AuHRHSFcM5hXeDQco8F+D6rVqlKV
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sat, 09 Dec 2023 02:26:17 GMT
content-type: text/html
content-length: 154
location: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcode.moviead55.ru%252Fgo%252Fcsync%253Fcn%253Dsapecookie%2526bid%253D$%257BUSER_ID%257D&dp=14
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
set-cookie: cSyncDp14v4=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
a.videohead.tech/sync?ssp=44
0 B URL a.videohead.tech/sync?ssp=44
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?ssp=44 HTTP/1.1
Host: a.videohead.tech
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 09 Dec 2023 02:26:17 GMT
content-type: text/plain
set-cookie: prevhead=1; Expires=Mon, 08 Jan 2024 02:26:17 GMT; Domain=videohead.tech; SameSite=None; Secure; Path=/
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-expose-headers: Content-Length,Content-Range
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NCKC5W0pzW6jKf7tGKwd3YcmrvNnv7VPbqO%2BSkLwfDQCjnC2rlpr3v0PybICqfUKYFXw0%2FD0%2Fy41S70SR%2BN69nw3V0Smfh5TIOgaUrwqlxoC4NxAh4JVbiNDIaC1z18orH1k"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8329cd6dfc9eb515-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
dm-eu.hybrid.ai/match?id=185&burl=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dhbrdcookie2%26bid%3D%24%7BVID%7D
302 Found 0 B URL GET HTTP/2 dm-eu.hybrid.ai/match?id=185&burl=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dhbrdcookie2%26bid%3D%24%7BVID%7D
IP
ASN #58272 LeaderTelecom B.V.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerSectigo Limited
Subject*.hybrid.ai
Fingerprint40:F9:88:C5:EF:2B:26:9C:61:DC:CC:ED:B1:67:03:F4:E2:CC:B7:C8
ValidityThu, 14 Sep 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?id=185&burl=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dhbrdcookie2%26bid%3D%24%7BVID%7D HTTP/1.1
Host: dm-eu.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 09 Dec 2023 02:26:17 GMT
content-length: 0
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
location: https://code.moviead55.ru/go/csync?cn=hbrdcookie2&bid=e47628aa2625f6e9154d
set-cookie: vid=e47628aa2625f6e9154d; Expires=Sun, 08 Dec 2024 02:26:16 GMT; Domain=.hybrid.ai; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 565
x-xss-protection: 1; mode=block
access-control-allow-origin: https://ag.hdrezka.best
access-control-allow-credentials: true
server: Hybrid Web Server
X-Firefox-Spdy: h2
match.ohmy.bid/cm?ssp=skyadv&redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dohmybid%26bid%3D%24%7BUUID%7D
302 Found 0 B URL GET HTTP/2 match.ohmy.bid/cm?ssp=skyadv&redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dohmybid%26bid%3D%24%7BUUID%7D
IP
ASN #24940 Hetzner Online GmbH
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subjectmatch.ohmy.bid
Fingerprint9E:80:FE:F1:53:4B:43:82:19:E2:9C:5A:93:AF:43:96:5D:6C:7B:69
ValidityFri, 24 Nov 2023 20:06:51 GMT - Thu, 22 Feb 2024 20:06:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?ssp=skyadv&redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dohmybid%26bid%3D%24%7BUUID%7D HTTP/1.1
Host: match.ohmy.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sat, 09 Dec 2023 02:26:17 GMT
content-length: 0
bidder: bid-23
location: https://code.moviead55.ru/go/csync?cn=ohmybid&bid=eb55565c-6dfc-4351-b876-ae35f876c988
set-cookie: uid=eb55565c-6dfc-4351-b876-ae35f876c988.6573d049.655e64595abf630c; domain=.ohmy.bid; path=/; expires=Mon, 08-Jan-2024 02:26:17 GMT; SameSite=None; Secure;
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ag.hdrezka.best/templates/rezka/css/styles.css
200 OK 13 kB URL GET HTTP/3 ag.hdrezka.best/templates/rezka/css/styles.css
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (907), with CRLF line terminators
Hash eaa7a279c51f27c2a636b7bc13a3f332
5057f867df52c0300c8694a583aef9f63cedb900
eedeb1865e57ac74a7af413e807171c725c8eab663ea981f0a3bc67d026d2ef5
GET /templates/rezka/css/styles.css HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: text/css
last-modified: Thu, 10 Nov 2022 22:42:05 GMT
vary: Accept-Encoding
etag: W/"636d7e3d-c573"
expires: Sat, 09 Dec 2023 09:51:57 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 59657
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K8kXuXkRBpadpKgxTbe%2BRr3kIRR3FPOy3TIRNZ4XXJyEViwqTIiiqX%2BVcmx5leP9jfOz93wV%2BK2Iv1XrFKV6N1fRYgDseQnIcvH9QsYlc8DHOesLs4fOIU5Ebc4bR%2F2wFHw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8329cd58abe70b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
otclick-adv.ru/core/match.gif?s=30&reference=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dotclkbid%26bid%3D%23%7BUID%7D
302 Found 124 B URL GET HTTP/2 otclick-adv.ru/core/match.gif?s=30&reference=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dotclkbid%26bid%3D%23%7BUID%7D
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subjectotclick.ru
Fingerprint3A:7D:83:98:7E:DD:BF:D7:8A:A8:6E:FB:B0:9E:9F:DF:A9:37:C8:54
ValidityMon, 02 Oct 2023 16:11:22 GMT - Sun, 31 Dec 2023 16:11:21 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash c73e35f73ed5c795c70cf66e99088b7c
63a9ffe5d0e5b4070819b95ef564a58d8a3a3a1c
80034a9712f07e6b0577c7e5bf6d5d718736593e7d21c81dd1a3cbdb4eb860de
GET /core/match.gif?s=30&reference=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dotclkbid%26bid%3D%23%7BUID%7D HTTP/1.1
Host: otclick-adv.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.24.0
date: Sat, 09 Dec 2023 02:26:18 GMT
content-length: 124
location: https://code.moviead55.ru/go/csync?cn=otclkbid&bid=VUG31mKFfTelneA
p3p: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
cache-control: no-cache, max-age=0, must-revalidate, no-store
pragma: no-cache
expires: Thursday, 01-Jan-1970 00:00:00 GMT
set-cookie: idntfy=VUG31mKFfTelneA; expires=Tue, 06-Dec-2033 02:26:17 GMT; domain=otclick-adv.ru; path=/core; SameSite=None; Secure
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
sync.opendsp.ru/match/Movieads?id=${UUID}
200 OK 43 B URL GET HTTP/2 sync.opendsp.ru/match/Movieads?id=${UUID}
IP
ASN #50340 OOO Network of data-centers Selectel
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGlobalSign nv-sa
Subject*.opendsp.ru
Fingerprint8E:F7:66:17:C0:94:EA:58:01:39:E4:C7:14:85:F8:A2:C2:22:F3:BA
ValidityFri, 14 Jul 2023 08:08:59 GMT - Wed, 14 Aug 2024 08:08:58 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/Movieads?id=${UUID} HTTP/1.1
Host: sync.opendsp.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
exchange.buzzoola.com/cookiesync/redirect/skyadvert?redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbzcookie%26bid%3D%24%7BUUID%7D
126 B URL exchange.buzzoola.com/cookiesync/redirect/skyadvert?redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbzcookie%26bid%3D%24%7BUUID%7D
IP
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text
Hash 7c7efad81eb1165ab52a4c4379c34c9b
dd9a0e0c18afbbbd0ef3e241dcd0184800c83fc3
f404f6bd766a31aedea2b94c29b0039b149d3a31668fa00e24c930a5bb81f5df
GET /cookiesync/redirect/skyadvert?redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbzcookie%26bid%3D%24%7BUUID%7D HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: text/html; charset=utf-8
content-length: 126
location: https://code.moviead55.ru/go/csync?cn=bzcookie&bid=2b4ffd38-f5fa-44bd-4f78-fbf1227f7b6d
serverid: TODO
X-Firefox-Spdy: h2
cdn.adlook.me/u/cds.html
200 OK 1.4 kB IP
ASN #210756 G-Core Rus LLC
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 092b935eec2ba1199c03c1c856472e77
90d533fb895dda57fd0645cf484a4ecb7a64c344
8719a7a7e474f30d7a1d5dbf2ab97bbd73437c28ef567b410361540ad38c985e
GET /u/cds.html HTTP/1.1
Host: cdn.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: text/html
content-length: 1439
last-modified: Thu, 06 Aug 2020 17:06:57 GMT
etag: "207a2dfe136cd61:0"
x-powered-by: ASP.NET
cache: HIT
x-cached-since: 2023-12-09T02:20:13+00:00
x-node: m9p-up-gc50
accept-ranges: bytes
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088784790
200 OK 2 B URL GET HTTP/2 ads.adlook.me/vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088784790
IP
ASN #48096 Enterprise Cloud Ltd.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088784790 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ag.hdrezka.best
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Cookie: adlm_userId=c0c3bb0ba14b4e068ecf31afee7f8dfa
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=c0c3bb0ba14b4e068ecf31afee7f8dfa; expires=Sat, 07 Dec 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=none
access-control-allow-origin: https://ag.hdrezka.best
access-control-allow-credentials: true
date: Sat, 09 Dec 2023 02:26:17 GMT
content-length: 2
X-Firefox-Spdy: h2
kimberlite.io/rtb/sync/skyadvert?u=cf042294-c700-c633-edd4-0d558e75f8b0
0 B URL kimberlite.io/rtb/sync/skyadvert?u=cf042294-c700-c633-edd4-0d558e75f8b0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/sync/skyadvert?u=cf042294-c700-c633-edd4-0d558e75f8b0 HTTP/1.1
Host: kimberlite.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Sat, 09 Dec 2023 02:26:18 GMT
Content-Length: 0
Connection: keep-alive
cache-control: no-store
access-control-allow-credentials: true
access-control-allow-origin: *
location: https://code.moviead55.ru/go/csync?cn=solta&bid=ZXPQSgXeViw
set-cookie: u=ZXPQSgXeViw~QgGnyMXPj2YxSuFnX59IV8fLWCg; path=/; max-age=7776000; samesite=none; httponly; secure
n=; max-age=0; samesite=none; httponly; secure
referrer-policy: no-referrer
server-timing: app;srv=0;dur=0.0001
sync.gonet-ads.com/match/SkyAdvert?id=c284f37f-0e99-ebaf-cc17-75c9bb92f41b
200 OK 43 B URL GET HTTP/2 sync.gonet-ads.com/match/SkyAdvert?id=c284f37f-0e99-ebaf-cc17-75c9bb92f41b
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerSectigo Limited
Subject*.gonet-ads.com
Fingerprint2B:BE:BF:75:0A:67:AA:2D:FA:0A:7F:92:F4:37:AE:9B:DD:47:68:2D
ValidityWed, 07 Jun 2023 00:00:00 GMT - Tue, 11 Jun 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/SkyAdvert?id=c284f37f-0e99-ebaf-cc17-75c9bb92f41b HTTP/1.1
Host: sync.gonet-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
sync.dmp.otm-r.com/match/skyadvert
204 No Content 0 B URL GET HTTP/2 sync.dmp.otm-r.com/match/skyadvert
IP
ASN #24940 Hetzner Online GmbH
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGlobalSign nv-sa
Subject*.dmp.otm-r.com
FingerprintC6:A2:9D:82:0D:D1:C1:2D:A4:ED:7F:05:13:52:5B:94:6B:10:58:D6
ValidityMon, 19 Jun 2023 10:50:51 GMT - Sat, 20 Jul 2024 10:50:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/skyadvert HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.15.9
date: Sat, 09 Dec 2023 02:26:18 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
user91471.clients-cdnnow.ru/yasdk/vw.js?v3
1.9 kB URL user91471.clients-cdnnow.ru/yasdk/vw.js?v3
IP
File type gzip compressed data, from Unix\012- data
Hash 612d38154456f74afbd92a21083387d4
48a825d55429d79d5fe75cdeec59d9ae2c18a5f6
1155e44924af244bb1add477ba5abc17e0dfe6ee3008b7e067f930317eaa662f
GET /yasdk/vw.js?v3 HTTP/1.1
Host: user91471.clients-cdnnow.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: application/javascript
last-modified: Fri, 21 Jul 2023 13:34:19 GMT
vary: Accept-Encoding
etag: W/"64ba895b-12fc"
x-movieads-country: RU
content-encoding: gzip
x-edge-cache: HIT
x-edge-ip: 172.19.32.3
X-Firefox-Spdy: h2
code.moviead55.ru/go/csync?cn=hbrdcookie2&bid=e47628aa2625f6e9154d
200 OK 0 B URL GET HTTP/2 code.moviead55.ru/go/csync?cn=hbrdcookie2&bid=e47628aa2625f6e9154d
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=hbrdcookie2&bid=e47628aa2625f6e9154d HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Cookie: sky_uuid=e3b16cc3-5888-7e74-62d5-27f7965bae89
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: image/jpeg
content-length: 0
set-cookie: hbrdcookie2=e47628aa2625f6e9154d; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/csync?cn=ohmybid&bid=eb55565c-6dfc-4351-b876-ae35f876c988
200 OK 0 B URL GET HTTP/2 code.moviead55.ru/go/csync?cn=ohmybid&bid=eb55565c-6dfc-4351-b876-ae35f876c988
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=ohmybid&bid=eb55565c-6dfc-4351-b876-ae35f876c988 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Cookie: sky_uuid=e3b16cc3-5888-7e74-62d5-27f7965bae89
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: image/jpeg
content-length: 0
set-cookie: ohmybid=eb55565c-6dfc-4351-b876-ae35f876c988; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcode.moviead55.ru%252Fgo%252Fcsync%253Fcn%253Dsapecookie%2526bid%253D$%257BUSER_ID%257D&dp=14
142 B URL ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcode.moviead55.ru%252Fgo%252Fcsync%253Fcn%253Dsapecookie%2526bid%253D$%257BUSER_ID%257D&dp=14
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcode.moviead55.ru%252Fgo%252Fcsync%253Fcn%253Dsapecookie%2526bid%253D$%257BUSER_ID%257D&dp=14 HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Sat, 09 Dec 2023 02:26:18 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/rmatch?dp=14&euid=3303420A4AD073651B0058530260EA8E&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=CkIDM2Vz0EpTWAAbjupgAuz5u9+oO8zV416vYfJZTX5ON85s; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
302 Moved Temporarily 142 B URL GET HTTP/1.1 ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.sape.ru
FingerprintF9:61:5C:64:81:FD:57:C2:4A:BD:6B:12:D4:7E:02:5E:83:8E:3E:40
ValiditySun, 08 Oct 2023 01:41:50 GMT - Sat, 06 Jan 2024 01:41:49 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Sat, 09 Dec 2023 02:26:18 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/match?dp=14&euid=4502420A4AD073651C00612F02EF5D3D
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=CkICRWVz0EovYQAcPV3vAlIxNN5bNJ+g4pV1UM2///JX4GUk; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
dm-eu.hybrid.ai/match?id=106&vid=0100007F49D07365D007DA2C027511D6
302 Found 0 B URL GET HTTP/2 dm-eu.hybrid.ai/match?id=106&vid=0100007F49D07365D007DA2C027511D6
IP
ASN #58272 LeaderTelecom B.V.
