Overview

URLkrasivaya.at.ua/index/1
IP195.216.243.237
ASNAS29226 CJSC Mastertel
Location Russian Federation
Report completed2017-02-17 17:03:48 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Referer
Pool
Access Levelpublic


Intrusion Detection Systems

Snort /w Sourcefire VRT No alerts detected
Suricata /w Emerging Threats Pro No alerts detected


Blacklists

Fortinet's Web Filter / fortiguard.com
Added / Verified Severity Host Comment
2017-02-172rot.spotsniper.ru/?src=ujs6Malware
2017-02-172ww1.okoshechka.net/Malware
MDL / malwaredomainlist.com No alerts detected
DNS-BH / malwaredomains.com No alerts detected
mnemonic secure DNS / mnemonic.no No alerts detected
OpenPhish / openphish.com No alerts detected
PhishTank / phishtank.com No alerts detected
Spamhaus DBL / spamhaus.org No alerts detected


Files Captured



Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 195.216.243.237

Date UQ / IDS / BL URL IP
2017-02-24 19:21:070 - 0 - 2harriet-petra.ucoz.com/195.216.243.237
2017-02-20 21:32:410 - 0 - 2www.zernyatko.te.ua/195.216.243.237
2017-02-19 10:00:330 - 0 - 4stalker-land.ru/195.216.243.237
2017-02-15 22:01:410 - 0 - 3allgta.my1.ru/board/onlain_films/10/195.216.243.237
2017-02-13 09:12:220 - 0 - 2krasnaja-nit.ru/195.216.243.237
2017-02-13 04:27:010 - 0 - 2rosakvarium.ru/195.216.243.237

Last 6 reports on ASN: AS29226 CJSC Mastertel

Date UQ / IDS / BL URL IP
2017-02-27 15:55:550 - 0 - 13cliphq.ru/load/?page2195.216.243.234
2017-02-27 14:48:330 - 0 - 2poshatovoshkola.ucoz.ru/index/0-209195.216.243.136
2017-02-27 12:26:500 - 0 - 3soyuz-record.ru/195.216.243.123
2017-02-27 11:55:520 - 0 - 2airslax.net/195.216.243.162
2017-02-27 11:47:230 - 0 - 2fs17mods.net/195.216.243.114
2017-02-27 11:26:560 - 0 - 6grebenka.com/195.216.243.12



JavaScript

Executed Scripts (24)


Executed Evals (0)


Executed Writes (33)

#1 JavaScript::Write (size: 11, repeated: 1)

'></script>

#2 JavaScript::Write (size: 1, repeated: 3)

.

#3 JavaScript::Write (size: 1, repeated: 4)

/

#4 JavaScript::Write (size: 1, repeated: 1)

0

#5 JavaScript::Write (size: 1, repeated: 2)

2

#6 JavaScript::Write (size: 1, repeated: 2)

4

#7 JavaScript::Write (size: 1, repeated: 2)

5

#8 JavaScript::Write (size: 1, repeated: 1)

7

#9 JavaScript::Write (size: 1, repeated: 1)

8

#10 JavaScript::Write (size: 1, repeated: 1)

:

#11 JavaScript::Write (size: 295, repeated: 1)

<iframe style="position:fixed;right:0px;top:0px;z-index:2147483640;" height="0" width="0" onload="resizeFrame();" id="iFazaA9J2" frameborder="0" scrolling="no" src="/abnl/?adsdata=grEzECc5W8;Nkg2YR6S!arSTn34Nw5tQm8BEhGNRVUJzdXQkunVWjc2HmXimJyty0sEN5MVG1kmpy;sBO2aXZe0rBv53^9cACOQyS;oo"></iframe>

#12 JavaScript::Write (size: 91, repeated: 1)

<script type="text/javascript" src="//s37.ucoz.net/cgi/uutils.fcg?a=uSD&ca=1&c=-"></script>

#13 JavaScript::Write (size: 80, repeated: 1)

<script type="text/javascript" src="//sys000.uid.me/canalyzer/?c=uSD2"></script>

#14 JavaScript::Write (size: 58, repeated: 1)

<script type='text/javascript' language='javascript' src='

#15 JavaScript::Write (size: 1, repeated: 1)

=

#16 JavaScript::Write (size: 1, repeated: 1)

?

#17 JavaScript::Write (size: 1, repeated: 1)

D

#18 JavaScript::Write (size: 1, repeated: 1)

K

#19 JavaScript::Write (size: 1, repeated: 2)

a

#20 JavaScript::Write (size: 1, repeated: 2)

c

#21 JavaScript::Write (size: 1, repeated: 1)

d

#22 JavaScript::Write (size: 1, repeated: 2)

e

#23 JavaScript::Write (size: 1, repeated: 3)

h

#24 JavaScript::Write (size: 1, repeated: 2)

i

#25 JavaScript::Write (size: 1, repeated: 2)

k

#26 JavaScript::Write (size: 1, repeated: 1)

l

#27 JavaScript::Write (size: 1, repeated: 1)

m

#28 JavaScript::Write (size: 1, repeated: 2)

n

#29 JavaScript::Write (size: 1, repeated: 2)

o

#30 JavaScript::Write (size: 1, repeated: 2)

p

#31 JavaScript::Write (size: 1, repeated: 2)

s

#32 JavaScript::Write (size: 1, repeated: 4)

t

#33 JavaScript::Write (size: 1, repeated: 2)

y


HTTP Transactions (88)


Request Response
GET /index/1 HTTP/1.1

Host: krasivaya.at.ua

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Set-Cookie: 2krasivayauCoz=; path=/; expires=Wed, 18-Feb-2015 16:02:45 GMT; domain=.krasivaya.at.ua; 2krasivayauzll=1487347365; path=/; expires=Sat, 17-Feb-2018 16:02:45 GMT; domain=.krasivaya.at.ua; ucvid=eVx0a4SKRM; path=/; expires=Sat, 17-Feb-2018 16:02:45 GMT
Cache-Control: no-cache, no-store, private
Pragma: no-cache
Content-Encoding: gzip
GET /hit;ucoznet?r;s1176*885*24;uhttp%3A//krasivaya.at.ua/index/1;0.6923725991706073 HTTP/1.1

Host: counter.yadro.ru

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 88.212.196.105
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Date: Fri, 17 Feb 2017 16:02:53 GMT
Server: 0W/0.8c
Location: http://counter.yadro.ru/hit;ucoznet?q;r;s1176*885*24;uhttp%3A//krasivaya.at.ua/index/1;0.6923725991706073
Content-Length: 32
Expires: Wed, 17 Feb 2016 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;UNI&quot;
Set-Cookie: FTID=1Ofnwj13E7PY1Ofnwj004ViL; path=/; expires=Fri, 16 Feb 2018 21:00:00 GMT; domain=.yadro.ru
GET /hit;video_show?r;s1176*885*24;uhttp%3A//krasivaya.at.ua/index/1;0.9274792291556297 HTTP/1.1

Host: counter.yadro.ru

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 88.212.196.105
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Date: Fri, 17 Feb 2017 16:02:53 GMT
Server: 0W/0.8c
Location: http://counter.yadro.ru/hit;video_show?q;r;s1176*885*24;uhttp%3A//krasivaya.at.ua/index/1;0.9274792291556297
Content-Length: 32
Expires: Wed, 17 Feb 2016 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;UNI&quot;
Set-Cookie: FTID=1Ofnwj13E7PY1Ofnwj00437l; path=/; expires=Fri, 16 Feb 2018 21:00:00 GMT; domain=.yadro.ru
GET /.s/src/base.css HTTP/1.1

Host: krasivaya.at.ua

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: 2krasivayauzll=1487347365; ucvid=eVx0a4SKRM
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:45 GMT
Last-Modified: Thu, 16 Feb 2017 12:03:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/&quot;58a59512-277a&quot;
Expires: Thu, 09 Mar 2017 16:02:45 GMT
Cache-Control: max-age=1728000
Content-Encoding: gzip
GET /.s/src/ulightbox/ulightbox.css HTTP/1.1

Host: krasivaya.at.ua

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: 2krasivayauzll=1487347365; ucvid=eVx0a4SKRM
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:45 GMT
Last-Modified: Thu, 16 Feb 2017 12:03:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/&quot;58a59515-1903&quot;
Expires: Thu, 09 Mar 2017 16:02:45 GMT
Cache-Control: max-age=1728000
Content-Encoding: gzip
GET /_st/my.css HTTP/1.1

Host: krasivaya.at.ua

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: 2krasivayauzll=1487347365; ucvid=eVx0a4SKRM
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:45 GMT
Last-Modified: Wed, 04 Jan 2012 22:28:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/&quot;4f04d27c-4230&quot;
Expires: Thu, 09 Mar 2017 16:02:45 GMT
Cache-Control: max-age=1728000
Content-Encoding: gzip
GET /.s/src/layer3.css HTTP/1.1

Host: krasivaya.at.ua

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: 2krasivayauzll=1487347365; ucvid=eVx0a4SKRM
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:45 GMT
Last-Modified: Thu, 16 Feb 2017 12:03:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/&quot;58a59512-69cd&quot;
Expires: Thu, 09 Mar 2017 16:02:45 GMT
Cache-Control: max-age=1728000
Content-Encoding: gzip
GET /.s/src/ulightbox/ulightbox.js HTTP/1.1

Host: krasivaya.at.ua

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: 2krasivayauzll=1487347365; ucvid=eVx0a4SKRM
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: text/javascript
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:45 GMT
Last-Modified: Thu, 16 Feb 2017 12:03:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/&quot;58a59515-588b&quot;
Expires: Thu, 09 Mar 2017 16:02:45 GMT
Cache-Control: max-age=1728000
Content-Encoding: gzip
GET /hit;ucoznet?q;r;s1176*885*24;uhttp%3A//krasivaya.at.ua/index/1;0.6923725991706073 HTTP/1.1

