87.118.118.43200 OK 18 kB URL User Request GET HTTP/1.1 IP 87.118.118.43:80
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2817), with CRLF, LF line terminators
Hash 1efde9c1edab258630110024a59b0c04
4bcfdafe3248d896ecca4c8bc9ed752942f86960
23a2e83e2548d85b9fda91e54737877f011ef26edd791c9090f0e392e208ded4
GET / HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:19 GMT
Server: Apache
Upgrade: h2
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 01 Dec 2023 19:52:02 GMT
ETag: "10dde-60b781a1aefa0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 18541
Keep-Alive: timeout=5, max=100
Content-Type: text/html; charset=UTF-8
kraska.biz/wp-content/themes/Calve/css/screen.css
87.118.118.43200 OK 3.0 kB URL GET HTTP/1.1 kraska.biz/wp-content/themes/Calve/css/screen.css
IP 87.118.118.43:80
File type ASCII text, with very long lines (895)
Hash 117984b3fba50938fc1ad7907dd5eb54
50386f087adcf84e2913147327280ff4d5b386a1
d8f79b21ebaf9ec53988aed972446b972376d1307b9514dfd608605c6a315d7e
GET /wp-content/themes/Calve/css/screen.css HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Last-Modified: Wed, 18 Sep 2013 20:48:24 GMT
ETag: "2d79-4e6ae8ef59600-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3015
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
www.google.ru/coop/cse/brand?form=cse-search-box&lang=ru
142.250.74.35301 Moved Permanently 237 B URL GET HTTP/1.1 www.google.ru/coop/cse/brand?form=cse-search-box&lang=ru
IP 142.250.74.35:80
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash bda0dec939809d66ff8388fe5c716412
d768e1edcca0d64e15c1a26978d19c8fdfbd4e4f
334f05a39cdb64bac9f876dd2a2011649d08d578f6d751460c91ca294f3304cd
Analyzer Verdict Alert OpenPhish phishing Google Inc.
GET /coop/cse/brand?form=cse-search-box&lang=ru HTTP/1.1
Host: www.google.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Location: https://www.gstatic.com/prose/brandjs.js
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 237
X-XSS-Protection: 0
Date: Fri, 01 Dec 2023 20:14:13 GMT
Expires: Fri, 01 Dec 2023 20:44:13 GMT
Cache-Control: public, max-age=1800
Content-Type: text/html; charset=UTF-8
Age: 187
kraska.biz/wp-content/themes/Calve/menu/MenuMatic.css
87.118.118.43200 OK 1.2 kB URL GET HTTP/1.1 kraska.biz/wp-content/themes/Calve/menu/MenuMatic.css
IP 87.118.118.43:80
Hash bdda5f65419d564ba58ef237b62519fc
21e88d3e2660d2e7b0220c6141d12b432a8f493a
1f9466e8da996b887f05c2e4b22638fb33d128be2d322b64553f0ce5477f00f4
GET /wp-content/themes/Calve/menu/MenuMatic.css HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Upgrade: h2
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 18 Sep 2013 20:48:24 GMT
ETag: "c73-4e6ae8ef59600-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1205
Keep-Alive: timeout=5, max=100
Content-Type: text/css
kraska.biz/wp-includes/css/dist/block-library/style.min.css?ver=5.3.2
87.118.118.43200 OK 6.2 kB URL GET HTTP/1.1 kraska.biz/wp-includes/css/dist/block-library/style.min.css?ver=5.3.2
IP 87.118.118.43:80
File type ASCII text, with very long lines (41467), with no line terminators
Hash 9eeddc51b0b4a2580a959042d50f826e
e42006973f24baf82c96ee3ae594eedfa1719f82
d9662b4b9ba6c2c3691ce0acd4572e027366eb97d6070550a13429262bb0037f
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.3.2 HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Upgrade: h2
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 29 Mar 2020 14:51:18 GMT
ETag: "a1fb-5a1ff7791b2d9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6163
Keep-Alive: timeout=5, max=100
Content-Type: text/css
kraska.biz/wp-content/themes/Calve/menu/mootools-1.2.5-core-yc.js
87.118.118.43200 OK 21 kB URL GET HTTP/1.1 kraska.biz/wp-content/themes/Calve/menu/mootools-1.2.5-core-yc.js
IP 87.118.118.43:80
File type ASCII text, with very long lines (65377)
Hash 2dfd2ec567d78b1d0be93d30e0d937f5
49d4497a54a3aca9b047e2e7f935392befbec166
905568b8ca4c69ee9b37e594efa057886c854c3c2c3e5e8468ad8324c96107a3
GET /wp-content/themes/Calve/menu/mootools-1.2.5-core-yc.js HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Last-Modified: Wed, 18 Sep 2013 20:48:24 GMT
ETag: "104ee-4e6ae8ef59600-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 20778
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
kraska.biz/wp-content/plugins/ram108-sape/style.css?ver=5.3.2
87.118.118.43200 OK 129 B URL GET HTTP/1.1 kraska.biz/wp-content/plugins/ram108-sape/style.css?ver=5.3.2
IP 87.118.118.43:80
Hash d11bc99c5a522da9c7499230db417897
57cda2584ed57e6adb9d9ce989cca95c6b561ebd
63186a2fc650b794ae138c5f72e53411f0dfc71dbb1be501f33a58257feb6a09
GET /wp-content/plugins/ram108-sape/style.css?ver=5.3.2 HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Upgrade: h2
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 27 Oct 2014 09:36:39 GMT
ETag: "a5-50664447b97c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 129
Keep-Alive: timeout=5, max=100
Content-Type: text/css
kraska.biz/wp-content/themes/Calve/style.css
87.118.118.43200 OK 2.8 kB URL GET HTTP/1.1 kraska.biz/wp-content/themes/Calve/style.css
IP 87.118.118.43:80
File type ASCII text, with CRLF line terminators
Hash 1bd07e8c29f948850ca66f06ea031a15
01d69c99e172ef5815ca67019beb4b92a32957b0
345fb9d9bedc5c18a9122ed22c0316bbebaac80722fcde1c84702fce9ee582d1
GET /wp-content/themes/Calve/style.css HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Upgrade: h2
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 19 Apr 2014 17:36:44 GMT
ETag: "2a3a-4f768b5b46300-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2795
Keep-Alive: timeout=5, max=100
Content-Type: text/css
kraska.biz/wp-includes/js/wp-embed.min.js?ver=5.3.2
87.118.118.43200 OK 740 B URL GET HTTP/1.1 kraska.biz/wp-includes/js/wp-embed.min.js?ver=5.3.2
IP 87.118.118.43:80
File type ASCII text, with very long lines (1399), with no line terminators
Hash 04133d37cfd0f08267530b905a5ffff3
6eb207e57c92ee341f57998cb191e5c9dc4fc738
0284cbccebf1682452d62d06efa3665c874d642d4e03f5f5f9bb0f555da9251b
GET /wp-includes/js/wp-embed.min.js?ver=5.3.2 HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Upgrade: h2
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 29 Mar 2020 14:51:17 GMT
ETag: "577-5a1ff778abd95-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 740
Keep-Alive: timeout=5, max=100
Content-Type: application/javascript
kraska.biz/wp-content/themes/Calve/menu/MenuMatic_0.68.3.js
87.118.118.43200 OK 4.6 kB URL GET HTTP/1.1 kraska.biz/wp-content/themes/Calve/menu/MenuMatic_0.68.3.js
IP 87.118.118.43:80
File type ASCII text, with very long lines (24589)
Hash 7a175b376a1836d945d3fa6a9ccf9f92
3e3ba3178f621cca9841eb6260b61875a2e71d89
24e6072f29ae39caa6f1c0af4ded535e277ec30d6b3fd55532db0270147d89bb
GET /wp-content/themes/Calve/menu/MenuMatic_0.68.3.js HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Last-Modified: Wed, 18 Sep 2013 20:48:24 GMT
ETag: "6504-4e6ae8ef59600-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4555
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
shareup.ru/social.js
95.216.22.182 809 B IP 95.216.22.182:0
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1707), with no line terminators
Hash af23da02b134d6b8b21538b11007309d
c6f1e43af0816c44107dedbc88084949c8aeced4
a8ba4cfa1039986bf21d0275b8e7f1e6a9b39d280cf68d7ea5cdf275c01fba4b
GET /social.js HTTP/1.1
Host: shareup.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 20:17:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 809
Connection: keep-alive
Keep-Alive: timeout=60
Heads: s1:9; s2:; or:http://kraska.biz/; our:1
Expires: Fri, 01 Dec 2023 21:24:00 GMT
Set-Cookie: lf=1; expires=Sat, 02-Dec-2023 20:17:20 GMT; Max-Age=86400
Vary: Accept-Encoding
Content-Encoding: gzip
www.gstatic.com/prose/brandjs.js
142.250.74.35200 OK 5.8 kB URL GET HTTP/2 www.gstatic.com/prose/brandjs.js
IP 142.250.74.35:443
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (1352)
Hash 5fd232d76f845e55064ad5069abfc141
afaa74984a2c8eb086ff2d22e0ad2abfce7d272e
6395e6f9f6fbcd953f0ffa40615094c565d86c265fb5028e64dd2dc872b5ce69
GET /prose/brandjs.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kraska.biz/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 5807
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 23:24:28 GMT
expires: Fri, 01 Dec 2023 23:24:28 GMT
cache-control: public, max-age=86400
age: 75172
last-modified: Tue, 06 Apr 2021 15:14:29 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
kraska.biz/wp-content/themes/Calve/css/print.css
87.118.118.43200 OK 666 B URL GET HTTP/1.1 kraska.biz/wp-content/themes/Calve/css/print.css
IP 87.118.118.43:80
Hash ab3584eb957750055a3201a5dd5f79c9
18b363bfd44820f7d026c77dadb9eec79562ce1c
07c45dc5395f6cd0d45f6bfa2674bad171ac1b1e5c9428dae975249b1ecf940d
GET /wp-content/themes/Calve/css/print.css HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Last-Modified: Wed, 18 Sep 2013 20:48:24 GMT
ETag: "51f-4e6ae8ef59600-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 666
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
kraska.biz/1001_2.jpg
87.118.118.43200 OK 2.7 kB IP 87.118.118.43:80
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 100x125, components 3\012- data
Hash 2de8d04011da84bdee86f477d6992f18
c63965dff91e7050cd6e1d61245c4d630eb4e058
5ab897873fda17c736cbb87b4561968887320a8b01434bc1597c959df4071518
GET /1001_2.jpg HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Last-Modified: Wed, 18 Sep 2013 20:48:02 GMT
ETag: "a82-4e6ae8da5e480"
Accept-Ranges: bytes
Content-Length: 2690
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
kraska.biz/05-03.jpg
87.118.118.43200 OK 9.4 kB IP 87.118.118.43:80
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=11, description= , manufacturer=SONY, model=DSC-F828, orientation=upper-left, xresolution=192, yresolution=200, resolutionunit=2, software=ACD Systems Digital Imaging, datetime=2005:05:08 13:23:03], baseline, precision 8, 100x130, components 3\012- data
Hash d293550405c5e6d30129aae3fe2ca569
7d5538e33bd861f0681a7b3ed07d3917d3c15f7a
454d310641bc589274128c0c52aea1bc98f7a85a48e34ed5a167c06915842430
GET /05-03.jpg HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Last-Modified: Wed, 18 Sep 2013 20:48:01 GMT
ETag: "249b-4e6ae8d96a240"
Accept-Ranges: bytes
Content-Length: 9371
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
kraska.biz/kubik_1.jpg
87.118.118.43200 OK 2.5 kB IP 87.118.118.43:80
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 100x96, components 3\012- data
Hash 99e145741e8752c0ef51560e9c2cefc4
56073c83f30df5063a2e211114c4354bb2ea40c6
c7e9618e439dbaa022a6337b6ebed5c2e4bfdbebad25100be4690f5ad74df0f8
GET /kubik_1.jpg HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Last-Modified: Wed, 18 Sep 2013 20:48:21 GMT
ETag: "9da-4e6ae8ec7cf40"
Accept-Ranges: bytes
Content-Length: 2522
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
kraska.biz/05-06.jpg
87.118.118.43200 OK 21 kB IP 87.118.118.43:80
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=11, description= , manufacturer=SONY, model=DSC-F828, orientation=upper-left, xresolution=194, yresolution=202, resolutionunit=2, datetime=2005:05:07 11:26:50], baseline, precision 8, 100x73, components 3\012- data
Hash d1cfe06b9e1b1fb706cd11210936eba6
ed7cfdfda96c80f72e83c156dd3306359e7454f8
35fe37eda1c2dd271cf695fb7df4f0e2ea07e3ed1a9fe243e5d7c4992561eb24
GET /05-06.jpg HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Last-Modified: Wed, 18 Sep 2013 20:48:01 GMT
ETag: "538e-4e6ae8d96a240"
Accept-Ranges: bytes
Content-Length: 21390
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
cdn-rtb.sape.ru/teasers/js/520/2/10520.js
185.12.127.178200 OK 38 kB URL GET HTTP/2 cdn-rtb.sape.ru/teasers/js/520/2/10520.js
IP 185.12.127.178:443
Certificate IssuerLet's Encrypt
Subject*.sape.ru
FingerprintF9:61:5C:64:81:FD:57:C2:4A:BD:6B:12:D4:7E:02:5E:83:8E:3E:40
ValiditySun, 08 Oct 2023 01:41:50 GMT - Sat, 06 Jan 2024 01:41:49 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 5f9164f591b96d7afdcb9f6c4104a165
629d07fe7a713486173bbd16ee99829137abd1f3
dc75d3484fd66f925a47302b8b2bb40c3f5608c03ae73a3687d0c08316e59f65
GET /teasers/js/520/2/10520.js HTTP/1.1
Host: cdn-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:20 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: block-all-mixed-content
etag: W/"dca503d0a8d841a07a561834c075e5f1"
last-modified: Wed, 29 Nov 2023 02:04:06 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-request-id: 179CC58B402B4768
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
expires: Fri, 01 Dec 2023 21:17:20 GMT
cache-control: max-age=3600
x-cache-status: HIT
X-Firefox-Spdy: h2
w.uptolike.com/widgets/v1/zp.js?pid=lf4735c47028716fcc9534c835f684a6b72f33758e
95.163.114.203200 OK 11 kB URL GET HTTP/1.1 w.uptolike.com/widgets/v1/zp.js?pid=lf4735c47028716fcc9534c835f684a6b72f33758e
IP 95.163.114.203:443
ASN #12695 LLC Digital Network
Certificate IssuerLet's Encrypt
Subjectuptolike.com
Fingerprint05:EC:E2:F5:E1:CC:42:09:42:DC:90:8A:CF:B4:9B:7C:0C:2F:98:68
ValiditySat, 28 Oct 2023 04:43:41 GMT - Fri, 26 Jan 2024 04:43:40 GMT
File type ASCII text, with very long lines (585)
Hash 8ec6ca7300bcb9af49469da60afc6c54
30630389f78cd528079fa5b99218ad6a30d31c54
85c034be3ba5a678f76e89044e868efe32ebf3b82218e494e8e71fa8058eb7f1
GET /widgets/v1/zp.js?pid=lf4735c47028716fcc9534c835f684a6b72f33758e HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 20:17:20 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: utl_id2=33842310219; Expires=Sun, 30 Nov 2025 20:17:20 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
utl_dat="CMiknbjCMRAAIMj158DCMSjI9efAwjEwANbxv4BTEXxG/y+Fp88qJDw="; Expires=Sun, 30 Nov 2025 20:17:20 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
Cache-Control: max-age=31556926
P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
Access-Control-Allow-Origin: *
Content-Encoding: gzip
msd.com.ua/wp-content/uploads/dis-135x300.jpg
87.118.82.20200 OK 15 kB URL GET HTTP/1.1 msd.com.ua/wp-content/uploads/dis-135x300.jpg
IP 87.118.82.20:443
Certificate IssuerLet's Encrypt
Subjectmsd.com.ua
Fingerprint49:33:99:60:A4:7F:87:1F:1A:04:EE:C0:A7:19:5C:B8:AC:1D:BD:FB
ValiditySat, 07 Oct 2023 21:01:14 GMT - Fri, 05 Jan 2024 21:01:13 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=21, height=4624, bps=266, PhotometricIntepretation=RGB, manufacturer=wheatek, model=WP17, orientation=upper-left, width=3468], baseline, precision 8, 135x300, components 3\012- data
Hash 6a77591dc32996c2ba49ff4ced13c124
6fd10a6e3a49c7f9d820d0b6b2b61e09fe37b567
f97e271379ecbd4532742319c715d824554469994050b0874db931554bbdb034
GET /wp-content/uploads/dis-135x300.jpg HTTP/1.1
Host: msd.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Last-Modified: Wed, 15 Nov 2023 15:52:34 GMT
ETag: "398f-60a32e4417dba"
Accept-Ranges: bytes
Content-Length: 14735
Cache-Control: max-age=2592000
Expires: Sun, 31 Dec 2023 20:17:20 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
kraska.biz/wp-includes/js/wp-emoji-release.min.js?ver=5.3.2
87.118.118.43200 OK 4.6 kB URL GET HTTP/1.1 kraska.biz/wp-includes/js/wp-emoji-release.min.js?ver=5.3.2
IP 87.118.118.43:80
File type ASCII text, with very long lines (10942)
Hash b2bdc6d8dfd107ed138f042d71ad4be2
c0efe12b5d5aecfed04bf625e41dbf7a64008d3c
1a351abc3f3b435497ddb8a55f09268d3e641dc22455deac06cf0181a4de52ee
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.3.2 HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Last-Modified: Sun, 29 Mar 2020 14:51:18 GMT
ETag: "362a-5a1ff778e8657-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4626
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
kraska.biz/wp-content/themes/Calve/images/background.png
87.118.118.43200 OK 146 B URL GET HTTP/1.1 kraska.biz/wp-content/themes/Calve/images/background.png
IP 87.118.118.43:80
File type PNG image data, 5 x 4, 8-bit/color RGB, non-interlaced\012- data
Hash 2640297bedebc63d04cc23a471b40600
3c5648f65340cf6d5973ec5c3fbd4ff34e05f020
b3715d235d0893f62d0054117cfb98d76c40c51ec335eba67270f61a2ddd8b42
GET /wp-content/themes/Calve/images/background.png HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/wp-content/themes/Calve/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Last-Modified: Wed, 18 Sep 2013 20:48:24 GMT
ETag: "92-4e6ae8ef59600"
Accept-Ranges: bytes
Content-Length: 146
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
kraska.biz/wp-content/themes/Calve/images/container-bg.png
87.118.118.43200 OK 267 B URL GET HTTP/1.1 kraska.biz/wp-content/themes/Calve/images/container-bg.png
IP 87.118.118.43:80
File type PNG image data, 2 x 220, 8-bit/color RGB, non-interlaced\012- data
Hash 5b2d52b3dda905879cb371bb23e8c0f8
4511d00fdb551f7427bd4628e8c77e6ff75f0aad
3be443080d2afd02593522bf3f28e5de30e8de6e3aaa361d86acd5f7d664effd
GET /wp-content/themes/Calve/images/container-bg.png HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/wp-content/themes/Calve/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Last-Modified: Wed, 18 Sep 2013 20:48:24 GMT
ETag: "10b-4e6ae8ef59600"
Accept-Ranges: bytes
Content-Length: 267
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
msd.com.ua/wp-content/uploads/dis-461x1024.jpg
87.118.82.20200 OK 50 kB URL GET HTTP/1.1 msd.com.ua/wp-content/uploads/dis-461x1024.jpg
IP 87.118.82.20:443
Certificate IssuerLet's Encrypt
Subjectmsd.com.ua
Fingerprint49:33:99:60:A4:7F:87:1F:1A:04:EE:C0:A7:19:5C:B8:AC:1D:BD:FB
ValiditySat, 07 Oct 2023 21:01:14 GMT - Fri, 05 Jan 2024 21:01:13 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=21, height=4624, bps=266, PhotometricIntepretation=RGB, manufacturer=wheatek, model=WP17, orientation=upper-left, width=3468], baseline, precision 8, 461x1024, components 3\012- data
Hash 26b07a25d507f90c0f37bf291d4e614b
368f9402a92bdea4ed0539b0be5ab160da08b619
090d92b7c8fcccadce44aaf3072263ab2eeecb44564fb92142776747866cee5b
GET /wp-content/uploads/dis-461x1024.jpg HTTP/1.1
Host: msd.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Last-Modified: Wed, 15 Nov 2023 15:52:32 GMT
ETag: "c289-60a32e42961c2"
Accept-Ranges: bytes
Content-Length: 49801
Cache-Control: max-age=2592000
Expires: Sun, 31 Dec 2023 20:17:20 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
www.youtube.com/embed/u64SGL1B8vA
142.250.74.142200 OK 0 B URL GET HTTP/2 www.youtube.com/embed/u64SGL1B8vA
IP 142.250.74.142:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/u64SGL1B8vA HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 01 Dec 2023 20:17:20 GMT
Location: https://www.youtube.com/embed/u64SGL1B8vA
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
kraska.biz/wp-content/themes/Calve/images/nav-bg.png
87.118.118.43200 OK 137 B URL GET HTTP/1.1 kraska.biz/wp-content/themes/Calve/images/nav-bg.png
IP 87.118.118.43:80
File type PNG image data, 1 x 52, 8-bit/color RGB, non-interlaced\012- data
Hash 799c3db43b87e5feddba8a1eda217821
8870ed5cbd1720e24df4567318f3febed7624a7a
017412c7177458a4bd0d43ec1d179a01fbac1c20324f536d5b3a8cd9fb651fa1
GET /wp-content/themes/Calve/images/nav-bg.png HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/wp-content/themes/Calve/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Last-Modified: Wed, 18 Sep 2013 20:48:24 GMT
ETag: "89-4e6ae8ef59600"
Accept-Ranges: bytes
Content-Length: 137
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
kraska.biz/wp-content/themes/Calve/images/contentwrap.png
87.118.118.43200 OK 146 B URL GET HTTP/1.1 kraska.biz/wp-content/themes/Calve/images/contentwrap.png
IP 87.118.118.43:80
File type PNG image data, 310 x 1, 8-bit/color RGB, non-interlaced\012- data
Hash 2d7c995dcbb6b91daf24acd1bfaae825
d5af5e41210cd95563ac49374cae1fc91447b644
f62a8caec9f0b186b7ea60b9c161c44124f07e4d3c94da76623f13c2faee888d
GET /wp-content/themes/Calve/images/contentwrap.png HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/wp-content/themes/Calve/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Last-Modified: Wed, 18 Sep 2013 20:48:24 GMT
ETag: "92-4e6ae8ef59600"
Accept-Ranges: bytes
Content-Length: 146
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
kraska.biz/wp-content/themes/Calve/images/nav-seperator.png
87.118.118.43200 OK 223 B URL GET HTTP/1.1 kraska.biz/wp-content/themes/Calve/images/nav-seperator.png
IP 87.118.118.43:80
File type PNG image data, 1 x 30, 8-bit/color RGB, non-interlaced\012- data
Hash 18c5c179aa3ecf482296d725bd64a6a6
555bac593c8f023fd0837db2f1eeefd11b85986d
0f2cae068967aec6687b3c6765967208830cd83136ca2f156add19296d324b0e
GET /wp-content/themes/Calve/images/nav-seperator.png HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/wp-content/themes/Calve/menu/MenuMatic.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Last-Modified: Wed, 18 Sep 2013 20:48:24 GMT
ETag: "df-4e6ae8ef59600"
Accept-Ranges: bytes
Content-Length: 223
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
w.uptolike.com/widgets/v1/version.js?cb=cb__utl_cb_share_1701461845513383
95.163.114.203200 OK 83 B URL GET HTTP/1.1 w.uptolike.com/widgets/v1/version.js?cb=cb__utl_cb_share_1701461845513383
IP 95.163.114.203:443
ASN #12695 LLC Digital Network
Certificate IssuerLet's Encrypt
Subjectuptolike.com
Fingerprint05:EC:E2:F5:E1:CC:42:09:42:DC:90:8A:CF:B4:9B:7C:0C:2F:98:68
ValiditySat, 28 Oct 2023 04:43:41 GMT - Fri, 26 Jan 2024 04:43:40 GMT
File type ASCII text, with no line terminators
Hash eda8ddfab6714870314cc9f63608306c
f9344c9c77bac6e18cac1fcce50555e59d9a8d6e
963ed69e516f812019a114f0d20b7cf14d642fe316107f43c736b7537d6b088d
GET /widgets/v1/version.js?cb=cb__utl_cb_share_1701461845513383 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Cookie: utl_id2=33842310219; utl_dat="CMiknbjCMRAAIMj158DCMSjI9efAwjEwANbxv4BTEXxG/y+Fp88qJDw="