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerSectigo Limited
Subject*.hybrid.ai
Fingerprint40:F9:88:C5:EF:2B:26:9C:61:DC:CC:ED:B1:67:03:F4:E2:CC:B7:C8
ValidityThu, 14 Sep 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?id=106&vid=0100007F49D07365D007DA2C027511D6 HTTP/1.1
Host: dm-eu.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Cookie: vid=e47628aa2625f6e9154d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Sat, 09 Dec 2023 02:26:18 GMT
content-length: 0
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
location: https://dm.hybrid.ai/yandexdmp-match
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 507
x-xss-protection: 1; mode=block
access-control-allow-origin: https://www.acint.net
access-control-allow-credentials: true
server: Hybrid Web Server
X-Firefox-Spdy: h2
sync.dmp.otm-r.com/match/sape?id=0100007F49D07365D007DA2C027511D6
204 No Content 0 B URL GET HTTP/2 sync.dmp.otm-r.com/match/sape?id=0100007F49D07365D007DA2C027511D6
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerGlobalSign nv-sa
Subject*.dmp.otm-r.com
FingerprintC6:A2:9D:82:0D:D1:C1:2D:A4:ED:7F:05:13:52:5B:94:6B:10:58:D6
ValidityMon, 19 Jun 2023 10:50:51 GMT - Sat, 20 Jul 2024 10:50:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=0100007F49D07365D007DA2C027511D6 HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx/1.15.9
date: Sat, 09 Dec 2023 02:26:18 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
301 Moved Permanently 115 B URL GET HTTP/2 exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerSectigo Limited
Subject*.buzzoola.com
FingerprintE6:7F:94:98:CF:E4:CF:88:C7:8C:FC:16:A3:D7:D0:10:4E:EC:AB:F1
ValidityMon, 04 Sep 2023 00:00:00 GMT - Fri, 04 Oct 2024 23:59:59 GMT
File type HTML document, ASCII text
Hash f97fe78906a327f5f506ebefb5e153d0
2acc383ac7cfe0dd1d9e35295955e468f714e9e4
abb6702c6d1411d4f50d21574552b9af910adbcf7efd3cbad0a079ab34f1c9d0
GET /cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: text/html; charset=utf-8
content-length: 115
location: https://www.acint.net/match?dp=126&euid=88d87c26-6865-4ea8-45dd-f8291e6a6423
serverid: TODO
X-Firefox-Spdy: h2
sync.gonet-ads.com/match/sape.js?id=0100007F49D07365D007DA2C027511D6
200 OK 43 B URL GET HTTP/2 sync.gonet-ads.com/match/sape.js?id=0100007F49D07365D007DA2C027511D6
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerSectigo Limited
Subject*.gonet-ads.com
Fingerprint2B:BE:BF:75:0A:67:AA:2D:FA:0A:7F:92:F4:37:AE:9B:DD:47:68:2D
ValidityWed, 07 Jun 2023 00:00:00 GMT - Tue, 11 Jun 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/sape.js?id=0100007F49D07365D007DA2C027511D6 HTTP/1.1
Host: sync.gonet-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
code.moviead55.ru/go/csync?cn=otclkbid&bid=VUG31mKFfTelneA
0 B URL code.moviead55.ru/go/csync?cn=otclkbid&bid=VUG31mKFfTelneA
IP
ASN #6681 Rozetka Sp. z o.o.
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=otclkbid&bid=VUG31mKFfTelneA HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Cookie: sky_uuid=e3b16cc3-5888-7e74-62d5-27f7965bae89; hbrdcookie2=e47628aa2625f6e9154d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: image/jpeg
content-length: 0
set-cookie: otclkbid=VUG31mKFfTelneA; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
match.ohmy.bid/cm?ssp=sape&redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D
302 Found 0 B URL GET HTTP/2 match.ohmy.bid/cm?ssp=sape&redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subjectmatch.ohmy.bid
Fingerprint9E:80:FE:F1:53:4B:43:82:19:E2:9C:5A:93:AF:43:96:5D:6C:7B:69
ValidityFri, 24 Nov 2023 20:06:51 GMT - Thu, 22 Feb 2024 20:06:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?ssp=sape&redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D HTTP/1.1
Host: match.ohmy.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Cookie: uid=eb55565c-6dfc-4351-b876-ae35f876c988.6573d049.655e64595abf630c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Sat, 09 Dec 2023 02:26:18 GMT
content-length: 0
bidder: bid-15
location: https://www.acint.net/match?dp=217&euid=eb55565c-6dfc-4351-b876-ae35f876c988
access-control-allow-credentials: true
X-Firefox-Spdy: h2
a.utraff.com/sync?ssp=8&id=0100007F49D07365D007DA2C027511D6
204 No Content 0 B URL GET HTTP/2 a.utraff.com/sync?ssp=8&id=0100007F49D07365D007DA2C027511D6
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerGoogle Trust Services LLC
Subjectutraff.com
Fingerprint65:F0:CB:A7:9C:1E:18:8C:D9:DE:5B:4C:46:9E:79:3E:78:F1:B0:CD
ValidityThu, 12 Oct 2023 03:40:45 GMT - Wed, 10 Jan 2024 03:40:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?ssp=8&id=0100007F49D07365D007DA2C027511D6 HTTP/1.1
Host: a.utraff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: text/plain
set-cookie: preutid=1; Expires=Mon, 08 Jan 2024 05:26:18 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/
preutid=1; Expires=Mon, 08 Jan 2024 05:26:18 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-expose-headers: Content-Length,Content-Range
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p31ca2hEv5IqMbY8Q6XJgJlVxEjdMD2vIHaHuyG9o%2FZvEInZp1DlCnp2A%2FraWLGOsHM%2Beh6YRrO916bHLg1VSS6B%2B%2Br8b7CkNPMiGOJh59Vfdsqz3dhTjeqUqGyin8I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8329cd712af75684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
kimberlite.io/rtb/sync/sape2?u=0100007F49D07365D007DA2C027511D6
307 Temporary Redirect 0 B URL GET HTTP/1.1 kimberlite.io/rtb/sync/sape2?u=0100007F49D07365D007DA2C027511D6
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerGlobalSign nv-sa
Subject*.kimberlite.io
Fingerprint94:44:D9:27:EE:9B:5F:DE:36:07:ED:BA:1A:1D:62:2A:31:B6:43:72
ValidityFri, 10 Mar 2023 07:40:01 GMT - Wed, 10 Apr 2024 07:40:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/sync/sape2?u=0100007F49D07365D007DA2C027511D6 HTTP/1.1
Host: kimberlite.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Cookie: u=ZXPQSgXeViw~QgGnyMXPj2YxSuFnX59IV8fLWCg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Sat, 09 Dec 2023 02:26:18 GMT
Content-Length: 0
Connection: keep-alive
cache-control: no-store
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: u=ZXPQSgXeViw~QgGnyMXPj2YxSuFnX59IV8fLWCg; path=/; max-age=7776000; samesite=none; httponly; secure
as=-WrUeGVz0Eo; max-age=604800; samesite=none; httponly; secure
f=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D243%26euid%3DZXPQSgXeViw; max-age=30; samesite=none; httponly; secure
n=1; max-age=30; samesite=none; httponly; secure
location: https://solta-sync.rutarget.ru/sync
referrer-policy: no-referrer
server-timing: app;srv=8;dur=0.0002
s.ccsyncuuid.net/match/5/?remote_uid=0100007F49D07365D007DA2C027511D6
302 Found 0 B URL GET HTTP/2 s.ccsyncuuid.net/match/5/?remote_uid=0100007F49D07365D007DA2C027511D6
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subjectccsyncuuid.net
Fingerprint05:93:D2:3F:39:41:DF:CE:18:E5:65:94:78:1D:8A:7F:24:58:17:98
ValidityMon, 13 Nov 2023 06:10:33 GMT - Sun, 11 Feb 2024 06:10:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/5/?remote_uid=0100007F49D07365D007DA2C027511D6 HTTP/1.1
Host: s.ccsyncuuid.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sat, 09 Dec 2023 02:26:18 GMT
content-length: 0
location: https://acint.net/match?dp=80&euid=nWSsCfPvGalRQCTtFviB
set-cookie: jcsuuid=nWSsCfPvGalRQCTtFviB; expires=Sun, 08 Dec 2024 02:26:18 GMT; domain=ccsyncuuid.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sap1&uid=0100007F49D07365D007DA2C027511D6
0 B URL sync.bumlam.com/?src=sap1&uid=0100007F49D07365D007DA2C027511D6
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&uid=0100007F49D07365D007DA2C027511D6 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sat, 09 Dec 2023 02:26:18 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQ1NWNjNDA2ZS05NjNhLTExZWUtYmJiMS0wMDI1OTBjODI0MzY*; Path=/; Expires=Fri, 04 Dec 2043 02:26:18 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync.bumlam.com/?src=sap1&s_data=CAIQARjKoM-rBmIgMDEwMDAwN0Y0OUQwNzM2NUQwMDdEQTJDMDI3NTExRDaiARBVzEBuljoR7ruxACWQyCQ2
ETag: 55cc406e-963a-11ee-bbb1-002590c82436
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
match.new-programmatic.com/userbind?src=sape&id=0100007F49D07365D007DA2C027511D6
0 B URL match.new-programmatic.com/userbind?src=sape&id=0100007F49D07365D007DA2C027511D6
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=sape&id=0100007F49D07365D007DA2C027511D6 HTTP/1.1
Host: match.new-programmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.22.1
Date: Sat, 09 Dec 2023 02:26:18 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
code.moviead55.ru/go/csync?cn=bzcookie&bid=2b4ffd38-f5fa-44bd-4f78-fbf1227f7b6d
200 OK 0 B URL GET HTTP/2 code.moviead55.ru/go/csync?cn=bzcookie&bid=2b4ffd38-f5fa-44bd-4f78-fbf1227f7b6d
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=bzcookie&bid=2b4ffd38-f5fa-44bd-4f78-fbf1227f7b6d HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Cookie: sky_uuid=e3b16cc3-5888-7e74-62d5-27f7965bae89; hbrdcookie2=e47628aa2625f6e9154d; ohmybid=eb55565c-6dfc-4351-b876-ae35f876c988; otclkbid=VUG31mKFfTelneA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: image/jpeg
content-length: 0
set-cookie: bzcookie=2b4ffd38-f5fa-44bd-4f78-fbf1227f7b6d; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/csync?cn=solta&bid=ZXPQSgXeViw
200 OK 0 B URL GET HTTP/2 code.moviead55.ru/go/csync?cn=solta&bid=ZXPQSgXeViw
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=solta&bid=ZXPQSgXeViw HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: sky_uuid=e3b16cc3-5888-7e74-62d5-27f7965bae89; hbrdcookie2=e47628aa2625f6e9154d; ohmybid=eb55565c-6dfc-4351-b876-ae35f876c988; otclkbid=VUG31mKFfTelneA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: image/jpeg
content-length: 0
set-cookie: solta=ZXPQSgXeViw; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
sync.adspend.space/sape?uid=0100007F49D07365D007DA2C027511D6
204 No Content 0 B URL GET HTTP/2 sync.adspend.space/sape?uid=0100007F49D07365D007DA2C027511D6
IP
ASN #50340 OOO Network of data-centers Selectel
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subjectadspend.space
Fingerprint25:A8:18:8F:99:5E:81:77:EE:CC:A2:7D:B9:A4:65:C6:29:9B:72:AF
ValidityMon, 27 Nov 2023 12:15:31 GMT - Sun, 25 Feb 2024 12:15:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape?uid=0100007F49D07365D007DA2C027511D6 HTTP/1.1
Host: sync.adspend.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.22.1
date: Sat, 09 Dec 2023 02:26:18 GMT
X-Firefox-Spdy: h2
code.moviead55.ru/go/bn?key=5b872a9d6ccdd73f7af99247d38e6849&cp.adsource=AdA_cr_br&vt=[vt]&w=300&h=250&cp.referer=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&fid=2f115cd3fdc5d487&cp.tanc=
1.5 kB URL code.moviead55.ru/go/bn?key=5b872a9d6ccdd73f7af99247d38e6849&cp.adsource=AdA_cr_br&vt=[vt]&w=300&h=250&cp.referer=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&fid=2f115cd3fdc5d487&cp.tanc=
IP
ASN #6681 Rozetka Sp. z o.o.