Host: counter.yadro.ru

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: FTID=1Ofnwj13E7PY1Ofnwj004ViL
 88.212.196.105
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Fri, 17 Feb 2017 16:02:53 GMT
Server: 0W/0.8c
Connection: Close
Content-Length: 43
Expires: Wed, 17 Feb 2016 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;UNI&quot;
Set-Cookie: VID=2UYMwY1QF79Y1Ofnwj004Vj_; path=/; expires=Fri, 16 Feb 2018 21:00:00 GMT; domain=.yadro.ru
GET /hit;video_show?q;r;s1176*885*24;uhttp%3A//krasivaya.at.ua/index/1;0.9274792291556297 HTTP/1.1

Host: counter.yadro.ru

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: FTID=1Ofnwj13E7PY1Ofnwj00437l
 88.212.196.105
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Fri, 17 Feb 2017 16:02:53 GMT
Server: 0W/0.8c
Connection: Close
Content-Length: 43
Expires: Wed, 17 Feb 2016 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;UNI&quot;
Set-Cookie: VID=2UYMwY1QF79Y1Ofnwj00438t; path=/; expires=Fri, 16 Feb 2018 21:00:00 GMT; domain=.yadro.ru
GET /.s/t/979/7.gif HTTP/1.1

Host: krasivaya.at.ua

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: 2krasivayauzll=1487347365; ucvid=eVx0a4SKRM
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:45 GMT
Content-Length: 1115
Last-Modified: Wed, 03 Dec 2014 12:38:17 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;547f0439-45b&quot;
Expires: Thu, 09 Mar 2017 16:02:45 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes
GET /.s/src/social.css HTTP/1.1

Host: krasivaya.at.ua

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: 2krasivayauzll=1487347365; ucvid=eVx0a4SKRM
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:45 GMT
Last-Modified: Thu, 16 Feb 2017 12:03:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/&quot;58a59512-8f6&quot;
Expires: Thu, 09 Mar 2017 16:02:45 GMT
Cache-Control: max-age=1728000
Content-Encoding: gzip
GET /cgi/uutils.fcg?a=uSD&ca=2&ug=999&r=0.669377240226058 HTTP/1.1

Host: s37.ucoz.net
GET /cgi/uutils.fcg?a=uSD&amp;ca=2&amp;ug=999&amp;r=0.669377240226058 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
P3P: CP=&quot;IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT&quot;
Set-Cookie: uAnaG8aP73n=off; path=/; expires=Sat, 18-Feb-2017 00:02:46 GMT; domain=.ucoz.net;
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 17 Feb 2017 16:02:53 GMT
Expires: Tue, 21 Feb 2017 16:02:53 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /?src=ss2&data=Mjo5OjM4OjEwOTo1MzoyMjoyOTo5Mjo4NjoyNjo4ODo2MDoxNTowOjA6MTA6MTExOjIwOjUwOjI4OjMxOjIzOjQ3OjE2OjkzOjExNzo5OTo5NDo3MToxMTozMjoxMDk6NTM6MTA6ODA6ODA6NjY6NzY6MTI6MTEyOjEwNDo5Mjo4MDo5MDoxMDI6MjA6NTA6MTY6MjU6NjI6MzoxMzo4ODo2MDoxMDk6MTU6MTk6MTM6NTU6MjA6NTA6MTY6MjU6NjI6MjA6MjI6ODQ6MTE3OjM3OjEwOjE0OjE4OjExNjo4Mzo0NToyMjoxMDo2Mjo0OjEwOjQ6MTIxOjEwMDo5NTo4MDo4MToxMDM6MTE6MTE0Ojc2OjkwOjcxOjM6MTY6Nzc6MjM6NDk6MTM6MTM6Mjg6MTExOjIwOjUwOjE2OjI1OjYyOjE4OjI0Ojg3OjQ3OjEwOTo3OToxODoxOjM4OjEwOTo1NToxNzo0OjU6Nzc6OTU6NzQ6MzM6MzY6NTQ6NToxMDozODo4NDoxMjQ6OTU6MzA6ODo0OjM4Ojg1OjM4OjU1Ojg0OjE5OjI5OjExNjo2NTo0MDoxMzo1MDozOjA6MjI6NzQ6MTE3&r64=&cid=A1B100&cb=0.526692178035319 HTTP/1.1

Host: ucounter.ucoz.net
GET /?src=ss2&amp;data=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&amp;r64=&amp;cid=A1B100&amp;cb=0.526692178035319 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 185.26.97.189
HTTP/1.1 302 Moved Temporarily
Content-Type: application/javascript
Server: nginx/1.11.3
Date: Fri, 17 Feb 2017 16:02:53 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP=&quot;IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT&quot;
Location: //sync3.adsniper.ru/?src=ss1&amp;s_data=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
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
POST / HTTP/1.1

Host: g.symcd.com

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 102
Content-Type: application/ocsp-request
 23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx/1.10.2
Content-Length: 1377
Content-Transfer-Encoding: binary
Cache-Control: max-age=408404, public, no-transform, must-revalidate
Last-Modified: Wed, 15 Feb 2017 09:25:08 GMT
Expires: Wed, 22 Feb 2017 09:25:08 GMT
Date: Fri, 17 Feb 2017 16:02:53 GMT
Connection: keep-alive
GET /.s/t/979/2.gif HTTP/1.1

Host: krasivaya.at.ua

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: 2krasivayauzll=1487347365; ucvid=eVx0a4SKRM
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:45 GMT
Content-Length: 5964
Last-Modified: Wed, 03 Dec 2014 12:38:17 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;547f0439-174c&quot;
Expires: Thu, 09 Mar 2017 16:02:45 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes
GET /.s/t/979/9.gif HTTP/1.1

Host: krasivaya.at.ua

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: 2krasivayauzll=1487347365; ucvid=eVx0a4SKRM
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:46 GMT
Content-Length: 1117
Last-Modified: Wed, 03 Dec 2014 12:38:17 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;547f0439-45d&quot;
Expires: Thu, 09 Mar 2017 16:02:46 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes
GET /.s/src/jquery-1.10.2.js HTTP/1.1

Host: krasivaya.at.ua

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: 2krasivayauzll=1487347365; ucvid=eVx0a4SKRM
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: text/javascript
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:45 GMT
Last-Modified: Thu, 16 Feb 2017 12:03:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/&quot;58a59512-187f1&quot;
Expires: Thu, 09 Mar 2017 16:02:45 GMT
Cache-Control: max-age=1728000
Content-Encoding: gzip
GET /glaza.jpg HTTP/1.1

Host: krasivaya.at.ua

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: 2krasivayauzll=1487347365; ucvid=eVx0a4SKRM
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: image/jpeg
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:45 GMT
Content-Length: 18264
Last-Modified: Thu, 22 Oct 2009 20:28:12 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;4ae0c05c-4758&quot;
Expires: Thu, 09 Mar 2017 16:02:45 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes
GET /images/opros.gif HTTP/1.1

Host: krasivaya.at.ua

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: 2krasivayauzll=1487347365; ucvid=eVx0a4SKRM
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:46 GMT
Content-Length: 24446
Last-Modified: Fri, 06 Nov 2009 17:51:16 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;4af46214-5f7e&quot;
Expires: Thu, 09 Mar 2017 16:02:46 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes
GET /stat/1487347365 HTTP/1.1

Host: krasivaya.at.ua

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: 2krasivayauzll=1487347365; ucvid=eVx0a4SKRM
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, private
Pragma: no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
GET /?src=ss1&s_data=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 HTTP/1.1

Host: sync3.adsniper.ru
GET /?src=ss1&amp;s_data=CAEQABitvZzFBVIF0ZKIsQtaFwoCY2ISETAuNTI2NjkyMTc4MDM1MzE5Wu0ECgRkYXRhEuQETWpvNU9qTTRPakV3T1RvMU16b3lNam95T1RvNU1qbzROam95TmpvNE9EbzJNRG94TlRvd09qQTZNVEE2TVRFeE9qSXdPalV3T2pJNE9qTXhPakl6T2pRM09qRTJPamt6T2pFeE56bzVPVG81TkRvM01Ub3hNVG96TWpveE1EazZOVE02TVRBNk9EQTZPREE2TmpZNk56WTZNVEk2TVRFeU9qRXdORG81TWpvNE1EbzVNRG94TURJNk1qQTZOVEE2TVRZNk1qVTZOakk2TXpveE16bzRPRG8yTURveE1EazZNVFU2TVRrNk1UTTZOVFU2TWpBNk5UQTZNVFk2TWpVNk5qSTZNakE2TWpJNk9EUTZNVEUzT2pNM09qRXdPakUwT2pFNE9qRXhOam80TXpvME5Ub3lNam94TURvMk1qbzBPakV3T2pRNk1USXhPakV3TURvNU5UbzRNRG80TVRveE1ETTZNVEU2TVRFME9qYzJPamt3T2pjeE9qTTZNVFk2TnpjNk1qTTZORGs2TVRNNk1UTTZNamc2TVRFeE9qSXdPalV3T2pFMk9qSTFPall5T2pFNE9qSTBPamczT2pRM09qRXdPVG8zT1RveE9Eb3hPak00T2pFd09UbzFOVG94TnpvME9qVTZOemM2T1RVNk56UTZNek02TXpZNk5UUTZOVG94TURvek9EbzRORG94TWpRNk9UVTZNekE2T0RvME9qTTRPamcxT2pNNE9qVTFPamcwT2pFNU9qSTVPakV4TmpvMk5UbzBNRG94TXpvMU1Eb3pPakE2TWpJNk56UTZNVEUzggIGQTFCMTAw HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 31.172.81.160
HTTP/1.1 302 Moved Temporarily
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Fri, 17 Feb 2017 16:02:53 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: uuid3=IiQ4YTIxNGU4MC1mNTJhLTExZTYtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Thu, 12 Feb 2037 16:02:53 GMT; Domain=adsniper.ru
P3P: CP=&quot;IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT&quot;
Location: //sync3.adsniper.ru/?src=ss1&amp;s_data=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**
Etag: 8a214e80-f52a-11e6-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
GET /.s/src/uwnd.js?2 HTTP/1.1

