Overview

URL www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy
IP88.198.13.114
ASNAS24940 Hetzner Online GmbH
Location Germany
Report completed2017-12-05 12:38:07 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2017-12-05 2 www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib (...) Malware
2017-12-05 2 www.t.ks.ua/sites/default/files/js/js_UF4GTnfveyTJGWjF2RFf_P2GspsP1qlPPx6MX (...) Malware
2017-12-05 2 www.t.ks.ua/sites/default/files/js/js_BAhqE0nsQns6shJD8cBPNaX58HANh3tzWfxSl (...) Malware
2017-12-05 2 www.t.ks.ua/sites/default/files/favicon_1.ico Malware
2017-12-05 2 www.t.ks.ua/sites/default/files/js/js_1AMzlCDQxgGquc8G2iJdT1uuMI0-iSG_YUoWQ (...) Malware
2017-12-05 2 www.t.ks.ua/sites/default/files/js/js_aC9776UEENPxwwbnRqzf4GfgCjW8lXfVJbboH (...) Malware
2017-12-05 2 www.t.ks.ua/sites/all/modules/advpoll/nodejs.js Malware
2017-12-05 2 www.t.ks.ua/sites/default/files/styles/my_large/public/33_0.jpeg?itok=qk3OCZOX Malware
2017-12-05 2 www.t.ks.ua/sites/default/files/styles/thumb_170x96/public/1512408955_warni (...) Malware
2017-12-05 2 www.t.ks.ua/sites/all/themes/th/fonts/ArialNarrowRegular/ArialNarrowRegular.woff Malware
2017-12-05 2 www.t.ks.ua/sites/all/themes/th/fonts/ArialNarrowBold/ArialNarrowBold.woff Malware
2017-12-05 2 www.t.ks.ua/sites/all/libraries/galleria/themes/classic/galleria.classic.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 88.198.13.114

Date UQ / IDS / BL URL IP
2019-06-11 14:29:33 +0200
0 - 0 - 0 www.t.ks.ua 88.198.13.114
2019-03-13 21:45:17 +0100
0 - 0 - 0 t.ks.ua 88.198.13.114
2018-11-21 15:59:53 +0100
0 - 0 - 0 www.t.ks.ua 88.198.13.114
2018-08-10 12:32:09 +0200
0 - 0 - 0 www.t.ks.ua/sites/default/files/styles/my_lar (...) 88.198.13.114
2018-01-07 22:54:15 +0100
0 - 0 - 33 www.t.ks.ua/ 88.198.13.114
2017-11-28 18:10:29 +0100
0 - 0 - 37 t.ks.ua 88.198.13.114
2017-11-06 00:39:27 +0100
0 - 0 - 37 www.t.ks.ua/ 88.198.13.114
2017-10-31 20:59:22 +0100
0 - 0 - 36 t.ks.ua/ 88.198.13.114
2017-10-31 08:16:40 +0100
0 - 0 - 37 t.ks.ua/ 88.198.13.114
2017-10-25 16:04:35 +0200
0 - 0 - 0 www.t.ks.ua/ 88.198.13.114

Last 10 reports on ASN: AS24940 Hetzner Online GmbH

Date UQ / IDS / BL URL IP
2019-07-01 11:15:49 +0200
0 - 0 - 0 morskiemile.pl/ 88.198.46.46
2019-07-01 11:05:39 +0200
0 - 0 - 0 https://piranshop.ir/ 144.76.241.226
2019-07-01 06:10:34 +0200
0 - 5 - 0 ua.bizorg.su 136.243.18.232
2019-07-01 04:06:07 +0200
0 - 0 - 0 https://ofness.com/login/ 78.46.102.215
2019-07-01 03:01:20 +0200
0 - 0 - 0 onlinetvi.bloggersdelight.dk/2019/07/01/freeu (...) 138.201.204.196
2019-06-30 17:02:47 +0200
0 - 0 - 0 138.201.66.111 138.201.66.111
2019-06-30 14:17:39 +0200
0 - 0 - 0 https://www.oosterbaan-living.nl/ 78.46.99.89
2019-06-30 10:44:01 +0200
0 - 0 - 0 yu21uy.com 136.243.218.221
2019-06-30 08:38:29 +0200
0 - 0 - 0 https://blog.elcomsoft.com/2019/06/unusual-ip (...) 88.198.215.58
2019-06-30 01:33:48 +0200
0 - 0 - 0 https://ethnics.ru/Parker-vs-Alex-Leap-Fight- (...) 144.76.117.254

No other reports on domain: t.ks.ua



JavaScript

Executed Scripts (92)


Executed Evals (91)

#1 JavaScript::Eval (size: 73, repeated: 2) - SHA256: c26bffe49fcb19f121cf6acf3b01bc47fb739b1b45a132c5cabd524c77216de0

                                        ({
    "C589525": {
        "page": 1
    },
    "0": {},
    "C589522": {
        "page": 1
    },
    "C589523": {
        "page": 1
    }
})
                                    

#2 JavaScript::Eval (size: 52, repeated: 2) - SHA256: 024d6a31987c51eb1db5be2fd9a50bc5a7aec56bd66b8eacf061e3db403d6b69

                                        ({
    "C589525": {
        "page": 1
    },
    "0": {},
    "C589522": {
        "page": 1
    }
})
                                    

#3 JavaScript::Eval (size: 31, repeated: 2) - SHA256: 4d4709b62ca8b9b7de5a699eabbc63a39e720735ee62a232a451f2fc04c85e88

                                        ({
    "C589525": {
        "page": 1
    },
    "0": {}
})
                                    

#4 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 694d04645e0bf03f8d16ee408d276be6c57d18c3aceff3ab4f4eef04745f241f

                                        0,
function(x) {
    K(x, 1);
}
                                    

#5 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 032d9e37aa320f09689e17ffce9332caeb89ceb7edc863af8bc5644be5529a53

                                        0,
function(x) {
    K(x, 2);
}
                                    

#6 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 9ca3dd7e0e39543cfdf97c24cfa8ab36c95e2c0ea2858f4ae0d4b7656d819a37

                                        0,
function(x) {
    K(x, 4);
}
                                    

#7 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 633e5068e5fdf54febb523a67eb602306b1aa5e08807c1a29f858c486213a01a

                                        0,
function(x) {
    t(x, 1);
}
                                    

#8 JavaScript::Eval (size: 31, repeated: 1) - SHA256: a0e04e169e4971ce965219bc0b663696ce4e936158d54cc9fcc7280615f63d01

                                        0,
function(x) {
    t(x, 2);
}
                                    

#9 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 713b9abf6a884a5a51c0162b7dedd8aa8975fbfbf1e4f1e21272fe333e0962f8

                                        0,
function(x) {
    t(x, 4);
}
                                    

#10 JavaScript::Eval (size: 38, repeated: 1) - SHA256: 860d538699a954de9b788e1a776a0610f1c2e1c7d6380dd93879432e93a666e2

                                        0,
function(x) {
    x.J && J(x, 0);
}
                                    

#11 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 7693ee49eea00748ecca87c409a996715fcceb0a7e0fab74d53dd33365a0184a

                                        0,
function(x) {
    x.m(0);
}
                                    

#12 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 7b603adf5a84784f6c829313fe8050335a92d6d96eee105c99d9da45c095a1c8

                                        0,
function(x) {
    x.m(3);
}
                                    

#13 JavaScript::Eval (size: 30, repeated: 1) - SHA256: d373ec7a8005a1c55cf136fbe02236f669a1881d0f2d4e7f67ca35f4c4f9f42e

                                        0,
function(x) {
    x.m(4);
}
                                    

#14 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 1742febf92e48d62f677bcd0db75ed8948ba6ca0be7606935ba0635179ea10c2

                                        0,
function(x) {
    x.m(7);
}
                                    

#15 JavaScript::Eval (size: 187, repeated: 1) - SHA256: 0aa3d91913e4c42668d2cffb83fe87257746e62d46f69260fbcf66efefbc389b

                                        0,
function(x, n) {
    ((n.push(x[0] << 24 | x[1] << 16 | x[2] << 8 | x[3]), n).push(x[4] << 24 | x[5] << 16 | x[6] << 8 | x[7]), n).push(x[8] << 24 | x[9] << 16 | x[10] << 8 | x[11]);
}
                                    

#16 JavaScript::Eval (size: 94, repeated: 1) - SHA256: 117304da6302590b65eec888eaf89796bb4c12c9897401a45981b6efa30011b6

                                        0,
function(x, n) {
    (n = f(x), x = x.R(n), x)[0].removeEventListener(x[1], x[2], false);
}
                                    

#17 JavaScript::Eval (size: 83, repeated: 1) - SHA256: 7d5375ccad246740bd0fbda1817900e16743b5a77ecdfbf002c3056c2ff31890

                                        0,
function(x, n) {
    E(x, 1, 5) || (n = H(x), w(x, n.H, n.D.apply(n.Z, n.V)));
}
                                    

#18 JavaScript::Eval (size: 123, repeated: 1) - SHA256: 589f1167233c68139f01c747e943ba05340914f842786b22a1849f13a58b5902

                                        0,
function(x, n) {
    if (n = this.s[x], void 0 === n) {
        throw V(this, 30, 0, x), this.I;
    }
    return n();
}
                                    

#19 JavaScript::Eval (size: 49, repeated: 1) - SHA256: eaa0d73bfd0adbf74a722bba676e7cf6712d4c3f5aeee2812379b6722b8ee573

                                        0,
function(x, n) {
    n = x.R(f(x)), q(x, n);
}
                                    

#20 JavaScript::Eval (size: 78, repeated: 1) - SHA256: 4daa99f22d9d35ef340bf76af6c3d499d9ad84f4a35cce02c86bd567bc21425a

                                        0,
function(x, n, R) {
    (R = (n = f(x), f)(x), w)(x, R, x.R(R) % x.R(n));
}
                                    

#21 JavaScript::Eval (size: 78, repeated: 1) - SHA256: f58cd63d35d85aa9582c1678eb4f3226987fbc4e31c9bb4253d51dd607dd334e

                                        0,
function(x, n, R) {
    (R = (n = f(x), f)(x), w)(x, R, x.R(R) * x.R(n));
}
                                    

#22 JavaScript::Eval (size: 78, repeated: 1) - SHA256: 1f6423b02ef91e5e888423f40dde89418054b06ac0c59a9579e8bb4c8fa4952e

                                        0,
function(x, n, R) {
    (R = (n = f(x), f)(x), w)(x, R, x.R(R) + x.R(n));
}
                                    

#23 JavaScript::Eval (size: 78, repeated: 1) - SHA256: a35e94600348a14384c4b6a4edbc0016ddaa5b55fdbafdbce47fe2d024410b76

                                        0,
function(x, n, R) {
    (R = (n = f(x), f)(x), w)(x, R, x.R(R) - x.R(n));
}
                                    

#24 JavaScript::Eval (size: 86, repeated: 1) - SHA256: e291a53cf9dc95443047182927a14229a89d227480884d140c44146e2ecd6cc2

                                        0,
function(x, n, R) {
    (n = (n = f(x), R = f(x), x).s[n] && x.R(n), w)(x, R, n);
}
                                    

#25 JavaScript::Eval (size: 85, repeated: 1) - SHA256: 6e42f58f116f53d5f223147686e5bda62aa33050bcc3fa7f4ac0e159b5965536

                                        0,
function(x, n, R) {
    0 != (R = (n = f(x), f(x)), x.R(n)) && w(x, 36, x.R(R));
}
                                    

#26 JavaScript::Eval (size: 121, repeated: 1) - SHA256: 42fbd5f28b314dfb99425f7c9ca3338755bb986dd310d19cdeed277133c0a94f

                                        0,
function(x, n, R) {
    E(x, 1, 5) ||
        (n = f(x), R = f(x), w(x, R, function(x) {
            return eval(x);
        }(x.R(n))));
}
                                    

#27 JavaScript::Eval (size: 72, repeated: 1) - SHA256: d0e3dba5139c920f76010efa9d452b7dff58c7aa2727f93e78e6d043579f74c3

                                        0,
function(x, n, R) {
    R = (n = f(x), f(x)), w(x, R, "" + x.R(n));
}
                                    

#28 JavaScript::Eval (size: 244, repeated: 1) - SHA256: 584d4f7ba49416a337f0e789d9c23f12e4f641127b6d3021b5c347cb699cb887

                                        0,
function(x, n, R) {
    if (3 == x.length) {
        for (R = 0; 3 > R; R++) {
            n[R] += x[R];
        }
        for (x = [13, 8, 13, 12, 16, 5, 3, (R = 0, 10), 15]; 9 > R; R++) {
            n[3](n, R % 3, x[R]);
        }
    }
}
                                    

#29 JavaScript::Eval (size: 79, repeated: 1) - SHA256: a4ef6b1bd3bd39ce1ccc707db8e20c3106bf4757d727aa592653fa79a4a28410

                                        0,
function(x, n, R) {
    n = (R = (n = f(x), f)(x), x.R(n)), w(x, R, z(n));
}
                                    

#30 JavaScript::Eval (size: 133, repeated: 1) - SHA256: 7d55deb518836528a10dd830c704bd7c892bf5c79d36803ff3a7c846d936e333

                                        0,
function(x, n, R) {
    return R = function() {
        return x;
    }, n = function() {
        return R();
    }, n[this.l] = function(n) {
        x = n;
    }, n;
}
                                    

#31 JavaScript::Eval (size: 296, repeated: 1) - SHA256: f1dcfa9aaf4b604944072e52ea74f49007834b2aa0587d2963dd42c12f5e3018

                                        0,
function(x, n, R, S, N, k, p) {
    if ((S = (R = (n = f(x), F(x)), ""), x).s[215]) {
        for (N = x.R(215), p = N.length, k = 0; R--;) {
            k = (k + F(x)) % p, S += c[N[k]];
        }
    } else {
        for (; R--;) {
            S += c[f(x)];
        }
    }
    w(x, n, S);
}
                                    

#32 JavaScript::Eval (size: 89, repeated: 1) - SHA256: a0097d912c4cdc270ce5907bad2e6cab428e96a23d516ae453ef609f534f80d9

                                        0,
function(x, n, R, c) {
    (c = (R = (n = f(x), f(x)), f(x)), w)(x, c, x.R(n) << R);
}
                                    

#33 JavaScript::Eval (size: 89, repeated: 1) - SHA256: c65404fd09bca8366385e3006c8b7ed9f05ff15acc2a3d7474301a4dc4eaaaa1

                                        0,
function(x, n, R, c) {
    (c = (R = (n = f(x), f(x)), f(x)), w)(x, c, x.R(n) >> R);
}
                                    

#34 JavaScript::Eval (size: 106, repeated: 1) - SHA256: 0dc311cdf819835eb2cd7d225b379feb352b5aadb1618e36ba9b2bee36dcaf7f

                                        0,
function(x, n, R, c) {
    (c = (R = (n = f(x), f)(x), f(x)), R = x.R(R), n = x.R(n), w)(x, c, n[R]);
}
                                    

#35 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 5b0b5d23a7f9b71432aec701fa48fb26fa72f752b811c9b72c91118dbe2ec034

                                        0,
function(x, n, R, c) {
    (n = f(x), R = f(x), c = f(x), x).R(n)[x.R(R)] = x.R(c);
}
                                    

#36 JavaScript::Eval (size: 192, repeated: 1) - SHA256: c86aa0fa7933ddad14220d6714c91253c675f4b25534cdf51f55f09154e71a97

                                        0,
function(x, n, R, c) {
    R = (c = (R = (n = x & 4, x &= 3, f)(this), f)(this), this.R(R)), n && (R = m(("" + R).replace(/\r\n/g, "\n"))), x && e(this, c, W(R.length, 2)), e(this, c, R);
}
                                    

#37 JavaScript::Eval (size: 89, repeated: 1) - SHA256: 1328a9fa2a8af0f3a9f37fd50c761702496612f6d353b782c904f8dfeeb4035b

                                        0,
function(x, n, R, c) {
    R = (n = f(x), f(x)), c = f(x), w(x, c, x.R(n) | x.R(R));
}
                                    

#38 JavaScript::Eval (size: 90, repeated: 1) - SHA256: 14b6a0e59f7de92d69d1bc084973fa5c0e4328397c809ed16354c4da45b2df91

                                        0,
function(x, n, R, c) {
    R = (n = f(x), f(x)), c = f(x), w(x, c, x.R(n) || x.R(R));
}
                                    

#39 JavaScript::Eval (size: 98, repeated: 1) - SHA256: 911cb40484470e34bde1c10d2210288faf4a6eebf5801a2079d4e63185a39e82

                                        0,
function(x, n, R, c) {
    c = (R = (n = f(x), f(x)), f(x)), w(x, c, (x.R(n) in x.R(R)) + 0);
}
                                    

#40 JavaScript::Eval (size: 142, repeated: 1) - SHA256: 366055a5301db6297e73a4ae097bb20e4ff41bf2a26219faf63444890dbed03c

                                        0,
function(x, n, R, c) {
    for (; R--;) {
        36 != R && 239 != R && n.s[R] && (n.s[R] = n[c](n[x](R), this));
    }
    n[x] = this;
}
                                    

#41 JavaScript::Eval (size: 240, repeated: 1) - SHA256: 5935d4b30a1ed3eaeed1a373ec687bcf08da65c05ccf42b5c41992a1af801c64

                                        0,
function(x, n, R, c) {
    if ((n = x.A.pop())) {
        for (R = f(x); 0 < R; R--) {
            c = f(x), n[c] = x.s[c];
        }
        n[104] = x.s[104], n[94] = x.s[94], x.s = n;
    } else {
        w(x, 36, x.f.length);
    }
}
                                    

#42 JavaScript::Eval (size: 101, repeated: 1) - SHA256: e1bffe99165e32ce7c20e2be855dbd6a6377763c985c1ccccf40efc892043531

                                        0,
function(x, n, R, c) {
    n = (R = (n = f(x), f)(x), c = f(x), x.R(n) == x.R(R)), w(x, c, +n);
}
                                    

#43 JavaScript::Eval (size: 100, repeated: 1) - SHA256: 40f58666d4e74cce971daf9b45614c88a5904a75562efec5922c2d698cf1bdd7

                                        0,
function(x, n, R, c) {
    n = (R = (n = f(x), f)(x), c = f(x), x.R(n) > x.R(R)), w(x, c, +n);
}
                                    

#44 JavaScript::Eval (size: 170, repeated: 1) - SHA256: 722c6a230e189e8a27ebb5c72ea5263be92f262cfded7d55b8eaeb51e0065d0c

                                        0,
function(x, n, R, c) {
    try {
        c = x[(n + 2) % 3], x[n] = x[n] - x[(n + 1) % 3] - c ^ (1 == n ? c << R : c >>> R);
    } catch (S) {
        throw S;
    }
}
                                    

#45 JavaScript::Eval (size: 128, repeated: 1) - SHA256: 194da0241e9ea19f43d595a6240c2d52140a613d5055fbc57763840caef667f2

                                        0,
function(x, n, R, c, S) {
    R = (S = (c = (R = (n = f(x), f(x)), x).R(f(x)), x).R(f(x)), x.R(R)), w(x, n, M(x, R, c, S));
}
                                    

#46 JavaScript::Eval (size: 215, repeated: 1) - SHA256: 18ce8743a11514a7584d059ef24251aecfcb904550f20a139fa2d9a4de7dbd36

                                        0,
function(x, n, R, c, S) {
    c = (n = (n = f(x), R = f(x), c = f(x), x.R(n)), S = x.R(f(x)), R = x.R(R), x.R(c)), 0 !== n &&
        (c = M(x, c, S, 1, n, R), n.addEventListener(R, c, b), w(x, 90, [n, R, c]));
}
                                    

#47 JavaScript::Eval (size: 238, repeated: 1) - SHA256: 775ec7070ded63a5e4534e28bcc9deac9f38aa9fe4df936bafeb0068280fba32

                                        0,
function(x, n, R, c, S) {
    for (R = (n = [], f(x)), c = 0; c < R; c++) {
        S = f(x), n.push(x.R(S));
    }
    R = f(x), w(x, R, function(x, R) {
        x.K++;
        try {
            for (R = 0; R < n.length; R++) {
                (0, n[R])(x);
            }
        } finally {
            x.K--;
        }
    });
}
                                    

#48 JavaScript::Eval (size: 134, repeated: 1) - SHA256: ce688ec52ac640685c13c4ea2eb52241c1fdd85d476142e8c8a6b24a6d680d15

                                        0,
function(x, n, R, c, S) {
    for (R = (n = f(x), F(x)), S = 0, c = []; S < R; S++) {
        c.push(f(x));
    }
    w(x, n, c);
}
                                    

#49 JavaScript::Eval (size: 397, repeated: 1) - SHA256: 144f8ba09b73f7a12396a68f679bc68abb9ff09c5509d095e365fb82ee8b6746

                                        0,
function(x, n, R, c, S, k) {
    if (!E(x, 1, 255)) {
        if (R = (S = (c = (R = (n = f(x), f)(x), f)(x), f(x)), n = x.R(n), x.R(R)), c = x.R(c), x = x.R(S), "object" == z(n)) {
            for (k in S = [], n) {
                S.push(k);
            }
            n = S;
        }
        for (k = (S = 0, n.length); S < k; S += c) {
            R(n.slice(S, S + c), x);
        }
    }
}
                                    

#50 JavaScript::Eval (size: 216, repeated: 1) - SHA256: 70483dd82ddf31d7da3d3daa9cc8ffb1f173b27ce8cf0615c49e9f076d455ce0

                                        0,
function(x, n, R, c, S, k) {
    return k = (R = (c = (S = function() {
        return c();
    }, function() {
        return c[R.O + (S[R.g] === n) - !k[R.g]];
    }), this), R.a), S[R.l] = function(x) {
        c[R.Y] = x;
    }, S[R.l](x), x = S;
}
                                    

#51 JavaScript::Eval (size: 339, repeated: 1) - SHA256: 699ac4fa59e2bb00c8b97acd3cfaeff5ff0ea88ce3d4e74359c68fec8694b868

                                        0,
function(x, n, R, c, S, k, p) {
    E(x, 1, 5) ||
        (n = H(x), S = n.D, c = n.Z, R = n.V, p = R.length, 0 == p ? (k = new(c[S])) : 1 == p ? (k = new(c[S])(R[0])) : 2 == p ? (k = new(c[S])(R[0], R[1])) : 3 == p ? (k = new(c[S])(R[0], R[1], R[2])) : 4 == p ? (k = new(c[S])(R[0], R[1], R[2], R[3])) : V(x, 22), w(x, n.H, k));
}
                                    

#52 JavaScript::Eval (size: 39, repeated: 1) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#53 JavaScript::Eval (size: 1, repeated: 1) - SHA256: df7e70e5021544f4834bbee64a9e3789febc4be81470df629cad6ddb03320a5c

                                        B
                                    

#54 JavaScript::Eval (size: 366, repeated: 1) - SHA256: e3bc7ebdb8b938752ae75b548b9dd746295d60d35f1fa60dfa84e84389630671

                                        B = function(x, n, R, c) {
    try {
        for (c = 0; 79669387488 != c;) {
            x += (n << 4 ^ n >>> 5) + n ^ c + R[c & 3], c += 2489668359, n += (x << 4 ^ x >>> 5) + x ^ c + R[c >>> 11 & 3];
        }
        return [x >>> 24, x >> 16 & 255, x >> 8 & 255, x & 255, n >>> 24, n >> 16 & 255, n >> 8 & 255, n & 255];
    } catch (S) {
        throw S;
    }
}
                                    

#55 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 6b23c0d5f35d1b11f9b683f0b0a617355deb11277d91ae091d399c655b87940d

                                        C
                                    

#56 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 515637809fe2f171c0c18b4662d21bb40d821be1511ffeba1b8eb2bb827f29ca

                                        C = function(x, n) {
    return x[n] << 24 | x[n + 1] << 16 | x[n + 2] << 8 | x[n + 3];
}
                                    

#57 JavaScript::Eval (size: 1, repeated: 1) - SHA256: f67ab10ad4e4c53121b6a5fe4da9c10ddee905b978d3788d2723d7bfacbe28a9

                                        F
                                    

#58 JavaScript::Eval (size: 83, repeated: 1) - SHA256: 24fdb8cdaf1ceed5fecbee127dcc1f7d0d827a5ef4af0961c233157239e60fc5

                                        F = function(x, n) {
    return n = f(x), n & 128 && (n = n & 127 | f(x) << 7), n;
}
                                    

#59 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 333e0a1e27815d0ceee55c473fe3dc93d56c63e3bee2b3b4aee8eed6d70191a3

                                        G
                                    

#60 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 44bd7ae60f478fae1061e11a7739f4b94d1daf917982d33b6fc8a01a63f89c21

                                        H
                                    

#61 JavaScript::Eval (size: 260, repeated: 1) - SHA256: 818a86df8e2c8271937ae826a56dad413f5866af5d7daef70ac3961a21de0e0a

                                        H = function(x, n, R, c, S, A) {
    for (A = (S = ((R = (n = {}, f(x)), n).H = f(x), n.V = [], c = f(x) - 1, f)(x), 0); A < c; A++) {
        n.V.push(f(x));
    }
    for (n.D = x.R(R), n.Z = x.R(S); c--;) {
        n.V[c] = x.R(n.V[c]);
    }
    return n;
}
                                    

#62 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 86be9a55762d316a3026c2836d044f5fc76e34da10e1b45feee5f18be7edb177

                                        K
                                    

#63 JavaScript::Eval (size: 118, repeated: 1) - SHA256: 400af398790f722d634d6f846ffbbe90d454ac455a20b1e8017eabea1cf4a220

                                        K = function(x, n, R, c) {
    for (c = (R = f(x), 0); 0 < n; n--) {
        c = c << 8 | f(x);
    }
    w(x, R, c);
}
                                    

#64 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 08f271887ce94707da822d5263bae19d5519cb3614e0daedc4c7ce5dab7473f1

                                        M
                                    

#65 JavaScript::Eval (size: 272, repeated: 1) - SHA256: ad7e3aa2aa31529a83a90544656132c955733ff0c849ba02f2c084b0407d1cab