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 20:17:20 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Wed, 15 Nov 2023 14:47:05 GMT
Cache-Control: no-cache,no-store,max-age=0,must-revalidate
Pragma: no-cache
Set-Cookie: utl_id2=33842310219; Expires=Sun, 30 Nov 2025 20:17:20 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
utl_dat="CMiknbjCMRAAIMj158DCMSjI9efAwjEwANbxv4BTEXxG/y+Fp88qJDw="; Expires=Sun, 30 Nov 2025 20:17:20 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
Access-Control-Allow-Origin: *
Content-Encoding: gzip
w.uptolike.com/widgets/v1/uptolike.js
95.163.114.203200 OK 8.3 kB URL GET HTTP/1.1 w.uptolike.com/widgets/v1/uptolike.js
IP 95.163.114.203:80
ASN #12695 LLC Digital Network
File type ASCII text, with very long lines (565)
Hash 2784c76248e26562bcc47801da0c2b46
17db15fa5f7c7e4d5001bcef26add495b5dd6e3e
c23f13dc75521d634c0f19c8566969275e9e56cd3de9bb6652e38923d4ac99d2
GET /widgets/v1/uptolike.js HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 20:17:20 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: utl_id2=33842310268; Expires=Sun, 30 Nov 2025 20:17:20 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
utl_dat="CNymnbjCMRAAINz358DCMSjc9+fAwjEwACzfrxBdX1fsfrlNORmvmeg="; Expires=Sun, 30 Nov 2025 20:17:20 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
Cache-Control: max-age=1800
P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
Expires: Fri, 01 Dec 2023 20:47:20 GMT
Content-Encoding: gzip
www.acint.net/aci.js
193.3.184.7200 OK 8.4 kB IP 193.3.184.7:443
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type ASCII text, with very long lines (29850), with no line terminators
Hash 9239f597ae9b466107dd7fb78bfde2a9
065a28483a3dcad60d733f8c9d37dcda558bc875
7690d3062bd046ac399799ef3877d7c54e0808f570f51265fe1ead785339424b
GET /aci.js HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:20 GMT
content-type: application/x-javascript
content-length: 8383
last-modified: Wed, 22 Nov 2023 15:43:50 GMT
etag: "655e21b6-20bf"
content-encoding: gzip
expires: Sat, 02 Dec 2023 08:17:20 GMT
cache-control: max-age=43200
X-Firefox-Spdy: h2
www.acint.net/pxl/1?dp=16&id=10520.432887.161587639.0.0.0&sid=656a3f55-7f3b-646e-wjgg-o6a7vicrkqji&ref=http%3A%2F%2Fkraska.biz%2F&r=1701461846
193.3.184.7200 OK 43 B URL GET HTTP/2 www.acint.net/pxl/1?dp=16&id=10520.432887.161587639.0.0.0&sid=656a3f55-7f3b-646e-wjgg-o6a7vicrkqji&ref=http%3A%2F%2Fkraska.biz%2F&r=1701461846
IP 193.3.184.7:443
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/1?dp=16&id=10520.432887.161587639.0.0.0&sid=656a3f55-7f3b-646e-wjgg-o6a7vicrkqji&ref=http%3A%2F%2Fkraska.biz%2F&r=1701461846 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:20 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=fwAAAWVqP1CxgAcTqskcAkf4qQCnRonOeGvGQLW9gGYt9tOp; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A10520%2C%22sc%22%3A0%2C%22pl%22%3A432887%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=656a3f55-7f3b-646e-wjgg-o6a7vicrkqji&ref=http%3A%2F%2Fkraska.biz%2F&r=1701461846
193.3.184.7200 OK 43 B URL GET HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A10520%2C%22sc%22%3A0%2C%22pl%22%3A432887%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=656a3f55-7f3b-646e-wjgg-o6a7vicrkqji&ref=http%3A%2F%2Fkraska.biz%2F&r=1701461846
IP 193.3.184.7:443
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A10520%2C%22sc%22%3A0%2C%22pl%22%3A432887%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=656a3f55-7f3b-646e-wjgg-o6a7vicrkqji&ref=http%3A%2F%2Fkraska.biz%2F&r=1701461846 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:20 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=fwAAAWVqP1CxVwcU2rxGAumAJS1xzFWMFUvBDJoG2ywEG7na; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A10520%2C%22sc%22%3A0%2C%22pl%22%3A432887%2C%22ev%22%3A%22loadFree%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=656a3f55-7f3b-646e-wjgg-o6a7vicrkqji&ref=http%3A%2F%2Fkraska.biz%2F&r=1701461846
193.3.184.7200 OK 43 B URL GET HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A10520%2C%22sc%22%3A0%2C%22pl%22%3A432887%2C%22ev%22%3A%22loadFree%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=656a3f55-7f3b-646e-wjgg-o6a7vicrkqji&ref=http%3A%2F%2Fkraska.biz%2F&r=1701461846
IP 193.3.184.7:443
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A10520%2C%22sc%22%3A0%2C%22pl%22%3A432887%2C%22ev%22%3A%22loadFree%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=656a3f55-7f3b-646e-wjgg-o6a7vicrkqji&ref=http%3A%2F%2Fkraska.biz%2F&r=1701461846 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:20 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=fwAAAWVqP1CxfAcVjfJ8AncXYqmBmI3jLWnfcCphovps08JS; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A10520%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1491%7D&sid=656a3f55-7f3b-646e-wjgg-o6a7vicrkqji&ref=http%3A%2F%2Fkraska.biz%2F&r=1701461846
193.3.184.7200 OK 43 B URL GET HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A10520%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1491%7D&sid=656a3f55-7f3b-646e-wjgg-o6a7vicrkqji&ref=http%3A%2F%2Fkraska.biz%2F&r=1701461846
IP 193.3.184.7:443
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A10520%2C%22sc%22%3A0%2C%22pl%22%3A0%2C%22ev%22%3A%22run%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A1491%7D&sid=656a3f55-7f3b-646e-wjgg-o6a7vicrkqji&ref=http%3A%2F%2Fkraska.biz%2F&r=1701461846 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:20 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
kraska.biz/wp-content/themes/Calve/images/sidebar-tab.png
87.118.118.43200 OK 160 B URL GET HTTP/1.1 kraska.biz/wp-content/themes/Calve/images/sidebar-tab.png
IP 87.118.118.43:80
File type PNG image data, 1 x 32, 8-bit/color RGB, non-interlaced\012- data
Hash 24c1a73ffc99cf2ad1b4386ebef47dba
d80e40ab474a6957bcbbceefba943d393805e763
b9787a27fcff30453ae896ca0f588147f4c69645e8192bd801cba2e9891f74e1
GET /wp-content/themes/Calve/images/sidebar-tab.png HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/wp-content/themes/Calve/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Last-Modified: Wed, 18 Sep 2013 20:48:24 GMT
ETag: "a0-4e6ae8ef59600"
Accept-Ranges: bytes
Content-Length: 160
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
kraska.biz/wp-content/themes/Calve/images/sidebar-line.png
87.118.118.43200 OK 133 B URL GET HTTP/1.1 kraska.biz/wp-content/themes/Calve/images/sidebar-line.png
IP 87.118.118.43:80
File type PNG image data, 4 x 1, 8-bit/color RGB, non-interlaced\012- data
Hash cd4558077ce981aa4a44918b920b9850
fb02ff58fe28b849c8aa408a9611be151458f397
156e9d3ca82d935fcb4c4d4aa33d27757dad0b85181739ff46a443256ad1120d
GET /wp-content/themes/Calve/images/sidebar-line.png HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/wp-content/themes/Calve/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:20 GMT
Server: Apache
Last-Modified: Wed, 18 Sep 2013 20:48:24 GMT
ETag: "85-4e6ae8ef59600"
Accept-Ranges: bytes
Content-Length: 133
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
ssp-rtb.sape.ru/ymcode?callback=sapeRTB_656a3f559_66447758
193.3.184.215 56 B URL GET ssp-rtb.sape.ru/ymcode?callback=sapeRTB_656a3f559_66447758
IP 193.3.184.215:0
Certificate IssuerLet's Encrypt
Subject*.sape.ru
FingerprintF9:61:5C:64:81:FD:57:C2:4A:BD:6B:12:D4:7E:02:5E:83:8E:3E:40
ValiditySun, 08 Oct 2023 01:41:50 GMT - Sat, 06 Jan 2024 01:41:49 GMT
File type ASCII text, with no line terminators
Hash 6138d75b3b4eebf8dbe5dbaf13ab2cd8
964c9589d675dd119ae581b13eca010a108af3ca
783e9acb49c6d506f1f4b44aa70a0f96dfc727cd21752f706af28bdc43131ac5
GET /ymcode?callback=sapeRTB_656a3f559_66447758 HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 01 Dec 2023 20:17:20 GMT
Content-Type: text/html
Content-Length: 56
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
X-YaRequestId: 3a0984dac89c44b898029fa86c205a67
X-YaTraceId: 81e41ecbd7f24e14bdc8ba7b7280b32a
X-YaSpanId: 930cd47e6e98b3ef
Content-Encoding: gzip
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
ssp-rtb.sape.ru/data/?callback=sapeRTB_656a3f559_27813801&srtbid=10520&scids=161587639&sx=1280&sy=1024&ref=&u=http%3A%2F%2Fkraska.biz%2F&allimps=1&fl=0&v=3&tz=%2B00%3A00
193.3.184.215200 OK 50 B URL GET HTTP/1.1 ssp-rtb.sape.ru/data/?callback=sapeRTB_656a3f559_27813801&srtbid=10520&scids=161587639&sx=1280&sy=1024&ref=&u=http%3A%2F%2Fkraska.biz%2F&allimps=1&fl=0&v=3&tz=%2B00%3A00
IP 193.3.184.215:443
Certificate IssuerLet's Encrypt
Subject*.sape.ru
FingerprintF9:61:5C:64:81:FD:57:C2:4A:BD:6B:12:D4:7E:02:5E:83:8E:3E:40
ValiditySun, 08 Oct 2023 01:41:50 GMT - Sat, 06 Jan 2024 01:41:49 GMT
File type ASCII text, with no line terminators
Hash c1d46e352c14948cdf1c76a285a65f23
496b1f10d21f400ef5b19ad627c175c5fe2fae27
92058b84ec7918937438a747b3198b6c1203891cc602dcc51b28d23ed53c6d31
GET /data/?callback=sapeRTB_656a3f559_27813801&srtbid=10520&scids=161587639&sx=1280&sy=1024&ref=&u=http%3A%2F%2Fkraska.biz%2F&allimps=1&fl=0&v=3&tz=%2B00%3A00 HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 01 Dec 2023 20:17:20 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 50
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
X-YaRequestId: dd0d755e445e41079af66e6effa52f7b
X-YaSpanId: c573f38fbcbee2f9
X-YaTraceId: 57db916979df436fbff3fe1a7b898c8a
Content-Encoding: gzip
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=CkIDHWVqP1ASAwAcYdsZAmVpvajZ6NDAiYzzcghJBVubG5ch; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
www.acint.net/hit/?v=0.6.0&uid=f1db2147-0f6c-48f6-bd1a-5b245b919865&dp=14&tz=%2B00%3A00&nc=145683&u=http%3A%2F%2Fkraska.biz%2F&r=&rs=1280x1024&t=%D0%9B%D0%B0%D0%BA%D0%BE-%D0%BA%D1%80%D0%B0%D1%81%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%BC%D0%B0%D1%82%D0%B5%D1%80%D0%B8%D0%B0%D0%BB%D1%8B%20-%20%D0%BF%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%B8%20%D0%BE%D0%B1%D0%BE%D1%80%D1%83%D0%B4%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5&oE=1&oP=1&dT=2023-12-01T20%3A17%3A25.991&fu=48354af8-9eb7-4b95-bb56-97c03ece2df4
193.3.184.7200 OK 43 B URL GET HTTP/2 www.acint.net/hit/?v=0.6.0&uid=f1db2147-0f6c-48f6-bd1a-5b245b919865&dp=14&tz=%2B00%3A00&nc=145683&u=http%3A%2F%2Fkraska.biz%2F&r=&rs=1280x1024&t=%D0%9B%D0%B0%D0%BA%D0%BE-%D0%BA%D1%80%D0%B0%D1%81%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%BC%D0%B0%D1%82%D0%B5%D1%80%D0%B8%D0%B0%D0%BB%D1%8B%20-%20%D0%BF%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%B8%20%D0%BE%D0%B1%D0%BE%D1%80%D1%83%D0%B4%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5&oE=1&oP=1&dT=2023-12-01T20%3A17%3A25.991&fu=48354af8-9eb7-4b95-bb56-97c03ece2df4
IP 193.3.184.7:443
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hit/?v=0.6.0&uid=f1db2147-0f6c-48f6-bd1a-5b245b919865&dp=14&tz=%2B00%3A00&nc=145683&u=http%3A%2F%2Fkraska.biz%2F&r=&rs=1280x1024&t=%D0%9B%D0%B0%D0%BA%D0%BE-%D0%BA%D1%80%D0%B0%D1%81%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%BC%D0%B0%D1%82%D0%B5%D1%80%D0%B8%D0%B0%D0%BB%D1%8B%20-%20%D0%BF%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%B8%20%D0%BE%D0%B1%D0%BE%D1%80%D1%83%D0%B4%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5&oE=1&oP=1&dT=2023-12-01T20%3A17%3A25.991&fu=48354af8-9eb7-4b95-bb56-97c03ece2df4 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:21 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/pxl/3?dp=16&id=10520.432887.161587639.0.0.0&sid=656a3f55-7f3b-646e-wjgg-o6a7vicrkqji&ref=http%3A%2F%2Fkraska.biz%2F&r=1701461846
193.3.184.7200 OK 43 B URL GET HTTP/2 www.acint.net/pxl/3?dp=16&id=10520.432887.161587639.0.0.0&sid=656a3f55-7f3b-646e-wjgg-o6a7vicrkqji&ref=http%3A%2F%2Fkraska.biz%2F&r=1701461846
IP 193.3.184.7:443
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pxl/3?dp=16&id=10520.432887.161587639.0.0.0&sid=656a3f55-7f3b-646e-wjgg-o6a7vicrkqji&ref=http%3A%2F%2Fkraska.biz%2F&r=1701461846 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; cSyncDp14v6=1701461841; cSyncDp17v2=1701461841; cSyncDp45v5=1701461841; cSyncDp53v5=1701461841; cSyncDp62v2=1701461841; cSyncDp67v3=1701461841; cSyncDp68v2=1701461841; cSyncDp71v2=1701461841; cSyncDp80v2=1701461841; cSyncDp85v2=1701461841; cSyncDp95v4=1701461841; cSyncDp98v3=1701461841; cSyncDp104v2=1701461841; cSyncDp107v2=1701461841; cSyncDp110v3=1701461841; cSyncDp125v4=1701461841; cSyncDp126v2=1701461841; cSyncDp127v2=1701461841; cSyncDp129v2=1701461841; cSyncDp136v3=1701461841; cSyncDp146v2=1701461841; cSyncDp148v2=1701461841; cSyncDp149v3=1701461841; cSyncDp151v2=1701461841; cSyncDp251v1=1701461841; cSyncDp186v2=1701461841; cSyncDp217v2=1701461841; cSyncDp221v2=1701461841; cSyncDp235v2=1701461841; cSyncDp239v2=1701461841; cSyncDp243v2=1701461841; cSyncDp260v2=1701461841; cSyncDp244v2=1701461841; cSyncDp248v2=1701461841; cSyncDp261v1=1701461841
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:21 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A10520%2C%22sc%22%3A0%2C%22pl%22%3A432887%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=656a3f55-7f3b-646e-wjgg-o6a7vicrkqji&ref=http%3A%2F%2Fkraska.biz%2F&r=1701461846
193.3.184.7200 OK 43 B URL GET HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A10520%2C%22sc%22%3A0%2C%22pl%22%3A432887%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=656a3f55-7f3b-646e-wjgg-o6a7vicrkqji&ref=http%3A%2F%2Fkraska.biz%2F&r=1701461846
IP 193.3.184.7:443
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A10520%2C%22sc%22%3A0%2C%22pl%22%3A432887%2C%22ev%22%3A%22vis0%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=656a3f55-7f3b-646e-wjgg-o6a7vicrkqji&ref=http%3A%2F%2Fkraska.biz%2F&r=1701461846 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; cSyncDp14v6=1701461841; cSyncDp17v2=1701461841; cSyncDp45v5=1701461841; cSyncDp53v5=1701461841; cSyncDp62v2=1701461841; cSyncDp67v3=1701461841; cSyncDp68v2=1701461841; cSyncDp71v2=1701461841; cSyncDp80v2=1701461841; cSyncDp85v2=1701461841; cSyncDp95v4=1701461841; cSyncDp98v3=1701461841; cSyncDp104v2=1701461841; cSyncDp107v2=1701461841; cSyncDp110v3=1701461841; cSyncDp125v4=1701461841; cSyncDp126v2=1701461841; cSyncDp127v2=1701461841; cSyncDp129v2=1701461841; cSyncDp136v3=1701461841; cSyncDp146v2=1701461841; cSyncDp148v2=1701461841; cSyncDp149v3=1701461841; cSyncDp151v2=1701461841; cSyncDp251v1=1701461841; cSyncDp186v2=1701461841; cSyncDp217v2=1701461841; cSyncDp221v2=1701461841; cSyncDp235v2=1701461841; cSyncDp239v2=1701461841; cSyncDp243v2=1701461841; cSyncDp260v2=1701461841; cSyncDp244v2=1701461841; cSyncDp248v2=1701461841; cSyncDp261v1=1701461841
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:21 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A10520%2C%22sc%22%3A0%2C%22pl%22%3A432887%2C%22ev%22%3A%22stub%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=656a3f55-7f3b-646e-wjgg-o6a7vicrkqji&ref=http%3A%2F%2Fkraska.biz%2F&r=1701461846
193.3.184.7200 OK 43 B URL GET HTTP/2 www.acint.net/rtbw/1?dp=14&cd=%7B%22st%22%3A10520%2C%22sc%22%3A0%2C%22pl%22%3A432887%2C%22ev%22%3A%22stub%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=656a3f55-7f3b-646e-wjgg-o6a7vicrkqji&ref=http%3A%2F%2Fkraska.biz%2F&r=1701461846
IP 193.3.184.7:443
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /rtbw/1?dp=14&cd=%7B%22st%22%3A10520%2C%22sc%22%3A0%2C%22pl%22%3A432887%2C%22ev%22%3A%22stub%22%2C%22et%22%3A%22srtb%22%2C%22ec%22%3A0%7D&sid=656a3f55-7f3b-646e-wjgg-o6a7vicrkqji&ref=http%3A%2F%2Fkraska.biz%2F&r=1701461846 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; cSyncDp14v6=1701461841; cSyncDp17v2=1701461841; cSyncDp45v5=1701461841; cSyncDp53v5=1701461841; cSyncDp62v2=1701461841; cSyncDp67v3=1701461841; cSyncDp68v2=1701461841; cSyncDp71v2=1701461841; cSyncDp80v2=1701461841; cSyncDp85v2=1701461841; cSyncDp95v4=1701461841; cSyncDp98v3=1701461841; cSyncDp104v2=1701461841; cSyncDp107v2=1701461841; cSyncDp110v3=1701461841; cSyncDp125v4=1701461841; cSyncDp126v2=1701461841; cSyncDp127v2=1701461841; cSyncDp129v2=1701461841; cSyncDp136v3=1701461841; cSyncDp146v2=1701461841; cSyncDp148v2=1701461841; cSyncDp149v3=1701461841; cSyncDp151v2=1701461841; cSyncDp251v1=1701461841; cSyncDp186v2=1701461841; cSyncDp217v2=1701461841; cSyncDp221v2=1701461841; cSyncDp235v2=1701461841; cSyncDp239v2=1701461841; cSyncDp243v2=1701461841; cSyncDp260v2=1701461841; cSyncDp244v2=1701461841; cSyncDp248v2=1701461841; cSyncDp261v1=1701461841
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:21 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/oci.js?t=1701461845996
193.3.184.7200 OK 15 kB URL GET HTTP/2 www.acint.net/oci.js?t=1701461845996
IP 193.3.184.7:443
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash a0d00d8dd440a2c0fa1c934a84953829
dc1769b729727e3e6109557ff4c9e2057d5c2d0f
7a3cdea3b95638619a1ec05da77e1b568e716cefcfc21ed0e28242e5fd4e6139
GET /oci.js?t=1701461845996 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:21 GMT
content-type: application/x-javascript
last-modified: Sat, 28 Oct 2023 15:24:39 GMT
etag: W/"653d27b7-7dac"
content-encoding: gzip
X-Firefox-Spdy: h2
www.youtube.com/embed/LgviGeHyRzQ
142.250.74.142200 OK 55 kB URL GET HTTP/2 www.youtube.com/embed/LgviGeHyRzQ
IP 142.250.74.142:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58048)
Hash bdb77ad550302466f144277aac05e49b
9948c9dd7eaa72a6f81d674b2ce47e5b473e148d
f085931014f9504bf82845cac280b81368d3cfabf98b7f82ce9036f1824310c2
GET /embed/LgviGeHyRzQ HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 01 Dec 2023 20:17:20 GMT
strict-transport-security: max-age=31536000
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
cross-origin-resource-policy: cross-origin
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=Dndh2OVMq7k; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=L2sJ8-AEJ2w; Domain=.youtube.com; Expires=Wed, 29-May-2024 20:17:20 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxIEEgAgaQ%3D%3D; Domain=.youtube.com; Expires=Wed, 29-May-2024 20:17:20 GMT; Path=/; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+803; expires=Sun, 30-Nov-2025 20:17:20 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/31e0b6d9/www-player.css
142.250.74.142200 OK 49 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/www-player.css
IP 142.250.74.142:443
Requested by https://www.youtube.com/embed/u64SGL1B8vA
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 18f844aa571ef66c0f165fe56a2f0821
849c61720b741db03f689c461e8e4eedd3c4ce21
436743ad0889ad9399a1f33edb65d8bf1c71cfbce1b0fce549769e7705c9ceec
GET /s/player/31e0b6d9/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/u64SGL1B8vA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 48920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 12:53:39 GMT
expires: Fri, 29 Nov 2024 12:53:39 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 113022
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
w.uptolike.com/widgets/v1/widgetsModule.js?v=622e27e5349ec1bb07f4f36fc56e7c84
95.163.114.203200 OK 42 kB URL GET HTTP/1.1 w.uptolike.com/widgets/v1/widgetsModule.js?v=622e27e5349ec1bb07f4f36fc56e7c84
IP 95.163.114.203:443
ASN #12695 LLC Digital Network
Certificate IssuerLet's Encrypt
Subjectuptolike.com
Fingerprint05:EC:E2:F5:E1:CC:42:09:42:DC:90:8A:CF:B4:9B:7C:0C:2F:98:68
ValiditySat, 28 Oct 2023 04:43:41 GMT - Fri, 26 Jan 2024 04:43:40 GMT
File type ASCII text, with very long lines (783)
Hash 8a8d57ad82288ed393cec44f92b6e950
5c96b72480a1486533441494432b388113f94c98
624108d126aaea46f83bb807588d0fd9a1ad3ce8b237577f70cd5ee6232cbfb4
GET /widgets/v1/widgetsModule.js?v=622e27e5349ec1bb07f4f36fc56e7c84 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Cookie: utl_id2=33842310219; utl_dat="CMiknbjCMRAAIMj158DCMSjI9efAwjEwANbxv4BTEXxG/y+Fp88qJDw="
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 20:17:21 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=1800
Expires: Fri, 01 Dec 2023 20:47:21 GMT
Content-Encoding: gzip
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
142.250.74.142200 OK 16 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
IP 142.250.74.142:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (3391)
Hash 4b993df6aaec92ba17cc4d526ad2e4bd
a0b696788d5d621280e4f642b4c66875d40870cb
f21a803f0b7f63109cd608bfbe9769a3dc2e2a17c8e885826529d3981d15d313
GET /s/player/31e0b6d9/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/OPkkej6ouIg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 16506
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:15 GMT
expires: Fri, 29 Nov 2024 04:32:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 143106
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
142.250.74.142200 OK 16 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
IP 142.250.74.142:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (3391)
Hash 4b993df6aaec92ba17cc4d526ad2e4bd
a0b696788d5d621280e4f642b4c66875d40870cb
f21a803f0b7f63109cd608bfbe9769a3dc2e2a17c8e885826529d3981d15d313
GET /s/player/31e0b6d9/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/LgviGeHyRzQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 16506
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:15 GMT
expires: Fri, 29 Nov 2024 04:32:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 143106
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
142.250.74.142200 OK 98 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
IP 142.250.74.142:443
Requested by https://www.youtube.com/embed/LgviGeHyRzQ
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (682)
Hash 24cd2bdc1dd00086a1efbc664060bb49
064027f89f2e8f22be774e7468f7ae4ab79efcbc