Host: krasivaya.at.ua

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: 2krasivayauzll=1487347365; ucvid=eVx0a4SKRM
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: text/javascript
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:45 GMT
Last-Modified: Thu, 16 Feb 2017 12:03:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/&quot;58a59512-3764f&quot;
Expires: Thu, 09 Mar 2017 16:02:45 GMT
Cache-Control: max-age=1728000
Content-Encoding: gzip
GET /pagead/show_ads.js HTTP/1.1

Host: pagead2.googlesyndication.com

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 172.217.22.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
P3P: policyref=&quot;http://www.googleadservices.com/pagead/p3p.xml&quot;, CP=&quot;NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC&quot;
Timing-Allow-Origin: *
Etag: 9132052994991521532
Date: Fri, 17 Feb 2017 15:27:12 GMT
Expires: Fri, 17 Feb 2017 16:27:12 GMT
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename=&quot;f.txt&quot;
Content-Encoding: gzip
Server: cafe
Content-Length: 15858
X-XSS-Protection: 1; mode=block
Age: 2141
Cache-Control: public, max-age=3600
GET /?src=ss1&s_data=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** HTTP/1.1

Host: sync3.adsniper.ru
GET /?src=ss1&amp;s_data=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** HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: uuid3=IiQ4YTIxNGU4MC1mNTJhLTExZTYtODZlMC0wMDI1OTBjMDY0N2M*
 31.172.81.160
HTTP/1.1 302 Moved Temporarily
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Fri, 17 Feb 2017 16:02:53 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP=&quot;IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT&quot;
Location: //ucounter.ucoz.net/?src=ss2&amp;s_data=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
Etag: 8a214e80-f52a-11e6-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
GET /.s/t/979/4.gif HTTP/1.1

Host: krasivaya.at.ua

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: 2krasivayauzll=1487347365; ucvid=eVx0a4SKRM
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:46 GMT
Content-Length: 11264
Last-Modified: Wed, 03 Dec 2014 12:38:17 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;547f0439-2c00&quot;
Expires: Thu, 09 Mar 2017 16:02:46 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes
GET /.s/t/979/5.jpg HTTP/1.1

Host: krasivaya.at.ua

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: 2krasivayauzll=1487347365; ucvid=eVx0a4SKRM
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: image/jpeg
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:46 GMT
Content-Length: 21422
Last-Modified: Wed, 03 Dec 2014 12:38:17 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;547f0439-53ae&quot;
Expires: Thu, 09 Mar 2017 16:02:46 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes
GET /.s/img/cp/49.gif HTTP/1.1

Host: krasivaya.at.ua

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: 2krasivayauzll=1487347365; ucvid=eVx0a4SKRM
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:46 GMT
Content-Length: 816
Last-Modified: Thu, 16 Feb 2017 12:03:19 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;58a59507-330&quot;
Expires: Thu, 09 Mar 2017 16:02:46 GMT
Cache-Control: max-age=1728000
Accept-Ranges: bytes
GET /recaptcha/api.js?onload=reCallback&render=explicit&hl=ru HTTP/1.1

Host: www.google.com
GET /recaptcha/api.js?onload=reCallback&amp;render=explicit&amp;hl=ru HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 172.217.22.164
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
Content-Encoding: gzip
Date: Fri, 17 Feb 2017 16:02:53 GMT
Expires: Fri, 17 Feb 2017 16:02:53 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=&quot;:443&quot;; ma=2592000; v=&quot;35,34&quot;
Transfer-Encoding: chunked
GET /?src=ss2&s_data=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 HTTP/1.1

Host: ucounter.ucoz.net
GET /?src=ss2&amp;s_data=CAIQABitvZzFBVoXCgJjYhIRMC41MjY2OTIxNzgwMzUzMTla7QQKBGRhdGES5ARNam81T2pNNE9qRXdPVG8xTXpveU1qb3lPVG81TWpvNE5qb3lOam80T0RvMk1Eb3hOVG93T2pBNk1UQTZNVEV4T2pJd09qVXdPakk0T2pNeE9qSXpPalEzT2pFMk9qa3pPakV4TnpvNU9UbzVORG8zTVRveE1Ub3pNam94TURrNk5UTTZNVEE2T0RBNk9EQTZOalk2TnpZNk1USTZNVEV5T2pFd05EbzVNam80TURvNU1Eb3hNREk2TWpBNk5UQTZNVFk2TWpVNk5qSTZNem94TXpvNE9EbzJNRG94TURrNk1UVTZNVGs2TVRNNk5UVTZNakE2TlRBNk1UWTZNalU2TmpJNk1qQTZNakk2T0RRNk1URTNPak0zT2pFd09qRTBPakU0T2pFeE5qbzRNem8wTlRveU1qb3hNRG8yTWpvME9qRXdPalE2TVRJeE9qRXdNRG81TlRvNE1EbzRNVG94TURNNk1URTZNVEUwT2pjMk9qa3dPamN4T2pNNk1UWTZOemM2TWpNNk5EazZNVE02TVRNNk1qZzZNVEV4T2pJd09qVXdPakUyT2pJMU9qWXlPakU0T2pJME9qZzNPalEzT2pFd09UbzNPVG94T0RveE9qTTRPakV3T1RvMU5Ub3hOem8wT2pVNk56YzZPVFU2TnpRNk16TTZNelk2TlRRNk5Ub3hNRG96T0RvNE5Eb3hNalE2T1RVNk16QTZPRG8wT2pNNE9qZzFPak00T2pVMU9qZzBPakU1T2pJNU9qRXhOam8yTlRvME1Eb3hNem8xTURvek9qQTZNakk2TnpRNk1URTOiARCKIU6A9SoR5obgACWQwGR8ggIGQTFCMTAw HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: uAnaG8aP73n=off
 185.26.97.189
HTTP/1.1 302 Moved Temporarily
Content-Type: application/javascript
Server: nginx/1.11.3
Date: Fri, 17 Feb 2017 16:02:53 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQ4YTIxNGU4MC1mNTJhLTExZTYtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Thu, 12 Feb 2037 16:02:53 GMT; Domain=ucounter.ucoz.net
P3P: CP=&quot;IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT&quot;
Location: //ucounter.ucoz.net/?src=ss2&amp;s_data=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
Etag: 8a214e80-f52a-11e6-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
GET /canalyzer/?c=uSD2 HTTP/1.1

Host: sys000.uid.me

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 217.199.217.44
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Server: uServ/3.2.2
Date: Fri, 17 Feb 2017 16:02:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store
Pragma: no-cache
GET /?src=ss2&s_data=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 HTTP/1.1

Host: ucounter.ucoz.net
GET /?src=ss2&amp;s_data=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 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: uAnaG8aP73n=off; suuid3=IiQ4YTIxNGU4MC1mNTJhLTExZTYtODZlMC0wMDI1OTBjMDY0N2M*
 185.26.97.189
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Server: nginx/1.11.3
Date: Fri, 17 Feb 2017 16:02:53 GMT
Content-Length: 616
Connection: keep-alive
Set-Cookie: s_ttl_ss2=1487347373; Path=/; Expires=Sat, 18 Feb 2017 16:02:53 GMT; Domain=ucounter.ucoz.net
P3P: CP=&quot;IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT&quot;
Etag: 8a214e80-f52a-11e6-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
GET /cgi/uutils.fcg?a=uSD&ca=1&c=- HTTP/1.1

Host: s37.ucoz.net
GET /cgi/uutils.fcg?a=uSD&amp;ca=1&amp;c=- HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: uAnaG8aP73n=off
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
P3P: CP=&quot;IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT&quot;
Set-Cookie: uSD=-; path=/; expires=Sat, 18-Feb-2017 16:02:47 GMT; domain=.ucoz.net;
GET /abnl/?adsdata=grEzECc5W8;Nkg2YR6S!arSTn34Nw5tQm8BEhGNRVUJzdXQkunVWjc2HmXimJyty0sEN5MVG1kmpy;sBO2aXZe0rBv53^9cACOQyS;oo HTTP/1.1

Host: krasivaya.at.ua

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: 2krasivayauzll=1487347365; ucvid=eVx0a4SKRM
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, private
Pragma: no-cache
Content-Encoding: gzip
GET /0.gif?pid=ADSNIPER&id=8a214e80-f52a-11e6-86e0-002590c0647c&cb=0.8697820316335706 HTTP/1.1

Host: advombat.ru
GET /0.gif?pid=ADSNIPER&amp;id=8a214e80-f52a-11e6-86e0-002590c0647c&amp;cb=0.8697820316335706 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 138.201.227.192
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Server: nginx
Date: Fri, 17 Feb 2017 16:02:54 GMT
Content-Length: 154
Connection: keep-alive
Location: http://x01.aidata.io/0.gif?pid=ADSNIPER&amp;id=8a214e80-f52a-11e6-86e0-002590c0647c&amp;cb=0.8697820316335706
GET /m?cdsp=271315&c=8a214e80-f52a-11e6-86e0-002590c0647c&cb=0.7886889809381886 HTTP/1.1