                                        M = function(x, n, R, c, S, A) {
    return function() {
        var P = c & 1,
            Y = [6, n, R, void 0, S, A, arguments];
        if (c & 2) {
            var D = (O(x, Y), g)(x, true, false, false);
        } else {
            P && x.T.length ? O(x, Y) : P ? (O(x, Y), g(x, true, false, false)) : (D = I(x, Y));
        }
        return D;
    };
}
                                    

#66 JavaScript::Eval (size: 1, repeated: 1) - SHA256: e632b7095b0bf32c260fa4c539e9fd7b852d0de454e9be26f24d0d6f91d069d3

                                        T
                                    

#67 JavaScript::Eval (size: 596, repeated: 1) - SHA256: 2f6c0c7a3bb5a0a249c741e65a1d7a341565eae2f34460a5253e09bde6661bf9

                                        T = function(x, n, R, c, S, A, P) {
    x.K++;
    try {
        for (S = (c = 5001, void 0), A = 0, R = x.f.length;
            (--c || x.L) && (A = x.R(36)) < R;) {
            try {
                w(x, 239, A), P = f(x), (S = x.R(P)) && S.call ? S(x) : V(x, 21, 0, P), x.F = true, E(x, 0, 2);
            } catch (Y) {
                Y != x.I && (x.R(227) ? V(x, 22, Y) : w(x, 227, Y));
            }
        }
        c || V(x, 33);
    } catch (Y) {
        try {
            V(x, 22, Y);
        } catch (D) {
            Q(x, D);
        }
    }
    return R = x.R(161), n && w(x, 36, n), x.K--, R;
}
                                    

#68 JavaScript::Eval (size: 1, repeated: 1) - SHA256: de5a6f78116eca62d7fc5ce159d23ae6b889b365a1739ad2cf36f925a140d0cc

                                        V
                                    

#69 JavaScript::Eval (size: 421, repeated: 1) - SHA256: 827f029c6d94af2c0d976ffcd0dd126d25a2af5cf1c96f658821b54306c367fb

                                        V = function(x, n, R, c, S) {
    ((R = (n = [(S = x.R(239), n), S >> 8 & 255, S & 255], void 0 != c && n.push(c), 0 == x.R(104).length && (x.s[104] = void 0, w(x, 104, n)), c = "", R &&
            (R.message && (c += R.message), R.stack && (c += ":" + R.stack)), x).R(94), 3 < R) &&
        (c = c.slice(0, R - 3), R -= c.length + 3, c = m(c.replace(/\r\n/g, "\n")), e(x, 145, W(c.length, 2).concat(c), 12)), w)(x, 94, R);
}
                                    

#70 JavaScript::Eval (size: 1, repeated: 1) - SHA256: fcb5f40df9be6bae66c1d77a6c15968866a9e6cbd7314ca432b019d17392f6f4

                                        W
                                    

#71 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 4b68ab3847feda7d6c62c1fbcbeebfa35eab7351ed5e78f4ddadea5df64b8015

                                        X
                                    

#72 JavaScript::Eval (size: 132, repeated: 1) - SHA256: 7c5c6a8c908dac72a9f3b6389796b3d6de39d36d93471fc02d2008bcbc810565

                                        X = function(x, n, R) {
    return ((R = x.R(36), x.f && R < x.f.length) ? (w(x, 36, x.f.length), q(x, n)) : w(x, 36, n), T)(x, R);
}
                                    

#73 JavaScript::Eval (size: 2, repeated: 23) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#74 JavaScript::Eval (size: 5613, repeated: 1) - SHA256: 2e1495a7979eeb16e1bf408bd283088d4288280ebfaeafe9097c584e68de61a0

                                        __da_info_params = {
    windowLoaded: 0,
    scrollTop: 0,
    scrolls: 0,
    distance: 0,
    startTime: null,
    prevEvent: null,
    prevEventTime: null
};
var events_arr = ['mousedown', 'mouseup', 'touchstart', 'touchend', 'touchcancel', 'click'];
var e_arr = ['md', 'mu', 'ts', 'te', 'tc', 'cl'];
var events_log = [];
__da_info_params.addClass = function(el, cls) {
    if (!this.hasClass(el, cls)) el.className += " " + cls
};
__da_info_params.hasClass = function(el, cls) {
    return el.className.match(new RegExp('(\\s|^)' + cls + '(\\s|$)'))
};
__da_info_params.on = function(el, evt, fn, bubble) {
    if ("addEventListener" in el) {
        try {
            el.addEventListener(evt, fn, bubble)
        } catch (e) {
            if (typeof fn == "object" && fn.handleEvent) {
                el.addEventListener(evt, function(e) {
                    fn.handleEvent.call(fn, e)
                }, bubble)
            } else {
                throw e
            }
        }
    } else if ("attachEvent" in el) {
        if (typeof fn == "object" && fn.handleEvent) {
            el.attachEvent("on" + evt, function() {
                fn.handleEvent.call(fn)
            })
        } else {
            el.attachEvent("on" + evt, fn)
        }
    }
};
events_arr.forEach(function(item, index) {
    __da_info_params.on(document, item, function(e) {
        if (e.type !== __da_info_params.prevEvent) {
            var time = new Date().getTime();
            var delta = (__da_info_params.prevEventTime) ? (time - __da_info_params.prevEventTime) : (time - __da_info_params.startTime);
            events_log.push(delta + '|' + e_arr[events_arr.indexOf(e.type)]);
            if (events_log.length > 10) {
                events_log.shift()
            }
            __da_info_params.prevEventTime = time;
            __da_info_params.prevEvent = e.type
        }
    }, false)
});
__da_info_params.on(window, 'load', function() {
    __da_info_params.startTime = new Date().getTime();
    __da_info_params.windowLoaded = 1;
    __da_info_params.scrollTop = document.documentElement.scrollTop || document.body.scrollTop;
    if (!__da_info_params.scrollTop) __da_info_params.scrollTop = 0
}, false);
__da_info_params.on(window, 'scroll', function() {
    var scrollTop = document.documentElement.scrollTop || document.body.scrollTop;
    __da_info_params.scrolls += Math.abs(__da_info_params.scrollTop - scrollTop);
    __da_info_params.scrollTop = scrollTop
}, false);
__da_info_params.on(document, 'mousemove', function() {
    __da_info_params.distance++
}, false);

function __da_info(el, event) {
    if (!el || el.type == 'click') el = this;
    var h = el.getAttribute('href');
    var n = (h.indexOf('?') > -1 ? '&' : '?') + 't' + 's' + '=';
    if (h.indexOf(n) < 0) {
        window["w"] = window;
        var params = '';
        var s = "\x77\x2e\x73\x63\x72\x65\x65\x6e\x2e\x77\x69\x64\x74\x68\x7c\x77\x2e\x6d\x6f\x7a\x49\x6e\x6e\x65\x72\x53\x63\x72\x65\x65\x6e\x58\x7c\x77\x2e\x65\x78\x74\x65\x72\x6e\x61\x6c\x7c\x77\x2e\x70\x61\x67\x65\x58\x4f\x66\x66\x73\x65\x74\x7c\x77\x2e\x64\x6f\x63\x75\x6d\x65\x6e\x74\x2e\x62\x6f\x64\x79\x2e\x73\x63\x72\x6f\x6c\x6c\x4c\x65\x66\x74\x7c\x77\x2e\x64\x65\x76\x69\x63\x65\x50\x69\x78\x65\x6c\x52\x61\x74\x69\x6f\x7c\x77\x2e\x64\x6f\x63\x75\x6d\x65\x6e\x74\x2e\x61\x6c\x6c\x3f\x31\x3a\x75\x6e\x64\x65\x66\x69\x6e\x65\x64\x7c\x77\x2e\x62\x74\x6f\x61\x7c\x77\x2e\x41\x63\x74\x69\x76\x65\x58\x4f\x62\x6a\x65\x63\x74\x3f\x31\x3a\x75\x6e\x64\x65\x66\x69\x6e\x65\x64\x7c\x77\x2e\x6e\x61\x76\x69\x67\x61\x74\x6f\x72\x2e\x75\x73\x65\x72\x50\x72\x6f\x66\x69\x6c\x65\x7c\x77\x2e\x53\x74\x6f\x72\x61\x67\x65\x7c\x77\x2e\x6f\x70\x65\x72\x61\x3f\x77\x2e\x6f\x70\x65\x72\x61\x2e\x62\x75\x69\x6c\x64\x4e\x75\x6d\x62\x65\x72\x28\x29\x3a\x75\x6e\x64\x65\x66\x69\x6e\x65\x64\x7c\x77\x2e\x6f\x70\x65\x72\x61\x3f\x77\x2e\x6f\x70\x65\x72\x61\x2e\x76\x65\x72\x73\x69\x6f\x6e\x28\x29\x3a\x75\x6e\x64\x65\x66\x69\x6e\x65\x64\x7c\x77\x2e\x63\x68\x72\x6f\x6d\x65\x7c\x77\x2e\x73\x69\x64\x65\x62\x61\x72\x7c\x77\x2e\x67\x6c\x6f\x62\x61\x6c\x53\x74\x6f\x72\x61\x67\x65\x3f\x31\x3a\x75\x6e\x64\x65\x66\x69\x6e\x65\x64\x7c\x5f\x5f\x64\x61\x5f\x69\x6e\x66\x6f\x5f\x70\x61\x72\x61\x6d\x73\x2e\x73\x63\x72\x6f\x6c\x6c\x73\x7c\x5f\x5f\x64\x61\x5f\x69\x6e\x66\x6f\x5f\x70\x61\x72\x61\x6d\x73\x2e\x64\x69\x73\x74\x61\x6e\x63\x65\x7c\x5f\x5f\x64\x61\x5f\x69\x6e\x66\x6f\x5f\x70\x61\x72\x61\x6d\x73\x2e\x68\x61\x73\x43\x6c\x61\x73\x73\x28\x65\x6c\x2c\x20\x27\x44\x41\x2d\x4d\x4f\x56\x27\x29\x3f\x31\x3a\x75\x6e\x64\x65\x66\x69\x6e\x65\x64\x7c\x77\x2e\x6c\x6f\x63\x61\x6c\x53\x74\x6f\x72\x61\x67\x65";
        s = s.split(String.fromCharCode(124));
        var wBlock = 0,
            hBlock = 0,
            p;
        try {
            p = el.parentNode;
            var tc = 0;
            while (p !== null) {
                if (p.tagName.toLowerCase() == 'table') {
                    tc++;
                    if (tc == 2) {
                        var wBlock = !p.style.width || p.style.width.indexOf('%') > -1 ? p.parentNode.offsetWidth : parseInt(p.style.width);
                        var hBlock = !p.style.height || p.style.height.indexOf('%') > -1 ? p.parentNode.offsetHeight : parseInt(p.style.height);
                        break
                    }
                }
                p = p.parentNode
            }
        } catch (ex) {}
        s.push(wBlock);
        s.push(hBlock);
        var connection = navigator.connection || navigator.mozConnection || navigator.webkitConnection;
        s.push(connection ? '"' + connection.type + '"' : undefined);
        var coords = '0,0';
        if (event && wBlock && hBlock) {
            var leftPos = 0;
            var topPos = 0;
            var obj = p;
            while (obj != null) {
                leftPos += obj.offsetLeft;
                topPos += obj.offsetTop;
                obj = obj.offsetParent
            }
            var clientX = event.clientX + document.body.scrollLeft;
            var clientY = event.clientY + document.body.scrollTop;
            coords = '"' + parseInt(clientX - leftPos) + ',' + parseInt(clientY - topPos) + '"'
        }
        s.push(coords);
        s.push(__da_info_params.windowLoaded);
        for (var i = 0; i < s.length; i++) {
            var z = eval(s[i]);
            params += String.fromCharCode(97 + i) + (z === undefined ? '-' : (typeof z === "object" || typeof z === "function" ? 1 : z))
        }
        params += '&at=' + events_log.join('|');
        h += n + params;
        el.setAttribute('href', h)
    }
    return true
}

function __da_info_over(el) {
    __da_info_params.addClass(el, 'DA-MOV')
}(function() {
    var timerId = setInterval(function() {
        var links = document.getElementsByTagName('a');
        for (var i = 0; i < links.length; i++) {
            var url = links[i].getAttribute('data-url');
            if (!url || links[i].getAttribute('data-xurl')) {
                continue
            }
            links[i].setAttribute('data-xurl', links[i].getAttribute('href'));
            links[i].setAttribute('href', url);
            __da_info_params.on(links[i], 'mousedown', function() {
                this.setAttribute('href', this.getAttribute('data-xurl'))
            }, false)
        }
    }, 1000)
})();
                                    

#75 JavaScript::Eval (size: 35, repeated: 1) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style
                                    

#76 JavaScript::Eval (size: 29, repeated: 2) - SHA256: 53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255

                                        document.createElement('img')
                                    

#77 JavaScript::Eval (size: 35, repeated: 1) - SHA256: f2a353ed5469812b863c5fbeb58b4d46b864ba4e20a49f57f9c44c7cda45f46b

                                        document.createEvent('MouseEvents')
                                    

#78 JavaScript::Eval (size: 1, repeated: 2) - SHA256: 3f79bb7b435b05321651daefd374cdc681dc06faa65e374e38337b88ca046dea

                                        e
                                    

#79 JavaScript::Eval (size: 413, repeated: 1) - SHA256: 910e8329e71668fe3081e03f8e79338796594da3fd105f4b834f0a3ac7b3fb61

                                        e = function(x, n, R, c, S, A) {
    for (x = (((S = x.R(n), 145 == n) ? (n = function(x, n, R, c) {
                if (S.i != (n = S.length, R = n - 4 >> 3, R)) {
                    R = ((c = [(S.i = R, 0), 0, 0, A], R) << 3) - 4;
                    try {
                        S.h = B(C(S, R), C(S, R + 4), c);
                    } catch (k) {
                        throw k;
                    }
                }
                S.push(S.h[n & 7] ^ x);
            }, A = x.R(150)) : (n = function(x) {
                S.push(x);
            }), c) &&
            n(c & 255), c = 0, R).length; c < x; c++) {
        n(R[c]);
    }
}
                                    

#80 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111

                                        f
                                    

#81 JavaScript::Eval (size: 292, repeated: 1) - SHA256: 73a662b7b5cefb41b9d17e09dd83d23edd7bfee9a8b8d51959f430b5f9622cd9

                                        f = function(x, n, R) {
    if (n = x.R(36), !(n in x.f)) {
        throw V(x, 31), x.I;
    }
    return (((void 0 == x.j && (x.j = C(x.f, n - 4), x.v = void 0), x.v) != n >> 3 &&
        (x.v = n >> 3, R = [0, 0, 0, x.R(165)], x.C = B(x.j, x.v, R)), w)(x, 36, n + 1), x.f[n]) ^ x.C[n % 8];
}
                                    

#82 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 62c66a7a5dd70c3146618063c344e531e6d4b59e379808443ce962b3abd63c5a

                                        m
                                    

#83 JavaScript::Eval (size: 487, repeated: 1) - SHA256: eb6041eea55eb7c2448b94534d6ca054b5362f1120757f67e0589b8371714617

                                        m = function(x, n, R, c, S) {
    for (c = R = (n = [], 0); c < x.length; c++) {
        S = x.charCodeAt(c), 128 > S ? (n[R++] = S) : (2048 > S ? (n[R++] = S >> 6 | 192) : (55296 == (S & 64512) &&
            c + 1 < x.length && 56320 == (x.charCodeAt(c + 1) & 64512) ? (S = 65536 + ((S & 1023) << 10) + (x.charCodeAt(++c) & 1023), n[R++] = S >> 18 | 240, n[R++] = S >> 12 & 63 | 128) : (n[R++] = S >> 12 | 224), n[R++] = S >> 6 & 63 | 128), n[R++] = S & 63 | 128);
    }
    return n;
}
                                    

#84 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8e35c2cd3bf6641bdb0e2050b76932cbb2e6034a0ddacc1d9bea82a6ba57f7cf

                                        q
                                    

#85 JavaScript::Eval (size: 83, repeated: 1) - SHA256: fd1daaa550abb5c32a46f3c3714eec6218a1c64ac4d83274aefe81c96f0e33b7

                                        q = function(x, n) {
    ((x.A.push(x.s.slice()), x.s)[36] = void 0, w)(x, 36, n);
}
                                    

#86 JavaScript::Eval (size: 1, repeated: 1) - SHA256: e3b98a4da31a127d4bde6e43033f66ba274cab0eb7eb1c70ec41402bf6273dd8

                                        t
                                    

#87 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 45f13fd0980ba224413675945d8ecadc9bb90df7fd6ffcc08eabdbc926817be1

                                        t = function(x, n, R, c) {
    (R = f(x), c = f(x), e)(x, c, W(x.R(R), n));
}
                                    

#88 JavaScript::Eval (size: 4, repeated: 1) - SHA256: 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408

                                        this
                                    

#89 JavaScript::Eval (size: 286, repeated: 2) - SHA256: a36153bdb772ff70c9f6c2c467bc4c5a267e642cae2fbf1ebf89d819b5c889cf

                                        try {
    new Image().src = '//counter.yadro.ru/hit;All_da_nnn_dn_realty?r' + escape(document.referrer) + ((typeof(screen) == 'undefined') ? '' : ';s' + screen.width + '*' + screen.height + '*' + (screen.colorDepth ? screen.colorDepth : screen.pixelDepth)) + ';u' + escape(document.URL) + ';' + Math.random();
} catch (e) {}
                                    

#90 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326

                                        w
                                    

#91 JavaScript::Eval (size: 325, repeated: 1) - SHA256: 1b830736ec67808cada3609e01971d4dc8f5555184dfb3e5352e80c298cd951c

                                        w = function(x, n, R) {
    if (36 == n || 239 == n) {
        if (x.s[n]) {
            x.s[n][x.l](R);
        } else {
            x.s[n] = x.X(R);
        }
    } else if (100 != n && 145 != n && 87 != n && 104 != n || !x.s[n]) {
        x.s[n] = x.w(R, x.R);
    }
    165 == n && (x.j = void 0, w(x, 36, x.R(36) + 4));
}
                                    

Executed Writes (21)

#1 JavaScript::Write (size: 0, repeated: 2) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 4538, repeated: 1) - SHA256: 97e8f36a93b1e7c6c44ec2223ca592949018aacae88fcef439a771a9b3f0d80f

                                        < script >
    var abgp = {
        hw: 15,
        sw: 109,
        hh: 15,
        sh: 15,
        himg: 'https://pagead2.googlesyndication.com' + '/pagead/images/abg/icon.png',
        simg: 'https://pagead2.googlesyndication.com' + '/pagead/images/abg/ru.png',
        alt: 'Ads by Google',
        t: ' 5:;0<0 >B',
        tw: 49,
        t2: 'Google',
        t2w: 36,
        tbo: 0,
        att: 'adsbygoogle',
        ff: '',
        halign: 'right',
        fe: false,
        iba: false,
        lttp: false,
        uic: true,
        uit: true,
        ci: '',
        icd: {
            "creatives": [],
            "height": 600,
            "width": 160,
            "attribution": {
                "user_feedback_data": {
                    "mute_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "pub_feedback_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "conversion_url": "https://googleads.g.doubleclick.net/pagead/conversion/?ai=Cz6n3i4YmWqDhFNi3YZeCotgPyvCk2U6gte6VqgaLiP2UzwgQASCrqsslYMPcpIWYGKAB2In8jgPIAQmpArKo6M1FIoA-qAMByAMCqgT2AU_Q9c27YFDlaEMHKQ-mjzKZTodQVNA9qkqiAoj4X3GBaOgcI5-1jc4krH2RH-1oHxbST44G9FVN1TG0ylLUi4x63V0B0Fa84ltNumcd4TL1Cin_Q0qx1AgIHFRs7hI8X3PRaMi3oN04vKDon-a1OIq1cbgOTuQ6l21l3fgfKIvtVj-0xrqP1Q-RP9Zd_fGMn_SKi6Z_pLWqtEQFVP8fTuQH_JIhamdh-XqRBwFmbHACtchLGGphQe7O-MbA_HbvFQ5N96oCAjCr8g8Oo2Hf_6ISh_nbWdpibzHRQyEhLhjCFR-Jod1sZH7SkA1vndMrXwOfYcuMIOAEA5AGAaAGTIAHkPaDcagHpr4b2AcA0ggHCIBhEAEYAoAKAcgT-eqhAtATANgTDQ\u0026sigh=pYbQmH0_KfU\u0026cid=CAASEuRoW8r3ljADMO5UzLnNC15zgw",
                    "close_button_token": "x74U-fpfA9cIoLXulaoGEI_H_cQDGMH5oXFCAEgAWABwAQ",
                    "interaction_conversion": {
                        "label": "user_feedback_menu_interaction",
                        "label_instance": "",
                        "include_close_button_token": false
                    },
                    "survey_header": ">G5<C 20< =5 ?>=@028;0AL MB0 @5:;0<0?",
                    "back_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png",
                    "mute_confirmation_header": ";03>40@8< 70 >B7K2!",
                    "mute_confirmation_text": "K ?@>25@8< MB> >1JO2;5=85 8 A45;05< 2A5 2>7<>6=>5 4;O ?>2KH5=8O :0G5AB20 @5:;0<K.",
                    "pub_feedback_confirmation_header": ";03>40@8< 70 >B7K2!",
                    "pub_feedback_confirmation_text": "K ?@>25@8< >1JO2;5=8O =0 MB>< A09B5 =0 >A=>20=88 20H53> >B7K20.",
                    "undo_text": "B<5=0",
                    "closing_countdown_text": "0:@KB85 >1JO2;5=8O: %1$d",
                    "attribution_text": "Ads by Google",
                    "attribution_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/abg_blue.png",
                    "attribution_destination_url": "https://www.google.com/url?ct=abg\u0026q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy%26gl%3DNO%26hl%3Dru%26ai0%3D\u0026usg=AFQjCNFskrbDWMdhAybu1OlpUg1Q7wXCYQ",
                    "ad_feedback_icon_url": "https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png",
                    "is_rtl_language": false,
                    "feedback_options": [{
                        "text": ">60;>20BLAO =0 >1JO2;5=85",
                        "conversion": {
                            "label": "user_feedback_menu_option",
                            "label_instance": "1",
                            "include_close_button_token": true
                        },
                        "survey": {
                            "header": ">G5<C 20< =5 ?>=@028;0AL MB0 @5:;0<0?",
                            "options": [{
                                "text": "5 8=B5@5A=>",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "7",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": " 5:;0<0 70:@K205B :>=B5=B",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "3",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "@>A<>B@5=> =5A:>;L:> @07",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "2",
                                    "include_close_button_token": true
                                }
                            }, {
                                "text": "5?@85<;5<0O @5:;0<0",
                                "conversion": {
                                    "label": "mute_survey_option",
                                    "label_instance": "8",
                                    "include_close_button_token": true
                                }
                            }]
                        },
                        "undo_conversion": {
                            "label": "user_feedback_undo",
                            "label_instance": "1",
                            "include_close_button_token": true
                        }
                    }],
                    "mute_panel_data": {
                        "adchoices_icon_url": "https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png",
                        "adchoices_button_text": "K1>@ @5:;0<K",
                        "closed_message_text": "1JO2;5=85 70:@KB> %1$s",
                        "enable_lightbox": false,
                        "google_logo_url": "https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png",
                        "report_ad_button_text": ">60;>20BLAO =0 >1JO2;5=85",
                        "confirmation_text": "K ?>AB0@05<AO 1>;LH5 =5 ?>:07K20BL MB> >1JO2;5=85",
                        "ads_by_google_icon_url": "https://googleads.g.doubleclick.net/pagead/images/abg/iconx2-000000.png",
                        "ads_by_google_button_text": " 5:;0<0 >B Google",
                        "protocol_gstatic_host": "https://www.gstatic.com",
                        "jake_mta_context": "",
                        "overlay_message_text": " 5:;0<0 >B %1$s"
                    }
                }
            },
            "flags": [{
                "name": "enable_settings_click_collapse",
                "value": "true"
            }, {
                "name": "jake_enable_native_scroll_and_small_grid",
                "value": "true"
            }, {
                "name": "defer_jake_mta_render_to_expand",
                "value": "true"
            }, {
                "name": "jake_ui_extension",
                "value": "jake_default_ui"
            }, {
                "name": "jake_transition_timeout",
                "value": "-1"
            }]
        },
        opi: false,
        ti: false,
        mob: false,
        il: false,
        eaca: false,
        ejar: false,
        eda: false
    }; < /script>
                                    

#3 JavaScript::Write (size: 1761, repeated: 1) - SHA256: 4da1d54121ac57d10218a493d4a724941da9c2dde53ee02c0e1b513b3bdf029e

                                        < !doctype html > < html > < body > < iframe style = "display:none"
data - ad - client = "ca-pub-3410491531423553"
id = "google_esf"
name = "google_esf"
src = "https://googleads.g.doubleclick.net/pagead/html/r20171129/r20170110/zrt_lookup.html#" > < /iframe><script>google_ad_slot="9550307421";google_ad_client="ca-pub-3410491531423553";google_adsbygoogle_status="done";google_ad_width=728;google_ad_height=90;google_ad_modifications={"plle":true,"eids":["38893303","21061122"],"loeids":["20040001","38893313"]};google_loader_used="aa";google_reactive_tag_first=false;google_ad_format="728x90";google_ad_unit_key="3037924571";google_ad_dom_fingerprint="807048394";google_sailm=false;google_unique_id=1;google_async_iframe_id="aswift_0";google_start_time=1512474248428;google_pub_vars="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";google_bpp=28;google_async_rrc=0;google_iframe_start_time=new Date().getTime();</script > < script src = "http://pagead2.googlesyndication.com/pagead/js/r20171129/r20170110/show_ads_impl.js" > < /script></body > < /html>
                                    

#4 JavaScript::Write (size: 1563, repeated: 1) - SHA256: 8e15de8a72c3636dab9e4805f409507c2bfeea0584bd3360335f051e41e77cc6