4d453a47ad0d1b30a7292b6f712d8645db141ed6adea69b8e7d802f8022365fd
GET /s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/u64SGL1B8vA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 98499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:12 GMT
expires: Fri, 29 Nov 2024 04:32:12 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 143109
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
142.250.74.142200 OK 98 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
IP 142.250.74.142:443
Requested by https://www.youtube.com/embed/LgviGeHyRzQ
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (682)
Hash 24cd2bdc1dd00086a1efbc664060bb49
064027f89f2e8f22be774e7468f7ae4ab79efcbc
4d453a47ad0d1b30a7292b6f712d8645db141ed6adea69b8e7d802f8022365fd
GET /s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/OPkkej6ouIg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 98499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:12 GMT
expires: Fri, 29 Nov 2024 04:32:12 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 143109
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
shareup.ru/social.js?r=&ref_js=http%3A%2F%2Fkraska.biz%2F&s=1280*1024&wo=false&st=9&ud=&l=en&cn=null&cwp=0&title=%D0%9B%D0%B0%D0%BA%D0%BE-%D0%BA%D1%80%D0%B0%D1%81%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%BC%D0%B0%D1%82%D0%B5%D1%80%D0%B8%D0%B0%D0%BB%D1%8B%20-%20%D0%BF%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%B8%20%D0%BE%D0%B1%D0%BE%D1%80%D1%83%D0%B4%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5
95.216.22.182 755 B URL GET shareup.ru/social.js?r=&ref_js=http%3A%2F%2Fkraska.biz%2F&s=1280*1024&wo=false&st=9&ud=&l=en&cn=null&cwp=0&title=%D0%9B%D0%B0%D0%BA%D0%BE-%D0%BA%D1%80%D0%B0%D1%81%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%BC%D0%B0%D1%82%D0%B5%D1%80%D0%B8%D0%B0%D0%BB%D1%8B%20-%20%D0%BF%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%B8%20%D0%BE%D0%B1%D0%BE%D1%80%D1%83%D0%B4%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5
IP 95.216.22.182:0
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectshareup.ru
FingerprintE8:77:62:54:2C:64:11:93:7D:B3:A1:F3:B6:F7:A5:6E:B1:A8:3E:59
ValidityFri, 10 Nov 2023 02:11:11 GMT - Thu, 08 Feb 2024 02:11:10 GMT
File type ASCII text, with very long lines (326)
Hash edc225535aa348cbcec40c1560d03046
248fd81e0b02a159eec972cd54c41511a8ac04f6
15562e6cc17dc3f0ed6ed10bc403146b71c821da6acaa274f9d0909f4a6266a4
GET /social.js?r=&ref_js=http%3A%2F%2Fkraska.biz%2F&s=1280*1024&wo=false&st=9&ud=&l=en&cn=null&cwp=0&title=%D0%9B%D0%B0%D0%BA%D0%BE-%D0%BA%D1%80%D0%B0%D1%81%D0%BE%D1%87%D0%BD%D1%8B%D0%B5%20%D0%BC%D0%B0%D1%82%D0%B5%D1%80%D0%B8%D0%B0%D0%BB%D1%8B%20-%20%D0%BF%D1%80%D0%BE%D0%B8%D0%B7%D0%B2%D0%BE%D0%B4%D1%81%D1%82%D0%B2%D0%BE%20%D0%B8%20%D0%BE%D0%B1%D0%BE%D1%80%D1%83%D0%B4%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5 HTTP/1.1
Host: shareup.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 20:17:21 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 755
Connection: keep-alive
Keep-Alive: timeout=60
Heads: s1:4; s2:1; or:http://kraska.biz/; our:1
Set-Cookie: mikajeru=1; expires=Tue, 30-Jan-2024 20:17:21 GMT; Max-Age=5184000; path=/; domain=.shareup.ru
Vary: Accept-Encoding
Content-Encoding: gzip
www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
142.250.74.142200 OK 98 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
IP 142.250.74.142:443
Requested by https://www.youtube.com/embed/LgviGeHyRzQ
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (682)
Hash 24cd2bdc1dd00086a1efbc664060bb49
064027f89f2e8f22be774e7468f7ae4ab79efcbc
4d453a47ad0d1b30a7292b6f712d8645db141ed6adea69b8e7d802f8022365fd
GET /s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/LgviGeHyRzQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 98499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:12 GMT
expires: Fri, 29 Nov 2024 04:32:12 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 143109
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
193.3.184.215302 Moved Temporarily 142 B URL GET HTTP/1.1 ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
IP 193.3.184.215:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.sape.ru
FingerprintF9:61:5C:64:81:FD:57:C2:4A:BD:6B:12:D4:7E:02:5E:83:8E:3E:40
ValiditySun, 08 Oct 2023 01:41:50 GMT - Sat, 06 Jan 2024 01:41:49 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Cookie: sspuid=CkIDHWVqP1ASAwAcYdsZAmVpvajZ6NDAiYzzcghJBVubG5ch
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Fri, 01 Dec 2023 20:17:21 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/match?dp=14&euid=1D03420A503F6A651C0003120219DB61
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.67200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.67:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 11:28:20 GMT
expires: Fri, 29 Nov 2024 11:28:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 118141
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.67200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.67:443
Requested by https://www.youtube.com/embed/LgviGeHyRzQ
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 10:04:07 GMT
expires: Fri, 29 Nov 2024 10:04:07 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 123194
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.67200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.67:443
Requested by https://www.youtube.com/embed/LgviGeHyRzQ
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 10:04:07 GMT
expires: Fri, 29 Nov 2024 10:04:07 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 123194
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.67200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.67:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 11:28:20 GMT
expires: Fri, 29 Nov 2024 11:28:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 118141
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.67200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.67:443
Requested by https://www.youtube.com/embed/LgviGeHyRzQ
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 10:04:07 GMT
expires: Fri, 29 Nov 2024 10:04:07 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 123194
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.67200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.67:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 11:28:20 GMT
expires: Fri, 29 Nov 2024 11:28:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 118141
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/embed/OPkkej6ouIg
142.250.74.142200 OK 40 kB URL GET HTTP/2 www.youtube.com/embed/OPkkej6ouIg
IP 142.250.74.142:443
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58002)
Hash e2c88d2850a545aefebb3d50b3e3a4e3
e5e15d5ba0484184099c4ad342e1434536caddf3
2b5dafd9afd21338701a6a2a7979b144ed38972f74b6b065966310a8a2276476
GET /embed/OPkkej6ouIg HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 01 Dec 2023 20:17:20 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
content-security-policy-report-only: base-uri 'self';default-src 'self' https: blob:;font-src https: data:;img-src https: data: android-webview-video-poster:;media-src blob: https:;object-src 'none';script-src 'nonce-SqI3KzZ93JaIlp48AhWE_A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';style-src https: 'unsafe-inline';report-uri /cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=3CUSf0JlCzk; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=kulq39RgnB8; Domain=.youtube.com; Expires=Wed, 29-May-2024 20:17:20 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxICEgA%3D; Domain=.youtube.com; Expires=Wed, 29-May-2024 20:17:20 GMT; Path=/; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+182; expires=Sun, 30-Nov-2025 20:17:20 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dm-eu.hybrid.ai/match?id=106&vid=0100007F503F6A65160792B102553227
37.230.131.16204 No Content 0 B URL GET HTTP/2 dm-eu.hybrid.ai/match?id=106&vid=0100007F503F6A65160792B102553227
IP 37.230.131.16:443
ASN #58272 LeaderTelecom B.V.
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerSectigo Limited
Subject*.hybrid.ai
Fingerprint40:F9:88:C5:EF:2B:26:9C:61:DC:CC:ED:B1:67:03:F4:E2:CC:B7:C8
ValidityThu, 14 Sep 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?id=106&vid=0100007F503F6A65160792B102553227 HTTP/1.1
Host: dm-eu.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 01 Dec 2023 20:17:21 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
set-cookie: vid=4316828a159a20282143; Expires=Sat, 30 Nov 2024 20:17:21 GMT; Domain=.hybrid.ai; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 566
x-xss-protection: 1; mode=block
access-control-allow-origin: https://www.acint.net
access-control-allow-credentials: true
server: Hybrid Web Server
X-Firefox-Spdy: h2
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
142.250.74.142200 OK 784 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
IP 142.250.74.142:443
Requested by https://www.youtube.com/embed/u64SGL1B8vA
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (555)
Size 784 kB (784263 bytes)
Hash 101fe6d09a2a65ba52bbafa55f73d316
46b1b5f64db74e841d0f606543980dea804707d8
ddc70bebc8a0e4ae5b13a5f8409693a3e88aa4b4415a75f632f11d0f0c423457
GET /s/player/31e0b6d9/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/u64SGL1B8vA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 784263
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:15 GMT
expires: Fri, 29 Nov 2024 04:32:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 143106
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
w.uptolike.com/widgets/v1/share-counter.html?622e27e5349ec1bb07f4f36fc56e7c84
95.163.114.203200 OK 4.4 kB URL GET HTTP/1.1 w.uptolike.com/widgets/v1/share-counter.html?622e27e5349ec1bb07f4f36fc56e7c84
IP 95.163.114.203:443
ASN #12695 LLC Digital Network
Certificate IssuerLet's Encrypt
Subjectuptolike.com
Fingerprint05:EC:E2:F5:E1:CC:42:09:42:DC:90:8A:CF:B4:9B:7C:0C:2F:98:68
ValiditySat, 28 Oct 2023 04:43:41 GMT - Fri, 26 Jan 2024 04:43:40 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (585)
Hash aad7f2e781d3d7186c012ae563148344
92f817d5afe4b1ef26151a615f6081601b67af29
97ce3fd5f5eee27ebe4513c4731c528cd845b819e865c2c487e23e6926df3ba8
GET /widgets/v1/share-counter.html?622e27e5349ec1bb07f4f36fc56e7c84 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Cookie: utl_id2=33842310219; utl_dat="CMiknbjCMRAAIMj158DCMSjI9efAwjEwANbxv4BTEXxG/y+Fp88qJDw="
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 20:17:21 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=1800
Expires: Fri, 01 Dec 2023 20:47:21 GMT
Content-Encoding: gzip
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
142.250.74.142200 OK 784 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
IP 142.250.74.142:443
Requested by https://www.youtube.com/embed/u64SGL1B8vA
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (555)
Size 784 kB (784263 bytes)
Hash 101fe6d09a2a65ba52bbafa55f73d316
46b1b5f64db74e841d0f606543980dea804707d8
ddc70bebc8a0e4ae5b13a5f8409693a3e88aa4b4415a75f632f11d0f0c423457
GET /s/player/31e0b6d9/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/OPkkej6ouIg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 784263
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:15 GMT
expires: Fri, 29 Nov 2024 04:32:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 143106
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
142.250.74.142200 OK 784 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
IP 142.250.74.142:443
Requested by https://www.youtube.com/embed/u64SGL1B8vA
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (555)
Size 784 kB (784263 bytes)
Hash 101fe6d09a2a65ba52bbafa55f73d316
46b1b5f64db74e841d0f606543980dea804707d8
ddc70bebc8a0e4ae5b13a5f8409693a3e88aa4b4415a75f632f11d0f0c423457
GET /s/player/31e0b6d9/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/LgviGeHyRzQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 784263
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:15 GMT
expires: Fri, 29 Nov 2024 04:32:15 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 143106
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
sync.upravel.com/sape/sync
88.198.16.238302 Found 0 B URL GET HTTP/2 sync.upravel.com/sape/sync
IP 88.198.16.238:443
ASN #24940 Hetzner Online GmbH
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerGlobalSign nv-sa
Subject*.upravel.com
Fingerprint4C:ED:03:57:58:43:18:2C:CC:41:F3:3B:19:72:75:BD:29:C1:04:08
ValiditySat, 29 Apr 2023 07:48:21 GMT - Thu, 30 May 2024 07:48:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Fri, 01 Dec 2023 20:17:21 GMT
content-type: image/png
content-length: 0
location: https://sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
set-cookie: session_tptc=1701461841801;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
session_tptc-legacy=1701461841801;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
a.utraff.com/sync?ssp=8&id=0100007F503F6A65160792B102553227
172.64.98.14204 No Content 0 B URL GET HTTP/2 a.utraff.com/sync?ssp=8&id=0100007F503F6A65160792B102553227
IP 172.64.98.14:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerGoogle Trust Services LLC
Subjectutraff.com
Fingerprint65:F0:CB:A7:9C:1E:18:8C:D9:DE:5B:4C:46:9E:79:3E:78:F1:B0:CD
ValidityThu, 12 Oct 2023 03:40:45 GMT - Wed, 10 Jan 2024 03:40:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?ssp=8&id=0100007F503F6A65160792B102553227 HTTP/1.1
Host: a.utraff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 01 Dec 2023 20:17:21 GMT
content-type: text/plain
set-cookie: preutid=1; Expires=Sun, 31 Dec 2023 23:17:21 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/
preutid=1; Expires=Sun, 31 Dec 2023 23:17:21 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-expose-headers: Content-Length,Content-Range
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g2uAY92O1eKY2Vme9SQD86sQPHq%2Fwr87qKbJ20dFev6W78AiC7G2yaGQbOZ0FjF7cIl6yZtE76cOp0u4N4iwZd%2B6vbWJYsDSr3i2cBk0HbNcI9Hr6QvvQKvIEdOSEKI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82ee035f28604599-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
s.ccsyncuuid.net/match/5/?remote_uid=0100007F503F6A65160792B102553227
78.40.218.117302 Found 0 B URL GET HTTP/2 s.ccsyncuuid.net/match/5/?remote_uid=0100007F503F6A65160792B102553227
IP 78.40.218.117:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subjectccsyncuuid.net
Fingerprint05:93:D2:3F:39:41:DF:CE:18:E5:65:94:78:1D:8A:7F:24:58:17:98
ValidityMon, 13 Nov 2023 06:10:33 GMT - Sun, 11 Feb 2024 06:10:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/5/?remote_uid=0100007F503F6A65160792B102553227 HTTP/1.1
Host: s.ccsyncuuid.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Fri, 01 Dec 2023 20:17:22 GMT
content-length: 0
location: https://acint.net/match?dp=80&euid=sYQqU8n1dk4oWwFMuXId
set-cookie: jcsuuid=sYQqU8n1dk4oWwFMuXId; expires=Sat, 30 Nov 2024 20:17:22 GMT; domain=ccsyncuuid.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
w.uptolike.com/widgets/v1/impression.html?622e27e5349ec1bb07f4f36fc56e7c84
95.163.114.203200 OK 624 B URL GET HTTP/1.1 w.uptolike.com/widgets/v1/impression.html?622e27e5349ec1bb07f4f36fc56e7c84
IP 95.163.114.203:443
ASN #12695 LLC Digital Network
Certificate IssuerLet's Encrypt
Subjectuptolike.com
Fingerprint05:EC:E2:F5:E1:CC:42:09:42:DC:90:8A:CF:B4:9B:7C:0C:2F:98:68
ValiditySat, 28 Oct 2023 04:43:41 GMT - Fri, 26 Jan 2024 04:43:40 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (511)
Hash 16542324cd2eaf3768c55519eaf856ce
ce93dc8677e21093b31e45b645e82e5b64d5dc52
829aefc2561d1da1496d88af2e9fdcda7d002eb568e8b59a636aaf49de2751de
GET /widgets/v1/impression.html?622e27e5349ec1bb07f4f36fc56e7c84 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Cookie: utl_id2=33842310219; utl_dat="CMiknbjCMRAAIMj158DCMSjI9efAwjEwANbxv4BTEXxG/y+Fp88qJDw="
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 20:17:22 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=1800
Expires: Fri, 01 Dec 2023 20:47:22 GMT
Content-Encoding: gzip
match.new-programmatic.com/userbind?src=sape&id=0100007F503F6A65160792B102553227
217.65.2.150204 No Content 0 B URL GET HTTP/1.1 match.new-programmatic.com/userbind?src=sape&id=0100007F503F6A65160792B102553227
IP 217.65.2.150:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subjectad.ad-blast.ru
FingerprintF3:B7:15:BC:2F:A8:7D:5A:73:CB:BC:43:B8:4C:EA:11:17:2B:7A:34
ValiditySat, 07 Oct 2023 18:59:50 GMT - Fri, 05 Jan 2024 18:59:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=sape&id=0100007F503F6A65160792B102553227 HTTP/1.1
Host: match.new-programmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.22.1
Date: Fri, 01 Dec 2023 20:17:22 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
acint.net/match?dp=14&euid=1D03420A503F6A651C0003120219DB61
193.3.184.7200 OK 43 B URL GET HTTP/2 acint.net/match?dp=14&euid=1D03420A503F6A651C0003120219DB61
IP 193.3.184.7:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=14&euid=1D03420A503F6A651C0003120219DB61 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; cSyncDp14v6=1701461841; cSyncDp17v2=1701461841; cSyncDp45v5=1701461841; cSyncDp53v5=1701461841; cSyncDp62v2=1701461841; cSyncDp67v3=1701461841; cSyncDp68v2=1701461841; cSyncDp71v2=1701461841; cSyncDp80v2=1701461841; cSyncDp85v2=1701461841; cSyncDp95v4=1701461841; cSyncDp98v3=1701461841; cSyncDp104v2=1701461841; cSyncDp107v2=1701461841; cSyncDp110v3=1701461841; cSyncDp125v4=1701461841; cSyncDp126v2=1701461841; cSyncDp127v2=1701461841; cSyncDp129v2=1701461841; cSyncDp136v3=1701461841; cSyncDp146v2=1701461841; cSyncDp148v2=1701461841; cSyncDp149v3=1701461841; cSyncDp151v2=1701461841; cSyncDp251v1=1701461841; cSyncDp186v2=1701461841; cSyncDp217v2=1701461841; cSyncDp221v2=1701461841; cSyncDp235v2=1701461841; cSyncDp239v2=1701461841; cSyncDp243v2=1701461841; cSyncDp260v2=1701461841; cSyncDp244v2=1701461841; cSyncDp248v2=1701461841; cSyncDp261v1=1701461841
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sap1&uid=0100007F503F6A65160792B102553227
31.172.81.172302 Moved Temporarily 0 B URL GET HTTP/1.1 sync.bumlam.com/?src=sap1&uid=0100007F503F6A65160792B102553227
IP 31.172.81.172:443
ASN #44066 diva-e Datacenters GmbH
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.bumlam.com
Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0
ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&uid=0100007F503F6A65160792B102553227 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Fri, 01 Dec 2023 20:17:22 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiRhMjg1ZmI0OC05MDg2LTExZWUtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Thu, 26 Nov 2043 20:17:22 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync.bumlam.com/?src=sap1&s_data=CAIQARjS_qirBmIgMDEwMDAwN0Y1MDNGNkE2NTE2MDc5MkIxMDI1NTMyMjeiARCihftIkIYR7obgACWQwGR8
ETag: a285fb48-9086-11ee-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
pix.bumlam.com/sync/sape/check?sspuid=0100007F503F6A65160792B102553227
31.172.81.160302 Found 0 B URL GET HTTP/1.1 pix.bumlam.com/sync/sape/check?sspuid=0100007F503F6A65160792B102553227
IP 31.172.81.160:443
ASN #44066 diva-e Datacenters GmbH
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.bumlam.com
Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0
ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/sape/check?sspuid=0100007F503F6A65160792B102553227 HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 01 Dec 2023 20:17:22 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://sync.bumlam.com/?src=sape
sync.dmp.otm-r.com/match/sape?id=0100007F503F6A65160792B102553227
194.55.244.185204 No Content 0 B URL GET HTTP/2 sync.dmp.otm-r.com/match/sape?id=0100007F503F6A65160792B102553227
IP 194.55.244.185:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerGlobalSign nv-sa
Subject*.dmp.otm-r.com
FingerprintC6:A2:9D:82:0D:D1:C1:2D:A4:ED:7F:05:13:52:5B:94:6B:10:58:D6
ValidityMon, 19 Jun 2023 10:50:51 GMT - Sat, 20 Jul 2024 10:50:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=0100007F503F6A65160792B102553227 HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.23.2
date: Fri, 01 Dec 2023 20:17:22 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
match.ohmy.bid/cm?ssp=sape&redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D
167.235.14.51302 Found 0 B URL GET HTTP/2 match.ohmy.bid/cm?ssp=sape&redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D
IP 167.235.14.51:443
ASN #24940 Hetzner Online GmbH
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subjectmatch.ohmy.bid
Fingerprint9E:80:FE:F1:53:4B:43:82:19:E2:9C:5A:93:AF:43:96:5D:6C:7B:69
ValidityFri, 24 Nov 2023 20:06:51 GMT - Thu, 22 Feb 2024 20:06:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?ssp=sape&redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D HTTP/1.1
Host: match.ohmy.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Fri, 01 Dec 2023 20:17:22 GMT
content-length: 0
bidder: bid-11
location: https://www.acint.net/match?dp=217&euid=ae0f42f3-defd-4cde-a045-1f910c208bad
set-cookie: uid=ae0f42f3-defd-4cde-a045-1f910c208bad.656a3f52.56a4afbaf177a322; domain=.ohmy.bid; path=/; expires=Sun, 31-Dec-2023 20:17:22 GMT; SameSite=None; Secure;
access-control-allow-credentials: true
X-Firefox-Spdy: h2
nr.bidderstack.com/sape/cm?user_id=0100007F503F6A65160792B102553227
167.235.186.124302 Found 0 B URL GET HTTP/1.1 nr.bidderstack.com/sape/cm?user_id=0100007F503F6A65160792B102553227
IP 167.235.186.124:443
ASN #24940 Hetzner Online GmbH
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerGoDaddy.com, Inc.
