lordserial1.biz/templates/lordfilm-light/images/logo.png
200 OK 2.1 kB URL GET HTTP/3 lordserial1.biz/templates/lordfilm-light/images/logo.png
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
File type PNG image data, 180 x 70, 8-bit/color RGB, non-interlaced\012- data
Hash 5bef58031a5554eee4c8843672e6c3d2
a1ffc15524cbd0935299ec01ba38e611518cf409
d8f27633ef73fb3c02e4ddd9df9bb630fe753441e8a948141267b92c87add07b
GET /templates/lordfilm-light/images/logo.png HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:25 GMT
content-type: image/png
content-length: 2067
last-modified: Fri, 17 Nov 2023 00:15:22 GMT
etag: "6556b09a-813"
expires: Mon, 04 Dec 2023 07:11:45 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 80440
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6kaVABtCrcMk8InBGw5n2VJkmnWAJj3imM1r5n72h5MCeSIu9ylz2wZNontQMyAv60PtQnRzB1yi9XYSKb07CR4xFKKKvFdPYjD%2BmN6M%2FCxCYWh6xW3xPz%2FKonqSI6L89yo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8301ab35ec6356bf-OSL
alt-svc: h3=":443"; ma=86400
lordserial1.biz/uploads/posts/2022-12/161252_1671625863.webp
200 OK 8.3 kB URL GET HTTP/3 lordserial1.biz/uploads/posts/2022-12/161252_1671625863.webp
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash df0950319b82c1dbb2e96e40d7fc91a9
2d6278dcf4dbad71eec6300972761b5c609daf0e
8d3bf5238f812415747de5a90bd256a66b115d93a8a80abdffcaf45c4663356a
GET /uploads/posts/2022-12/161252_1671625863.webp HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:25 GMT
content-type: image/webp
content-length: 8340
last-modified: Fri, 17 Nov 2023 00:15:24 GMT
etag: "6556b09c-2094"
expires: Mon, 04 Dec 2023 20:02:53 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 34172
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FjHbW5X%2F8IPIjTKmk5DGWLqDOwe4ckUzKztCywN4i3d6VWJOTNiA153zVER6sazdyQ6SqFIGy5MjxLd%2FSvJHtunnFraAj0ewgQmXtnvXIv3ZQ0EAH8Cw8F3BhrZMKHYshHo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8301ab35ec6b56bf-OSL
alt-svc: h3=":443"; ma=86400
lordserial1.biz/uploads/posts/2023-06/962012-7.webp
200 OK 15 kB URL GET HTTP/3 lordserial1.biz/uploads/posts/2023-06/962012-7.webp
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3e0057146723bd69cffc11eec645e8e0
8c304dd55b443c447810aa1dd973bc97ae546e85
3261562cfc3af57bea3a4c76004fcf6f7192697503b631e25bd16dc9582135a1
GET /uploads/posts/2023-06/962012-7.webp HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:25 GMT
content-type: image/webp
content-length: 14574
last-modified: Fri, 17 Nov 2023 00:15:24 GMT
etag: "6556b09c-38ee"
expires: Mon, 04 Dec 2023 18:08:07 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 41058
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0xZ5LK6XjGXRjYE3fJ43o4f45EuQ44sRuByJIyYsIou0pAQJofFKSo8BF4JOPbd0DBwZheV%2FbiyE00sCSqs2JCvZZ%2BhqOiRIs9lr4j2vVlt2D6ivsdz3b07fUDnW1RuWrX0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8301ab35ec6f56bf-OSL
alt-svc: h3=":443"; ma=86400
lordserial1.biz/uploads/posts/2022-12/94226_1671625682.webp
200 OK 8.4 kB URL GET HTTP/3 lordserial1.biz/uploads/posts/2022-12/94226_1671625682.webp
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 08321ba5a607336a1e11079721068986
55b71325860195d7cb744b9d93a613c5e46a0440
8b53ed84321ea991bbd267ae31d1f329e3363a3f0515b7c686868d5ee86d34aa
GET /uploads/posts/2022-12/94226_1671625682.webp HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:25 GMT
content-type: image/webp
content-length: 8364
last-modified: Fri, 17 Nov 2023 00:15:24 GMT
etag: "6556b09c-20ac"
expires: Tue, 05 Dec 2023 05:32:25 GMT
cache-control: max-age=86400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W8vsgK8CPbtFm35XH2VOlQbcUvtYSrLzvytkhopD0PXGcNYPSBXYbRY8B3S4K%2BybPhB1kmsFzmCzcjwRfu0hjQ%2BT%2FbaNq3qgFCU3ga%2BHJbFTHBFARb8SVHgDGi5B9%2BDu%2Bhc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8301ab35ec7056bf-OSL
alt-svc: h3=":443"; ma=86400
lordserial1.biz/uploads/posts/2022-10/732373_1665636603.webp
200 OK 6.4 kB URL GET HTTP/3 lordserial1.biz/uploads/posts/2022-10/732373_1665636603.webp
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c071744c356e3832540bba25be31c193
ccb13b16e4cab64d461386e705ea36162a361acd
7e97c21b46435b14fee96190ab5118adcabb746a4da6d1b19a81fd5c1d4f4960
GET /uploads/posts/2022-10/732373_1665636603.webp HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:25 GMT
content-type: image/webp
content-length: 6446
last-modified: Fri, 17 Nov 2023 00:15:23 GMT
etag: "6556b09b-192e"
expires: Tue, 05 Dec 2023 05:32:25 GMT
cache-control: max-age=86400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=19hH%2B7OhWDWqXZlAVTsSL%2BOC8hp4WmZ7mBC0ET%2F%2FZGLZT86UJBEtPzCBwf0EZ2gfI%2Fi6XEjOkPWnwwKxFxM7qPFV%2BcRrF93GRVer%2FEQh7R02Xo0xLTh9Ma9dKrsLiz2iU3w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8301ab35ec6d56bf-OSL
alt-svc: h3=":443"; ma=86400
lordserial1.biz/uploads/posts/2022-10/1412556_1665209641.webp
200 OK 16 kB URL GET HTTP/3 lordserial1.biz/uploads/posts/2022-10/1412556_1665209641.webp
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 981b7070b7ae083e659df942380eb5cd
30cb40aa27ad8718359595d6f282a3a0795d21be
86aacf90d389f7597621f60fc4a3736521578b608aca3a74bcea626ac8b6e90f
GET /uploads/posts/2022-10/1412556_1665209641.webp HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:25 GMT
content-type: image/webp
content-length: 15862
last-modified: Fri, 17 Nov 2023 00:15:23 GMT
etag: "6556b09b-3df6"
expires: Tue, 05 Dec 2023 05:32:25 GMT
cache-control: max-age=86400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BnfWAeTnY8TDwrtRywyzuEx5DUs1XhRF7drteZ6W8oBco%2FyRXWM6QskipdQlbW2DRClzJid%2FFE93vFGzjVqJ6rrjh4tca7GKjoTLM34J%2FVUbsuMxAJ4Fb6DW6kHMwZBOBKw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8301ab35ec7156bf-OSL
alt-svc: h3=":443"; ma=86400
lordserial1.biz/uploads/posts/2022-10/1264250_1665493561.webp
200 OK 15 kB URL GET HTTP/3 lordserial1.biz/uploads/posts/2022-10/1264250_1665493561.webp
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 107c4a79bb227232c096fd4e75da9274
7db31da500759d8c1a645e9c0d53a04163e8733d
99c151c515a73af76dff05629be51d86ac21a9237dfe1a1351c090872b2bb42c
GET /uploads/posts/2022-10/1264250_1665493561.webp HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:25 GMT
content-type: image/webp
content-length: 14814
last-modified: Fri, 17 Nov 2023 00:15:22 GMT
etag: "6556b09a-39de"
expires: Tue, 05 Dec 2023 05:32:25 GMT
cache-control: max-age=86400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BSnvBi5%2BvOcSp1BSCMh4gbCyCTEx60feO16GmP4MMQLiUTZwkZ3edW42%2BxM5MjKzFsUCGdcPq8oA3ngx5eazTryrc3XzeAnbfNJR%2BffjfVS8ubRP2TKAEzoLHtT69oVK6ok%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8301ab35ec6e56bf-OSL
alt-svc: h3=":443"; ma=86400
lordserial1.biz/uploads/posts/2022-10/4394781_1665185941.webp
200 OK 12 kB URL GET HTTP/3 lordserial1.biz/uploads/posts/2022-10/4394781_1665185941.webp
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4758328f2f779d0b983bf085eb195ea7
bccf9a0ce8c3c72631b622823e3835d4635fe265
08eea6a600434abbdd6ea4a15a970987d6ff0d7414c8568dd507c0bb5d96a148
GET /uploads/posts/2022-10/4394781_1665185941.webp HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:25 GMT
content-type: image/webp
content-length: 11918
last-modified: Fri, 17 Nov 2023 00:15:22 GMT
etag: "6556b09a-2e8e"
expires: Tue, 05 Dec 2023 05:32:25 GMT
cache-control: max-age=86400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4IGqWK8icmfku7dA0cVTrdmaqMPo85up3sAZ%2FUVdSRjvdjoY%2BIcx5azuItc4DYAZxPcwRCl5pk2eKngQrKKet54x22wLzfKhpfP%2BqgB9FYkbLPvuPRTOOEh3%2F%2BLzxKZ9v4U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8301ab35ec7256bf-OSL
alt-svc: h3=":443"; ma=86400
lordserial1.biz/templates/lordfilm-light/lazydev/dle_filter/assets/dle_filter.js
200 OK 7.5 kB URL GET HTTP/3 lordserial1.biz/templates/lordfilm-light/lazydev/dle_filter/assets/dle_filter.js
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash f00e1d700f5baed2291a2b32143f9d60
6eeab1bf9e55070d148298371c28325d52d5beca
953dcf4ae14263ed4257f64c045e4414097838411f9a90beed0eb3d33d04fdfe
GET /templates/lordfilm-light/lazydev/dle_filter/assets/dle_filter.js HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:25 GMT
content-type: application/javascript
last-modified: Fri, 17 Nov 2023 00:15:22 GMT
etag: W/"6556b09a-988e"
expires: Mon, 04 Dec 2023 14:15:17 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 55028
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2zdnellEgULQU17YWmyGi%2FmawX8rNjdw9RHbf9hQsH139ryeRf2%2BvYsNW0yiHL4JzvC%2BAkaNhdpvE222lxyBe5jNPkYZGLGgDIP%2BUn5o8CaC9gZZyeCDW26tkFXv02dVK1g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8301ab35fc8556bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
lordserial1.biz/templates/lordfilm-light/js/libs.js
200 OK 5.5 kB URL GET HTTP/3 lordserial1.biz/templates/lordfilm-light/js/libs.js
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
File type Unicode text, UTF-8 text, with very long lines (4258)
Hash 8ca6b10eb0917cd16200d33dc9b72013
3f7cdc1fd717b5b06905b9ab234f208d533c1107
a9e02fdc747b714457dd3655846d3f98fffd32274d79397964136d7be73f37fe
GET /templates/lordfilm-light/js/libs.js HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:25 GMT
content-type: application/javascript
last-modified: Fri, 17 Nov 2023 00:15:22 GMT
etag: W/"6556b09a-35b9"
expires: Mon, 04 Dec 2023 14:15:17 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 55028
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=37CUPZPJUXuNFL2cEc2oM%2BTajhili6TYgmesU0XxQE7RcwURKiPtcvKzum2TIAlhX9IifWy9hDfX4108rHqeSPBPXXZ%2BELdBzz33KHTCfzSPkRoGQP1JNuNsKntdDQgvZzA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8301ab35fc7956bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
lordserial1.biz/templates/lordfilm-light/images/bg.jpg
200 OK 195 kB URL GET HTTP/3 lordserial1.biz/templates/lordfilm-light/images/bg.jpg
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1400x488, components 3\012- data
Size 195 kB (195125 bytes)
Hash 2c6615789c683ee6f6018c445d2f002d
316e5bc3a50c2c8b302c7f9bce3420aa802c14ac
25cd2a918ff78890040a2c632b67914de4389fa33bf573b40f224293827b8259
GET /templates/lordfilm-light/images/bg.jpg HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/templates/lordfilm-light/style/styles.css
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:26 GMT
content-type: image/jpeg
content-length: 195125
last-modified: Fri, 17 Nov 2023 00:15:22 GMT
etag: "6556b09a-2fa35"
expires: Tue, 05 Dec 2023 04:21:16 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 4270
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zbAtig3ZXighAI5iLsVUMrYJ%2Bif09ePsW%2FHwKuphh5%2BQPlf2pVmvooJKf8VW299BfdC8VJF%2Fr6GJmY2BHWZNuFtYnsKvM8uzqvhTJqH2%2B6HtE9tEjUOp9eVqimQ7Q5oZHO4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8301ab37ad4056bf-OSL
alt-svc: h3=":443"; ma=86400
lordserial1.biz/engine/classes/min/index.php?g=general&v=0ccdc
200 OK 34 kB URL GET HTTP/3 lordserial1.biz/engine/classes/min/index.php?g=general&v=0ccdc
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
File type ASCII text, with very long lines (32065), with CRLF line terminators
Hash 710458dd559c957714ac4a8e95357eb5
f694238d616f579a0690001f37984af430c19963
b409c14a10b4caad6b54844aa63a5faf748b83eecc2dd0d4fb1d913f8de55365
GET /engine/classes/min/index.php?g=general&v=0ccdc HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:25 GMT
content-type: application/x-javascript; charset=utf-8
x-powered-by: PHP/7.4.29
expires: Tue, 03 Dec 2024 05:32:25 GMT
vary: Accept-Encoding
last-modified: Fri, 17 Nov 2023 00:15:19 GMT
etag: W/"pub1700180119;gz"
cache-control: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TVgypiNiFJUDMyQdpvsf%2BLtqTxICBc89rtqOu3VEUwoPDnArCTWkN2mzfoiXTKkxX3R0OE%2FV2mMK%2B2f9s%2FQ1QqTppdwqks321XNodeQxiBpZZ5EMfdIK%2FI7mZVu%2BRp0jUnI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8301ab35fc7656bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
lordserial1.biz/templates/lordfilm-light/style/styles.css
200 OK 7.6 kB URL GET HTTP/3 lordserial1.biz/templates/lordfilm-light/style/styles.css
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
Hash 6bf9579ed6ecb68f1bcd899467b2269d
ef51783cbc4bae3a30c795c0187c65c5ba5eb22c
d9bd800b130e01b770ffbadeb2fb2ca6a587282c1e8c410f32518c87c4fdeff0
GET /templates/lordfilm-light/style/styles.css HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:25 GMT
content-type: text/css
last-modified: Fri, 17 Nov 2023 00:15:22 GMT
etag: W/"6556b09a-6cba"
expires: Mon, 04 Dec 2023 08:32:16 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 75609
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0yd%2F7QLNbqUVrg2VzvfPf7wdslIOLujG2RjsiyfS%2ByunuO3hOxx%2BMrDYe%2FXaQID5ZdQ7%2FSQGdA88r5tmYeVMZxByq4KY6IJgakV2xAxiUCMOXlGXRLEKkXBzvAMCr1I4O0k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8301ab35dc6056bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
lordserial1.biz/templates/lordfilm-light/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL GET HTTP/3 lordserial1.biz/templates/lordfilm-light/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /templates/lordfilm-light/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/templates/lordfilm-light/style/engine.css
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:26 GMT
content-type: application/octet-stream
content-length: 77160
last-modified: Fri, 17 Nov 2023 00:15:22 GMT
etag: "6556b09a-12d68"
expires: Mon, 04 Dec 2023 18:56:05 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 38181
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KM0O99ROHrAnaP05%2F5f3VNlOMxe3YF%2B2L%2Bj6WN480GjxELGp%2B2mcL8gIDgWIZ9w6pug8Q8aUWqZULVvp0du9YiX6tik3O3hAKwmZzrlncg1kmZt0dg5b%2B%2B%2F9HzS%2BE5%2FC%2FZ8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8301ab380d7556bf-OSL
alt-svc: h3=":443"; ma=86400
lordserial1.biz/templates/lordfilm-light/style/filter-xf.css
200 OK 21 kB URL GET HTTP/3 lordserial1.biz/templates/lordfilm-light/style/filter-xf.css
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
File type troff or preprocessor input, ASCII text
Hash c3cf86fbbd851bacc1ce3adc2be95d1b
7ce715ce7763dc7d00fa55d6c2e27deec1bbf89a
2162b13542871281e126cc1daecc28351cba58bd60f1152994973515fb24f9d6
GET /templates/lordfilm-light/style/filter-xf.css HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:25 GMT
content-type: text/css
last-modified: Fri, 17 Nov 2023 00:15:22 GMT
etag: W/"6556b09a-36a0"
expires: Mon, 04 Dec 2023 08:32:16 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 75609
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yp8q1WE0ZgP7PiS2yodcjSlOZ7OvFtJB2mAL5%2F4azgb8Ah0hld3BUwoW5QugeLbQ2MHFN%2BCgTek%2Bqjf2GY6WUQZdNupEkf7mPl%2FuSWMbtUNEbs%2BacWKDoejOm6eyowcj70Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8301ab35ec6256bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
lordserial1.biz/templates/lordfilm-light/js/filter-xf.js
200 OK 23 kB URL GET HTTP/3 lordserial1.biz/templates/lordfilm-light/js/filter-xf.js
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
File type Unicode text, UTF-8 text, with very long lines (28279)
Hash f2a67524ca6e24bc312df2908db4aed6
6e86d5446fca0c01835376a3a3e0ce0085eb22da
79d9ce4faf63a6ea2d0d1ce02b1760fcb1d5fd45c8a3ceee803548ffcd442c6e
GET /templates/lordfilm-light/js/filter-xf.js HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:25 GMT
content-type: application/javascript
last-modified: Fri, 17 Nov 2023 00:15:22 GMT
etag: W/"6556b09a-10b7d"
expires: Mon, 04 Dec 2023 07:30:19 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 79326
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XpsrHyBA5cRaxv4WgGPq0fVTYr5AHH8BxgsJQT1DW4wlsbphMdk4caemjbQcKyxI%2FRUMC2m9edFSOWkoKz8MhAOLs9L0n6D60fX%2FdQ0aORRErvYLgaqR%2FD6x%2FkEpakBLSL8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8301ab35fc7e56bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2
200 OK 27 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 26640, version 1.0\012- data
Hash 2a5269c4257ebafd1110c7a7ca52a893
6d62fe7e6727de10721018e131ed30c6835f6bab
a1f50e52a7fda97827e6e3d2cd3bb2788a68a78296728fa2592be8e89d54b5b8
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lordserial1.biz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26640
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:53:24 GMT
expires: Fri, 29 Nov 2024 04:53:24 GMT
cache-control: public, max-age=31536000
age: 347942
last-modified: Thu, 14 Sep 2023 01:00:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lordserial1.biz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 347488
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lordserial1.biz/engine/classes/min/index.php?f=engine/classes/js/jqueryui.js,engine/classes/js/dle_js.js,engine/classes/js/lazyload.js&v=0ccdc
200 OK 51 kB URL GET HTTP/3 lordserial1.biz/engine/classes/min/index.php?f=engine/classes/js/jqueryui.js,engine/classes/js/dle_js.js,engine/classes/js/lazyload.js&v=0ccdc
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
File type ASCII text, with very long lines (18446), with CRLF line terminators
Hash 08a1cf81a676e6c542a965064ad47f73
be131fa12e4c78f44fca04878854664788017df3
c08b6a9062dbc46dc5b5b9433a146f7d026010a8819e179ee9c57b07350daadf
GET /engine/classes/min/index.php?f=engine/classes/js/jqueryui.js,engine/classes/js/dle_js.js,engine/classes/js/lazyload.js&v=0ccdc HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:26 GMT
content-type: application/x-javascript; charset=utf-8
x-powered-by: PHP/7.4.29
expires: Tue, 03 Dec 2024 05:32:25 GMT
vary: Accept-Encoding
last-modified: Fri, 17 Nov 2023 00:15:19 GMT
etag: W/"pub1700180119;gz"