Host: cm.marketgid.com
GET /m?cdsp=271315&amp;c=8a214e80-f52a-11e6-86e0-002590c0647c&amp;cb=0.7886889809381886 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 87.242.88.110
HTTP/1.1 301 Moved Permanently
Content-Type: application/octet-stream
Server: nginx/1.10.0 (Ubuntu)
Date: Fri, 17 Feb 2017 16:02:54 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP=&quot;IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT&quot;
Set-Cookie: muidn=h1hS30Tv_A2i;Domain=.marketgid.com;Path=/;Expires=Tue, 19-Jan-2038 03:14:08 GMT;
Location: http://sync.bumlam.com/?src=mirs1&amp;uid=h1hS30Tv_A2i
Expires: Fri, 17 Feb 2017 16:02:53 GMT
Cache-Control: no-cache
GET /cm.gif?p=25&id=8a214e80-f52a-11e6-86e0-002590c0647c&cb=0.09025956185240358 HTTP/1.1

Host: ad.mail.ru
GET /cm.gif?p=25&amp;id=8a214e80-f52a-11e6-86e0-002590c0647c&amp;cb=0.09025956185240358 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 217.69.139.42
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx
Date: Fri, 17 Feb 2017 16:02:54 GMT
Content-Length: 43
Connection: keep-alive
Set-Cookie: VID=1Gb3tv3mRfXY0000060C14nY:::; path=/; expires=Sun, 18-Feb-18 16:02:54 GMT; domain=.mail.ru
Expires: Fri, 17 Feb 2017 22:02:54 GMT
Cache-Control: max-age=21600
Last-Modified: Fri, 17 Feb 2017 16:02:54 GMT
POST /ocsp HTTP/1.1

Host: clients1.google.com

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
 172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 17 Feb 2017 16:02:54 GMT
Expires: Tue, 21 Feb 2017 16:02:54 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
GET /match/adsniper?uid=8a214e80-f52a-11e6-86e0-002590c0647c&cb=0.8323303170475421 HTTP/1.1

Host: sync.audtd.com
GET /match/adsniper?uid=8a214e80-f52a-11e6-86e0-002590c0647c&amp;cb=0.8323303170475421 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 78.155.222.210
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
Set-Cookie: chk=OK; Max-Age=6; Domain=.audtd.com; Path=/; Expires=Fri, 17 Feb 2017 16:03:00 GMT
Location: http://sync.audtd.com/match/adsniper?uid=8a214e80-f52a-11e6-86e0-002590c0647c&amp;cb=0.8323303170475421&amp;checked=true&amp;rst=1487347374122&amp;rf=http%3A%2F%2Fkrasivaya.at.ua%2Findex%2F1&amp;type=gif
Vary: Accept
Content-Length: 205
Date: Fri, 17 Feb 2017 16:02:54 GMT
GET /adv/dummy/000/css/style.css HTTP/1.1

Host: s37.ucoz.net

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/abnl/?adsdata=grEzECc5W8;Nkg2YR6S!arSTn34Nw5tQm8BEhGNRVUJzdXQkunVWjc2HmXimJyty0sEN5MVG1kmpy;sBO2aXZe0rBv53^9cACOQyS;oo
Cookie: uAnaG8aP73n=off; uSD=-
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:46 GMT
Last-Modified: Fri, 24 Jan 2014 15:10:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Etag: W/&quot;52e2826b-19f0&quot;
Content-Encoding: gzip
GET /?src=ujs6 HTTP/1.1

Host: rot.spotsniper.ru

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/abnl/?adsdata=grEzECc5W8;Nkg2YR6S!arSTn34Nw5tQm8BEhGNRVUJzdXQkunVWjc2HmXimJyty0sEN5MVG1kmpy;sBO2aXZe0rBv53^9cACOQyS;oo
 31.172.81.158
HTTP/1.1 302 Moved Temporarily
Content-Type: application/javascript
Server: nginx
Date: Fri, 17 Feb 2017 16:02:54 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP=&quot;IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT&quot;
Location: //sync3.adsniper.ru/?src=ss1&amp;s_data=CAEQABiuvZzFBVIF36LEjAk*
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
POST /gsorganizationvalsha2g2 HTTP/1.1

Host: ocsp2.globalsign.com

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 111
Content-Type: application/ocsp-request
 104.16.27.216
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 17 Feb 2017 16:02:54 GMT
Content-Length: 1570
Connection: keep-alive
Set-Cookie: __cfduid=d5c3499a5f27ab56c168f37c0ee975ccc1487347374; expires=Sat, 17-Feb-18 16:02:54 GMT; path=/; domain=.globalsign.com; HttpOnly
Last-Modified: Fri, 17 Feb 2017 13:01:13 GMT
Expires: Tue, 21 Feb 2017 13:01:13 GMT
Etag: &quot;840a270768cc56ac35c2efa7325f51db0f40c626&quot;
Cache-Control: public, no-transform, must-revalidate
CF-Cache-Status: HIT
Server: cloudflare-nginx
CF-RAY: 332a7760c3c54297-OSL
GET /match/adsniper?uid=8a214e80-f52a-11e6-86e0-002590c0647c&cb=0.8323303170475421&checked=true&rst=1487347374122&rf=http%3A%2F%2Fkrasivaya.at.ua%2Findex%2F1&type=gif HTTP/1.1

Host: sync.audtd.com
GET /match/adsniper?uid=8a214e80-f52a-11e6-86e0-002590c0647c&amp;cb=0.8323303170475421&amp;checked=true&amp;rst=1487347374122&amp;rf=http%3A%2F%2Fkrasivaya.at.ua%2Findex%2F1&amp;type=gif HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: chk=OK
 78.155.222.210
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Set-Cookie: pid=AU0075F21E907; Max-Age=62899200; Domain=.audtd.com; Path=/; Expires=Fri, 15 Feb 2019 16:02:54 GMT
Location: https://sync.audsp.com/friggin-meguc/renegade?id=AU0075F21E907&amp;fpd=adsniper
Vary: Accept
Content-Length: 202
Date: Fri, 17 Feb 2017 16:02:54 GMT
GET /?src=ujs6&s_subid=btn HTTP/1.1

Host: rot.spotsniper.ru
GET /?src=ujs6&amp;s_subid=btn HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/abnl/?adsdata=grEzECc5W8;Nkg2YR6S!arSTn34Nw5tQm8BEhGNRVUJzdXQkunVWjc2HmXimJyty0sEN5MVG1kmpy;sBO2aXZe0rBv53^9cACOQyS;oo
 31.172.81.158
HTTP/1.1 302 Moved Temporarily
Content-Type: application/javascript
Server: nginx
Date: Fri, 17 Feb 2017 16:02:54 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP=&quot;IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT&quot;
Location: //sync3.adsniper.ru/?src=ss1&amp;s_data=CAEQABiuvZzFBVIF36LEjAlaDgoHc19zdWJpZBIDYnRu
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
GET /0.gif?pid=ADSNIPER&id=8a214e80-f52a-11e6-86e0-002590c0647c&cb=0.8697820316335706 HTTP/1.1

Host: x01.aidata.io
GET /0.gif?pid=ADSNIPER&amp;id=8a214e80-f52a-11e6-86e0-002590c0647c&amp;cb=0.8697820316335706 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 138.201.227.193
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
Server: nginx
Date: Fri, 17 Feb 2017 16:02:54 GMT
Content-Length: 0
Connection: keep-alive
Location: http://x01.aidata.io/0.gif?pid=ADSNIPER&amp;id=8a214e80-f52a-11e6-86e0-002590c0647c&amp;cb=0.8697820316335706&amp;bounce=1
Expires: Fri, 17 Feb 2017 16:02:53 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Fri, 17 Feb 2017 16:02:53 GMT
Set-Cookie: __upin=KxeEDDZHgUhDovqrpmKyjA;domain=.x01.aidata.io;path=/;max-age=63072000
P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
GET /?src=ss1&s_data=CAEQABiuvZzFBVIF36LEjAk* HTTP/1.1

Host: sync3.adsniper.ru
GET /?src=ss1&amp;s_data=CAEQABiuvZzFBVIF36LEjAk* HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/abnl/?adsdata=grEzECc5W8;Nkg2YR6S!arSTn34Nw5tQm8BEhGNRVUJzdXQkunVWjc2HmXimJyty0sEN5MVG1kmpy;sBO2aXZe0rBv53^9cACOQyS;oo
Cookie: uuid3=IiQ4YTIxNGU4MC1mNTJhLTExZTYtODZlMC0wMDI1OTBjMDY0N2M*
 31.172.81.160
HTTP/1.1 302 Moved Temporarily
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Fri, 17 Feb 2017 16:02:54 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP=&quot;IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT&quot;
Location: //rot.spotsniper.ru/?src=ujs6&amp;s_data=CAIQABiuvZzFBaIBEIohToD1KhHmhuAAJZDAZHw*
Etag: 8a214e80-f52a-11e6-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
GET /adv/dummy/000/img/ucoz-logo.png HTTP/1.1

Host: s37.ucoz.net

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/abnl/?adsdata=grEzECc5W8;Nkg2YR6S!arSTn34Nw5tQm8BEhGNRVUJzdXQkunVWjc2HmXimJyty0sEN5MVG1kmpy;sBO2aXZe0rBv53^9cACOQyS;oo
Cookie: uAnaG8aP73n=off; uSD=-
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: image/png
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:46 GMT
Content-Length: 4585
Last-Modified: Fri, 24 Jan 2014 15:10:35 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;52e2826b-11e9&quot;
Accept-Ranges: bytes
GET /recaptcha/api2/r20170213115309/recaptcha__ru.js HTTP/1.1

Host: www.gstatic.com

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 172.217.22.163
HTTP/1.1 200 OK
Content-Type: text/javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Thu, 16 Feb 2017 00:05:57 GMT
Expires: Fri, 16 Feb 2018 00:05:57 GMT
Last-Modified: Mon, 13 Feb 2017 20:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 74482
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 143817
Alt-Svc: quic=&quot;:443&quot;; ma=2592000; v=&quot;35,34&quot;
GET /?src=ujs6&s_data=CAIQABiuvZzFBaIBEIohToD1KhHmhuAAJZDAZHw* HTTP/1.1