                                        < !doctype html > < html > < body > < script > google_ad_slot = "5348937028";
google_ad_client = "ca-pub-3410491531423553";
google_adsbygoogle_status = "done";
google_ad_width = 580;
google_ad_height = 400;
google_ad_modifications = {
    "plle": true,
    "eids": ["38893303", "21061122"],
    "loeids": ["20040001", "38893313"]
};
google_loader_used = "aa";
google_reactive_tag_first = false;
google_ad_format = "580x400";
google_ad_unit_key = "1574087955";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 2;
google_async_iframe_id = "aswift_1";
google_start_time = 1512474248919;
google_pub_vars = "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";
google_bpp = 33;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20171129 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#5 JavaScript::Write (size: 1562, repeated: 1) - SHA256: e17920a5d3977057d5f0c73f4fcfa1e6fc8d8802bf964f71010436e815ea2ffe

                                        < !doctype html > < html > < body > < script > google_ad_slot = "6457240220";
google_ad_client = "ca-pub-3410491531423553";
google_adsbygoogle_status = "done";
google_ad_width = 300;
google_ad_height = 600;
google_ad_modifications = {
    "plle": true,
    "eids": ["38893303", "21061122"],
    "loeids": ["20040001", "38893313"]
};
google_loader_used = "aa";
google_reactive_tag_first = false;
google_ad_format = "300x600";
google_ad_unit_key = "2121935053";
google_ad_dom_fingerprint = "807048394";
google_sailm = false;
google_unique_id = 3;
google_async_iframe_id = "aswift_2";
google_start_time = 1512474250976;
google_pub_vars = "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";
google_bpp = 5;
google_async_rrc = 0;
google_iframe_start_time = new Date().getTime(); < /script><script src="http:/ / pagead2.googlesyndication.com / pagead / js / r20171129 / r20170110 / show_ads_impl.js "></script></body></html>
                                    

#6 JavaScript::Write (size: 10086, repeated: 1) - SHA256: 9adc3e26d6b662e8e54fdc6a58b7639ca7b34998287bce14667a3405bf85b082

                                        < !doctype html > < html > < head > < script >
    var google_casm = ["", 0, null, 0, 0, null, 1]; < /script></head > < body leftMargin = "0"
topMargin = "0"
marginwidth = "0"
marginheight = "0" > < DIV STYLE = "position: absolute; left: 0px; top: 0px; visibility: hidden;" > < IMG SRC = "https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-Bowx7ryDpEN69CznKrqVB7rjBvV4Ude0ujBfhIKhlId5vz0tGHb43p1bHC6rCAJHk-wsvDl2ns6j0s_kihmaeLekClI37PJffdOXYqfoaex7ZWVaE"
BORDER = 0 WIDTH = 1 HEIGHT = 1 ALT = ""
STYLE = "display:none" > < /DIV><div><div style="position:relative; display:inline-block;"><script>(function(){var h=this,k=function(a,b){var c=Array.prototype.slice.call(arguments,1);return function(){var b=c.slice();b.push.apply(b,arguments);return a.apply(this,b)}};var l=Array.prototype.forEach?function(a,b){Array.prototype.forEach.call(a,b,void 0)}:function(a,b){for(var c=a.length,d="string"==typeof a?a.split(""):a,e=0;e<c;e++)e in d&&b.call(void 0,d[e],e,a)},m=Array.prototype.map?function(a,b){return Array.prototype.map.call(a,b,void 0)}:function(a,b){for(var c=a.length,d=Array(c),e="string"==typeof a?a.split(""):a,f=0;f<c;f++)f in e&&(d[f]=b.call(void 0,e[f],f,a));return d},p=Array.prototype.reduce?function(a,b,c){return Array.prototype.reduce.call(a,b,c)}:function(a,b,c){var d=c;l(a,function(c,f){d=b.call(void 0,d,c,f,a)});return d},q=function(a){for(var b=[],c=0;c<a;c++)b[c]="";return b};var r=function(a){r[" "](a);return a};r[" "]=function(){};var t=function(a,b){for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.call(void 0,a[c],c,a)},u=/https ? : \/\/[^\/]+/, v = function(a) {
    return (a = u.exec(a)) && a[0] || ""
};
var w = /^https?:\/\/(\w|-)+\.cdn\.ampproject\.(net|org)(\?|\/|$)/,
    x = function(a, b, c) {
        this.i = a;
        this.j = b;
        this.g = c
    },
    y = function(a, b) {
        this.url = a;
        this.h = !!b;
        this.depth = null
    },
    A = function(a) {
        a = a || z();
        for (var b = new y(h.location.href, !1), c = null, d = a.length - 1, e = d; 0 <= e; --e) {
            var f = a[e];
            !c && w.test(f.url) && (c = f);
            if (f.url && !f.h) {
                b = f;
                break
            }
        }
        e = null;
        f = a.length && a[d].url;
        0 != b.depth && f && (e = a[d]);
        return new x(b, e, c)
    },
    z = function() {
        var a = h,
            b = [],
            c = null;
        do {
            var d = a;
            try {
                var e;
                if (e = !!d && null != d.location.href) b: {
                    try {
                        r(d.foo);
                        e = !0;
                        break b
                    } catch (n) {}
                    e = !1
                }
                var f = e
            } catch (n) {
                f = !1
            }
            if (f) {
                var g = d.location.href;
                c = d.document && d.document.referrer || null
            } else g = c, c = null;
            b.push(new y(g || ""));
            try {
                a = d.parent
            } catch (n) {
                a = null
            }
        } while (a && d != a);
        a = 0;
        for (d = b.length - 1; a <= d; ++a) b[a].depth = d - a;
        d = h;
        if (d.location && d.location.ancestorOrigins && d.location.ancestorOrigins.length == b.length - 1) for (a = 1; a < b.length; ++a) g = b[a], g.url || (g.url = d.location.ancestorOrigins[a - 1] || "", g.h = !0);
        return b
    };
var C = function(a, b, c, d, e) {
        var f = [];
        t(a, function(a, n) {
            (a = B(a, b, c, d, e)) && f.push(n + "=" + a)
        });
        return f.join(b)
    },
    B = function(a, b, c, d, e) {
        if (null == a) return "";
        b = b || "&";
        c = c || ",$";
        "string" == typeof c && (c = c.split(""));
        if (a instanceof Array) {
            if (d = d || 0, d < c.length) {
                for (var f = [], g = 0; g < a.length; g++) f.push(B(a[g], b, c, d + 1, e));
                return f.join(c[d])
            }
        } else if ("object" == typeof a) return e = e || 0, 2 > e ? encodeURIComponent(C(a, b, c, d, e + 1)) : "...";
        return encodeURIComponent(String(a))
    };
var D = function(a, b) {
        this.g = a;
        this.depth = b
    },
    F = function() {
        var a = z(),
            b = Math.max(a.length - 1, 0),
            c = A(a);
        a = c.i;
        var d = c.j,
            e = c.g,
            f = [];
        c = function(a, b) {
            return null == a ? b : a
        };
        e && f.push(new D([e.url, e.h ? 2 : 0], c(e.depth, 1)));
        d && d != e && f.push(new D([d.url, 2], 0));
        a.url && a != e && f.push(new D([a.url, 0], c(a.depth, b)));
        var g = m(f, function(a, b) {
            return f.slice(0, f.length - b)
        });
        !a.url || (e || d) && a != e || (d = v(a.url)) && g.push([new D([d, 1], c(a.depth, b))]);
        g.push([]);
        return m(g, k(E, b))
    },
    E = function(a, b) {
        var c = p(b, function(a, b) {
                return Math.max(a, b.depth)
            }, -1),
            d = q(c + 2);
        d[0] = a;
        l(b, function(a) {
            return d[a.depth + 1] = a.g
        });
        return d
    },
    G = function() {
        var a = F();
        return m(a, function(a) {
            return B(a)
        })
    };
var H = function(a) {
        try {
            var b = G();
            b.pop();
            for (var c = 2083 - a.length - 5, d = 0; d < b.length; d++) {
                var e = encodeURIComponent(b[d]);
                if (e.length <= c) return a + "&rfl=" + e
            }
            return 0 < b.length ? a + "&rfl=" + encodeURIComponent(b[0]) : a
        } catch (f) {}
        return a
    },
    I = ["rfl"],
    J = h;
I[0] in J || !J.execScript || J.execScript("var " + I[0]);
for (var K; I.length && (K = I.shift());) {
    var L;
    if (L = !I.length) L = void 0 !== H;
    L ? J[K] = H : J[K] && J[K] !== Object.prototype[K] ? J = J[K] : J = J[K] = {}
};
}).call(this); < /script><script>var url = 'https:/ / googleads.g.doubleclick.net / dbm / ad ? dbm_c = AKAmf - De - a13GQOgxcsvNA_kt2mIAU23iPG2kcRl3CNr - x3OCBBLiAGRgP5lzLmaDxPDUCWexlxv & dbm_d = AKAmf - B - Opc - bZuekFhoUqfGJ1Oytts7RfINCRmnUFi7GM0Ch1KSdaJqeAvFJ4HKAOnVDoYZRCb1mt_7tA93Htz4KPw3idKxCABKGME02YPdF0YIn4pvoXwua0FszWhh2PabnD2aNE9aTO9y8rVXf - 7 nVTUQprJBZ6QcLqXAGuop9VAkgCwGPkEcHUMCwIim7JsjJYAX9VLufM - AfoNaCDzd7hS - IIoSOcJG_0qV5V1tgBckhf2iePpT9c_Tu3CtS5WqDQKX2Re1PqaOdY22VUClWbngN3iZT4uVqXjrL7KBazVMOXfCwOgPM_ - xya34eJtmDvb7X2CAgnKpZYCBgsTjgjBcijY1cb3kI4NLykfWHJQavsVZXGq26hLwX3XZde2DrlI8g - hXbhQ3Ctl_1J8Sk2dkEUFlwO_6b_jj3jugkcTVZgUfggnaeU89uidOJbjoC74Zn9MbPgRECeyI6aYvmKlsjrxsHxgUL1qofHzAZu8XSAYIMtzIaEx9m6vSQV3TGTPQk1AspRgKhW4XTEBbl9nYkx0HOcy_bYRtBoj12Br6o_jQvxoWEUirOZGqFEFQO6kdTjTn2nM96g0lJO - jS62WlmMDaOfY2PeDtr6qSAZH1jZC - Ka6l8eZs7Gh0j8uRZeSB5jRAT3bUCTSNFaJ3z03PluyV8XEjBxbkBLAcHIhiKB6XHJDak_rEGUXM6Sws1S318DCrm3YPUJF9HKR92j_AesoLWPUcDwcDoLLvHAvete7qGLRvPtam7RRaUxqCjd1a_Fy8j - NoyGiHcVhCcd_xyZjWjTXHk8NsWRE_HQ93BkAymLGntfDt71DV4TS9pn - yk7_tl_ZPrz_ILy_eiLb - 2 cXdLyffYvyITaZTpiuhBGzPb2TFiBEQ - wpyZoyI76aWHwZ8FSlCtgXDeV5FL8UAFWOK7cYHKdfdfjxuMszqgWV - 25 aXfHFyKZjKAFhW_bGX_kDu0DYoKv1HmKQUT2dcvBZ3Aa5Gjg3e9toAk - FlN1B - bk - 4 BF9 - wA2rrcdsTmE_3rMe0PKUHgNwVjYNTsnRWQLwdveMN3cwGySm1ZNVxmWQuUFhOKngMvrVGg2gA6uoEbyoqHKlzUg - lmhn3pNNBmFUSDcOneXIHySNZ5CJcRH9vbzJk6qHbQw_xyAYT6ouS24jyErcTml5RmFXC2bWyFajDImDEC7eoEMTISqmNk7HLVPciJj29yL2e2mNbLcSwbfKMpjZUgMYnHegL7FtQFGkEunOIk0_1JTP5mN6gCu6Ubcxl67yQ7MPkr75XIQ0bn_v1_CCm93IvBfosu_ce2BOo - t2DqlKJRA4ALqLgyfR0EtS4TPvwAfjDzJz0VPiKh9D0hOAdHSqNcQPO9TYBjs1oIIcO0NN7XHeHU65qYneqFMwg1 - ifdwZA - XiYwy7E00gjifd2V - dXONblYuvwv5u5mOckjzGYVsNWMyWquUalHVbeGTZ66bigfVUQqZtU9xmTxoAg6Um7mlE - aIn8gK9uE1aPiX9V6V4mP1utjzSxAg1BuptHV0QHEclmqX8nEwDQzkZcu12byxEZHOA8Pn07CpwW7NAHH - RAnZXxqq0gMJr0U4LKzbOpTw3ervKvpzq4S - w8bLgFwHJEVudHJNTP8JhGzw8ZI3Y5iqPWVoj4G7pVj2mrGtCnftRIwq_TnI4VPgLMsckYHyWUzFDvC4BbNnHCdGSfY6fgQHJiApjtl2awetA5Cl_KMX3R_a9c_vNlX64NJlYN7Dd7Bp4mkMbeUpndbr - K1yG8zH - UW_nVEl4UYYHM - iyHOvjPqjqxllMrhH8 - MiEPfMILIsHLf4L9cb1XiqSlt6QDrrdh0hSOENLQWlY_cH0SMiFYkE68_GWCLwW9rnqo4UFb2972Lbxqc - FJJbL2OkOcO5p5Lk_TXpJCFOoUUQ9qpYv6t6Apk0MF9rI2yyZc5VECAyLLM9S5leemj25rjdHufzivrxz4btYDYhdRuvCK4reGcb2ufjGSUjY_yxCICjw3 - a9 - ErHrbBDTBkwhtwaeies62ZVlaStQgKZCPJLqWvMQM85XkWtsiAWECLFlCo6txRjrlbg4hafbqbKG_FOsF2Ed688gjO - UhxckR_WAz4MNIRcNB3h3ei8xfdFoaUC0X2pECW_Q & cid = CAASEuRoW8r3ljADMO5UzLnNC15zgw ';document.write(' < script src = "' + (window.rfl ? window.rfl(url) : url) + '" > < /s' + 'cript>');</script > < IFRAME src = "https://googleads.g.doubleclick.net/xbbe/pixel?d=CN2EdRCtjXUY5-SmITAB&v=APEucNXa9ZtvaCPkERpDn_x13H7ekZcWPzCoSmh8JkFvYV9FG1wNnfEma8zG4JiiC-ZPerKGzpUu"
style = "display:none" > < /IFRAME></div > < /div><script src="https:/ / tpc.googlesyndication.com / pagead / js / r20171129 / r20110914 / client / ext / m_window_focus_non_hydra.js " async></script><script>function initWindowFocus() {window['window_focus_for_click'] =wfocusnhinit("
https: //googleads.g.doubleclick.net/pagead/conversion/?ai\x3dCz6n3i4YmWqDhFNi3YZeCotgPyvCk2U6gte6VqgaLiP2UzwgQASCrqsslYMPcpIWYGKAB2In8jgPIAQmpArKo6M1FIoA-qAMByAMCqgT2AU_Q9c27YFDlaEMHKQ-mjzKZTodQVNA9qkqiAoj4X3GBaOgcI5-1jc4krH2RH-1oHxbST44G9FVN1TG0ylLUi4x63V0B0Fa84ltNumcd4TL1Cin_Q0qx1AgIHFRs7hI8X3PRaMi3oN04vKDon-a1OIq1cbgOTuQ6l21l3fgfKIvtVj-0xrqP1Q-RP9Zd_fGMn_SKi6Z_pLWqtEQFVP8fTuQH_JIhamdh-XqRBwFmbHACtchLGGphQe7O-MbA_HbvFQ5N96oCAjCr8g8Oo2Hf_6ISh_nbWdpibzHRQyEhLhjCFR-Jod1sZH7SkA1vndMrXwOfYcuMIOAEA5AGAaAGTIAHkPaDcagHpr4b2AcA0ggHCIBhEAEYAoAKAcgT-eqhAtATANgTDQ\x26sigh\x3dpYbQmH0_KfU","i4YmWo-CFMSbYvfKnqAH","CODS7tPl8tcCFdhbGAodF4EI-w",true,true,true,false,false,0);}if (window.wfocusnhinit) {initWindowFocus();} else {window['google_wf_async'] = initWindowFocus;}</script><iframe scrolling="no" frameborder=0 height=0 width=0 src="https://pagead2.googlesyndication.com/pagead/s/cookie_push.html#aHR0cHM6Ly9waXhlbC5ldmVyZXN0dGVjaC5uZXQvMS9tP3VybD1odHRwcyUzQSUyRiUyRmNtLmcuZG91YmxlY2xpY2submV0JTJGcGl4ZWwlM0Znb29nbGVfbmlkJTNEZXZlcmVzdCUyNmdvb2dsZV9obSUzRF9fRUZHU1VSRkVSX1VTQjY0X18lMjZnb29nbGVfcHVzaCUzREFITkYxM0lSRk8yTDIxM2d1Zkxyb2tGZjNlaHFNN3FnMm5oLU1WY1ZpRDBWTEEmZ29vZ2xlX2dpZD1DQUVTRUxENnQwbjVHUUJxcTRocGNiNXd3QW8mZ29vZ2xlX2N2ZXI9MQ==,aHR0cHM6Ly9jbS5nLmRvdWJsZWNsaWNrLm5ldC9waXhlbC9hdHRyP2Q9QUhORjEzSjhmdlBka1BXbnA2R0dTOHd2VHk2RVRwYmUyQnFQ" style="position:absolute"></iframe><script src="https://tpc.googlesyndication.com/pagead/js/r20171129/r20110914/activeview/osd_listener.js"></script><script type="text/javascript">osdlfm(-1,'','BlhC_i4YmWqDhFNi3YZeCotgPAKC17pWqBgAAEAE4AcgBCcgDAuAEA6AGTNIIBQiAYRABwhMGGNiJ_I4D','',2121935053,true,'ud\x3d1\x26opac\x26la\x3d0\x26alp\x3dai\x26alh\x3d3099037153\x26',3,'CAASEuRoW8r3ljADMO5UzLnNC15zgw','//pagead2.googlesyndication.com/activeview?avi\x3dBlhC_i4YmWqDhFNi3YZeCotgPAKC17pWqBgAAEAE4AcgBCcgDAuAEA6AGTNIIBQiAYRABwhMGGNiJ_I4D\x26cid\x3dCAASEuRoW8r3ljADMO5UzLnNC15zgw');</script><script src="https://tpc.googlesyndication.com/pagead/js/r20171129/r20110914/client/ext/m_qs_click_protection.js"></script><script>googqscp.init([[[[null,500,99,2,8,null,null,null,1]]],null,0,1,0,0,null,null,0]);</script><img src="//www.google.com/ads/measurement/l?ebcid=ALh7CaRq4rJ_ofYk6KvK7tf08N4uD_A_WFrpK-n9kA0Rc3KFZYB76zyORMIrpYV6wk2zWZ5hI1E12uo7lb25_XUxviPU8Qxb6g" style="display:none;"></img><script>if (window.top && window.top.postMessage) {window.top.postMessage('{"googMsgType":"adpnt"}','*');}</script><div style="display:none" data-google-query-id="CODS7tPl8tcCFdhbGAodF4EI-w"></div><div style="bottom:0;right:0;width:86px;height:250px;background:initial !important;position:absolute !important;max-width:100% !important;max-height:100% !important;pointer-events:none !important;image-rendering:-moz-crisp-edges !important;z-index:2147483647;background-image:url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACsAAAAWBAMAAACrl3iAAAAABlBMVEUAAAD+AciWmZzWAAAAAnRSTlMAApidrBQAAAB9SURBVBjTbZABDkAxBEPrBu5/2v/RYsssk8mKB/A2K4PFsyPA8/f37j5RKpAnEhjFT8jC55tRq+1WY/mu3STKKZK2JNncwGJh7UIGOSKnOtgkLBKI2TVnN6EcgNIWiNrEbVIOOpVvX8XUey3+3KDcUteMg+EHO3Fmg+qQqg9OgAWv7WZrcQAAAABJRU5ErkJggg==') !important"></div></body></html>
                                    

#7 JavaScript::Write (size: 6, repeated: 2) - SHA256: aac32651b10f567c461b9b4f255d6fb1fa6859b5368d8bd9a51af920ab21cf23

                                        < /div>
                                    

#8 JavaScript::Write (size: 351, repeated: 1) - SHA256: 3e756f71fe9430478d14b6dd3eb52da476891cf6c23c64cbfc5272aaef3097f2

                                        < a href = '//www.liveinternet.ru/click'
target = _blank > < img src = '//counter.yadro.ru/hit?t23.6;r;s1176*885*24;uhttp%3A//www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy;0.5610575980447974'
alt = ''
title = 'LiveInternet: ?>:070=> G8A;> ?>A5B8B5;59 70 A53>4=O'
border = '0'
width = '88'
height = '15' > < /a>
                                    

#9 JavaScript::Write (size: 1491, repeated: 1) - SHA256: 812e15c509fc81e2d6f34c679aff5e40d9ff3a3c15586ab80bc2caced977f34c

                                        < a target = "_blank"
href = "https://adclick.g.doubleclick.net/pcs/click?xai=AKAOjsvI6zHW1PUyyFlCeE4fZPTDoKeVyXiF2OP4nCbn6p1Qv5GMsCU-rJwOwDfr9c05zf19_T7BGdLK6QkEzjpiaWPdNbq0eTQDm7__n-1eYIoSu3Cne0NT0p-rU9FVyANut77COerlUouHHXM84QRm8H1Gmm5toHGF-ChOViMQcaVq-lcKulDmMuisvhuUw_JJ3DpikZvP3wEE9w0V5fC7zYhh4c-fiGqt7RDv4tsU2vM2n6Bmc_3k99Nf-QHLUG3MANDB1UCVFf7I2jPPA2zHRdf1-MntTPqNZWDOLg54kv2b2iKf0t8VREDolJdjinAjLSdeq-3YAR1tLqkB5hII9PuX7nrPGLLoop7oLFUEQe4uWLrgwGvNOWpF42S6FiauZpg29W-LrFRmZGBK4gGiPyRbQh3l3M_HuFfn-6zhflolgbtfumGL6rN1xtsEFUt_h17Om02JWasbxWGja8wlUY_LFUDpFdhmOiLthRPU78f-GKDdZglbk6y1W3WN7a2DQykn7gy2cwcBHTxg0bYTMuLBB3m-MVbbTImCWyRYe-C7kBC9CE5rhyKvnEsb_sqJSbjBsjsCKl14L8DmE1L5YuOu_BGDIwNLUCki2ZvV5HfEn8VQ6xYaYsjmFiXhX_xSzWCNykckpXm31cYh1LQ-Z8ECk-kVnBbplKX9RuOEQ02oq9-2T42x-BHvhgem-LJw-QMOTIqzWqJ2MNZuVMtOA9H-syq4fubPTzin_eCl_MS-VkxeXy2_qlyGD1bBTquxS7wJ6dhAm-9EUdLQI2lKAjUV0ZjjUTcUpcGvISS59W5UOrj2V-B1RVSJd4121Px-nhBs6P3IAWQ9sdHY-Si8YXmAkBabWdHs4T4s8R6I9pk7W4e4xjra81ZLclmHXn8r3Mth2hvFDbb1ZaaBAOyVqfB01tef845vUU45bmnjQiGN_u-2pIeu4qqfTIILdxuBoEk&amp;sai=AMfl-YRzQI4vwKUEYa6JtylHGdv3Yh6bOErTEQygSBpkIzju0iOqRqDbibmib8KxXrO3tiRh4sQwt3nHzqoArMEMPEcJt1hcRPUI5B1P&amp;sig=Cg0ArKJSzGXGfNHiR8Ja&amp;urlfix=1&amp;adurl=https://www.banknorwegian.no/Pages/Refinansiering.aspx%3Futm_source%3Ddoubleclick%26utm_medium%3Dcpm%26utm_content%3D92451703%26utm_campaign%3D14132092" > < img src = "https://s0.2mdn.net/8158789/BN_refinansiering_160x600px3.jpg"
alt = "Advertisement"
border = "0"
width = "160"
height = "600" > < /a>
                                    

#10 JavaScript::Write (size: 75, repeated: 1) - SHA256: 2b2e37f82ef37b0e35ffda44e349916f87e0611747a8e9e3aa7898d9fdbb8640

                                        < div class = "GoogleActiveViewClass"
id = "DfaVisibilityIdentifier_2602142477" >
                                    

#11 JavaScript::Write (size: 18, repeated: 1) - SHA256: 0304f6f192da1241555759cbd47b6e2f7267f1661188f93500fb12bab9c28a87

                                        < div id = "ad_unit" >
                                    

#12 JavaScript::Write (size: 26, repeated: 4) - SHA256: f70b370debd085dd9e9fb6495c796cdccf41c44574cc185dbe124f3ea8237623

                                        < html > < body > < /body></html >
                                    

#13 JavaScript::Write (size: 1398, repeated: 1) - SHA256: fc923ad7eb9028f214bb94a30f582515b86a4a4df20c57d406cb71491bbae82c

                                        < iframe id = "google_ads_frame1"
name = "google_ads_frame1"
width = "728"
height = "90"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3410491531423553&amp;output=html&amp;h=90&amp;slotname=9550307421&amp;adk=3037924571&amp;adf=807048394&amp;w=728&amp;lmt=1512473767&amp;loeid=20040001%2C38893313&amp;format=728x90&amp;url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;adsid=NT&amp;dt=1512474248428&amp;bpp=28&amp;fdt=36&amp;idt=252&amp;shv=r20171129&amp;cbv=r20170110&amp;saldr=aa&amp;correlator=571690591505&amp;frm=20&amp;ga_vid=2045014946.1512474248&amp;ga_sid=1512474249&amp;ga_hid=725952120&amp;ga_fc=0&amp;pv=2&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=75&amp;ady=280&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;eid=38893303%2C21061122%2C41667001&amp;oid=3&amp;nmo=1&amp;zm=1.02&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=1&amp;dtd=275"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#14 JavaScript::Write (size: 1425, repeated: 1) - SHA256: 6be8f7254b4e5fccf9d40fe394544d1475357ca0054983f4bcb543c508398703