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
File type gzip compressed data, from Unix\012- data
Hash 5cfe3b2a6b3f34529a51f37f1ca97c55
6eef5e9510eaa783859f851855201a901285442a
b30d95014df532492555af2dc4d2ef6c86b6e872587e9c1ed3db3f4991173dc1
GET /go/bn?key=5b872a9d6ccdd73f7af99247d38e6849&cp.adsource=AdA_cr_br&vt=[vt]&w=300&h=250&cp.referer=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&fid=2f115cd3fdc5d487&cp.tanc= HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Cookie: sky_uuid=e3b16cc3-5888-7e74-62d5-27f7965bae89; hbrdcookie2=e47628aa2625f6e9154d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: text/javascript;charset=UTF-8
vary: Accept-Encoding
x-movieads-path: /
x-movieads-referrer: https://ag.hdrezka.best/
access-control-allow-credentials: true
access-control-allow-origin: https://ag.hdrezka.best
x-movieads-udata: cache,parsed,20228
x-cache-source: Yac
x-movieads-mrc: no
x-movieads-ref: {"Scheme":"https","Opaque":"","User":null,"Host":"ag.hdrezka.best","Path":"/","RawPath":"","OmitHost":false,"ForceQuery":false,"RawQuery":"","Fragment":"","RawFragment":""}
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088785286
200 OK 2 B URL GET HTTP/2 ads.adlook.me/vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088785286
IP
ASN #48096 Enterprise Cloud Ltd.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088785286 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ag.hdrezka.best
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Cookie: adlm_userId=c0c3bb0ba14b4e068ecf31afee7f8dfa; adlk_cmatch=sape%3A0100007F49D07365D007DA2C027511D6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=c0c3bb0ba14b4e068ecf31afee7f8dfa; expires=Sat, 07 Dec 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=none
access-control-allow-origin: https://ag.hdrezka.best
access-control-allow-credentials: true
date: Sat, 09 Dec 2023 02:26:18 GMT
content-length: 2
X-Firefox-Spdy: h2
sync.upravel.com/sape/sync
0 B URL sync.upravel.com/sape/sync
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: image/png
content-length: 0
location: https://sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
set-cookie: session_tptc=1702088778712;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
session_tptc-legacy=1702088778712;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
acint.net/rmatch?dp=14&euid=3303420A4AD073651B0058530260EA8E&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D
302 Found 154 B URL GET HTTP/2 acint.net/rmatch?dp=14&euid=3303420A4AD073651B0058530260EA8E&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=14&euid=3303420A4AD073651B0058530260EA8E&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVz0Eks2gfQ1hF1AuHRHSFcM5hXeDQco8F+D6rVqlKV; cSyncDp14v6=1702088777; cSyncDp17v2=1702088777; cSyncDp45v5=1702088777; cSyncDp53v5=1702088777; cSyncDp62v2=1702088777; cSyncDp67v3=1702088777; cSyncDp68v2=1702088777; cSyncDp71v2=1702088777; cSyncDp80v2=1702088777; cSyncDp85v2=1702088777; cSyncDp95v4=1702088777; cSyncDp98v3=1702088777; cSyncDp104v2=1702088777; cSyncDp107v2=1702088777; cSyncDp110v3=1702088777; cSyncDp125v4=1702088777; cSyncDp126v2=1702088777; cSyncDp127v2=1702088777; cSyncDp129v2=1702088777; cSyncDp136v3=1702088777; cSyncDp146v2=1702088777; cSyncDp148v2=1702088777; cSyncDp149v3=1702088777; cSyncDp151v2=1702088777; cSyncDp251v1=1702088777; cSyncDp186v2=1702088777; cSyncDp217v2=1702088777; cSyncDp221v2=1702088777; cSyncDp235v2=1702088777; cSyncDp239v2=1702088777; cSyncDp243v2=1702088777; cSyncDp260v2=1702088777; cSyncDp244v2=1702088777; cSyncDp248v2=1702088777; cSyncDp261v1=1702088777; cSyncDp14v4=1702088777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: text/html
content-length: 154
location: https://code.moviead55.ru/go/csync?cn=sapecookie&bid=0100007F49D07365D007DA2C027511D6
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
acint.net/match?dp=14&euid=4502420A4AD073651C00612F02EF5D3D
43 B URL acint.net/match?dp=14&euid=4502420A4AD073651C00612F02EF5D3D
IP
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=14&euid=4502420A4AD073651C00612F02EF5D3D HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVz0Eks2gfQ1hF1AuHRHSFcM5hXeDQco8F+D6rVqlKV; cSyncDp14v6=1702088777; cSyncDp17v2=1702088777; cSyncDp45v5=1702088777; cSyncDp53v5=1702088777; cSyncDp62v2=1702088777; cSyncDp67v3=1702088777; cSyncDp68v2=1702088777; cSyncDp71v2=1702088777; cSyncDp80v2=1702088777; cSyncDp85v2=1702088777; cSyncDp95v4=1702088777; cSyncDp98v3=1702088777; cSyncDp104v2=1702088777; cSyncDp107v2=1702088777; cSyncDp110v3=1702088777; cSyncDp125v4=1702088777; cSyncDp126v2=1702088777; cSyncDp127v2=1702088777; cSyncDp129v2=1702088777; cSyncDp136v3=1702088777; cSyncDp146v2=1702088777; cSyncDp148v2=1702088777; cSyncDp149v3=1702088777; cSyncDp151v2=1702088777; cSyncDp251v1=1702088777; cSyncDp186v2=1702088777; cSyncDp217v2=1702088777; cSyncDp221v2=1702088777; cSyncDp235v2=1702088777; cSyncDp239v2=1702088777; cSyncDp243v2=1702088777; cSyncDp260v2=1702088777; cSyncDp244v2=1702088777; cSyncDp248v2=1702088777; cSyncDp261v1=1702088777; cSyncDp14v4=1702088777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
s.uuidksinc.net/match/396/?remote_uid=0100007F49D07365D007DA2C027511D6
0 B URL s.uuidksinc.net/match/396/?remote_uid=0100007F49D07365D007DA2C027511D6
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/396/?remote_uid=0100007F49D07365D007DA2C027511D6 HTTP/1.1
Host: s.uuidksinc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.23.2
date: Sat, 09 Dec 2023 02:26:18 GMT
content-length: 0
location: https://www.acint.net/match?dp=127&euid=hmoAlpp3YIyeUZZYQOLL
set-cookie: jcsuuid=hmoAlpp3YIyeUZZYQOLL; expires=Sun, 08 Dec 2024 02:26:18 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
acint.net/match?dp=110&euid=c0c3bb0ba14b4e068ecf31afee7f8dfa
200 OK 43 B URL GET HTTP/2 acint.net/match?dp=110&euid=c0c3bb0ba14b4e068ecf31afee7f8dfa
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=110&euid=c0c3bb0ba14b4e068ecf31afee7f8dfa HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVz0Eks2gfQ1hF1AuHRHSFcM5hXeDQco8F+D6rVqlKV; cSyncDp14v6=1702088777; cSyncDp17v2=1702088777; cSyncDp45v5=1702088777; cSyncDp53v5=1702088777; cSyncDp62v2=1702088777; cSyncDp67v3=1702088777; cSyncDp68v2=1702088777; cSyncDp71v2=1702088777; cSyncDp80v2=1702088777; cSyncDp85v2=1702088777; cSyncDp95v4=1702088777; cSyncDp98v3=1702088777; cSyncDp104v2=1702088777; cSyncDp107v2=1702088777; cSyncDp110v3=1702088777; cSyncDp125v4=1702088777; cSyncDp126v2=1702088777; cSyncDp127v2=1702088777; cSyncDp129v2=1702088777; cSyncDp136v3=1702088777; cSyncDp146v2=1702088777; cSyncDp148v2=1702088777; cSyncDp149v3=1702088777; cSyncDp151v2=1702088777; cSyncDp251v1=1702088777; cSyncDp186v2=1702088777; cSyncDp217v2=1702088777; cSyncDp221v2=1702088777; cSyncDp235v2=1702088777; cSyncDp239v2=1702088777; cSyncDp243v2=1702088777; cSyncDp260v2=1702088777; cSyncDp244v2=1702088777; cSyncDp248v2=1702088777; cSyncDp261v1=1702088777; cSyncDp14v4=1702088777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
nr.bidderstack.com/sape/cm?user_id=0100007F49D07365D007DA2C027511D6
302 Found 0 B URL GET HTTP/1.1 nr.bidderstack.com/sape/cm?user_id=0100007F49D07365D007DA2C027511D6
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerGoDaddy.com, Inc.