cache-control: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uVeNya6LoCbPlTzndmL9PbJuQo9oJEax4b2ef%2BeMwuxC9I8AQm7v0qa0S6FTW1%2B0xeG4aUwun6d%2FCEHV%2Bj1%2FG37ZDY1VNlzuFaSnhD%2FxTh5JIK4M6%2BG5Vxzu%2BFlzOH5EGus%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8301ab35fc7856bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2
200 OK 27 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 26640, version 1.0\012- data
Hash 2a5269c4257ebafd1110c7a7ca52a893
6d62fe7e6727de10721018e131ed30c6835f6bab
a1f50e52a7fda97827e6e3d2cd3bb2788a68a78296728fa2592be8e89d54b5b8
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lordserial1.biz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26640
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:53:24 GMT
expires: Fri, 29 Nov 2024 04:53:24 GMT
cache-control: public, max-age=31536000
age: 347942
last-modified: Thu, 14 Sep 2023 01:00:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lordserial1.biz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 347488
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lordserial1.biz/templates/lordfilm-light/images/favicon.png
200 OK 565 B URL GET HTTP/3 lordserial1.biz/templates/lordfilm-light/images/favicon.png
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash f7566a25f17d3098011ae838e44c92bd
d5e1328d47322c99ca5962c6fa7f7aa7e8ac4832
4eafa0f551ff23dea3afe81e0eb59203780f226f85c4ebd75aa4e7d8df2ed574
GET /templates/lordfilm-light/images/favicon.png HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1; _ma=7ce7bd88-68d5-4a41-b9ca-e465a840ddcf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:27 GMT
content-type: image/png
content-length: 565
last-modified: Fri, 17 Nov 2023 00:15:22 GMT
etag: "6556b09a-235"
expires: Mon, 04 Dec 2023 07:10:07 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 80540
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z%2FPZR7izc3RsYiSYS29yi0%2BZaY3pcNbwhkb%2Fdobe1hxxn%2BG6opkByg4RVDNUq5XXIOILRuNIjrYoJVeHjrHVoKazP6AxfgO2bZwnz6oiB7X6MRIWdggnSkGdyB7967Li7Q4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8301ab3cffb956bf-OSL
alt-svc: h3=":443"; ma=86400
code.moviead55.ru/go/cinit?cn=vhd&rnd=1701667946
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=vhd&rnd=1701667946
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=vhd&rnd=1701667946 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-length: 0
location: https://a.videohead.tech/sync?ssp=44
set-cookie: sky_uuid=92dc8519-168b-066b-32ac-ed8824ec9b24; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=gtnt&rnd=1701667946
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=gtnt&rnd=1701667946
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=gtnt&rnd=1701667946 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-length: 0
location: https://px.adhigh.net/p/cm/skyadvert?u=87184e15-f152-6736-5e5e-14d8e6d7c347
set-cookie: sky_uuid=87184e15-f152-6736-5e5e-14d8e6d7c347; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
videotoday.site/frndnp.php?ver=1&autoplay=1&v=9f826dbec17f07ce9634af6973699c4f&cb=fa532ea9-182a-4ad6-804b-193f4761b884&fclose=false&sub_id=ap&fmt_id=1&testad=no&nomon=1&cdiv=151&r=https%3A%2F%2Flordserial1.biz%2Fmultserialy%2F8616-juzhnyj-park-1997.html&frnd=true
19 kB URL GET videotoday.site/frndnp.php?ver=1&autoplay=1&v=9f826dbec17f07ce9634af6973699c4f&cb=fa532ea9-182a-4ad6-804b-193f4761b884&fclose=false&sub_id=ap&fmt_id=1&testad=no&nomon=1&cdiv=151&r=https%3A%2F%2Flordserial1.biz%2Fmultserialy%2F8616-juzhnyj-park-1997.html&frnd=true
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerGoogle Trust Services LLC
Subjectvideotoday.site
FingerprintA8:0A:0C:FF:C9:74:01:DA:F2:F4:6F:1A:46:B4:A3:2D:53:73:57:62
ValidityFri, 06 Oct 2023 02:55:12 GMT - Thu, 04 Jan 2024 02:55:11 GMT
File type ASCII text, with very long lines (41733)
Hash cf84f850d5f6fd79e8080b1077c17ecc
b27ded132693e1ba3c9bb448f30fecfb5511605f
49db76d87d44b064c1e8561c0b91992af7af6f9b2ee24d48eb5d257d91b7f0c1
GET /frndnp.php?ver=1&autoplay=1&v=9f826dbec17f07ce9634af6973699c4f&cb=fa532ea9-182a-4ad6-804b-193f4761b884&fclose=false&sub_id=ap&fmt_id=1&testad=no&nomon=1&cdiv=151&r=https%3A%2F%2Flordserial1.biz%2Fmultserialy%2F8616-juzhnyj-park-1997.html&frnd=true HTTP/1.1
Host: videotoday.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 05:32:26 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-cache: Yac
x-movieads-country: NO
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XVC6g15q8FCPAd3bOCJpEj99f2UCc%2Bg%2BhpXH%2B6vW%2BefxNKx42GqZ8%2BN0jiTh5fPMSFZ2wD6ztq5K4%2FlBO5IQVlZSMvex%2B%2FrXfw4XrIlD%2B5WkdiGBa27fEv6SqUyXOnI07es%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8301ab3b9b48b529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
code.moviead55.ru/go/bmap?v=9f826dbec17f07ce9634af6973699c4f&sub_id=ap&fmt_id=4&pl_key=banner&testad=no&r=https%3A%2F%2Flordserial1.biz%2Fmultserialy%2F8616-juzhnyj-park-1997.html
200 OK 64 kB URL GET HTTP/2 code.moviead55.ru/go/bmap?v=9f826dbec17f07ce9634af6973699c4f&sub_id=ap&fmt_id=4&pl_key=banner&testad=no&r=https%3A%2F%2Flordserial1.biz%2Fmultserialy%2F8616-juzhnyj-park-1997.html
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 393dc9421fca91f4856e8701302bf33d
283bcdf5b074443d212358ed3f798cb370c86431
400b0983ab0dff127aff7dc56922cfb9afb9b3e5acbfa71a8b87acc7b7dd3893
GET /go/bmap?v=9f826dbec17f07ce9634af6973699c4f&sub_id=ap&fmt_id=4&pl_key=banner&testad=no&r=https%3A%2F%2Flordserial1.biz%2Fmultserialy%2F8616-juzhnyj-park-1997.html HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:26 GMT
content-type: text/javascript;charset=UTF-8
vary: Accept-Encoding
x-movieads-udata: cache,parsed,161410
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=ohmybid&rnd=1701667946
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=ohmybid&rnd=1701667946
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=ohmybid&rnd=1701667946 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-length: 0
location: https://match.ohmy.bid/cm?ssp=skyadv&redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dohmybid%26bid%3D%24%7BUUID%7D
set-cookie: sky_uuid=70df87d1-108a-6289-5c40-0cb1c7eca54b; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
lordserial1.biz/templates/lordfilm-light/style/engine.css
200 OK 307 kB URL GET HTTP/3 lordserial1.biz/templates/lordfilm-light/style/engine.css
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
File type ASCII text, with very long lines (13482)
Size 307 kB (306556 bytes)
Hash c887623505d17200ac694b0e5ba8d8b7
333818fe7ff8230eed00974a4ed359e4441a5e00
f514188261e22143f6359b73cdf514b1326e39ad993a95b4bb5d65da8bc94614
GET /templates/lordfilm-light/style/engine.css HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:25 GMT
content-type: text/css
last-modified: Fri, 17 Nov 2023 00:15:22 GMT
etag: W/"6556b09a-171ec"
expires: Mon, 04 Dec 2023 08:32:16 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 75609
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X64jApDP08dKSGslRFdgqcaqpsna%2FVIDvGqViE9wMXxboyAOm68I23vDFWVmxwWuUGep5cLi%2Fec8wqgwDCW2YhdYBHCEeL13whF8YvJiBrUTWWBVNr7cHFV5ZNv4Vkc04QM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8301ab35dc6156bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
code.moviead55.ru/go/cinit?cn=dgm&rnd=1701667946
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=dgm&rnd=1701667946
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=dgm&rnd=1701667946 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-length: 0
location: https://sync.opendsp.ru/match/Movieads?id=${UUID}
set-cookie: sky_uuid=e47c5c36-2656-27f7-221e-07bc79b304fb; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
cdn.cdnonair.top/js/baron.min.js?v=2.22
200 OK 9.7 kB URL GET HTTP/2 cdn.cdnonair.top/js/baron.min.js?v=2.22
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerLet's Encrypt
Subjectcdn.cdnonair.top
Fingerprint74:38:B2:F4:98:5F:B0:15:86:40:83:A3:34:4C:94:41:54:BF:7B:CF
ValidityThu, 26 Oct 2023 21:00:36 GMT - Wed, 24 Jan 2024 21:00:35 GMT
File type ASCII text, with very long lines (28026)
Hash f2be10178bf6839a54ee92a7160d4bbe
1f0389708c077f07aac5f377684cb796d425f0ea
81a40a24e93a9c3d86573189234cf9bd40567d227a53162dbce3f6c2c42c9630
GET /js/baron.min.js?v=2.22 HTTP/1.1
Host: cdn.cdnonair.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:26 GMT
content-type: application/javascript
last-modified: Sat, 02 Dec 2023 20:12:29 GMT
etag: W/"656b8fad-6d7b"
expires: Fri, 01 Mar 2024 20:15:41 GMT
cache-control: max-age=7776000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cdnonair.top/js/player.min.js?v=1.394
200 OK 29 kB URL GET HTTP/2 cdn.cdnonair.top/js/player.min.js?v=1.394
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerLet's Encrypt
Subjectcdn.cdnonair.top
Fingerprint74:38:B2:F4:98:5F:B0:15:86:40:83:A3:34:4C:94:41:54:BF:7B:CF
ValidityThu, 26 Oct 2023 21:00:36 GMT - Wed, 24 Jan 2024 21:00:35 GMT
File type Unicode text, UTF-8 text, with very long lines (65353), with no line terminators
Hash 2f247d2089f8f2ca8f5e8f7b2e577e6e
0dcd79e663a5ae58bf263de9d04f97635bc29a35
792b6d9900c8128a7a1ee5a76783f94edc1338b6d2a780a6aa2876fad9c22eb9
GET /js/player.min.js?v=1.394 HTTP/1.1
Host: cdn.cdnonair.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:26 GMT
content-type: application/javascript
last-modified: Sun, 03 Dec 2023 14:13:44 GMT
etag: W/"656c8d18-133aa"
expires: Sat, 02 Mar 2024 14:15:55 GMT
cache-control: max-age=7776000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=bzcookie&rnd=1701667946
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=bzcookie&rnd=1701667946
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=bzcookie&rnd=1701667946 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-length: 0
location: https://exchange.buzzoola.com/cookiesync/redirect/skyadvert?redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbzcookie%26bid%3D%24%7BUUID%7D
set-cookie: sky_uuid=30a8c6c6-8862-de19-c28a-99d0a0df04b1; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=gonetbid&rnd=1701667946
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=gonetbid&rnd=1701667946
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=gonetbid&rnd=1701667946 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-length: 0
location: https://sync.gonet-ads.com/match/SkyAdvert?id=eee6b59d-504f-c68f-d096-1c250211dedd
set-cookie: sky_uuid=eee6b59d-504f-c68f-d096-1c250211dedd; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
cdn.cdnonair.top/js/jquery.min.js?v=3.6.0
200 OK 31 kB URL GET HTTP/2 cdn.cdnonair.top/js/jquery.min.js?v=3.6.0
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerLet's Encrypt
Subjectcdn.cdnonair.top
Fingerprint74:38:B2:F4:98:5F:B0:15:86:40:83:A3:34:4C:94:41:54:BF:7B:CF
ValidityThu, 26 Oct 2023 21:00:36 GMT - Wed, 24 Jan 2024 21:00:35 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /js/jquery.min.js?v=3.6.0 HTTP/1.1
Host: cdn.cdnonair.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:26 GMT
content-type: application/javascript
last-modified: Fri, 13 Oct 2023 12:51:15 GMT
etag: W/"65293d43-15d9d"
expires: Fri, 16 Feb 2024 10:11:50 GMT
cache-control: max-age=7776000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
a.videohead.tech/sync?ssp=44
204 No Content 0 B URL GET HTTP/2 a.videohead.tech/sync?ssp=44
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerGoogle Trust Services LLC
Subjectvideohead.tech
FingerprintAC:24:7F:38:6B:35:E3:94:CB:F9:41:85:4E:11:82:9B:AB:92:22:D2
ValiditySun, 26 Nov 2023 10:34:15 GMT - Sat, 24 Feb 2024 10:34:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?ssp=44 HTTP/1.1
Host: a.videohead.tech
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Mon, 04 Dec 2023 05:32:27 GMT
content-type: text/plain
set-cookie: prevhead=1; Expires=Wed, 03 Jan 2024 05:32:27 GMT; Domain=videohead.tech; SameSite=None; Secure; Path=/
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-expose-headers: Content-Length,Content-Range
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z5dmd%2F3FOcTXeyXGa6Ciw7spgQh%2FI5exKdixvNmBseDXoaSsZJm0PHPslrZYBoZKAFHoU5Na1pH9fsaAK7UFQ8GUiciMwaBAoQDmTAH6UFhJSeK0vmF4mGH%2FJ9Ryw8Vc2q6w"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8301ab3e788cb50b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
lordserial1.biz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
200 OK 809 B URL GET HTTP/3 lordserial1.biz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
File type gzip compressed data, from Unix\012- data
Hash 73c1e0e7ae79938b02dad3d9e36b5705
91d53d1d825b1d684bc0b3f075ac5efe927ced91
517cbc74751772c8438a33d785a9c4b4996b4fd8835e003f511590d7139c38f1
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:25 GMT
content-type: application/javascript
last-modified: Tue, 28 Nov 2023 16:06:21 GMT
etag: W/"65660ffd-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ei%2BH1v%2FescbXRLBoR6HJzaYtU%2Fx8QlJRK5OQVvhfbBXvpIA%2FYq8WqMlXIVH3bEeGWxvBb8mllqlzuP%2FmdKBXuNvZN8WsBIwJPBiBQTrJUpLF%2BcD3ntzo0A4uR9FAlvK7HaU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8301ab35fc7556bf-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Wed, 06 Dec 2023 05:32:25 GMT
cache-control: max-age=172800, public
content-encoding: gzip
dm-eu.hybrid.ai/match?id=185&burl=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dhbrdcookie2%26bid%3D%24%7BVID%7D
302 Found 0 B URL GET HTTP/2 dm-eu.hybrid.ai/match?id=185&burl=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dhbrdcookie2%26bid%3D%24%7BVID%7D
IP
ASN #58272 LeaderTelecom B.V.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerSectigo Limited
Subject*.hybrid.ai
Fingerprint40:F9:88:C5:EF:2B:26:9C:61:DC:CC:ED:B1:67:03:F4:E2:CC:B7:C8
ValidityThu, 14 Sep 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?id=185&burl=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dhbrdcookie2%26bid%3D%24%7BVID%7D HTTP/1.1
Host: dm-eu.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 04 Dec 2023 05:32:27 GMT
content-length: 0
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
location: https://code.moviead55.ru/go/csync?cn=hbrdcookie2&bid=9304616438830318104a
set-cookie: vid=9304616438830318104a; Expires=Tue, 03 Dec 2024 05:32:25 GMT; Domain=.hybrid.ai; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 526
x-xss-protection: 1; mode=block
access-control-allow-origin: https://lordserial1.biz
access-control-allow-credentials: true
server: Hybrid Web Server
X-Firefox-Spdy: h2
cdn.cdnonair.top/style/style.css?v=1.77
200 OK 2.2 kB URL GET HTTP/2 cdn.cdnonair.top/style/style.css?v=1.77
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerLet's Encrypt
Subjectcdn.cdnonair.top
Fingerprint74:38:B2:F4:98:5F:B0:15:86:40:83:A3:34:4C:94:41:54:BF:7B:CF
ValidityThu, 26 Oct 2023 21:00:36 GMT - Wed, 24 Jan 2024 21:00:35 GMT
File type gzip compressed data, from Unix\012- data
Hash 9ab56eaf03c1edc5b28d8985f57b0b6f
3df476c5391441efa422f4108b201d11a537fdc2
3190855b404f5a6cc807f82ba561d27e5c15eea96818abbc883e14aa1ccbf1dd
GET /style/style.css?v=1.77 HTTP/1.1
Host: cdn.cdnonair.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:26 GMT
content-type: text/css
last-modified: Fri, 13 Oct 2023 12:51:15 GMT
etag: W/"65293d43-1cae"
expires: Fri, 16 Feb 2024 10:11:50 GMT
cache-control: max-age=7776000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
otclick-adv.ru/core/match.gif?s=30&reference=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dotclkbid%26bid%3D%23%7BUID%7D
302 Found 124 B URL GET HTTP/2 otclick-adv.ru/core/match.gif?s=30&reference=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dotclkbid%26bid%3D%23%7BUID%7D
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectotclick.ru
Fingerprint3A:7D:83:98:7E:DD:BF:D7:8A:A8:6E:FB:B0:9E:9F:DF:A9:37:C8:54
ValidityMon, 02 Oct 2023 16:11:22 GMT - Sun, 31 Dec 2023 16:11:21 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash c73e35f73ed5c795c70cf66e99088b7c
63a9ffe5d0e5b4070819b95ef564a58d8a3a3a1c
80034a9712f07e6b0577c7e5bf6d5d718736593e7d21c81dd1a3cbdb4eb860de
GET /core/match.gif?s=30&reference=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dotclkbid%26bid%3D%23%7BUID%7D HTTP/1.1
Host: otclick-adv.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.24.0
date: Mon, 04 Dec 2023 05:32:27 GMT
content-length: 124
location: https://code.moviead55.ru/go/csync?cn=otclkbid&bid=VUG31mKFfTelneA
p3p: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
cache-control: no-cache, max-age=0, must-revalidate, no-store
pragma: no-cache
expires: Thursday, 01-Jan-1970 00:00:00 GMT
set-cookie: idntfy=VUG31mKFfTelneA; expires=Thu, 01-Dec-2033 05:32:27 GMT; domain=otclick-adv.ru; path=/core; SameSite=None; Secure
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
code.moviead55.ru/go/csync?cn=hbrdcookie2&bid=9304616438830318104a
200 OK 0 B URL GET HTTP/2 code.moviead55.ru/go/csync?cn=hbrdcookie2&bid=9304616438830318104a
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=hbrdcookie2&bid=9304616438830318104a HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Cookie: sky_uuid=31d05549-967e-224d-2793-4e1bd2b0f8e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-type: image/jpeg
content-length: 0
set-cookie: hbrdcookie2=9304616438830318104a; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
sync.opendsp.ru/match/Movieads?id=${UUID}
200 OK 43 B URL GET HTTP/2 sync.opendsp.ru/match/Movieads?id=${UUID}
IP
ASN #50340 OOO Network of data-centers Selectel
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerGlobalSign nv-sa
Subject*.opendsp.ru
Fingerprint8E:F7:66:17:C0:94:EA:58:01:39:E4:C7:14:85:F8:A2:C2:22:F3:BA
ValidityFri, 14 Jul 2023 08:08:59 GMT - Wed, 14 Aug 2024 08:08:58 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/Movieads?id=${UUID} HTTP/1.1
Host: sync.opendsp.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