Subject*.bidderstack.com
Fingerprint7A:83:29:BF:37:01:78:02:DF:C1:07:D8:A2:10:AB:0A:DD:11:66:B0
ValidityTue, 21 Nov 2023 08:57:57 GMT - Sun, 22 Dec 2024 08:57:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/cm?user_id=0100007F503F6A65160792B102553227 HTTP/1.1
Host: nr.bidderstack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 01 Dec 2023 20:17:22 GMT
Content-Length: 0
Connection: keep-alive
Location: /sape/cm?user_id=0100007F503F6A65160792B102553227&pupa=1
Set-Cookie: pupa=d6979f52-2616-aa83-4667-870fd419f06c; domain=.bidderstack.com; path=/; expires=Sat, 30-Nov-2024 20:17:22 GMT;
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
s.uuidksinc.net/match/396/?remote_uid=0100007F503F6A65160792B102553227
31.220.27.135302 Found 0 B URL GET HTTP/2 s.uuidksinc.net/match/396/?remote_uid=0100007F503F6A65160792B102553227
IP 31.220.27.135:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subjectuuidksinc.net
Fingerprint24:9D:6D:A2:89:55:7D:CD:A6:BD:59:A3:21:F2:65:41:A8:9D:38:99
ValidityThu, 09 Nov 2023 23:20:21 GMT - Wed, 07 Feb 2024 23:20:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/396/?remote_uid=0100007F503F6A65160792B102553227 HTTP/1.1
Host: s.uuidksinc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.23.2
date: Fri, 01 Dec 2023 20:17:22 GMT
content-length: 0
location: https://www.acint.net/match?dp=127&euid=ThF0egqPSzhOHPgj73cO
set-cookie: jcsuuid=ThF0egqPSzhOHPgj73cO; expires=Sat, 30 Nov 2024 20:17:22 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
sync.adspend.space/sape?uid=0100007F503F6A65160792B102553227
5.189.234.227204 No Content 0 B URL GET HTTP/2 sync.adspend.space/sape?uid=0100007F503F6A65160792B102553227
IP 5.189.234.227:443
ASN #50340 OOO Network of data-centers Selectel
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subjectadspend.space
Fingerprint25:A8:18:8F:99:5E:81:77:EE:CC:A2:7D:B9:A4:65:C6:29:9B:72:AF
ValidityMon, 27 Nov 2023 12:15:31 GMT - Sun, 25 Feb 2024 12:15:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape?uid=0100007F503F6A65160792B102553227 HTTP/1.1
Host: sync.adspend.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.22.1
date: Fri, 01 Dec 2023 20:17:22 GMT
X-Firefox-Spdy: h2
sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
88.198.16.238302 Found 0 B URL GET HTTP/2 sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
IP 88.198.16.238:443
ASN #24940 Hetzner Online GmbH
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerGlobalSign nv-sa
Subject*.upravel.com
Fingerprint4C:ED:03:57:58:43:18:2C:CC:41:F3:3B:19:72:75:BD:29:C1:04:08
ValiditySat, 29 Apr 2023 07:48:21 GMT - Thu, 30 May 2024 07:48:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0 HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: session_tptc=1701461841801
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: image/png
content-length: 0
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: user_id=665bf6db-9c18-44fc-99a1-46cfddb238c2;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
user_id-legacy=665bf6db-9c18-44fc-99a1-46cfddb238c2;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
location: https://www.acint.net/match?dp=71&euid=665bf6db-9c18-44fc-99a1-46cfddb238c2
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
cs.agency2.ru/p?ssp=sp&uid=0100007F503F6A65160792B102553227
23.111.107.44301 Moved Permanently 0 B URL GET HTTP/1.1 cs.agency2.ru/p?ssp=sp&uid=0100007F503F6A65160792B102553227
IP 23.111.107.44:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subjectapi.agency2.ru
Fingerprint50:48:39:D7:EB:8F:8E:E7:36:A3:F3:08:25:93:84:7F:6B:36:24:95
ValidityMon, 16 Oct 2023 23:38:04 GMT - Sun, 14 Jan 2024 23:38:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&uid=0100007F503F6A65160792B102553227 HTTP/1.1
Host: cs.agency2.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 01 Dec 2023 20:17:22 GMT
Content-Length: 0
Connection: keep-alive
Server: fasthttp
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.acint.net/match?dp=186&euid=788a3a0d-c510-411b-af05-4df80e46a1d1
Set-Cookie: uuid=788a3a0d-c510-411b-af05-4df80e46a1d1; expires=Thu, 21 Nov 2024 20:17:22 GMT; domain=agency2.ru; path=/; secure; SameSite=None
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.107.44
w.uptolike.com/widgets/v1/widgets-batch.js?params=JTVCJTdCJTIycGlkJTIyJTNBJTIyY21za3Jhc2thYml6JTIyJTJDJTIydXJsJTIyJTNBJTIyaHR0cCUzQSUyRiUyRmtyYXNrYS5iaXolMkYlMjIlN0QlNUQ=&mode=0&callback=callback__utl_cb_share_1701461847008799
95.163.114.203200 OK 287 B URL GET HTTP/1.1 w.uptolike.com/widgets/v1/widgets-batch.js?params=JTVCJTdCJTIycGlkJTIyJTNBJTIyY21za3Jhc2thYml6JTIyJTJDJTIydXJsJTIyJTNBJTIyaHR0cCUzQSUyRiUyRmtyYXNrYS5iaXolMkYlMjIlN0QlNUQ=&mode=0&callback=callback__utl_cb_share_1701461847008799
IP 95.163.114.203:443
ASN #12695 LLC Digital Network
Requested by https://w.uptolike.com/widgets/v1/share-counter.html?622e27e5349ec1bb07f4f36fc56e7c84
Certificate IssuerLet's Encrypt
Subjectuptolike.com
Fingerprint05:EC:E2:F5:E1:CC:42:09:42:DC:90:8A:CF:B4:9B:7C:0C:2F:98:68
ValiditySat, 28 Oct 2023 04:43:41 GMT - Fri, 26 Jan 2024 04:43:40 GMT
Hash 1637350c2fdc02904a7ade3ea7756fa8
f4fbabbbbee88a0ec7c73c1a72284c6b36e64f25
991e126ab262f60d2795db125cb4d6f42e074c9b48ae72300d06bb004e5c5b8b
GET /widgets/v1/widgets-batch.js?params=JTVCJTdCJTIycGlkJTIyJTNBJTIyY21za3Jhc2thYml6JTIyJTJDJTIydXJsJTIyJTNBJTIyaHR0cCUzQSUyRiUyRmtyYXNrYS5iaXolMkYlMjIlN0QlNUQ=&mode=0&callback=callback__utl_cb_share_1701461847008799 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w.uptolike.com/widgets/v1/share-counter.html?622e27e5349ec1bb07f4f36fc56e7c84
Cookie: utl_id2=33842310219; utl_dat="CMiknbjCMRAAIMj158DCMSjI9efAwjEwANbxv4BTEXxG/y+Fp88qJDw="
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 20:17:22 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Wed, 15 Nov 2023 14:47:05 GMT
Cache-Control: no-cache,no-store,max-age=0,must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: *
Content-Encoding: gzip
acint.net/match?dp=80&euid=sYQqU8n1dk4oWwFMuXId
193.3.184.7302 Found 154 B URL GET HTTP/2 acint.net/match?dp=80&euid=sYQqU8n1dk4oWwFMuXId
IP 193.3.184.7:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /match?dp=80&euid=sYQqU8n1dk4oWwFMuXId HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; cSyncDp14v6=1701461841; cSyncDp17v2=1701461841; cSyncDp45v5=1701461841; cSyncDp53v5=1701461841; cSyncDp62v2=1701461841; cSyncDp67v3=1701461841; cSyncDp68v2=1701461841; cSyncDp71v2=1701461841; cSyncDp80v2=1701461841; cSyncDp85v2=1701461841; cSyncDp95v4=1701461841; cSyncDp98v3=1701461841; cSyncDp104v2=1701461841; cSyncDp107v2=1701461841; cSyncDp110v3=1701461841; cSyncDp125v4=1701461841; cSyncDp126v2=1701461841; cSyncDp127v2=1701461841; cSyncDp129v2=1701461841; cSyncDp136v3=1701461841; cSyncDp146v2=1701461841; cSyncDp148v2=1701461841; cSyncDp149v3=1701461841; cSyncDp151v2=1701461841; cSyncDp251v1=1701461841; cSyncDp186v2=1701461841; cSyncDp217v2=1701461841; cSyncDp221v2=1701461841; cSyncDp235v2=1701461841; cSyncDp239v2=1701461841; cSyncDp243v2=1701461841; cSyncDp260v2=1701461841; cSyncDp244v2=1701461841; cSyncDp248v2=1701461841; cSyncDp261v1=1701461841
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: text/html
content-length: 154
location: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D&dp=14
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
set-cookie: cSyncDp14v4=1701461842; expires=Sun, 31-Dec-23 20:17:22 GMT; path=/; Secure; SameSite=None; domain=.acint.net
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sap1&s_data=CAIQARjS_qirBmIgMDEwMDAwN0Y1MDNGNkE2NTE2MDc5MkIxMDI1NTMyMjeiARCihftIkIYR7obgACWQwGR8
31.172.81.172200 OK 0 B URL GET HTTP/1.1 sync.bumlam.com/?src=sap1&s_data=CAIQARjS_qirBmIgMDEwMDAwN0Y1MDNGNkE2NTE2MDc5MkIxMDI1NTMyMjeiARCihftIkIYR7obgACWQwGR8
IP 31.172.81.172:443
ASN #44066 diva-e Datacenters GmbH
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.bumlam.com
Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0
ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&s_data=CAIQARjS_qirBmIgMDEwMDAwN0Y1MDNGNkE2NTE2MDc5MkIxMDI1NTMyMjeiARCihftIkIYR7obgACWQwGR8 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiRhMjg1ZmI0OC05MDg2LTExZWUtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 20:17:22 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiRhMjg1ZmI0OC05MDg2LTExZWUtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Thu, 26 Nov 2043 20:17:22 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
88.198.31.232301 Moved Permanently 115 B URL GET HTTP/2 exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
IP 88.198.31.232:443
ASN #24940 Hetzner Online GmbH
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerSectigo Limited
Subject*.buzzoola.com
FingerprintE6:7F:94:98:CF:E4:CF:88:C7:8C:FC:16:A3:D7:D0:10:4E:EC:AB:F1
ValidityMon, 04 Sep 2023 00:00:00 GMT - Fri, 04 Oct 2024 23:59:59 GMT
File type HTML document, ASCII text
Hash 6266afc3754b0d4098e69b19ce812f3f
8083212635fb1fdc1df897dcef54cc4ae2aeb387
ddb9fbd7bbf2d029de98fbc8e653bd709d26a83acb92b6265d55dec52725ae93
GET /cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: text/html; charset=utf-8
content-length: 115
location: https://www.acint.net/match?dp=126&euid=1ebb74e2-1ab5-4510-6d02-22ac836c0a43
serverid: TODO
X-Firefox-Spdy: h2
sync.programmatica.com/match/01
167.235.117.42200 OK 43 B URL GET HTTP/2 sync.programmatica.com/match/01
IP 167.235.117.42:443
ASN #24940 Hetzner Online GmbH
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerGlobalSign nv-sa
Subject*.programmatica.com
FingerprintE4:B6:ED:A7:02:18:8C:3F:D0:A3:8D:04:EE:40:21:0A:0E:83:D1:D6
ValidityThu, 15 Dec 2022 17:05:13 GMT - Tue, 16 Jan 2024 17:05:12 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/01 HTTP/1.1
Host: sync.programmatica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
ssp.afp.ai/api/sync/sape
45.139.25.125302 Found 0 B IP 45.139.25.125:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerSectigo Limited
Subject*.afp.ai
Fingerprint6D:78:55:60:8D:74:D7:2E:9F:A5:B1:56:72:76:A6:20:F9:7E:E4:4F
ValidityMon, 23 Oct 2023 00:00:00 GMT - Tue, 24 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/sync/sape HTTP/1.1
Host: ssp.afp.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.20.1
Date: Fri, 01 Dec 2023 20:17:22 GMT
Content-Length: 0
Connection: keep-alive
Vary: Origin
Access-Control-Allow-Origin:
Access-Control-Allow-Credentials: true
Location: https://www.acint.net/match?dp=261&euid=a4eaa81d-8d8c-49b8-b28d-76f60c7a3211
Set-Cookie: afp_cookie=gAAAAABlaj9SHYvBbM3tvsIWQTN32VYFYySzMLjTjSD9I5Mc_opW49rF4DsffB-ATvI7Df6YUn3w0ahLZnpzlxC_Pe4NUWB3UzT1gFpBbvwxExLj9RtnPo0F5VuffNH_X5110UQ8kBoPn_rxwOeJAp7oWvOZQ6IdQB3FrES8vQnWooMfdo4bsmMJP8yCFdNbnqYdg6aJUJgV$; expires=Mon, 01 Jan 2024 20:17:22 GMT; path=/; secure; SameSite=None
sync.gonet-ads.com/match/sape.js?id=0100007F503F6A65160792B102553227
188.42.105.236200 OK 43 B URL GET HTTP/2 sync.gonet-ads.com/match/sape.js?id=0100007F503F6A65160792B102553227
IP 188.42.105.236:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerSectigo Limited
Subject*.gonet-ads.com
Fingerprint2B:BE:BF:75:0A:67:AA:2D:FA:0A:7F:92:F4:37:AE:9B:DD:47:68:2D
ValidityWed, 07 Jun 2023 00:00:00 GMT - Tue, 11 Jun 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/sape.js?id=0100007F503F6A65160792B102553227 HTTP/1.1
Host: sync.gonet-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sape
31.172.81.172302 Moved Temporarily 0 B URL GET HTTP/1.1 sync.bumlam.com/?src=sape
IP 31.172.81.172:443
ASN #44066 diva-e Datacenters GmbH
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.bumlam.com
Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0
ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sape HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiRhMjg1ZmI0OC05MDg2LTExZWUtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Fri, 01 Dec 2023 20:17:22 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiRhMjg1ZmI0OC05MDg2LTExZWUtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Thu, 26 Nov 2043 20:17:22 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: https://pix.bumlam.com/sync/sape/sync_ok?guid=a285fb48-9086-11ee-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
Access-Control-Allow-Origin: https://acint.net
Access-Control-Allow-Credentials: true
acint.net/match?dp=110&euid=6c286d437f3a47438fc00bed6a3ffea1
193.3.184.7302 Found 154 B URL GET HTTP/2 acint.net/match?dp=110&euid=6c286d437f3a47438fc00bed6a3ffea1
IP 193.3.184.7:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /match?dp=110&euid=6c286d437f3a47438fc00bed6a3ffea1 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; cSyncDp14v6=1701461841; cSyncDp17v2=1701461841; cSyncDp45v5=1701461841; cSyncDp53v5=1701461841; cSyncDp62v2=1701461841; cSyncDp67v3=1701461841; cSyncDp68v2=1701461841; cSyncDp71v2=1701461841; cSyncDp80v2=1701461841; cSyncDp85v2=1701461841; cSyncDp95v4=1701461841; cSyncDp98v3=1701461841; cSyncDp104v2=1701461841; cSyncDp107v2=1701461841; cSyncDp110v3=1701461841; cSyncDp125v4=1701461841; cSyncDp126v2=1701461841; cSyncDp127v2=1701461841; cSyncDp129v2=1701461841; cSyncDp136v3=1701461841; cSyncDp146v2=1701461841; cSyncDp148v2=1701461841; cSyncDp149v3=1701461841; cSyncDp151v2=1701461841; cSyncDp251v1=1701461841; cSyncDp186v2=1701461841; cSyncDp217v2=1701461841; cSyncDp221v2=1701461841; cSyncDp235v2=1701461841; cSyncDp239v2=1701461841; cSyncDp243v2=1701461841; cSyncDp260v2=1701461841; cSyncDp244v2=1701461841; cSyncDp248v2=1701461841; cSyncDp261v1=1701461841
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: text/html
content-length: 154
location: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D&dp=14
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
set-cookie: cSyncDp14v4=1701461842; expires=Sun, 31-Dec-23 20:17:22 GMT; path=/; Secure; SameSite=None; domain=.acint.net
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
kimberlite.io/rtb/sync/sape2?u=0100007F503F6A65160792B102553227
217.199.220.43307 Temporary Redirect 0 B URL GET HTTP/1.1 kimberlite.io/rtb/sync/sape2?u=0100007F503F6A65160792B102553227
IP 217.199.220.43:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerGlobalSign nv-sa
Subject*.kimberlite.io
Fingerprint94:44:D9:27:EE:9B:5F:DE:36:07:ED:BA:1A:1D:62:2A:31:B6:43:72
ValidityFri, 10 Mar 2023 07:40:01 GMT - Wed, 10 Apr 2024 07:40:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/sync/sape2?u=0100007F503F6A65160792B102553227 HTTP/1.1
Host: kimberlite.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Fri, 01 Dec 2023 20:17:22 GMT
Content-Length: 0
Connection: keep-alive
cache-control: no-store
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: u=ZWo_UtH8aGs~bo32pNXZQv6sJN6qIottCKT_BLQ; path=/; max-age=7776000; samesite=none; httponly; secure
as=-WrUeGVqP1I; max-age=604800; samesite=none; httponly; secure
f=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D243%26euid%3DZWo_UtH8aGs; max-age=30; samesite=none; httponly; secure
n=1; max-age=30; samesite=none; httponly; secure
location: https://solta-sync.rutarget.ru/sync
referrer-policy: no-referrer
server-timing: app;srv=7;dur=0.0002
www.acint.net/match?dp=217&euid=ae0f42f3-defd-4cde-a045-1f910c208bad
193.3.184.7302 Found 154 B URL GET HTTP/2 www.acint.net/match?dp=217&euid=ae0f42f3-defd-4cde-a045-1f910c208bad
IP 193.3.184.7:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /match?dp=217&euid=ae0f42f3-defd-4cde-a045-1f910c208bad HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; cSyncDp14v6=1701461841; cSyncDp17v2=1701461841; cSyncDp45v5=1701461841; cSyncDp53v5=1701461841; cSyncDp62v2=1701461841; cSyncDp67v3=1701461841; cSyncDp68v2=1701461841; cSyncDp71v2=1701461841; cSyncDp80v2=1701461841; cSyncDp85v2=1701461841; cSyncDp95v4=1701461841; cSyncDp98v3=1701461841; cSyncDp104v2=1701461841; cSyncDp107v2=1701461841; cSyncDp110v3=1701461841; cSyncDp125v4=1701461841; cSyncDp126v2=1701461841; cSyncDp127v2=1701461841; cSyncDp129v2=1701461841; cSyncDp136v3=1701461841; cSyncDp146v2=1701461841; cSyncDp148v2=1701461841; cSyncDp149v3=1701461841; cSyncDp151v2=1701461841; cSyncDp251v1=1701461841; cSyncDp186v2=1701461841; cSyncDp217v2=1701461841; cSyncDp221v2=1701461841; cSyncDp235v2=1701461841; cSyncDp239v2=1701461841; cSyncDp243v2=1701461841; cSyncDp260v2=1701461841; cSyncDp244v2=1701461841; cSyncDp248v2=1701461841; cSyncDp261v1=1701461841
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: text/html
content-length: 154
location: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D&dp=14
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
set-cookie: cSyncDp14v4=1701461842; expires=Sun, 31-Dec-23 20:17:22 GMT; path=/; Secure; SameSite=None; domain=.acint.net
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/match?dp=127&euid=ThF0egqPSzhOHPgj73cO
193.3.184.7302 Found 154 B URL GET HTTP/2 www.acint.net/match?dp=127&euid=ThF0egqPSzhOHPgj73cO
IP 193.3.184.7:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /match?dp=127&euid=ThF0egqPSzhOHPgj73cO HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; cSyncDp14v6=1701461841; cSyncDp17v2=1701461841; cSyncDp45v5=1701461841; cSyncDp53v5=1701461841; cSyncDp62v2=1701461841; cSyncDp67v3=1701461841; cSyncDp68v2=1701461841; cSyncDp71v2=1701461841; cSyncDp80v2=1701461841; cSyncDp85v2=1701461841; cSyncDp95v4=1701461841; cSyncDp98v3=1701461841; cSyncDp104v2=1701461841; cSyncDp107v2=1701461841; cSyncDp110v3=1701461841; cSyncDp125v4=1701461841; cSyncDp126v2=1701461841; cSyncDp127v2=1701461841; cSyncDp129v2=1701461841; cSyncDp136v3=1701461841; cSyncDp146v2=1701461841; cSyncDp148v2=1701461841; cSyncDp149v3=1701461841; cSyncDp151v2=1701461841; cSyncDp251v1=1701461841; cSyncDp186v2=1701461841; cSyncDp217v2=1701461841; cSyncDp221v2=1701461841; cSyncDp235v2=1701461841; cSyncDp239v2=1701461841; cSyncDp243v2=1701461841; cSyncDp260v2=1701461841; cSyncDp244v2=1701461841; cSyncDp248v2=1701461841; cSyncDp261v1=1701461841
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: text/html
content-length: 154
location: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D&dp=14
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
set-cookie: cSyncDp14v4=1701461842; expires=Sun, 31-Dec-23 20:17:22 GMT; path=/; Secure; SameSite=None; domain=.acint.net
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
nr.bidderstack.com/sape/cm?user_id=0100007F503F6A65160792B102553227&pupa=1
167.235.186.124302 Found 0 B URL GET HTTP/1.1 nr.bidderstack.com/sape/cm?user_id=0100007F503F6A65160792B102553227&pupa=1
IP 167.235.186.124:443
ASN #24940 Hetzner Online GmbH
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerGoDaddy.com, Inc.