Subject*.bidderstack.com
Fingerprint7A:83:29:BF:37:01:78:02:DF:C1:07:D8:A2:10:AB:0A:DD:11:66:B0
ValidityTue, 21 Nov 2023 08:57:57 GMT - Sun, 22 Dec 2024 08:57:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/cm?user_id=0100007F49D07365D007DA2C027511D6 HTTP/1.1
Host: nr.bidderstack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 09 Dec 2023 02:26:18 GMT
Content-Length: 0
Connection: keep-alive
Location: /sape/cm?user_id=0100007F49D07365D007DA2C027511D6&pupa=1
Set-Cookie: pupa=d6979f52-2616-aa83-4667-870fd419f06c; domain=.bidderstack.com; path=/; expires=Sun, 08-Dec-2024 02:26:18 GMT;
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
www.acint.net/match?dp=217&euid=eb55565c-6dfc-4351-b876-ae35f876c988
200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=217&euid=eb55565c-6dfc-4351-b876-ae35f876c988
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=217&euid=eb55565c-6dfc-4351-b876-ae35f876c988 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVz0Eks2gfQ1hF1AuHRHSFcM5hXeDQco8F+D6rVqlKV; cSyncDp14v6=1702088777; cSyncDp17v2=1702088777; cSyncDp45v5=1702088777; cSyncDp53v5=1702088777; cSyncDp62v2=1702088777; cSyncDp67v3=1702088777; cSyncDp68v2=1702088777; cSyncDp71v2=1702088777; cSyncDp80v2=1702088777; cSyncDp85v2=1702088777; cSyncDp95v4=1702088777; cSyncDp98v3=1702088777; cSyncDp104v2=1702088777; cSyncDp107v2=1702088777; cSyncDp110v3=1702088777; cSyncDp125v4=1702088777; cSyncDp126v2=1702088777; cSyncDp127v2=1702088777; cSyncDp129v2=1702088777; cSyncDp136v3=1702088777; cSyncDp146v2=1702088777; cSyncDp148v2=1702088777; cSyncDp149v3=1702088777; cSyncDp151v2=1702088777; cSyncDp251v1=1702088777; cSyncDp186v2=1702088777; cSyncDp217v2=1702088777; cSyncDp221v2=1702088777; cSyncDp235v2=1702088777; cSyncDp239v2=1702088777; cSyncDp243v2=1702088777; cSyncDp260v2=1702088777; cSyncDp244v2=1702088777; cSyncDp248v2=1702088777; cSyncDp261v1=1702088777; cSyncDp14v4=1702088777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
cs.agency2.ru/p?ssp=sp&uid=0100007F49D07365D007DA2C027511D6
301 Moved Permanently 0 B URL GET HTTP/1.1 cs.agency2.ru/p?ssp=sp&uid=0100007F49D07365D007DA2C027511D6
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subjectapi.agency2.ru
Fingerprint50:48:39:D7:EB:8F:8E:E7:36:A3:F3:08:25:93:84:7F:6B:36:24:95
ValidityMon, 16 Oct 2023 23:38:04 GMT - Sun, 14 Jan 2024 23:38:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&uid=0100007F49D07365D007DA2C027511D6 HTTP/1.1
Host: cs.agency2.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sat, 09 Dec 2023 02:26:18 GMT
Content-Length: 0
Connection: keep-alive
Server: fasthttp
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.acint.net/match?dp=186&euid=f918557c-115a-441c-ad9c-0e8ba9b09a67
Set-Cookie: uuid=f918557c-115a-441c-ad9c-0e8ba9b09a67; expires=Fri, 29 Nov 2024 02:26:18 GMT; domain=agency2.ru; path=/; secure; SameSite=None
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.107.44
ssp.afp.ai/api/sync/sape
302 Found 0 B IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerSectigo Limited
Subject*.afp.ai
Fingerprint6D:78:55:60:8D:74:D7:2E:9F:A5:B1:56:72:76:A6:20:F9:7E:E4:4F
ValidityMon, 23 Oct 2023 00:00:00 GMT - Tue, 24 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/sync/sape HTTP/1.1
Host: ssp.afp.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 02:26:18 GMT
Content-Length: 0
Connection: keep-alive
Vary: Origin
Access-Control-Allow-Origin:
Access-Control-Allow-Credentials: true
Location: https://www.acint.net/match?dp=261&euid=416346ab-3fa1-4d12-835a-5ff69d55cee0
Set-Cookie: afp_cookie=gAAAAABlc9BKpRlDwgGBXOkA85F8yk1ZXapA_BAo50tDoAVv9v7W3Xmp4Sh3fTE45wyxeSdQI4EXbRh2xr--Z5dFXiEDPyITwANsUPyqM6ERqyH-O8svCsYlFHQwmjv-H85ujO2FHpuGD-e1EuS1--ebxjlOprNkxi1ymSXe4WNJW-Ikfiu3zV7BGoBJCNXGJ8riTT-kIsoC$; expires=Tue, 09 Jan 2024 02:26:18 GMT; path=/; secure; SameSite=None
www.acint.net/match?dp=126&euid=88d87c26-6865-4ea8-45dd-f8291e6a6423
200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=126&euid=88d87c26-6865-4ea8-45dd-f8291e6a6423
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=126&euid=88d87c26-6865-4ea8-45dd-f8291e6a6423 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVz0Eks2gfQ1hF1AuHRHSFcM5hXeDQco8F+D6rVqlKV; cSyncDp14v6=1702088777; cSyncDp17v2=1702088777; cSyncDp45v5=1702088777; cSyncDp53v5=1702088777; cSyncDp62v2=1702088777; cSyncDp67v3=1702088777; cSyncDp68v2=1702088777; cSyncDp71v2=1702088777; cSyncDp80v2=1702088777; cSyncDp85v2=1702088777; cSyncDp95v4=1702088777; cSyncDp98v3=1702088777; cSyncDp104v2=1702088777; cSyncDp107v2=1702088777; cSyncDp110v3=1702088777; cSyncDp125v4=1702088777; cSyncDp126v2=1702088777; cSyncDp127v2=1702088777; cSyncDp129v2=1702088777; cSyncDp136v3=1702088777; cSyncDp146v2=1702088777; cSyncDp148v2=1702088777; cSyncDp149v3=1702088777; cSyncDp151v2=1702088777; cSyncDp251v1=1702088777; cSyncDp186v2=1702088777; cSyncDp217v2=1702088777; cSyncDp221v2=1702088777; cSyncDp235v2=1702088777; cSyncDp239v2=1702088777; cSyncDp243v2=1702088777; cSyncDp260v2=1702088777; cSyncDp244v2=1702088777; cSyncDp248v2=1702088777; cSyncDp261v1=1702088777; cSyncDp14v4=1702088777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
code.moviead55.ru/go/jmap?v=5b872a9d6ccdd73f7af99247d38e6849&sid=ap&cp.referer=https%253A%252F%252Fag.hdrezka.best%252Ffilms%252F1-action%252F6882-carstvo-nebesnoe-2005.html&it=1&tq=2&cp.cb=022a3550-a612-5745-810b-4b925a32eccb&session=7fdddbc0-784a-416c-903e-c1a5ba451f68&position=pre&vt=100&ostream=true&isp=0&suri=https%253A%252F%252Fag.hdrezka.best%252Ffilms%252F1-action%252F6882-carstvo-nebesnoe-2005.html&rnd=1702088785543&raw=yes
2 B URL code.moviead55.ru/go/jmap?v=5b872a9d6ccdd73f7af99247d38e6849&sid=ap&cp.referer=https%253A%252F%252Fag.hdrezka.best%252Ffilms%252F1-action%252F6882-carstvo-nebesnoe-2005.html&it=1&tq=2&cp.cb=022a3550-a612-5745-810b-4b925a32eccb&session=7fdddbc0-784a-416c-903e-c1a5ba451f68&position=pre&vt=100&ostream=true&isp=0&suri=https%253A%252F%252Fag.hdrezka.best%252Ffilms%252F1-action%252F6882-carstvo-nebesnoe-2005.html&rnd=1702088785543&raw=yes
IP
ASN #6681 Rozetka Sp. z o.o.
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /go/jmap?v=5b872a9d6ccdd73f7af99247d38e6849&sid=ap&cp.referer=https%253A%252F%252Fag.hdrezka.best%252Ffilms%252F1-action%252F6882-carstvo-nebesnoe-2005.html&it=1&tq=2&cp.cb=022a3550-a612-5745-810b-4b925a32eccb&session=7fdddbc0-784a-416c-903e-c1a5ba451f68&position=pre&vt=100&ostream=true&isp=0&suri=https%253A%252F%252Fag.hdrezka.best%252Ffilms%252F1-action%252F6882-carstvo-nebesnoe-2005.html&rnd=1702088785543&raw=yes HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ag.hdrezka.best
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Cookie: sky_uuid=e3b16cc3-5888-7e74-62d5-27f7965bae89; hbrdcookie2=e47628aa2625f6e9154d; ohmybid=eb55565c-6dfc-4351-b876-ae35f876c988; otclkbid=VUG31mKFfTelneA; bzcookie=2b4ffd38-f5fa-44bd-4f78-fbf1227f7b6d; solta=ZXPQSgXeViw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: application/json;charset=UTF-8
content-length: 2
x-movieads-cors-qex: Referer
x-movieads-path: /
access-control-allow-credentials: true
access-control-allow-origin: https://ag.hdrezka.best
x-go-country: NO
x-movieads-udata: cache,parsed,58897
x-movieads-plc: 0
x-movieads-ark: true
x-movieads-qmc: NO
x-movieads-alc: 3
x-movieads-ctvs: 3
server-timing: wmData;dur=0.0000, optProc;dur=0.0000, qManager;dur=1.0000, initBuilder;dur=0.0000, queuesMerge;dur=0.0000, jmapParams;dur=0.0000, corsParams;dur=0.0000, getLinks;dur=0.0000, range_links;dur=0.0000, buildTagsQueue;dur=0.0000, attachTracking;dur=0.0000, getJson;dur=0.0000, keyValidation;dur=0.0000, getAnyQueue;dur=0.0000, queueSort;dur=0.0000, uData;dur=0.0000
x-movieads-country: NO
X-Firefox-Spdy: h2
sync.programmatica.com/match/01
43 B URL sync.programmatica.com/match/01
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/01 HTTP/1.1
Host: sync.programmatica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
302 Found 74 B URL GET HTTP/2 ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerGlobalSign nv-sa
Subject*.bestssp.com
Fingerprint25:15:42:2E:1C:54:0F:74:CF:89:02:5A:5E:AC:98:DA:1C:34:B3:B3
ValidityMon, 24 Jul 2023 17:15:54 GMT - Sat, 24 Aug 2024 17:15:53 GMT
File type HTML document, ASCII text
Hash dc2a4bc516769da93e4fd7b14cfc60e5
0515ce954e56b2040116532a0f378769526d5ab3
ce08b6a52cdaa31d62bd6e5a096656ba1eb1fa1aee78b889238bc3c55666dbf2
GET /sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D HTTP/1.1
Host: ssp.bestssp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.22.0
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: text/html; charset=utf-8
content-length: 74
location: https://www.acint.net/match?dp=95&euid=KDBVXUGF
set-cookie: uid=KDBVXUGF; Expires=Tue, 06 Dec 2033 02:26:18 GMT
X-Firefox-Spdy: h2
dm.hybrid.ai/yandexdmp-match
302 Found 0 B URL GET HTTP/2 dm.hybrid.ai/yandexdmp-match
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerSectigo Limited
Subject*.hybrid.ai
Fingerprint40:F9:88:C5:EF:2B:26:9C:61:DC:CC:ED:B1:67:03:F4:E2:CC:B7:C8
ValidityThu, 14 Sep 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /yandexdmp-match HTTP/1.1
Host: dm.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: vid=e47628aa2625f6e9154d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 09 Dec 2023 02:26:18 GMT
content-length: 0
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
location: https://an.yandex.ru/mapuid/dmphybridai/e47628aa2625f6e9154d?sign=26002453
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 120
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: Hybrid Web Server
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sap1&s_data=CAIQARjKoM-rBmIgMDEwMDAwN0Y0OUQwNzM2NUQwMDdEQTJDMDI3NTExRDaiARBVzEBuljoR7ruxACWQyCQ2
0 B URL sync.bumlam.com/?src=sap1&s_data=CAIQARjKoM-rBmIgMDEwMDAwN0Y0OUQwNzM2NUQwMDdEQTJDMDI3NTExRDaiARBVzEBuljoR7ruxACWQyCQ2
IP
ASN #44066 diva-e Datacenters GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&s_data=CAIQARjKoM-rBmIgMDEwMDAwN0Y0OUQwNzM2NUQwMDdEQTJDMDI3NTExRDaiARBVzEBuljoR7ruxACWQyCQ2 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiQ1NWNjNDA2ZS05NjNhLTExZWUtYmJiMS0wMDI1OTBjODI0MzY*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 09 Dec 2023 02:26:18 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQ1NWNjNDA2ZS05NjNhLTExZWUtYmJiMS0wMDI1OTBjODI0MzY*; Path=/; Expires=Fri, 04 Dec 2043 02:26:18 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
acint.net/match?dp=80&euid=nWSsCfPvGalRQCTtFviB
200 OK 43 B URL GET HTTP/2 acint.net/match?dp=80&euid=nWSsCfPvGalRQCTtFviB
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=80&euid=nWSsCfPvGalRQCTtFviB HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVz0Eks2gfQ1hF1AuHRHSFcM5hXeDQco8F+D6rVqlKV; cSyncDp14v6=1702088777; cSyncDp17v2=1702088777; cSyncDp45v5=1702088777; cSyncDp53v5=1702088777; cSyncDp62v2=1702088777; cSyncDp67v3=1702088777; cSyncDp68v2=1702088777; cSyncDp71v2=1702088777; cSyncDp80v2=1702088777; cSyncDp85v2=1702088777; cSyncDp95v4=1702088777; cSyncDp98v3=1702088777; cSyncDp104v2=1702088777; cSyncDp107v2=1702088777; cSyncDp110v3=1702088777; cSyncDp125v4=1702088777; cSyncDp126v2=1702088777; cSyncDp127v2=1702088777; cSyncDp129v2=1702088777; cSyncDp136v3=1702088777; cSyncDp146v2=1702088777; cSyncDp148v2=1702088777; cSyncDp149v3=1702088777; cSyncDp151v2=1702088777; cSyncDp251v1=1702088777; cSyncDp186v2=1702088777; cSyncDp217v2=1702088777; cSyncDp221v2=1702088777; cSyncDp235v2=1702088777; cSyncDp239v2=1702088777; cSyncDp243v2=1702088777; cSyncDp260v2=1702088777; cSyncDp244v2=1702088777; cSyncDp248v2=1702088777; cSyncDp261v1=1702088777; cSyncDp14v4=1702088777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 09 Dec 2023 02:26:19 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.dsp.solta.io/match/sape?id=0100007F49D07365D007DA2C027511D6