Host: rot.spotsniper.ru
GET /?src=ujs6&amp;s_data=CAIQABiuvZzFBaIBEIohToD1KhHmhuAAJZDAZHw* HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/abnl/?adsdata=grEzECc5W8;Nkg2YR6S!arSTn34Nw5tQm8BEhGNRVUJzdXQkunVWjc2HmXimJyty0sEN5MVG1kmpy;sBO2aXZe0rBv53^9cACOQyS;oo
 31.172.81.158
HTTP/1.1 302 Moved Temporarily
Content-Type: application/javascript
Server: nginx
Date: Fri, 17 Feb 2017 16:02:54 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQ4YTIxNGU4MC1mNTJhLTExZTYtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Thu, 12 Feb 2037 16:02:54 GMT; Domain=spotsniper.ru
P3P: CP=&quot;IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT&quot;
Location: //rot.spotsniper.ru/?src=ujs6&amp;s_data=CAIQARiuvZzFBaIBEIohToD1KhHmhuAAJZDAZHw*
Etag: 8a214e80-f52a-11e6-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
GET /0.gif?pid=ADSNIPER&id=8a214e80-f52a-11e6-86e0-002590c0647c&cb=0.8697820316335706&bounce=1 HTTP/1.1

Host: x01.aidata.io
GET /0.gif?pid=ADSNIPER&amp;id=8a214e80-f52a-11e6-86e0-002590c0647c&amp;cb=0.8697820316335706&amp;bounce=1 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: __upin=KxeEDDZHgUhDovqrpmKyjA
 138.201.227.193
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
Server: nginx
Date: Fri, 17 Feb 2017 16:02:54 GMT
Content-Length: 0
Connection: keep-alive
Location: http://cm.g.doubleclick.net/pixel?google_nid=aidata_ddp&amp;back=1STPARTY&amp;google_cm
Set-Cookie: gl=1;path=/;expires=Fri, 24 Feb 2017 16:02:54 GMT;max-age=604800 __upin=KxeEDDZHgUhDovqrpmKyjA;domain=.x01.aidata.io;path=/;max-age=63072000
Expires: Fri, 17 Feb 2017 16:02:53 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Fri, 17 Feb 2017 16:02:53 GMT
P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
GET /?src=ss1&s_data=CAEQABiuvZzFBVIF36LEjAlaDgoHc19zdWJpZBIDYnRu HTTP/1.1

Host: sync3.adsniper.ru
GET /?src=ss1&amp;s_data=CAEQABiuvZzFBVIF36LEjAlaDgoHc19zdWJpZBIDYnRu HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/abnl/?adsdata=grEzECc5W8;Nkg2YR6S!arSTn34Nw5tQm8BEhGNRVUJzdXQkunVWjc2HmXimJyty0sEN5MVG1kmpy;sBO2aXZe0rBv53^9cACOQyS;oo
Cookie: uuid3=IiQ4YTIxNGU4MC1mNTJhLTExZTYtODZlMC0wMDI1OTBjMDY0N2M*
 31.172.81.160
HTTP/1.1 302 Moved Temporarily
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Fri, 17 Feb 2017 16:02:54 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP=&quot;IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT&quot;
Location: //rot.spotsniper.ru/?src=ujs6&amp;s_data=CAIQABiuvZzFBVoOCgdzX3N1YmlkEgNidG6iARCKIU6A9SoR5obgACWQwGR8
Etag: 8a214e80-f52a-11e6-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
GET /static/fonts/ptsans/v5/LKf8nhXsWg5ybwEGXk8UBQ.woff HTTP/1.1

Host: themes.googleusercontent.com

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://s37.ucoz.net/adv/dummy/000/css/style.css
Origin: http://krasivaya.at.ua
 172.217.22.161
HTTP/1.1 200 OK
Content-Type: font/woff
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Date: Wed, 18 Jan 2017 21:10:28 GMT
Expires: Thu, 18 Jan 2018 21:10:28 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 56982
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 2573546
GET /?src=ujs6&s_data=CAIQARiuvZzFBaIBEIohToD1KhHmhuAAJZDAZHw* HTTP/1.1

Host: rot.spotsniper.ru
GET /?src=ujs6&amp;s_data=CAIQARiuvZzFBaIBEIohToD1KhHmhuAAJZDAZHw* HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/abnl/?adsdata=grEzECc5W8;Nkg2YR6S!arSTn34Nw5tQm8BEhGNRVUJzdXQkunVWjc2HmXimJyty0sEN5MVG1kmpy;sBO2aXZe0rBv53^9cACOQyS;oo
Cookie: suuid3=IiQ4YTIxNGU4MC1mNTJhLTExZTYtODZlMC0wMDI1OTBjMDY0N2M*
 31.172.81.158
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Server: nginx
Date: Fri, 17 Feb 2017 16:02:54 GMT
Content-Length: 598
Connection: keep-alive
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
Expires: Thu, 01 Jan 1985 00:00:01 GMT
Pragma: no-cache
Access-Control-Allow-Origin: *
P3P: CP=&quot;NOI DEV TAI PSA PSD OUR STP COM NAV INT DEM STA PRE LOC&quot;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
GET /?src=ujs6&s_data=CAIQABiuvZzFBVoOCgdzX3N1YmlkEgNidG6iARCKIU6A9SoR5obgACWQwGR8 HTTP/1.1

Host: rot.spotsniper.ru
GET /?src=ujs6&amp;s_data=CAIQABiuvZzFBVoOCgdzX3N1YmlkEgNidG6iARCKIU6A9SoR5obgACWQwGR8 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/abnl/?adsdata=grEzECc5W8;Nkg2YR6S!arSTn34Nw5tQm8BEhGNRVUJzdXQkunVWjc2HmXimJyty0sEN5MVG1kmpy;sBO2aXZe0rBv53^9cACOQyS;oo
Cookie: suuid3=IiQ4YTIxNGU4MC1mNTJhLTExZTYtODZlMC0wMDI1OTBjMDY0N2M*
 31.172.81.158
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
Server: nginx
Date: Fri, 17 Feb 2017 16:02:54 GMT
Content-Length: 229
Connection: keep-alive
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
Expires: Thu, 01 Jan 1985 00:00:01 GMT
Pragma: no-cache
Access-Control-Allow-Origin: *
P3P: CP=&quot;NOI DEV TAI PSA PSD OUR STP COM NAV INT DEM STA PRE LOC&quot;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
GET /pixel?google_nid=aidata_ddp&back=1STPARTY&google_cm HTTP/1.1

Host: cm.g.doubleclick.net
GET /pixel?google_nid=aidata_ddp&amp;back=1STPARTY&amp;google_cm HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 216.58.211.130
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
P3P: policyref=&quot;http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
Location: http://cm.g.doubleclick.net/pixel?google_nid=aidata_ddp&amp;back=1STPARTY&amp;google_cm=&amp;google_tc=
Date: Fri, 17 Feb 2017 16:02:54 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 300
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 17-Feb-2017 16:17:54 GMT; path=/; domain=.doubleclick.net
GET /pixel?google_nid=aidata_ddp&back=1STPARTY&google_cm=&google_tc= HTTP/1.1

Host: cm.g.doubleclick.net
GET /pixel?google_nid=aidata_ddp&amp;back=1STPARTY&amp;google_cm=&amp;google_tc= HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: test_cookie=CheckForPermission
 216.58.211.130
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
P3P: policyref=&quot;http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml&quot;, CP=&quot;CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR&quot;
Location: http://x01.aidata.io/0.gif?pid=GOOGLE&amp;back=1STPARTY&amp;google_gid=CAESEHhs45OLR0WRzZX1dAvKqf8&amp;google_cver=1
Date: Fri, 17 Feb 2017 16:02:54 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Server: HTTP server (unknown)
Content-Length: 313
X-XSS-Protection: 1; mode=block
Set-Cookie: id=22f6a2d27a120062||t=1487347374|et=730|cs=002213fd488c8f75296f9a459a; expires=Sun, 17-Feb-2019 16:02:54 GMT; path=/; domain=.doubleclick.net test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT IDE=AHWqTUlTsfCznhZ8IxGJ089QXk1SCZeRzDGDPUjVLPy7cDMwYuFS3p9kpA; expires=Sun, 17-Feb-2019 16:02:54 GMT; path=/; domain=.doubleclick.net; HttpOnly
GET /hit;ucoz_topline_worldwide?rhttp%3A//krasivaya.at.ua/index/1;s1176*885*24;uhttp%3A//krasivaya.at.ua/abnl/%3Fadsdata%3DgrEzECc5W8%3BNkg2YR6S%21arSTn34Nw5tQm8BEhGNRVUJzdXQkunVWjc2HmXimJyty0sEN5MVG1kmpy%3BsBO2aXZe0rBv53%5E9cACOQyS%3Boo;0.827150262067544 HTTP/1.1

Host: counter.yadro.ru

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/abnl/?adsdata=grEzECc5W8;Nkg2YR6S!arSTn34Nw5tQm8BEhGNRVUJzdXQkunVWjc2HmXimJyty0sEN5MVG1kmpy;sBO2aXZe0rBv53^9cACOQyS;oo
Cookie: FTID=1Ofnwj13E7PY1Ofnwj00437l; VID=2UYMwY1QF79Y1Ofnwj00438t
 88.212.196.105
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Date: Fri, 17 Feb 2017 16:02:54 GMT
Server: 0W/0.8c
Location: http://counter.yadro.ru/hit;ucoz_topline_worldwide?q;rhttp%3A//krasivaya.at.ua/index/1;s1176*885*24;uhttp%3A//krasivaya.at.ua/abnl/%3Fadsdata%3DgrEzECc5W8%3BNkg2YR6S%21arSTn34Nw5tQm8BEhGNRVUJzdXQkunVWjc2HmXimJyty0sEN5MVG1kmpy%3BsBO2aXZe0rBv53%5E9cACOQyS%3Boo;0.827150262067544
Content-Length: 32
Expires: Wed, 17 Feb 2016 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref=&quot;/w3c/p3p.xml&quot;, CP=&quot;UNI&quot;
Set-Cookie: FTID=0; path=/; expires=Sat, 01 Jan 2000 00:00:00 GMT; domain=.yadro.ru
POST / HTTP/1.1