Subject*.bidderstack.com
Fingerprint7A:83:29:BF:37:01:78:02:DF:C1:07:D8:A2:10:AB:0A:DD:11:66:B0
ValidityTue, 21 Nov 2023 08:57:57 GMT - Sun, 22 Dec 2024 08:57:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/cm?user_id=0100007F503F6A65160792B102553227&pupa=1 HTTP/1.1
Host: nr.bidderstack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 01 Dec 2023 20:17:22 GMT
Content-Length: 0
Connection: keep-alive
Location: https://www.acint.net/match?dp=251&euid=d6979f52-2616-aa83-4667-870fd419f06c
Set-Cookie: pupa=d6979f52-2616-aa83-4667-870fd419f06c; domain=.bidderstack.com; path=/; expires=Sat, 30-Nov-2024 20:17:22 GMT;
csorigin2=244; domain=.bidderstack.com; path=/; expires=Fri, 01-Dec-2023 20:22:22 GMT;
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
sync.dsp.solta.io/match/sape?id=0100007F503F6A65160792B102553227
185.40.31.213200 OK 43 B URL GET HTTP/2 sync.dsp.solta.io/match/sape?id=0100007F503F6A65160792B102553227
IP 185.40.31.213:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerGlobalSign nv-sa
Subject*.dsp.solta.io
Fingerprint6D:7F:91:92:30:E1:6A:A0:9B:86:49:7A:21:7F:5B:A4:23:8F:92:BC
ValidityWed, 02 Aug 2023 16:38:38 GMT - Mon, 02 Sep 2024 16:38:37 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/sape?id=0100007F503F6A65160792B102553227 HTTP/1.1
Host: sync.dsp.solta.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
w.uptolike.com/static/buttons/fonts/icomoon.woff?qq11232333=1232131231321
95.163.114.203200 OK 9.1 kB URL GET HTTP/1.1 w.uptolike.com/static/buttons/fonts/icomoon.woff?qq11232333=1232131231321
IP 95.163.114.203:443
ASN #12695 LLC Digital Network
Certificate IssuerLet's Encrypt
Subjectuptolike.com
Fingerprint05:EC:E2:F5:E1:CC:42:09:42:DC:90:8A:CF:B4:9B:7C:0C:2F:98:68
ValiditySat, 28 Oct 2023 04:43:41 GMT - Fri, 26 Jan 2024 04:43:40 GMT
File type Web Open Font Format, TrueType, length 9144, version 0.0\012- data
Hash 2596eafba8821cbd54fb4c4294eea5f2
53046bf3bccd35a24e515fcfbd34b31ec27c841e
3f72dc1fd03fba15c9200144bf1df7286ad1e2560b50a5ecc12e68c9c1e36f29
GET /static/buttons/fonts/icomoon.woff?qq11232333=1232131231321 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://kraska.biz
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 20:17:22 GMT
Content-Type: font/woff
Content-Length: 9144
Connection: keep-alive
Last-Modified: Wed, 16 Aug 2017 14:30:13 GMT
ETag: "599456f5-23b8"
Expires: Fri, 10 May 2024 07:48:52 GMT
Cache-Control: max-age=15552000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
www.acint.net/match?dp=186&euid=788a3a0d-c510-411b-af05-4df80e46a1d1
193.3.184.7200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=186&euid=788a3a0d-c510-411b-af05-4df80e46a1d1
IP 193.3.184.7:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=186&euid=788a3a0d-c510-411b-af05-4df80e46a1d1 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; cSyncDp14v6=1701461841; cSyncDp17v2=1701461841; cSyncDp45v5=1701461841; cSyncDp53v5=1701461841; cSyncDp62v2=1701461841; cSyncDp67v3=1701461841; cSyncDp68v2=1701461841; cSyncDp71v2=1701461841; cSyncDp80v2=1701461841; cSyncDp85v2=1701461841; cSyncDp95v4=1701461841; cSyncDp98v3=1701461841; cSyncDp104v2=1701461841; cSyncDp107v2=1701461841; cSyncDp110v3=1701461841; cSyncDp125v4=1701461841; cSyncDp126v2=1701461841; cSyncDp127v2=1701461841; cSyncDp129v2=1701461841; cSyncDp136v3=1701461841; cSyncDp146v2=1701461841; cSyncDp148v2=1701461841; cSyncDp149v3=1701461841; cSyncDp151v2=1701461841; cSyncDp251v1=1701461841; cSyncDp186v2=1701461841; cSyncDp217v2=1701461841; cSyncDp221v2=1701461841; cSyncDp235v2=1701461841; cSyncDp239v2=1701461841; cSyncDp243v2=1701461841; cSyncDp260v2=1701461841; cSyncDp244v2=1701461841; cSyncDp248v2=1701461841; cSyncDp261v1=1701461841; cSyncDp14v4=1701461842
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/match?dp=71&euid=665bf6db-9c18-44fc-99a1-46cfddb238c2
193.3.184.7200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=71&euid=665bf6db-9c18-44fc-99a1-46cfddb238c2
IP 193.3.184.7:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=71&euid=665bf6db-9c18-44fc-99a1-46cfddb238c2 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; cSyncDp14v6=1701461841; cSyncDp17v2=1701461841; cSyncDp45v5=1701461841; cSyncDp53v5=1701461841; cSyncDp62v2=1701461841; cSyncDp67v3=1701461841; cSyncDp68v2=1701461841; cSyncDp71v2=1701461841; cSyncDp80v2=1701461841; cSyncDp85v2=1701461841; cSyncDp95v4=1701461841; cSyncDp98v3=1701461841; cSyncDp104v2=1701461841; cSyncDp107v2=1701461841; cSyncDp110v3=1701461841; cSyncDp125v4=1701461841; cSyncDp126v2=1701461841; cSyncDp127v2=1701461841; cSyncDp129v2=1701461841; cSyncDp136v3=1701461841; cSyncDp146v2=1701461841; cSyncDp148v2=1701461841; cSyncDp149v3=1701461841; cSyncDp151v2=1701461841; cSyncDp251v1=1701461841; cSyncDp186v2=1701461841; cSyncDp217v2=1701461841; cSyncDp221v2=1701461841; cSyncDp235v2=1701461841; cSyncDp239v2=1701461841; cSyncDp243v2=1701461841; cSyncDp260v2=1701461841; cSyncDp244v2=1701461841; cSyncDp248v2=1701461841; cSyncDp261v1=1701461841; cSyncDp14v4=1701461842
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ssp.bidvol.com/usersync?dspcsid=8&redirect=1
65.109.23.99302 Found 43 B URL GET HTTP/2 ssp.bidvol.com/usersync?dspcsid=8&redirect=1
IP 65.109.23.99:443
ASN #24940 Hetzner Online GmbH
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subjectssp.bidvol.com
Fingerprint40:DB:53:6B:41:DC:4B:32:C0:EE:F6:09:5C:13:AF:5C:EF:90:56:90
ValidityThu, 09 Nov 2023 10:21:37 GMT - Wed, 07 Feb 2024 10:21:36 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /usersync?dspcsid=8&redirect=1 HTTP/1.1
Host: ssp.bidvol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.22.0
date: Fri, 01 Dec 2023 20:17:22 GMT
x-request-id: 59c3b4ea-7388-441f-9de0-bd6ae15f7ec1
vary: Origin
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
surrogate-control: no-store
set-cookie: bvuid=fak4mkddho; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None
bvuid2=fak4mkddho; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT
location: https://www.acint.net/match?dp=129&euid=fak4mkddho
X-Firefox-Spdy: h2
w.uptolike.com/widgets/v1/imp?pid=cmskraskabiz&url=http%3A%2F%2Fkraska.biz%2F&vp=bef2bcc3-9df8-4cbc-801e-1743d396401c&ttl=JUQwJTlCJUQwJUIwJUQwJUJBJUQwJUJFLSVEMCVCQSVEMSU4MCVEMCVCMCVEMSU4MSVEMCVCRSVEMSU4NyVEMCVCRCVEMSU4QiVEMCVCNSUyMCVEMCVCQyVEMCVCMCVEMSU4MiVEMCVCNSVEMSU4MCVEMCVCOCVEMCVCMCVEMCVCQiVEMSU4QiUyMC0lMjAlRDAlQkYlRDElODAlRDAlQkUlRDAlQjglRDAlQjclRDAlQjIlRDAlQkUlRDAlQjQlRDElODElRDElODIlRDAlQjIlRDAlQkUlMjAlRDAlQjglMjAlRDAlQkUlRDAlQjElRDAlQkUlRDElODAlRDElODMlRDAlQjQlRDAlQkUlRDAlQjIlRDAlQjAlRDAlQkQlRDAlQjglRDAlQjU%3D&rnd=0.4169380691398499
95.163.114.203204 No Content 0 B URL GET HTTP/1.1 w.uptolike.com/widgets/v1/imp?pid=cmskraskabiz&url=http%3A%2F%2Fkraska.biz%2F&vp=bef2bcc3-9df8-4cbc-801e-1743d396401c&ttl=JUQwJTlCJUQwJUIwJUQwJUJBJUQwJUJFLSVEMCVCQSVEMSU4MCVEMCVCMCVEMSU4MSVEMCVCRSVEMSU4NyVEMCVCRCVEMSU4QiVEMCVCNSUyMCVEMCVCQyVEMCVCMCVEMSU4MiVEMCVCNSVEMSU4MCVEMCVCOCVEMCVCMCVEMCVCQiVEMSU4QiUyMC0lMjAlRDAlQkYlRDElODAlRDAlQkUlRDAlQjglRDAlQjclRDAlQjIlRDAlQkUlRDAlQjQlRDElODElRDElODIlRDAlQjIlRDAlQkUlMjAlRDAlQjglMjAlRDAlQkUlRDAlQjElRDAlQkUlRDElODAlRDElODMlRDAlQjQlRDAlQkUlRDAlQjIlRDAlQjAlRDAlQkQlRDAlQjglRDAlQjU%3D&rnd=0.4169380691398499
IP 95.163.114.203:443
ASN #12695 LLC Digital Network
Requested by https://w.uptolike.com/widgets/v1/impression.html?622e27e5349ec1bb07f4f36fc56e7c84
Certificate IssuerLet's Encrypt
Subjectuptolike.com
Fingerprint05:EC:E2:F5:E1:CC:42:09:42:DC:90:8A:CF:B4:9B:7C:0C:2F:98:68
ValiditySat, 28 Oct 2023 04:43:41 GMT - Fri, 26 Jan 2024 04:43:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /widgets/v1/imp?pid=cmskraskabiz&url=http%3A%2F%2Fkraska.biz%2F&vp=bef2bcc3-9df8-4cbc-801e-1743d396401c&ttl=JUQwJTlCJUQwJUIwJUQwJUJBJUQwJUJFLSVEMCVCQSVEMSU4MCVEMCVCMCVEMSU4MSVEMCVCRSVEMSU4NyVEMCVCRCVEMSU4QiVEMCVCNSUyMCVEMCVCQyVEMCVCMCVEMSU4MiVEMCVCNSVEMSU4MCVEMCVCOCVEMCVCMCVEMCVCQiVEMSU4QiUyMC0lMjAlRDAlQkYlRDElODAlRDAlQkUlRDAlQjglRDAlQjclRDAlQjIlRDAlQkUlRDAlQjQlRDElODElRDElODIlRDAlQjIlRDAlQkUlMjAlRDAlQjglMjAlRDAlQkUlRDAlQjElRDAlQkUlRDElODAlRDElODMlRDAlQjQlRDAlQkUlRDAlQjIlRDAlQjAlRDAlQkQlRDAlQjglRDAlQjU%3D&rnd=0.4169380691398499 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w.uptolike.com/widgets/v1/impression.html?622e27e5349ec1bb07f4f36fc56e7c84
Cookie: utl_id2=33842310219; utl_dat="CMiknbjCMRAAIMj158DCMSjI9efAwjEwANbxv4BTEXxG/y+Fp88qJDw="
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx
Date: Fri, 01 Dec 2023 20:17:22 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
83.222.96.170302 Found 74 B URL GET HTTP/2 ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
IP 83.222.96.170:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerGlobalSign nv-sa
Subject*.bestssp.com
Fingerprint25:15:42:2E:1C:54:0F:74:CF:89:02:5A:5E:AC:98:DA:1C:34:B3:B3
ValidityMon, 24 Jul 2023 17:15:54 GMT - Sat, 24 Aug 2024 17:15:53 GMT
File type HTML document, ASCII text
Hash cb1f448d993af37a9fe5559068f579b0
e759c4e516360580178c5217511fe74ad8c41f54
8f116546370c3735ffcd2c38d2ce10cd96adaec0b23b56e8fc898bb950c3a048
GET /sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D HTTP/1.1
Host: ssp.bestssp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.22.0
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: text/html; charset=utf-8
content-length: 74
location: https://www.acint.net/match?dp=95&euid=RNUBBQIS
set-cookie: uid=RNUBBQIS; Expires=Mon, 28 Nov 2033 20:17:22 GMT
X-Firefox-Spdy: h2
adx.com.ru/sape-sync?uid=0100007F503F6A65160792B102553227
83.222.117.90429 Too Many Requests 169 B URL GET HTTP/2 adx.com.ru/sape-sync?uid=0100007F503F6A65160792B102553227
IP 83.222.117.90:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerGlobalSign nv-sa
Subject*.adx.com.ru
FingerprintB6:86:21:C8:F9:AF:00:9E:42:EC:E3:77:AC:A3:5B:2B:E7:C4:46:B3
ValidityFri, 26 May 2023 11:44:59 GMT - Wed, 26 Jun 2024 11:44:58 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3456231c174fb2d76d51f73b828635a7
49c43f133ee881851becd78c2e9e885ebaad005e
02a097cad2b1a9db6797fdb73c0dcd0d66d8ae7d4b5f906658bb45a502c2c106
GET /sape-sync?uid=0100007F503F6A65160792B102553227 HTTP/1.1
Host: adx.com.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 429 Too Many Requests
server: nginx/1.22.0
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: text/html
content-length: 169
X-Firefox-Spdy: h2
www.acint.net/oci/?v=0.6.0&uid=f1db2147-0f6c-48f6-bd1a-5b245b919865&dp=14&tz=%2B00%3A00&nc=420958&oid=7e57a625dddcba431ef5a1422e13af30
193.3.184.7200 OK 43 B URL GET HTTP/2 www.acint.net/oci/?v=0.6.0&uid=f1db2147-0f6c-48f6-bd1a-5b245b919865&dp=14&tz=%2B00%3A00&nc=420958&oid=7e57a625dddcba431ef5a1422e13af30
IP 193.3.184.7:443
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /oci/?v=0.6.0&uid=f1db2147-0f6c-48f6-bd1a-5b245b919865&dp=14&tz=%2B00%3A00&nc=420958&oid=7e57a625dddcba431ef5a1422e13af30 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; cSyncDp14v6=1701461841; cSyncDp17v2=1701461841; cSyncDp45v5=1701461841; cSyncDp53v5=1701461841; cSyncDp62v2=1701461841; cSyncDp67v3=1701461841; cSyncDp68v2=1701461841; cSyncDp71v2=1701461841; cSyncDp80v2=1701461841; cSyncDp85v2=1701461841; cSyncDp95v4=1701461841; cSyncDp98v3=1701461841; cSyncDp104v2=1701461841; cSyncDp107v2=1701461841; cSyncDp110v3=1701461841; cSyncDp125v4=1701461841; cSyncDp126v2=1701461841; cSyncDp127v2=1701461841; cSyncDp129v2=1701461841; cSyncDp136v3=1701461841; cSyncDp146v2=1701461841; cSyncDp148v2=1701461841; cSyncDp149v3=1701461841; cSyncDp151v2=1701461841; cSyncDp251v1=1701461841; cSyncDp186v2=1701461841; cSyncDp217v2=1701461841; cSyncDp221v2=1701461841; cSyncDp235v2=1701461841; cSyncDp239v2=1701461841; cSyncDp243v2=1701461841; cSyncDp260v2=1701461841; cSyncDp244v2=1701461841; cSyncDp248v2=1701461841; cSyncDp261v1=1701461841; cSyncDp14v4=1701461842
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D&dp=14
193.3.184.215302 Moved Temporarily 142 B URL GET HTTP/1.1 ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D&dp=14
IP 193.3.184.215:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.sape.ru
FingerprintF9:61:5C:64:81:FD:57:C2:4A:BD:6B:12:D4:7E:02:5E:83:8E:3E:40
ValiditySun, 08 Oct 2023 01:41:50 GMT - Sat, 06 Jan 2024 01:41:49 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D&dp=14 HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: sspuid=CkIDHWVqP1ASAwAcYdsZAmVpvajZ6NDAiYzzcghJBVubG5ch
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Fri, 01 Dec 2023 20:17:22 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/match?dp=14&euid=1D03420A503F6A651C0003120219DB61
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
www.acint.net/match?dp=126&euid=1ebb74e2-1ab5-4510-6d02-22ac836c0a43
193.3.184.7200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=126&euid=1ebb74e2-1ab5-4510-6d02-22ac836c0a43
IP 193.3.184.7:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=126&euid=1ebb74e2-1ab5-4510-6d02-22ac836c0a43 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; cSyncDp14v6=1701461841; cSyncDp17v2=1701461841; cSyncDp45v5=1701461841; cSyncDp53v5=1701461841; cSyncDp62v2=1701461841; cSyncDp67v3=1701461841; cSyncDp68v2=1701461841; cSyncDp71v2=1701461841; cSyncDp80v2=1701461841; cSyncDp85v2=1701461841; cSyncDp95v4=1701461841; cSyncDp98v3=1701461841; cSyncDp104v2=1701461841; cSyncDp107v2=1701461841; cSyncDp110v3=1701461841; cSyncDp125v4=1701461841; cSyncDp126v2=1701461841; cSyncDp127v2=1701461841; cSyncDp129v2=1701461841; cSyncDp136v3=1701461841; cSyncDp146v2=1701461841; cSyncDp148v2=1701461841; cSyncDp149v3=1701461841; cSyncDp151v2=1701461841; cSyncDp251v1=1701461841; cSyncDp186v2=1701461841; cSyncDp217v2=1701461841; cSyncDp221v2=1701461841; cSyncDp235v2=1701461841; cSyncDp239v2=1701461841; cSyncDp243v2=1701461841; cSyncDp260v2=1701461841; cSyncDp244v2=1701461841; cSyncDp248v2=1701461841; cSyncDp261v1=1701461841; cSyncDp14v4=1701461842
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/match?dp=261&euid=a4eaa81d-8d8c-49b8-b28d-76f60c7a3211
193.3.184.7200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=261&euid=a4eaa81d-8d8c-49b8-b28d-76f60c7a3211
IP 193.3.184.7:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=261&euid=a4eaa81d-8d8c-49b8-b28d-76f60c7a3211 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; cSyncDp14v6=1701461841; cSyncDp17v2=1701461841; cSyncDp45v5=1701461841; cSyncDp53v5=1701461841; cSyncDp62v2=1701461841; cSyncDp67v3=1701461841; cSyncDp68v2=1701461841; cSyncDp71v2=1701461841; cSyncDp80v2=1701461841; cSyncDp85v2=1701461841; cSyncDp95v4=1701461841; cSyncDp98v3=1701461841; cSyncDp104v2=1701461841; cSyncDp107v2=1701461841; cSyncDp110v3=1701461841; cSyncDp125v4=1701461841; cSyncDp126v2=1701461841; cSyncDp127v2=1701461841; cSyncDp129v2=1701461841; cSyncDp136v3=1701461841; cSyncDp146v2=1701461841; cSyncDp148v2=1701461841; cSyncDp149v3=1701461841; cSyncDp151v2=1701461841; cSyncDp251v1=1701461841; cSyncDp186v2=1701461841; cSyncDp217v2=1701461841; cSyncDp221v2=1701461841; cSyncDp235v2=1701461841; cSyncDp239v2=1701461841; cSyncDp243v2=1701461841; cSyncDp260v2=1701461841; cSyncDp244v2=1701461841; cSyncDp248v2=1701461841; cSyncDp261v1=1701461841; cSyncDp14v4=1701461842
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
w.uptolike.com/widgets/v1/extra.js?rnd=0.8289998725701779
95.163.114.203200 OK 1.9 kB URL GET HTTP/1.1 w.uptolike.com/widgets/v1/extra.js?rnd=0.8289998725701779
IP 95.163.114.203:443
ASN #12695 LLC Digital Network
Certificate IssuerLet's Encrypt
Subjectuptolike.com
Fingerprint05:EC:E2:F5:E1:CC:42:09:42:DC:90:8A:CF:B4:9B:7C:0C:2F:98:68
ValiditySat, 28 Oct 2023 04:43:41 GMT - Fri, 26 Jan 2024 04:43:40 GMT
File type ASCII text, with very long lines (690)
Hash 03df3b36e75fff9780d28a77dcea54e4
870f861cac30090ab20277f4643c0ed799b001d9
cac8098c5fb5834938f44d4b8268c9345b91537baf0a2a4d6db29a1329984f7c
GET /widgets/v1/extra.js?rnd=0.8289998725701779 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Cookie: utl_id2=33842310219; utl_dat="CMiknbjCMRAAIMj158DCMSjI9efAwjEwANbxv4BTEXxG/y+Fp88qJDw="
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 20:17:22 GMT
Content-Type: application/javascript;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Wed, 15 Nov 2023 14:47:05 GMT
Cache-Control: no-cache,no-store,max-age=0,must-revalidate
Pragma: no-cache
Set-Cookie: utl_id2=33842310219; Expires=Sun, 30 Nov 2025 20:17:22 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
utl_dat="CMiknbjCMRAAIMj158DCMSjI9efAwjEwANbxv4BTEXxG/y+Fp88qJDw="; Expires=Sun, 30 Nov 2025 20:17:22 GMT; Path=/; Domain=.w.uptolike.com; SameSite=None; Secure
P3P: CP='IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT'
Access-Control-Allow-Origin: *
Content-Encoding: gzip
pix.bumlam.com/sync/sape/sync_ok?guid=a285fb48-9086-11ee-86e0-002590c0647c
31.172.81.160302 Found 0 B URL GET HTTP/1.1 pix.bumlam.com/sync/sape/sync_ok?guid=a285fb48-9086-11ee-86e0-002590c0647c
IP 31.172.81.160:443
ASN #44066 diva-e Datacenters GmbH
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.bumlam.com
Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0
ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/sape/sync_ok?guid=a285fb48-9086-11ee-86e0-002590c0647c HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiRhMjg1ZmI0OC05MDg2LTExZWUtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 01 Dec 2023 20:17:22 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://a285fb48-9086-11ee-86e0-002590c0647c.n1.sync.bumlam.com/?src=sape
ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D&dp=14
193.3.184.215302 Moved Temporarily 142 B URL GET HTTP/1.1 ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D&dp=14
IP 193.3.184.215:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.sape.ru
FingerprintF9:61:5C:64:81:FD:57:C2:4A:BD:6B:12:D4:7E:02:5E:83:8E:3E:40
ValiditySun, 08 Oct 2023 01:41:50 GMT - Sat, 06 Jan 2024 01:41:49 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D&dp=14 HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: sspuid=CkIDHWVqP1ASAwAcYdsZAmVpvajZ6NDAiYzzcghJBVubG5ch
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Fri, 01 Dec 2023 20:17:22 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/match?dp=14&euid=1D03420A503F6A651C0003120219DB61
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D&dp=14
193.3.184.215302 Moved Temporarily 142 B URL GET HTTP/1.1 ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D&dp=14
IP 193.3.184.215:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.sape.ru
FingerprintF9:61:5C:64:81:FD:57:C2:4A:BD:6B:12:D4:7E:02:5E:83:8E:3E:40
ValiditySun, 08 Oct 2023 01:41:50 GMT - Sat, 06 Jan 2024 01:41:49 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D&dp=14 HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: sspuid=CkIDHWVqP1ASAwAcYdsZAmVpvajZ6NDAiYzzcghJBVubG5ch
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Fri, 01 Dec 2023 20:17:22 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/match?dp=14&euid=1D03420A503F6A651C0003120219DB61