sync.dmp.otm-r.com/match/skyadvert
204 No Content 0 B URL GET HTTP/2 sync.dmp.otm-r.com/match/skyadvert
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerGlobalSign nv-sa
Subject*.dmp.otm-r.com
FingerprintC6:A2:9D:82:0D:D1:C1:2D:A4:ED:7F:05:13:52:5B:94:6B:10:58:D6
ValidityMon, 19 Jun 2023 10:50:51 GMT - Sat, 20 Jul 2024 10:50:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/skyadvert HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.23.2
date: Mon, 04 Dec 2023 05:32:27 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.acint.net/rmatch?r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D&dp=167&tc=1&euid=23377f2a-c835-3ae7-4e1a-da84f039f1bf
302 Found 154 B URL GET HTTP/2 www.acint.net/rmatch?r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D&dp=167&tc=1&euid=23377f2a-c835-3ae7-4e1a-da84f039f1bf
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D&dp=167&tc=1&euid=23377f2a-c835-3ae7-4e1a-da84f039f1bf HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVtZGu1vQddmH5SAvYoj/0BdY5QWJ0RNh8e21Yp7KQ+
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Mon, 04 Dec 2023 05:32:27 GMT
content-type: text/html
content-length: 154
location: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcode.moviead55.ru%252Fgo%252Fcsync%253Fcn%253Dsapecookie%2526bid%253D$%257BUSER_ID%257D&dp=14
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
set-cookie: cSyncDp14v4=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
match.ohmy.bid/cm?ssp=skyadv&redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dohmybid%26bid%3D%24%7BUUID%7D
302 Found 0 B URL GET HTTP/2 match.ohmy.bid/cm?ssp=skyadv&redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dohmybid%26bid%3D%24%7BUUID%7D
IP
ASN #24940 Hetzner Online GmbH
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectmatch.ohmy.bid
Fingerprint9E:80:FE:F1:53:4B:43:82:19:E2:9C:5A:93:AF:43:96:5D:6C:7B:69
ValidityFri, 24 Nov 2023 20:06:51 GMT - Thu, 22 Feb 2024 20:06:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?ssp=skyadv&redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dohmybid%26bid%3D%24%7BUUID%7D HTTP/1.1
Host: match.ohmy.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-length: 0
bidder: bid-21
location: https://code.moviead55.ru/go/csync?cn=ohmybid&bid=7fd42a94-0fd5-46f3-9521-d354c4506178
set-cookie: uid=7fd42a94-0fd5-46f3-9521-d354c4506178.656d646b.c356fa9014e535d6; domain=.ohmy.bid; path=/; expires=Wed, 03-Jan-2024 05:32:27 GMT; SameSite=None; Secure;
access-control-allow-credentials: true
X-Firefox-Spdy: h2
sync.gonet-ads.com/match/SkyAdvert?id=eee6b59d-504f-c68f-d096-1c250211dedd
200 OK 43 B URL GET HTTP/2 sync.gonet-ads.com/match/SkyAdvert?id=eee6b59d-504f-c68f-d096-1c250211dedd
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerSectigo Limited
Subject*.gonet-ads.com
Fingerprint2B:BE:BF:75:0A:67:AA:2D:FA:0A:7F:92:F4:37:AE:9B:DD:47:68:2D
ValidityWed, 07 Jun 2023 00:00:00 GMT - Tue, 11 Jun 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/SkyAdvert?id=eee6b59d-504f-c68f-d096-1c250211dedd HTTP/1.1
Host: sync.gonet-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
kimberlite.io/rtb/sync/skyadvert?u=514e9708-d580-04fe-03fb-1a9269c559d9
307 Temporary Redirect 0 B URL GET HTTP/1.1 kimberlite.io/rtb/sync/skyadvert?u=514e9708-d580-04fe-03fb-1a9269c559d9
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerGlobalSign nv-sa
Subject*.kimberlite.io
Fingerprint94:44:D9:27:EE:9B:5F:DE:36:07:ED:BA:1A:1D:62:2A:31:B6:43:72
ValidityFri, 10 Mar 2023 07:40:01 GMT - Wed, 10 Apr 2024 07:40:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/sync/skyadvert?u=514e9708-d580-04fe-03fb-1a9269c559d9 HTTP/1.1
Host: kimberlite.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Mon, 04 Dec 2023 05:32:27 GMT
Content-Length: 0
Connection: keep-alive
cache-control: no-store
access-control-allow-credentials: true
access-control-allow-origin: *
location: https://code.moviead55.ru/go/csync?cn=solta&bid=ZW1kawO4lo4
set-cookie: u=ZW1kawO4lo4~kjAaMZGB-oFtkbA0StRMj3I6N2Q; path=/; max-age=7776000; samesite=none; httponly; secure
n=; max-age=0; samesite=none; httponly; secure
referrer-policy: no-referrer
server-timing: app;srv=0;dur=0.0001
exchange.buzzoola.com/cookiesync/redirect/skyadvert?redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbzcookie%26bid%3D%24%7BUUID%7D
301 Moved Permanently 126 B URL GET HTTP/2 exchange.buzzoola.com/cookiesync/redirect/skyadvert?redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbzcookie%26bid%3D%24%7BUUID%7D
IP
ASN #24940 Hetzner Online GmbH
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerSectigo Limited
Subject*.buzzoola.com
FingerprintE6:7F:94:98:CF:E4:CF:88:C7:8C:FC:16:A3:D7:D0:10:4E:EC:AB:F1
ValidityMon, 04 Sep 2023 00:00:00 GMT - Fri, 04 Oct 2024 23:59:59 GMT
File type HTML document, ASCII text
Hash 4130c1bf48d9f3262eb0259681d049c1
0a664f6e01dba9f13d52111d92cdd131817008b1
52057380369f3fa577b08f4134234970244ee42b300326ce04b46215da1e4101
GET /cookiesync/redirect/skyadvert?redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbzcookie%26bid%3D%24%7BUUID%7D HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Mon, 04 Dec 2023 05:32:20 GMT
content-type: text/html; charset=utf-8
content-length: 126
location: https://code.moviead55.ru/go/csync?cn=bzcookie&bid=72650124-3d60-47f7-738a-0e857a743f27
serverid: TODO
X-Firefox-Spdy: h2
code.moviead55.ru/go/csync?cn=otclkbid&bid=VUG31mKFfTelneA
200 OK 0 B URL GET HTTP/2 code.moviead55.ru/go/csync?cn=otclkbid&bid=VUG31mKFfTelneA
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=otclkbid&bid=VUG31mKFfTelneA HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Cookie: sky_uuid=31d05549-967e-224d-2793-4e1bd2b0f8e7; hbrdcookie2=9304616438830318104a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-type: image/jpeg
content-length: 0
set-cookie: otclkbid=VUG31mKFfTelneA; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
dm-eu.hybrid.ai/match?id=106&vid=0100007F6B646D655C0770B502ECFC46
302 Found 0 B URL GET HTTP/2 dm-eu.hybrid.ai/match?id=106&vid=0100007F6B646D655C0770B502ECFC46
IP
ASN #58272 LeaderTelecom B.V.
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerSectigo Limited
Subject*.hybrid.ai
Fingerprint40:F9:88:C5:EF:2B:26:9C:61:DC:CC:ED:B1:67:03:F4:E2:CC:B7:C8
ValidityThu, 14 Sep 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?id=106&vid=0100007F6B646D655C0770B502ECFC46 HTTP/1.1
Host: dm-eu.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Cookie: vid=9304616438830318104a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Mon, 04 Dec 2023 05:32:27 GMT
content-length: 0
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fdm.hybrid.ai%2Fmatch%3Fid%3D206%26vid%3D{WEBO_CID}
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 516
x-xss-protection: 1; mode=block
access-control-allow-origin: https://www.acint.net
access-control-allow-credentials: true
server: Hybrid Web Server
X-Firefox-Spdy: h2
sync.gonet-ads.com/match/sape.js?id=0100007F6B646D655C0770B502ECFC46
200 OK 43 B URL GET HTTP/2 sync.gonet-ads.com/match/sape.js?id=0100007F6B646D655C0770B502ECFC46
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerSectigo Limited
Subject*.gonet-ads.com
Fingerprint2B:BE:BF:75:0A:67:AA:2D:FA:0A:7F:92:F4:37:AE:9B:DD:47:68:2D
ValidityWed, 07 Jun 2023 00:00:00 GMT - Tue, 11 Jun 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/sape.js?id=0100007F6B646D655C0770B502ECFC46 HTTP/1.1
Host: sync.gonet-ads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
sync.dmp.otm-r.com/match/sape?id=0100007F6B646D655C0770B502ECFC46
204 No Content 0 B URL GET HTTP/2 sync.dmp.otm-r.com/match/sape?id=0100007F6B646D655C0770B502ECFC46
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerGlobalSign nv-sa
Subject*.dmp.otm-r.com
FingerprintC6:A2:9D:82:0D:D1:C1:2D:A4:ED:7F:05:13:52:5B:94:6B:10:58:D6
ValidityMon, 19 Jun 2023 10:50:51 GMT - Sat, 20 Jul 2024 10:50:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/sape?id=0100007F6B646D655C0770B502ECFC46 HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx/1.23.2
date: Mon, 04 Dec 2023 05:32:27 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
301 Moved Permanently 115 B URL GET HTTP/2 exchange.buzzoola.com/cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerSectigo Limited
Subject*.buzzoola.com
FingerprintE6:7F:94:98:CF:E4:CF:88:C7:8C:FC:16:A3:D7:D0:10:4E:EC:AB:F1
ValidityMon, 04 Sep 2023 00:00:00 GMT - Fri, 04 Oct 2024 23:59:59 GMT
File type HTML document, ASCII text
Hash 98d6cfe3debfe06e79c7279bf5b81f8e
dd66c4ac7e527b957ee1c57cc69729529a033bbf
b1e331fb303a662b86649639078cb24884561d3c610eeacd929e9c1c0131325f
GET /cookiesync/redirect/sape?redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-type: text/html; charset=utf-8
content-length: 115
location: https://www.acint.net/match?dp=126&euid=bbf79d6c-ffcd-4e28-6239-0a4a9c2c7800
serverid: TODO
X-Firefox-Spdy: h2
code.moviead55.ru/go/csync?cn=ohmybid&bid=7fd42a94-0fd5-46f3-9521-d354c4506178
200 OK 0 B URL GET HTTP/2 code.moviead55.ru/go/csync?cn=ohmybid&bid=7fd42a94-0fd5-46f3-9521-d354c4506178
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=ohmybid&bid=7fd42a94-0fd5-46f3-9521-d354c4506178 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Cookie: sky_uuid=31d05549-967e-224d-2793-4e1bd2b0f8e7; hbrdcookie2=9304616438830318104a; otclkbid=VUG31mKFfTelneA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-type: image/jpeg
content-length: 0
set-cookie: ohmybid=7fd42a94-0fd5-46f3-9521-d354c4506178; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
match.ohmy.bid/cm?ssp=sape&redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D
302 Found 0 B URL GET HTTP/2 match.ohmy.bid/cm?ssp=sape&redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subjectmatch.ohmy.bid
Fingerprint9E:80:FE:F1:53:4B:43:82:19:E2:9C:5A:93:AF:43:96:5D:6C:7B:69
ValidityFri, 24 Nov 2023 20:06:51 GMT - Thu, 22 Feb 2024 20:06:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?ssp=sape&redirect_url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D HTTP/1.1
Host: match.ohmy.bid
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Cookie: uid=7fd42a94-0fd5-46f3-9521-d354c4506178.656d646b.c356fa9014e535d6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-length: 0
bidder: bid-26
location: https://www.acint.net/match?dp=217&euid=7fd42a94-0fd5-46f3-9521-d354c4506178
access-control-allow-credentials: true
X-Firefox-Spdy: h2
code.moviead55.ru/go/csync?cn=solta&bid=ZW1kawO4lo4
200 OK 0 B URL GET HTTP/2 code.moviead55.ru/go/csync?cn=solta&bid=ZW1kawO4lo4
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=solta&bid=ZW1kawO4lo4 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: sky_uuid=31d05549-967e-224d-2793-4e1bd2b0f8e7; hbrdcookie2=9304616438830318104a; otclkbid=VUG31mKFfTelneA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-type: image/jpeg
content-length: 0
set-cookie: solta=ZW1kawO4lo4; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
a.utraff.com/sync?ssp=8&id=0100007F6B646D655C0770B502ECFC46
204 No Content 0 B URL GET HTTP/2 a.utraff.com/sync?ssp=8&id=0100007F6B646D655C0770B502ECFC46
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerGoogle Trust Services LLC
Subjectutraff.com
Fingerprint65:F0:CB:A7:9C:1E:18:8C:D9:DE:5B:4C:46:9E:79:3E:78:F1:B0:CD
ValidityThu, 12 Oct 2023 03:40:45 GMT - Wed, 10 Jan 2024 03:40:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?ssp=8&id=0100007F6B646D655C0770B502ECFC46 HTTP/1.1
Host: a.utraff.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Mon, 04 Dec 2023 05:32:27 GMT
content-type: text/plain
set-cookie: preutid=1; Expires=Wed, 03 Jan 2024 08:32:27 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/
preutid=1; Expires=Wed, 03 Jan 2024 08:32:27 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-expose-headers: Content-Length,Content-Range
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e3aCzZA85J92AmV8EJLrnBcFo78m5hSnMqe5yTtE%2F%2BzHs%2F%2FMjzsni9uoSau55itn8gjPcVnHQUiiw6e0xvd2zjCHoF0yQZowQtBXVdZmaTtdO41wBqpB1KGY08J4mMU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8301ab419c5f1c0a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
code.moviead55.ru/go/csync?cn=bzcookie&bid=72650124-3d60-47f7-738a-0e857a743f27
200 OK 0 B URL GET HTTP/2 code.moviead55.ru/go/csync?cn=bzcookie&bid=72650124-3d60-47f7-738a-0e857a743f27
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=bzcookie&bid=72650124-3d60-47f7-738a-0e857a743f27 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Cookie: sky_uuid=31d05549-967e-224d-2793-4e1bd2b0f8e7; hbrdcookie2=9304616438830318104a; otclkbid=VUG31mKFfTelneA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-type: image/jpeg
content-length: 0
set-cookie: bzcookie=72650124-3d60-47f7-738a-0e857a743f27; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
kimberlite.io/rtb/sync/sape2?u=0100007F6B646D655C0770B502ECFC46
307 Temporary Redirect 0 B URL GET HTTP/1.1 kimberlite.io/rtb/sync/sape2?u=0100007F6B646D655C0770B502ECFC46
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerGlobalSign nv-sa
Subject*.kimberlite.io
Fingerprint94:44:D9:27:EE:9B:5F:DE:36:07:ED:BA:1A:1D:62:2A:31:B6:43:72
ValidityFri, 10 Mar 2023 07:40:01 GMT - Wed, 10 Apr 2024 07:40:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/sync/sape2?u=0100007F6B646D655C0770B502ECFC46 HTTP/1.1
Host: kimberlite.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Cookie: u=ZW1kawO4lo4~kjAaMZGB-oFtkbA0StRMj3I6N2Q
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Mon, 04 Dec 2023 05:32:27 GMT
Content-Length: 0
Connection: keep-alive
cache-control: no-store
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: u=ZW1kawO4lo4~kjAaMZGB-oFtkbA0StRMj3I6N2Q; path=/; max-age=7776000; samesite=none; httponly; secure
as=OFrH4WVtZGs; max-age=604800; samesite=none; httponly; secure
f=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D243%26euid%3DZW1kawO4lo4; max-age=30; samesite=none; httponly; secure
n=1; max-age=30; samesite=none; httponly; secure
location: https://sm.rtb.mts.ru/p?ssp=toptraffic&id=ZW1kawO4lo4
referrer-policy: no-referrer
server-timing: app;srv=9;dur=0.0002
ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
302 Moved Temporarily 142 B URL GET HTTP/1.1 ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.sape.ru
FingerprintF9:61:5C:64:81:FD:57:C2:4A:BD:6B:12:D4:7E:02:5E:83:8E:3E:40
ValiditySun, 08 Oct 2023 01:41:50 GMT - Sat, 06 Jan 2024 01:41:49 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Mon, 04 Dec 2023 05:32:27 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/match?dp=14&euid=5303420A6B646D651B00DDAA02691072
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=CkIDU2VtZGuq3QAbchBpAoZDNwTo0ADODNtqSF2znOWOAmTQ; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcode.moviead55.ru%252Fgo%252Fcsync%253Fcn%253Dsapecookie%2526bid%253D$%257BUSER_ID%257D&dp=14
302 Moved Temporarily 142 B URL GET HTTP/1.1 ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcode.moviead55.ru%252Fgo%252Fcsync%253Fcn%253Dsapecookie%2526bid%253D$%257BUSER_ID%257D&dp=14
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.sape.ru
FingerprintF9:61:5C:64:81:FD:57:C2:4A:BD:6B:12:D4:7E:02:5E:83:8E:3E:40
ValiditySun, 08 Oct 2023 01:41:50 GMT - Sat, 06 Jan 2024 01:41:49 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcode.moviead55.ru%252Fgo%252Fcsync%253Fcn%253Dsapecookie%2526bid%253D$%257BUSER_ID%257D&dp=14 HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Mon, 04 Dec 2023 05:32:27 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/rmatch?dp=14&euid=3E03420A6B646D651D00A89202ED7503&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=CkIDPmVtZGuSqAAdA3XtAnG6VtGCakrWW6r10QR1zNSHbknN; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
s.ccsyncuuid.net/match/5/?remote_uid=0100007F6B646D655C0770B502ECFC46
302 Found 0 B URL GET HTTP/2 s.ccsyncuuid.net/match/5/?remote_uid=0100007F6B646D655C0770B502ECFC46
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subjectccsyncuuid.net
Fingerprint05:93:D2:3F:39:41:DF:CE:18:E5:65:94:78:1D:8A:7F:24:58:17:98
ValidityMon, 13 Nov 2023 06:10:33 GMT - Sun, 11 Feb 2024 06:10:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/5/?remote_uid=0100007F6B646D655C0770B502ECFC46 HTTP/1.1
Host: s.ccsyncuuid.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Mon, 04 Dec 2023 05:32:28 GMT
content-length: 0
location: https://acint.net/match?dp=80&euid=iKK3hURpLtCRcqMq9lFg
set-cookie: jcsuuid=iKK3hURpLtCRcqMq9lFg; expires=Tue, 03 Dec 2024 05:32:28 GMT; domain=ccsyncuuid.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
s.uuidksinc.net/match/396/?remote_uid=0100007F6B646D655C0770B502ECFC46
302 Found 0 B URL GET HTTP/2 s.uuidksinc.net/match/396/?remote_uid=0100007F6B646D655C0770B502ECFC46
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subjectuuidksinc.net
Fingerprint24:9D:6D:A2:89:55:7D:CD:A6:BD:59:A3:21:F2:65:41:A8:9D:38:99
ValidityThu, 09 Nov 2023 23:20:21 GMT - Wed, 07 Feb 2024 23:20:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/396/?remote_uid=0100007F6B646D655C0770B502ECFC46 HTTP/1.1
Host: s.uuidksinc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.23.2
date: Mon, 04 Dec 2023 05:32:28 GMT
content-length: 0
location: https://www.acint.net/match?dp=127&euid=vDyEM0pTTViSCWcfF4Yl
set-cookie: jcsuuid=vDyEM0pTTViSCWcfF4Yl; expires=Tue, 03 Dec 2024 05:32:28 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
nr.bidderstack.com/sape/cm?user_id=0100007F6B646D655C0770B502ECFC46
302 Found 0 B URL GET HTTP/1.1 nr.bidderstack.com/sape/cm?user_id=0100007F6B646D655C0770B502ECFC46
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerGoDaddy.com, Inc.