                                        < iframe id = "google_ads_frame2"
name = "google_ads_frame2"
width = "580"
height = "400"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3410491531423553&amp;output=html&amp;h=400&amp;slotname=5348937028&amp;adk=1574087955&amp;adf=807048394&amp;w=580&amp;lmt=1512473767&amp;loeid=20040001%2C38893313&amp;format=580x400&amp;url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;adsid=NT&amp;dt=1512474248919&amp;bpp=33&amp;fdt=37&amp;idt=188&amp;shv=r20171129&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=728x90&amp;correlator=571690591505&amp;frm=20&amp;ga_vid=2045014946.1512474248&amp;ga_sid=1512474249&amp;ga_hid=725952120&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=75&amp;ady=1150&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;eid=38893303%2C21061122%2C41667001&amp;oid=3&amp;nmo=1&amp;zm=1.02&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=2&amp;dtd=217"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#15 JavaScript::Write (size: 1432, repeated: 1) - SHA256: 312076d60b6f2c89a9974966c5c12581429e09ea607036b59f4eeccf5f175cb8

                                        < iframe id = "google_ads_frame3"
name = "google_ads_frame3"
width = "300"
height = "600"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3410491531423553&amp;output=html&amp;h=600&amp;slotname=6457240220&amp;adk=2121935053&amp;adf=807048394&amp;w=300&amp;lmt=1512473767&amp;loeid=20040001%2C38893313&amp;format=300x600&amp;url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;adsid=NT&amp;dt=1512474250976&amp;bpp=5&amp;fdt=68&amp;idt=282&amp;shv=r20171129&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=728x90%2C580x400&amp;correlator=571690591505&amp;frm=20&amp;ga_vid=2045014946.1512474248&amp;ga_sid=1512474249&amp;ga_hid=725952120&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=787&amp;ady=397&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;eid=38893303%2C21061122%2C41667001&amp;oid=3&amp;nmo=1&amp;zm=1.02&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=3&amp;dtd=329"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#16 JavaScript::Write (size: 156, repeated: 1) - SHA256: 31277c5c781c7a0ec7aa461af013a9678d56e07c74020cb85dab271047b21c3e

                                        < script charset = "windows-1251"
type = "text/javascript"
src = "//code.directadvert.ru/data/180807.js?nnn=180807&div=DIV_DA_180807&t=0.720127611047168" > < /script>
                                    

#17 JavaScript::Write (size: 156, repeated: 1) - SHA256: f0d9c4e9ae4c3fac4825df655e822422fa85874c1d412e7da1817dedad23abfe

                                        < script charset = "windows-1251"
type = "text/javascript"
src = "//code.directadvert.ru/data/181195.js?nnn=181195&div=DIV_DA_181195&t=0.361190979197961" > < /script>
                                    

#18 JavaScript::Write (size: 2485, repeated: 1) - SHA256: 9ac83c01b61d5e647d62202f623e4f518908bbc48e6c7b89a40e04ea27e4aafd

                                        < script src = "https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-De-a13GQOgxcsvNA_kt2mIAU23iPG2kcRl3CNr-x3OCBBLiAGRgP5lzLmaDxPDUCWexlxv&dbm_d=AKAmf-B-Opc-bZuekFhoUqfGJ1Oytts7RfINCRmnUFi7GM0Ch1KSdaJqeAvFJ4HKAOnVDoYZRCb1mt_7tA93Htz4KPw3idKxCABKGME02YPdF0YIn4pvoXwua0FszWhh2PabnD2aNE9aTO9y8rVXf-7nVTUQprJBZ6QcLqXAGuop9VAkgCwGPkEcHUMCwIim7JsjJYAX9VLufM-AfoNaCDzd7hS-IIoSOcJG_0qV5V1tgBckhf2iePpT9c_Tu3CtS5WqDQKX2Re1PqaOdY22VUClWbngN3iZT4uVqXjrL7KBazVMOXfCwOgPM_-xya34eJtmDvb7X2CAgnKpZYCBgsTjgjBcijY1cb3kI4NLykfWHJQavsVZXGq26hLwX3XZde2DrlI8g-hXbhQ3Ctl_1J8Sk2dkEUFlwO_6b_jj3jugkcTVZgUfggnaeU89uidOJbjoC74Zn9MbPgRECeyI6aYvmKlsjrxsHxgUL1qofHzAZu8XSAYIMtzIaEx9m6vSQV3TGTPQk1AspRgKhW4XTEBbl9nYkx0HOcy_bYRtBoj12Br6o_jQvxoWEUirOZGqFEFQO6kdTjTn2nM96g0lJO-jS62WlmMDaOfY2PeDtr6qSAZH1jZC-Ka6l8eZs7Gh0j8uRZeSB5jRAT3bUCTSNFaJ3z03PluyV8XEjBxbkBLAcHIhiKB6XHJDak_rEGUXM6Sws1S318DCrm3YPUJF9HKR92j_AesoLWPUcDwcDoLLvHAvete7qGLRvPtam7RRaUxqCjd1a_Fy8j-NoyGiHcVhCcd_xyZjWjTXHk8NsWRE_HQ93BkAymLGntfDt71DV4TS9pn-yk7_tl_ZPrz_ILy_eiLb-2cXdLyffYvyITaZTpiuhBGzPb2TFiBEQ-wpyZoyI76aWHwZ8FSlCtgXDeV5FL8UAFWOK7cYHKdfdfjxuMszqgWV-25aXfHFyKZjKAFhW_bGX_kDu0DYoKv1HmKQUT2dcvBZ3Aa5Gjg3e9toAk-FlN1B-bk-4BF9-wA2rrcdsTmE_3rMe0PKUHgNwVjYNTsnRWQLwdveMN3cwGySm1ZNVxmWQuUFhOKngMvrVGg2gA6uoEbyoqHKlzUg-lmhn3pNNBmFUSDcOneXIHySNZ5CJcRH9vbzJk6qHbQw_xyAYT6ouS24jyErcTml5RmFXC2bWyFajDImDEC7eoEMTISqmNk7HLVPciJj29yL2e2mNbLcSwbfKMpjZUgMYnHegL7FtQFGkEunOIk0_1JTP5mN6gCu6Ubcxl67yQ7MPkr75XIQ0bn_v1_CCm93IvBfosu_ce2BOo-t2DqlKJRA4ALqLgyfR0EtS4TPvwAfjDzJz0VPiKh9D0hOAdHSqNcQPO9TYBjs1oIIcO0NN7XHeHU65qYneqFMwg1-ifdwZA-XiYwy7E00gjifd2V-dXONblYuvwv5u5mOckjzGYVsNWMyWquUalHVbeGTZ66bigfVUQqZtU9xmTxoAg6Um7mlE-aIn8gK9uE1aPiX9V6V4mP1utjzSxAg1BuptHV0QHEclmqX8nEwDQzkZcu12byxEZHOA8Pn07CpwW7NAHH-RAnZXxqq0gMJr0U4LKzbOpTw3ervKvpzq4S-w8bLgFwHJEVudHJNTP8JhGzw8ZI3Y5iqPWVoj4G7pVj2mrGtCnftRIwq_TnI4VPgLMsckYHyWUzFDvC4BbNnHCdGSfY6fgQHJiApjtl2awetA5Cl_KMX3R_a9c_vNlX64NJlYN7Dd7Bp4mkMbeUpndbr-K1yG8zH-UW_nVEl4UYYHM-iyHOvjPqjqxllMrhH8-MiEPfMILIsHLf4L9cb1XiqSlt6QDrrdh0hSOENLQWlY_cH0SMiFYkE68_GWCLwW9rnqo4UFb2972Lbxqc-FJJbL2OkOcO5p5Lk_TXpJCFOoUUQ9qpYv6t6Apk0MF9rI2yyZc5VECAyLLM9S5leemj25rjdHufzivrxz4btYDYhdRuvCK4reGcb2ufjGSUjY_yxCICjw3-a9-ErHrbBDTBkwhtwaeies62ZVlaStQgKZCPJLqWvMQM85XkWtsiAWECLFlCo6txRjrlbg4hafbqbKG_FOsF2Ed688gjO-UhxckR_WAz4MNIRcNB3h3ei8xfdFoaUC0X2pECW_Q&cid=CAASEuRoW8r3ljADMO5UzLnNC15zgw&rfl=3%2C%2Chttp%253A%252F%252Fwww.t.ks.ua%252Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy%240" > < /script>
                                    

#19 JavaScript::Write (size: 124, repeated: 1) - SHA256: 24fe205c971d280a100024b37af1d639901ae267438044b9b5a3d1c77ddd9dcd

                                        < script type = "text/javascript"
src = "http://c.bigmir.net/?o1&v16917866&s16916894&t0&c1&n583799&w0&m10&y1&d24&r1176" > < /script>
                                    

#20 JavaScript::Write (size: 7283, repeated: 1) - SHA256: 85ad484a0d55d6f636bff435232708958d34a76ba4d0af02689b0c0475530066

                                        < style > div, ul, li {
    margin: 0;padding: 0;
}.abgc {
    display: block;height: 15 px;overflow: hidden;position: absolute;right: 16 px;top: 0 px;text - rendering: geometricPrecision;width: 15 px;z - index: 9020;
}.abgb {
    display: block;height: 15 px;width: 15 px;
}.abgc {
    cursor: pointer;
}.cbb {
    background - image: url('https://pagead2.googlesyndication.com/pagead/images/x_button_blue2.png');
    background - repeat: no - repeat;
    background - position: top right;
    cursor: pointer;
    height: 15 px;
    width: 15 px;
    z - index: 9020;
}.cbb: hover {
    background - image: url('https://pagead2.googlesyndication.com/pagead/images/x_button_dark.png');
    cursor: pointer;
}.abgb {
    position: absolute;right: 0 px;top: 0 px;
}.cbb {
    position: absolute;right: 0 px;top: 0 px;
}.abgc img {
    display: block;
}.abgc svg {
    display: block;
}.abgs {
    display: none;height: 100 % ;
}.abgl {
    text - decoration: none;
}.abgi {
    fill - opacity: 1.0;
    fill: #00aecd;stroke:none;}.abgbg{fill-opacity:1.0;fill:# cdcccc;
    stroke: none;
}.abgtxt {
    fill: black;font - family: 'Arial';font - size: 100 px;overflow: visible;stroke: none;
}.abgac {
    position: fixed;left: 0 px;top: 0 px;z - index: 9100;display: none;width: 100 % ;height: 100 % ;background - color: # FAFAFA;
} < /style><div id=abgc class=abgc dir='ltr' aria-hidden="true"><div id=abgb class="abgb"></div > < div id = abgs class = abgs > < a id = abgl class = abgl href = "https://www.google.com/url?ct=abg&amp;q=https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy%26gl%3DNO%26hl%3Dru%26ai0%3D&amp;usg=AFQjCNFskrbDWMdhAybu1OlpUg1Q7wXCYQ"
target = _blank > < /a></div > < /div><div id="cbb" class="cbb" aria-hidden="true"></div > < div id = "mute_panel"
aria - hidden = "true" > < /div><div id="abgac" class="abgac" aria-hidden="true"></div > < script > document.write('\n\x3cscript\x3evar abgp={hw:15,sw:109,hh:15,sh:15,himg:\'https://pagead2.googlesyndication.com\'+\'/pagead/images/abg/icon.png\',simg:\'https://pagead2.googlesyndication.com\'+\'/pagead/images/abg/ru.png\',alt:\'Ads by Google\',t:\' 5:;0<0 >B\',tw:49,t2:\'Google\',t2w:36,tbo:0,att:\'adsbygoogle\',ff:\'\',halign:\'right\',fe:false,iba:false,lttp:false,uic:true,uit:true,ci:\'\',icd:{\x22creatives\x22:[],\x22height\x22:600,\x22width\x22:160,\x22attribution\x22:{\x22user_feedback_data\x22:{\x22mute_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22pub_feedback_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22conversion_url\x22:\x22https://googleads.g.doubleclick.net/pagead/conversion/?ai\x3dCz6n3i4YmWqDhFNi3YZeCotgPyvCk2U6gte6VqgaLiP2UzwgQASCrqsslYMPcpIWYGKAB2In8jgPIAQmpArKo6M1FIoA-qAMByAMCqgT2AU_Q9c27YFDlaEMHKQ-mjzKZTodQVNA9qkqiAoj4X3GBaOgcI5-1jc4krH2RH-1oHxbST44G9FVN1TG0ylLUi4x63V0B0Fa84ltNumcd4TL1Cin_Q0qx1AgIHFRs7hI8X3PRaMi3oN04vKDon-a1OIq1cbgOTuQ6l21l3fgfKIvtVj-0xrqP1Q-RP9Zd_fGMn_SKi6Z_pLWqtEQFVP8fTuQH_JIhamdh-XqRBwFmbHACtchLGGphQe7O-MbA_HbvFQ5N96oCAjCr8g8Oo2Hf_6ISh_nbWdpibzHRQyEhLhjCFR-Jod1sZH7SkA1vndMrXwOfYcuMIOAEA5AGAaAGTIAHkPaDcagHpr4b2AcA0ggHCIBhEAEYAoAKAcgT-eqhAtATANgTDQ\\u0026sigh\x3dpYbQmH0_KfU\\u0026cid\x3dCAASEuRoW8r3ljADMO5UzLnNC15zgw\x22,\x22close_button_token\x22:\x22x74U-fpfA9cIoLXulaoGEI_H_cQDGMH5oXFCAEgAWABwAQ\x22,\x22interaction_conversion\x22:{\x22label\x22:\x22user_feedback_menu_interaction\x22,\x22label_instance\x22:\x22\x22,\x22include_close_button_token\x22:false},\x22survey_header\x22:\x22>G5<C 20< =5 ?>=@028;0AL MB0 @5:;0<0?\x22,\x22back_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png\x22,\x22mute_confirmation_header\x22:\x22;03>40@8< 70 >B7K2!\x22,\x22mute_confirmation_text\x22:\x22K ?@>25@8< MB> >1JO2;5=85 8 A45;05< 2A5 2>7<>6=>5 4;O ?>2KH5=8O :0G5AB20 @5:;0<K.\x22,\x22pub_feedback_confirmation_header\x22:\x22;03>40@8< 70 >B7K2!\x22,\x22pub_feedback_confirmation_text\x22:\x22K ?@>25@8< >1JO2;5=8O =0 MB>< A09B5 =0 >A=>20=88 20H53> >B7K20.\x22,\x22undo_text\x22:\x22B<5=0\x22,\x22closing_countdown_text\x22:\x220:@KB85 >1JO2;5=8O: %1$d\x22,\x22attribution_text\x22:\x22Ads by Google\x22,\x22attribution_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/abg_blue.png\x22,\x22attribution_destination_url\x22:\x22https://www.google.com/url?ct\x3dabg\\u0026q\x3dhttps://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy%26gl%3DNO%26hl%3Dru%26ai0%3D\\u0026usg\x3dAFQjCNFskrbDWMdhAybu1OlpUg1Q7wXCYQ\x22,\x22ad_feedback_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png\x22,\x22is_rtl_language\x22:false,\x22feedback_options\x22:[{\x22text\x22:\x22>60;>20BLAO =0 >1JO2;5=85\x22,\x22conversion\x22:{\x22label\x22:\x22user_feedback_menu_option\x22,\x22label_instance\x22:\x221\x22,\x22include_close_button_token\x22:true},\x22survey\x22:{\x22header\x22:\x22>G5<C 20< =5 ?>=@028;0AL MB0 @5:;0<0?\x22,\x22options\x22:[{\x22text\x22:\x225 8=B5@5A=>\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x227\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22 5:;0<0 70:@K205B :>=B5=B\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x223\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x22@>A<>B@5=> =5A:>;L:> @07\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x222\x22,\x22include_close_button_token\x22:true}},{\x22text\x22:\x225?@85<;5<0O @5:;0<0\x22,\x22conversion\x22:{\x22label\x22:\x22mute_survey_option\x22,\x22label_instance\x22:\x228\x22,\x22include_close_button_token\x22:true}}]},\x22undo_conversion\x22:{\x22label\x22:\x22user_feedback_undo\x22,\x22label_instance\x22:\x221\x22,\x22include_close_button_token\x22:true}}],\x22mute_panel_data\x22:{\x22adchoices_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png\x22,\x22adchoices_button_text\x22:\x22K1>@ @5:;0<K\x22,\x22closed_message_text\x22:\x221JO2;5=85 70:@KB> %1$s\x22,\x22enable_lightbox\x22:false,\x22google_logo_url\x22:\x22https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png\x22,\x22report_ad_button_text\x22:\x22>60;>20BLAO =0 >1JO2;5=85\x22,\x22confirmation_text\x22:\x22K ?>AB0@05<AO 1>;LH5 =5 ?>:07K20BL MB> >1JO2;5=85\x22,\x22ads_by_google_icon_url\x22:\x22https://googleads.g.doubleclick.net/pagead/images/abg/iconx2-000000.png\x22,\x22ads_by_google_button_text\x22:\x22 5:;0<0 >B Google\x22,\x22protocol_gstatic_host\x22:\x22https://www.gstatic.com\x22,\x22jake_mta_context\x22:\x22\x22,\x22overlay_message_text\x22:\x22 5:;0<0 >B %1$s\x22}}},\x22flags\x22:[{\x22name\x22:\x22enable_settings_click_collapse\x22,\x22value\x22:\x22true\x22},{\x22name\x22:\x22jake_enable_native_scroll_and_small_grid\x22,\x22value\x22:\x22true\x22},{\x22name\x22:\x22defer_jake_mta_render_to_expand\x22,\x22value\x22:\x22true\x22},{\x22name\x22:\x22jake_ui_extension\x22,\x22value\x22:\x22jake_default_ui\x22},{\x22name\x22:\x22jake_transition_timeout\x22,\x22value\x22:\x22-1\x22}]},opi:false,ti:false,mob:false,il:false,eaca:false,ejar:false,eda:false};\x3c/script\x3e'); < /script><script src="https:/ / pagead2.googlesyndication.com / pagead / js / r20171129 / r20110914 / abg.js "></script>
                                    

#21 JavaScript::Write (size: 1077, repeated: 1) - SHA256: 64adb3e9f243a42d86a463b18e720daba6b51e7503d08dcc57839d34311d7235

                                        < table cellpadding = "0"
cellspacing = "0"
border = "0"
style = "display:inline;margin-right:4px;" > < tr > < td > < div style = "font-family:Tahoma;font-size:10px;padding:0px;margin:0px;" > < div style = "width:7px;float:left;background:url('http://i.bigmir.net/cnt/samples/default/b57_left.gif');height:17px;padding-top:2px;background-repeat:no-repeat;" > < /div><div style="float:left;background:url('http:/ / i.bigmir.net / cnt / samples /
    default / b57_center.gif ');text-align:left;height:17px;padding-top:2px;background-repeat:repeat-x;"><a href="http://www.bigmir.net/"; target="_blank" style="color:#0000ab;text-decoration:none;">bigmir<span style="color:#ff0000;">)</span>net</a>&nbsp;&nbsp;<span style="color:#71b27e;">E8BK</span>&nbsp;<span style="color:#12351d;font:10px Tahoma;">15422</span>&nbsp;<span style="color:#71b27e;">E>ABK</span>&nbsp;<span style="color:#12351d;font:10px Tahoma;">5083</span></div><div style="width:7px;float: left;background:url('
http: //i.bigmir.net/cnt/samples/default/b57_right.gif');height:17px;padding-top:2px;background-repeat:no-repeat;"></div></div></td></tr></table>
                                    


HTTP Transactions (220)


Request Response
                                        
                                            GET /v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Tue, 05 Dec 2017 11:44:06 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
X-Powered-By: PHP/5.4.28
X-Drupal-Cache: HIT
Etag: "1512473767-0"
Content-Language: ru
Cache-Control: public, max-age=3600
Last-Modified: Tue, 05 Dec 2017 11:36:07 GMT
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Vary: Cookie
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   66053
Md5:    1d0e5192c7d1fd9e06080e354833000e
Sha1:   ffb860af32d3c23a8fbe934f05ac0692d6f62895
Sha256: 74df01b3f8251eab6f57690074a9986510ec4e78c6a59793d0c028ed23ca87ee

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /sites/default/files/css/css_xE-rWrJf-fncB6ztZfd2huxqgxu4WO-qwma6Xer30m4.css HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 05 Dec 2017 11:44:06 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Thu, 26 Oct 2017 20:10:49 GMT
Etag: "d80529-8a9-55c78c4ad4329"
Accept-Ranges: bytes
Content-Length: 2217
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:06 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max compression
Size:   2217
Md5:    33785a199ae1f6968734504d91ee9a06
Sha1:   f82e3f4afea96f4a89dfaf3389f467488acce16f
Sha256: 19b6b1c8b0ffd1d96b08e55f73d7ab8a26b7f5cce39ae784acf72b50aa92465c
                                        
                                            GET /button/buttons.js HTTP/1.1 
Host: w.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         91.135.34.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=259200
Content-Encoding: gzip
Etag: W/"5a25e1a8-d748"
Expires: Fri, 08 Dec 2017 11:11:45 GMT
Server: nginx/1.10.2
Content-Length: 15094
Date: Tue, 05 Dec 2017 11:44:06 GMT
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   15094
Md5:    f048e62fea901d84bca50571a4a7e0c8
Sha1:   ce108380627520d9429752202e37c72eb6fd698b
Sha256: b3ef060e6c4b255aa94976dd3ed4cd7db49b67b8bb406725134ed92f7b9798b6
                                        
                                            GET /sites/default/files/css/css_T124PwYz2PqhOtWB-2KXncRkcnWvpFV2QDPro1jKr7U.css HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 05 Dec 2017 11:44:06 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Thu, 26 Oct 2017 20:11:40 GMT
Etag: "d8052b-132e-55c78c7c3a319"
Accept-Ranges: bytes
Content-Length: 4910
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:06 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max compression
Size:   4910
Md5:    52be67c72e861f68b6082915777af3fe
Sha1:   928d022bf0369cb2ab9ea02b78707e12fdb2788a
Sha256: 6348fd72a6a17db4f01ad985239f35b6dddf924e6af1935f29ef78103e5d1a60
                                        
                                            GET /sites/default/files/css/css_KJfKmto2dgLu2wVN4WVAUX1FbPPafKPAJEfOVjE5bvc.css HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 05 Dec 2017 11:44:06 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Thu, 26 Oct 2017 20:11:45 GMT
Etag: "d80575-8de-55c78c8051119"
Accept-Ranges: bytes
Content-Length: 2270
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:06 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max compression
Size:   2270
Md5:    dda2cb2d15371b4109fb058c9020001d
Sha1:   66fc01614a7cfc99dd266723eac8c5eb4d1b43e2
Sha256: 35b81b9d977d5fe0fa18e22ec98ae11e5f83b78384dcb1d8c531d020f01e6f58
                                        
                                            GET /sites/default/files/css/css_71D_nSUNQjr3LxFCmhxc2zIhoGcecKLALC1rdGCF51M.css HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 05 Dec 2017 11:44:06 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Thu, 26 Oct 2017 20:11:41 GMT
Etag: "d8052f-19cc-55c78c7cfdc01"
Accept-Ranges: bytes
Content-Length: 6604
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:06 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max compression
Size:   6604
Md5:    f50ca3ff45e6a988318c447b00c21c4e
Sha1:   0d53e70ebed354234d0cf122dceb6b71dd5d3e6d
Sha256: ab1f676c386238f5c8b642c63d515e2ac6daa6d332ff24ff16fa2674787709c9
                                        
                                            GET /sites/default/files/js/js_UF4GTnfveyTJGWjF2RFf_P2GspsP1qlPPx6MXRA20iE.js HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Tue, 05 Dec 2017 11:44:06 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Thu, 26 Oct 2017 20:11:45 GMT
Etag: "d80581-7979-55c78c80f7159"
Accept-Ranges: bytes
Content-Length: 31097
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:06 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max compression
Size:   31097
Md5:    3b3b9f85606ca927c7f55477613bcf55
Sha1:   1f4fc45a1ce26e891a31cfb8536333d0920b1286
Sha256: 68f2f4e538800aaf0eb0ec04a3b61c668a651c8c0c64ac0657f63661c0c0c729

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /sites/default/files/js/js_BAhqE0nsQns6shJD8cBPNaX58HANh3tzWfxSlYIKGGs.js HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Tue, 05 Dec 2017 11:44:06 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Thu, 26 Oct 2017 20:11:41 GMT
Etag: "d80533-9899-55c78c7d0ed71"
Accept-Ranges: bytes
Content-Length: 39065
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:06 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max compression
Size:   39065
Md5:    96ae3c9ddc3ca204048b52869c56d2f6
Sha1:   0f30edb386138f7108dda1270bf871bf1da1d127
Sha256: 3fd16f81d83a3b2becaf4b8722ea32c8222ddc5ab732bacba7fd0c644796830d

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /sites/default/files/favicon_1.ico HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Tue, 05 Dec 2017 11:44:06 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Sun, 14 Jul 2013 22:00:00 GMT
Etag: "d6224c-57e-4e17fdd7e9800"
Accept-Ranges: bytes
Content-Length: 1406
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:06 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   1406
Md5:    ab76eb1befabb2c908daba608f511daf
Sha1:   e1cff00c069532c3ed02790c164bd3eb9e5d012d
Sha256: 6dcd58e2922af5d20389654f39c382dbb65da8b4322325aa19286208601733f6

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /static/css/informer2/gs_informerClient.min.css HTTP/1.1 
Host: www.gismeteo.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         185.134.202.6
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 05 Dec 2017 11:44:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
Set-Cookie: old=1; Expires=Wed, 05-Dec-18 11:44:06 GMT; Domain=.www.gismeteo.ru; Path=/static/css/informer2/; Secure
Last-Modified: Wed, 14 Dec 2016 11:09:57 GMT
Etag: W/"58512885-2746"
Expires: Tue, 12 Dec 2017 11:44:06 GMT
Cache-Control: max-age=604800
Server: gis
X-DC: nord.router-ru-nord01
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2188
Md5:    ab10d547256624f9f1f1cb92d293587b
Sha1:   11ca12c9a0b94d67c3590dd3721ea545caf49a34
Sha256: 5a8268f0c2acc958c06c90a04d1b02a6fc4f7bd1987cac2eca44176c42c1d45b
                                        