43 B URL sync.dsp.solta.io/match/sape?id=0100007F49D07365D007DA2C027511D6
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/sape?id=0100007F49D07365D007DA2C027511D6 HTTP/1.1
Host: sync.dsp.solta.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
www.acint.net/match?dp=129&euid=hj2nc2whf0
200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=129&euid=hj2nc2whf0
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=129&euid=hj2nc2whf0 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVz0Eks2gfQ1hF1AuHRHSFcM5hXeDQco8F+D6rVqlKV; cSyncDp14v6=1702088777; cSyncDp17v2=1702088777; cSyncDp45v5=1702088777; cSyncDp53v5=1702088777; cSyncDp62v2=1702088777; cSyncDp67v3=1702088777; cSyncDp68v2=1702088777; cSyncDp71v2=1702088777; cSyncDp80v2=1702088777; cSyncDp85v2=1702088777; cSyncDp95v4=1702088777; cSyncDp98v3=1702088777; cSyncDp104v2=1702088777; cSyncDp107v2=1702088777; cSyncDp110v3=1702088777; cSyncDp125v4=1702088777; cSyncDp126v2=1702088777; cSyncDp127v2=1702088777; cSyncDp129v2=1702088777; cSyncDp136v3=1702088777; cSyncDp146v2=1702088777; cSyncDp148v2=1702088777; cSyncDp149v3=1702088777; cSyncDp151v2=1702088777; cSyncDp251v1=1702088777; cSyncDp186v2=1702088777; cSyncDp217v2=1702088777; cSyncDp221v2=1702088777; cSyncDp235v2=1702088777; cSyncDp239v2=1702088777; cSyncDp243v2=1702088777; cSyncDp260v2=1702088777; cSyncDp244v2=1702088777; cSyncDp248v2=1702088777; cSyncDp261v1=1702088777; cSyncDp14v4=1702088777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 09 Dec 2023 02:26:19 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
code.moviead55.ru/go/csync?cn=sapecookie&bid=0100007F49D07365D007DA2C027511D6
200 OK 0 B URL GET HTTP/2 code.moviead55.ru/go/csync?cn=sapecookie&bid=0100007F49D07365D007DA2C027511D6
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=sapecookie&bid=0100007F49D07365D007DA2C027511D6 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Cookie: sky_uuid=e3b16cc3-5888-7e74-62d5-27f7965bae89; hbrdcookie2=e47628aa2625f6e9154d; ohmybid=eb55565c-6dfc-4351-b876-ae35f876c988; otclkbid=VUG31mKFfTelneA; bzcookie=2b4ffd38-f5fa-44bd-4f78-fbf1227f7b6d; solta=ZXPQSgXeViw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:19 GMT
content-type: image/jpeg
content-length: 0
set-cookie: sapecookie=0100007F49D07365D007DA2C027511D6; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
0 B URL sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0 HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: session_tptc=1702088778712
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Sat, 09 Dec 2023 02:26:19 GMT
content-type: image/png
content-length: 0
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: user_id=8f71f75b-9930-4b27-b94a-c5cc1abf323d;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
user_id-legacy=8f71f75b-9930-4b27-b94a-c5cc1abf323d;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
location: https://www.acint.net/match?dp=71&euid=8f71f75b-9930-4b27-b94a-c5cc1abf323d
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
cdn.adlook.me/u/cds.html
200 OK 1.4 kB IP
ASN #210756 G-Core Rus LLC
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 092b935eec2ba1199c03c1c856472e77
90d533fb895dda57fd0645cf484a4ecb7a64c344
8719a7a7e474f30d7a1d5dbf2ab97bbd73437c28ef567b410361540ad38c985e
GET /u/cds.html HTTP/1.1
Host: cdn.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:19 GMT
content-type: text/html
content-length: 1439
last-modified: Thu, 06 Aug 2020 17:06:57 GMT
etag: "207a2dfe136cd61:0"
x-powered-by: ASP.NET
cache: HIT
x-cached-since: 2023-12-09T02:20:13+00:00
x-node: m9p-up-gc50
accept-ranges: bytes
X-Firefox-Spdy: h2
user91471.clients-cdnnow.ru/yasdk/vw.js?v3
1.4 kB URL user91471.clients-cdnnow.ru/yasdk/vw.js?v3
IP
File type gzip compressed data, from Unix\012- data
Hash 215acb4e51d71be68eaeb0243feb78ab
dcc640c5e95a42b67aa4839a4aef77e02e7f3b4c
1ccbd9b926fbb3f58d5d96fd8e34d58a37c8b15ff1b56dba697ed7d651195cc3
GET /yasdk/vw.js?v3 HTTP/1.1
Host: user91471.clients-cdnnow.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:18 GMT
content-type: application/javascript
last-modified: Fri, 21 Jul 2023 13:34:19 GMT
vary: Accept-Encoding
etag: W/"64ba895b-12fc"
x-movieads-country: RU
content-encoding: gzip
x-edge-cache: HIT
x-edge-ip: 172.19.32.3
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088785824
200 OK 2 B URL GET HTTP/2 ads.adlook.me/vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088785824
IP
ASN #48096 Enterprise Cloud Ltd.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088785824 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ag.hdrezka.best
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Cookie: adlm_userId=c0c3bb0ba14b4e068ecf31afee7f8dfa; adlk_cmatch=sape%3A0100007F49D07365D007DA2C027511D6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=c0c3bb0ba14b4e068ecf31afee7f8dfa; expires=Sat, 07 Dec 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=none
access-control-allow-origin: https://ag.hdrezka.best
access-control-allow-credentials: true
date: Sat, 09 Dec 2023 02:26:18 GMT
content-length: 2
X-Firefox-Spdy: h2
www.acint.net/match?dp=186&euid=f918557c-115a-441c-ad9c-0e8ba9b09a67
43 B URL www.acint.net/match?dp=186&euid=f918557c-115a-441c-ad9c-0e8ba9b09a67
IP
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=186&euid=f918557c-115a-441c-ad9c-0e8ba9b09a67 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVz0Eks2gfQ1hF1AuHRHSFcM5hXeDQco8F+D6rVqlKV; cSyncDp14v6=1702088777; cSyncDp17v2=1702088777; cSyncDp45v5=1702088777; cSyncDp53v5=1702088777; cSyncDp62v2=1702088777; cSyncDp67v3=1702088777; cSyncDp68v2=1702088777; cSyncDp71v2=1702088777; cSyncDp80v2=1702088777; cSyncDp85v2=1702088777; cSyncDp95v4=1702088777; cSyncDp98v3=1702088777; cSyncDp104v2=1702088777; cSyncDp107v2=1702088777; cSyncDp110v3=1702088777; cSyncDp125v4=1702088777; cSyncDp126v2=1702088777; cSyncDp127v2=1702088777; cSyncDp129v2=1702088777; cSyncDp136v3=1702088777; cSyncDp146v2=1702088777; cSyncDp148v2=1702088777; cSyncDp149v3=1702088777; cSyncDp151v2=1702088777; cSyncDp251v1=1702088777; cSyncDp186v2=1702088777; cSyncDp217v2=1702088777; cSyncDp221v2=1702088777; cSyncDp235v2=1702088777; cSyncDp239v2=1702088777; cSyncDp243v2=1702088777; cSyncDp260v2=1702088777; cSyncDp244v2=1702088777; cSyncDp248v2=1702088777; cSyncDp261v1=1702088777; cSyncDp14v4=1702088777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 09 Dec 2023 02:26:19 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/match?dp=261&euid=416346ab-3fa1-4d12-835a-5ff69d55cee0
200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=261&euid=416346ab-3fa1-4d12-835a-5ff69d55cee0
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=261&euid=416346ab-3fa1-4d12-835a-5ff69d55cee0 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVz0Eks2gfQ1hF1AuHRHSFcM5hXeDQco8F+D6rVqlKV; cSyncDp14v6=1702088777; cSyncDp17v2=1702088777; cSyncDp45v5=1702088777; cSyncDp53v5=1702088777; cSyncDp62v2=1702088777; cSyncDp67v3=1702088777; cSyncDp68v2=1702088777; cSyncDp71v2=1702088777; cSyncDp80v2=1702088777; cSyncDp85v2=1702088777; cSyncDp95v4=1702088777; cSyncDp98v3=1702088777; cSyncDp104v2=1702088777; cSyncDp107v2=1702088777; cSyncDp110v3=1702088777; cSyncDp125v4=1702088777; cSyncDp126v2=1702088777; cSyncDp127v2=1702088777; cSyncDp129v2=1702088777; cSyncDp136v3=1702088777; cSyncDp146v2=1702088777; cSyncDp148v2=1702088777; cSyncDp149v3=1702088777; cSyncDp151v2=1702088777; cSyncDp251v1=1702088777; cSyncDp186v2=1702088777; cSyncDp217v2=1702088777; cSyncDp221v2=1702088777; cSyncDp235v2=1702088777; cSyncDp239v2=1702088777; cSyncDp243v2=1702088777; cSyncDp260v2=1702088777; cSyncDp244v2=1702088777; cSyncDp248v2=1702088777; cSyncDp261v1=1702088777; cSyncDp14v4=1702088777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 09 Dec 2023 02:26:19 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
nr.bidderstack.com/sape/cm?user_id=0100007F49D07365D007DA2C027511D6&pupa=1
0 B URL nr.bidderstack.com/sape/cm?user_id=0100007F49D07365D007DA2C027511D6&pupa=1
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerGoDaddy.com, Inc.
Subject*.bidderstack.com
Fingerprint7A:83:29:BF:37:01:78:02:DF:C1:07:D8:A2:10:AB:0A:DD:11:66:B0
ValidityTue, 21 Nov 2023 08:57:57 GMT - Sun, 22 Dec 2024 08:57:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/cm?user_id=0100007F49D07365D007DA2C027511D6&pupa=1 HTTP/1.1
Host: nr.bidderstack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 09 Dec 2023 02:26:19 GMT
Content-Length: 0
Connection: keep-alive
Location: https://www.acint.net/match?dp=251&euid=d6979f52-2616-aa83-4667-870fd419f06c
Set-Cookie: pupa=d6979f52-2616-aa83-4667-870fd419f06c; domain=.bidderstack.com; path=/; expires=Sun, 08-Dec-2024 02:26:19 GMT;
csorigin2=244; domain=.bidderstack.com; path=/; expires=Sat, 09-Dec-2023 02:31:19 GMT;
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
www.acint.net/match?dp=95&euid=KDBVXUGF
43 B URL www.acint.net/match?dp=95&euid=KDBVXUGF
IP
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=95&euid=KDBVXUGF HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVz0Eks2gfQ1hF1AuHRHSFcM5hXeDQco8F+D6rVqlKV; cSyncDp14v6=1702088777; cSyncDp17v2=1702088777; cSyncDp45v5=1702088777; cSyncDp53v5=1702088777; cSyncDp62v2=1702088777; cSyncDp67v3=1702088777; cSyncDp68v2=1702088777; cSyncDp71v2=1702088777; cSyncDp80v2=1702088777; cSyncDp85v2=1702088777; cSyncDp95v4=1702088777; cSyncDp98v3=1702088777; cSyncDp104v2=1702088777; cSyncDp107v2=1702088777; cSyncDp110v3=1702088777; cSyncDp125v4=1702088777; cSyncDp126v2=1702088777; cSyncDp127v2=1702088777; cSyncDp129v2=1702088777; cSyncDp136v3=1702088777; cSyncDp146v2=1702088777; cSyncDp148v2=1702088777; cSyncDp149v3=1702088777; cSyncDp151v2=1702088777; cSyncDp251v1=1702088777; cSyncDp186v2=1702088777; cSyncDp217v2=1702088777; cSyncDp221v2=1702088777; cSyncDp235v2=1702088777; cSyncDp239v2=1702088777; cSyncDp243v2=1702088777; cSyncDp260v2=1702088777; cSyncDp244v2=1702088777; cSyncDp248v2=1702088777; cSyncDp261v1=1702088777; cSyncDp14v4=1702088777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 09 Dec 2023 02:26:19 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/match?dp=71&euid=8f71f75b-9930-4b27-b94a-c5cc1abf323d
200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=71&euid=8f71f75b-9930-4b27-b94a-c5cc1abf323d