Subject*.bidderstack.com
Fingerprint7A:83:29:BF:37:01:78:02:DF:C1:07:D8:A2:10:AB:0A:DD:11:66:B0
ValidityTue, 21 Nov 2023 08:57:57 GMT - Sun, 22 Dec 2024 08:57:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/cm?user_id=0100007F6B646D655C0770B502ECFC46 HTTP/1.1
Host: nr.bidderstack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 04 Dec 2023 05:32:28 GMT
Content-Length: 0
Connection: keep-alive
Location: /sape/cm?user_id=0100007F6B646D655C0770B502ECFC46&pupa=1
Set-Cookie: pupa=d6979f52-2616-aa83-4667-870fd419f06c; domain=.bidderstack.com; path=/; expires=Tue, 03-Dec-2024 05:32:28 GMT;
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
sync.upravel.com/sape/sync
302 Found 0 B URL GET HTTP/2 sync.upravel.com/sape/sync
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerGlobalSign nv-sa
Subject*.upravel.com
Fingerprint4C:ED:03:57:58:43:18:2C:CC:41:F3:3B:19:72:75:BD:29:C1:04:08
ValiditySat, 29 Apr 2023 07:48:21 GMT - Thu, 30 May 2024 07:48:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: image/png
content-length: 0
location: https://sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
set-cookie: session_tptc=1701667948082;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
session_tptc-legacy=1701667948082;Version=1;Domain=.upravel.com;Path=/;Max-Age=180
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
match.new-programmatic.com/userbind?src=sape&id=0100007F6B646D655C0770B502ECFC46
204 No Content 0 B URL GET HTTP/1.1 match.new-programmatic.com/userbind?src=sape&id=0100007F6B646D655C0770B502ECFC46
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subjectad.ad-blast.ru
FingerprintF3:B7:15:BC:2F:A8:7D:5A:73:CB:BC:43:B8:4C:EA:11:17:2B:7A:34
ValiditySat, 07 Oct 2023 18:59:50 GMT - Fri, 05 Jan 2024 18:59:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=sape&id=0100007F6B646D655C0770B502ECFC46 HTTP/1.1
Host: match.new-programmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.22.1
Date: Mon, 04 Dec 2023 05:32:28 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
sync.bumlam.com/?src=sap1&uid=0100007F6B646D655C0770B502ECFC46
302 Moved Temporarily 0 B URL GET HTTP/1.1 sync.bumlam.com/?src=sap1&uid=0100007F6B646D655C0770B502ECFC46
IP
ASN #44066 diva-e Datacenters GmbH
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.bumlam.com
Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0
ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&uid=0100007F6B646D655C0770B502ECFC46 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Mon, 04 Dec 2023 05:32:28 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQ4MzNlZDA1Yy05MjY2LTExZWUtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Sun, 29 Nov 2043 05:32:28 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync.bumlam.com/?src=sap1&s_data=CAIQARjsyLWrBmIgMDEwMDAwN0Y2QjY0NkQ2NTVDMDc3MEI1MDJFQ0ZDNDaiARCDPtBckmYR7obgACWQwGR8
ETag: 833ed05c-9266-11ee-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
pix.bumlam.com/sync/sape/check?sspuid=0100007F6B646D655C0770B502ECFC46
302 Found 0 B URL GET HTTP/1.1 pix.bumlam.com/sync/sape/check?sspuid=0100007F6B646D655C0770B502ECFC46
IP
ASN #44066 diva-e Datacenters GmbH
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.bumlam.com
Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0
ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/sape/check?sspuid=0100007F6B646D655C0770B502ECFC46 HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 04 Dec 2023 05:32:28 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://sync.bumlam.com/?src=sape
www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1
200 OK 2.0 kB URL GET HTTP/2 www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (1143)
Hash b427175fa1078775eb792756e7b6d1e7
4c55c0233d3d9002b3449c025f97821f8bb8900d
ee147e859ad0f09aa50367974e38ab53e7c7054c4a51d400a7f45b0eb251454f
GET /cv/js/sender/v1/cast_sender.js?loadCastFramework=1 HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.cdnonair.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cloudview
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="cloudview"
report-to: {"group":"cloudview","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cloudview"}]}
content-length: 2007
date: Mon, 04 Dec 2023 05:32:28 GMT
expires: Mon, 04 Dec 2023 05:32:28 GMT
cache-control: private, max-age=3000
last-modified: Tue, 16 Feb 2021 23:57:06 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cs.agency2.ru/p?ssp=sp&uid=0100007F6B646D655C0770B502ECFC46
301 Moved Permanently 0 B URL GET HTTP/1.1 cs.agency2.ru/p?ssp=sp&uid=0100007F6B646D655C0770B502ECFC46
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subjectapi.agency2.ru
Fingerprint50:48:39:D7:EB:8F:8E:E7:36:A3:F3:08:25:93:84:7F:6B:36:24:95
ValidityMon, 16 Oct 2023 23:38:04 GMT - Sun, 14 Jan 2024 23:38:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&uid=0100007F6B646D655C0770B502ECFC46 HTTP/1.1
Host: cs.agency2.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Mon, 04 Dec 2023 05:32:28 GMT
Content-Length: 0
Connection: keep-alive
Server: fasthttp
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.acint.net/match?dp=186&euid=091bd3af-274c-4992-87e4-e459bdf6468d
Set-Cookie: uuid=091bd3af-274c-4992-87e4-e459bdf6468d; expires=Sun, 24 Nov 2024 05:32:28 GMT; domain=agency2.ru; path=/; secure; SameSite=None
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.107.44
imasdk.googleapis.com/1bl80h
404 Not Found 0 B URL HEAD HTTP/2 imasdk.googleapis.com/1bl80h
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /1bl80h HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.cdnonair.top/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Mon, 04 Dec 2023 05:32:28 GMT
server: sffe
content-length: 1567
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
sync.programmatica.com/match/01
200 OK 43 B URL GET HTTP/2 sync.programmatica.com/match/01
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerGlobalSign nv-sa
Subject*.programmatica.com
FingerprintE4:B6:ED:A7:02:18:8C:3F:D0:A3:8D:04:EE:40:21:0A:0E:83:D1:D6
ValidityThu, 15 Dec 2022 17:05:13 GMT - Tue, 16 Jan 2024 17:05:12 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/01 HTTP/1.1
Host: sync.programmatica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
www.acint.net/match?dp=126&euid=bbf79d6c-ffcd-4e28-6239-0a4a9c2c7800
200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=126&euid=bbf79d6c-ffcd-4e28-6239-0a4a9c2c7800
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=126&euid=bbf79d6c-ffcd-4e28-6239-0a4a9c2c7800 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVtZGu1vQddmH5SAvYoj/0BdY5QWJ0RNh8e21Yp7KQ+; cSyncDp14v6=1701667947; cSyncDp17v2=1701667947; cSyncDp45v5=1701667947; cSyncDp53v5=1701667947; cSyncDp62v2=1701667947; cSyncDp67v3=1701667947; cSyncDp68v2=1701667947; cSyncDp71v2=1701667947; cSyncDp80v2=1701667947; cSyncDp85v2=1701667947; cSyncDp95v4=1701667947; cSyncDp98v3=1701667947; cSyncDp104v2=1701667947; cSyncDp107v2=1701667947; cSyncDp110v3=1701667947; cSyncDp125v4=1701667947; cSyncDp126v2=1701667947; cSyncDp127v2=1701667947; cSyncDp129v2=1701667947; cSyncDp136v3=1701667947; cSyncDp146v2=1701667947; cSyncDp148v2=1701667947; cSyncDp149v3=1701667947; cSyncDp151v2=1701667947; cSyncDp251v1=1701667947; cSyncDp186v2=1701667947; cSyncDp217v2=1701667947; cSyncDp221v2=1701667947; cSyncDp235v2=1701667947; cSyncDp239v2=1701667947; cSyncDp243v2=1701667947; cSyncDp260v2=1701667947; cSyncDp244v2=1701667947; cSyncDp248v2=1701667947; cSyncDp261v1=1701667947; cSyncDp14v4=1701667947
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/match?dp=217&euid=7fd42a94-0fd5-46f3-9521-d354c4506178
200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=217&euid=7fd42a94-0fd5-46f3-9521-d354c4506178
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=217&euid=7fd42a94-0fd5-46f3-9521-d354c4506178 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVtZGu1vQddmH5SAvYoj/0BdY5QWJ0RNh8e21Yp7KQ+; cSyncDp14v6=1701667947; cSyncDp17v2=1701667947; cSyncDp45v5=1701667947; cSyncDp53v5=1701667947; cSyncDp62v2=1701667947; cSyncDp67v3=1701667947; cSyncDp68v2=1701667947; cSyncDp71v2=1701667947; cSyncDp80v2=1701667947; cSyncDp85v2=1701667947; cSyncDp95v4=1701667947; cSyncDp98v3=1701667947; cSyncDp104v2=1701667947; cSyncDp107v2=1701667947; cSyncDp110v3=1701667947; cSyncDp125v4=1701667947; cSyncDp126v2=1701667947; cSyncDp127v2=1701667947; cSyncDp129v2=1701667947; cSyncDp136v3=1701667947; cSyncDp146v2=1701667947; cSyncDp148v2=1701667947; cSyncDp149v3=1701667947; cSyncDp151v2=1701667947; cSyncDp251v1=1701667947; cSyncDp186v2=1701667947; cSyncDp217v2=1701667947; cSyncDp221v2=1701667947; cSyncDp235v2=1701667947; cSyncDp239v2=1701667947; cSyncDp243v2=1701667947; cSyncDp260v2=1701667947; cSyncDp244v2=1701667947; cSyncDp248v2=1701667947; cSyncDp261v1=1701667947; cSyncDp14v4=1701667947
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
302 Found 74 B URL GET HTTP/2 ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerGlobalSign nv-sa
Subject*.bestssp.com
Fingerprint25:15:42:2E:1C:54:0F:74:CF:89:02:5A:5E:AC:98:DA:1C:34:B3:B3
ValidityMon, 24 Jul 2023 17:15:54 GMT - Sat, 24 Aug 2024 17:15:53 GMT
File type HTML document, ASCII text
Hash 51b34762aee8c55cdc1697416cf85e72
69a2a6e683571be3c64600f03b6ac7630b3ea553
76beec0b81faae7b35ca75bdfaef18d3d77af3a3c043ef0a2dd2686e8d3b0181
GET /sspmatch?url=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D95%26euid%3D HTTP/1.1
Host: ssp.bestssp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.22.0
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: text/html; charset=utf-8
content-length: 74
location: https://www.acint.net/match?dp=95&euid=YASLLQIZ
set-cookie: uid=YASLLQIZ; Expires=Thu, 01 Dec 2033 05:32:28 GMT
X-Firefox-Spdy: h2
acint.net/match?dp=14&euid=5303420A6B646D651B00DDAA02691072
200 OK 43 B URL GET HTTP/2 acint.net/match?dp=14&euid=5303420A6B646D651B00DDAA02691072
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=14&euid=5303420A6B646D651B00DDAA02691072 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVtZGu1vQddmH5SAvYoj/0BdY5QWJ0RNh8e21Yp7KQ+; cSyncDp14v6=1701667947; cSyncDp17v2=1701667947; cSyncDp45v5=1701667947; cSyncDp53v5=1701667947; cSyncDp62v2=1701667947; cSyncDp67v3=1701667947; cSyncDp68v2=1701667947; cSyncDp71v2=1701667947; cSyncDp80v2=1701667947; cSyncDp85v2=1701667947; cSyncDp95v4=1701667947; cSyncDp98v3=1701667947; cSyncDp104v2=1701667947; cSyncDp107v2=1701667947; cSyncDp110v3=1701667947; cSyncDp125v4=1701667947; cSyncDp126v2=1701667947; cSyncDp127v2=1701667947; cSyncDp129v2=1701667947; cSyncDp136v3=1701667947; cSyncDp146v2=1701667947; cSyncDp148v2=1701667947; cSyncDp149v3=1701667947; cSyncDp151v2=1701667947; cSyncDp251v1=1701667947; cSyncDp186v2=1701667947; cSyncDp217v2=1701667947; cSyncDp221v2=1701667947; cSyncDp235v2=1701667947; cSyncDp239v2=1701667947; cSyncDp243v2=1701667947; cSyncDp260v2=1701667947; cSyncDp244v2=1701667947; cSyncDp248v2=1701667947; cSyncDp261v1=1701667947; cSyncDp14v4=1701667947
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ssp.afp.ai/api/sync/sape
302 Found 0 B IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerSectigo Limited
Subject*.afp.ai
Fingerprint6D:78:55:60:8D:74:D7:2E:9F:A5:B1:56:72:76:A6:20:F9:7E:E4:4F
ValidityMon, 23 Oct 2023 00:00:00 GMT - Tue, 24 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/sync/sape HTTP/1.1
Host: ssp.afp.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.20.1
Date: Mon, 04 Dec 2023 05:32:28 GMT
Content-Length: 0
Connection: keep-alive
Vary: Origin
Access-Control-Allow-Origin:
Access-Control-Allow-Credentials: true
Location: https://www.acint.net/match?dp=261&euid=8dc23115-df30-4972-ab93-bfc545fd0ca4
Set-Cookie: afp_cookie=gAAAAABlbWRs7RnYfVaTuC5vIOkZnSMCav24wOR7qjQ8DP_MUqULG-_3TolfAPMT0_3YVxLDLp4G5UHb8lhsyMi2wC9NRVqWdF-Jntl1tjClFnny7EdfzUWWtizMt33KU256_OFuH9jjFUKvOuwlLXS3w8ZrjjXw1cor1UO4eiqHUIsspzftefVzTpVE22aNm0kxvejl8kAP$; expires=Thu, 04 Jan 2024 05:32:28 GMT; path=/; secure; SameSite=None
www.acint.net/match?dp=129&euid=oumwrqhe6c
200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=129&euid=oumwrqhe6c
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=129&euid=oumwrqhe6c HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVtZGu1vQddmH5SAvYoj/0BdY5QWJ0RNh8e21Yp7KQ+; cSyncDp14v6=1701667947; cSyncDp17v2=1701667947; cSyncDp45v5=1701667947; cSyncDp53v5=1701667947; cSyncDp62v2=1701667947; cSyncDp67v3=1701667947; cSyncDp68v2=1701667947; cSyncDp71v2=1701667947; cSyncDp80v2=1701667947; cSyncDp85v2=1701667947; cSyncDp95v4=1701667947; cSyncDp98v3=1701667947; cSyncDp104v2=1701667947; cSyncDp107v2=1701667947; cSyncDp110v3=1701667947; cSyncDp125v4=1701667947; cSyncDp126v2=1701667947; cSyncDp127v2=1701667947; cSyncDp129v2=1701667947; cSyncDp136v3=1701667947; cSyncDp146v2=1701667947; cSyncDp148v2=1701667947; cSyncDp149v3=1701667947; cSyncDp151v2=1701667947; cSyncDp251v1=1701667947; cSyncDp186v2=1701667947; cSyncDp217v2=1701667947; cSyncDp221v2=1701667947; cSyncDp235v2=1701667947; cSyncDp239v2=1701667947; cSyncDp243v2=1701667947; cSyncDp260v2=1701667947; cSyncDp244v2=1701667947; cSyncDp248v2=1701667947; cSyncDp261v1=1701667947; cSyncDp14v4=1701667947
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
acint.net/match?dp=110&euid=1bd03b54060c4204a0277c83976f6b0a
200 OK 43 B URL GET HTTP/2 acint.net/match?dp=110&euid=1bd03b54060c4204a0277c83976f6b0a
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=110&euid=1bd03b54060c4204a0277c83976f6b0a HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVtZGu1vQddmH5SAvYoj/0BdY5QWJ0RNh8e21Yp7KQ+; cSyncDp14v6=1701667947; cSyncDp17v2=1701667947; cSyncDp45v5=1701667947; cSyncDp53v5=1701667947; cSyncDp62v2=1701667947; cSyncDp67v3=1701667947; cSyncDp68v2=1701667947; cSyncDp71v2=1701667947; cSyncDp80v2=1701667947; cSyncDp85v2=1701667947; cSyncDp95v4=1701667947; cSyncDp98v3=1701667947; cSyncDp104v2=1701667947; cSyncDp107v2=1701667947; cSyncDp110v3=1701667947; cSyncDp125v4=1701667947; cSyncDp126v2=1701667947; cSyncDp127v2=1701667947; cSyncDp129v2=1701667947; cSyncDp136v3=1701667947; cSyncDp146v2=1701667947; cSyncDp148v2=1701667947; cSyncDp149v3=1701667947; cSyncDp151v2=1701667947; cSyncDp251v1=1701667947; cSyncDp186v2=1701667947; cSyncDp217v2=1701667947; cSyncDp221v2=1701667947; cSyncDp235v2=1701667947; cSyncDp239v2=1701667947; cSyncDp243v2=1701667947; cSyncDp260v2=1701667947; cSyncDp244v2=1701667947; cSyncDp248v2=1701667947; cSyncDp261v1=1701667947; cSyncDp14v4=1701667947
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/match?dp=127&euid=vDyEM0pTTViSCWcfF4Yl
200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=127&euid=vDyEM0pTTViSCWcfF4Yl
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=127&euid=vDyEM0pTTViSCWcfF4Yl HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVtZGu1vQddmH5SAvYoj/0BdY5QWJ0RNh8e21Yp7KQ+; cSyncDp14v6=1701667947; cSyncDp17v2=1701667947; cSyncDp45v5=1701667947; cSyncDp53v5=1701667947; cSyncDp62v2=1701667947; cSyncDp67v3=1701667947; cSyncDp68v2=1701667947; cSyncDp71v2=1701667947; cSyncDp80v2=1701667947; cSyncDp85v2=1701667947; cSyncDp95v4=1701667947; cSyncDp98v3=1701667947; cSyncDp104v2=1701667947; cSyncDp107v2=1701667947; cSyncDp110v3=1701667947; cSyncDp125v4=1701667947; cSyncDp126v2=1701667947; cSyncDp127v2=1701667947; cSyncDp129v2=1701667947; cSyncDp136v3=1701667947; cSyncDp146v2=1701667947; cSyncDp148v2=1701667947; cSyncDp149v3=1701667947; cSyncDp151v2=1701667947; cSyncDp251v1=1701667947; cSyncDp186v2=1701667947; cSyncDp217v2=1701667947; cSyncDp221v2=1701667947; cSyncDp235v2=1701667947; cSyncDp239v2=1701667947; cSyncDp243v2=1701667947; cSyncDp260v2=1701667947; cSyncDp244v2=1701667947; cSyncDp248v2=1701667947; cSyncDp261v1=1701667947; cSyncDp14v4=1701667947
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
adx.com.ru/sape-sync?uid=0100007F6B646D655C0770B502ECFC46
429 Too Many Requests 169 B URL GET HTTP/2 adx.com.ru/sape-sync?uid=0100007F6B646D655C0770B502ECFC46
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerGlobalSign nv-sa
Subject*.adx.com.ru
FingerprintB6:86:21:C8:F9:AF:00:9E:42:EC:E3:77:AC:A3:5B:2B:E7:C4:46:B3
ValidityFri, 26 May 2023 11:44:59 GMT - Wed, 26 Jun 2024 11:44:58 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3456231c174fb2d76d51f73b828635a7
49c43f133ee881851becd78c2e9e885ebaad005e
02a097cad2b1a9db6797fdb73c0dcd0d66d8ae7d4b5f906658bb45a502c2c106
GET /sape-sync?uid=0100007F6B646D655C0770B502ECFC46 HTTP/1.1
Host: adx.com.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 429 Too Many Requests
server: nginx/1.22.0
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: text/html
content-length: 169
X-Firefox-Spdy: h2
cdn.cdnonair.top/?boloto=eyXQfP2-IlhWZQ93ovCR0Q
200 OK 204 B URL POST HTTP/2 cdn.cdnonair.top/?boloto=eyXQfP2-IlhWZQ93ovCR0Q
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerLet's Encrypt
Subjectcdn.cdnonair.top
Fingerprint74:38:B2:F4:98:5F:B0:15:86:40:83:A3:34:4C:94:41:54:BF:7B:CF
ValidityThu, 26 Oct 2023 21:00:36 GMT - Wed, 24 Jan 2024 21:00:35 GMT
File type gzip compressed data, from Unix\012- data
Hash 37db34f93bc7c5dc03c29c81f05051bb
1cfcd47921756babf0a9e8f1abb33cd860879f15
bdcc636e7f4c8085ace746690d9b268d6a51816369a815088a56ce9c2672ee91
POST /?boloto=eyXQfP2-IlhWZQ93ovCR0Q HTTP/1.1
Host: cdn.cdnonair.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 73
Origin: https://cdn.cdnonair.top
DNT: 1
Connection: keep-alive
Referer: https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97&uid_q=656d646a3f558
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.0.28
cache-control: max-age=60
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
sync.adspend.space/sape?uid=0100007F6B646D655C0770B502ECFC46
302 Found 149 B URL GET HTTP/2 sync.adspend.space/sape?uid=0100007F6B646D655C0770B502ECFC46
IP
ASN #50340 OOO Network of data-centers Selectel
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subjectadspend.space
Fingerprint25:A8:18:8F:99:5E:81:77:EE:CC:A2:7D:B9:A4:65:C6:29:9B:72:AF
ValidityMon, 27 Nov 2023 12:15:31 GMT - Sun, 25 Feb 2024 12:15:30 GMT
File type HTML document, ASCII text
Hash f8cc134f0b708beb6954fd30a75cf5d1
7183d4c1e086272772bc1176100f7cceff4d4a41
8035a29130d939f45b636269c69f83739466b74ed0d28d5ce87ed1feb6fa7067
GET /sape?uid=0100007F6B646D655C0770B502ECFC46 HTTP/1.1
Host: sync.adspend.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.22.1
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: text/html; charset=utf-8
content-length: 149
location: https://sync.adspend.space/check?r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D98%26euid%3D4f3c8a74-beab-4169-a9ad-1adef5f182c2
set-cookie: as-user=4f3c8a74-beab-4169-a9ad-1adef5f182c2; Path=/; Max-Age=31536000; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
9bc-a3e-2200g0.v.plground.live:10402/hs/18/1701689546/QPPhhYL89lmm85p-ErttAg/845/820845/4/master.m3u8
200 OK 1.3 kB URL GET HTTP/1.1 9bc-a3e-2200g0.v.plground.live:10402/hs/18/1701689546/QPPhhYL89lmm85p-ErttAg/845/820845/4/master.m3u8
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerLet's Encrypt
Subjectplground.live
Fingerprint2E:5F:B1:95:A8:4E:CD:D1:14:E5:47:B7:5E:A2:2E:4E:5A:D9:8E:38
ValidityFri, 17 Nov 2023 21:15:40 GMT - Thu, 15 Feb 2024 21:15:39 GMT
Hash 06e0b4bc2c56a14d368426bd256c62eb
197d8b04a35a5849246697ef3d470dab4504655f
1bb7d2a94ba1761973fba98b912031b1749ebe2de8ae8e9725d0dfdc77c670f2
GET /hs/18/1701689546/QPPhhYL89lmm85p-ErttAg/845/820845/4/master.m3u8 HTTP/1.1
Host: 9bc-a3e-2200g0.v.plground.live:10402
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.cdnonair.top
DNT: 1
Connection: keep-alive
Referer: https://cdn.cdnonair.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 04 Dec 2023 05:32:28 GMT
Content-Type: application/vnd.apple.mpegurl
Content-Length: 1253
Connection: keep-alive
ETag: "-1-4e5"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
cdn.cdnonair.top/js/iife.min.js?v=1
200 OK 15 kB URL GET HTTP/2 cdn.cdnonair.top/js/iife.min.js?v=1
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerLet's Encrypt
Subjectcdn.cdnonair.top
Fingerprint74:38:B2:F4:98:5F:B0:15:86:40:83:A3:34:4C:94:41:54:BF:7B:CF
ValidityThu, 26 Oct 2023 21:00:36 GMT - Wed, 24 Jan 2024 21:00:35 GMT
File type gzip compressed data, from Unix\012- data
Hash 09b1b13f49f1c20ede4e8f22fc10fe7f
5180c74e9f0df4bd89e301901a214c4acbdaefd3
f0d0a5702a2350161df4728b56beb548cbbf25ecdddc153db9d7b28c9d4d9739
GET /js/iife.min.js?v=1 HTTP/1.1
Host: cdn.cdnonair.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97&uid_q=656d646a3f558
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-type: application/javascript
last-modified: Fri, 13 Oct 2023 12:51:15 GMT
etag: W/"65293d43-974f"
expires: Fri, 16 Feb 2024 10:11:51 GMT
cache-control: max-age=7776000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
nr.bidderstack.com/sape/cm?user_id=0100007F6B646D655C0770B502ECFC46&pupa=1
302 Found 0 B URL GET HTTP/1.1 nr.bidderstack.com/sape/cm?user_id=0100007F6B646D655C0770B502ECFC46&pupa=1
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerGoDaddy.com, Inc.