                                            GET /js/api/openapi.js?74 HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:06 GMT
Last-Modified: Fri, 01 Dec 2017 12:53:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a2150c1-15c16"
Expires: Sat, 09 Dec 2017 11:44:06 GMT
Cache-Control: max-age=345600
X-Frontend: front508119
Access-Control-Expose-Headers: X-Frontend
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   26331
Md5:    f14babc6c2c9c423f551d5051ac5cf8d
Sha1:   e93d1ecca2f19ca61596e2ff81a2e5c7f7f1e585
Sha256: 78951cc4b3d73fbe41018f46420eadc6ea98f972afaedb859dd9deb2abe5136b
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 05 Dec 2017 11:44:06 GMT
Expires: Tue, 05 Dec 2017 11:44:06 GMT
Cache-Control: private, max-age=3600
Etag: 8099815292052131134
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 25341
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   25341
Md5:    15ac71605789417077eefbdeefee1c23
Sha1:   5fd95223c875981b5983863d542ec8c658f63858
Sha256: 9f85ddb781e5b5c61630a171c9c503ec0f5916756bf8d5421b62bc0a2895b437
                                        
                                            GET /sites/all/themes/th/img/logotip.png HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 05 Dec 2017 11:44:06 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Sat, 17 Aug 2013 22:00:00 GMT
Etag: "d60944-271d-4e42bd4195800"
Accept-Ranges: bytes
Content-Length: 10013
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:06 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 333 x 120, 8-bit/color RGB, non-interlaced
Size:   10013
Md5:    d1411fbdf9adc4cf7fcc3b8c37f722df
Sha1:   fdbc493d28fa3cf4ed0972e8a824beae76e41032
Sha256: 5c9b8e57919ca9bf4d5a01086816a3d09be502bf96dc7f7f2ada4b4124bcd013
                                        
                                            GET /sites/default/files/js/js_1AMzlCDQxgGquc8G2iJdT1uuMI0-iSG_YUoWQaJNnf8.js HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Tue, 05 Dec 2017 11:44:06 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Thu, 26 Oct 2017 20:11:42 GMT
Etag: "d80562-45d6-55c78c7d6e4c9"
Accept-Ranges: bytes
Content-Length: 17878
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:06 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max compression
Size:   17878
Md5:    5c5e691c0e04bc3a1a182fb31c9022a5
Sha1:   b8715e82e287e6930fbe69393acc4b223729c0cc
Sha256: e62e11eb92269ab4ae62932ca58a16da734695e98bfceaf97aeb13c4a3737bd7

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /sites/default/files/js/js_aC9776UEENPxwwbnRqzf4GfgCjW8lXfVJbboHRXuVIo.js HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Tue, 05 Dec 2017 11:44:06 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Thu, 26 Oct 2017 20:11:46 GMT
Etag: "d80588-597a-55c78c819dd51"
Accept-Ranges: bytes
Content-Length: 22906
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:06 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix, max compression
Size:   22906
Md5:    b3d046e33fbcd66c73971b114e443cf7
Sha1:   9889f1d4d5fa848021e6a0dd5b45f70bae758ded
Sha256: d86b4fc91262ca370edcbc9115cfa8884315ae716439b7077b911eb6253bc571

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /img/t.gif HTTP/1.1 
Host: informers.sinoptik.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         212.42.76.150
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:06 GMT
Content-Length: 43
Last-Modified: Thu, 10 Feb 2011 13:06:12 GMT
Connection: keep-alive
Etag: "4d53e2c4-2b"
Expires: Wed, 05 Dec 2018 11:44:06 GMT
Cache-Control: max-age=31536000, public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    df3e567d6f16d040326c7a0ea29a4f41
Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736
Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                                        
                                            GET /js3.php?title=4&wind=2&cities=303027883&lang=ru HTTP/1.1 
Host: informers.sinoptik.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         212.42.76.150
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.5.38
Expires: 0
Cache-Control: must-revalidate, post-check=0, pre-check=0
Pragma: no-store, no-cache, must-revalidate
Content-Encoding: gzip
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   607
Md5:    6f2d46407d8f6eeb92ca4be0809008fd
Sha1:   7d029900bb4415e8c67f75e921d616b56d81154e
Sha256: 3220321864f9e051aab6ebc16c5858310db713989836d9922a816e7d75c5ba70
                                        
                                            GET /sites/all/modules/vscc/images/black_arrow_left.png HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 05 Dec 2017 11:44:07 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Sat, 13 Jul 2013 22:00:00 GMT
Etag: "d60824-14b-4e16bbfa73800"
Accept-Ranges: bytes
Content-Length: 331
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:07 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 12 x 18, 8-bit/color RGBA, non-interlaced
Size:   331
Md5:    c0348f3a8f4cc0fc9a86dccff27487bf
Sha1:   c71e87aeac5afaac5df358c28fff2a6cc6caf4b2
Sha256: ffcbd92c85ec2c0918bebfb7c7b933cc6ba176d292ad6979441b0a556aa3a159
                                        
                                            GET /sites/all/modules/advpoll/nodejs.js HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Tue, 05 Dec 2017 11:44:07 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Wed, 06 Feb 2013 23:00:00 GMT
Etag: "d40d1e-0-4d5164924fc00"
Accept-Ranges: bytes
Content-Length: 0
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:07 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /sites/all/modules/vscc/images/black_pause.png HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 05 Dec 2017 11:44:07 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Sat, 13 Jul 2013 22:00:00 GMT
Etag: "d60828-af1-4e16bbfa73800"
Accept-Ranges: bytes
Content-Length: 2801
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:07 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 11 x 11, 8-bit/color RGBA, non-interlaced
Size:   2801
Md5:    bc1a8a752061da501668dae73a7b0e36
Sha1:   f14f3bddfa0039888211585875a67c33905ce12f
Sha256: c8cbb1868d0be7d157b07987cf4e819723e3eaae6efee620a0bbb7bb690a6ab3
                                        
                                            GET /sites/all/modules/vscc/images/black_arrow_right.png HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 05 Dec 2017 11:44:07 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Sat, 13 Jul 2013 22:00:00 GMT
Etag: "d60826-14a-4e16bbfa73800"
Accept-Ranges: bytes
Content-Length: 330
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:07 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 12 x 18, 8-bit/color RGBA, non-interlaced
Size:   330
Md5:    c48fbd10e4f79fa601524134f9257db8
Sha1:   a46b5f2bbebaf3396d720ab15c0fbe226b4d6169
Sha256: 2c05625feca447bee046d07a76b09f55c2a960b31348b5da736a0cf8d4b3c883
                                        
                                            GET /ru_RU/all.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: a07ef71ad4edaf00ed44f93ce5ef66ee
Etag: "d887771188a2669e0d5cb468407a8df4"
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
X-XSS-Protection: 0
X-Frame-Options: DENY
Timing-Allow-Origin: *
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
Expires: Tue, 05 Dec 2017 11:48:10 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-MD5: JITUxkQ0cMTfLliiirSeRA==
X-FB-Debug: 98R3I0FHsA1OczgmCLei8oW8O9v6Wxsy3QDAdHnuQvmYpt/LdHh6+Pr7JLiXd++DL8TAQLlCmAxY/zHw7DjVAg==
Date: Tue, 05 Dec 2017 11:44:06 GMT
Connection: keep-alive
Content-Length: 64333


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   64333
Md5:    2484d4c6443470c4df2e58a28ab49e44
Sha1:   4b8360f05d18d9e5c6109891160ad4a64abdfb81
Sha256: dcbda940b03f1cf456181be24180c75407d29f5afed05c2dc3866c9ed31fc5d4
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy
If-Modified-Since: Fri, 03 Oct 2014 00:48:42 GMT

                                         
                                         64.233.164.101
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Tue, 05 Dec 2017 10:24:12 GMT
Expires: Tue, 05 Dec 2017 12:24:12 GMT
Last-Modified: Mon, 13 Nov 2017 20:19:12 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14597
Cache-Control: public, max-age=7200
Age: 4794


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14597
Md5:    6199bd5ef36ff16dd8c35a2abdb5991c
Sha1:   beb16561dd55ab5896b230c5a116a5d819e86b34
Sha256: a3d61ef9e80a01a794fd7c2769720f2fd0e15d0458236e8e0edd411560171879
                                        
                                            GET /sites/default/files/styles/my_large/public/33_0.jpeg?itok=qk3OCZOX HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 05 Dec 2017 11:44:07 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Thu, 29 Jun 2017 14:51:11 GMT
Etag: "d9666a-ea29-5531a6e7baaad"
Accept-Ranges: bytes
Content-Length: 59945
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:07 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   59945
Md5:    2a218af5bd9677bd868f1d15f18bb45b
Sha1:   d42d0887152424b700b6ba1d5334b66eea9b5dc9
Sha256: 10cea33ec6fffd8e4c3b47665c595abdd03341429f49e04f0b467d19b52d7e08

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /sites/default/files/styles/my_large/public/34_249.jpg?itok=CFVWBaSQ HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 05 Dec 2017 11:44:07 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Thu, 29 Jun 2017 14:51:11 GMT
Etag: "d9666b-b7c3-5531a6e7c4ad5"
Accept-Ranges: bytes
Content-Length: 47043
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:07 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   47043
Md5:    bcedbc849e92c49c328fcf50ba7f903a
Sha1:   6cb4350ce6a9dd4fee822ff046d9c5367f135c31
Sha256: af80a323b4b7143f6ac2314923c552abe8def6ad41d377f6b4744f0615c4589b
                                        
                                            GET /images/marketgid_add_link.png HTTP/1.1 
Host: cdn.marketgid.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.212.201.95
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:06 GMT
Content-Length: 2307
Last-Modified: Tue, 30 May 2017 15:43:16 GMT
Connection: keep-alive
Etag: "592d9314-903"
Expires: Wed, 06 Dec 2017 11:44:06 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 145 x 13, 8-bit/color RGBA, non-interlaced
Size:   2307
Md5:    2637f10bf6720b30f1c0ab5a52b129b7
Sha1:   53ed9b06e51223eb5a0779225fcf19f42afb4c5d
Sha256: c59b55c4672ffdfe3b8f3b93ded3bd0f7d793eea2bbe352a80ef84f34cd932e1
                                        
                                            GET /show.cgi?adp=181195&div=DIV_DA_181195 HTTP/1.1 
Host: code.directadvert.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         195.161.16.133
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=windows-1251
                                        
Server: nginx/1.12.1
Date: Tue, 05 Dec 2017 11:44:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR NOR", policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
Set-Cookie: dadcm46=1; expires=Tue, 12-Dec-2017 11:44:06 GMT; path=/; domain=directadvert.ru dadcm3=1; expires=Tue, 12-Dec-2017 11:44:06 GMT; path=/; domain=directadvert.ru nid=w6EQhVomhoaLcAilLnZQAg==; expires=Wed, 05-Dec-18 11:44:06 GMT; domain=directadvert.ru; path=/
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
Access-Control-Max-Age: 1728000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   662
Md5:    5b894b3af0b4d9e96bba2701d5b6158c
Sha1:   614caaa915c85f7036855c3bbaa9818b7a7ead6a
Sha256: 5326c757a2f92619ec3d3454a3b61da94c026325cb93c2a107a999cddbc0ed11
                                        
                                            GET /show.cgi?adp=181076&div=DIV_DA_181076 HTTP/1.1 
Host: code.directadvert.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         195.161.16.133
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=windows-1251
                                        
Server: nginx/1.12.1
Date: Tue, 05 Dec 2017 11:44:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR NOR", policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
Set-Cookie: dadcm46=1; expires=Tue, 12-Dec-2017 11:44:06 GMT; path=/; domain=directadvert.ru dadcm3=1; expires=Tue, 12-Dec-2017 11:44:06 GMT; path=/; domain=directadvert.ru nid=w6EQhVomhoaLcAilLnZRAg==; expires=Wed, 05-Dec-18 11:44:06 GMT; domain=directadvert.ru; path=/
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
Access-Control-Max-Age: 1728000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   665
Md5:    c5257f7da650c9d249f4252de30b8f05
Sha1:   eacad1fcd61368880191b070e6ad8f079f73bf20
Sha256: 895058ec79689e22e1e8a78f8b8bff0a0d680a1741fc16a217ed021ddbecf61a
                                        
                                            GET /show.cgi?adp=181074&div=DIV_DA_181074 HTTP/1.1 
Host: code.directadvert.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         195.161.16.133
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=windows-1251
                                        
Server: nginx/1.12.1
Date: Tue, 05 Dec 2017 11:44:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR NOR", policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
Set-Cookie: dadcm46=1; expires=Tue, 12-Dec-2017 11:44:06 GMT; path=/; domain=directadvert.ru dadcm3=1; expires=Tue, 12-Dec-2017 11:44:06 GMT; path=/; domain=directadvert.ru nid=w6EQhVomhoaKZwipF8rIAg==; expires=Wed, 05-Dec-18 11:44:06 GMT; domain=directadvert.ru; path=/
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
Access-Control-Max-Age: 1728000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   664
Md5:    d36fdc2ecaaef09286d77cac22a0caac
Sha1:   aabbdd87d6c2535f2649f5fbd4ef6a7be9222eda
Sha256: 9bfdb9a0ab1e24c0c97f04602e85b8e325805642986d57f1a163449fc05836ad
                                        
                                            GET /show.cgi?adp=180807&div=DIV_DA_180807 HTTP/1.1 
Host: code.directadvert.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         195.161.16.133
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=windows-1251
                                        
Server: nginx/1.12.1
Date: Tue, 05 Dec 2017 11:44:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR NOR", policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
Set-Cookie: dadcm46=1; expires=Tue, 12-Dec-2017 11:44:06 GMT; path=/; domain=directadvert.ru dadcm3=1; expires=Tue, 12-Dec-2017 11:44:06 GMT; path=/; domain=directadvert.ru nid=w6EQhVomhoaJ2wioFfOiAg==; expires=Wed, 05-Dec-18 11:44:06 GMT; domain=directadvert.ru; path=/
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
Access-Control-Max-Age: 1728000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   663
Md5:    f2ac4ad584385372e79ba45ab31cee5b
Sha1:   4b3d5d7b1c35c5da57418fa1af4f68ce86db21c8
Sha256: b5685bfc3e3732666dad68d2145e0c0d74a095dd971722aa2765ac1ee5315c27
                                        
                                            GET /show.cgi?adp=180809&div=DIV_DA_180809 HTTP/1.1 
Host: code.directadvert.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         195.161.16.133
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=windows-1251
                                        
Server: nginx/1.12.1
Date: Tue, 05 Dec 2017 11:44:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR NOR", policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
Set-Cookie: dadcm46=1; expires=Tue, 12-Dec-2017 11:44:06 GMT; path=/; domain=directadvert.ru dadcm3=1; expires=Tue, 12-Dec-2017 11:44:06 GMT; path=/; domain=directadvert.ru nid=w6EQhVomhoaLcAilLnZSAg==; expires=Wed, 05-Dec-18 11:44:06 GMT; domain=directadvert.ru; path=/
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
Access-Control-Max-Age: 1728000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   663
Md5:    37e5cc0db7c97a66936e44ed7acab8e5
Sha1:   e5ee6f4a17381b5b14bb41281249479065d6b22c
Sha256: f2d3ac83c028365bbf10368590b5f9de458f3427399ad41956ad1ac17f4d56a3
                                        
                                            GET /show.cgi?adp=181068&div=DIV_DA_181068 HTTP/1.1 
Host: code.directadvert.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         195.161.16.133
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=windows-1251
                                        
Server: nginx/1.12.1
Date: Tue, 05 Dec 2017 11:44:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR NOR", policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
Set-Cookie: dadcm46=1; expires=Tue, 12-Dec-2017 11:44:06 GMT; path=/; domain=directadvert.ru dadcm3=1; expires=Tue, 12-Dec-2017 11:44:06 GMT; path=/; domain=directadvert.ru nid=w6EQhVomhoaKZwipF8rJAg==; expires=Wed, 05-Dec-18 11:44:06 GMT; domain=directadvert.ru; path=/
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
Access-Control-Max-Age: 1728000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   665
Md5:    7a5598db235d7f674f748c552b096de4
Sha1:   b0e6222b5ff16cd2055aa85e870fbc7f2f43be78
Sha256: 6420de8d1bfdb9e1fca1a301caaa402cbcded0171296f5342978c203d84c6e68
                                        
                                            GET /sites/default/files/styles/thumb_170x96/public/qyddllcx0xk.jpg?itok=AMWX7rKt HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 05 Dec 2017 11:44:07 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Tue, 05 Dec 2017 04:12:34 GMT
Etag: "d99141-139b-55f900b5f2cd5"
Accept-Ranges: bytes
Content-Length: 5019
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:07 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   5019
Md5:    a1d77fbf88f584d5ad0f0efed2bfbdf2
Sha1:   bc9f92fdf726d0f2359d0b305ae5182aa791a8ca
Sha256: fe565cb7a17da38995080ba30907bf9ed59710a1173f1ea2c52ec0b8cb4cd049
                                        
                                            GET /sites/default/files/styles/thumb_170x96/public/1512113651_1_0.jpg?itok=EmPu7y41 HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 05 Dec 2017 11:44:07 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Fri, 01 Dec 2017 14:09:23 GMT
Etag: "d99056-12f2-55f47ea652d46"
Accept-Ranges: bytes
Content-Length: 4850
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:07 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   4850
Md5:    8f278ca11f2dc4bed83a0c0a194e43b9
Sha1:   a226154333975617df1f6c92e2d01c00312f53c1
Sha256: 63055d746e0d5b12506dd4f277200a912529e37b8a01c194ead3294662a0ffa3
                                        
                                            GET /sites/default/files/styles/thumb_170x96/public/1512140231_1512039988_img_20171127_100138.jpg?itok=PIrDeGtD HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 05 Dec 2017 11:44:07 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Sat, 02 Dec 2017 07:03:50 GMT
Etag: "d99080-12d9-55f56165fcf1b"
Accept-Ranges: bytes
Content-Length: 4825
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:07 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   4825
Md5:    55f9f43eb377aef6ea9f769b4c8f7802
Sha1:   c781ef35d4fbf466566aba68e6ce85a5f0ebf60d
Sha256: 46c0339baee38123635c4f58578280f2c8d468e7e36003bc0afd095e37b124b4
                                        
                                            GET /show.cgi?adp=221528&div=DIV_DA_221528 HTTP/1.1 
Host: code.directadvert.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         195.161.16.133
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=windows-1251
                                        
Server: nginx/1.12.1
Date: Tue, 05 Dec 2017 11:44:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR NOR", policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
Set-Cookie: dadcm46=1; expires=Tue, 12-Dec-2017 11:44:06 GMT; path=/; domain=directadvert.ru dadcm3=1; expires=Tue, 12-Dec-2017 11:44:06 GMT; path=/; domain=directadvert.ru nid=w6EQhVomhoaLcAilLnZUAg==; expires=Wed, 05-Dec-18 11:44:06 GMT; domain=directadvert.ru; path=/
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
Access-Control-Max-Age: 1728000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   665
Md5:    a0816e2ca491a61a033ec1839e20c6bb
Sha1:   d6767175c2fa4bedc5bcd41de2d6340224b3df1e
Sha256: b99588c003fde8611c8ac1bd574ac7f7a4251584847240cbf5bec3711025a27f
                                        
                                            GET /sites/default/files/styles/thumb_170x96/public/1512408955_warning_800.png?itok=pgrhcz0_ HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 05 Dec 2017 11:44:07 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Tue, 05 Dec 2017 03:56:15 GMT
Etag: "d99134-54fa-55f8fd10a3115"
Accept-Ranges: bytes
Content-Length: 21754
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:07 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 170 x 96, 8-bit/color RGBA, non-interlaced
Size:   21754
Md5:    d03299865b53ff0da8a1c1bbb1a7f46f
Sha1:   e82dae30d738cbc1eee503230f3135d6bf4927b4
Sha256: ff30765e60c40be71eac9fd557be969ab9ea7a6348d58c43497a847744859524

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /sites/all/themes/th/img/footer-logo.png HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 05 Dec 2017 11:44:07 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Sat, 13 Jul 2013 22:00:00 GMT
Etag: "d60940-1c26-4e16bbfa73800"
Accept-Ranges: bytes
Content-Length: 7206
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:07 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 217 x 70, 8-bit/color RGBA, non-interlaced
Size:   7206
Md5:    51f4dd092f2980673fd64744b3906d24
Sha1:   09b9a464d63ff9ce9a631bdbc8248d5c0f270aeb
Sha256: b1625e8390ccfdeffcb799b1da43065bae55f34d6eb40fb91d9a1c1e0e828fe7
                                        
                                            GET /sites/default/files/2015/300x300_vukyp.gif HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 05 Dec 2017 11:44:07 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Thu, 09 Nov 2017 13:42:14 GMT
Etag: "de09be-cffb-55d8cf8cd5b26"
Accept-Ranges: bytes
Content-Length: 53243
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:07 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 300
Size:   53243
Md5:    62061119f4132cb8b71368ea93a07f8c
Sha1:   d3a59772164df9df75666c85028e1d206af3cde0
Sha256: cd74f220408e5acd9c875e9ee296d67735f32dc1e6e91e35ac084c0a82fe87a6
                                        
                                            GET /r/collect?v=1&_v=j66&aip=1&a=725952120&t=pageview&_s=1&dl=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&ul=en-us&de=UTF-8&dt=%D0%92%20%D0%B0%D0%B2%D0%B0%D1%80%D0%B8%D0%B8%20%D0%BF%D0%BE%20%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%C2%AB%D0%91%D0%BB%D0%B0-%D0%B1%D0%BB%D0%B0-%D0%BA%D0%B0%D1%80%D0%BE%D0%BC%C2%BB%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8C-%D1%85%D0%B5%D1%80%D1%81%D0%BE%D0%BD%D0%B5%D1%86%20%D0%BF%D0%BE%D0%B3%D0%B8%D0%B1%2C%20%D1%82%D0%B5%D1%80%D0%BD%D0%BE%D0%BF%D0%BE%D0%BB%D1%8C%D1%86%D1%8B%20%D1%82%D0%BE%D0%B6%D0%B5%20%D0%BF%D0%BE%D0%BB%D1%83%D1%87%D0%B8%D0%BB%D0%B8%20%D1%82%D1%80%D0%B0%D0%B2%D0%BC%D1%8B%20%7C%20%D0%A2%D0%B8%D0%BF%D0%B8%D1%87%D0%BD%D1%8B%D0%B9%20%D0%A5%D0%B5%D1%80%D1%81%D0%BE%D0%BD&sd=24-bit&sr=1176x885&vp=1176x754&je=1&fl=10.0%20r45&_u=YEBAAEQ~&jid=1472024135&gjid=1204877157&cid=2045014946.1512474248&tid=UA-367178-54&_gid=2086097931.1512474248&_r=1&z=2014368470 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         64.233.164.101
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Tue, 05 Dec 2017 11:44:07 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /sites/all/themes/th/img/main-left-shad.png HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/sites/default/files/css/css_71D_nSUNQjr3LxFCmhxc2zIhoGcecKLALC1rdGCF51M.css
Cookie: has_js=1; _ga=GA1.3.2045014946.1512474248; _gid=GA1.3.2086097931.1512474248; _gat=1

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 05 Dec 2017 11:44:08 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Sat, 13 Jul 2013 22:00:00 GMT
Etag: "d60945-5bf-4e16bbfa73800"
Accept-Ranges: bytes
Content-Length: 1471
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:08 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 15 x 130, 8-bit/color RGBA, non-interlaced
Size:   1471
Md5:    6505411acfbc2c3fe1ada0c8acd44d53
Sha1:   a724a45dfd3ae74d66ca5e573104d5d69403ba89
Sha256: b3b26e980e53bf3cf9f39c82499895655be04e1ed6878df061b9ee2798cda6fb
                                        
                                            GET /sites/all/themes/th/img/probki.png HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/sites/default/files/css/css_71D_nSUNQjr3LxFCmhxc2zIhoGcecKLALC1rdGCF51M.css
Cookie: has_js=1; _ga=GA1.3.2045014946.1512474248; _gid=GA1.3.2086097931.1512474248; _gat=1

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 05 Dec 2017 11:44:08 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Sat, 13 Jul 2013 22:00:00 GMT
Etag: "d60959-1077-4e16bbfa73800"
Accept-Ranges: bytes
Content-Length: 4215
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:08 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 39 x 38, 8-bit/color RGBA, non-interlaced
Size:   4215
Md5:    7ae2735af7c39ede39f48c0468f91884
Sha1:   0d82fc3b19601f5b426abeedd18c1946176c198b
Sha256: 947ca0f88f43f687ca85ad8d1501106bbe5f57231030860a623426c452cc3345
                                        
                                            GET /sites/all/themes/th/img/main-right-shad.png HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/sites/default/files/css/css_71D_nSUNQjr3LxFCmhxc2zIhoGcecKLALC1rdGCF51M.css
Cookie: has_js=1; _ga=GA1.3.2045014946.1512474248; _gid=GA1.3.2086097931.1512474248; _gat=1

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 05 Dec 2017 11:44:08 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Sat, 13 Jul 2013 22:00:00 GMT
Etag: "d60946-5b6-4e16bbfa73800"
Accept-Ranges: bytes
Content-Length: 1462
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:08 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 15 x 130, 8-bit/color RGBA, non-interlaced
Size:   1462
Md5:    68453c65d070bb772ba3c738f8efb0b4
Sha1:   b50e8bba08041a6c60c79518cce3a57143402d84
Sha256: b03a1047c66dc91f3f70763444c4d3f9e1f557a921227973c717fd04a0bd53ca
                                        
                                            GET /sites/all/themes/th/img/face.png HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/sites/default/files/css/css_71D_nSUNQjr3LxFCmhxc2zIhoGcecKLALC1rdGCF51M.css
Cookie: has_js=1; _ga=GA1.3.2045014946.1512474248; _gid=GA1.3.2086097931.1512474248; _gat=1

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 05 Dec 2017 11:44:08 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Sat, 13 Jul 2013 22:00:00 GMT
Etag: "d6093f-425-4e16bbfa73800"
Accept-Ranges: bytes
Content-Length: 1061
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:08 GMT
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 36 x 37, 8-bit/color RGBA, non-interlaced
Size:   1061
Md5:    00d3de0fc43824d0e9720be2b8b49bec
Sha1:   5937ffd81f6bcd2b33a7c4c31831981161e02e40
Sha256: e057baed453831c4bd7defeec717638c716d33d737f8098e6221bcf940fa14a0
                                        