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
www.acint.net/match?dp=251&euid=d6979f52-2616-aa83-4667-870fd419f06c
193.3.184.7200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=251&euid=d6979f52-2616-aa83-4667-870fd419f06c
IP 193.3.184.7:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=251&euid=d6979f52-2616-aa83-4667-870fd419f06c HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; cSyncDp14v6=1701461841; cSyncDp17v2=1701461841; cSyncDp45v5=1701461841; cSyncDp53v5=1701461841; cSyncDp62v2=1701461841; cSyncDp67v3=1701461841; cSyncDp68v2=1701461841; cSyncDp71v2=1701461841; cSyncDp80v2=1701461841; cSyncDp85v2=1701461841; cSyncDp95v4=1701461841; cSyncDp98v3=1701461841; cSyncDp104v2=1701461841; cSyncDp107v2=1701461841; cSyncDp110v3=1701461841; cSyncDp125v4=1701461841; cSyncDp126v2=1701461841; cSyncDp127v2=1701461841; cSyncDp129v2=1701461841; cSyncDp136v3=1701461841; cSyncDp146v2=1701461841; cSyncDp148v2=1701461841; cSyncDp149v3=1701461841; cSyncDp151v2=1701461841; cSyncDp251v1=1701461841; cSyncDp186v2=1701461841; cSyncDp217v2=1701461841; cSyncDp221v2=1701461841; cSyncDp235v2=1701461841; cSyncDp239v2=1701461841; cSyncDp243v2=1701461841; cSyncDp260v2=1701461841; cSyncDp244v2=1701461841; cSyncDp248v2=1701461841; cSyncDp261v1=1701461841; cSyncDp14v4=1701461842
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D&dp=14
193.3.184.215302 Moved Temporarily 142 B URL GET HTTP/1.1 ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D&dp=14
IP 193.3.184.215:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.sape.ru
FingerprintF9:61:5C:64:81:FD:57:C2:4A:BD:6B:12:D4:7E:02:5E:83:8E:3E:40
ValiditySun, 08 Oct 2023 01:41:50 GMT - Sat, 06 Jan 2024 01:41:49 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D&dp=14 HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: sspuid=CkIDHWVqP1ASAwAcYdsZAmVpvajZ6NDAiYzzcghJBVubG5ch
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Fri, 01 Dec 2023 20:17:22 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/match?dp=14&euid=1D03420A503F6A651C0003120219DB61
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
www.acint.net/match?dp=95&euid=RNUBBQIS
193.3.184.7200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=95&euid=RNUBBQIS
IP 193.3.184.7:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=95&euid=RNUBBQIS HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; cSyncDp14v6=1701461841; cSyncDp17v2=1701461841; cSyncDp45v5=1701461841; cSyncDp53v5=1701461841; cSyncDp62v2=1701461841; cSyncDp67v3=1701461841; cSyncDp68v2=1701461841; cSyncDp71v2=1701461841; cSyncDp80v2=1701461841; cSyncDp85v2=1701461841; cSyncDp95v4=1701461841; cSyncDp98v3=1701461841; cSyncDp104v2=1701461841; cSyncDp107v2=1701461841; cSyncDp110v3=1701461841; cSyncDp125v4=1701461841; cSyncDp126v2=1701461841; cSyncDp127v2=1701461841; cSyncDp129v2=1701461841; cSyncDp136v3=1701461841; cSyncDp146v2=1701461841; cSyncDp148v2=1701461841; cSyncDp149v3=1701461841; cSyncDp151v2=1701461841; cSyncDp251v1=1701461841; cSyncDp186v2=1701461841; cSyncDp217v2=1701461841; cSyncDp221v2=1701461841; cSyncDp235v2=1701461841; cSyncDp239v2=1701461841; cSyncDp243v2=1701461841; cSyncDp260v2=1701461841; cSyncDp244v2=1701461841; cSyncDp248v2=1701461841; cSyncDp261v1=1701461841; cSyncDp14v4=1701461842
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
acint.net/match?dp=14&euid=1D03420A503F6A651C0003120219DB61
193.3.184.7200 OK 43 B URL GET HTTP/2 acint.net/match?dp=14&euid=1D03420A503F6A651C0003120219DB61
IP 193.3.184.7:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=14&euid=1D03420A503F6A651C0003120219DB61 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; cSyncDp14v6=1701461841; cSyncDp17v2=1701461841; cSyncDp45v5=1701461841; cSyncDp53v5=1701461841; cSyncDp62v2=1701461841; cSyncDp67v3=1701461841; cSyncDp68v2=1701461841; cSyncDp71v2=1701461841; cSyncDp80v2=1701461841; cSyncDp85v2=1701461841; cSyncDp95v4=1701461841; cSyncDp98v3=1701461841; cSyncDp104v2=1701461841; cSyncDp107v2=1701461841; cSyncDp110v3=1701461841; cSyncDp125v4=1701461841; cSyncDp126v2=1701461841; cSyncDp127v2=1701461841; cSyncDp129v2=1701461841; cSyncDp136v3=1701461841; cSyncDp146v2=1701461841; cSyncDp148v2=1701461841; cSyncDp149v3=1701461841; cSyncDp151v2=1701461841; cSyncDp251v1=1701461841; cSyncDp186v2=1701461841; cSyncDp217v2=1701461841; cSyncDp221v2=1701461841; cSyncDp235v2=1701461841; cSyncDp239v2=1701461841; cSyncDp243v2=1701461841; cSyncDp260v2=1701461841; cSyncDp244v2=1701461841; cSyncDp248v2=1701461841; cSyncDp261v1=1701461841; cSyncDp14v4=1701461842
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
acint.net/match?dp=14&euid=1D03420A503F6A651C0003120219DB61
193.3.184.7200 OK 43 B URL GET HTTP/2 acint.net/match?dp=14&euid=1D03420A503F6A651C0003120219DB61
IP 193.3.184.7:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=14&euid=1D03420A503F6A651C0003120219DB61 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; cSyncDp14v6=1701461841; cSyncDp17v2=1701461841; cSyncDp45v5=1701461841; cSyncDp53v5=1701461841; cSyncDp62v2=1701461841; cSyncDp67v3=1701461841; cSyncDp68v2=1701461841; cSyncDp71v2=1701461841; cSyncDp80v2=1701461841; cSyncDp85v2=1701461841; cSyncDp95v4=1701461841; cSyncDp98v3=1701461841; cSyncDp104v2=1701461841; cSyncDp107v2=1701461841; cSyncDp110v3=1701461841; cSyncDp125v4=1701461841; cSyncDp126v2=1701461841; cSyncDp127v2=1701461841; cSyncDp129v2=1701461841; cSyncDp136v3=1701461841; cSyncDp146v2=1701461841; cSyncDp148v2=1701461841; cSyncDp149v3=1701461841; cSyncDp151v2=1701461841; cSyncDp251v1=1701461841; cSyncDp186v2=1701461841; cSyncDp217v2=1701461841; cSyncDp221v2=1701461841; cSyncDp235v2=1701461841; cSyncDp239v2=1701461841; cSyncDp243v2=1701461841; cSyncDp260v2=1701461841; cSyncDp244v2=1701461841; cSyncDp248v2=1701461841; cSyncDp261v1=1701461841; cSyncDp14v4=1701461842
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
acint.net/match?dp=14&euid=1D03420A503F6A651C0003120219DB61
193.3.184.7200 OK 43 B URL GET HTTP/2 acint.net/match?dp=14&euid=1D03420A503F6A651C0003120219DB61
IP 193.3.184.7:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=14&euid=1D03420A503F6A651C0003120219DB61 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; cSyncDp14v6=1701461841; cSyncDp17v2=1701461841; cSyncDp45v5=1701461841; cSyncDp53v5=1701461841; cSyncDp62v2=1701461841; cSyncDp67v3=1701461841; cSyncDp68v2=1701461841; cSyncDp71v2=1701461841; cSyncDp80v2=1701461841; cSyncDp85v2=1701461841; cSyncDp95v4=1701461841; cSyncDp98v3=1701461841; cSyncDp104v2=1701461841; cSyncDp107v2=1701461841; cSyncDp110v3=1701461841; cSyncDp125v4=1701461841; cSyncDp126v2=1701461841; cSyncDp127v2=1701461841; cSyncDp129v2=1701461841; cSyncDp136v3=1701461841; cSyncDp146v2=1701461841; cSyncDp148v2=1701461841; cSyncDp149v3=1701461841; cSyncDp151v2=1701461841; cSyncDp251v1=1701461841; cSyncDp186v2=1701461841; cSyncDp217v2=1701461841; cSyncDp221v2=1701461841; cSyncDp235v2=1701461841; cSyncDp239v2=1701461841; cSyncDp243v2=1701461841; cSyncDp260v2=1701461841; cSyncDp244v2=1701461841; cSyncDp248v2=1701461841; cSyncDp261v1=1701461841; cSyncDp14v4=1701461842
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
acint.net/match?dp=14&euid=1D03420A503F6A651C0003120219DB61
193.3.184.7200 OK 43 B URL GET HTTP/2 acint.net/match?dp=14&euid=1D03420A503F6A651C0003120219DB61
IP 193.3.184.7:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=14&euid=1D03420A503F6A651C0003120219DB61 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; cSyncDp14v6=1701461841; cSyncDp17v2=1701461841; cSyncDp45v5=1701461841; cSyncDp53v5=1701461841; cSyncDp62v2=1701461841; cSyncDp67v3=1701461841; cSyncDp68v2=1701461841; cSyncDp71v2=1701461841; cSyncDp80v2=1701461841; cSyncDp85v2=1701461841; cSyncDp95v4=1701461841; cSyncDp98v3=1701461841; cSyncDp104v2=1701461841; cSyncDp107v2=1701461841; cSyncDp110v3=1701461841; cSyncDp125v4=1701461841; cSyncDp126v2=1701461841; cSyncDp127v2=1701461841; cSyncDp129v2=1701461841; cSyncDp136v3=1701461841; cSyncDp146v2=1701461841; cSyncDp148v2=1701461841; cSyncDp149v3=1701461841; cSyncDp151v2=1701461841; cSyncDp251v1=1701461841; cSyncDp186v2=1701461841; cSyncDp217v2=1701461841; cSyncDp221v2=1701461841; cSyncDp235v2=1701461841; cSyncDp239v2=1701461841; cSyncDp243v2=1701461841; cSyncDp260v2=1701461841; cSyncDp244v2=1701461841; cSyncDp248v2=1701461841; cSyncDp261v1=1701461841; cSyncDp14v4=1701461842
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
142.250.74.67200 OK 9.8 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP 142.250.74.67:443
Requested by https://www.youtube.com/embed/LgviGeHyRzQ
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 9832, version 1.0\012- data
Hash efe937997e08e15b056a3643e2734636
d02decbf472a0928b054cc8e4b13684539a913db
53f2931d978bf9b24d43b5d556ecf315a6b3f089699c5ba3a954c4dde8663361
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:46:24 GMT
expires: Fri, 29 Nov 2024 04:46:24 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:49 GMT
content-type: font/woff2
age: 142259
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
142.250.74.138200 OK 0 B URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 142.250.74.138:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Fri, 01 Dec 2023 20:17:23 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pddata.ru/data.js
82.146.61.38200 OK 0 B IP 82.146.61.38:443
Certificate IssuerLet's Encrypt
Subjectpddata.ru
Fingerprint2B:77:1F:3B:89:D9:97:4C:CE:92:77:67:4C:72:37:0E:F4:01:06:5E
ValiditySun, 05 Nov 2023 04:52:12 GMT - Sat, 03 Feb 2024 04:52:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /data.js HTTP/1.1
Host: pddata.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.25.2
Date: Fri, 01 Dec 2023 20:17:23 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Last-Modified: Friday, 01-Dec-2023 20:17:23 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
af.click.ru/collect_stat.js
217.197.112.80200 OK 913 B URL GET HTTP/1.1 af.click.ru/collect_stat.js
IP 217.197.112.80:443
ASN #20655 e-Style ISP LLC
Certificate IssuerLet's Encrypt
Subject*.click.ru
FingerprintDA:42:53:52:8A:4E:7E:25:E6:A2:F8:72:12:6C:BA:E6:48:91:96:FD
ValiditySun, 05 Nov 2023 09:12:17 GMT - Sat, 03 Feb 2024 09:12:16 GMT
Hash 9531806d16d72f9659eaab01bd09689b
7640f092c2b928c614bb46251477a3c80b3e820b
a01ed62761c70d35a7f2dd5f497451e70b85e85bb8f1774cee68d53554e6ecaa
GET /collect_stat.js HTTP/1.1
Host: af.click.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 20:17:23 GMT
Content-Type: application/javascript
Content-Length: 913
Last-Modified: Fri, 18 Nov 2022 09:50:15 GMT
Connection: keep-alive
ETag: "63775557-391"
Accept-Ranges: bytes
adcck.ru/verify/
78.24.221.61200 OK 6.2 kB IP 78.24.221.61:443
Certificate IssuerLet's Encrypt
Subjectadcck.ru
Fingerprint75:23:3A:E1:F9:BE:A1:F7:A7:D8:6A:63:80:5E:EF:54:1B:17:7E:82
ValiditySat, 04 Nov 2023 20:57:10 GMT - Fri, 02 Feb 2024 20:57:09 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash e33c02afd0f3669b1684eee810850526
3db1ad57a60f1887a9befeea16dba5e5ce1ae6c1
933c1c9ce526d781121771d328d8a944b6c1860959f1b21a0a7520c9632911a4
GET /verify/ HTTP/1.1
Host: adcck.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.25.2
Date: Fri, 01 Dec 2023 20:17:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
Set-Cookie: uid=07dd027b-5775-419c-985e-042260738de3; expires=Sat, 30 Nov 2024 20:17:23 GMT; Max-Age=31536000; Path=/
Last-Modified: Friday, 01-Dec-2023 20:17:23 GMT
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
Content-Encoding: gzip
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
142.250.74.138200 OK 33 kB URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 142.250.74.138:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash c0964a070472ec877e12c955f49a10ed
bf50e201af257ac340657537c3b56bd06b10473f
c7723a2353db9845e4fb19791d03930eeaf47289c0f6819d5e2379580de1b0ab
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 20:17:23 GMT
server: ESF
cache-control: private
content-length: 32773
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.trustlink.ru/test.js
95.163.111.160200 OK 2.1 kB URL GET HTTP/1.1 static.trustlink.ru/test.js
IP 95.163.111.160:443
ASN #12695 LLC Digital Network
Certificate IssuerLet's Encrypt
Subjectstatic.trustlink.ru
FingerprintA8:09:AC:0E:EF:6A:C0:90:33:BA:F3:84:8C:A9:10:5B:E1:8A:9C:D8
ValidityTue, 10 Oct 2023 06:17:58 GMT - Mon, 08 Jan 2024 06:17:57 GMT
File type HTML document, Unicode text, UTF-8 text
Hash 5c61c2cfc5a3031ccc0de0262e478563
5e7c4d5a12bf287dfd94b2d10f34ef024aeb6e5a
163a61818bdf429f47bc2b09cbcd2a6e9c67c4f970e3ca1cd21c6d158d813ea3
GET /test.js HTTP/1.1
Host: static.trustlink.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.2.6
Date: Fri, 01 Dec 2023 20:17:23 GMT
Content-Type: application/x-javascript
Last-Modified: Fri, 24 Nov 2023 15:35:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
142.250.74.142200 OK 34 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
IP 142.250.74.142:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (537)
Hash 63aa8296f70f3dcbf8b5df6faf8d46c3
2494976b44b1d3ec3b5825297e243679e7cca1dd
869da04350e0925de923dd2c39c41d18ba0625e3541bd5059ed5a611550552b6
GET /s/player/31e0b6d9/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/u64SGL1B8vA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33484
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:40 GMT
expires: Fri, 29 Nov 2024 04:32:40 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 143083
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
i.ytimg.com/vi_webp/u64SGL1B8vA/hqdefault.webp
216.58.207.214200 OK 6.5 kB URL GET HTTP/2 i.ytimg.com/vi_webp/u64SGL1B8vA/hqdefault.webp
IP 216.58.207.214:443
Requested by https://www.youtube.com/embed/u64SGL1B8vA
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintC8:30:4C:1A:A8:FF:83:E1:A2:7F:DB:02:8C:D9:05:46:C4:D6:CA:95
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 480x360, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 181d6090861b9826a25ce398edbcbfbe
099bb57eb264a8b8017760918fca079a4780a725
7f2b13c4d0a59dd39ce7c7c4d323d4791a36799a40bd1f1b9b2417d65dc74d16
GET /vi_webp/u64SGL1B8vA/hqdefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 6506
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 01 Dec 2023 20:17:23 GMT
expires: Fri, 01 Dec 2023 22:17:23 GMT
cache-control: public, max-age=7200
etag: "1354707381"
content-type: image/webp
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
a285fb48-9086-11ee-86e0-002590c0647c.n1.sync.bumlam.com/?src=sape
80.87.194.210302 Found 0 B URL GET HTTP/2 a285fb48-9086-11ee-86e0-002590c0647c.n1.sync.bumlam.com/?src=sape
IP 80.87.194.210:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.n0.sync.bumlam.com
Fingerprint99:77:61:BD:7C:71:52:75:4C:35:19:FA:21:42:A9:2E:BF:93:81:BF
ValidityTue, 19 Sep 2023 05:05:41 GMT - Mon, 18 Dec 2023 05:05:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sape HTTP/1.1
Host: a285fb48-9086-11ee-86e0-002590c0647c.n1.sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiRhMjg1ZmI0OC05MDg2LTExZWUtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.24.0
date: Fri, 01 Dec 2023 20:17:23 GMT
content-length: 0
location: https://pix.bumlam.com/sync/sape/done
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
142.250.74.67200 OK 9.8 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP 142.250.74.67:443
Requested by https://www.youtube.com/embed/LgviGeHyRzQ
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 9832, version 1.0\012- data
Hash efe937997e08e15b056a3643e2734636
d02decbf472a0928b054cc8e4b13684539a913db
53f2931d978bf9b24d43b5d556ecf315a6b3f089699c5ba3a954c4dde8663361
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:46:24 GMT
expires: Fri, 29 Nov 2024 04:46:24 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:49 GMT
content-type: font/woff2
age: 142259
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
i.ytimg.com/vi/OPkkej6ouIg/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGCggUCh_MA8=&rs=AOn4CLC2DeYYygc7OY7Lc0_1MXrLcsF9SA
216.58.207.214200 OK 24 kB URL GET HTTP/2 i.ytimg.com/vi/OPkkej6ouIg/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGCggUCh_MA8=&rs=AOn4CLC2DeYYygc7OY7Lc0_1MXrLcsF9SA
IP 216.58.207.214:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintC8:30:4C:1A:A8:FF:83:E1:A2:7F:DB:02:8C:D9:05:46:C4:D6:CA:95
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3\012- data
Hash 7c8a6b5cdbda30fe164ce06156bfe40b
228b572be597a7b08a37114830a43ce44fd2810c
4d02c7a507d7b6f0aa810ad5290771728bd3ce7a1ccc0b2e3efa5734fe23dfd1
GET /vi/OPkkej6ouIg/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGCggUCh_MA8=&rs=AOn4CLC2DeYYygc7OY7Lc0_1MXrLcsF9SA HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 23918
date: Fri, 01 Dec 2023 20:17:23 GMT
expires: Fri, 01 Dec 2023 22:17:23 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
142.250.74.100200 OK 15 kB URL GET HTTP/3 www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
IP 142.250.74.100:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (38778)
Hash 611664198e75adad39f34b46876810f4
e4a80a37ddbebff8794b6edcaa73e55152208f24
88f11ff78b7b920e35013f6de2ba06287ee544f9552b1bab4364370d467677fa
GET /js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 15286
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 14:38:43 GMT
expires: Thu, 28 Nov 2024 14:38:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 17:00:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 193120
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
yt3.ggpht.com/ytc/APkrFKa8sG4r1l0adm45JNSAIEpATCgZ1oSoi6ghNNTVbA=s68-c-k-c0x00ffffff-no-rj
142.250.74.161200 OK 2.6 kB URL GET HTTP/2 yt3.ggpht.com/ytc/APkrFKa8sG4r1l0adm45JNSAIEpATCgZ1oSoi6ghNNTVbA=s68-c-k-c0x00ffffff-no-rj
IP 142.250.74.161:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash 8e181c0a4960ed2957cd1adc9fb5ccc5
b86d6a27a3e801fa075afa1255e175eb420d9002
72572c070d9b3c01cd0507277a1f0ebffe96269ffd95798e32c77bcf928552ff
GET /ytc/APkrFKa8sG4r1l0adm45JNSAIEpATCgZ1oSoi6ghNNTVbA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 2615
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:48:52 GMT
expires: Sat, 02 Dec 2023 19:48:52 GMT
cache-control: public, max-age=86400, no-transform
age: 1711
etag: "v64d"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pix.bumlam.com/sync/sape/done
31.172.81.160200 OK 43 B URL GET HTTP/1.1 pix.bumlam.com/sync/sape/done
IP 31.172.81.160:443
ASN #44066 diva-e Datacenters GmbH
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.bumlam.com
Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0
ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /sync/sape/done HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiRhMjg1ZmI0OC05MDg2LTExZWUtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 20:17:23 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
i.ytimg.com/vi/LgviGeHyRzQ/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGHIgRCg8MA8=&rs=AOn4CLB7wYNdEx5saOUUX662iK_HzhCuEQ