Subject*.bidderstack.com
Fingerprint7A:83:29:BF:37:01:78:02:DF:C1:07:D8:A2:10:AB:0A:DD:11:66:B0
ValidityTue, 21 Nov 2023 08:57:57 GMT - Sun, 22 Dec 2024 08:57:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/cm?user_id=0100007F6B646D655C0770B502ECFC46&pupa=1 HTTP/1.1
Host: nr.bidderstack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 04 Dec 2023 05:32:28 GMT
Content-Length: 0
Connection: keep-alive
Location: https://www.acint.net/match?dp=251&euid=d6979f52-2616-aa83-4667-870fd419f06c
Set-Cookie: pupa=d6979f52-2616-aa83-4667-870fd419f06c; domain=.bidderstack.com; path=/; expires=Tue, 03-Dec-2024 05:32:28 GMT;
csorigin2=244; domain=.bidderstack.com; path=/; expires=Mon, 04-Dec-2023 05:37:28 GMT;
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
302 Found 0 B URL GET HTTP/2 sync.upravel.com/sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerGlobalSign nv-sa
Subject*.upravel.com
Fingerprint4C:ED:03:57:58:43:18:2C:CC:41:F3:3B:19:72:75:BD:29:C1:04:08
ValiditySat, 29 Apr 2023 07:48:21 GMT - Thu, 30 May 2024 07:48:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly93d3cuYWNpbnQubmV0LyJdfX0 HTTP/1.1
Host: sync.upravel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: session_tptc=1701667948082
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: image/png
content-length: 0
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: user_id=2d99d13c-3fab-4ba1-92b2-d9e59ec9c9ed;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
user_id-legacy=2d99d13c-3fab-4ba1-92b2-d9e59ec9c9ed;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000
location: https://www.acint.net/match?dp=71&euid=2d99d13c-3fab-4ba1-92b2-d9e59ec9c9ed
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: false
X-Firefox-Spdy: h2
code.moviead55.ru/madstyle.css
200 OK 175 B URL GET HTTP/2 code.moviead55.ru/madstyle.css
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
File type gzip compressed data, from Unix\012- data
Hash de4abd98a1712e5b4746fb13949f4b1a
954c0793c8d1b8b83a09fba5f911eb9104aeee7d
919f57851ec2a7e50074c465d08b80ea5dc20e782d242a456f35024d9063f927
GET /madstyle.css HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:26 GMT
content-type: text/css; charset=utf-8
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
access-control-allow-origin: *
access-control-expose-headers: *
access-control-max-age: 86400
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method
etag: W/"28021-7Ba9Gb9K6bwuIzasQJpQO7varK0"
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sap1&s_data=CAIQARjsyLWrBmIgMDEwMDAwN0Y2QjY0NkQ2NTVDMDc3MEI1MDJFQ0ZDNDaiARCDPtBckmYR7obgACWQwGR8
200 OK 0 B URL GET HTTP/1.1 sync.bumlam.com/?src=sap1&s_data=CAIQARjsyLWrBmIgMDEwMDAwN0Y2QjY0NkQ2NTVDMDc3MEI1MDJFQ0ZDNDaiARCDPtBckmYR7obgACWQwGR8
IP
ASN #44066 diva-e Datacenters GmbH
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.bumlam.com
Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0
ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&s_data=CAIQARjsyLWrBmIgMDEwMDAwN0Y2QjY0NkQ2NTVDMDc3MEI1MDJFQ0ZDNDaiARCDPtBckmYR7obgACWQwGR8 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiQ4MzNlZDA1Yy05MjY2LTExZWUtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 05:32:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQ4MzNlZDA1Yy05MjY2LTExZWUtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Sun, 29 Nov 2043 05:32:28 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
9bc-a3e-2200g0.v.plground.live:10402/4Em7.txt
200 OK 12 B URL GET HTTP/1.1 9bc-a3e-2200g0.v.plground.live:10402/4Em7.txt
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerLet's Encrypt
Subjectplground.live
Fingerprint2E:5F:B1:95:A8:4E:CD:D1:14:E5:47:B7:5E:A2:2E:4E:5A:D9:8E:38
ValidityFri, 17 Nov 2023 21:15:40 GMT - Thu, 15 Feb 2024 21:15:39 GMT
File type ASCII text, with no line terminators
Hash 35b0bce9d250429df012c0426f88d0bd
f81d80af9cbeb0011316fbba3da8002b32251f7a
da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d
GET /4Em7.txt HTTP/1.1
Host: 9bc-a3e-2200g0.v.plground.live:10402
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.cdnonair.top
DNT: 1
Connection: keep-alive
Referer: https://cdn.cdnonair.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 04 Dec 2023 05:32:28 GMT
Content-Type: text/plain; charset=utf8
Content-Length: 12
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
sync.bumlam.com/?src=sape
302 Moved Temporarily 0 B URL GET HTTP/1.1 sync.bumlam.com/?src=sape
IP
ASN #44066 diva-e Datacenters GmbH
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.bumlam.com
Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0
ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sape HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiQ4MzNlZDA1Yy05MjY2LTExZWUtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Mon, 04 Dec 2023 05:32:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQ4MzNlZDA1Yy05MjY2LTExZWUtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Sun, 29 Nov 2043 05:32:28 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: https://pix.bumlam.com/sync/sape/sync_ok?guid=833ed05c-9266-11ee-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
Access-Control-Allow-Origin: https://acint.net
Access-Control-Allow-Credentials: true
www.acint.net/match?dp=186&euid=091bd3af-274c-4992-87e4-e459bdf6468d
200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=186&euid=091bd3af-274c-4992-87e4-e459bdf6468d
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=186&euid=091bd3af-274c-4992-87e4-e459bdf6468d HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVtZGu1vQddmH5SAvYoj/0BdY5QWJ0RNh8e21Yp7KQ+; cSyncDp14v6=1701667947; cSyncDp17v2=1701667947; cSyncDp45v5=1701667947; cSyncDp53v5=1701667947; cSyncDp62v2=1701667947; cSyncDp67v3=1701667947; cSyncDp68v2=1701667947; cSyncDp71v2=1701667947; cSyncDp80v2=1701667947; cSyncDp85v2=1701667947; cSyncDp95v4=1701667947; cSyncDp98v3=1701667947; cSyncDp104v2=1701667947; cSyncDp107v2=1701667947; cSyncDp110v3=1701667947; cSyncDp125v4=1701667947; cSyncDp126v2=1701667947; cSyncDp127v2=1701667947; cSyncDp129v2=1701667947; cSyncDp136v3=1701667947; cSyncDp146v2=1701667947; cSyncDp148v2=1701667947; cSyncDp149v3=1701667947; cSyncDp151v2=1701667947; cSyncDp251v1=1701667947; cSyncDp186v2=1701667947; cSyncDp217v2=1701667947; cSyncDp221v2=1701667947; cSyncDp235v2=1701667947; cSyncDp239v2=1701667947; cSyncDp243v2=1701667947; cSyncDp260v2=1701667947; cSyncDp244v2=1701667947; cSyncDp248v2=1701667947; cSyncDp261v1=1701667947; cSyncDp14v4=1701667947
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
9bc-a3e-2200g0.v.plground.live:10402/subs/18/1701689546/QPPhhYL89lmm85p-ErttAg/845/820845/index.php
200 OK 379 B URL GET HTTP/1.1 9bc-a3e-2200g0.v.plground.live:10402/subs/18/1701689546/QPPhhYL89lmm85p-ErttAg/845/820845/index.php
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerLet's Encrypt
Subjectplground.live
Fingerprint2E:5F:B1:95:A8:4E:CD:D1:14:E5:47:B7:5E:A2:2E:4E:5A:D9:8E:38
ValidityFri, 17 Nov 2023 21:15:40 GMT - Thu, 15 Feb 2024 21:15:39 GMT
File type ASCII text, with very long lines (379), with no line terminators
Hash 8e252bcb2ea48d5cdfa4f0c47523950f
a73dfec113fe7c90e818ed2284613eb0b756d005
067087749606ef70416adb32b557f8bfaf7a250d71b218183c92e8bedb7d3123
GET /subs/18/1701689546/QPPhhYL89lmm85p-ErttAg/845/820845/index.php HTTP/1.1
Host: 9bc-a3e-2200g0.v.plground.live:10402
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.cdnonair.top
DNT: 1
Connection: keep-alive
Referer: https://cdn.cdnonair.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 04 Dec 2023 05:32:28 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.24
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
logger.moviead55.ru/logger.php?v=9f826dbec17f07ce9634af6973699c4f&c=fa532ea9-182a-4ad6-804b-193f4761b884&t=player_loaded&a=&m=%7B%22sub_id%22%3A%22ap%22%2C%22loadTime%22%3A1.054%2C%22version%22%3A%221701285253729%22%2C%22vt%22%3A100%2C%22dh%22%3Afalse%2C%22l%22%3A%22https%3A%2F%2Flordserial1.biz%2Fmultserialy%2F8616-juzhnyj-park-1997.html%22%2C%22scr%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22c%22%3A24%2C%22iw%22%3A1060%2C%22ih%22%3A330%7D%7D&o=
200 OK 124 B URL GET HTTP/2 logger.moviead55.ru/logger.php?v=9f826dbec17f07ce9634af6973699c4f&c=fa532ea9-182a-4ad6-804b-193f4761b884&t=player_loaded&a=&m=%7B%22sub_id%22%3A%22ap%22%2C%22loadTime%22%3A1.054%2C%22version%22%3A%221701285253729%22%2C%22vt%22%3A100%2C%22dh%22%3Afalse%2C%22l%22%3A%22https%3A%2F%2Flordserial1.biz%2Fmultserialy%2F8616-juzhnyj-park-1997.html%22%2C%22scr%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22c%22%3A24%2C%22iw%22%3A1060%2C%22ih%22%3A330%7D%7D&o=
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
File type gzip compressed data, from Unix\012- data
Hash 77cbf6a8d403a9dbf731a40580e65851
6a59f053eeed69defbb069232212b685edab32ae
1a46f5b6aaadc40ed54454f788819ebd1838a3f78b348086e0695215e4133288
GET /logger.php?v=9f826dbec17f07ce9634af6973699c4f&c=fa532ea9-182a-4ad6-804b-193f4761b884&t=player_loaded&a=&m=%7B%22sub_id%22%3A%22ap%22%2C%22loadTime%22%3A1.054%2C%22version%22%3A%221701285253729%22%2C%22vt%22%3A100%2C%22dh%22%3Afalse%2C%22l%22%3A%22https%3A%2F%2Flordserial1.biz%2Fmultserialy%2F8616-juzhnyj-park-1997.html%22%2C%22scr%22%3A%7B%22w%22%3A1280%2C%22h%22%3A1024%2C%22c%22%3A24%2C%22iw%22%3A1060%2C%22ih%22%3A330%7D%7D&o= HTTP/1.1
Host: logger.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: Content-Type: image/png
vary: Accept-Encoding
x-movieads-le: true
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
079301eaff0975107716716fd1cb0dcd.com/alloha.php
200 OK 310 B URL GET HTTP/2 079301eaff0975107716716fd1cb0dcd.com/alloha.php
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerLet's Encrypt
Subject079301eaff0975107716716fd1cb0dcd.com
Fingerprint41:CA:6A:59:1C:1B:3B:A4:5B:B9:E2:C8:C4:65:D8:33:69:39:AD:E0
ValidityTue, 17 Oct 2023 19:40:25 GMT - Mon, 15 Jan 2024 19:40:24 GMT
File type ASCII text, with CRLF line terminators
Hash 2ac6d4006aca7388da0ffafbe9b2b60d
553b189e509d1ffac85546f5821c2b489b82e916
59c3a2008e686fd5e09c23ff14e8b367221f7d70ed4bab8b6a5e0019f4cad5e4
GET /alloha.php HTTP/1.1
Host: 079301eaff0975107716716fd1cb0dcd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.cdnonair.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: application/javascript
x-powered-by: PHP/7.1.33
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6GHaBzJWUcZCbwwnuf3Pep8SrmyuhqXDQ3ykcSil2%2BJegOjZlyD10ruQzrAAxqJdAuLjfJGePnCf5RvD73ucOOmHltLr%2FRZMRj3Iak0zYZMKsycwtnvUntk9bwSbjheJYetqAn%2Fmsew92pBmHn3p6ABlolCTwUI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8301ab461f68b529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
user91471.clients-cdnnow.ru/yasdk/vw.js?v3
1.4 kB URL user91471.clients-cdnnow.ru/yasdk/vw.js?v3
IP
File type gzip compressed data, from Unix\012- data
Hash 6c034c24e0d15a29b732d4f7aeef2395
b4efbd6904b6595990c139120f675b963d2b39ef
87ec34789bec513f7f5da2ab82038204b348549cad7fbd4b13d13360dc81b83b
GET /yasdk/vw.js?v3 HTTP/1.1
Host: user91471.clients-cdnnow.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: application/javascript
last-modified: Fri, 21 Jul 2023 13:34:19 GMT
vary: Accept-Encoding
etag: W/"64ba895b-12fc"
x-movieads-country: RU
content-encoding: gzip
x-edge-cache: HIT
x-edge-ip: 172.19.32.3
X-Firefox-Spdy: h2
code.moviead55.ru/go/csync?cn=sapecookie&bid=0100007F6B646D655D07BDB502527E98
200 OK 0 B URL GET HTTP/2 code.moviead55.ru/go/csync?cn=sapecookie&bid=0100007F6B646D655D07BDB502527E98
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=sapecookie&bid=0100007F6B646D655D07BDB502527E98 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Cookie: sky_uuid=31d05549-967e-224d-2793-4e1bd2b0f8e7; hbrdcookie2=9304616438830318104a; otclkbid=VUG31mKFfTelneA; ohmybid=7fd42a94-0fd5-46f3-9521-d354c4506178; solta=ZW1kawO4lo4; bzcookie=72650124-3d60-47f7-738a-0e857a743f27
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: image/jpeg
content-length: 0
set-cookie: sapecookie=0100007F6B646D655D07BDB502527E98; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
sync.adspend.space/check?r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D98%26euid%3D4f3c8a74-beab-4169-a9ad-1adef5f182c2
302 Found 102 B URL GET HTTP/2 sync.adspend.space/check?r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D98%26euid%3D4f3c8a74-beab-4169-a9ad-1adef5f182c2
IP
ASN #50340 OOO Network of data-centers Selectel
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subjectadspend.space
Fingerprint25:A8:18:8F:99:5E:81:77:EE:CC:A2:7D:B9:A4:65:C6:29:9B:72:AF
ValidityMon, 27 Nov 2023 12:15:31 GMT - Sun, 25 Feb 2024 12:15:30 GMT
File type HTML document, ASCII text
Hash 0d9bff74d1358f11efee3e474c561c1d
17bf49f18711a9ef5ebd32893545d763d7e52c81
70eadb6b06b8e216ae25b13c49941a3de6cca1a13bfe9d4536e4a539fbccaa81
GET /check?r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D98%26euid%3D4f3c8a74-beab-4169-a9ad-1adef5f182c2 HTTP/1.1
Host: sync.adspend.space
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: as-user=4f3c8a74-beab-4169-a9ad-1adef5f182c2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.22.1
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: text/html; charset=utf-8
content-length: 102
location: https://www.acint.net/match?dp=98&euid=4f3c8a74-beab-4169-a9ad-1adef5f182c2
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: PUT, GET, POST, OPTIONS
access-control-allow-headers: Content-Type, authorization
access-control-max-age: 1728000
X-Firefox-Spdy: h2
www.acint.net/match?dp=251&euid=d6979f52-2616-aa83-4667-870fd419f06c
200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=251&euid=d6979f52-2616-aa83-4667-870fd419f06c
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=251&euid=d6979f52-2616-aa83-4667-870fd419f06c HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVtZGu1vQddmH5SAvYoj/0BdY5QWJ0RNh8e21Yp7KQ+; cSyncDp14v6=1701667947; cSyncDp17v2=1701667947; cSyncDp45v5=1701667947; cSyncDp53v5=1701667947; cSyncDp62v2=1701667947; cSyncDp67v3=1701667947; cSyncDp68v2=1701667947; cSyncDp71v2=1701667947; cSyncDp80v2=1701667947; cSyncDp85v2=1701667947; cSyncDp95v4=1701667947; cSyncDp98v3=1701667947; cSyncDp104v2=1701667947; cSyncDp107v2=1701667947; cSyncDp110v3=1701667947; cSyncDp125v4=1701667947; cSyncDp126v2=1701667947; cSyncDp127v2=1701667947; cSyncDp129v2=1701667947; cSyncDp136v3=1701667947; cSyncDp146v2=1701667947; cSyncDp148v2=1701667947; cSyncDp149v3=1701667947; cSyncDp151v2=1701667947; cSyncDp251v1=1701667947; cSyncDp186v2=1701667947; cSyncDp217v2=1701667947; cSyncDp221v2=1701667947; cSyncDp235v2=1701667947; cSyncDp239v2=1701667947; cSyncDp243v2=1701667947; cSyncDp260v2=1701667947; cSyncDp244v2=1701667947; cSyncDp248v2=1701667947; cSyncDp261v1=1701667947; cSyncDp14v4=1701667947
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/match?dp=71&euid=2d99d13c-3fab-4ba1-92b2-d9e59ec9c9ed
200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=71&euid=2d99d13c-3fab-4ba1-92b2-d9e59ec9c9ed