                                            GET /sites/all/themes/th/img/odnoklas.png HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/sites/default/files/css/css_71D_nSUNQjr3LxFCmhxc2zIhoGcecKLALC1rdGCF51M.css
Cookie: has_js=1; _ga=GA1.3.2045014946.1512474248; _gid=GA1.3.2086097931.1512474248; _gat=1

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 05 Dec 2017 11:44:08 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Mon, 29 Dec 2014 10:17:48 GMT
Etag: "d63c59-84c-50b582fadafb9"
Accept-Ranges: bytes
Content-Length: 2124
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:08 GMT
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 36 x 37, 8-bit/color RGBA, non-interlaced
Size:   2124
Md5:    d83f1191b0c27230c9f1e25ea47ce805
Sha1:   34ed489e84f1d3d568210322fcff25c9022e2428
Sha256: fe14709dc74d872c8d88ba7c50f269bdbf332c5dad3dc1fc42f3d4650b87266f
                                        
                                            GET /sites/all/themes/th/img/vk.png HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/sites/default/files/css/css_71D_nSUNQjr3LxFCmhxc2zIhoGcecKLALC1rdGCF51M.css
Cookie: has_js=1; _ga=GA1.3.2045014946.1512474248; _gid=GA1.3.2086097931.1512474248; _gat=1

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 05 Dec 2017 11:44:08 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Mon, 29 Dec 2014 10:29:31 GMT
Etag: "d60969-eb5-50b58598f9c39"
Accept-Ranges: bytes
Content-Length: 3765
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:08 GMT
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 36 x 37, 8-bit/color RGBA, non-interlaced
Size:   3765
Md5:    71e816ff87b90f101486ec8048327bdf
Sha1:   1a592dc6e43c3b81e00779691b3f879439af15ac
Sha256: 27adb05fc944d50891d76cb0dab7fda9d7bcb66ab255d0e8bb256c7b001b58ad
                                        
                                            GET /sites/all/themes/th/img/rssnews.png HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/sites/default/files/css/css_71D_nSUNQjr3LxFCmhxc2zIhoGcecKLALC1rdGCF51M.css
Cookie: has_js=1; _ga=GA1.3.2045014946.1512474248; _gid=GA1.3.2086097931.1512474248; _gat=1

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 05 Dec 2017 11:44:08 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Sat, 17 Aug 2013 22:00:00 GMT
Etag: "d6095c-b32-4e42bd4195800"
Accept-Ranges: bytes
Content-Length: 2866
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:08 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 37 x 37, 8-bit/color RGBA, non-interlaced
Size:   2866
Md5:    52131d473b917a6a8b4d5418f64542cc
Sha1:   7e9c146791473694c068f24102bbf8af16f96d05
Sha256: 1c30400c5452045392ba04abfc8e81d6f953d9644931573ea47fdf5ad30208ad
                                        
                                            GET /sites/all/themes/th/img/topmenu-bg.jpg HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/sites/default/files/css/css_71D_nSUNQjr3LxFCmhxc2zIhoGcecKLALC1rdGCF51M.css
Cookie: has_js=1; _ga=GA1.3.2045014946.1512474248; _gid=GA1.3.2086097931.1512474248; _gat=1

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 05 Dec 2017 11:44:08 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Sat, 13 Jul 2013 22:00:00 GMT
Etag: "d60963-6dd-4e16bbfa73800"
Accept-Ranges: bytes
Content-Length: 1757
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:08 GMT
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1757
Md5:    a81889ef26fd5386b5f4583b16b51db7
Sha1:   e9288eb9597ef6e300b3d4e99a3d0edd98404704
Sha256: 00f3a02f4c79111cafa881fb62511e5a0e1d680c62dc8a3825ede71db82b74d2
                                        
                                            GET /sites/all/themes/th/img/tochka.png HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/sites/default/files/css/css_71D_nSUNQjr3LxFCmhxc2zIhoGcecKLALC1rdGCF51M.css
Cookie: has_js=1; _ga=GA1.3.2045014946.1512474248; _gid=GA1.3.2086097931.1512474248; _gat=1

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 05 Dec 2017 11:44:08 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Sat, 13 Jul 2013 22:00:00 GMT
Etag: "d60960-40c-4e16bbfa73800"
Accept-Ranges: bytes
Content-Length: 1036
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:08 GMT
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 4 x 4, 8-bit/color RGBA, non-interlaced
Size:   1036
Md5:    1c5f555c20c23726fa596fdc0689f819
Sha1:   36aa1bad69abf25c29cc09c1849d0b165e17de5e
Sha256: bf287eb93845fd7f4d5cf252d74b9e1d17e6972d788985fdf07b2abebb24e3a7
                                        
                                            GET /sites/all/themes/th/img/topmenu-li.png HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/sites/default/files/css/css_71D_nSUNQjr3LxFCmhxc2zIhoGcecKLALC1rdGCF51M.css
Cookie: has_js=1; _ga=GA1.3.2045014946.1512474248; _gid=GA1.3.2086097931.1512474248; _gat=1

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 05 Dec 2017 11:44:08 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Sat, 13 Jul 2013 22:00:00 GMT
Etag: "d60965-430-4e16bbfa73800"
Accept-Ranges: bytes
Content-Length: 1072
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:08 GMT
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 1 x 32, 8-bit/color RGBA, non-interlaced
Size:   1072
Md5:    515834eeb7076f16b0019739aec5ad73
Sha1:   8d834f66e334f04c717a1153545ad7e2f486dd62
Sha256: eb1e60c08ba2778150714534c8316aeeb18f854a4d7a7233af4250a35d410aac
                                        
                                            GET /sites/all/themes/th/img/searcsubmit.png HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/sites/default/files/css/css_71D_nSUNQjr3LxFCmhxc2zIhoGcecKLALC1rdGCF51M.css
Cookie: has_js=1; _ga=GA1.3.2045014946.1512474248; _gid=GA1.3.2086097931.1512474248; _gat=1

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 05 Dec 2017 11:44:08 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Sat, 13 Jul 2013 22:00:00 GMT
Etag: "d6095d-4f7-4e16bbfa73800"
Accept-Ranges: bytes
Content-Length: 1271
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:08 GMT
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 29 x 28, 8-bit/color RGB, non-interlaced
Size:   1271
Md5:    2da385f7e28cde768f9c3b74cc75e15f
Sha1:   259e9c2f9df792466bb3d8d410627c3fff610d86
Sha256: b88abf722571d5f7cb117ee6c53c62021e4246e83332294bfb779f0b28af5420
                                        
                                            GET /sites/default/files/2015/image001.gif HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 05 Dec 2017 11:44:07 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Thu, 09 Nov 2017 13:40:34 GMT
Etag: "de09bd-3378e-55d8cf2d19e26"
Accept-Ranges: bytes
Content-Length: 210830
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:07 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 300 x 300
Size:   210830
Md5:    c226eb1f08c21c30a7e81431953fb8f1
Sha1:   176e545bcf566f1506a759f4ff200583380a0e56
Sha256: e479261a8274438176e1a2c51e80a88fa1f63659875bb96fe6473a3b435359ba
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Tue, 05 Dec 2017 11:44:07 GMT
Etag: "5a260350-1d7"
Expires: Thu, 07 Dec 2017 11:44:07 GMT
Last-Modified: Tue, 05 Dec 2017 02:24:16 GMT
Server: ECS (arn/4692)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    c3395e50f8327a8dfe2737e9d68919e8
Sha1:   8255426ebe02286034be8201b543d3a113c4b644
Sha256: b60044396f3021d748a582254a0fac1f78af918325547d26dda274b3130b060f
                                        
                                            GET /sites/all/themes/th/fonts/ArialNarrowRegular/ArialNarrowRegular.woff HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/sites/default/files/css/css_71D_nSUNQjr3LxFCmhxc2zIhoGcecKLALC1rdGCF51M.css
Cookie: has_js=1; _ga=GA1.3.2045014946.1512474248; _gid=GA1.3.2086097931.1512474248; _gat=1

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
                                        
Date: Tue, 05 Dec 2017 11:44:08 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Tue, 30 Dec 2014 22:53:52 GMT
Etag: "dc249f-10888-50b76dd6b215e"
Accept-Ranges: bytes
Content-Length: 67720
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:08 GMT
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  data
Size:   67720
Md5:    4f778e0e643bc0192e8af66c1f952621
Sha1:   baa8d826d28a9724cff0c12060b6e415ee39d8b2
Sha256: c2bcd72da59138ee5adf1c88652d15550cb50edd12913cdad5e15ae448579a8b

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Tue, 05 Dec 2017 11:44:07 GMT
Etag: "5a26590e-1d7"
Expires: Thu, 07 Dec 2017 11:44:07 GMT
Last-Modified: Tue, 05 Dec 2017 08:30:06 GMT
Server: ECS (arn/4694)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    61e1129417f8cc25a391f80d3ea674af
Sha1:   a64c4e80b635ccc9568add30f151efe7c979dc2f
Sha256: c7b46fd9cddfbafe2ac62e08cb9d38336a711ba96b32ddfe02552b1c7a6e20aa
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 05 Dec 2017 11:44:08 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    1d78b54535072931db1ff7ce757eef95
Sha1:   6cc690136c9f97a9cf403245f257d29d63faa9f5
Sha256: 41443939b96c305bb6e78513f02fc105d4d6a67d22ed8440f79f9348a74f9177
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 05 Dec 2017 11:44:08 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            GET /common/scribe_endpoint.php?c=jssdk_error&m=%7B%22error%22%3A%22LOAD%22%2C%20%22extra%22%3A%20%7B%22name%22%3A%22TypeError%22%2C%22line%22%3A%22120%22%2C%22script%22%3A%22http%3A%2F%2Fconnect.facebook.net%2Fru_RU%2Fall.js%23xfbml%3D1%26appId%3D27928787079%22%2C%22stack%22%3A%22a(%5Bobject%20Object%5D%2C(function%20(e%2C%20f)%20%7Bif%20(Object.prototype.hasOwnProperty.call(c%2C%20e))%20%7Breturn%20c%5Be%5D%3B%7Dif%20(!Object.prototype.hasOwnProperty.call(b%2C%20e))%20%7Bif%20(f)%20%7Breturn%20null%3B%7Dthrow%20new%20Error(%22Module%20%22%20%2B%20e%20%2B%20%22%20has%20not%20been%20defined%22)%3B%7Dvar%20g%20%3D%20b%5Be%5D%2C%20h%20%3D%20g.deps%2C%20i%20%3D%20g.factory.length%2C%20j%2C%20k%20%3D%20%5B%5D%3Bfor%20(var%20l%20%3D%200%3B%20l%20%3C%20i%3B%20l%2B%2B)%20%7Bswitch%20(h%5Bl%5D)%20%7Bcase%20%22module%22%3Aj%20%3D%20g%3Bbreak%3Bcase%20%22exports%22%3Aj%20%3D%20g.exports%3Bbreak%3Bcase%20%22global%22%3Aj%20%3D%20a%3Bbreak%3Bcase%20%22require%22%3Aj%20%3D%20require%3Bbreak%3Bcase%20%22requireDynamic%22%3Aj%20%3D%20null%3Bbreak%3Bcase%20%22requireLazy%22%3Aj%20%3D%20null%3Bbreak%3Bdefault%3Aj%20%3D%20require.call(null%2C%20h%5Bl%5D)%3B%7Dk.push(j)%3B%7Dg.factory.apply(a%2C%20k)%3Bc%5Be%5D%20%3D%20g.exports%3Breturn%20g.exports%3B%7D)%2Cnull%2Cnull%2C%5Bobject%20Object%5D%2C%5Bobject%20Object%5D)%40http%3A%2F%2Fconnect.facebook.net%2Fru_RU%2Fall.js%23xfbml%3D1%26appId%3D27928787079%3A120%0A(%22GraphBatchConstants%22)%40http%3A%2F%2Fconnect.facebook.net%2Fru_RU%2Fall.js%23xfbml%3D1%26appId%3D27928787079%3A24%0A(%22ChunkedRequest%22)%40http%3A%2F%2Fconnect.facebook.net%2Fru_RU%2Fall.js%23xfbml%3D1%26appId%3D27928787079%3A24%0A(%22ApiClient%22)%40http%3A%2F%2Fconnect.facebook.net%2Fru_RU%2Fall.js%23xfbml%3D1%26appId%3D27928787079%3A24%0A(%22sdk.api%22)%40http%3A%2F%2Fconnect.facebook.net%2Fru_RU%2Fall.js%23xfbml%3D1%26appId%3D27928787079%3A24%0A(%22legacy%3Afb.api%22)%40http%3A%2F%2Fconnect.facebook.net%2Fru_RU%2Fall.js%23xfbml%3D1%26appId%3D27928787079%3A24%0A(%22legacy%3Afb.api%22%2C%5Bobject%20Array%5D%2Ca%2C3)%40http%3A%2F%2Fconnect.facebook.net%2Fru_RU%2Fall.js%23xfbml%3D1%26appId%3D27928787079%3A24%0A()%40http%3A%2F%2Fconnect.facebook.net%2Fru_RU%2Fall.js%23xfbml%3D1%26appId%3D27928787079%3A127%0A(%5Bobject%20XPCCrossOriginWrapper%5D%2C%5Bobject%20XPCCrossOriginWrapper%5D)%40http%3A%2F%2Fconnect.facebook.net%2Fru_RU%2Fall.js%23xfbml%3D1%26appId%3D27928787079%3A191%0A%40http%3A%2F%2Fconnect.facebook.net%2Fru_RU%2Fall.js%23xfbml%3D1%26appId%3D27928787079%3A191%0A%22%2C%22revision%22%3A%223501152%22%2C%22namespace%22%3A%22FB%22%2C%22message%22%3A%22Object.freeze%20is%20not%20a%20function%22%7D%7D HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         31.13.72.36
HTTP/1.1 200 OK
Content-Type: image/png
                                        
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
X-Frame-Options: DENY
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.facebook.com
Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length
Pragma: no-cache
Vary: Origin, Accept-Encoding
Access-Control-Allow-Methods: OPTIONS
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Cache-Control: private, no-store, no-cache, must-revalidate
Content-Encoding: gzip
X-FB-Debug: 3cVZFbCL3r1TDaBOpQOk2NJREAb9YFfBPI1BsysBiufs8SFc8HGHzEnfjbeWwhpWXIgVNjA5qtY9g+MLb1ejbQ==
Date: Tue, 05 Dec 2017 11:44:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   89
Md5:    f95c92e80e3cdd0590860ea9166aa1a0
Sha1:   a4e043184f1adb92ee36303d3ddea3ceb205d4c3
Sha256: 2fd64089d372311187f83b43732a1336d92374f503fbfffd8ced1f2d38c51bb6
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 05 Dec 2017 11:44:08 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    93607860091ae6091976689e4f06f3d6
Sha1:   c012940971de127ad0e644b2811736167c5d56bd
Sha256: 9a0a581d423138f76eed2db1d23121e25802e903a7d7858fe0da9bbaf05e8c30
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=559220, public, no-transform, must-revalidate
Last-Modified: Mon, 4 Dec 2017 23:00:41 GMT
Expires: Mon, 11 Dec 2017 23:00:41 GMT
Date: Tue, 05 Dec 2017 11:44:08 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    f34e592a7b8c6407bf4d7130d27a2058
Sha1:   773f83149c758cfbe1ee34f5562dbab80f167f6a
Sha256: d6dea0b79b9602ccb5f9f6ec257eef00e024d0a1ee1a7000251905204b78a983
                                        
                                            GET /adsid/integrator.js?domain=www.t.ks.ua HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 05 Dec 2017 11:44:08 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /adsid/integrator.js?domain=www.t.ks.ua HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 05 Dec 2017 11:44:08 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /pagead/js/r20171129/r20170110/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 05 Dec 2017 11:44:08 GMT
Expires: Tue, 05 Dec 2017 11:44:08 GMT
Cache-Control: private, max-age=1209600
Etag: 9177069618815867079
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67302
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67302
Md5:    4b8c5cf837f4fe33964b6103a3998f39
Sha1:   32036e1a43328c7eb991eb65a26364adebe45b98
Sha256: 9e65467458f61542dcff2686dbd3267a28f5d9497049d93b2a019bc689c48b8a
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 05 Dec 2017 11:44:08 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    fd27aeb157d42f475d00581b5cbc0da0
Sha1:   73be4230ed64b4f6b45f8e6ba017b1fdc7e63a68
Sha256: 5cb25cc15212c1b22908dcb7109599c6dde6bd76a0c45942ff39aee229ff6dca
                                        
                                            GET /sites/all/themes/th/fonts/ArialNarrowBold/ArialNarrowBold.woff HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/sites/default/files/css/css_71D_nSUNQjr3LxFCmhxc2zIhoGcecKLALC1rdGCF51M.css
Cookie: has_js=1; _ga=GA1.3.2045014946.1512474248; _gid=GA1.3.2086097931.1512474248; _gat=1

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
                                        
Date: Tue, 05 Dec 2017 11:44:09 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Tue, 30 Dec 2014 22:53:49 GMT
Etag: "dc2341-10624-50b76dd457ca6"
Accept-Ranges: bytes
Content-Length: 67108
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:09 GMT
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive


--- Additional Info ---
Magic:  data
Size:   67108
Md5:    e5403ddbc708fc3c4bad6b93ff23b5f3
Sha1:   d65b86a0408a0657c0b882fda916d46c737b9cf5
Sha256: ce3f68519605dc553a385f4b5feccce75768e72baa7c3f29a1f1efbec7c32f55

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /pub-config/r20160913/ca-pub-3410491531423553.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 125
Date: Tue, 05 Dec 2017 06:18:32 GMT
Expires: Tue, 05 Dec 2017 18:18:32 GMT
Last-Modified: Sun, 03 Dec 2017 22:07:15 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=43200
Age: 19536
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   125
Md5:    21aea2dae0239adff4f9f063cdacfc76
Sha1:   ce64c497ac1dd86393da79e8cea239de113c1de7
Sha256: a59ee78166b8467dd7dd8c7acb03d8df7d16cf4a04f45c8558366df1c33b868f
                                        
                                            GET /button/async-buttons.js HTTP/1.1 
Host: w.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         91.135.34.17
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.10.2
Etag: W/"5a25e20e-168f0"
Expires: Fri, 08 Dec 2017 11:12:21 GMT
Cache-Control: max-age=259200
Content-Encoding: gzip
Content-Length: 19113
Date: Tue, 05 Dec 2017 11:44:08 GMT
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   19113
Md5:    238601876a73319afad500520182b85b
Sha1:   ee0ef8f0a48a0e2c0f21b6a215a9fb421c14f159
Sha256: fb57972a4efe83471092b169f4ec067f79f473207216be002bfd23b504c01206
                                        
                                            GET /t/k/t.ks.ua.589525.js?t=11711512 HTTP/1.1 
Host: jsc.marketgid.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.212.201.94
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:09 GMT
Last-Modified: Wed, 08 Nov 2017 09:20:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"5a02cc4b-18008"
Expires: Wed, 06 Dec 2017 11:44:09 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   30537
Md5:    2a9a4e166ab0f8994b725e0655c5f639
Sha1:   180e9b6e3213f819ac5eab5115c0b4c0b9edeef4
Sha256: 0738989dca151be097df8eb9ef5cd69cd7503cd3ecec0331da8e3b1a5711596b
                                        
                                            GET /t/k/t.ks.ua.589522.js?t=11711512 HTTP/1.1 
Host: jsc.marketgid.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.212.201.94
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:09 GMT
Last-Modified: Wed, 08 Nov 2017 09:20:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"5a02cc4b-17fee"
Expires: Wed, 06 Dec 2017 11:44:09 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   30523
Md5:    20f7f5546098a5dbd215c22c6460bca5
Sha1:   4addb6df5d77a25ff18e612b52c6dc5614813606
Sha256: f0ceb41de9713e30446ea90cbbcee23dfad1adaee791ae1521657fcd312fe177
                                        
                                            GET /pagead/js/r20171129/r20170110/osd.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Fri, 01 Dec 2017 06:07:01 GMT
Expires: Fri, 15 Dec 2017 06:07:01 GMT
Etag: 16709551129238551184
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 29530
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 365827
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29530
Md5:    28d9d27ae14d8dbd7afc315c4cd6dbea
Sha1:   1d6d3b37e5421d59aeda2eddafeb7ffec5ca7f20
Sha256: 768b457121911f60070be4fb14b3c615458dd0612b48a655e2b089538c2e8cca
                                        
                                            GET /pagead/html/r20171129/r20170110/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Fri, 01 Dec 2017 09:48:20 GMT
Expires: Fri, 15 Dec 2017 09:48:20 GMT
Etag: 1066700142077588172
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6802
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 352549
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6802
Md5:    a18133091e51e0a15369ef4156c68c27
Sha1:   094d52fe5089ac8181bf7646756d3a1821799d65
Sha256: b6449475adaa84f9710a7abe26baf0f1a3c4deae508ecb6180daf8f150a39be0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         72.167.239.239
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 05 Dec 2017 11:44:09 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=121795, public, no-transform, must-revalidate
Last-Modified: Tue, 05 Dec 2017 11:20:55 GMT
Expires: Wed, 06 Dec 2017 23:20:55 GMT
Etag: "1b0cf8259a813f6ababf2f4074503885416aac33"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1776
Connection: close


--- Additional Info ---
Magic:  data
Size:   1776
Md5:    d487e44a2f110bfc8a6030ca80b85aaf
Sha1:   1b0cf8259a813f6ababf2f4074503885416aac33
Sha256: fc47468eb11d5141c3d292dfa404942301b3fbbd9eb3b396170dc38ba9609018
                                        
                                            GET /pagead/ads?client=ca-pub-3410491531423553&output=html&h=400&slotname=5348937028&adk=1574087955&adf=807048394&w=580&lmt=1512473767&loeid=20040001%2C38893313&format=580x400&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512474248919&bpp=33&fdt=37&idt=188&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=728x90&correlator=571690591505&frm=20&ga_vid=2045014946.1512474248&ga_sid=1512474249&ga_hid=725952120&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=75&ady=1150&biw=1159&bih=754&abxe=1&eid=38893303%2C21061122%2C41667001&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&dtd=217 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 05 Dec 2017 11:44:09 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 05-Dec-2017 11:59:09 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 05 Dec 2017 11:44:09 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   368
Md5:    79a20dbc2e7e6bed270d1f7dadc8ba6b
Sha1:   c47ac95b1e69066fb2a37b60fbc1043c7d78f994
Sha256: 247145cfade9d30b8bba680b11dbde6d2cb9a3d4f38b687b710b4baaa1812fa6
                                        
                                            GET /images/upload.gif HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:09 GMT
Content-Length: 230
Last-Modified: Sat, 07 Jan 2017 23:21:10 GMT
Connection: keep-alive
Etag: "587177e6-e6"
Expires: Tue, 12 Dec 2017 11:44:09 GMT
Cache-Control: max-age=604800
Strict-Transport-Security: max-age=0
X-Frontend: front508119
Access-Control-Expose-Headers: X-Frontend
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 32 x 8
Size:   230
Md5:    59cd625f8c2ce03663123d59416378a1
Sha1:   b8d103133aadcdbe532e5642ddce9159b7385e4e
Sha256: 0d7e358637c1b1caa66949aefc529c1e4488923f99e499d6be09eb8cdd0b4202
                                        
                                            GET /widget_comments.php?app=3320676&width=625px&_ver=1&limit=15&height=0&mini=auto&norealtime=0&page=0&status_publish=0&attach=*&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&title=%D0%92%20%D0%B0%D0%B2%D0%B0%D1%80%D0%B8%D0%B8%20%D0%BF%D0%BE%20%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%C2%AB%D0%91%D0%BB%D0%B0-%D0%B1%D0%BB%D0%B0-%D0%BA%D0%B0%D1%80%D0%BE%D0%BC%C2%BB%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8C-%D1%85%D0%B5%D1%80%D1%81%D0%BE%D0%BD%D0%B5%D1%86%20%D0%BF%D0%BE%D0%B3%D0%B8%D0%B1%2C%20%D1%82%D0%B5%D1%80%D0%BD%D0%BE%D0%BF%D0%BE%D0%BB%D1%8C%D1%86%D1%8B%20...&description=&image=&referrer=&160267d8711 HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: text/html; charset=windows-1251
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:09 GMT
Content-Length: 6855
Connection: keep-alive
X-Powered-By: PHP/3.14225
Set-Cookie: remixlang=3; expires=Fri, 07 Dec 2018 03:04:51 GMT; path=/; domain=.vk.com remixstid=1713364059_32f8e5f4afac6a3c22; expires=Thu, 06 Dec 2018 04:03:41 GMT; path=/; domain=.vk.com
Pragma: no-cache
Cache-Control: no-store
Content-Encoding: gzip
Strict-Transport-Security: max-age=0
X-Frontend: front508120
Access-Control-Expose-Headers: X-Frontend


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6855
Md5:    6f279637e0a1b55c1148461a13e4e8d6
Sha1:   e4f25dbe9c8dd3d0a0494d3a02dc7950cd3517f7
Sha256: dd9276db5abb8e693227ab7ca0421b7be6135b6a983dc459a2710142ff7077c8
                                        
                                            GET /js/loader_nav5390846722814_3.js HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://vk.com/widget_comments.php?app=3320676&width=625px&_ver=1&limit=15&height=0&mini=auto&norealtime=0&page=0&status_publish=0&attach=*&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&title=%D0%92%20%D0%B0%D0%B2%D0%B0%D1%80%D0%B8%D0%B8%20%D0%BF%D0%BE%20%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%C2%AB%D0%91%D0%BB%D0%B0-%D0%B1%D0%BB%D0%B0-%D0%BA%D0%B0%D1%80%D0%BE%D0%BC%C2%BB%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8C-%D1%85%D0%B5%D1%80%D1%81%D0%BE%D0%BD%D0%B5%D1%86%20%D0%BF%D0%BE%D0%B3%D0%B8%D0%B1%2C%20%D1%82%D0%B5%D1%80%D0%BD%D0%BE%D0%BF%D0%BE%D0%BB%D1%8C%D1%86%D1%8B%20...&description=&image=&referrer=&160267d8711
Cookie: remixlang=3; remixstid=1713364059_32f8e5f4afac6a3c22