Host: ocsp.startssl.com

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 195.159.219.10
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx/1.7.2
Content-Length: 1816
Content-Transfer-Encoding: Binary
Last-Modified: Fri, 17 Feb 2017 10:43:59 GMT
Etag: &quot;C7CF51DBAFFFC18E857B93BC6AD7F913AC985CFC&quot;
Expires: Fri, 17 Feb 2017 16:02:54 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Fri, 17 Feb 2017 16:02:54 GMT
Connection: keep-alive
GET /adv/dummy/000/img/bg.gif HTTP/1.1

Host: s37.ucoz.net

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://s37.ucoz.net/adv/dummy/000/css/style.css
Cookie: uAnaG8aP73n=off; uSD=-
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:47 GMT
Content-Length: 1268
Last-Modified: Fri, 24 Jan 2014 15:10:35 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;52e2826b-4f4&quot;
Accept-Ranges: bytes
GET /0.gif?pid=GOOGLE&back=1STPARTY&google_gid=CAESEHhs45OLR0WRzZX1dAvKqf8&google_cver=1 HTTP/1.1

Host: x01.aidata.io
GET /0.gif?pid=GOOGLE&amp;back=1STPARTY&amp;google_gid=CAESEHhs45OLR0WRzZX1dAvKqf8&amp;google_cver=1 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: __upin=KxeEDDZHgUhDovqrpmKyjA; gl=1
 138.201.227.193
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
Server: nginx
Date: Fri, 17 Feb 2017 16:02:54 GMT
Content-Length: 0
Connection: keep-alive
Location: http://rgi.io/match?back=1STPARTY
Set-Cookie: rgi=1;path=/;expires=Sat, 18 Feb 2017 16:02:55 GMT;max-age=86400 __upin=KxeEDDZHgUhDovqrpmKyjA;domain=.x01.aidata.io;path=/;max-age=63072000
Expires: Fri, 17 Feb 2017 16:02:53 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Fri, 17 Feb 2017 16:02:53 GMT
P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
GET /hit;ucoz_topline_worldwide?q;rhttp%3A//krasivaya.at.ua/index/1;s1176*885*24;uhttp%3A//krasivaya.at.ua/abnl/%3Fadsdata%3DgrEzECc5W8%3BNkg2YR6S%21arSTn34Nw5tQm8BEhGNRVUJzdXQkunVWjc2HmXimJyty0sEN5MVG1kmpy%3BsBO2aXZe0rBv53%5E9cACOQyS%3Boo;0.827150262067544 HTTP/1.1

Host: counter.yadro.ru

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/abnl/?adsdata=grEzECc5W8;Nkg2YR6S!arSTn34Nw5tQm8BEhGNRVUJzdXQkunVWjc2HmXimJyty0sEN5MVG1kmpy;sBO2aXZe0rBv53^9cACOQyS;oo
Cookie: VID=2UYMwY1QF79Y1Ofnwj00438t
 88.212.196.105
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Fri, 17 Feb 2017 16:02:55 GMT
Server: 0W/0.8c
Connection: Close
Content-Length: 43
Expires: Wed, 17 Feb 2016 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
GET /metrika/watch.js HTTP/1.1

Host: mc.yandex.ru

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 87.250.251.119
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Server: nginx/1.8.1
Date: Fri, 17 Feb 2017 16:02:55 GMT
Content-Length: 27175
Connection: keep-alive
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Fri, 17 Feb 2017 08:06:42 GMT
Content-Encoding: gzip
Expires: Fri, 17 Feb 2017 17:02:55 GMT
Strict-Transport-Security: max-age=31536000
GET /pixel.gif?cid=7a2124ff-81d5-4d21-af9b-e5783790758d&pid=w&uid=8a214e80-f52a-11e6-86e0-002590c0647c&cb=0.8369858564167894 HTTP/1.1

Host: sync.1dmp.io
GET /pixel.gif?cid=7a2124ff-81d5-4d21-af9b-e5783790758d&amp;pid=w&amp;uid=8a214e80-f52a-11e6-86e0-002590c0647c&amp;cb=0.8369858564167894 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 136.243.44.222
HTTP/1.1 302 Found
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 17 Feb 2017 16:02:55 GMT
Content-Length: 0
Connection: keep-alive
Expires: 0
Cache-Control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
Set-Cookie: uid=8b07e201-f52a-11e6-ab04-d43d7eece3f6; Version=1; Path=/; Domain=.1dmp.io; Expires=Mon, 15 Feb 2027 16:02:55 GMT
Location: /pixel.gif?cid=7a2124ff-81d5-4d21-af9b-e5783790758d&amp;pid=w&amp;uid=8a214e80-f52a-11e6-86e0-002590c0647c&amp;cb=0.8369858564167894&amp;cs=1
GET /match?back=1STPARTY HTTP/1.1

Host: rgi.io

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 144.76.203.221
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Server: nginx
Date: Fri, 17 Feb 2017 16:02:55 GMT
Content-Length: 154
Connection: keep-alive
Location: http://x01.aidata.io/0.gif?pid=RGI&amp;id=jJc/94BBO1qRVCqHF3h8NQ&amp;back=1STPARTY
Expires: Fri, 17 Feb 2017 16:02:54 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Fri, 17 Feb 2017 16:02:54 GMT
P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
Set-Cookie: __upin=jJc/94BBO1qRVCqHF3h8NQ;domain=.rgi.io;path=/;max-age=63072000
GET /?src=mirs1&uid=h1hS30Tv_A2i HTTP/1.1

Host: sync.bumlam.com
GET /?src=mirs1&amp;uid=h1hS30Tv_A2i HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 31.172.81.160
HTTP/1.1 302 Moved Temporarily
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Fri, 17 Feb 2017 16:02:55 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP=&quot;IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT&quot;
Location: //sync3.adsniper.ru/?src=ss1&amp;s_data=CAEQABivvZzFBVIFpMTQrwZiDGgxaFMzMFR2X0EyaQ**
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
GET /ptlmcy4245/?sid=75280 HTTP/1.1

Host: k.dinya.okoshechka.net

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 95.211.219.65
HTTP/1.1 302 Found
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 17 Feb 2017 16:02:55 GMT
Content-Length: 11
Connection: keep-alive
Set-Cookie: sid=8a705cfa-f52a-11e6-9c63-775f4c00680f; path=/; domain=okoshechka.net; HttpOnly
Cache-Control: max-age=0, private, must-revalidate
Location: http://ww1.okoshechka.net
GET /?src=ss1&s_data=CAEQABivvZzFBVIFpMTQrwZiDGgxaFMzMFR2X0EyaQ** HTTP/1.1

Host: sync3.adsniper.ru
GET /?src=ss1&amp;s_data=CAEQABivvZzFBVIFpMTQrwZiDGgxaFMzMFR2X0EyaQ** HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: uuid3=IiQ4YTIxNGU4MC1mNTJhLTExZTYtODZlMC0wMDI1OTBjMDY0N2M*
 31.172.81.160
HTTP/1.1 302 Moved Temporarily
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Fri, 17 Feb 2017 16:02:56 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP=&quot;IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT&quot;
Location: //sync.bumlam.com/?src=mirs1&amp;s_data=CAIQABivvZzFBWIMaDFoUzMwVHZfQTJpogEQiiFOgPUqEeaG4AAlkMBkfA**
Etag: 8a214e80-f52a-11e6-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
GET /0.gif?pid=RGI&id=jJc/94BBO1qRVCqHF3h8NQ&back=1STPARTY HTTP/1.1

Host: x01.aidata.io
GET /0.gif?pid=RGI&amp;id=jJc/94BBO1qRVCqHF3h8NQ&amp;back=1STPARTY HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: __upin=KxeEDDZHgUhDovqrpmKyjA; gl=1; rgi=1
 138.201.227.193
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
Server: nginx
Date: Fri, 17 Feb 2017 16:02:56 GMT
Content-Length: 0
Connection: keep-alive
Location: http://tags.bluekai.com/site/29099?limit=0&amp;id=KxeEDDZHgUhDovqrpmKyjA&amp;redir=http://x01.aidata.io/0.gif?pid=ORACLE%26id=$_BK_UUID%26back=1STPARTY
Set-Cookie: oracle=1;path=/;expires=Fri, 24 Feb 2017 16:02:56 GMT;max-age=604800 __upin=KxeEDDZHgUhDovqrpmKyjA;domain=.x01.aidata.io;path=/;max-age=63072000
Expires: Fri, 17 Feb 2017 16:02:55 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Fri, 17 Feb 2017 16:02:55 GMT
P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'
GET /?src=mirs1&s_data=CAIQABivvZzFBWIMaDFoUzMwVHZfQTJpogEQiiFOgPUqEeaG4AAlkMBkfA** HTTP/1.1

Host: sync.bumlam.com
GET /?src=mirs1&amp;s_data=CAIQABivvZzFBWIMaDFoUzMwVHZfQTJpogEQiiFOgPUqEeaG4AAlkMBkfA** HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 31.172.81.160
HTTP/1.1 302 Moved Temporarily
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Fri, 17 Feb 2017 16:02:56 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: suuid3=IiQ4YTIxNGU4MC1mNTJhLTExZTYtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Thu, 12 Feb 2037 16:02:56 GMT; Domain=bumlam.com
P3P: CP=&quot;IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT&quot;
Location: //sync.bumlam.com/?src=mirs1&amp;s_data=CAIQARivvZzFBWIMaDFoUzMwVHZfQTJpogEQiiFOgPUqEeaG4AAlkMBkfA**
Etag: 8a214e80-f52a-11e6-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
POST / HTTP/1.1