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=71&euid=8f71f75b-9930-4b27-b94a-c5cc1abf323d HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVz0Eks2gfQ1hF1AuHRHSFcM5hXeDQco8F+D6rVqlKV; cSyncDp14v6=1702088777; cSyncDp17v2=1702088777; cSyncDp45v5=1702088777; cSyncDp53v5=1702088777; cSyncDp62v2=1702088777; cSyncDp67v3=1702088777; cSyncDp68v2=1702088777; cSyncDp71v2=1702088777; cSyncDp80v2=1702088777; cSyncDp85v2=1702088777; cSyncDp95v4=1702088777; cSyncDp98v3=1702088777; cSyncDp104v2=1702088777; cSyncDp107v2=1702088777; cSyncDp110v3=1702088777; cSyncDp125v4=1702088777; cSyncDp126v2=1702088777; cSyncDp127v2=1702088777; cSyncDp129v2=1702088777; cSyncDp136v3=1702088777; cSyncDp146v2=1702088777; cSyncDp148v2=1702088777; cSyncDp149v3=1702088777; cSyncDp151v2=1702088777; cSyncDp251v1=1702088777; cSyncDp186v2=1702088777; cSyncDp217v2=1702088777; cSyncDp221v2=1702088777; cSyncDp235v2=1702088777; cSyncDp239v2=1702088777; cSyncDp243v2=1702088777; cSyncDp260v2=1702088777; cSyncDp244v2=1702088777; cSyncDp248v2=1702088777; cSyncDp261v1=1702088777; cSyncDp14v4=1702088777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 09 Dec 2023 02:26:19 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/match?dp=251&euid=d6979f52-2616-aa83-4667-870fd419f06c
200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=251&euid=d6979f52-2616-aa83-4667-870fd419f06c
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=251&euid=d6979f52-2616-aa83-4667-870fd419f06c HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVz0Eks2gfQ1hF1AuHRHSFcM5hXeDQco8F+D6rVqlKV; cSyncDp14v6=1702088777; cSyncDp17v2=1702088777; cSyncDp45v5=1702088777; cSyncDp53v5=1702088777; cSyncDp62v2=1702088777; cSyncDp67v3=1702088777; cSyncDp68v2=1702088777; cSyncDp71v2=1702088777; cSyncDp80v2=1702088777; cSyncDp85v2=1702088777; cSyncDp95v4=1702088777; cSyncDp98v3=1702088777; cSyncDp104v2=1702088777; cSyncDp107v2=1702088777; cSyncDp110v3=1702088777; cSyncDp125v4=1702088777; cSyncDp126v2=1702088777; cSyncDp127v2=1702088777; cSyncDp129v2=1702088777; cSyncDp136v3=1702088777; cSyncDp146v2=1702088777; cSyncDp148v2=1702088777; cSyncDp149v3=1702088777; cSyncDp151v2=1702088777; cSyncDp251v1=1702088777; cSyncDp186v2=1702088777; cSyncDp217v2=1702088777; cSyncDp221v2=1702088777; cSyncDp235v2=1702088777; cSyncDp239v2=1702088777; cSyncDp243v2=1702088777; cSyncDp260v2=1702088777; cSyncDp244v2=1702088777; cSyncDp248v2=1702088777; cSyncDp261v1=1702088777; cSyncDp14v4=1702088777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sat, 09 Dec 2023 02:26:19 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
cdn.adlook.me/u/cds.html
200 OK 1.4 kB IP
ASN #210756 G-Core Rus LLC
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 092b935eec2ba1199c03c1c856472e77
90d533fb895dda57fd0645cf484a4ecb7a64c344
8719a7a7e474f30d7a1d5dbf2ab97bbd73437c28ef567b410361540ad38c985e
GET /u/cds.html HTTP/1.1
Host: cdn.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:19 GMT
content-type: text/html
content-length: 1439
last-modified: Thu, 06 Aug 2020 17:06:57 GMT
etag: "207a2dfe136cd61:0"
x-powered-by: ASP.NET
cache: HIT
x-cached-since: 2023-12-09T02:20:13+00:00
x-node: m9p-up-gc50
accept-ranges: bytes
X-Firefox-Spdy: h2
ads.adlook.me/vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088786287
200 OK 2 B URL GET HTTP/2 ads.adlook.me/vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088786287
IP
ASN #48096 Enterprise Cloud Ltd.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088786287 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ag.hdrezka.best
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Cookie: adlm_userId=c0c3bb0ba14b4e068ecf31afee7f8dfa; adlk_cmatch=sape%3A0100007F49D07365D007DA2C027511D6
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=c0c3bb0ba14b4e068ecf31afee7f8dfa; expires=Sat, 07 Dec 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=none
access-control-allow-origin: https://ag.hdrezka.best
access-control-allow-credentials: true
date: Sat, 09 Dec 2023 02:26:19 GMT
content-length: 2
X-Firefox-Spdy: h2
adx.com.ru/sape-sync?uid=0100007F49D07365D007DA2C027511D6
429 Too Many Requests 169 B URL GET HTTP/2 adx.com.ru/sape-sync?uid=0100007F49D07365D007DA2C027511D6
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerGlobalSign nv-sa
Subject*.adx.com.ru
FingerprintB6:86:21:C8:F9:AF:00:9E:42:EC:E3:77:AC:A3:5B:2B:E7:C4:46:B3
ValidityFri, 26 May 2023 11:44:59 GMT - Wed, 26 Jun 2024 11:44:58 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3456231c174fb2d76d51f73b828635a7
49c43f133ee881851becd78c2e9e885ebaad005e
02a097cad2b1a9db6797fdb73c0dcd0d66d8ae7d4b5f906658bb45a502c2c106
GET /sape-sync?uid=0100007F49D07365D007DA2C027511D6 HTTP/1.1
Host: adx.com.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 429 Too Many Requests
server: nginx/1.22.0
date: Sat, 09 Dec 2023 02:26:20 GMT
content-type: text/html
content-length: 169
X-Firefox-Spdy: h2
code.moviead55.ru/go/bn?key=5b872a9d6ccdd73f7af99247d38e6849&cp.adsource=AdG_cr_bn&vt=[vt]&w=300&h=250&cp.referer=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&fid=ae1e9c4fde07190c&cp.tanc=
433 B URL code.moviead55.ru/go/bn?key=5b872a9d6ccdd73f7af99247d38e6849&cp.adsource=AdG_cr_bn&vt=[vt]&w=300&h=250&cp.referer=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&fid=ae1e9c4fde07190c&cp.tanc=
IP
ASN #6681 Rozetka Sp. z o.o.
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
Hash e2ad7fa2dfcbd8632dae81695cf14a39
c60bfccee4de74d56d9c66590b70390cac0a4cc3
d6cd18144c3eb7399b11f68aff1af21fd5d68faba3b9052a98a1d41c4325a970
GET /go/bn?key=5b872a9d6ccdd73f7af99247d38e6849&cp.adsource=AdG_cr_bn&vt=[vt]&w=300&h=250&cp.referer=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&fid=ae1e9c4fde07190c&cp.tanc= HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Cookie: sky_uuid=e3b16cc3-5888-7e74-62d5-27f7965bae89; hbrdcookie2=e47628aa2625f6e9154d; ohmybid=eb55565c-6dfc-4351-b876-ae35f876c988; otclkbid=VUG31mKFfTelneA; bzcookie=2b4ffd38-f5fa-44bd-4f78-fbf1227f7b6d; solta=ZXPQSgXeViw; sapecookie=0100007F49D07365D007DA2C027511D6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:19 GMT
content-type: text/javascript;charset=UTF-8
vary: Accept-Encoding
x-movieads-path: /
x-movieads-referrer: https://ag.hdrezka.best/
access-control-allow-credentials: true
access-control-allow-origin: https://ag.hdrezka.best
x-movieads-udata: cache,parsed,58898
x-cache-source: Yac
x-movieads-mrc: no
x-movieads-ref: {"Scheme":"https","Opaque":"","User":null,"Host":"ag.hdrezka.best","Path":"/","RawPath":"","OmitHost":false,"ForceQuery":false,"RawQuery":"","Fragment":"","RawFragment":""}
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
static.filmskino.site/hls/trailers/arJIA_8cyT0.mp4/seg-1-v1-a1.ts
200 OK 238 kB URL GET HTTP/1.1 static.filmskino.site/hls/trailers/arJIA_8cyT0.mp4/seg-1-v1-a1.ts
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://videotoday.site/mp_dist/td/trhls.html?v5710493255
Certificate IssuerLet's Encrypt
Subjectstatic.filmskino.site
Fingerprint6E:8F:8F:89:03:E1:65:6F:AE:73:8A:6F:6B:A2:B1:02:C1:FE:D3:C7
ValidityMon, 02 Oct 2023 16:05:08 GMT - Sun, 31 Dec 2023 16:05:07 GMT
File type MPEG transport stream data\012- data
Size 238 kB (238008 bytes)
Hash 98616065fd379d384eb2f9e097653403
75cdf38589191b963badcf808f565cd705cf2b3a
5c43a81c639cea66bc1c0aaa5a7b2c334ad522c910b085d83c25e216d9c536a7
GET /hls/trailers/arJIA_8cyT0.mp4/seg-1-v1-a1.ts HTTP/1.1
Host: static.filmskino.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videotoday.site
DNT: 1
Connection: keep-alive
Referer: https://videotoday.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 09 Dec 2023 02:26:20 GMT
Content-Type: video/MP2T
Content-Length: 238008
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Connection: keep-alive
ETag: "3a1794b0-3a1b8"
Expires: Mon, 18 Mar 2024 02:26:20 GMT
Cache-Control: max-age=8640000
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
static.filmskino.site/hls/trailers/arJIA_8cyT0.mp4/seg-2-v1-a1.ts
200 OK 226 kB URL GET HTTP/1.1 static.filmskino.site/hls/trailers/arJIA_8cyT0.mp4/seg-2-v1-a1.ts
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://videotoday.site/mp_dist/td/trhls.html?v5710493255
Certificate IssuerLet's Encrypt
Subjectstatic.filmskino.site
Fingerprint6E:8F:8F:89:03:E1:65:6F:AE:73:8A:6F:6B:A2:B1:02:C1:FE:D3:C7
ValidityMon, 02 Oct 2023 16:05:08 GMT - Sun, 31 Dec 2023 16:05:07 GMT
File type MPEG transport stream data\012- TeX font metric data (\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377)\012- data
Size 226 kB (225976 bytes)
Hash 023aed136f0161337a6541e5eeb24d70
d2fc4342a9668b0a1fe2b86f2383b8f6a7cc5887
001d1cce503c2f072d35e13f148520c407541e6bc0ac8c8f66e5f64537684663
GET /hls/trailers/arJIA_8cyT0.mp4/seg-2-v1-a1.ts HTTP/1.1
Host: static.filmskino.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videotoday.site
DNT: 1
Connection: keep-alive
Referer: https://videotoday.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 09 Dec 2023 02:26:20 GMT
Content-Type: video/MP2T
Content-Length: 225976
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Connection: keep-alive
ETag: "3a1794b0-372b8"
Expires: Mon, 18 Mar 2024 02:26:20 GMT
Cache-Control: max-age=8640000
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
static.filmskino.site/hls/trailers/arJIA_8cyT0.mp4/seg-3-v1-a1.ts
334 kB URL static.filmskino.site/hls/trailers/arJIA_8cyT0.mp4/seg-3-v1-a1.ts
IP
ASN #6681 Rozetka Sp. z o.o.
Certificate IssuerLet's Encrypt
Subjectstatic.filmskino.site
Fingerprint6E:8F:8F:89:03:E1:65:6F:AE:73:8A:6F:6B:A2:B1:02:C1:FE:D3:C7
ValidityMon, 02 Oct 2023 16:05:08 GMT - Sun, 31 Dec 2023 16:05:07 GMT
File type MPEG transport stream data\012- TeX font metric data (\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377)\012- data
Size 334 kB (334264 bytes)
Hash 2be0d0efd80daf6e4257c1c420cdffbc
e99c8bd48ff01056fe04fa600ad52f894e51c6d1
9305f23a37ed24b85c3dbca47a88c4fad77773946047a2f34134fb0fd490da98
GET /hls/trailers/arJIA_8cyT0.mp4/seg-3-v1-a1.ts HTTP/1.1
Host: static.filmskino.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videotoday.site
DNT: 1
Connection: keep-alive
Referer: https://videotoday.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 09 Dec 2023 02:26:20 GMT
Content-Type: video/MP2T
Content-Length: 334264
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Connection: keep-alive
ETag: "3a1794b0-519b8"
Expires: Mon, 18 Mar 2024 02:26:20 GMT
Cache-Control: max-age=8640000
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
pix.bumlam.com/sync/sape/check?sspuid=0100007F49D07365D007DA2C027511D6
0 B URL GET pix.bumlam.com/sync/sape/check?sspuid=0100007F49D07365D007DA2C027511D6
IP
ASN #44066 diva-e Datacenters GmbH
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.bumlam.com
Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0
ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/sape/check?sspuid=0100007F49D07365D007DA2C027511D6 HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 09 Dec 2023 02:26:28 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://sync.bumlam.com/?src=sape
code.moviead55.ru/go/bn?key=5b872a9d6ccdd73f7af99247d38e6849&cp.adsource=Sw_cr_br&vt=[vt]&w=300&h=250&cp.referer=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&fid=0fabbe8f00eae1da&cp.tanc=
98 B URL code.moviead55.ru/go/bn?key=5b872a9d6ccdd73f7af99247d38e6849&cp.adsource=Sw_cr_br&vt=[vt]&w=300&h=250&cp.referer=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&fid=0fabbe8f00eae1da&cp.tanc=
IP
ASN #6681 Rozetka Sp. z o.o.