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=71&euid=2d99d13c-3fab-4ba1-92b2-d9e59ec9c9ed HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVtZGu1vQddmH5SAvYoj/0BdY5QWJ0RNh8e21Yp7KQ+; cSyncDp14v6=1701667947; cSyncDp17v2=1701667947; cSyncDp45v5=1701667947; cSyncDp53v5=1701667947; cSyncDp62v2=1701667947; cSyncDp67v3=1701667947; cSyncDp68v2=1701667947; cSyncDp71v2=1701667947; cSyncDp80v2=1701667947; cSyncDp85v2=1701667947; cSyncDp95v4=1701667947; cSyncDp98v3=1701667947; cSyncDp104v2=1701667947; cSyncDp107v2=1701667947; cSyncDp110v3=1701667947; cSyncDp125v4=1701667947; cSyncDp126v2=1701667947; cSyncDp127v2=1701667947; cSyncDp129v2=1701667947; cSyncDp136v3=1701667947; cSyncDp146v2=1701667947; cSyncDp148v2=1701667947; cSyncDp149v3=1701667947; cSyncDp151v2=1701667947; cSyncDp251v1=1701667947; cSyncDp186v2=1701667947; cSyncDp217v2=1701667947; cSyncDp221v2=1701667947; cSyncDp235v2=1701667947; cSyncDp239v2=1701667947; cSyncDp243v2=1701667947; cSyncDp260v2=1701667947; cSyncDp244v2=1701667947; cSyncDp248v2=1701667947; cSyncDp261v1=1701667947; cSyncDp14v4=1701667947
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
pix.bumlam.com/sync/sape/sync_ok?guid=833ed05c-9266-11ee-86e0-002590c0647c
302 Found 0 B URL GET HTTP/1.1 pix.bumlam.com/sync/sape/sync_ok?guid=833ed05c-9266-11ee-86e0-002590c0647c
IP
ASN #44066 diva-e Datacenters GmbH
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.bumlam.com
Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0
ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/sape/sync_ok?guid=833ed05c-9266-11ee-86e0-002590c0647c HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiQ4MzNlZDA1Yy05MjY2LTExZWUtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 04 Dec 2023 05:32:28 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://833ed05c-9266-11ee-86e0-002590c0647c.n7.sync.bumlam.com/?src=sape
www.acint.net/match?dp=98&euid=4f3c8a74-beab-4169-a9ad-1adef5f182c2
200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=98&euid=4f3c8a74-beab-4169-a9ad-1adef5f182c2
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=98&euid=4f3c8a74-beab-4169-a9ad-1adef5f182c2 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVtZGu1vQddmH5SAvYoj/0BdY5QWJ0RNh8e21Yp7KQ+; cSyncDp14v6=1701667947; cSyncDp17v2=1701667947; cSyncDp45v5=1701667947; cSyncDp53v5=1701667947; cSyncDp62v2=1701667947; cSyncDp67v3=1701667947; cSyncDp68v2=1701667947; cSyncDp71v2=1701667947; cSyncDp80v2=1701667947; cSyncDp85v2=1701667947; cSyncDp95v4=1701667947; cSyncDp98v3=1701667947; cSyncDp104v2=1701667947; cSyncDp107v2=1701667947; cSyncDp110v3=1701667947; cSyncDp125v4=1701667947; cSyncDp126v2=1701667947; cSyncDp127v2=1701667947; cSyncDp129v2=1701667947; cSyncDp136v3=1701667947; cSyncDp146v2=1701667947; cSyncDp148v2=1701667947; cSyncDp149v3=1701667947; cSyncDp151v2=1701667947; cSyncDp251v1=1701667947; cSyncDp186v2=1701667947; cSyncDp217v2=1701667947; cSyncDp221v2=1701667947; cSyncDp235v2=1701667947; cSyncDp239v2=1701667947; cSyncDp243v2=1701667947; cSyncDp260v2=1701667947; cSyncDp244v2=1701667947; cSyncDp248v2=1701667947; cSyncDp261v1=1701667947; cSyncDp14v4=1701667947
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
833ed05c-9266-11ee-86e0-002590c0647c.n7.sync.bumlam.com/?src=sape
302 Found 0 B URL GET HTTP/2 833ed05c-9266-11ee-86e0-002590c0647c.n7.sync.bumlam.com/?src=sape
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.n0.sync.bumlam.com
Fingerprint99:77:61:BD:7C:71:52:75:4C:35:19:FA:21:42:A9:2E:BF:93:81:BF
ValidityTue, 19 Sep 2023 05:05:41 GMT - Mon, 18 Dec 2023 05:05:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sape HTTP/1.1
Host: 833ed05c-9266-11ee-86e0-002590c0647c.n7.sync.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiQ4MzNlZDA1Yy05MjY2LTExZWUtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.24.0
date: Mon, 04 Dec 2023 05:32:29 GMT
content-length: 0
location: https://pix.bumlam.com/sync/sape/done
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
X-Firefox-Spdy: h2
videotoday.site/mp_dist/td/trhls.html?v5646834026
200 OK 3.8 kB URL GET HTTP/3 videotoday.site/mp_dist/td/trhls.html?v5646834026
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerGoogle Trust Services LLC
Subjectvideotoday.site
FingerprintA8:0A:0C:FF:C9:74:01:DA:F2:F4:6F:1A:46:B4:A3:2D:53:73:57:62
ValidityFri, 06 Oct 2023 02:55:12 GMT - Thu, 04 Jan 2024 02:55:11 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7773)
Hash 024b7940739e8fb30b134b6251e070ee
967f5075fcb8994bdddd1762a382d25f4e24e93a
0c21f20b69405f88468f447319695a57f931ea4fe53932a76fb2d1cb6e044c93
GET /mp_dist/td/trhls.html?v5646834026 HTTP/1.1
Host: videotoday.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: text/html
last-modified: Wed, 29 Nov 2023 19:14:25 GMT
vary: Accept-Encoding
x-movieads-country: NO
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-max-age: 1728000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YexOOlnpJdS2TfP7zRsS14DcMlSeewjGeqTTMNtCWPkBgWTnfAG48%2B0Lz5qC%2FepKvuSkmwnnZ7YoqbUhQvoVkVheowcgkAQeb1vqndLEbTevyIJnlvs3y4dcc8UlwCW50Hc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8301ab484a6e1bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
9bc-a3e-2200g0.v.plground.live:10402/4Em7.txt
200 OK 12 B URL GET HTTP/1.1 9bc-a3e-2200g0.v.plground.live:10402/4Em7.txt
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerLet's Encrypt
Subjectplground.live
Fingerprint2E:5F:B1:95:A8:4E:CD:D1:14:E5:47:B7:5E:A2:2E:4E:5A:D9:8E:38
ValidityFri, 17 Nov 2023 21:15:40 GMT - Thu, 15 Feb 2024 21:15:39 GMT
File type ASCII text, with no line terminators
Hash 35b0bce9d250429df012c0426f88d0bd
f81d80af9cbeb0011316fbba3da8002b32251f7a
da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d
GET /4Em7.txt HTTP/1.1
Host: 9bc-a3e-2200g0.v.plground.live:10402
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.cdnonair.top
DNT: 1
Connection: keep-alive
Referer: https://cdn.cdnonair.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 04 Dec 2023 05:32:29 GMT
Content-Type: text/plain; charset=utf8
Content-Length: 12
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
user91471.clients-cdnnow.ru/vp_dist/hls.js?v2
200 OK 97 kB URL GET HTTP/2 user91471.clients-cdnnow.ru/vp_dist/hls.js?v2
IP
Requested by https://videotoday.site/mp_dist/td/trhls.html?v5646834026
Certificate IssuerLet's Encrypt
Subject*.clients-cdnnow.ru
Fingerprint7E:E4:04:34:49:F5:F1:E6:2A:83:55:F6:8A:EF:64:0A:9D:DB:88:53
ValidityTue, 07 Nov 2023 22:34:52 GMT - Mon, 05 Feb 2024 22:34:51 GMT
File type gzip compressed data, from Unix\012- data
Hash fe9443d91450d4d1a2c18754e5b07717
5b151741cb1ff7f3f648a2bcea0604aa41758422
52e50109e717111fe42518abed309adf69e12159d95298b9dfcac3ab31ed50fa
GET /vp_dist/hls.js?v2 HTTP/1.1
Host: user91471.clients-cdnnow.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videotoday.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:29 GMT
content-type: application/javascript
last-modified: Tue, 14 Feb 2023 08:10:38 GMT
vary: Accept-Encoding
etag: W/"63eb41fe-52302"
x-movieads-country: RU
content-encoding: gzip
x-edge-cache: HIT
x-edge-ip: 172.19.32.3
X-Firefox-Spdy: h2
static.filmskino.site/hls/trailers/tQs0gRLaweA.mp4/index.m3u8
200 OK 330 B URL GET HTTP/1.1 static.filmskino.site/hls/trailers/tQs0gRLaweA.mp4/index.m3u8
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://videotoday.site/mp_dist/td/trhls.html?v5646834026
Certificate IssuerLet's Encrypt
Subjectstatic.filmskino.site
Fingerprint6E:8F:8F:89:03:E1:65:6F:AE:73:8A:6F:6B:A2:B1:02:C1:FE:D3:C7
ValidityMon, 02 Oct 2023 16:05:08 GMT - Sun, 31 Dec 2023 16:05:07 GMT
Hash ec7040cb58483f0a8f5f308244d2080e
b58047cbc300141cc378b4c3bfb5bb2878840035
e4f842997e19b2ac92563f0bdd3ee9ebd3cf5bfaa2653db27204a45942d33490
GET /hls/trailers/tQs0gRLaweA.mp4/index.m3u8 HTTP/1.1
Host: static.filmskino.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videotoday.site
DNT: 1
Connection: keep-alive
Referer: https://videotoday.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 05:32:29 GMT
Content-Type: application/vnd.apple.mpegurl
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"3a1794b0-ff7"
Expires: Wed, 13 Mar 2024 05:32:29 GMT
Cache-Control: max-age=8640000
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Origin: *
Content-Encoding: gzip
static.filmskino.site/hls/trailers/tQs0gRLaweA.mp4/seg-1-v1-a1.ts
200 OK 172 kB URL GET HTTP/1.1 static.filmskino.site/hls/trailers/tQs0gRLaweA.mp4/seg-1-v1-a1.ts
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://videotoday.site/mp_dist/td/trhls.html?v5646834026
Certificate IssuerLet's Encrypt
Subjectstatic.filmskino.site
Fingerprint6E:8F:8F:89:03:E1:65:6F:AE:73:8A:6F:6B:A2:B1:02:C1:FE:D3:C7
ValidityMon, 02 Oct 2023 16:05:08 GMT - Sun, 31 Dec 2023 16:05:07 GMT
File type MPEG transport stream data\012- data
Size 172 kB (171832 bytes)
Hash 02e52db09d0f484b8507994fac7cffa5
65d82708fbe88ff01c22986526ff180e605be0c6
51864afda1faa031042be3c24fce9168eb886a7e17d896961275ba63ef9df461
GET /hls/trailers/tQs0gRLaweA.mp4/seg-1-v1-a1.ts HTTP/1.1
Host: static.filmskino.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videotoday.site
DNT: 1
Connection: keep-alive
Referer: https://videotoday.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 05:32:29 GMT
Content-Type: video/MP2T
Content-Length: 171832
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Connection: keep-alive
ETag: "3a1794b0-29f38"
Expires: Wed, 13 Mar 2024 05:32:29 GMT
Cache-Control: max-age=8640000
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
static.filmskino.site/hls/trailers/tQs0gRLaweA.mp4/seg-2-v1-a1.ts
200 OK 178 kB URL GET HTTP/1.1 static.filmskino.site/hls/trailers/tQs0gRLaweA.mp4/seg-2-v1-a1.ts
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://videotoday.site/mp_dist/td/trhls.html?v5646834026
Certificate IssuerLet's Encrypt
Subjectstatic.filmskino.site
Fingerprint6E:8F:8F:89:03:E1:65:6F:AE:73:8A:6F:6B:A2:B1:02:C1:FE:D3:C7
ValidityMon, 02 Oct 2023 16:05:08 GMT - Sun, 31 Dec 2023 16:05:07 GMT
File type MPEG transport stream data\012- TeX font metric data (\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377)\012- data
Size 178 kB (177848 bytes)
Hash 654e950dc5613c86b04bd90e995ae8c5
d1b4f46e92ec5e0b5c254ed10a45e89c360741c0
cb2d2a5ae5ef20b99dcec219eea42589f733bd9e62f7538e380636217f6d3241
GET /hls/trailers/tQs0gRLaweA.mp4/seg-2-v1-a1.ts HTTP/1.1
Host: static.filmskino.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videotoday.site
DNT: 1
Connection: keep-alive
Referer: https://videotoday.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 05:32:29 GMT
Content-Type: video/MP2T
Content-Length: 177848
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Connection: keep-alive
ETag: "3a1794b0-2b6b8"
Expires: Wed, 13 Mar 2024 05:32:29 GMT
Cache-Control: max-age=8640000
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
static.filmskino.site/hls/trailers/tQs0gRLaweA.mp4/seg-3-v1-a1.ts
200 OK 157 kB URL GET HTTP/1.1 static.filmskino.site/hls/trailers/tQs0gRLaweA.mp4/seg-3-v1-a1.ts
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://videotoday.site/mp_dist/td/trhls.html?v5646834026
Certificate IssuerLet's Encrypt
Subjectstatic.filmskino.site
Fingerprint6E:8F:8F:89:03:E1:65:6F:AE:73:8A:6F:6B:A2:B1:02:C1:FE:D3:C7
ValidityMon, 02 Oct 2023 16:05:08 GMT - Sun, 31 Dec 2023 16:05:07 GMT
File type MPEG transport stream data\012- TeX font metric data (\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377)\012- data
Size 157 kB (156792 bytes)
Hash 84db06a3f24228d6848419f10c0efa93
368dc6723adc595f04ebb1938b8073dfc5060717
0f43ccf2a71308d3df44f72385c6232536f3a1ea9c5473b36e972550ee52634a
GET /hls/trailers/tQs0gRLaweA.mp4/seg-3-v1-a1.ts HTTP/1.1
Host: static.filmskino.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videotoday.site
DNT: 1
Connection: keep-alive
Referer: https://videotoday.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 05:32:29 GMT
Content-Type: video/MP2T
Content-Length: 156792
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Connection: keep-alive
ETag: "3a1794b0-26478"
Expires: Wed, 13 Mar 2024 05:32:29 GMT
Cache-Control: max-age=8640000
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
9bc-a3e-2200g0.v.plground.live:10402/4Em7.txt
200 OK 12 B URL GET HTTP/1.1 9bc-a3e-2200g0.v.plground.live:10402/4Em7.txt
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerLet's Encrypt
Subjectplground.live
Fingerprint2E:5F:B1:95:A8:4E:CD:D1:14:E5:47:B7:5E:A2:2E:4E:5A:D9:8E:38
ValidityFri, 17 Nov 2023 21:15:40 GMT - Thu, 15 Feb 2024 21:15:39 GMT
File type ASCII text, with no line terminators
Hash 35b0bce9d250429df012c0426f88d0bd
f81d80af9cbeb0011316fbba3da8002b32251f7a
da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d
GET /4Em7.txt HTTP/1.1
Host: 9bc-a3e-2200g0.v.plground.live:10402
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.cdnonair.top
DNT: 1
Connection: keep-alive
Referer: https://cdn.cdnonair.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 04 Dec 2023 05:32:30 GMT
Content-Type: text/plain; charset=utf8
Content-Length: 12
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
9bc-a3e-2200g0.v.plground.live:10402/4Em7.txt
200 OK 12 B URL GET HTTP/1.1 9bc-a3e-2200g0.v.plground.live:10402/4Em7.txt
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerLet's Encrypt
Subjectplground.live
Fingerprint2E:5F:B1:95:A8:4E:CD:D1:14:E5:47:B7:5E:A2:2E:4E:5A:D9:8E:38
ValidityFri, 17 Nov 2023 21:15:40 GMT - Thu, 15 Feb 2024 21:15:39 GMT
File type ASCII text, with no line terminators
Hash 35b0bce9d250429df012c0426f88d0bd
f81d80af9cbeb0011316fbba3da8002b32251f7a
da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d
GET /4Em7.txt HTTP/1.1
Host: 9bc-a3e-2200g0.v.plground.live:10402
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.cdnonair.top
DNT: 1
Connection: keep-alive
Referer: https://cdn.cdnonair.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 04 Dec 2023 05:32:31 GMT
Content-Type: text/plain; charset=utf8
Content-Length: 12
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
9bc-a3e-2200g0.v.plground.live:10402/4Em7.txt
200 OK 12 B URL GET HTTP/1.1 9bc-a3e-2200g0.v.plground.live:10402/4Em7.txt
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerLet's Encrypt
Subjectplground.live
Fingerprint2E:5F:B1:95:A8:4E:CD:D1:14:E5:47:B7:5E:A2:2E:4E:5A:D9:8E:38
ValidityFri, 17 Nov 2023 21:15:40 GMT - Thu, 15 Feb 2024 21:15:39 GMT
File type ASCII text, with no line terminators
Hash 35b0bce9d250429df012c0426f88d0bd
f81d80af9cbeb0011316fbba3da8002b32251f7a
da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d
GET /4Em7.txt HTTP/1.1
Host: 9bc-a3e-2200g0.v.plground.live:10402
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.cdnonair.top
DNT: 1
Connection: keep-alive
Referer: https://cdn.cdnonair.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 04 Dec 2023 05:32:32 GMT
Content-Type: text/plain; charset=utf8
Content-Length: 12
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
9bc-a3e-2200g0.v.plground.live:10402/4Em7.txt
200 OK 12 B URL GET HTTP/1.1 9bc-a3e-2200g0.v.plground.live:10402/4Em7.txt
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerLet's Encrypt
Subjectplground.live