Host: ocsp.comodoca.com

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request
 178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 17 Feb 2017 16:02:56 GMT
Server: Apache
Last-Modified: Thu, 16 Feb 2017 15:42:33 GMT
Expires: Thu, 23 Feb 2017 15:42:33 GMT
Etag: 892040E85D6D4FE903172FA64E5791F785B0C20C
Cache-Control: max-age=516576,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp14
Content-Length: 472
Connection: close
GET /?src=mirs1&s_data=CAIQARivvZzFBWIMaDFoUzMwVHZfQTJpogEQiiFOgPUqEeaG4AAlkMBkfA** HTTP/1.1

Host: sync.bumlam.com
GET /?src=mirs1&amp;s_data=CAIQARivvZzFBWIMaDFoUzMwVHZfQTJpogEQiiFOgPUqEeaG4AAlkMBkfA** HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: suuid3=IiQ4YTIxNGU4MC1mNTJhLTExZTYtODZlMC0wMDI1OTBjMDY0N2M*
 31.172.81.160
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx
Date: Fri, 17 Feb 2017 16:02:56 GMT
Content-Length: 43
Connection: keep-alive
P3P: CP=&quot;IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT&quot;
Etag: 8a214e80-f52a-11e6-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
POST / HTTP/1.1

Host: ocsp.comodoca.com

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 17 Feb 2017 16:02:56 GMT
Server: Apache
Last-Modified: Tue, 14 Feb 2017 12:30:43 GMT
Expires: Tue, 21 Feb 2017 12:30:43 GMT
Etag: 41A37F3125D78FDF4B955809EB0AE004A5CC5CA0
Cache-Control: max-age=332266,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp35
Content-Length: 727
Connection: close
GET /site/29099?limit=0&id=KxeEDDZHgUhDovqrpmKyjA&redir=http://x01.aidata.io/0.gif?pid=ORACLE%26id=$_BK_UUID%26back=1STPARTY HTTP/1.1

Host: tags.bluekai.com
GET /site/29099?limit=0&amp;id=KxeEDDZHgUhDovqrpmKyjA&amp;redir=http://x01.aidata.io/0.gif?pid=ORACLE%26id=$_BK_UUID%26back=1STPARTY HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 169.47.30.64
HTTP/1.1 302 Found
Content-Type: text/html
Date: Fri, 17 Feb 2017 16:02:56 GMT
X-XSS-Protection: 0
P3P: CP=&quot;NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV&quot;, policyref=&quot;http://tags.bluekai.com/w3c/p3p.xml&quot;
Set-Cookie: bkdc=wdc; expires=Wed, 16-Aug-2017 16:02:56 GMT; path=/; domain=.bluekai.com bku=3lW99n9KoNCt+dko; expires=Wed, 16-Aug-2017 16:02:56 GMT; path=/; domain=.bluekai.com
Location: http://tags.bluekai.com/site/29099?dt=0&amp;r=2088056596&amp;sig=406777654&amp;bkca=KJpn0zpBnnWND1+1L4VrucPNzR70u9dBz1AFv0y30wVrpcJDv6oB0u00puQovqeuNbXy1BHnpWhJnW7D0XpUB2Onp60pnye32x205wjhPED09fJPTotXT6BewPt9lvEW8shqyIYx91KQAWQ963WMH9==
Content-Length: 0
BK-Server: 8d30
nnCoection: close
POST / HTTP/1.1

Host: ocsp.usertrust.com

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request
 178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 17 Feb 2017 16:02:56 GMT
Server: Apache
Last-Modified: Tue, 14 Feb 2017 12:30:43 GMT
Expires: Tue, 21 Feb 2017 12:30:43 GMT
Etag: DDDE35DA694EB4FCA215EF1ACB447F0ACE377591
Cache-Control: max-age=332266,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp14
Content-Length: 471
Connection: close
GET /metrika/advert.gif HTTP/1.1

Host: mc.yandex.ru

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 87.250.251.119
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx/1.8.1
Date: Fri, 17 Feb 2017 16:02:55 GMT
Content-Length: 43
Connection: keep-alive
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Mon, 12 Oct 2015 13:09:09 GMT
Expires: Fri, 11 Jan 2047 16:02:55 GMT
Strict-Transport-Security: max-age=31536000
GET /watch/39883200?wmode=5&callback=_ymjsp638825748&page-url=http%3A%2F%2Fkrasivaya.at.ua%2Findex%2F1&ut=noindex&browser-info=j%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1176x775%3Az%3A60%3Ai%3A20170217170255%3Aet%3A1487347376%3Aen%3Autf-8%3Av%3A779%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A1451597955327%3Arqn%3A1%3Arn%3A111591925%3Ahid%3A367411054%3Arqnl%3A1%3Ast%3A1487347377%3Au%3A1487347375900780607%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%20%D0%BE%20%D0%B7%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%D1%8C%D0%B5%20%D0%B8%20%D0%BA%D1%80%D0%B0%D1%81%D0%BE%D1%82%D0%B5.%20%D0%94%D0%B8%D0%B5%D1%82%D1%8B%2C%20%D0%BC%D0%B0%D1%81%D0%BA%D0%B8%2C%20%D1%83%D0%BF%D1%80%D0%B0%D0%B6%D0%BD%D0%B5%D0%BD%D0%B8%D1%8F.%20%D0%92%D1%81%20- HTTP/1.1

Host: mc.yandex.ru
GET /watch/39883200?wmode=5&amp;callback=_ymjsp638825748&amp;page-url=http%3A%2F%2Fkrasivaya.at.ua%2Findex%2F1&amp;ut=noindex&amp;browser-info=j%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1176x775%3Az%3A60%3Ai%3A20170217170255%3Aet%3A1487347376%3Aen%3Autf-8%3Av%3A779%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A1451597955327%3Arqn%3A1%3Arn%3A111591925%3Ahid%3A367411054%3Arqnl%3A1%3Ast%3A1487347377%3Au%3A1487347375900780607%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%20%D0%BE%20%D0%B7%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%D1%8C%D0%B5%20%D0%B8%20%D0%BA%D1%80%D0%B0%D1%81%D0%BE%D1%82%D0%B5.%20%D0%94%D0%B8%D0%B5%D1%82%D1%8B%2C%20%D0%BC%D0%B0%D1%81%D0%BA%D0%B8%2C%20%D1%83%D0%BF%D1%80%D0%B0%D0%B6%D0%BD%D0%B5%D0%BD%D0%B8%D1%8F.%20%D0%92%D1%81%20- HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 87.250.251.119
HTTP/1.1 302 Found
HTTP/1.1 302 Found
Server: nginx/1.8.1
Date: Fri, 17 Feb 2017 16:02:57 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Fri, 17 Feb 2017 16:02:57 GMT
Expires: Fri, 17 Feb 2017 16:02:57 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Set-Cookie: yandexuid=9679875511487347377; domain=.yandex.ru; path=/; expires=Mon, 15-Feb-2027 16:02:57 GMT yp=1802707377.yrts.1487347377; domain=.yandex.ru; path=/; expires=Mon, 15-Feb-2027 16:02:57 GMT yabs-sid=1847886471487347377; path=/
Location: https://mc.yandex.ru/watch/39883200/1?wmode=5&amp;callback=_ymjsp638825748&amp;page-url=http%3A%2F%2Fkrasivaya.at.ua%2Findex%2F1&amp;ut=noindex&amp;browser-info=j%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1176x775%3Az%3A60%3Ai%3A20170217170255%3Aet%3A1487347376%3Aen%3Autf-8%3Av%3A779%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A1451597955327%3Arqn%3A1%3Arn%3A111591925%3Ahid%3A367411054%3Arqnl%3A1%3Ast%3A1487347377%3Au%3A1487347375900780607%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%20%D0%BE%20%D0%B7%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%D1%8C%D0%B5%20%D0%B8%20%D0%BA%D1%80%D0%B0%D1%81%D0%BE%D1%82%D0%B5.%20%D0%94%D0%B8%D0%B5%D1%82%D1%8B%2C%20%D0%BC%D0%B0%D1%81%D0%BA%D0%B8%2C%20%D1%83%D0%BF%D1%80%D0%B0%D0%B6%D0%BD%D0%B5%D0%BD%D0%B8%D1%8F.%20%D0%92%D1%81%20-
Strict-Transport-Security: max-age=31536000
GET /friggin-meguc/renegade?id=AU0075F21E907&fpd=adsniper HTTP/1.1

Host: sync.audsp.com
GET /friggin-meguc/renegade?id=AU0075F21E907&amp;fpd=adsniper HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
 78.155.222.215
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Location: //cm.g.doubleclick.net/pixel?google_nid=auditorius&amp;google_cm&amp;google_hm=QVUwMDc1RjIxRTkwNw&amp;fpd=adsniper&amp;google_ula=383167865
Date: Fri, 17 Feb 2017 16:02:57 GMT
Content-Length: 162
GET /pixel.gif?cid=7a2124ff-81d5-4d21-af9b-e5783790758d&pid=w&uid=8a214e80-f52a-11e6-86e0-002590c0647c&cb=0.8369858564167894&cs=1 HTTP/1.1