216.58.207.214200 OK 26 kB URL GET HTTP/2 i.ytimg.com/vi/LgviGeHyRzQ/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGHIgRCg8MA8=&rs=AOn4CLB7wYNdEx5saOUUX662iK_HzhCuEQ
IP 216.58.207.214:443
Requested by https://www.youtube.com/embed/LgviGeHyRzQ
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintC8:30:4C:1A:A8:FF:83:E1:A2:7F:DB:02:8C:D9:05:46:C4:D6:CA:95
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3\012- data
Hash 6f2b264a26e8931e155dbab23d6cbcfb
edd652a8a55a5ac0e8506546b51537396f7d4331
df13761a7b893c66fd96887962441e4663550670da11955ab145bd41cb7c9022
GET /vi/LgviGeHyRzQ/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGHIgRCg8MA8=&rs=AOn4CLB7wYNdEx5saOUUX662iK_HzhCuEQ HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 26349
date: Fri, 01 Dec 2023 20:17:23 GMT
expires: Fri, 01 Dec 2023 22:17:23 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
yt3.ggpht.com/ytc/APkrFKa8sG4r1l0adm45JNSAIEpATCgZ1oSoi6ghNNTVbA=s68-c-k-c0x00ffffff-no-rj
142.250.74.161200 OK 2.6 kB URL GET HTTP/2 yt3.ggpht.com/ytc/APkrFKa8sG4r1l0adm45JNSAIEpATCgZ1oSoi6ghNNTVbA=s68-c-k-c0x00ffffff-no-rj
IP 142.250.74.161:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash 8e181c0a4960ed2957cd1adc9fb5ccc5
b86d6a27a3e801fa075afa1255e175eb420d9002
72572c070d9b3c01cd0507277a1f0ebffe96269ffd95798e32c77bcf928552ff
GET /ytc/APkrFKa8sG4r1l0adm45JNSAIEpATCgZ1oSoi6ghNNTVbA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 2615
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:48:52 GMT
expires: Sat, 02 Dec 2023 19:48:52 GMT
cache-control: public, max-age=86400, no-transform
age: 1711
etag: "v64d"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
142.250.74.142200 OK 34 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
IP 142.250.74.142:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (537)
Hash 63aa8296f70f3dcbf8b5df6faf8d46c3
2494976b44b1d3ec3b5825297e243679e7cca1dd
869da04350e0925de923dd2c39c41d18ba0625e3541bd5059ed5a611550552b6
GET /s/player/31e0b6d9/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/OPkkej6ouIg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33484
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:40 GMT
expires: Fri, 29 Nov 2024 04:32:40 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 143083
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
142.250.74.100200 OK 15 kB URL GET HTTP/3 www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
IP 142.250.74.100:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (38778)
Hash 611664198e75adad39f34b46876810f4
e4a80a37ddbebff8794b6edcaa73e55152208f24
88f11ff78b7b920e35013f6de2ba06287ee544f9552b1bab4364370d467677fa
GET /js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 15286
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 14:38:43 GMT
expires: Thu, 28 Nov 2024 14:38:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 17:00:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 193120
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
142.250.74.138200 OK 33 kB URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 142.250.74.138:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 598391e67958aba5fe79351f493e39df
a6eabc33e86229178823f2319fe0ba9228aa3775
f26103bdd496d7f521fc6b0b58ec2640ba20c56539825953a0b885719c2999ce
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 20:17:23 GMT
server: ESF
cache-control: private
content-length: 32728
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
142.250.74.100200 OK 15 kB URL GET HTTP/3 www.google.com/js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js
IP 142.250.74.100:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (38778)
Hash 611664198e75adad39f34b46876810f4
e4a80a37ddbebff8794b6edcaa73e55152208f24
88f11ff78b7b920e35013f6de2ba06287ee544f9552b1bab4364370d467677fa
GET /js/th/iPEf94t7kg41AT9t4roGKH7lRPlVKxurQ2Q3DUZ2d_o.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 15286
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 14:38:43 GMT
expires: Thu, 28 Nov 2024 14:38:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Nov 2023 17:00:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 193120
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
142.250.74.142200 OK 34 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
IP 142.250.74.142:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (537)
Hash 63aa8296f70f3dcbf8b5df6faf8d46c3
2494976b44b1d3ec3b5825297e243679e7cca1dd
869da04350e0925de923dd2c39c41d18ba0625e3541bd5059ed5a611550552b6
GET /s/player/31e0b6d9/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/LgviGeHyRzQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33484
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:32:40 GMT
expires: Fri, 29 Nov 2024 04:32:40 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 143083
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
142.250.74.138200 OK 33 kB URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 142.250.74.138:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 13bc9791eeb9d1cd77756426ff59d5ce
418bc73a19a81d97fa10ad72442e0253d579e04f
72b96151edd08f247bc5e058407270f3b0fdc0cf08a9ff28849ba965a9286564
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 20:17:23 GMT
server: ESF
cache-control: private
content-length: 32860
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
142.250.74.67200 OK 9.8 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP 142.250.74.67:443
Requested by https://www.youtube.com/embed/LgviGeHyRzQ
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 9832, version 1.0\012- data
Hash efe937997e08e15b056a3643e2734636
d02decbf472a0928b054cc8e4b13684539a913db
53f2931d978bf9b24d43b5d556ecf315a6b3f089699c5ba3a954c4dde8663361
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:46:24 GMT
expires: Fri, 29 Nov 2024 04:46:24 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:49 GMT
content-type: font/woff2
age: 142259
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
yt3.ggpht.com/ytc/APkrFKa8sG4r1l0adm45JNSAIEpATCgZ1oSoi6ghNNTVbA=s68-c-k-c0x00ffffff-no-rj
142.250.74.161200 OK 2.6 kB URL GET HTTP/2 yt3.ggpht.com/ytc/APkrFKa8sG4r1l0adm45JNSAIEpATCgZ1oSoi6ghNNTVbA=s68-c-k-c0x00ffffff-no-rj
IP 142.250.74.161:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash 8e181c0a4960ed2957cd1adc9fb5ccc5
b86d6a27a3e801fa075afa1255e175eb420d9002
72572c070d9b3c01cd0507277a1f0ebffe96269ffd95798e32c77bcf928552ff
GET /ytc/APkrFKa8sG4r1l0adm45JNSAIEpATCgZ1oSoi6ghNNTVbA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 2615
x-xss-protection: 0
date: Fri, 01 Dec 2023 19:48:52 GMT
expires: Sat, 02 Dec 2023 19:48:52 GMT
cache-control: public, max-age=86400, no-transform
age: 1711
etag: "v64d"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/generate_204?VI4AKw
142.250.74.142204 No Content 0 B URL GET HTTP/3 www.youtube.com/generate_204?VI4AKw
IP 142.250.74.142:443
Requested by https://www.youtube.com/embed/u64SGL1B8vA
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?VI4AKw HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/u64SGL1B8vA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Fri, 01 Dec 2023 20:17:23 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
w.uptolike.com/widgets/v1/zp/support.html
95.163.114.203200 OK 3.8 kB URL GET HTTP/1.1 w.uptolike.com/widgets/v1/zp/support.html
IP 95.163.114.203:443
ASN #12695 LLC Digital Network
Certificate IssuerLet's Encrypt
Subjectuptolike.com
Fingerprint05:EC:E2:F5:E1:CC:42:09:42:DC:90:8A:CF:B4:9B:7C:0C:2F:98:68
ValiditySat, 28 Oct 2023 04:43:41 GMT - Fri, 26 Jan 2024 04:43:40 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 12d34599a0aa7c7d32aebada7b15e06d
b0c3e03792d85edff500693eaf5e5d80e4a4e70b
dbb87754e7677c99a20c4603a88765b6cb926a78b79edb863fee5c9ea1c96ef4
GET /widgets/v1/zp/support.html HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Cookie: utl_id2=33842310219; utl_dat="CMiknbjCMRAAIMj158DCMSjI9efAwjEwANbxv4BTEXxG/y+Fp88qJDw="
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 01 Dec 2023 20:17:23 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=1800
Expires: Fri, 01 Dec 2023 20:47:23 GMT
Content-Encoding: gzip
w.uptolike.com/widgets/v1/zp/imp?pid=lf4735c47028716fcc9534c835f684a6b72f33758e&fl=false&sw=1280&sh=1024&vw=1280&vh=1024&vp=bef2bcc3-9df8-4cbc-801e-1743d396401c&ttl=JUQwJTlCJUQwJUIwJUQwJUJBJUQwJUJFLSVEMCVCQSVEMSU4MCVEMCVCMCVEMSU4MSVEMCVCRSVEMSU4NyVEMCVCRCVEMSU4QiVEMCVCNSUyMCVEMCVCQyVEMCVCMCVEMSU4MiVEMCVCNSVEMSU4MCVEMCVCOCVEMCVCMCVEMCVCQiVEMSU4QiUyMC0lMjAlRDAlQkYlRDElODAlRDAlQkUlRDAlQjglRDAlQjclRDAlQjIlRDAlQkUlRDAlQjQlRDElODElRDElODIlRDAlQjIlRDAlQkUlMjAlRDAlQjglMjAlRDAlQkUlRDAlQjElRDAlQkUlRDElODAlRDElODMlRDAlQjQlRDAlQkUlRDAlQjIlRDAlQjAlRDAlQkQlRDAlQjglRDAlQjU%3D&url=http%3A%2F%2Fkraska.biz%2F&rnd=0.2385082975809072
95.163.114.203204 No Content 0 B URL GET HTTP/1.1 w.uptolike.com/widgets/v1/zp/imp?pid=lf4735c47028716fcc9534c835f684a6b72f33758e&fl=false&sw=1280&sh=1024&vw=1280&vh=1024&vp=bef2bcc3-9df8-4cbc-801e-1743d396401c&ttl=JUQwJTlCJUQwJUIwJUQwJUJBJUQwJUJFLSVEMCVCQSVEMSU4MCVEMCVCMCVEMSU4MSVEMCVCRSVEMSU4NyVEMCVCRCVEMSU4QiVEMCVCNSUyMCVEMCVCQyVEMCVCMCVEMSU4MiVEMCVCNSVEMSU4MCVEMCVCOCVEMCVCMCVEMCVCQiVEMSU4QiUyMC0lMjAlRDAlQkYlRDElODAlRDAlQkUlRDAlQjglRDAlQjclRDAlQjIlRDAlQkUlRDAlQjQlRDElODElRDElODIlRDAlQjIlRDAlQkUlMjAlRDAlQjglMjAlRDAlQkUlRDAlQjElRDAlQkUlRDElODAlRDElODMlRDAlQjQlRDAlQkUlRDAlQjIlRDAlQjAlRDAlQkQlRDAlQjglRDAlQjU%3D&url=http%3A%2F%2Fkraska.biz%2F&rnd=0.2385082975809072
IP 95.163.114.203:443
ASN #12695 LLC Digital Network
Requested by https://w.uptolike.com/widgets/v1/impression.html?622e27e5349ec1bb07f4f36fc56e7c84
Certificate IssuerLet's Encrypt
Subjectuptolike.com
Fingerprint05:EC:E2:F5:E1:CC:42:09:42:DC:90:8A:CF:B4:9B:7C:0C:2F:98:68
ValiditySat, 28 Oct 2023 04:43:41 GMT - Fri, 26 Jan 2024 04:43:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /widgets/v1/zp/imp?pid=lf4735c47028716fcc9534c835f684a6b72f33758e&fl=false&sw=1280&sh=1024&vw=1280&vh=1024&vp=bef2bcc3-9df8-4cbc-801e-1743d396401c&ttl=JUQwJTlCJUQwJUIwJUQwJUJBJUQwJUJFLSVEMCVCQSVEMSU4MCVEMCVCMCVEMSU4MSVEMCVCRSVEMSU4NyVEMCVCRCVEMSU4QiVEMCVCNSUyMCVEMCVCQyVEMCVCMCVEMSU4MiVEMCVCNSVEMSU4MCVEMCVCOCVEMCVCMCVEMCVCQiVEMSU4QiUyMC0lMjAlRDAlQkYlRDElODAlRDAlQkUlRDAlQjglRDAlQjclRDAlQjIlRDAlQkUlRDAlQjQlRDElODElRDElODIlRDAlQjIlRDAlQkUlMjAlRDAlQjglMjAlRDAlQkUlRDAlQjElRDAlQkUlRDElODAlRDElODMlRDAlQjQlRDAlQkUlRDAlQjIlRDAlQjAlRDAlQkQlRDAlQjglRDAlQjU%3D&url=http%3A%2F%2Fkraska.biz%2F&rnd=0.2385082975809072 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w.uptolike.com/widgets/v1/impression.html?622e27e5349ec1bb07f4f36fc56e7c84
Cookie: utl_id2=33842310219; utl_dat="CMiknbjCMRAAIMj158DCMSjI9efAwjEwANbxv4BTEXxG/y+Fp88qJDw="
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx
Date: Fri, 01 Dec 2023 20:17:24 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
www.youtube.com/generate_204?ZeByAg
142.250.74.142204 No Content 0 B URL GET HTTP/3 www.youtube.com/generate_204?ZeByAg
IP 142.250.74.142:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?ZeByAg HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/OPkkej6ouIg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Fri, 01 Dec 2023 20:17:24 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
connect.ok.ru/dk?st.cmd=extLike&uid=odklcnt0&ref=http%3A%2F%2Fkraska.biz%2F%3F_utl_t%3Dok&callback=callback__utl_cb_share_1701461848693822
217.20.147.3200 OK 72 B URL GET HTTP/2 connect.ok.ru/dk?st.cmd=extLike&uid=odklcnt0&ref=http%3A%2F%2Fkraska.biz%2F%3F_utl_t%3Dok&callback=callback__utl_cb_share_1701461848693822
IP 217.20.147.3:443
Requested by https://w.uptolike.com/widgets/v1/share-counter.html?622e27e5349ec1bb07f4f36fc56e7c84
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type ASCII text, with no line terminators
Hash b7012716b31d35343026b521066f0625
790e835387ad69a9bf09e30bc2bbe6faaa28be2c
1ceec8e1180b36a40742677a5e18cb3c7c441cede741dd89342255ac52826d19
GET /dk?st.cmd=extLike&uid=odklcnt0&ref=http%3A%2F%2Fkraska.biz%2F%3F_utl_t%3Dok&callback=callback__utl_cb_share_1701461848693822 HTTP/1.1
Host: connect.ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w.uptolike.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 20:17:24 GMT
content-type: application/javascript;charset=UTF-8
vary: Accept-Encoding
set-cookie: bci=2134968545883703555; Domain=.ok.ru; Expires=Wed, 19 Dec 2091 23:31:31 GMT; Path=/; Secure; HttpOnly
_statid=6175e65b-1a44-41e8-a6c1-46068871d1a9; Domain=.ok.ru; Expires=Wed, 19 Dec 2091 23:31:31 GMT; Path=/; Secure; HttpOnly
landref=w.uptolike.com; Domain=.ok.ru; Path=/; Secure
__last_online=1701461844119; Expires=Wed, 19 Dec 2091 23:31:31 GMT; Path=/; Secure
content-security-policy: default-src data: 'self' 'unsafe-inline' 'unsafe-eval' ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me wss://ad.mail.ru *.mail.ru *.imgsmail.ru *.mradx.net *.serving-sys.com *.googleapis.com *.gstatic.com www.google.com https://api-maps.yandex.ru yastatic.net yandex.st *.doubleverify.com *.adsafeprotected.com https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://football.sportmail.ru *.google.ru *.google.com *.googlesyndication.com *.yandex.ru blob:; script-src 'unsafe-inline' 'unsafe-eval' *.mail.ru https://*.mail.ru *.imgsmail.ru *.mradx.net ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me mc.yandex.ru an.yandex.ru yastatic.net yandex.st *.google-analytics.com api-maps.yandex.ru https://api-maps.yandex.ru https://clck.yandex.ru *.googleapis.com *.gstatic.com www.google.com www.youtube.com https://www.youtube.com *.ytimg.com https://*.ytimg.com *.doubleverify.com *.dvtps.com *.doubleclick.net *.googletagservices.com *.googlesyndication.com *.googleadservices.com *.goodgame.ru https://*.goodgame.ru https://*.moatads.com *.adlooxtracking.com *.adlooxtracking.ru *.adsafeprotected.com *.serving-sys.com *.serving-sys.ru *.weborama.fr *.weborama-tech.ru https://enterprise.api-maps.yandex.ru https://suggest-maps.yandex.ru https://*.hit.gemius.pl https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://gum.criteo.com https://football.sportmail.ru *.googletagmanager.com connect.facebook.net *.google.ru *.google.com *.googlesyndication.com yandex.ru; worker-src blob: 'self'; connect-src * wss: blob: data:; font-src * data: blob:; frame-src * blob: 'self'; img-src * data: blob: about:; media-src * data: blob:; object-src *; report-uri /csp/report;
content-security-policy-report-only: default-src data: blob: about: 'self' 'unsafe-inline' 'unsafe-eval' https: wss:; report-uri /csp/report?always;
cache-control: no-cache, no-store
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=63072000;includeSubdomains;preload
access-control-allow-origin: *
access-control-allow-credentials: true
rendered-blocks: WidgetExtLike
content-encoding: br
X-Firefox-Spdy: h2
w.uptolike.com/widgets/v1/upd?id=ok&pid=cmskraskabiz&url=http%3A%2F%2Fkraska.biz%2F%3F_utl_t%3Dok&c=1&callback=callback__utl_cb_share_1701461849045533
95.163.114.203204 No Content 0 B URL GET HTTP/1.1 w.uptolike.com/widgets/v1/upd?id=ok&pid=cmskraskabiz&url=http%3A%2F%2Fkraska.biz%2F%3F_utl_t%3Dok&c=1&callback=callback__utl_cb_share_1701461849045533
IP 95.163.114.203:443
ASN #12695 LLC Digital Network
Requested by https://w.uptolike.com/widgets/v1/share-counter.html?622e27e5349ec1bb07f4f36fc56e7c84
Certificate IssuerLet's Encrypt
Subjectuptolike.com
Fingerprint05:EC:E2:F5:E1:CC:42:09:42:DC:90:8A:CF:B4:9B:7C:0C:2F:98:68
ValiditySat, 28 Oct 2023 04:43:41 GMT - Fri, 26 Jan 2024 04:43:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /widgets/v1/upd?id=ok&pid=cmskraskabiz&url=http%3A%2F%2Fkraska.biz%2F%3F_utl_t%3Dok&c=1&callback=callback__utl_cb_share_1701461849045533 HTTP/1.1
Host: w.uptolike.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w.uptolike.com/widgets/v1/share-counter.html?622e27e5349ec1bb07f4f36fc56e7c84
Cookie: utl_id2=33842310219; utl_dat="CMiknbjCMRAAIMj158DCMSjI9efAwjEwANbxv4BTEXxG/y+Fp88qJDw="
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx
Date: Fri, 01 Dec 2023 20:17:24 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
api.pinterest.com/v1/urls/count.json?&url=http%3A%2F%2Fkraska.biz%2F&callback=callback__utl_cb_share_1701461848696479
23.52.84.225200 OK 79 B URL GET HTTP/2 api.pinterest.com/v1/urls/count.json?&url=http%3A%2F%2Fkraska.biz%2F&callback=callback__utl_cb_share_1701461848696479
IP 23.52.84.225:443
Requested by https://w.uptolike.com/widgets/v1/share-counter.html?622e27e5349ec1bb07f4f36fc56e7c84
Certificate IssuerDigiCert Inc
Subject*.pinterest.com
Fingerprint8E:D1:BC:9A:53:E5:51:57:5E:48:5E:22:82:8C:60:F8:74:F0:08:AC
ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 05dc55e0a5b409094f17b62a69d09c42
5442ebfa5ca71d4e94ca500067b781e5654ef203
9088730c53b8eaa3141d06cf628aa2e36e42be745d8ed352afa873bcf38cca90
GET /v1/urls/count.json?&url=http%3A%2F%2Fkraska.biz%2F&callback=callback__utl_cb_share_1701461848696479 HTTP/1.1
Host: api.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w.uptolike.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: application/javascript
content-length: 79
expires: Fri, 01 Dec 2023 20:32:24 GMT
x-envoy-upstream-service-time: 2
cache-control: no-cache, no-store, must-revalidate
x-pinterest-rid: 7956761521855314
date: Fri, 01 Dec 2023 20:17:24 GMT
alt-svc: h3=":443"; ma=600
set-cookie: _ir=0; Max-Age=1800; HttpOnly; Path=/; Secure
akamai-grn: 0.2b321060.1701461844.1db8612a
x-cdn: akamai
X-Firefox-Spdy: h2
api.pinterest.com/v1/urls/count.json?&url=http%3A%2F%2Fkraska.biz%2F%3F_utl_t%3Dps&callback=callback__utl_cb_share_1701461848698767
23.52.84.225200 OK 89 B URL GET HTTP/2 api.pinterest.com/v1/urls/count.json?&url=http%3A%2F%2Fkraska.biz%2F%3F_utl_t%3Dps&callback=callback__utl_cb_share_1701461848698767
IP 23.52.84.225:443
Requested by https://w.uptolike.com/widgets/v1/share-counter.html?622e27e5349ec1bb07f4f36fc56e7c84
Certificate IssuerDigiCert Inc
Subject*.pinterest.com
Fingerprint8E:D1:BC:9A:53:E5:51:57:5E:48:5E:22:82:8C:60:F8:74:F0:08:AC
ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash a3022cd725b1763d12dcccdc9a70d6a5
76f11734e2c2c83c58ba618424362fa66b41cb41
04ef638815fd12db63e2072d7f291351a3f57d7027ac7541ce6975bdc0080c31
GET /v1/urls/count.json?&url=http%3A%2F%2Fkraska.biz%2F%3F_utl_t%3Dps&callback=callback__utl_cb_share_1701461848698767 HTTP/1.1
Host: api.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w.uptolike.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: application/javascript
content-length: 89
expires: Fri, 01 Dec 2023 20:32:24 GMT
x-envoy-upstream-service-time: 1
cache-control: no-cache, no-store, must-revalidate
x-pinterest-rid: 9405952105883675
date: Fri, 01 Dec 2023 20:17:24 GMT
set-cookie: _ir=0; Max-Age=1800; HttpOnly; Path=/; Secure
akamai-grn: 0.2b321060.1701461844.1db8612b
x-cdn: akamai
X-Firefox-Spdy: h2
www.youtube.com/generate_204?qOmh9g
142.250.74.142204 No Content 0 B URL GET HTTP/3 www.youtube.com/generate_204?qOmh9g
IP 142.250.74.142:443