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=windows-1251
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:09 GMT
Content-Length: 7137
Connection: keep-alive
X-Powered-By: PHP/3.14225
Cache-Control: max-age=345600
Content-Encoding: gzip
Strict-Transport-Security: max-age=0
X-Frontend: front508119
Access-Control-Expose-Headers: X-Frontend


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7137
Md5:    c2e0f22d36f5c6e511f5b4a006dadaec
Sha1:   a208600c37b1a82a3bbf7d71ca3874daa4ede4ef
Sha256: fc2b9d381794d417f9ade97fe15bed4959b1cd15df57efb9e3c80272fb9d855e
                                        
                                            GET /pagead/ads?client=ca-pub-3410491531423553&output=html&h=90&slotname=9550307421&adk=3037924571&adf=807048394&w=728&lmt=1512473767&loeid=20040001%2C38893313&format=728x90&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512474248428&bpp=28&fdt=36&idt=252&shv=r20171129&cbv=r20170110&saldr=aa&correlator=571690591505&frm=20&ga_vid=2045014946.1512474248&ga_sid=1512474249&ga_hid=725952120&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=75&ady=280&biw=1159&bih=754&abxe=1&eid=38893303%2C21061122%2C41667001&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=1&dtd=275 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 05 Dec 2017 11:44:09 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 05-Dec-2017 11:59:09 GMT; path=/; domain=.doubleclick.net
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 05 Dec 2017 11:44:09 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   367
Md5:    4c25e44437af011bf737a269b7316fa6
Sha1:   6c49bddfb52b584d88948f2a90f3ea6608054a83
Sha256: 09d2c8bca8191a77631586f93742a98e0aad7ca63bb79e3d3726ba749461cbe6
                                        
                                            GET /css/al/ui_media_selector.css?21230046213 HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://vk.com/widget_comments.php?app=3320676&width=625px&_ver=1&limit=15&height=0&mini=auto&norealtime=0&page=0&status_publish=0&attach=*&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&title=%D0%92%20%D0%B0%D0%B2%D0%B0%D1%80%D0%B8%D0%B8%20%D0%BF%D0%BE%20%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%C2%AB%D0%91%D0%BB%D0%B0-%D0%B1%D0%BB%D0%B0-%D0%BA%D0%B0%D1%80%D0%BE%D0%BC%C2%BB%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8C-%D1%85%D0%B5%D1%80%D1%81%D0%BE%D0%BD%D0%B5%D1%86%20%D0%BF%D0%BE%D0%B3%D0%B8%D0%B1%2C%20%D1%82%D0%B5%D1%80%D0%BD%D0%BE%D0%BF%D0%BE%D0%BB%D1%8C%D1%86%D1%8B%20...&description=&image=&referrer=&160267d8711
Cookie: remixlang=3; remixstid=1713364059_32f8e5f4afac6a3c22

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:09 GMT
Last-Modified: Thu, 30 Nov 2017 21:22:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a20768e-1935"
Expires: Sat, 09 Dec 2017 11:44:09 GMT
Cache-Control: max-age=345600
Strict-Transport-Security: max-age=0
X-Frontend: front508119
Access-Control-Expose-Headers: X-Frontend
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2058
Md5:    30fa41ae7faa26d090e79bf2b22e491c
Sha1:   a1fd496a31387195cc4d8ebad0a040b09faafdd4
Sha256: 3f05b5c427bb9d06401bd033b56a643ecbe14d279eb27f56b9a9ff17363133b4
                                        
                                            GET /css/al/ui_common.css?19874813650 HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://vk.com/widget_comments.php?app=3320676&width=625px&_ver=1&limit=15&height=0&mini=auto&norealtime=0&page=0&status_publish=0&attach=*&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&title=%D0%92%20%D0%B0%D0%B2%D0%B0%D1%80%D0%B8%D0%B8%20%D0%BF%D0%BE%20%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%C2%AB%D0%91%D0%BB%D0%B0-%D0%B1%D0%BB%D0%B0-%D0%BA%D0%B0%D1%80%D0%BE%D0%BC%C2%BB%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8C-%D1%85%D0%B5%D1%80%D1%81%D0%BE%D0%BD%D0%B5%D1%86%20%D0%BF%D0%BE%D0%B3%D0%B8%D0%B1%2C%20%D1%82%D0%B5%D1%80%D0%BD%D0%BE%D0%BF%D0%BE%D0%BB%D1%8C%D1%86%D1%8B%20...&description=&image=&referrer=&160267d8711
Cookie: remixlang=3; remixstid=1713364059_32f8e5f4afac6a3c22

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:09 GMT
Last-Modified: Thu, 30 Nov 2017 21:22:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a20768e-11f6d"
Expires: Sat, 09 Dec 2017 11:44:09 GMT
Cache-Control: max-age=345600
Strict-Transport-Security: max-age=0
X-Frontend: front508119
Access-Control-Expose-Headers: X-Frontend
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   15503
Md5:    ebe8598de5e3ee4bf0634e07edec4778
Sha1:   e0c227bf028f53365a6b6f7aa5d01bed41e7c459
Sha256: a3bacf70f0e1adf14e844b53ae43245d08feaa84c90063b10feb52530abafb3d
                                        
                                            GET /css/al/notifier.css?30695604216 HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://vk.com/widget_comments.php?app=3320676&width=625px&_ver=1&limit=15&height=0&mini=auto&norealtime=0&page=0&status_publish=0&attach=*&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&title=%D0%92%20%D0%B0%D0%B2%D0%B0%D1%80%D0%B8%D0%B8%20%D0%BF%D0%BE%20%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%C2%AB%D0%91%D0%BB%D0%B0-%D0%B1%D0%BB%D0%B0-%D0%BA%D0%B0%D1%80%D0%BE%D0%BC%C2%BB%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8C-%D1%85%D0%B5%D1%80%D1%81%D0%BE%D0%BD%D0%B5%D1%86%20%D0%BF%D0%BE%D0%B3%D0%B8%D0%B1%2C%20%D1%82%D0%B5%D1%80%D0%BD%D0%BE%D0%BF%D0%BE%D0%BB%D1%8C%D1%86%D1%8B%20...&description=&image=&referrer=&160267d8711
Cookie: remixlang=3; remixstid=1713364059_32f8e5f4afac6a3c22

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:09 GMT
Last-Modified: Thu, 30 Nov 2017 21:22:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a207684-155e6"
Expires: Sat, 09 Dec 2017 11:44:09 GMT
Cache-Control: max-age=345600
Strict-Transport-Security: max-age=0
X-Frontend: front508122
Access-Control-Expose-Headers: X-Frontend
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   18096
Md5:    cd0436b23134520d67283930d574d860
Sha1:   9a22017d1427153107b420519199491999cb3eda
Sha256: 24445129ac8adb352d5422dcc5a666e1d35395825b9dd8065a4e4f169aeea34e
                                        
                                            GET /css/al/page.css?27025916293 HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://vk.com/widget_comments.php?app=3320676&width=625px&_ver=1&limit=15&height=0&mini=auto&norealtime=0&page=0&status_publish=0&attach=*&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&title=%D0%92%20%D0%B0%D0%B2%D0%B0%D1%80%D0%B8%D0%B8%20%D0%BF%D0%BE%20%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%C2%AB%D0%91%D0%BB%D0%B0-%D0%B1%D0%BB%D0%B0-%D0%BA%D0%B0%D1%80%D0%BE%D0%BC%C2%BB%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8C-%D1%85%D0%B5%D1%80%D1%81%D0%BE%D0%BD%D0%B5%D1%86%20%D0%BF%D0%BE%D0%B3%D0%B8%D0%B1%2C%20%D1%82%D0%B5%D1%80%D0%BD%D0%BE%D0%BF%D0%BE%D0%BB%D1%8C%D1%86%D1%8B%20...&description=&image=&referrer=&160267d8711
Cookie: remixlang=3; remixstid=1713364059_32f8e5f4afac6a3c22

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:09 GMT
Last-Modified: Thu, 30 Nov 2017 21:22:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a207685-26180"
Expires: Sat, 09 Dec 2017 11:44:09 GMT
Cache-Control: max-age=345600
Strict-Transport-Security: max-age=0
X-Frontend: front508119
Access-Control-Expose-Headers: X-Frontend
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   37978
Md5:    65676057d4918e04a67ee70d1bdab6a2
Sha1:   8809607abf40ad760f6044333fb1c349a2c90c62
Sha256: 2d16abb0d08c24e3f51f785d5add0c1adb4898d4d9c8ce63649a49e14772ce09
                                        
                                            GET /css/al/lite.css?47507239829 HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://vk.com/widget_comments.php?app=3320676&width=625px&_ver=1&limit=15&height=0&mini=auto&norealtime=0&page=0&status_publish=0&attach=*&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&title=%D0%92%20%D0%B0%D0%B2%D0%B0%D1%80%D0%B8%D0%B8%20%D0%BF%D0%BE%20%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%C2%AB%D0%91%D0%BB%D0%B0-%D0%B1%D0%BB%D0%B0-%D0%BA%D0%B0%D1%80%D0%BE%D0%BC%C2%BB%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8C-%D1%85%D0%B5%D1%80%D1%81%D0%BE%D0%BD%D0%B5%D1%86%20%D0%BF%D0%BE%D0%B3%D0%B8%D0%B1%2C%20%D1%82%D0%B5%D1%80%D0%BD%D0%BE%D0%BF%D0%BE%D0%BB%D1%8C%D1%86%D1%8B%20...&description=&image=&referrer=&160267d8711
Cookie: remixlang=3; remixstid=1713364059_32f8e5f4afac6a3c22

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:09 GMT
Last-Modified: Thu, 30 Nov 2017 21:22:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a207684-21665"
Expires: Sat, 09 Dec 2017 11:44:09 GMT
Cache-Control: max-age=345600
Strict-Transport-Security: max-age=0
X-Frontend: front508121
Access-Control-Expose-Headers: X-Frontend
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   30573
Md5:    287ae6848f14615962c0a67e05a3f823
Sha1:   3deb09de2982013c24b9fa2aea31fe10fc0921a0
Sha256: 43007e08b275b769fbed9ba145ce1d81a1e5e48fb1421bfd6232aae5a4f33aea
                                        
                                            GET /css/al/widget_comments.css?34204477847 HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://vk.com/widget_comments.php?app=3320676&width=625px&_ver=1&limit=15&height=0&mini=auto&norealtime=0&page=0&status_publish=0&attach=*&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&title=%D0%92%20%D0%B0%D0%B2%D0%B0%D1%80%D0%B8%D0%B8%20%D0%BF%D0%BE%20%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%C2%AB%D0%91%D0%BB%D0%B0-%D0%B1%D0%BB%D0%B0-%D0%BA%D0%B0%D1%80%D0%BE%D0%BC%C2%BB%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8C-%D1%85%D0%B5%D1%80%D1%81%D0%BE%D0%BD%D0%B5%D1%86%20%D0%BF%D0%BE%D0%B3%D0%B8%D0%B1%2C%20%D1%82%D0%B5%D1%80%D0%BD%D0%BE%D0%BF%D0%BE%D0%BB%D1%8C%D1%86%D1%8B%20...&description=&image=&referrer=&160267d8711
Cookie: remixlang=3; remixstid=1713364059_32f8e5f4afac6a3c22

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:10 GMT
Last-Modified: Thu, 30 Nov 2017 21:22:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a207691-5aba"
Expires: Sat, 09 Dec 2017 11:44:10 GMT
Cache-Control: max-age=345600
Strict-Transport-Security: max-age=0
X-Frontend: front508119
Access-Control-Expose-Headers: X-Frontend
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4734
Md5:    550196a19c53415e1b930c021f4bfd2f
Sha1:   8a7c58347059e8de8311a802f181691066dab411
Sha256: 7dd9e2119608d9100e55f3d963143866e592521e5a180fbdbcb04ffcbbcdaa92
                                        
                                            GET /css/al/post.css?24059582860 HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://vk.com/widget_comments.php?app=3320676&width=625px&_ver=1&limit=15&height=0&mini=auto&norealtime=0&page=0&status_publish=0&attach=*&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&title=%D0%92%20%D0%B0%D0%B2%D0%B0%D1%80%D0%B8%D0%B8%20%D0%BF%D0%BE%20%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%C2%AB%D0%91%D0%BB%D0%B0-%D0%B1%D0%BB%D0%B0-%D0%BA%D0%B0%D1%80%D0%BE%D0%BC%C2%BB%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8C-%D1%85%D0%B5%D1%80%D1%81%D0%BE%D0%BD%D0%B5%D1%86%20%D0%BF%D0%BE%D0%B3%D0%B8%D0%B1%2C%20%D1%82%D0%B5%D1%80%D0%BD%D0%BE%D0%BF%D0%BE%D0%BB%D1%8C%D1%86%D1%8B%20...&description=&image=&referrer=&160267d8711
Cookie: remixlang=3; remixstid=1713364059_32f8e5f4afac6a3c22

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:10 GMT
Last-Modified: Thu, 30 Nov 2017 21:22:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a207688-3696"
Expires: Sat, 09 Dec 2017 11:44:10 GMT
Cache-Control: max-age=345600
Strict-Transport-Security: max-age=0
X-Frontend: front508122
Access-Control-Expose-Headers: X-Frontend
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3648
Md5:    0c883d9ad1b9926a4521a76c33fae22e
Sha1:   080258d0be343dc72b13a4867ac1fedcac0bf81a
Sha256: 030780635a9ee3c870b35518b947e188569c61a434102926af57984c60c3d27b
                                        
                                            GET /js/api/xdm.js?1449919642 HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://vk.com/widget_comments.php?app=3320676&width=625px&_ver=1&limit=15&height=0&mini=auto&norealtime=0&page=0&status_publish=0&attach=*&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&title=%D0%92%20%D0%B0%D0%B2%D0%B0%D1%80%D0%B8%D0%B8%20%D0%BF%D0%BE%20%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%C2%AB%D0%91%D0%BB%D0%B0-%D0%B1%D0%BB%D0%B0-%D0%BA%D0%B0%D1%80%D0%BE%D0%BC%C2%BB%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8C-%D1%85%D0%B5%D1%80%D1%81%D0%BE%D0%BD%D0%B5%D1%86%20%D0%BF%D0%BE%D0%B3%D0%B8%D0%B1%2C%20%D1%82%D0%B5%D1%80%D0%BD%D0%BE%D0%BF%D0%BE%D0%BB%D1%8C%D1%86%D1%8B%20...&description=&image=&referrer=&160267d8711
Cookie: remixlang=3; remixstid=1713364059_32f8e5f4afac6a3c22

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:10 GMT
Last-Modified: Wed, 19 Oct 2016 14:06:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"58077df2-23a3"
Expires: Sat, 09 Dec 2017 11:44:10 GMT
Cache-Control: max-age=345600
X-Frontend: front508119
Access-Control-Expose-Headers: X-Frontend
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3072
Md5:    d7d2c3165a1dc77340eac4eaedd42ec0
Sha1:   365cc8a30e8ba1bd194a219b08107afa35b579bb
Sha256: 4ca6474f0203fc0bd11ff8ec2a7b806cda227e2c02b7c71eba04358b0d0eca8b
                                        
                                            GET /js/al/emoji.js?910862776 HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://vk.com/widget_comments.php?app=3320676&width=625px&_ver=1&limit=15&height=0&mini=auto&norealtime=0&page=0&status_publish=0&attach=*&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&title=%D0%92%20%D0%B0%D0%B2%D0%B0%D1%80%D0%B8%D0%B8%20%D0%BF%D0%BE%20%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%C2%AB%D0%91%D0%BB%D0%B0-%D0%B1%D0%BB%D0%B0-%D0%BA%D0%B0%D1%80%D0%BE%D0%BC%C2%BB%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8C-%D1%85%D0%B5%D1%80%D1%81%D0%BE%D0%BD%D0%B5%D1%86%20%D0%BF%D0%BE%D0%B3%D0%B8%D0%B1%2C%20%D1%82%D0%B5%D1%80%D0%BD%D0%BE%D0%BF%D0%BE%D0%BB%D1%8C%D1%86%D1%8B%20...&description=&image=&referrer=&160267d8711
Cookie: remixlang=3; remixstid=1713364059_32f8e5f4afac6a3c22

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:10 GMT
Last-Modified: Mon, 04 Dec 2017 10:27:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a25230b-1d439"
Expires: Sat, 09 Dec 2017 11:44:10 GMT
Cache-Control: max-age=345600
X-Frontend: front508121
Access-Control-Expose-Headers: X-Frontend
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   36778
Md5:    bab285131f454845904f5652a120124a
Sha1:   9b98960940cf7cd9e41b309a2ef388150090f982
Sha256: a0deb994468bd0d0adf334977108323d78de8c2bd0ba23cfd6e0e94c2058a779
                                        
                                            GET /js/al/ui_common.js?3489032241 HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://vk.com/widget_comments.php?app=3320676&width=625px&_ver=1&limit=15&height=0&mini=auto&norealtime=0&page=0&status_publish=0&attach=*&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&title=%D0%92%20%D0%B0%D0%B2%D0%B0%D1%80%D0%B8%D0%B8%20%D0%BF%D0%BE%20%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%C2%AB%D0%91%D0%BB%D0%B0-%D0%B1%D0%BB%D0%B0-%D0%BA%D0%B0%D1%80%D0%BE%D0%BC%C2%BB%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8C-%D1%85%D0%B5%D1%80%D1%81%D0%BE%D0%BD%D0%B5%D1%86%20%D0%BF%D0%BE%D0%B3%D0%B8%D0%B1%2C%20%D1%82%D0%B5%D1%80%D0%BD%D0%BE%D0%BF%D0%BE%D0%BB%D1%8C%D1%86%D1%8B%20...&description=&image=&referrer=&160267d8711
Cookie: remixlang=3; remixstid=1713364059_32f8e5f4afac6a3c22

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:10 GMT
Last-Modified: Mon, 04 Dec 2017 20:46:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a25b411-fe14"
Expires: Sat, 09 Dec 2017 11:44:10 GMT
Cache-Control: max-age=345600
X-Frontend: front508119
Access-Control-Expose-Headers: X-Frontend
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20560
Md5:    a2b44ebf0259770ed536484b39fc710c
Sha1:   6ecba9109855ea3aac59bd1991f4f7983e9637e6
Sha256: 28b107f4beb2011047e5853b9819bb6aff98b0b85216e6194c8aec9b61a09d9d
                                        
                                            GET /js/al/lite.js?2282486946 HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://vk.com/widget_comments.php?app=3320676&width=625px&_ver=1&limit=15&height=0&mini=auto&norealtime=0&page=0&status_publish=0&attach=*&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&title=%D0%92%20%D0%B0%D0%B2%D0%B0%D1%80%D0%B8%D0%B8%20%D0%BF%D0%BE%20%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%C2%AB%D0%91%D0%BB%D0%B0-%D0%B1%D0%BB%D0%B0-%D0%BA%D0%B0%D1%80%D0%BE%D0%BC%C2%BB%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8C-%D1%85%D0%B5%D1%80%D1%81%D0%BE%D0%BD%D0%B5%D1%86%20%D0%BF%D0%BE%D0%B3%D0%B8%D0%B1%2C%20%D1%82%D0%B5%D1%80%D0%BD%D0%BE%D0%BF%D0%BE%D0%BB%D1%8C%D1%86%D1%8B%20...&description=&image=&referrer=&160267d8711
Cookie: remixlang=3; remixstid=1713364059_32f8e5f4afac6a3c22

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:10 GMT
Last-Modified: Fri, 01 Dec 2017 12:53:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a2150c1-2fc9e"
Expires: Sat, 09 Dec 2017 11:44:10 GMT
Cache-Control: max-age=345600
X-Frontend: front508117
Access-Control-Expose-Headers: X-Frontend
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   62652
Md5:    4940935cea0d187133ab75e8519fa0af
Sha1:   99d4c193328c9558ce8cfbce75e4aeb94c04765b
Sha256: c688e057a9f6a9455304dac332ac6ae7f1ba8d88583308094eb32dc6eab3c005
                                        
                                            GET /js/cmodules/api/widgets/comments.js?3317228637 HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://vk.com/widget_comments.php?app=3320676&width=625px&_ver=1&limit=15&height=0&mini=auto&norealtime=0&page=0&status_publish=0&attach=*&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&title=%D0%92%20%D0%B0%D0%B2%D0%B0%D1%80%D0%B8%D0%B8%20%D0%BF%D0%BE%20%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%C2%AB%D0%91%D0%BB%D0%B0-%D0%B1%D0%BB%D0%B0-%D0%BA%D0%B0%D1%80%D0%BE%D0%BC%C2%BB%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8C-%D1%85%D0%B5%D1%80%D1%81%D0%BE%D0%BD%D0%B5%D1%86%20%D0%BF%D0%BE%D0%B3%D0%B8%D0%B1%2C%20%D1%82%D0%B5%D1%80%D0%BD%D0%BE%D0%BF%D0%BE%D0%BB%D1%8C%D1%86%D1%8B%20...&description=&image=&referrer=&160267d8711
Cookie: remixlang=3; remixstid=1713364059_32f8e5f4afac6a3c22

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:10 GMT
Last-Modified: Mon, 04 Dec 2017 20:46:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a25b413-102ea"
Expires: Sat, 09 Dec 2017 11:44:10 GMT
Cache-Control: max-age=345600
X-Frontend: front508119
Access-Control-Expose-Headers: X-Frontend
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   23736
Md5:    c97d284496406c3bae481e43ba7ea753
Sha1:   0bc8f1b9d941b10baa6dd9548a45f27d11eb0452
Sha256: 69e8f4d70ac91f7980ecf23d7ad79b842d0c83ca738cbcb0f09bdf20e91d394f
                                        
                                            GET /js/lang3_0.js?3890 HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://vk.com/widget_comments.php?app=3320676&width=625px&_ver=1&limit=15&height=0&mini=auto&norealtime=0&page=0&status_publish=0&attach=*&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&title=%D0%92%20%D0%B0%D0%B2%D0%B0%D1%80%D0%B8%D0%B8%20%D0%BF%D0%BE%20%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%C2%AB%D0%91%D0%BB%D0%B0-%D0%B1%D0%BB%D0%B0-%D0%BA%D0%B0%D1%80%D0%BE%D0%BC%C2%BB%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8C-%D1%85%D0%B5%D1%80%D1%81%D0%BE%D0%BD%D0%B5%D1%86%20%D0%BF%D0%BE%D0%B3%D0%B8%D0%B1%2C%20%D1%82%D0%B5%D1%80%D0%BD%D0%BE%D0%BF%D0%BE%D0%BB%D1%8C%D1%86%D1%8B%20...&description=&image=&referrer=&160267d8711
Cookie: remixlang=3; remixstid=1713364059_32f8e5f4afac6a3c22

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=windows-1251
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:10 GMT
Content-Length: 10582
Connection: keep-alive
X-Powered-By: PHP/3.14218
Cache-Control: max-age=604800
Content-Encoding: gzip
Expires: Tue, 12 Dec 2017 11:44:10 GMT
Strict-Transport-Security: max-age=0
X-Frontend: front508118
Access-Control-Expose-Headers: X-Frontend


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   10582
Md5:    85f3de213061d251a653b3039ca62269
Sha1:   31025256d7615901fe28e353599cc330361b6dda
Sha256: a36cbf18ad0dcd38845b0a30f764d57fddd68f1d90e34205f641f50cdd37f8e9
                                        
                                            GET /js/al/page.js?1080608918 HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://vk.com/widget_comments.php?app=3320676&width=625px&_ver=1&limit=15&height=0&mini=auto&norealtime=0&page=0&status_publish=0&attach=*&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&title=%D0%92%20%D0%B0%D0%B2%D0%B0%D1%80%D0%B8%D0%B8%20%D0%BF%D0%BE%20%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%C2%AB%D0%91%D0%BB%D0%B0-%D0%B1%D0%BB%D0%B0-%D0%BA%D0%B0%D1%80%D0%BE%D0%BC%C2%BB%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8C-%D1%85%D0%B5%D1%80%D1%81%D0%BE%D0%BD%D0%B5%D1%86%20%D0%BF%D0%BE%D0%B3%D0%B8%D0%B1%2C%20%D1%82%D0%B5%D1%80%D0%BD%D0%BE%D0%BF%D0%BE%D0%BB%D1%8C%D1%86%D1%8B%20...&description=&image=&referrer=&160267d8711
Cookie: remixlang=3; remixstid=1713364059_32f8e5f4afac6a3c22

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:10 GMT
Last-Modified: Fri, 01 Dec 2017 15:47:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a217987-3c807"
Expires: Sat, 09 Dec 2017 11:44:10 GMT
Cache-Control: max-age=345600
X-Frontend: front508121
Access-Control-Expose-Headers: X-Frontend
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   73554
Md5:    2c813963a863c599c09579a78fbd5458
Sha1:   663f3153c5816f9f33079473c4aeab9f87a0450d
Sha256: 6da26dcac6702c041d4725dc6465225a84b25d10d39788a1591303c8ba59407d
                                        
                                            GET /css/al/fonts_cnt.css?2889730895 HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://vk.com/widget_comments.php?app=3320676&width=625px&_ver=1&limit=15&height=0&mini=auto&norealtime=0&page=0&status_publish=0&attach=*&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&title=%D0%92%20%D0%B0%D0%B2%D0%B0%D1%80%D0%B8%D0%B8%20%D0%BF%D0%BE%20%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%C2%AB%D0%91%D0%BB%D0%B0-%D0%B1%D0%BB%D0%B0-%D0%BA%D0%B0%D1%80%D0%BE%D0%BC%C2%BB%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8C-%D1%85%D0%B5%D1%80%D1%81%D0%BE%D0%BD%D0%B5%D1%86%20%D0%BF%D0%BE%D0%B3%D0%B8%D0%B1%2C%20%D1%82%D0%B5%D1%80%D0%BD%D0%BE%D0%BF%D0%BE%D0%BB%D1%8C%D1%86%D1%8B%20...&description=&image=&referrer=&160267d8711
Cookie: remixlang=3; remixstid=1713364059_32f8e5f4afac6a3c22