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
File type ASCII text, with no line terminators
Hash 261ee2a69794f53ccb7a03818e400473
dfa63203acc55b23deb4f6c174173e233c07230d
070d9a062fa1460a3dd0efdff85cafe1cb0ac5693ad5ab05d4bbd783c86434b5
GET /go/bn?key=5b872a9d6ccdd73f7af99247d38e6849&cp.adsource=Sw_cr_br&vt=[vt]&w=300&h=250&cp.referer=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&fid=0fabbe8f00eae1da&cp.tanc= HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Cookie: sky_uuid=e3b16cc3-5888-7e74-62d5-27f7965bae89; hbrdcookie2=e47628aa2625f6e9154d; ohmybid=eb55565c-6dfc-4351-b876-ae35f876c988; otclkbid=VUG31mKFfTelneA; bzcookie=2b4ffd38-f5fa-44bd-4f78-fbf1227f7b6d; solta=ZXPQSgXeViw; sapecookie=0100007F49D07365D007DA2C027511D6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:19 GMT
content-type: text/javascript;charset=UTF-8
vary: Accept-Encoding
x-movieads-path: /
x-movieads-referrer: https://ag.hdrezka.best/
access-control-allow-credentials: true
access-control-allow-origin: https://ag.hdrezka.best
x-movieads-udata: cache,parsed,67746
x-cache-source: Yac
x-movieads-mrc: no
x-movieads-ref: {"Scheme":"https","Opaque":"","User":null,"Host":"ag.hdrezka.best","Path":"/","RawPath":"","OmitHost":false,"ForceQuery":false,"RawQuery":"","Fragment":"","RawFragment":""}
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
pix.bumlam.com/sync/sape/sync_ok?guid=55cc406e-963a-11ee-bbb1-002590c82436
0 B URL GET pix.bumlam.com/sync/sape/sync_ok?guid=55cc406e-963a-11ee-bbb1-002590c82436
IP
ASN #44066 diva-e Datacenters GmbH
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.bumlam.com
Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0
ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/sape/sync_ok?guid=55cc406e-963a-11ee-bbb1-002590c82436 HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiQ1NWNjNDA2ZS05NjNhLTExZWUtYmJiMS0wMDI1OTBjODI0MzY*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 09 Dec 2023 02:26:28 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://55cc406e-963a-11ee-bbb1-002590c82436.n6.sync.bumlam.com/?src=sape
55cc406e-963a-11ee-bbb1-002590c82436.n6.sync.bumlam.com/?src=sape
0 B URL 55cc406e-963a-11ee-bbb1-002590c82436.n6.sync.bumlam.com/?src=sape
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sape HTTP/1.1
Host: 55cc406e-963a-11ee-bbb1-002590c82436.n6.sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiQ1NWNjNDA2ZS05NjNhLTExZWUtYmJiMS0wMDI1OTBjODI0MzY*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.24.0
date: Sat, 09 Dec 2023 02:26:28 GMT
content-length: 0
location: https://pix.bumlam.com/sync/sape/done
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
X-Firefox-Spdy: h2
pix.bumlam.com/sync/sape/done
43 B URL pix.bumlam.com/sync/sape/done
IP
ASN #44066 diva-e Datacenters GmbH
Certificate IssuerLet's Encrypt
Subject*.bumlam.com
Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0
ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /sync/sape/done HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiQ1NWNjNDA2ZS05NjNhLTExZWUtYmJiMS0wMDI1OTBjODI0MzY*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 09 Dec 2023 02:26:28 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
ag.hdrezka.best/engine/lazydev/dle_filter/lib/dle_filter.js.php
200 OK 359 B URL GET HTTP/3 ag.hdrezka.best/engine/lazydev/dle_filter/lib/dle_filter.js.php
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (403), with no line terminators
Hash 09534dcbd03f7e618fa2ee7885c2b941
cf3676c7141fcb01cc7605687588fefa85d9717d
dea480d025561374cc6dc8aa563c3caaea31a361686542b22a33923cd7ce5a01
GET /engine/lazydev/dle_filter/lib/dle_filter.js.php HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: application/x-javascript
x-powered-by: PHP/7.4.26
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H6Vaqlj76zKA8tQrWDHLREwwawT76baleVOkGuAFa876PfgZl7w3KdmzNnQA9BoMUjcmeblZ5NocuGgvS4Vzho4UzefSW1kFw%2BYcPI1jYBQGbCihzc3bFp9V6OLOwbrbJus%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8329cd58dbf20b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
code.moviead55.ru/madstyle.css
200 OK 209 B URL GET HTTP/2 code.moviead55.ru/madstyle.css
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
File type ASCII text, with no line terminators
Hash b6196d7f4ee73833931780d574245f0b
a7d855a4f2eed8b26e3347a28034c6776af9358b
209b4b12927b9a52356692fe21689fa4ae9fe3a226ebf4041bfc3b767a931a00
GET /madstyle.css HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:17 GMT
content-type: text/css; charset=utf-8
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
access-control-allow-origin: *
access-control-expose-headers: *
access-control-max-age: 86400
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method
etag: W/"28021-7Ba9Gb9K6bwuIzasQJpQO7varK0"
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
www.acint.net/mc/?dp=167&tc=1
200 OK 5.6 kB URL GET HTTP/2 www.acint.net/mc/?dp=167&tc=1
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5817), with no line terminators
Hash c193a30d78efe411eaa67d0fffb0eb56
8503ca47fb2c850d7aa4556abd3496345e156da7
6bb15c37f7781159ef3619dd422b6b792f6919e81de297ddb8ab256eb2a967af
GET /mc/?dp=167&tc=1 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ag.hdrezka.best/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVz0Eks2gfQ1hF1AuHRHSFcM5hXeDQco8F+D6rVqlKV
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Sat, 09 Dec 2023 02:26:17 GMT
content-type: text/html
set-cookie: cSyncDp14v6=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp17v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp45v5=1702088777; expires=Sun, 10-Dec-23 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp53v5=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp62v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp67v3=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp68v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp71v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp80v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp85v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp95v4=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp98v3=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp104v2=1702088777; expires=Sat, 23-Dec-23 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp107v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp110v3=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp125v4=1702088777; expires=Sun, 24-Dec-23 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp126v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp127v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp129v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp136v3=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp146v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp148v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp149v3=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp151v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp251v1=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp186v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp217v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp221v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp235v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp239v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp243v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp260v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp244v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp248v2=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp261v1=1702088777; expires=Mon, 08-Jan-24 02:26:17 GMT; path=/; Secure; SameSite=None; domain=.acint.net
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
content-encoding: gzip
X-Firefox-Spdy: h2
ssp.bidvol.com/usersync?dspcsid=8&redirect=1
302 Found 43 B URL GET HTTP/2 ssp.bidvol.com/usersync?dspcsid=8&redirect=1
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subjectssp.bidvol.com
Fingerprint40:DB:53:6B:41:DC:4B:32:C0:EE:F6:09:5C:13:AF:5C:EF:90:56:90
ValidityThu, 09 Nov 2023 10:21:37 GMT - Wed, 07 Feb 2024 10:21:36 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usersync?dspcsid=8&redirect=1 HTTP/1.1
Host: ssp.bidvol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.22.0
date: Sat, 09 Dec 2023 02:26:18 GMT
x-request-id: 1e5bb925-319c-4b07-9243-46058c206087
vary: Origin
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
surrogate-control: no-store
set-cookie: bvuid=hj2nc2whf0; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None
bvuid2=hj2nc2whf0; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT
location: https://www.acint.net/match?dp=129&euid=hj2nc2whf0
X-Firefox-Spdy: h2
ag.hdrezka.best/templates/rezka/images/favicon.ico
200 OK 15 kB URL GET HTTP/3 ag.hdrezka.best/templates/rezka/images/favicon.ico
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 324440a5decd705003a65106a9e81c7a
b0ce72355961571f7680b64cfd702abf58569535
4dec38cba75bfebb6cf41822084901c40b54849355e8e756f3fd4835c46cbca7
GET /templates/rezka/images/favicon.ico HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:15 GMT
content-type: image/vnd.microsoft.icon
last-modified: Sat, 01 Oct 2022 21:47:01 GMT
etag: W/"3aee-5ea000cefcb53"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5386
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fa1NsegoaZa8VJdPQeQBSZLScJhAPcv3F%2FwYEjqYH4W6wVRegtNQl3mhQqPAunrJ%2Ff3CxTXK32DdYR2wPe7inzPEFdackmE1N0B5YJCAYDywW2FiU%2FPeyeV6herXmhiSxMI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8329cd5cfc640b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
static.moviead55.ru/mp_dist/mstream2.js?v5710493255
200 OK 171 kB URL GET HTTP/2 static.moviead55.ru/mp_dist/mstream2.js?v5710493255
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGoogle Trust Services LLC
Subjectmoviead55.ru
Fingerprint97:2B:AC:BC:2D:E4:7C:FC:61:B0:3F:37:04:D9:9A:96:E1:03:56:22
ValidityFri, 17 Nov 2023 16:01:17 GMT - Thu, 15 Feb 2024 16:01:16 GMT
Size 171 kB (170734 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mp_dist/mstream2.js?v5710493255 HTTP/1.1
Host: static.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 02:26:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 09:10:20 GMT
vary: Accept-Encoding
etag: W/"6572dd7c-29aee"
x-movieads-country: NO
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-max-age: 1728000
cache-control: max-age=7200
cf-cache-status: HIT
age: 5832
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LxDh2divejeTb95nSHAykQ6ZSiUlCbAOdGlj1aB%2Fb2YgFMpfpmG8UatRG50bTCdJQxEuvKqHxmaGi%2BKAnNkaIsvYnLXrCRcsAuqJvFuumGKOMEmHtm4Y3lgHCb7%2BCrBQog9kSqS4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8329cd6c18e556ca-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.filmskino.site/hls/trailers/arJIA_8cyT0.mp4/index.m3u8
200 OK 4.1 kB URL GET HTTP/1.1 static.filmskino.site/hls/trailers/arJIA_8cyT0.mp4/index.m3u8
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://videotoday.site/mp_dist/td/trhls.html?v5710493255
Certificate IssuerLet's Encrypt
Subjectstatic.filmskino.site
Fingerprint6E:8F:8F:89:03:E1:65:6F:AE:73:8A:6F:6B:A2:B1:02:C1:FE:D3:C7
ValidityMon, 02 Oct 2023 16:05:08 GMT - Sun, 31 Dec 2023 16:05:07 GMT
File type M3U playlist, ASCII text, with very long lines (4182), with no line terminators
Hash fd70b6d88d109c2dd9da13ed9e0ff0ab
a6d9fd27588f1770c52b6c3e485eaecb7a824362
14637bb13c262b9980d0378784cc3a9336f935fa17d1d4dd61904cac2a62b0c9
GET /hls/trailers/arJIA_8cyT0.mp4/index.m3u8 HTTP/1.1
Host: static.filmskino.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videotoday.site
DNT: 1
Connection: keep-alive
Referer: https://videotoday.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 09 Dec 2023 02:26:20 GMT
Content-Type: application/vnd.apple.mpegurl
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"3a1794b0-ff7"
Expires: Mon, 18 Mar 2024 02:26:20 GMT
Cache-Control: max-age=8640000
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Origin: *
Content-Encoding: gzip
www.google.com/recaptcha/api2/webworker.js?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B
200 OK 102 B URL GET HTTP/3 www.google.com/recaptcha/api2/webworker.js?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf3WUwiAAAAAPSzg5ZbB8RA8S9dCxOs1n2qm8a9&co=aHR0cHM6Ly9hZy5oZHJlemthLmJlc3Q6NDQz&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=invisible&cb=5cr5bnmp2820
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
File type ASCII text, with no line terminators
Hash e985f667e666ad879364d2e1c20a02dc
4e896e0f0268c2d6565798a87665eb0084f23d41
153667004611f8905f074b17b69c32f43b8038f0d95d1341d00a88e48f990a6d
GET /recaptcha/api2/webworker.js?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf3WUwiAAAAAPSzg5ZbB8RA8S9dCxOs1n2qm8a9&co=aHR0cHM6Ly9hZy5oZHJlemthLmJlc3Q6NDQz&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=invisible&cb=5cr5bnmp2820
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Sat, 09 Dec 2023 02:26:16 GMT