Requested by https://www.youtube.com/embed/LgviGeHyRzQ
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?qOmh9g HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/LgviGeHyRzQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Fri, 01 Dec 2023 20:17:24 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
142.250.74.138200 OK 0 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP 142.250.74.138:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Fri, 01 Dec 2023 20:17:24 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
142.250.74.138200 OK 114 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP 142.250.74.138:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 400b41c01ec4eb1208fd4dea196b30d7
cb55a010e4bbda01a8f3553d0774d83ecf25c434
d448d641359e0eae569a88ac211f5f7c402d282c4b3affa73c2f465bff670fda
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1227
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 20:17:24 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
142.250.74.138200 OK 114 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP 142.250.74.138:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7f03c4f9eba2948cc4d1e4ffa5c48dcb
9903676c32e8088bb491679117ff8b99a1fc51ba
2c16e77b707fd78be8970290616aab6fcd91dbba616e89f882b994a6bb362dc2
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1360
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 20:17:24 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
142.250.74.138200 OK 114 B URL POST HTTP/3 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP 142.250.74.138:443
Requested by https://www.youtube.com/embed/OPkkej6ouIg
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 437cd8e34d2363210020e960458898a9
85a9452e18afe631f45aae86aeba965df5db2799
b4e63722540a3167d501645611e2a68b561e94344fd79bad89e0c91de1eb4d41
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1178
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 01 Dec 2023 20:17:24 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
142.250.74.142200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP 142.250.74.142:443
Requested by https://www.youtube.com/embed/u64SGL1B8vA
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701461850061
Content-Type: application/json
X-Goog-Visitor-Id: Cgt3TEdXbC1CeHVRMCjQ_qirBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701461846488&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C256%2C192&vis=1&wgl=true&ca_type=image
Content-Length: 9425
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/u64SGL1B8vA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 20:17:25 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+555; expires=Sun, 30-Nov-2025 20:17:25 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 20:17:25 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
142.250.74.142200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP 142.250.74.142:443
Requested by https://www.youtube.com/embed/u64SGL1B8vA
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701461850378
Content-Type: application/json
X-Goog-Visitor-Id: CgtrdWxxMzlSZ25COCjQ_qirBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701461846513&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 16796
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/OPkkej6ouIg
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 20:17:25 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+505; expires=Sun, 30-Nov-2025 20:17:25 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 20:17:25 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
142.250.74.142200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP 142.250.74.142:443
Requested by https://www.youtube.com/embed/u64SGL1B8vA
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701461850448
Content-Type: application/json
X-Goog-Visitor-Id: CgtMMnNKOC1BRUoydyjQ_qirBjIKCgJOTxIEEgAgaQ%3D%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701461846561&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 16786
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/LgviGeHyRzQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 20:17:25 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+763; expires=Sun, 30-Nov-2025 20:17:25 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 20:17:25 GMT
cache-control: private
ads.adlook.me/csync?pid=sape&uid=0100007F503F6A65160792B102553227&url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
176.122.21.130302 Found 471 B URL GET HTTP/2 ads.adlook.me/csync?pid=sape&uid=0100007F503F6A65160792B102553227&url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
IP 176.122.21.130:443
ASN #48096 Enterprise Cloud Ltd.
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
Hash 5bbc27328bdd519df3d36f9a4429c564
58f00b49276979d9bb88a9c3f1a62a19c2d53ec6
451409cf44a9805ff5bfeeded0d5af0f8eadf8cd6f0dd049cf7fc249f76c532b
GET /csync?pid=sape&uid=0100007F503F6A65160792B102553227&url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://acint.net/match?dp=110&euid=6c286d437f3a47438fc00bed6a3ffea1
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=6c286d437f3a47438fc00bed6a3ffea1; expires=Fri, 29 Nov 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=none
adlk_cmatch=sape%3A0100007F503F6A65160792B102553227; expires=Fri, 31 Dec 9999 20:59:59 GMT; path=/; SameSite=None; secure; samesite=none
date: Fri, 01 Dec 2023 20:17:22 GMT
X-Firefox-Spdy: h2
aus5.mozilla.org/update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml
35.244.181.201 5.8 kB URL aus5.mozilla.org/update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml
IP 35.244.181.201:0
File type gzip compressed data, max speed, from Unix\012- data
Hash 26f74a51f3a41ab81bb1600c4dff77f8
94f623e1202d4fe4243e01b574201944e21ac815
68c20496e6e0670329c0a07f07d26fa6c870903c3c5f0f5082d8f6a09373be62
GET /update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:17:38 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-01-19-16-42-22.chain; p384ecdsa=USQSHinWw38MIwU7mXYINaHaMNtk3QI709EDbg4TI9M60NvRHWVPrXLuWbSoKDp2jlEG6PAddIR5Hw2hV5xyHHo2xNM1o43c_kqbc6ghMc0xy9uh1SLrGENs8YR6mloI
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: MISS
content-encoding: gzip
via: 1.1 google
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
2.18.121.79 512 kB URL ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
IP 2.18.121.79:0
File type Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Size 512 kB (511815 bytes)
Hash 152eda253e242e18443ef3282495bc7c
ff0fa85565f21ec4931baad4573b4c0bd08c4019
8e03090fee16f6e0ee2e436af8e51d0c3deed6d9f0db80dec048e668fc009a48
GET /openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip HTTP/1.1
Host: ciscobinary.openh264.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Last-Modified: Thu, 16 Nov 2023 07:38:15 GMT
ETag: 152eda253e242e18443ef3282495bc7c
Content-Length: 511815
Accept-Ranges: bytes
X-Timestamp: 1700120294.87662
Content-Type: application/zip
X-Trans-Id: tx8c0ef9e37b1a4ab29193d-0065580fd1dfw1
Cache-Control: public, max-age=208537
Expires: Mon, 04 Dec 2023 06:13:16 GMT
Date: Fri, 01 Dec 2023 20:17:39 GMT
Connection: keep-alive
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
142.250.74.142200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP 142.250.74.142:443
Requested by https://www.youtube.com/embed/u64SGL1B8vA
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701461866478
Content-Type: application/json
X-Goog-Visitor-Id: CgtrdWxxMzlSZ25COCjQ_qirBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701461846513&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 815
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/OPkkej6ouIg
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 20:17:41 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+328; expires=Sun, 30-Nov-2025 20:17:41 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 20:17:41 GMT
cache-control: private
connect.ok.ru/dk?st.cmd=extLike&uid=odklcnt0&ref=http%3A%2F%2Fkraska.biz&callback=callback__utl_cb_share_1701461848692792
217.20.147.3200 OK 60 B URL GET HTTP/2 connect.ok.ru/dk?st.cmd=extLike&uid=odklcnt0&ref=http%3A%2F%2Fkraska.biz&callback=callback__utl_cb_share_1701461848692792
IP 217.20.147.3:443
Requested by https://w.uptolike.com/widgets/v1/share-counter.html?622e27e5349ec1bb07f4f36fc56e7c84
Certificate IssuerGlobalSign nv-sa
Subject*.ok.ru
Fingerprint66:20:81:B9:D0:20:96:BF:13:93:E6:76:FF:C4:19:BD:F6:29:0E:A3
ValidityWed, 04 Oct 2023 08:36:03 GMT - Wed, 02 Oct 2024 09:21:02 GMT
File type ASCII text, with no line terminators
Hash 32b1ea77432373a4e0244a5233a52d5b
5d3db390a16ddca066c449672c5bacbde793eda9
48d1186e375dd91148851d1b190b40e99f821b7258e175c3ac15f7c05673096a
GET /dk?st.cmd=extLike&uid=odklcnt0&ref=http%3A%2F%2Fkraska.biz&callback=callback__utl_cb_share_1701461848692792 HTTP/1.1
Host: connect.ok.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w.uptolike.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: apache
date: Fri, 01 Dec 2023 20:17:24 GMT
content-type: application/javascript;charset=UTF-8
vary: Accept-Encoding
set-cookie: bci=-3965493982880104329; Domain=.ok.ru; Expires=Wed, 19 Dec 2091 23:31:31 GMT; Path=/; Secure; HttpOnly
_statid=1c717221-3773-4bb9-ab0c-8e5ac75dfbc0; Domain=.ok.ru; Expires=Wed, 19 Dec 2091 23:31:31 GMT; Path=/; Secure; HttpOnly
landref=w.uptolike.com; Domain=.ok.ru; Path=/; Secure
__last_online=1701461844087; Expires=Wed, 19 Dec 2091 23:31:31 GMT; Path=/; Secure
content-security-policy: default-src data: 'self' 'unsafe-inline' 'unsafe-eval' ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me wss://ad.mail.ru *.mail.ru *.imgsmail.ru *.mradx.net *.serving-sys.com *.googleapis.com *.gstatic.com www.google.com https://api-maps.yandex.ru yastatic.net yandex.st *.doubleverify.com *.adsafeprotected.com https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://football.sportmail.ru *.google.ru *.google.com *.googlesyndication.com *.yandex.ru blob:; script-src 'unsafe-inline' 'unsafe-eval' *.mail.ru https://*.mail.ru *.imgsmail.ru *.mradx.net ok.ru *.ok.ru odnoklassniki.ru *.odnoklassniki.ru mycdn.me http://*.mycdn.me https://*.mycdn.me mc.yandex.ru an.yandex.ru yastatic.net yandex.st *.google-analytics.com api-maps.yandex.ru https://api-maps.yandex.ru https://clck.yandex.ru *.googleapis.com *.gstatic.com www.google.com www.youtube.com https://www.youtube.com *.ytimg.com https://*.ytimg.com *.doubleverify.com *.dvtps.com *.doubleclick.net *.googletagservices.com *.googlesyndication.com *.googleadservices.com *.goodgame.ru https://*.goodgame.ru https://*.moatads.com *.adlooxtracking.com *.adlooxtracking.ru *.adsafeprotected.com *.serving-sys.com *.serving-sys.ru *.weborama.fr *.weborama-tech.ru https://enterprise.api-maps.yandex.ru https://suggest-maps.yandex.ru https://*.hit.gemius.pl https://consentmanager.mgr.consensu.org https://cdn.consentmanager.mgr.consensu.org https://gum.criteo.com https://football.sportmail.ru *.googletagmanager.com connect.facebook.net *.google.ru *.google.com *.googlesyndication.com yandex.ru; worker-src blob: 'self'; connect-src * wss: blob: data:; font-src * data: blob:; frame-src * blob: 'self'; img-src * data: blob: about:; media-src * data: blob:; object-src *; report-uri /csp/report;
content-security-policy-report-only: default-src data: blob: about: 'self' 'unsafe-inline' 'unsafe-eval' https: wss:; report-uri /csp/report?always;
cache-control: no-cache, no-store
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=63072000;includeSubdomains;preload
access-control-allow-origin: *
access-control-allow-credentials: true
rendered-blocks: WidgetExtLike
content-encoding: br
X-Firefox-Spdy: h2
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
142.250.74.142200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP 142.250.74.142:443
Requested by https://www.youtube.com/embed/u64SGL1B8vA
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701461866490
Content-Type: application/json
X-Goog-Visitor-Id: Cgt3TEdXbC1CeHVRMCjQ_qirBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701461846488&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=23&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C256%2C192&vis=1&wgl=true&ca_type=image
Content-Length: 824
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/u64SGL1B8vA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Fri, 01 Dec 2023 20:17:41 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+148; expires=Sun, 30-Nov-2025 20:17:41 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 01 Dec 2023 20:17:41 GMT
cache-control: private
www.acint.net/mc/?dp=14
193.3.184.7200 OK 5.6 kB IP 193.3.184.7:443
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5817), with no line terminators
Hash af2d48c36a417b4612d8920122cfa5e2
c551d8796d28ed1bff24eeb95d43fad2cbf23cfa
ab8bc625854dcf3c7600266a406ba29d9a001aa3cd96efc218486316fd78f03f
GET /mc/?dp=14 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:21 GMT
content-type: text/html
set-cookie: cSyncDp14v6=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp17v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp45v5=1701461841; expires=Sat, 02-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp53v5=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp62v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp67v3=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp68v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp71v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp80v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp85v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp95v4=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp98v3=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp104v2=1701461841; expires=Fri, 15-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp107v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp110v3=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp125v4=1701461841; expires=Sat, 16-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp126v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp127v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp129v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp136v3=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp146v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp148v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp149v3=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp151v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp251v1=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp186v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp217v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp221v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp235v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp239v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp243v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp260v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp244v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp248v2=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp261v1=1701461841; expires=Sun, 31-Dec-23 20:17:21 GMT; path=/; Secure; SameSite=None; domain=.acint.net
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
content-encoding: gzip
X-Firefox-Spdy: h2
www.acint.net/match?dp=129&euid=fak4mkddho
193.3.184.7200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=129&euid=fak4mkddho
IP 193.3.184.7:443
Requested by https://www.acint.net/mc/?dp=14
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=129&euid=fak4mkddho HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; cSyncDp14v6=1701461841; cSyncDp17v2=1701461841; cSyncDp45v5=1701461841; cSyncDp53v5=1701461841; cSyncDp62v2=1701461841; cSyncDp67v3=1701461841; cSyncDp68v2=1701461841; cSyncDp71v2=1701461841; cSyncDp80v2=1701461841; cSyncDp85v2=1701461841; cSyncDp95v4=1701461841; cSyncDp98v3=1701461841; cSyncDp104v2=1701461841; cSyncDp107v2=1701461841; cSyncDp110v3=1701461841; cSyncDp125v4=1701461841; cSyncDp126v2=1701461841; cSyncDp127v2=1701461841; cSyncDp129v2=1701461841; cSyncDp136v3=1701461841; cSyncDp146v2=1701461841; cSyncDp148v2=1701461841; cSyncDp149v3=1701461841; cSyncDp151v2=1701461841; cSyncDp251v1=1701461841; cSyncDp186v2=1701461841; cSyncDp217v2=1701461841; cSyncDp221v2=1701461841; cSyncDp235v2=1701461841; cSyncDp239v2=1701461841; cSyncDp243v2=1701461841; cSyncDp260v2=1701461841; cSyncDp244v2=1701461841; cSyncDp248v2=1701461841; cSyncDp261v1=1701461841; cSyncDp14v4=1701461842
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:22 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
kraska.biz/favicon.ico
87.118.118.43200 OK 894 B IP 87.118.118.43:80
File type MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel\012- data
Hash 5a92fd8c83176f9ee46310f70d13ae77
a61810c8ee214116c7f01875eecc221a5f8a992f
a05f32a345a9b0ddcff419b40a1d06d82675f5ffacfa6f4934f47f94b14875f2
GET /favicon.ico HTTP/1.1
Host: kraska.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Cookie: fid=48354af8-9eb7-4b95-bb56-97c03ece2df4
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 20:17:21 GMT
Server: Apache
Last-Modified: Wed, 18 Sep 2013 20:48:02 GMT
ETag: "37e-4e6ae8da5e480"
Accept-Ranges: bytes
Content-Length: 894
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
www.acint.net/ping/?v=0.6.0&uid=f1db2147-0f6c-48f6-bd1a-5b245b919865&dp=14&tz=%2B00%3A00&nc=420241&dT=2023-12-01T20%3A17%3A28.996
193.3.184.7200 OK 43 B URL GET HTTP/2 www.acint.net/ping/?v=0.6.0&uid=f1db2147-0f6c-48f6-bd1a-5b245b919865&dp=14&tz=%2B00%3A00&nc=420241&dT=2023-12-01T20%3A17%3A28.996
IP 193.3.184.7:443
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /ping/?v=0.6.0&uid=f1db2147-0f6c-48f6-bd1a-5b245b919865&dp=14&tz=%2B00%3A00&nc=420241&dT=2023-12-01T20%3A17%3A28.996 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://kraska.biz/
Cookie: aid=fwAAAWVqP1CxkgcWJzJVAr6mye1Ai6wXH24mREpX2KoJQ+cH; cSyncDp14v6=1701461841; cSyncDp17v2=1701461841; cSyncDp45v5=1701461841; cSyncDp53v5=1701461841; cSyncDp62v2=1701461841; cSyncDp67v3=1701461841; cSyncDp68v2=1701461841; cSyncDp71v2=1701461841; cSyncDp80v2=1701461841; cSyncDp85v2=1701461841; cSyncDp95v4=1701461841; cSyncDp98v3=1701461841; cSyncDp104v2=1701461841; cSyncDp107v2=1701461841; cSyncDp110v3=1701461841; cSyncDp125v4=1701461841; cSyncDp126v2=1701461841; cSyncDp127v2=1701461841; cSyncDp129v2=1701461841; cSyncDp136v3=1701461841; cSyncDp146v2=1701461841; cSyncDp148v2=1701461841; cSyncDp149v3=1701461841; cSyncDp151v2=1701461841; cSyncDp251v1=1701461841; cSyncDp186v2=1701461841; cSyncDp217v2=1701461841; cSyncDp221v2=1701461841; cSyncDp235v2=1701461841; cSyncDp239v2=1701461841; cSyncDp243v2=1701461841; cSyncDp260v2=1701461841; cSyncDp244v2=1701461841; cSyncDp248v2=1701461841; cSyncDp261v1=1701461841; cSyncDp14v4=1701461842
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 01 Dec 2023 20:17:24 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2