Fingerprint2E:5F:B1:95:A8:4E:CD:D1:14:E5:47:B7:5E:A2:2E:4E:5A:D9:8E:38
ValidityFri, 17 Nov 2023 21:15:40 GMT - Thu, 15 Feb 2024 21:15:39 GMT
File type ASCII text, with no line terminators
Hash 35b0bce9d250429df012c0426f88d0bd
f81d80af9cbeb0011316fbba3da8002b32251f7a
da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d
GET /4Em7.txt HTTP/1.1
Host: 9bc-a3e-2200g0.v.plground.live:10402
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.cdnonair.top
DNT: 1
Connection: keep-alive
Referer: https://cdn.cdnonair.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 04 Dec 2023 05:32:33 GMT
Content-Type: text/plain; charset=utf8
Content-Length: 12
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
9bc-a3e-2200g0.v.plground.live:10402/4Em7.txt
200 OK 12 B URL GET HTTP/1.1 9bc-a3e-2200g0.v.plground.live:10402/4Em7.txt
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerLet's Encrypt
Subjectplground.live
Fingerprint2E:5F:B1:95:A8:4E:CD:D1:14:E5:47:B7:5E:A2:2E:4E:5A:D9:8E:38
ValidityFri, 17 Nov 2023 21:15:40 GMT - Thu, 15 Feb 2024 21:15:39 GMT
File type ASCII text, with no line terminators
Hash 35b0bce9d250429df012c0426f88d0bd
f81d80af9cbeb0011316fbba3da8002b32251f7a
da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d
GET /4Em7.txt HTTP/1.1
Host: 9bc-a3e-2200g0.v.plground.live:10402
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.cdnonair.top
DNT: 1
Connection: keep-alive
Referer: https://cdn.cdnonair.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 04 Dec 2023 05:32:34 GMT
Content-Type: text/plain; charset=utf8
Content-Length: 12
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
9bc-a3e-2200g0.v.plground.live:10402/4Em7.txt
200 OK 12 B URL GET HTTP/1.1 9bc-a3e-2200g0.v.plground.live:10402/4Em7.txt
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerLet's Encrypt
Subjectplground.live
Fingerprint2E:5F:B1:95:A8:4E:CD:D1:14:E5:47:B7:5E:A2:2E:4E:5A:D9:8E:38
ValidityFri, 17 Nov 2023 21:15:40 GMT - Thu, 15 Feb 2024 21:15:39 GMT
File type ASCII text, with no line terminators
Hash 35b0bce9d250429df012c0426f88d0bd
f81d80af9cbeb0011316fbba3da8002b32251f7a
da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d
GET /4Em7.txt HTTP/1.1
Host: 9bc-a3e-2200g0.v.plground.live:10402
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.cdnonair.top
DNT: 1
Connection: keep-alive
Referer: https://cdn.cdnonair.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 04 Dec 2023 05:32:35 GMT
Content-Type: text/plain; charset=utf8
Content-Length: 12
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
9bc-a3e-2200g0.v.plground.live:10402/4Em7.txt
200 OK 12 B URL GET HTTP/1.1 9bc-a3e-2200g0.v.plground.live:10402/4Em7.txt
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerLet's Encrypt
Subjectplground.live
Fingerprint2E:5F:B1:95:A8:4E:CD:D1:14:E5:47:B7:5E:A2:2E:4E:5A:D9:8E:38
ValidityFri, 17 Nov 2023 21:15:40 GMT - Thu, 15 Feb 2024 21:15:39 GMT
File type ASCII text, with no line terminators
Hash 35b0bce9d250429df012c0426f88d0bd
f81d80af9cbeb0011316fbba3da8002b32251f7a
da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d
GET /4Em7.txt HTTP/1.1
Host: 9bc-a3e-2200g0.v.plground.live:10402
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.cdnonair.top
DNT: 1
Connection: keep-alive
Referer: https://cdn.cdnonair.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Mon, 04 Dec 2023 05:32:36 GMT
Content-Type: text/plain; charset=utf8
Content-Length: 12
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
code.moviead55.ru/go/cinit?cn=btwcookie&rnd=1701667946
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=btwcookie&rnd=1701667946
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=btwcookie&rnd=1701667946 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-length: 0
location: https://ads.betweendigital.com/match?bidder_id=34348&callback_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbtwcookie%26bid%3D%24%7BUSER_ID%7D
set-cookie: sky_uuid=65d33a86-e818-14c8-828d-d023c6aa5694; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=solta&rnd=1701667946
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=solta&rnd=1701667946
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=solta&rnd=1701667946 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-length: 0
location: https://kimberlite.io/rtb/sync/skyadvert?u=514e9708-d580-04fe-03fb-1a9269c559d9
set-cookie: sky_uuid=514e9708-d580-04fe-03fb-1a9269c559d9; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
cdn.cdnonair.top/js/ch.js?v=1.31
200 OK 213 kB URL GET HTTP/2 cdn.cdnonair.top/js/ch.js?v=1.31
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerLet's Encrypt
Subjectcdn.cdnonair.top
Fingerprint74:38:B2:F4:98:5F:B0:15:86:40:83:A3:34:4C:94:41:54:BF:7B:CF
ValidityThu, 26 Oct 2023 21:00:36 GMT - Wed, 24 Jan 2024 21:00:35 GMT
Size 213 kB (212957 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/ch.js?v=1.31 HTTP/1.1
Host: cdn.cdnonair.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97&uid_q=656d646a3f558
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-type: application/javascript
last-modified: Fri, 13 Oct 2023 12:51:15 GMT
etag: W/"65293d43-33fdd"
expires: Fri, 16 Feb 2024 10:11:51 GMT
cache-control: max-age=7776000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
pix.bumlam.com/sync/sape/done
200 OK 43 B URL GET HTTP/1.1 pix.bumlam.com/sync/sape/done
IP
ASN #44066 diva-e Datacenters GmbH
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.bumlam.com
Fingerprint08:E4:EB:78:69:AA:1C:77:24:F5:D4:0F:6C:52:FC:A6:D3:74:90:D0
ValidityMon, 16 Oct 2023 05:30:36 GMT - Sun, 14 Jan 2024 05:30:35 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /sync/sape/done HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiQ4MzNlZDA1Yy05MjY2LTExZWUtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 05:32:29 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
www.acint.net/mc/?dp=167&tc=1
200 OK 5.6 kB URL GET HTTP/2 www.acint.net/mc/?dp=167&tc=1
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5817), with no line terminators
Hash a327c28969553fba24c8d0895721f6e2
62cf9b44fefd1d376d0ee6e2fa1a955143c59feb
379d9d06453509b82771046451cd59797688f16a7e08b18ee66b28f94f89b916
GET /mc/?dp=167&tc=1 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lordserial1.biz/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVtZGu1cAdcRvzsAoJOW7hujyNXqb+oBCRX0rbJUVvZ
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Mon, 04 Dec 2023 05:32:27 GMT
content-type: text/html
set-cookie: cSyncDp14v6=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp17v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp45v5=1701667947; expires=Tue, 05-Dec-23 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp53v5=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp62v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp67v3=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp68v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp71v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp80v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp85v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp95v4=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp98v3=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp104v2=1701667947; expires=Mon, 18-Dec-23 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp107v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp110v3=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp125v4=1701667947; expires=Tue, 19-Dec-23 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp126v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp127v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp129v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp136v3=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp146v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp148v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp149v3=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp151v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp251v1=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp186v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp217v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp221v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp235v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp239v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp243v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp260v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp244v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp248v2=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
cSyncDp261v1=1701667947; expires=Wed, 03-Jan-24 05:32:27 GMT; path=/; Secure; SameSite=None; domain=.acint.net
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
content-encoding: gzip
X-Firefox-Spdy: h2
sync.dsp.solta.io/match/sape?id=0100007F6B646D655C0770B502ECFC46
200 OK 43 B URL GET HTTP/2 sync.dsp.solta.io/match/sape?id=0100007F6B646D655C0770B502ECFC46
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerGlobalSign nv-sa
Subject*.dsp.solta.io
Fingerprint6D:7F:91:92:30:E1:6A:A0:9B:86:49:7A:21:7F:5B:A4:23:8F:92:BC
ValidityWed, 02 Aug 2023 16:38:38 GMT - Mon, 02 Sep 2024 16:38:37 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/sape?id=0100007F6B646D655C0770B502ECFC46 HTTP/1.1
Host: sync.dsp.solta.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
acint.net/match?dp=80&euid=iKK3hURpLtCRcqMq9lFg
200 OK 43 B URL GET HTTP/2 acint.net/match?dp=80&euid=iKK3hURpLtCRcqMq9lFg
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=80&euid=iKK3hURpLtCRcqMq9lFg HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVtZGu1vQddmH5SAvYoj/0BdY5QWJ0RNh8e21Yp7KQ+; cSyncDp14v6=1701667947; cSyncDp17v2=1701667947; cSyncDp45v5=1701667947; cSyncDp53v5=1701667947; cSyncDp62v2=1701667947; cSyncDp67v3=1701667947; cSyncDp68v2=1701667947; cSyncDp71v2=1701667947; cSyncDp80v2=1701667947; cSyncDp85v2=1701667947; cSyncDp95v4=1701667947; cSyncDp98v3=1701667947; cSyncDp104v2=1701667947; cSyncDp107v2=1701667947; cSyncDp110v3=1701667947; cSyncDp125v4=1701667947; cSyncDp126v2=1701667947; cSyncDp127v2=1701667947; cSyncDp129v2=1701667947; cSyncDp136v3=1701667947; cSyncDp146v2=1701667947; cSyncDp148v2=1701667947; cSyncDp149v3=1701667947; cSyncDp151v2=1701667947; cSyncDp251v1=1701667947; cSyncDp186v2=1701667947; cSyncDp217v2=1701667947; cSyncDp221v2=1701667947; cSyncDp235v2=1701667947; cSyncDp239v2=1701667947; cSyncDp243v2=1701667947; cSyncDp260v2=1701667947; cSyncDp244v2=1701667947; cSyncDp248v2=1701667947; cSyncDp261v1=1701667947; cSyncDp14v4=1701667947
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
logger.moviead55.ru/logger.php?t=player_frame_loaded_new&c=fa532ea9-182a-4ad6-804b-193f4761b884&a=&m=0&v=9f826dbec17f07ce9634af6973699c4f&o=
200 OK 70 B URL GET HTTP/2 logger.moviead55.ru/logger.php?t=player_frame_loaded_new&c=fa532ea9-182a-4ad6-804b-193f4761b884&a=&m=0&v=9f826dbec17f07ce9634af6973699c4f&o=
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash b357a19c87624c7c4d131aeeb4ae677f
c7a9c45fd419815a5ab1998503a9f03514c0e229
497790947d4666760ce38f3c00e852c71fdb66cae849bae8e9ede352719e1581
GET /logger.php?t=player_frame_loaded_new&c=fa532ea9-182a-4ad6-804b-193f4761b884&a=&m=0&v=9f826dbec17f07ce9634af6973699c4f&o= HTTP/1.1
Host: logger.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-type: Content-Type: image/png
vary: Accept-Encoding
x-movieads-le: true
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
acint.net/rmatch?dp=14&euid=3E03420A6B646D651D00A89202ED7503&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D
302 Found 0 B URL GET HTTP/2 acint.net/rmatch?dp=14&euid=3E03420A6B646D651D00A89202ED7503&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rmatch?dp=14&euid=3E03420A6B646D651D00A89202ED7503&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVtZGu1vQddmH5SAvYoj/0BdY5QWJ0RNh8e21Yp7KQ+; cSyncDp14v6=1701667947; cSyncDp17v2=1701667947; cSyncDp45v5=1701667947; cSyncDp53v5=1701667947; cSyncDp62v2=1701667947; cSyncDp67v3=1701667947; cSyncDp68v2=1701667947; cSyncDp71v2=1701667947; cSyncDp80v2=1701667947; cSyncDp85v2=1701667947; cSyncDp95v4=1701667947; cSyncDp98v3=1701667947; cSyncDp104v2=1701667947; cSyncDp107v2=1701667947; cSyncDp110v3=1701667947; cSyncDp125v4=1701667947; cSyncDp126v2=1701667947; cSyncDp127v2=1701667947; cSyncDp129v2=1701667947; cSyncDp136v3=1701667947; cSyncDp146v2=1701667947; cSyncDp148v2=1701667947; cSyncDp149v3=1701667947; cSyncDp151v2=1701667947; cSyncDp251v1=1701667947; cSyncDp186v2=1701667947; cSyncDp217v2=1701667947; cSyncDp221v2=1701667947; cSyncDp235v2=1701667947; cSyncDp239v2=1701667947; cSyncDp243v2=1701667947; cSyncDp260v2=1701667947; cSyncDp244v2=1701667947; cSyncDp248v2=1701667947; cSyncDp261v1=1701667947; cSyncDp14v4=1701667947
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: text/html
content-length: 154
location: https://code.moviead55.ru/go/csync?cn=sapecookie&bid=0100007F6B646D655D07BDB502527E98
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/mc/?dp=167
302 Found 5.6 kB IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mc/?dp=167 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty
date: Mon, 04 Dec 2023 05:32:27 GMT
content-type: text/html
content-length: 154
location: /mc/?dp=167&tc=1
set-cookie: test_cookie=CheckForPermission; path=/; Secure; SameSite=None; domain=.acint.net; expires=Mon, 04-Dec-23 05:42:27 GMT
aid=fwAAAWVtZGu1cAdcRvzsAoJOW7hujyNXqb+oBCRX0rbJUVvZ; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=otmbid&rnd=1701667946
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=otmbid&rnd=1701667946
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=otmbid&rnd=1701667946 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-length: 0
location: https://sync.dmp.otm-r.com/match/skyadvert
set-cookie: sky_uuid=55b6cdae-7779-489c-5e63-372ca72d8633; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
cdn.cdnonair.top/js/playerjs-alloha-new-19.3.12.js
200 OK 799 kB URL GET HTTP/2 cdn.cdnonair.top/js/playerjs-alloha-new-19.3.12.js
IP
Requested by https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Certificate IssuerLet's Encrypt
Subjectcdn.cdnonair.top
Fingerprint74:38:B2:F4:98:5F:B0:15:86:40:83:A3:34:4C:94:41:54:BF:7B:CF
ValidityThu, 26 Oct 2023 21:00:36 GMT - Wed, 24 Jan 2024 21:00:35 GMT
Size 799 kB (798565 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/playerjs-alloha-new-19.3.12.js HTTP/1.1
Host: cdn.cdnonair.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:26 GMT
content-type: application/javascript
last-modified: Sun, 03 Dec 2023 14:13:44 GMT
etag: W/"656c8d18-c2f65"
expires: Sat, 02 Mar 2024 14:14:13 GMT
cache-control: max-age=7776000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
ads.adlook.me/csync?pid=sape&uid=0100007F6B646D655C0770B502ECFC46&url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
302 Found 43 B URL GET HTTP/2 ads.adlook.me/csync?pid=sape&uid=0100007F6B646D655C0770B502ECFC46&url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D
IP
ASN #48096 Enterprise Cloud Ltd.