date: Sat, 09 Dec 2023 02:26:16 GMT
cache-control: private, max-age=300
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ads.adlook.me/vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088784438
200 OK 2 B URL GET HTTP/2 ads.adlook.me/vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088784438
IP
ASN #48096 Enterprise Cloud Ltd.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /vast?id=21428&w=700&h=394&mult=1&rw=0&ref=&loc=https%3A%2F%2Fag.hdrezka.best%2Ffilms%2F1-action%2F6882-carstvo-nebesnoe-2005.html&top=&_ts=1702088784438 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ag.hdrezka.best
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Cookie: adlm_userId=c0c3bb0ba14b4e068ecf31afee7f8dfa
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=c0c3bb0ba14b4e068ecf31afee7f8dfa; expires=Sat, 07 Dec 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=none
access-control-allow-origin: https://ag.hdrezka.best
access-control-allow-credentials: true
date: Sat, 09 Dec 2023 02:26:17 GMT
content-length: 2
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=hbrdcookie2&rnd=1702088777
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=hbrdcookie2&rnd=1702088777
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=hbrdcookie2&rnd=1702088777 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 09 Dec 2023 02:26:17 GMT
content-length: 0
location: https://dm-eu.hybrid.ai/match?id=185&burl=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dhbrdcookie2%26bid%3D%24%7BVID%7D
set-cookie: sky_uuid=b417f22a-0d1e-d33e-1086-836993e6f3ad; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
ag.hdrezka.best/templates/rezka/images/icon-play_2.png
200 OK 609 B URL GET HTTP/3 ag.hdrezka.best/templates/rezka/images/icon-play_2.png
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type PNG image data, 44 x 46, 8-bit gray+alpha, non-interlaced\012- data
Hash 19af6867b16f5b511ea636a637a80930
5e696011d4cfadcfab63b62d371dcbc27c5e3a58
2108cbef241c31493d6b382429ff8456719ba10a9e5e2bc5c9844cd8da83f67d
GET /templates/rezka/images/icon-play_2.png HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/templates/rezka/css/styles.css
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: image/png
content-length: 609
last-modified: Sat, 01 Oct 2022 21:47:01 GMT
etag: "6338b555-261"
expires: Sat, 09 Dec 2023 10:14:06 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 58328
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DKDE2cT0RV6J3L7iE24IaxqtMg2Y06quPqYLhBfDNgccXahmR9fxKO8oR7ypuKpWr%2FtcVs%2F2CYSF4vopa28cJ2ZzrnZLec%2FzNihJJ6VlnqPrR%2BHPN8esBIfNxneZ8xLp49o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8329cd5a2c1b0b59-OSL
alt-svc: h3=":443"; ma=86400
ag.hdrezka.best/templates/rezka/images/post-attention.png
200 OK 903 B URL GET HTTP/3 ag.hdrezka.best/templates/rezka/images/post-attention.png
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type PNG image data, 23 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash f10b0ea42bc1d8432075c21108eedece
3d3926ffee01c7c96eab8248c134bbafd6b0d733
76a55bb603fff61b57b189f3471198700ed10f354b448d1468b580466e20a54a
GET /templates/rezka/images/post-attention.png HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/templates/rezka/css/styles.css
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: image/png
content-length: 903
last-modified: Sat, 01 Oct 2022 21:47:01 GMT
etag: "6338b555-387"
expires: Sat, 09 Dec 2023 08:57:17 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 62937
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h7AhOhFTC%2FvoPNqDlqm9lRHNv0TP9%2FH37rZ95hROO9KSbcV4A2aW5335VpcQTGrL2ki4kxVMyyF%2BhRtt8jvm0fqbvlZQ1Xbkikp%2FhZDRMOHw9OXElr8r%2F45cGeZkV9%2FHnyA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8329cd5a2c1c0b59-OSL
alt-svc: h3=":443"; ma=86400
videotoday.site/mp_dist/td/trhls.html?v5710493255
200 OK 9.1 kB URL GET HTTP/2 videotoday.site/mp_dist/td/trhls.html?v5710493255
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerGoogle Trust Services LLC
Subjectvideotoday.site
Fingerprint80:92:75:AC:A0:6F:90:77:8A:EF:F4:2B:52:C4:18:0A:41:85:A0:78
ValidityMon, 04 Dec 2023 04:51:25 GMT - Sun, 03 Mar 2024 04:51:24 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9275), with no line terminators
Hash e21934971bc64f6ad77228cab1e49713
c2eb29bd30c99c05e9fa9ee57d5294324bb71a89
f96d688f61c0d77e2ab27a63cab738fb9e85f7041e5d5a91287e6fa5a4792f9e
GET /mp_dist/td/trhls.html?v5710493255 HTTP/1.1
Host: videotoday.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Dec 2023 02:26:19 GMT
content-type: text/html
last-modified: Fri, 08 Dec 2023 09:10:20 GMT
vary: Accept-Encoding
x-movieads-country: NO
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-max-age: 1728000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=shu4QII9S93VVQT8kniELq%2BYyvveQD%2BMTVIiUZ7iMwkiVV3a3A%2FZeFqMF3qmKLQIfVRkek5UDE0VEHl9Gh1NEye1YHDO%2F4eyGLLpiKE2EGLDTpLneO0BmR3Aot53EmjmjOg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8329cd753c11712b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.acint.net/match?dp=127&euid=hmoAlpp3YIyeUZZYQOLL
200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=127&euid=hmoAlpp3YIyeUZZYQOLL
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=127&euid=hmoAlpp3YIyeUZZYQOLL HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVz0Eks2gfQ1hF1AuHRHSFcM5hXeDQco8F+D6rVqlKV; cSyncDp14v6=1702088777; cSyncDp17v2=1702088777; cSyncDp45v5=1702088777; cSyncDp53v5=1702088777; cSyncDp62v2=1702088777; cSyncDp67v3=1702088777; cSyncDp68v2=1702088777; cSyncDp71v2=1702088777; cSyncDp80v2=1702088777; cSyncDp85v2=1702088777; cSyncDp95v4=1702088777; cSyncDp98v3=1702088777; cSyncDp104v2=1702088777; cSyncDp107v2=1702088777; cSyncDp110v3=1702088777; cSyncDp125v4=1702088777; cSyncDp126v2=1702088777; cSyncDp127v2=1702088777; cSyncDp129v2=1702088777; cSyncDp136v3=1702088777; cSyncDp146v2=1702088777; cSyncDp148v2=1702088777; cSyncDp149v3=1702088777; cSyncDp151v2=1702088777; cSyncDp251v1=1702088777; cSyncDp186v2=1702088777; cSyncDp217v2=1702088777; cSyncDp221v2=1702088777; cSyncDp235v2=1702088777; cSyncDp239v2=1702088777; cSyncDp243v2=1702088777; cSyncDp260v2=1702088777; cSyncDp244v2=1702088777; cSyncDp248v2=1702088777; cSyncDp261v1=1702088777; cSyncDp14v4=1702088777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Sat, 09 Dec 2023 02:26:19 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
logger.moviead55.ru/logger.php?t=cdiv&c=7fdddbc0-784a-416c-903e-c1a5ba451f68&a=&m=1826&v=5b872a9d6ccdd73f7af99247d38e6849&o=
200 OK 70 B URL GET HTTP/2 logger.moviead55.ru/logger.php?t=cdiv&c=7fdddbc0-784a-416c-903e-c1a5ba451f68&a=&m=1826&v=5b872a9d6ccdd73f7af99247d38e6849&o=
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
Fingerprint23:A7:77:A2:66:23:90:7B:A4:5D:58:E4:51:FA:3A:69:72:31:48:88
ValidityWed, 06 Dec 2023 14:27:15 GMT - Tue, 05 Mar 2024 14:27:14 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash b357a19c87624c7c4d131aeeb4ae677f
c7a9c45fd419815a5ab1998503a9f03514c0e229
497790947d4666760ce38f3c00e852c71fdb66cae849bae8e9ede352719e1581
GET /logger.php?t=cdiv&c=7fdddbc0-784a-416c-903e-c1a5ba451f68&a=&m=1826&v=5b872a9d6ccdd73f7af99247d38e6849&o= HTTP/1.1
Host: logger.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 02:26:17 GMT
content-type: Content-Type: image/png
vary: Accept-Encoding
x-movieads-le: true
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
ag.hdrezka.best/engine/classes/min/index.php?f=engine/classes/js/jqueryui.js,engine/classes/js/dle_js.js,engine/classes/js/bbcodes.js,engine/classes/js/lazyload.js,engine/editor/jscripts/tiny_mce/tinymce.min.js&v=1f75d
200 OK 543 kB URL GET HTTP/3 ag.hdrezka.best/engine/classes/min/index.php?f=engine/classes/js/jqueryui.js,engine/classes/js/dle_js.js,engine/classes/js/bbcodes.js,engine/classes/js/lazyload.js,engine/editor/jscripts/tiny_mce/tinymce.min.js&v=1f75d
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
Size 543 kB (543308 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /engine/classes/min/index.php?f=engine/classes/js/jqueryui.js,engine/classes/js/dle_js.js,engine/classes/js/bbcodes.js,engine/classes/js/lazyload.js,engine/editor/jscripts/tiny_mce/tinymce.min.js&v=1f75d HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: application/x-javascript; charset=utf-8
x-powered-by: PHP/7.4.26
expires: Sun, 08 Dec 2024 02:26:14 GMT
vary: Accept-Encoding
last-modified: Thu, 10 Nov 2022 21:07:17 GMT
etag: W/"pub1668114437;gz"
cache-control: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VuIinya0a7m7GZxpya0ymAH%2FhmezucXox%2Fd0GGxtbHHqJPunIImvCL02MeVnTsJVTfn6H51PvK9wapMs141QLa6gDcgzWPYxi54bCaPxmW0zZiFdoNgQSGEXhhG5j1QJSNQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8329cd58cbed0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ag.hdrezka.best/templates/rezka/images/search-icon.png
200 OK 187 B URL GET HTTP/3 ag.hdrezka.best/templates/rezka/images/search-icon.png
IP
Requested by https://ag.hdrezka.best/films/1-action/6882-carstvo-nebesnoe-2005.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint05:A2:F2:62:5F:1F:4D:FA:C1:38:3F:BD:51:EF:E0:FA:AC:08:A0:7C
ValiditySat, 28 Jan 2023 00:00:00 GMT - Sat, 27 Jan 2024 23:59:59 GMT
File type PNG image data, 14 x 14, 8-bit gray+alpha, non-interlaced\012- data
Hash 90b68a1863bd785958e6a793459aef33
8e373b815bbce7bb6111f212c7b6b839ebb68db1
5cdedbdb473a42132d87c34187bf15f5165232911b912f3871d745e673128357
GET /templates/rezka/images/search-icon.png HTTP/1.1
Host: ag.hdrezka.best
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ag.hdrezka.best/templates/rezka/css/styles.css
Cookie: PHPSESSID=449474a8f7c9e145e8b17771322fc397
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 09 Dec 2023 02:26:14 GMT
content-type: image/png
content-length: 187
last-modified: Sat, 01 Oct 2022 21:47:01 GMT
etag: "6338b555-bb"
expires: Sat, 09 Dec 2023 10:14:06 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 58328
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yNJiVYuPoTHIsX2AN%2BrnhxHWxwfCsU2yd5T58NwAOQa337DXjKUDlj%2BG%2Fa%2F9SnhC8%2B0pr6QC4TuwFl%2FETS6n%2B3tr6gMVoq98sYCE8Fhrxd6oFJbhDHUAW9WYbLp0VUzSzz0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8329cd5a2c1a0b59-OSL
alt-svc: h3=":443"; ma=86400
www.google.com/recaptcha/api2/reload?k=6Lf3WUwiAAAAAPSzg5ZbB8RA8S9dCxOs1n2qm8a9
200 OK 13 kB URL POST HTTP/3 www.google.com/recaptcha/api2/reload?k=6Lf3WUwiAAAAAPSzg5ZbB8RA8S9dCxOs1n2qm8a9
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf3WUwiAAAAAPSzg5ZbB8RA8S9dCxOs1n2qm8a9&co=aHR0cHM6Ly9hZy5oZHJlemthLmJlc3Q6NDQz&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=invisible&cb=5cr5bnmp2820
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:3A:D9:47:14:B0:78:30:A1:BF:B4:45:F6:F5:81:AD:0A:C7:76:89
ValidityMon, 20 Nov 2023 08:02:55 GMT - Mon, 12 Feb 2024 08:02:54 GMT
File type ASCII text, with very long lines (13075)
Hash 547fcd990a80529d8c4a6e25667a751d
f914d3e1a715513850bbfd76a93fd4a27eb7de19
55e798e8277627db64a6da9afcb7bc5ccb238ae0fd3d10899bf9e5fb976a067b
POST /recaptcha/api2/reload?k=6Lf3WUwiAAAAAPSzg5ZbB8RA8S9dCxOs1n2qm8a9 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuffer
Content-Length: 7388
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf3WUwiAAAAAPSzg5ZbB8RA8S9dCxOs1n2qm8a9&co=aHR0cHM6Ly9hZy5oZHJlemthLmJlc3Q6NDQz&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=invisible&cb=5cr5bnmp2820
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
date: Sat, 09 Dec 2023 02:26:17 GMT
expires: Sat, 09 Dec 2023 02:26:17 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
set-cookie: _GRECAPTCHA=09AOX_bvgZhk9qF90ede0o4hWshpKMisIrMLBoxohKEqdvo5fS5fxgPnmOhJnfFoPBSJnrsDVE59stQKLTu5QmYb4;Path=/recaptcha;Expires=Thu, 06-Jun-2024 02:26:17 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ads.adlook.me/csync?pid=sape&uid=0100007F49D07365D007DA2C027511D6&url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
302 Found 43 B URL GET HTTP/2 ads.adlook.me/csync?pid=sape&uid=0100007F49D07365D007DA2C027511D6&url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
IP
ASN #48096 Enterprise Cloud Ltd.
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /csync?pid=sape&uid=0100007F49D07365D007DA2C027511D6&url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Cookie: adlm_userId=c0c3bb0ba14b4e068ecf31afee7f8dfa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://acint.net/match?dp=110&euid=c0c3bb0ba14b4e068ecf31afee7f8dfa
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=c0c3bb0ba14b4e068ecf31afee7f8dfa; expires=Sat, 07 Dec 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=none
adlk_cmatch=sape%3A0100007F49D07365D007DA2C027511D6; expires=Fri, 31 Dec 9999 20:59:59 GMT; path=/; SameSite=None; secure; samesite=none
date: Sat, 09 Dec 2023 02:26:18 GMT
X-Firefox-Spdy: h2
104.21.91.170
142.250.74.132
195.201.106.117
185.98.54.153
188.120.245.54
188.114.97.1
188.42.105.220
139.45.228.132
141.94.28.216
0.0.0.0