Host: sync.1dmp.io
GET /pixel.gif?cid=7a2124ff-81d5-4d21-af9b-e5783790758d&amp;pid=w&amp;uid=8a214e80-f52a-11e6-86e0-002590c0647c&amp;cb=0.8369858564167894&amp;cs=1 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: uid=8b07e201-f52a-11e6-ab04-d43d7eece3f6
 136.243.44.222
HTTP/1.1 200 OK
Content-Type: image/gif
Server: nginx
Date: Fri, 17 Feb 2017 16:02:57 GMT
Content-Length: 35
Connection: keep-alive
Expires: 0
Cache-Control: private, no-cache, no-store, no-cache=Set-Cookie, proxy-revalidate
GET /site/29099?dt=0&r=2088056596&sig=406777654&bkca=KJpn0zpBnnWND1+1L4VrucPNzR70u9dBz1AFv0y30wVrpcJDv6oB0u00puQovqeuNbXy1BHnpWhJnW7D0XpUB2Onp60pnye32x205wjhPED09fJPTotXT6BewPt9lvEW8shqyIYx91KQAWQ963WMH9== HTTP/1.1

Host: tags.bluekai.com
GET /site/29099?dt=0&amp;r=2088056596&amp;sig=406777654&amp;bkca=KJpn0zpBnnWND1+1L4VrucPNzR70u9dBz1AFv0y30wVrpcJDv6oB0u00puQovqeuNbXy1BHnpWhJnW7D0XpUB2Onp60pnye32x205wjhPED09fJPTotXT6BewPt9lvEW8shqyIYx91KQAWQ963WMH9== HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: bkdc=wdc; bku=3lW99n9KoNCt+dko
 169.47.30.64
HTTP/1.1 302 Found
Content-Type: text/html
Date: Fri, 17 Feb 2017 16:02:57 GMT
X-XSS-Protection: 0
P3P: CP=&quot;NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV&quot;, policyref=&quot;http://tags.bluekai.com/w3c/p3p.xml&quot;
Pragma: no-cache
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Cache-Control: max-age=0, no-cache, no-store
Location: http://x01.aidata.io/0.gif?pid=ORACLE&amp;id=lzq8Sx99999qqb5R&amp;back=1STPARTY
Content-Length: 0
Set-Cookie: bku=3lW99n9KoNCt+dko; expires=Wed, 16-Aug-2017 16:02:57 GMT; path=/; domain=.bluekai.com
BK-Server: 8517
Cneonction: close
GET / HTTP/1.1

Host: ww1.okoshechka.net

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: sid=8a705cfa-f52a-11e6-9c63-775f4c00680f
 208.91.196.145
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Date: Fri, 17 Feb 2017 16:02:56 GMT
Server: Apache
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_IeQlP14LIQgC3CvHtc6kiKlTRoiaAX9GtCn8wLqS0inegqN4ajVTc0zUJogqUxQ2HkuihdEZ1hAywsG9UlG+9g==
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1438
Keep-Alive: timeout=5, max=54
Connection: Keep-Alive
GET /watch/39883200/1?wmode=5&callback=_ymjsp638825748&page-url=http%3A%2F%2Fkrasivaya.at.ua%2Findex%2F1&ut=noindex&browser-info=j%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1176x775%3Az%3A60%3Ai%3A20170217170255%3Aet%3A1487347376%3Aen%3Autf-8%3Av%3A779%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A1451597955327%3Arqn%3A1%3Arn%3A111591925%3Ahid%3A367411054%3Arqnl%3A1%3Ast%3A1487347377%3Au%3A1487347375900780607%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%20%D0%BE%20%D0%B7%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%D1%8C%D0%B5%20%D0%B8%20%D0%BA%D1%80%D0%B0%D1%81%D0%BE%D1%82%D0%B5.%20%D0%94%D0%B8%D0%B5%D1%82%D1%8B%2C%20%D0%BC%D0%B0%D1%81%D0%BA%D0%B8%2C%20%D1%83%D0%BF%D1%80%D0%B0%D0%B6%D0%BD%D0%B5%D0%BD%D0%B8%D1%8F.%20%D0%92%D1%81%20- HTTP/1.1

Host: mc.yandex.ru
GET /watch/39883200/1?wmode=5&amp;callback=_ymjsp638825748&amp;page-url=http%3A%2F%2Fkrasivaya.at.ua%2Findex%2F1&amp;ut=noindex&amp;browser-info=j%3A1%3As%3A1176x885x24%3Af%3A10.0.45.2%3Afpr%3A65694993101%3Acn%3A1%3Aw%3A1176x775%3Az%3A60%3Ai%3A20170217170255%3Aet%3A1487347376%3Aen%3Autf-8%3Av%3A779%3Ac%3A1%3Ala%3Aen-us%3Apv%3A1%3Als%3A1451597955327%3Arqn%3A1%3Arn%3A111591925%3Ahid%3A367411054%3Arqnl%3A1%3Ast%3A1487347377%3Au%3A1487347375900780607%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%20%D0%BE%20%D0%B7%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%D1%8C%D0%B5%20%D0%B8%20%D0%BA%D1%80%D0%B0%D1%81%D0%BE%D1%82%D0%B5.%20%D0%94%D0%B8%D0%B5%D1%82%D1%8B%2C%20%D0%BC%D0%B0%D1%81%D0%BA%D0%B8%2C%20%D1%83%D0%BF%D1%80%D0%B0%D0%B6%D0%BD%D0%B5%D0%BD%D0%B8%D1%8F.%20%D0%92%D1%81%20- HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: yandexuid=9679875511487347377; yp=1802707377.yrts.1487347377; yabs-sid=1847886471487347377
 87.250.251.119
HTTP/1.1 200 OK
Content-Type: application/javascript
Server: nginx/1.8.1
Date: Fri, 17 Feb 2017 16:02:57 GMT
Content-Length: 97
Connection: keep-alive
P3P: CP=&quot;NOI DEVa TAIa OUR BUS UNI STA&quot;
Last-Modified: Fri, 17 Feb 2017 16:02:57 GMT
Expires: Fri, 17 Feb 2017 16:02:57 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
GET /?fp=kamvYInxNMrZO85R4e2MHlZPt13rs9TZh8hdtnq3FntxK56Td94HZbLUUGZe78EM1N3kfcjmDWdkwG5MyNYR%2Bw%3D%3D&prvtof=k55ZQrpgffWpq9Rdtp2ArJjggSI2VXjJ7RmCIMas6sGIoPr1huB4qUzC6WHPdyuU&poru=iiq2H5cNbjeCfAK2osXmUQ2sKicETuBUKzmrjQhjbHcWrtaTdSI6deXiKlynEVNO&cifr=1& HTTP/1.1

Host: ww1.okoshechka.net
GET /?fp=kamvYInxNMrZO85R4e2MHlZPt13rs9TZh8hdtnq3FntxK56Td94HZbLUUGZe78EM1N3kfcjmDWdkwG5MyNYR%2Bw%3D%3D&amp;prvtof=k55ZQrpgffWpq9Rdtp2ArJjggSI2VXjJ7RmCIMas6sGIoPr1huB4qUzC6WHPdyuU&amp;poru=iiq2H5cNbjeCfAK2osXmUQ2sKicETuBUKzmrjQhjbHcWrtaTdSI6deXiKlynEVNO&amp;cifr=1&amp; HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: sid=8a705cfa-f52a-11e6-9c63-775f4c00680f
 208.91.196.145
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Date: Fri, 17 Feb 2017 16:02:57 GMT
Server: Apache
Set-Cookie: vsid=907vr2348929772412357; expires=Wed, 16-Feb-2022 16:02:57 GMT; path=/; domain=ww1.okoshechka.net; httponly
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 193
Keep-Alive: timeout=5, max=114
Connection: Keep-Alive
GET /favicon.ico HTTP/1.1

Host: ww1.okoshechka.net

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: sid=8a705cfa-f52a-11e6-9c63-775f4c00680f; vsid=907vr2348929772412357
 208.91.196.145
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
Date: Fri, 17 Feb 2017 16:02:57 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30
Keep-Alive: timeout=5, max=107
Connection: Keep-Alive
GET /favicon.ico HTTP/1.1

Host: krasivaya.at.ua

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: 2krasivayauzll=1487347365; ucvid=eVx0a4SKRM; _ym_uid=1487347375900780607; _ym_isad=2
 195.216.243.237
HTTP/1.1 200 OK
Content-Type: image/x-icon
Server: nginx/1.8.0
Date: Fri, 17 Feb 2017 16:02:50 GMT
Content-Length: 5202
Last-Modified: Fri, 23 Oct 2009 17:17:05 GMT
Connection: keep-alive
Keep-Alive: timeout=15
Etag: &quot;4ae1e511-1452&quot;
Accept-Ranges: bytes
GET /favicon.ico HTTP/1.1

Host: ww1.okoshechka.net

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: sid=8a705cfa-f52a-11e6-9c63-775f4c00680f; vsid=907vr2348929772412357
 208.91.196.145
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
Date: Fri, 17 Feb 2017 16:03:00 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
GET /0.gif?pid=ORACLE&id=lzq8Sx99999qqb5R&back=1STPARTY HTTP/1.1

Host: x01.aidata.io
GET /0.gif?pid=ORACLE&amp;id=lzq8Sx99999qqb5R&amp;back=1STPARTY HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: __upin=KxeEDDZHgUhDovqrpmKyjA; gl=1; rgi=1; oracle=1
 

GET /pixel?google_nid=auditorius&google_cm&google_hm=QVUwMDc1RjIxRTkwNw&fpd=adsniper&google_ula=383167865 HTTP/1.1

Host: cm.g.doubleclick.net
GET /pixel?google_nid=auditorius&amp;google_cm&amp;google_hm=QVUwMDc1RjIxRTkwNw&amp;fpd=adsniper&amp;google_ula=383167865 HTTP/1.1

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://krasivaya.at.ua/index/1
Cookie: id=22f6a2d27a120062||t=1487347374|et=730|cs=002213fd488c8f75296f9a459a; IDE=AHWqTUlTsfCznhZ8IxGJ089QXk1SCZeRzDGDPUjVLPy7cDMwYuFS3p9kpA