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerGlobalSign nv-sa
Subject*.adlook.me
FingerprintBB:74:3B:09:F5:13:79:CE:CF:22:44:22:AD:AF:A7:74:23:4F:98:32
ValidityTue, 06 Jun 2023 15:02:11 GMT - Sun, 07 Jul 2024 15:02:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /csync?pid=sape&uid=0100007F6B646D655C0770B502ECFC46&url=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D110%26euid%3D%7BuserId%7D HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://acint.net/match?dp=110&euid=1bd03b54060c4204a0277c83976f6b0a
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=1bd03b54060c4204a0277c83976f6b0a; expires=Mon, 02 Dec 2024 21:00:00 GMT; path=/; SameSite=None; secure; samesite=none
adlk_cmatch=sape%3A0100007F6B646D655C0770B502ECFC46; expires=Fri, 31 Dec 9999 20:59:59 GMT; path=/; SameSite=None; secure; samesite=none
date: Mon, 04 Dec 2023 05:32:27 GMT
X-Firefox-Spdy: h2
static.moviead55.ru/mp_dist/mstream2.js?v5646834026
200 OK 170 kB URL GET HTTP/2 static.moviead55.ru/mp_dist/mstream2.js?v5646834026
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerGoogle Trust Services LLC
Subjectmoviead55.ru
Fingerprint97:2B:AC:BC:2D:E4:7C:FC:61:B0:3F:37:04:D9:9A:96:E1:03:56:22
ValidityFri, 17 Nov 2023 16:01:17 GMT - Thu, 15 Feb 2024 16:01:16 GMT
Size 170 kB (169672 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mp_dist/mstream2.js?v5646834026 HTTP/1.1
Host: static.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 05:32:27 GMT
content-type: application/javascript
last-modified: Wed, 29 Nov 2023 19:14:25 GMT
vary: Accept-Encoding
etag: W/"65678d91-296c8"
x-movieads-country: LT
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-max-age: 1728000
cache-control: max-age=7200
cf-cache-status: HIT
age: 4922
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UWsERkPHJ5aRR2DK08bt%2BYPl8Ag10TdSNg505dkE7xu067qBv37XmVH8NjLln6Rmvsj%2BKDss14sJ08DHXQC6Miyv1DVncof8tlq0i8bh7Z9ZqBdvSSSJc3t%2Bub4SiAwUD2NBedK8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8301ab3e6dc17130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
logger.moviead55.ru/logger.php?t=target_country_load&c=fa532ea9-182a-4ad6-804b-193f4761b884&a=&m=%7B%22browser%22%3A%22%7B%5C%22name%5C%22%3A%5C%22firefox%5C%22%2C%5C%22version%5C%22%3A%5C%22105%5C%22%7D%22%2C%22isMobile%22%3Afalse%2C%22format%22%3A%22new%22%7D&v=9f826dbec17f07ce9634af6973699c4f&o=undefined
200 OK 70 B URL GET HTTP/2 logger.moviead55.ru/logger.php?t=target_country_load&c=fa532ea9-182a-4ad6-804b-193f4761b884&a=&m=%7B%22browser%22%3A%22%7B%5C%22name%5C%22%3A%5C%22firefox%5C%22%2C%5C%22version%5C%22%3A%5C%22105%5C%22%7D%22%2C%22isMobile%22%3Afalse%2C%22format%22%3A%22new%22%7D&v=9f826dbec17f07ce9634af6973699c4f&o=undefined
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash b357a19c87624c7c4d131aeeb4ae677f
c7a9c45fd419815a5ab1998503a9f03514c0e229
497790947d4666760ce38f3c00e852c71fdb66cae849bae8e9ede352719e1581
GET /logger.php?t=target_country_load&c=fa532ea9-182a-4ad6-804b-193f4761b884&a=&m=%7B%22browser%22%3A%22%7B%5C%22name%5C%22%3A%5C%22firefox%5C%22%2C%5C%22version%5C%22%3A%5C%22105%5C%22%7D%22%2C%22isMobile%22%3Afalse%2C%22format%22%3A%22new%22%7D&v=9f826dbec17f07ce9634af6973699c4f&o=undefined HTTP/1.1
Host: logger.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:26 GMT
content-type: Content-Type: image/png
vary: Accept-Encoding
x-movieads-le: true
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
code.moviead55.ru/go/jmap?v=9f826dbec17f07ce9634af6973699c4f&sid=ap&cp.referer=https%253A%252F%252Flordserial1.biz%252Fmultserialy%252F8616-juzhnyj-park-1997.html&it=1&tq=2&cp.cb=8fa3b20d-2d91-5180-96f8-d5cb9d60ce88&session=fa532ea9-182a-4ad6-804b-193f4761b884&position=pre&vt=100&ostream=true&isp=0&suri=https%253A%252F%252Flordserial1.biz%252Fmultserialy%252F8616-juzhnyj-park-1997.html&rnd=1701667953973&raw=yes
200 OK 2 B URL GET HTTP/2 code.moviead55.ru/go/jmap?v=9f826dbec17f07ce9634af6973699c4f&sid=ap&cp.referer=https%253A%252F%252Flordserial1.biz%252Fmultserialy%252F8616-juzhnyj-park-1997.html&it=1&tq=2&cp.cb=8fa3b20d-2d91-5180-96f8-d5cb9d60ce88&session=fa532ea9-182a-4ad6-804b-193f4761b884&position=pre&vt=100&ostream=true&isp=0&suri=https%253A%252F%252Flordserial1.biz%252Fmultserialy%252F8616-juzhnyj-park-1997.html&rnd=1701667953973&raw=yes
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
GET /go/jmap?v=9f826dbec17f07ce9634af6973699c4f&sid=ap&cp.referer=https%253A%252F%252Flordserial1.biz%252Fmultserialy%252F8616-juzhnyj-park-1997.html&it=1&tq=2&cp.cb=8fa3b20d-2d91-5180-96f8-d5cb9d60ce88&session=fa532ea9-182a-4ad6-804b-193f4761b884&position=pre&vt=100&ostream=true&isp=0&suri=https%253A%252F%252Flordserial1.biz%252Fmultserialy%252F8616-juzhnyj-park-1997.html&rnd=1701667953973&raw=yes HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lordserial1.biz
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Cookie: sky_uuid=31d05549-967e-224d-2793-4e1bd2b0f8e7; hbrdcookie2=9304616438830318104a; otclkbid=VUG31mKFfTelneA; ohmybid=7fd42a94-0fd5-46f3-9521-d354c4506178; solta=ZW1kawO4lo4; bzcookie=72650124-3d60-47f7-738a-0e857a743f27
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: application/json;charset=UTF-8
content-length: 2
x-movieads-cors-qex: Referer
x-movieads-path: /
access-control-allow-credentials: true
access-control-allow-origin: https://lordserial1.biz
x-go-country: NO
x-movieads-udata: cache,parsed,76822
x-movieads-plc: 0
x-movieads-ark: true
x-movieads-qmc: NO
x-movieads-alc: 2
x-movieads-ctvs: 2
server-timing: optProc;dur=0.0000, initBuilder;dur=0.0000, getLinks;dur=0.0000, queueSort;dur=0.0000, getJson;dur=0.0000, jmapParams;dur=0.0000, corsParams;dur=0.0000, attachTracking;dur=0.0000, keyValidation;dur=0.0000, qManager;dur=0.0000, getAnyQueue;dur=0.0000, buildTagsQueue;dur=0.0000, range_links;dur=0.0000, queuesMerge;dur=0.0000, wmData;dur=0.0000, uData;dur=0.0000
x-movieads-country: NO
X-Firefox-Spdy: h2
cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
200 OK 91 kB URL GET HTTP/2 cdn.cdnonair.top/?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectcdn.cdnonair.top
Fingerprint74:38:B2:F4:98:5F:B0:15:86:40:83:A3:34:4C:94:41:54:BF:7B:CF
ValidityThu, 26 Oct 2023 21:00:36 GMT - Wed, 24 Jan 2024 21:00:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?token_movie=ee17605be207dfc7f91bb3a955be48&token=4aca67d51ad7796dd847aada693d97 HTTP/1.1
Host: cdn.cdnonair.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:26 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.0.28
cache-control: max-age=60
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
lordserial1.biz/templates/lordfilm-light/images/ft-logo.png
200 OK 2.2 kB URL GET HTTP/3 lordserial1.biz/templates/lordfilm-light/images/ft-logo.png
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
File type PNG image data, 180 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash b70aa7dbe7997de6d712e28a32789cd5
f2651c8e7eeafd9dd575935b466b6fed7ff9ea45
20eff98b58538fc595b030c20d5505482dae75e9f92ccd62a9ce5bea6e21c4e2
GET /templates/lordfilm-light/images/ft-logo.png HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/templates/lordfilm-light/style/styles.css
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:26 GMT
content-type: image/png
content-length: 2189
last-modified: Fri, 17 Nov 2023 00:15:22 GMT
etag: "6556b09a-88d"
expires: Mon, 04 Dec 2023 14:15:17 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 55029
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gbNq1rcfwFpZAk0dc9XrZ5HLrCDezPJ8ETtxfX9WOa%2BBjp9iDZ4HFAIdytWJEujIMmVz3269HpsZikA62Hwj%2BNMwv4gPWDtW%2FYlJYcxx00yNCW5tl86k%2BP0Jb2arObjqIds%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8301ab37ad4556bf-OSL
alt-svc: h3=":443"; ma=86400
code.moviead55.ru/go/cinit?cn=sapecookie&rnd=1701667946
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=sapecookie&rnd=1701667946
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=sapecookie&rnd=1701667946 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-length: 0
location: https://www.acint.net/rmatch?dp=167&euid=23377f2a-c835-3ae7-4e1a-da84f039f1bf&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D
set-cookie: sky_uuid=23377f2a-c835-3ae7-4e1a-da84f039f1bf; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
www.acint.net/match?dp=95&euid=YASLLQIZ
200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=95&euid=YASLLQIZ
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=95&euid=YASLLQIZ HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVtZGu1vQddmH5SAvYoj/0BdY5QWJ0RNh8e21Yp7KQ+; cSyncDp14v6=1701667947; cSyncDp17v2=1701667947; cSyncDp45v5=1701667947; cSyncDp53v5=1701667947; cSyncDp62v2=1701667947; cSyncDp67v3=1701667947; cSyncDp68v2=1701667947; cSyncDp71v2=1701667947; cSyncDp80v2=1701667947; cSyncDp85v2=1701667947; cSyncDp95v4=1701667947; cSyncDp98v3=1701667947; cSyncDp104v2=1701667947; cSyncDp107v2=1701667947; cSyncDp110v3=1701667947; cSyncDp125v4=1701667947; cSyncDp126v2=1701667947; cSyncDp127v2=1701667947; cSyncDp129v2=1701667947; cSyncDp136v3=1701667947; cSyncDp146v2=1701667947; cSyncDp148v2=1701667947; cSyncDp149v3=1701667947; cSyncDp151v2=1701667947; cSyncDp251v1=1701667947; cSyncDp186v2=1701667947; cSyncDp217v2=1701667947; cSyncDp221v2=1701667947; cSyncDp235v2=1701667947; cSyncDp239v2=1701667947; cSyncDp243v2=1701667947; cSyncDp260v2=1701667947; cSyncDp244v2=1701667947; cSyncDp248v2=1701667947; cSyncDp261v1=1701667947; cSyncDp14v4=1701667947
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
lordserial1.biz/engine/lazydev/dle_filter/lib/dle_filter.js.php
200 OK 373 B URL GET HTTP/3 lordserial1.biz/engine/lazydev/dle_filter/lib/dle_filter.js.php
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
File type ASCII text, with very long lines (441), with no line terminators
Hash a367bf6cfd29af9bc9c9a9e932617fbc
3525d69091fb4a29cf38b1a101b935d536191be6
3b0985fd7226847a0f28cd33e0229c33e7c41ef8984db235985b2debec69db57
GET /engine/lazydev/dle_filter/lib/dle_filter.js.php HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:26 GMT
content-type: application/x-javascript
x-powered-by: PHP/7.4.29
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Alvfe0NN1BJT5%2FhvbeUt%2FKvuiF%2Brip2tIw9nIdfofFMQycxAL5g2FbE3qx5UcJuL53WhUzBw8z1sZK%2BnNKXF3p9IBG21a4tMnO5CIkUoAavu4%2FE0MgwZF052K1u0Dm4NRWo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8301ab35fc8056bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Open+Sans:400,600|Oswald:700&subset=cyrillic
200 OK 7.2 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,600|Oswald:700&subset=cyrillic
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (7428), with no line terminators
Hash a9983841a74208eae9410ce1bfbaa6f7
f21323fa74636b5d680a830ae04d921a42f73b9a
428de026d851c8d1810ab5d201685edc82e6f2e6ef1dfae83fb6a6ae6c5f390c
GET /css?family=Open+Sans:400,600|Oswald:700&subset=cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 04 Dec 2023 05:32:26 GMT
date: Mon, 04 Dec 2023 05:32:26 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
200 OK 35 kB URL User Request GET HTTP/2 lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
IP
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /multserialy/8616-juzhnyj-park-1997.html HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 05:32:25 GMT
content-type: text/html; charset=utf-8
x-powered-by: PHP/7.4.29
set-cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1; path=/; secure; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h4MpkqL687mSSheD7oIF3X%2F5s8GJKsZdIeuENENIwI4QNDudsaicPzW%2FFK7gqI6llEGVZ8zSEWjbnaXLRBA66MwppVIvzMCob%2BWxjjHwWCn3N3%2FvzJnByvCZN9fhDipQt18%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8301ab327a9e5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
vak345.com/s.js?v=9f826dbec17f07ce9634af6973699c4f
200 OK 3.7 kB URL GET HTTP/2 vak345.com/s.js?v=9f826dbec17f07ce9634af6973699c4f
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF4:50:2C:D7:5C:84:E6:10:5D:32:80:62:FC:FE:E8:A0:40:4B:99:C4
ValidityFri, 10 Mar 2023 00:00:00 GMT - Sat, 09 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (4106), with no line terminators
Hash 892cbf9cf6d5468e54f8488b3130346e
727b42cb43ad15ec94c14f8d0ccd122d92bb1461
f6e50125b1ffc3151f02af6bab60854e7c6f3884dcafdd354e7bccf75b3b62f6
GET /s.js?v=9f826dbec17f07ce9634af6973699c4f HTTP/1.1
Host: vak345.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 05:32:26 GMT
content-type: text/javascript;charset=UTF-8
vary: Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-movieads-country: NO
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n76tIc8opeYPPqeuLVRbnB8Ks5BDfvjHHhAOwlbjO14MxoljegIGDX7%2FWpUsPdx8xMf4H1%2FD7rNgeLL2gvLTmktsx7ogZIbX6dFSKp5lL6THAf8dpI1zOY1QIGNf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8301ab362beb0b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
logger.moviead55.ru/logger.php?t=cdiv&c=fa532ea9-182a-4ad6-804b-193f4761b884&a=&m=151&v=9f826dbec17f07ce9634af6973699c4f&o=
200 OK 70 B URL GET HTTP/2 logger.moviead55.ru/logger.php?t=cdiv&c=fa532ea9-182a-4ad6-804b-193f4761b884&a=&m=151&v=9f826dbec17f07ce9634af6973699c4f&o=
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash b357a19c87624c7c4d131aeeb4ae677f
c7a9c45fd419815a5ab1998503a9f03514c0e229
497790947d4666760ce38f3c00e852c71fdb66cae849bae8e9ede352719e1581
GET /logger.php?t=cdiv&c=fa532ea9-182a-4ad6-804b-193f4761b884&a=&m=151&v=9f826dbec17f07ce9634af6973699c4f&o= HTTP/1.1
Host: logger.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-type: Content-Type: image/png
vary: Accept-Encoding
x-movieads-le: true
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=hbrdcookie2&rnd=1701667946
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=hbrdcookie2&rnd=1701667946
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=hbrdcookie2&rnd=1701667946 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-length: 0
location: https://dm-eu.hybrid.ai/match?id=185&burl=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dhbrdcookie2%26bid%3D%24%7BVID%7D
set-cookie: sky_uuid=9d993ca7-fa0f-48fc-6eb9-ad1c714d4c87; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=otclkbid&rnd=1701667946
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=otclkbid&rnd=1701667946
IP
ASN #6681 Rozetka Sp. z o.o.
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintCC:7F:33:36:EA:E9:74:E6:01:78:2B:3F:E0:D2:07:2E:0E:15:F4:6B
ValidityFri, 08 Sep 2023 12:23:14 GMT - Thu, 07 Dec 2023 12:23:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=otclkbid&rnd=1701667946 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Mon, 04 Dec 2023 05:32:27 GMT
content-length: 0
location: https://otclick-adv.ru/core/match.gif?s=30&reference=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dotclkbid%26bid%3D%23%7BUID%7D
set-cookie: sky_uuid=31d05549-967e-224d-2793-4e1bd2b0f8e7; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
lordserial1.biz/templates/lordfilm-light/lazydev/dle_filter/assets/dle_filter.css
200 OK 43 kB URL GET HTTP/3 lordserial1.biz/templates/lordfilm-light/lazydev/dle_filter/assets/dle_filter.css
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subjectlordserial1.biz
FingerprintE4:D7:41:D4:5A:33:A4:C8:98:0D:0B:D6:17:CE:70:87:D7:DF:43:36
ValidityTue, 14 Nov 2023 03:14:32 GMT - Mon, 12 Feb 2024 03:14:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /templates/lordfilm-light/lazydev/dle_filter/assets/dle_filter.css HTTP/1.1
Host: lordserial1.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Cookie: PHPSESSID=3bd23be83764097b4bb776c09fe0f9d1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:25 GMT
content-type: text/css
last-modified: Fri, 17 Nov 2023 00:15:22 GMT
etag: W/"6556b09a-a775"
expires: Mon, 04 Dec 2023 08:32:16 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 75609
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sOHKxQSqqcgtXbVaa7vjYyERrz%2B%2FwMfdcW8bBMFB6LS7qtGVLH7kX6juhdsofKGVPPTZwczsaFP71u%2Bi8tH%2FMwBbhzzyDSiMhbwJbSamMjihEH2eXrYSAojtz18nT6aUhuQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8301ab35fc7f56bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
vak345.com/cs/202312040832.js?v=9f826dbec17f07ce9634af6973699c4f&_t=1701667951631.631
200 OK 63 kB URL GET HTTP/3 vak345.com/cs/202312040832.js?v=9f826dbec17f07ce9634af6973699c4f&_t=1701667951631.631
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF4:50:2C:D7:5C:84:E6:10:5D:32:80:62:FC:FE:E8:A0:40:4B:99:C4
ValidityFri, 10 Mar 2023 00:00:00 GMT - Sat, 09 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cs/202312040832.js?v=9f826dbec17f07ce9634af6973699c4f&_t=1701667951631.631 HTTP/1.1
Host: vak345.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 05:32:26 GMT
content-type: application/javascript;charset=UTF-8
vary: Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-yac-source: Yac
x-movieads-setup: combo
x-movieads-country: NO
cf-cache-status: BYPASS
set-cookie: sky_uuid=6c9acae4-6d0a-46cb-ae4b-2312c56a9f10; expires=Tue, 03-Dec-2024 05:32:26 GMT; Max-Age=31536000; path=/; SameSite=None;Secure
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Bo0%2BMC1iJj4uvyyFzyxSMZHoTKulhcgzFgKqw%2B40d541NgMeX8IIWvdcTTSi03g8piHpX%2BVh3%2F27lWEIRaIEJ5AG9mrafZ3YF4bKHKVlzFDkenZNeM8JUegba8X8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8301ab37ac445697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUJiZTaR.woff2
200 OK 6.7 kB URL GET HTTP/2 fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUJiZTaR.woff2
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 6736, version 1.0\012- data
Hash 2fe2bd8e70cf6542717a6589df6f581e
d6edccbe0e5d83ab0ca3dac7befefb1218fd2991
5c8f202d4a7e30d4345ec3b768e8b5076933d3c8abcac956b3fa6c6ee4b994bf
GET /s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUJiZTaR.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lordserial1.biz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 6736
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 11:35:31 GMT
expires: Fri, 29 Nov 2024 11:35:31 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 15 Aug 2023 18:39:07 GMT
content-type: font/woff2
age: 323815
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ssp.bidvol.com/usersync?dspcsid=8&redirect=1
302 Found 43 B URL GET HTTP/2 ssp.bidvol.com/usersync?dspcsid=8&redirect=1
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subjectssp.bidvol.com
Fingerprint40:DB:53:6B:41:DC:4B:32:C0:EE:F6:09:5C:13:AF:5C:EF:90:56:90
ValidityThu, 09 Nov 2023 10:21:37 GMT - Wed, 07 Feb 2024 10:21:36 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usersync?dspcsid=8&redirect=1 HTTP/1.1
Host: ssp.bidvol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.22.0
date: Mon, 04 Dec 2023 05:32:28 GMT
x-request-id: 13552a6d-98b0-4757-982c-85bb4d346f48
vary: Origin
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
surrogate-control: no-store
set-cookie: bvuid=oumwrqhe6c; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None
bvuid2=oumwrqhe6c; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT
location: https://www.acint.net/match?dp=129&euid=oumwrqhe6c
X-Firefox-Spdy: h2
fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUZiZQ.woff2
200 OK 13 kB URL GET HTTP/2 fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUZiZQ.woff2
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 12648, version 1.0\012- data
Hash 5e79fc3b5fbdec47c02942523ae2bdbd
fdb96db25dc07b7c0573bf5a66966d12dfbb41bd
6ecd2a103a7260474c3239da5f32a2f7cb999765d9ab12161f3e4abe3906316f
GET /s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUZiZQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lordserial1.biz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12648
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:46:28 GMT
expires: Fri, 29 Nov 2024 04:46:28 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 15 Aug 2023 18:38:40 GMT
content-type: font/woff2
age: 348358
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.acint.net/rmatch?dp=167&euid=23377f2a-c835-3ae7-4e1a-da84f039f1bf&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D
302 Found 0 B URL GET HTTP/2 www.acint.net/rmatch?dp=167&euid=23377f2a-c835-3ae7-4e1a-da84f039f1bf&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D
IP
Requested by https://lordserial1.biz/multserialy/8616-juzhnyj-park-1997.html
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rmatch?dp=167&euid=23377f2a-c835-3ae7-4e1a-da84f039f1bf&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lordserial1.biz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty
date: Mon, 04 Dec 2023 05:32:27 GMT
content-type: text/html
content-length: 154
location: /rmatch?r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D$%7BUSER_ID%7D&dp=167&tc=1&euid=23377f2a-c835-3ae7-4e1a-da84f039f1bf
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
set-cookie: test_cookie=CheckForPermission; path=/; Secure; SameSite=None; domain=.acint.net; expires=Mon, 04-Dec-23 05:42:27 GMT
aid=fwAAAWVtZGu1vQddmH5SAvYoj/0BdY5QWJ0RNh8e21Yp7KQ+; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/match?dp=261&euid=8dc23115-df30-4972-ab93-bfc545fd0ca4
200 OK 43 B URL GET HTTP/2 www.acint.net/match?dp=261&euid=8dc23115-df30-4972-ab93-bfc545fd0ca4
IP
Requested by https://www.acint.net/mc/?dp=167&tc=1
Certificate IssuerLet's Encrypt
Subject*.acint.net
FingerprintD1:98:D5:B7:91:FF:E3:AC:0C:2E:5F:9E:20:DE:E5:45:A8:C2:0E:B1
ValidityTue, 31 Oct 2023 03:36:00 GMT - Mon, 29 Jan 2024 03:35:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=261&euid=8dc23115-df30-4972-ab93-bfc545fd0ca4 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAAAWVtZGu1vQddmH5SAvYoj/0BdY5QWJ0RNh8e21Yp7KQ+; cSyncDp14v6=1701667947; cSyncDp17v2=1701667947; cSyncDp45v5=1701667947; cSyncDp53v5=1701667947; cSyncDp62v2=1701667947; cSyncDp67v3=1701667947; cSyncDp68v2=1701667947; cSyncDp71v2=1701667947; cSyncDp80v2=1701667947; cSyncDp85v2=1701667947; cSyncDp95v4=1701667947; cSyncDp98v3=1701667947; cSyncDp104v2=1701667947; cSyncDp107v2=1701667947; cSyncDp110v3=1701667947; cSyncDp125v4=1701667947; cSyncDp126v2=1701667947; cSyncDp127v2=1701667947; cSyncDp129v2=1701667947; cSyncDp136v3=1701667947; cSyncDp146v2=1701667947; cSyncDp148v2=1701667947; cSyncDp149v3=1701667947; cSyncDp151v2=1701667947; cSyncDp251v1=1701667947; cSyncDp186v2=1701667947; cSyncDp217v2=1701667947; cSyncDp221v2=1701667947; cSyncDp235v2=1701667947; cSyncDp239v2=1701667947; cSyncDp243v2=1701667947; cSyncDp260v2=1701667947; cSyncDp244v2=1701667947; cSyncDp248v2=1701667947; cSyncDp261v1=1701667947; cSyncDp14v4=1701667947
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Mon, 04 Dec 2023 05:32:28 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
172.67.155.116
193.3.184.7
193.200.65.146
188.42.105.236
188.114.97.1
31.172.81.159
139.45.228.135
0.0.0.0