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:09 GMT
Last-Modified: Thu, 19 Oct 2017 16:32:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"59e8d3a7-7527b"
Expires: Sat, 09 Dec 2017 11:44:09 GMT
Cache-Control: max-age=345600
Strict-Transport-Security: max-age=0
X-Frontend: front508120
Access-Control-Expose-Headers: X-Frontend
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   368172
Md5:    d8b43f6767854bf2299b0d36a5d90c11
Sha1:   07d236b4d91752196dee28c7f051c6bd5c5cf3c4
Sha256: 33d02f8c24d97de92ae3bda3c3a9774f7f7ce28e1a271e58aa4ebcc5d14dc60e
                                        
                                            GET /js/cmodules/web/audioplayer.js?3876525056 HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://vk.com/widget_comments.php?app=3320676&width=625px&_ver=1&limit=15&height=0&mini=auto&norealtime=0&page=0&status_publish=0&attach=*&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&title=%D0%92%20%D0%B0%D0%B2%D0%B0%D1%80%D0%B8%D0%B8%20%D0%BF%D0%BE%20%D0%B4%D0%BE%D1%80%D0%BE%D0%B3%D0%B5%20%D0%BD%D0%B0%20%D0%BC%D0%BE%D1%80%D0%B5%20%C2%AB%D0%91%D0%BB%D0%B0-%D0%B1%D0%BB%D0%B0-%D0%BA%D0%B0%D1%80%D0%BE%D0%BC%C2%BB%20%D0%B2%D0%BE%D0%B4%D0%B8%D1%82%D0%B5%D0%BB%D1%8C-%D1%85%D0%B5%D1%80%D1%81%D0%BE%D0%BD%D0%B5%D1%86%20%D0%BF%D0%BE%D0%B3%D0%B8%D0%B1%2C%20%D1%82%D0%B5%D1%80%D0%BD%D0%BE%D0%BF%D0%BE%D0%BB%D1%8C%D1%86%D1%8B%20...&description=&image=&referrer=&160267d8711
Cookie: remixlang=3; remixstid=1713364059_32f8e5f4afac6a3c22

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:10 GMT
Last-Modified: Mon, 04 Dec 2017 20:46:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5a25b412-1cf55"
Expires: Sat, 09 Dec 2017 11:44:10 GMT
Cache-Control: max-age=345600
X-Frontend: front508122
Access-Control-Expose-Headers: X-Frontend
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   37546
Md5:    4e54e168b05e5e0006d94f496925a70b
Sha1:   14cc8406bbeb433f622e383f864f0b1cf8206f5b
Sha256: 9bd9d13180e2203584b63d35c8ecfdcf0a92c104a56dc1b9b3031f72fe3ea839
                                        
                                            GET /l/1262?v=2520790 HTTP/1.1 
Host: g.novostimira.biz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         77.120.111.163
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: Microsoft-IIS/7.5
Date: Tue, 05 Dec 2017 11:44:22 GMT
Content-Length: 6330
Connection: close
ap-Exec-Time-mks: D=10538
srv-n: b3
Cache-Control: no-cache, must-revalidate
Set-Cookie: GNMn1262=1; expires=Tue, 05-Dec-2017 11:54:10 GMT; Max-Age=600
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET


--- Additional Info ---
Magic:  UTF-8 Unicode C program text, with very long lines, with no line terminators
Size:   6330
Md5:    ba0e037a4bc846b1c5de21b026b848a7
Sha1:   aae940a3fe81844f9d244aa4bd73bf3938aea71a
Sha256: e9b6d0d76afda8cc91bec515c12a37c9cbeb9e7ec9f42f66ee64e4b317fd17f9
                                        
                                            GET /images/icons/comments_widget.png HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://vk.com/css/al/widget_comments.css?34204477847
Cookie: remixlang=3; remixstid=1713364059_32f8e5f4afac6a3c22

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:10 GMT
Content-Length: 973
Last-Modified: Sat, 07 Jan 2017 23:20:57 GMT
Connection: keep-alive
Etag: "587177d9-3cd"
Expires: Tue, 12 Dec 2017 11:44:10 GMT
Cache-Control: max-age=604800
Strict-Transport-Security: max-age=0
X-Frontend: front508117
Access-Control-Expose-Headers: X-Frontend
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 21 x 87, 8-bit/color RGBA, non-interlaced
Size:   973
Md5:    09e77450b74bff6ca06a39a522886dab
Sha1:   832b11bf61416486273ba2e14585d375fbf31f9f
Sha256: 79cf44ec3dd49a31500dc62a42cf530d6d2f84cad5cddc0904fc6a6e765dbfbe
                                        
                                            GET /fonts/opensans400.woff HTTP/1.1 
Host: vk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://vk.com/css/al/fonts_cnt.css?2889730895
Cookie: remixlang=3; remixstid=1713364059_32f8e5f4afac6a3c22

                                         
                                         87.240.165.80
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:10 GMT
Content-Length: 96116
Last-Modified: Tue, 29 Mar 2016 16:54:11 GMT
Connection: keep-alive
Etag: "56fab333-17774"
Expires: Tue, 12 Dec 2017 11:44:10 GMT
Cache-Control: max-age=604800
Strict-Transport-Security: max-age=0
X-Frontend: front508119
Access-Control-Expose-Headers: X-Frontend
Accept-Ranges: bytes


--- Additional Info ---
Magic:  data
Size:   96116
Md5:    60bdb28dc8230486c5b0e868c82fb5dc
Sha1:   b54a99f1f13e6f0f89e734c3393beb8bc74bbdd6
Sha256: 3c669add48bf3a45fa266a020fcaac2e6da0fc72d1dd95ba78ac9b77e0afba32
                                        
                                            GET /img/g/487/487779n.jpg HTTP/1.1 
Host: p.novostimira.biz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         77.123.129.125
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: Microsoft-IIS/7.5
Date: Tue, 05 Dec 2017 11:44:23 GMT
Content-Length: 13919
Last-Modified: Thu, 07 Sep 2017 14:30:54 GMT
Connection: close
Etag: "59b1581e-365f"
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   13919
Md5:    f70ecbfb6d988667d1d3a84f11b0d9ae
Sha1:   6496a9eb39271e53f3cf907263ec5e774e587676
Sha256: 915f0b6049fcca8a98548c6fa8910d3b5cbef7055b09a10f151c685e83418075
                                        
                                            GET /img/g/487/487782n.jpg HTTP/1.1 
Host: p.novostimira.biz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         77.123.129.125
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: Microsoft-IIS/7.5
Date: Tue, 05 Dec 2017 11:44:23 GMT
Content-Length: 8674
Last-Modified: Thu, 07 Sep 2017 14:49:53 GMT
Connection: close
Etag: "59b15c91-21e2"
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   8674
Md5:    6a1935d0272d6608a559ffb87dd00d17
Sha1:   98181e58679a6085dd9aa91d8e4ba1de988089ef
Sha256: 028d9d9fb94b87d848153f77d747cb35e9dd9ef510d9caeeab9437eee793f114
                                        
                                            GET /img/g/487/487803n.jpg HTTP/1.1 
Host: p.novostimira.biz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         77.123.129.125
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: Microsoft-IIS/7.5
Date: Tue, 05 Dec 2017 11:44:23 GMT
Content-Length: 11289
Last-Modified: Thu, 07 Sep 2017 14:50:11 GMT
Connection: close
Etag: "59b15ca3-2c19"
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   11289
Md5:    724f490235d13171cffeac967b8d0613
Sha1:   326e14a79c90e24d59d2a5979f44a77955cc79f1
Sha256: cdd90667c54cfae949dc0cce519851ccbf7f6dfee566e9f253bf336cf861c5f9
                                        
                                            GET /img/g/487/487800n.jpg HTTP/1.1 
Host: p.novostimira.biz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         77.123.129.125
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: Microsoft-IIS/7.5
Date: Tue, 05 Dec 2017 11:44:23 GMT
Content-Length: 10777
Last-Modified: Thu, 07 Sep 2017 14:50:11 GMT
Connection: close
Etag: "59b15ca3-2a19"
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   10777
Md5:    0ba2ed69c389912671fefbd0f833b0cb
Sha1:   c88649d2d10aefbe5dc5557eb64de7ffbfe961fe
Sha256: da03e2912e3f076cb4d1f5c8a30d171d47f86cdc387d77cf64199ec6ce089bc6
                                        
                                            GET /css/informers.css?v=3 HTTP/1.1 
Host: informers.sinoptik.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         212.42.76.150
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:11 GMT
Last-Modified: Tue, 16 Sep 2014 12:54:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5418331c-3c0f"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2029
Md5:    e9d0434d93a0fa1cb2d670b94dbd51fb
Sha1:   6ee9341c94843cdf31f0628e2a9403f48852bf75
Sha256: 34508d32021ed73e4095f664eba15db2d58f10d9d4fe4af2f2daf32eaff0a4cb
                                        
                                            GET /sites/all/themes/th/img/opros-bg.png HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/sites/default/files/css/css_71D_nSUNQjr3LxFCmhxc2zIhoGcecKLALC1rdGCF51M.css
Cookie: has_js=1; _ga=GA1.3.2045014946.1512474248; _gid=GA1.3.2086097931.1512474248; _gat=1; MarketGidStorage=%7B%22C589525%22%3A%7B%22page%22%3A1%7D%2C%220%22%3A%7B%7D%2C%22C589522%22%3A%7B%22page%22%3A1%7D%7D

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 05 Dec 2017 11:44:11 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Sat, 13 Jul 2013 22:00:00 GMT
Etag: "d6094b-3f4-4e16bbfa73800"
Accept-Ranges: bytes
Content-Length: 1012
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:11 GMT
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 1 x 1, 8-bit/color RGBA, non-interlaced
Size:   1012
Md5:    31b29f522cc8bcd24fc3b2a53df04189
Sha1:   ce9aaff1d2edc23aeae85254619f6f2c27fe862b
Sha256: 13befa2f33acefd58d15c4dd1762f8122e470a161a3eab28edf6978ee2352f56
                                        
                                            GET /t/k/t.ks.ua.589523.js?t=11711512 HTTP/1.1 
Host: jsc.marketgid.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.212.201.94
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:11 GMT
Last-Modified: Wed, 08 Nov 2017 09:20:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"5a02cc4b-18082"
Expires: Wed, 06 Dec 2017 11:44:11 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   30572
Md5:    896719c418c895daa29e778634c3b52f
Sha1:   5f78c149a9008c35d9c3c7c6e68d342d6d14df05
Sha256: 0f8cbeb932b709f0079997bf134660e69db277417db1092ab8153c79a07d7db9
                                        
                                            GET /sites/all/themes/th/img/bottom-bg.jpg HTTP/1.1 
Host: www.t.ks.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/sites/default/files/css/css_71D_nSUNQjr3LxFCmhxc2zIhoGcecKLALC1rdGCF51M.css
Cookie: has_js=1; _ga=GA1.3.2045014946.1512474248; _gid=GA1.3.2086097931.1512474248; _gat=1; MarketGidStorage=%7B%22C589525%22%3A%7B%22page%22%3A1%7D%2C%220%22%3A%7B%7D%2C%22C589522%22%3A%7B%22page%22%3A1%7D%7D; b=b

                                         
                                         88.198.13.114
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 05 Dec 2017 11:44:11 GMT
Server: Apache/2.2.15 (CentOS) DAV/2 PHP/5.4.28 mod_ssl/2.2.15 OpenSSL/1.0.0-fips
Last-Modified: Sat, 13 Jul 2013 22:00:00 GMT
Etag: "d60938-664-4e16bbfa73800"
Accept-Ranges: bytes
Content-Length: 1636
Cache-Control: max-age=1209600
Expires: Tue, 19 Dec 2017 11:44:11 GMT
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   1636
Md5:    338afdd662eea536b450918c1b1d36a0
Sha1:   1838216e07e8885c1fc5b1ed46643fa67e2dde5c
Sha256: 569dc2c59277c648031d7cc1355b436d6a97002cd7fe809681fa6c09bc23ee5a
                                        
                                            GET /pagead/ads?client=ca-pub-3410491531423553&output=html&h=600&slotname=6457240220&adk=2121935053&adf=807048394&w=300&lmt=1512473767&loeid=20040001%2C38893313&format=300x600&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512474250976&bpp=5&fdt=68&idt=282&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=728x90%2C580x400&correlator=571690591505&frm=20&ga_vid=2045014946.1512474248&ga_sid=1512474249&ga_hid=725952120&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=787&ady=397&biw=1159&bih=754&abxe=1&eid=38893303%2C21061122%2C41667001&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=329 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 05 Dec 2017 11:44:11 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: IDE=AHWqTUmvJ4RlubLrcXP_O47P-RzXc4j6zJHrC7rU-ntJx5B0VGjTTjqIVr-J_fXg; expires=Thu, 05-Dec-2019 11:44:11 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 05 Dec 2017 11:44:11 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6320
Md5:    54545596fbdcd4b8900ee10128a7a4c6
Sha1:   e4db0ee4e1d84e4f577d4acf73993680cdfa2441
Sha256: 02c4d46103aae54a67aefb2f4608f67824eeadefe63e54474b07a1432abde891
                                        
                                            GET /t/k/t.ks.ua.590919.js?t=11711512 HTTP/1.1 
Host: jsc.marketgid.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.212.201.94
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:11 GMT
Last-Modified: Wed, 08 Nov 2017 09:20:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Etag: W/"5a02cc5d-19504"
Expires: Wed, 06 Dec 2017 11:44:11 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   31577
Md5:    af6cd2fb755c6e21b97672cb25e6195d
Sha1:   e5c12f567768827d777330d525315aa5fb8328f9
Sha256: 8034d42508fc646926f09dec1f7161fc88ae1f2f678715a7a18be520a4939427
                                        
                                            GET /img/frc-t1.png HTTP/1.1 
Host: informers.sinoptik.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://informers.sinoptik.ua/css/informers.css?v=3

                                         
                                         212.42.76.150
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:11 GMT
Content-Length: 168
Last-Modified: Tue, 19 Jul 2011 10:31:38 GMT
Connection: keep-alive
Etag: "4e255d0a-a8"
Expires: Wed, 05 Dec 2018 11:44:11 GMT
Cache-Control: max-age=31536000, public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 5 x 4, 8-bit/color RGBA, non-interlaced
Size:   168
Md5:    18edee194d93a00d95ab1e697671bfe2
Sha1:   acacc80a65b7cc2003253302a68114c8aad447d1
Sha256: 07531f638ff8480af382b964ee68d940250303fc0651aa31ae0670e43fb434b6
                                        
                                            GET /img/logo-t2.png HTTP/1.1 
Host: informers.sinoptik.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://informers.sinoptik.ua/css/informers.css?v=3

                                         
                                         212.42.76.150
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:11 GMT
Content-Length: 2444
Last-Modified: Tue, 19 Jul 2011 10:31:38 GMT
Connection: keep-alive
Etag: "4e255d0a-98c"
Expires: Wed, 05 Dec 2018 11:44:11 GMT
Cache-Control: max-age=31536000, public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 93 x 23, 8-bit/color RGBA, non-interlaced
Size:   2444
Md5:    577f2a97826cc211955c5c80b7c17998
Sha1:   7fb4510abd846ff8b2c57006f544d775f8d1a01f
Sha256: 812b13056e0a955622e120865d2231dc2933ca37bb8aac942279cc41ec1d1d27
                                        
                                            GET /?o1&v16917866&s16916894&t0&c1&n583799&w0&m10&y1&d24&r1176 HTTP/1.1 
Host: c.bigmir.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         193.239.68.8
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=windows-1251
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
P3P: policyref="http://www.bigmir.net/w3c/p3p.xml", CP="NON ADM DEV PSA PSD OUR UNI COM NAV INT TAI IVA IND"
Set-Cookie: U=dbf0e102; expires=Sun, 04-Dec-2022 11:44:11 GMT; path=/; domain=.bigmir.net
Cache-Control: no-cache, must-revalidate
Expires: 0
Pragma: no-cache


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   149
Md5:    70f6d951bbc2b1acc16fe07f448262be
Sha1:   aeca1f8193b83695a744d6fd965c56d667bba25a
Sha256: ddf5d7a4c33ac16aa0ccab8a2ecd2d9342a17050688c2df408bb9c10babd0a68
                                        
                                            GET /img/flc-t1.png HTTP/1.1 
Host: informers.sinoptik.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://informers.sinoptik.ua/css/informers.css?v=3

                                         
                                         212.42.76.150
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:11 GMT
Content-Length: 167
Last-Modified: Tue, 19 Jul 2011 10:31:38 GMT
Connection: keep-alive
Etag: "4e255d0a-a7"
Expires: Wed, 05 Dec 2018 11:44:11 GMT
Cache-Control: max-age=31536000, public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 5 x 4, 8-bit/color RGBA, non-interlaced
Size:   167
Md5:    e79184fb5501a6fe9a4ddf041e867a3f
Sha1:   b6b7c6f5b06e72916f846f8189f283b3978a31ac
Sha256: 0ce777967d0e103cfcc1c12282103c3a7502400ad2fe769a866a2e2158956a2f
                                        
                                            GET /img/hlc-t2.png HTTP/1.1 
Host: informers.sinoptik.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://informers.sinoptik.ua/css/informers.css?v=3

                                         
                                         212.42.76.150
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:11 GMT
Content-Length: 181
Last-Modified: Tue, 19 Jul 2011 10:31:38 GMT
Connection: keep-alive
Etag: "4e255d0a-b5"
Expires: Wed, 05 Dec 2018 11:44:11 GMT
Cache-Control: max-age=31536000, public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 5 x 23, 8-bit/color RGBA, non-interlaced
Size:   181
Md5:    8cfbaf9b79a228a1fd79e023ce43fadd
Sha1:   deeac840fbe37d4602c0166a83e25c8fa008276e
Sha256: c85ef490276990e9ae9c0e869935a8c32503a372e5c2c2e0b6daf4240759ec91
                                        
                                            GET /img/term-t2.png HTTP/1.1 
Host: informers.sinoptik.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://informers.sinoptik.ua/css/informers.css?v=3

                                         
                                         212.42.76.150
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:11 GMT
Content-Length: 454
Last-Modified: Tue, 08 Feb 2011 14:13:40 GMT
Connection: keep-alive
Etag: "4d514f94-1c6"
Expires: Wed, 05 Dec 2018 11:44:11 GMT
Cache-Control: max-age=31536000, public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 11 x 31, 8-bit colormap, non-interlaced
Size:   454
Md5:    7666b938fe0a65a30e8286c8058c3743
Sha1:   b90cea78a2ee5b019103fa2533043a24d3379913
Sha256: 79d7fe2f02f73e59b3ddd141a186e815624fb6a844196c57081268c2d0758266
                                        
                                            GET /pagead/gen_204?id=xbid&dbm_b=AKAmf-Bowx7ryDpEN69CznKrqVB7rjBvV4Ude0ujBfhIKhlId5vz0tGHb43p1bHC6rCAJHk-wsvDl2ns6j0s_kihmaeLekClI37PJffdOXYqfoaex7ZWVaE HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3410491531423553&output=html&h=600&slotname=6457240220&adk=2121935053&adf=807048394&w=300&lmt=1512473767&loeid=20040001%2C38893313&format=300x600&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512474250976&bpp=5&fdt=68&idt=282&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=728x90%2C580x400&correlator=571690591505&frm=20&ga_vid=2045014946.1512474248&ga_sid=1512474249&ga_hid=725952120&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=787&ady=397&biw=1159&bih=754&abxe=1&eid=38893303%2C21061122%2C41667001&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=329

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 05 Dec 2017 11:44:11 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 42
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /img/s-informers-t2.png HTTP/1.1 
Host: informers.sinoptik.ua
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://informers.sinoptik.ua/css/informers.css?v=3

                                         
                                         212.42.76.150
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:11 GMT
Content-Length: 36708
Last-Modified: Tue, 08 Feb 2011 14:13:40 GMT
Connection: keep-alive
Etag: "4d514f94-8f64"
Expires: Wed, 05 Dec 2018 11:44:11 GMT
Cache-Control: max-age=31536000, public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 387 x 324, 8-bit colormap, non-interlaced
Size:   36708
Md5:    e38f8e70a77d7ea204803c4984b5eb52
Sha1:   dfcaff384de0ebd18144bd0210d326da42c064c7
Sha256: 5f8a60a18e784c16174ab8616abd0a28fde829f0abb2362f9a917210b25033c5
                                        
                                            GET /dbm/ad?dbm_c=AKAmf-De-a13GQOgxcsvNA_kt2mIAU23iPG2kcRl3CNr-x3OCBBLiAGRgP5lzLmaDxPDUCWexlxv&dbm_d=AKAmf-B-Opc-bZuekFhoUqfGJ1Oytts7RfINCRmnUFi7GM0Ch1KSdaJqeAvFJ4HKAOnVDoYZRCb1mt_7tA93Htz4KPw3idKxCABKGME02YPdF0YIn4pvoXwua0FszWhh2PabnD2aNE9aTO9y8rVXf-7nVTUQprJBZ6QcLqXAGuop9VAkgCwGPkEcHUMCwIim7JsjJYAX9VLufM-AfoNaCDzd7hS-IIoSOcJG_0qV5V1tgBckhf2iePpT9c_Tu3CtS5WqDQKX2Re1PqaOdY22VUClWbngN3iZT4uVqXjrL7KBazVMOXfCwOgPM_-xya34eJtmDvb7X2CAgnKpZYCBgsTjgjBcijY1cb3kI4NLykfWHJQavsVZXGq26hLwX3XZde2DrlI8g-hXbhQ3Ctl_1J8Sk2dkEUFlwO_6b_jj3jugkcTVZgUfggnaeU89uidOJbjoC74Zn9MbPgRECeyI6aYvmKlsjrxsHxgUL1qofHzAZu8XSAYIMtzIaEx9m6vSQV3TGTPQk1AspRgKhW4XTEBbl9nYkx0HOcy_bYRtBoj12Br6o_jQvxoWEUirOZGqFEFQO6kdTjTn2nM96g0lJO-jS62WlmMDaOfY2PeDtr6qSAZH1jZC-Ka6l8eZs7Gh0j8uRZeSB5jRAT3bUCTSNFaJ3z03PluyV8XEjBxbkBLAcHIhiKB6XHJDak_rEGUXM6Sws1S318DCrm3YPUJF9HKR92j_AesoLWPUcDwcDoLLvHAvete7qGLRvPtam7RRaUxqCjd1a_Fy8j-NoyGiHcVhCcd_xyZjWjTXHk8NsWRE_HQ93BkAymLGntfDt71DV4TS9pn-yk7_tl_ZPrz_ILy_eiLb-2cXdLyffYvyITaZTpiuhBGzPb2TFiBEQ-wpyZoyI76aWHwZ8FSlCtgXDeV5FL8UAFWOK7cYHKdfdfjxuMszqgWV-25aXfHFyKZjKAFhW_bGX_kDu0DYoKv1HmKQUT2dcvBZ3Aa5Gjg3e9toAk-FlN1B-bk-4BF9-wA2rrcdsTmE_3rMe0PKUHgNwVjYNTsnRWQLwdveMN3cwGySm1ZNVxmWQuUFhOKngMvrVGg2gA6uoEbyoqHKlzUg-lmhn3pNNBmFUSDcOneXIHySNZ5CJcRH9vbzJk6qHbQw_xyAYT6ouS24jyErcTml5RmFXC2bWyFajDImDEC7eoEMTISqmNk7HLVPciJj29yL2e2mNbLcSwbfKMpjZUgMYnHegL7FtQFGkEunOIk0_1JTP5mN6gCu6Ubcxl67yQ7MPkr75XIQ0bn_v1_CCm93IvBfosu_ce2BOo-t2DqlKJRA4ALqLgyfR0EtS4TPvwAfjDzJz0VPiKh9D0hOAdHSqNcQPO9TYBjs1oIIcO0NN7XHeHU65qYneqFMwg1-ifdwZA-XiYwy7E00gjifd2V-dXONblYuvwv5u5mOckjzGYVsNWMyWquUalHVbeGTZ66bigfVUQqZtU9xmTxoAg6Um7mlE-aIn8gK9uE1aPiX9V6V4mP1utjzSxAg1BuptHV0QHEclmqX8nEwDQzkZcu12byxEZHOA8Pn07CpwW7NAHH-RAnZXxqq0gMJr0U4LKzbOpTw3ervKvpzq4S-w8bLgFwHJEVudHJNTP8JhGzw8ZI3Y5iqPWVoj4G7pVj2mrGtCnftRIwq_TnI4VPgLMsckYHyWUzFDvC4BbNnHCdGSfY6fgQHJiApjtl2awetA5Cl_KMX3R_a9c_vNlX64NJlYN7Dd7Bp4mkMbeUpndbr-K1yG8zH-UW_nVEl4UYYHM-iyHOvjPqjqxllMrhH8-MiEPfMILIsHLf4L9cb1XiqSlt6QDrrdh0hSOENLQWlY_cH0SMiFYkE68_GWCLwW9rnqo4UFb2972Lbxqc-FJJbL2OkOcO5p5Lk_TXpJCFOoUUQ9qpYv6t6Apk0MF9rI2yyZc5VECAyLLM9S5leemj25rjdHufzivrxz4btYDYhdRuvCK4reGcb2ufjGSUjY_yxCICjw3-a9-ErHrbBDTBkwhtwaeies62ZVlaStQgKZCPJLqWvMQM85XkWtsiAWECLFlCo6txRjrlbg4hafbqbKG_FOsF2Ed688gjO-UhxckR_WAz4MNIRcNB3h3ei8xfdFoaUC0X2pECW_Q&cid=CAASEuRoW8r3ljADMO5UzLnNC15zgw&rfl=3%2C%2Chttp%253A%252F%252Fwww.t.ks.ua%252Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy%240 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3410491531423553&output=html&h=600&slotname=6457240220&adk=2121935053&adf=807048394&w=300&lmt=1512473767&loeid=20040001%2C38893313&format=300x600&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512474250976&bpp=5&fdt=68&idt=282&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=728x90%2C580x400&correlator=571690591505&frm=20&ga_vid=2045014946.1512474248&ga_sid=1512474249&ga_hid=725952120&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=787&ady=397&biw=1159&bih=754&abxe=1&eid=38893303%2C21061122%2C41667001&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=329
Cookie: IDE=AHWqTUmvJ4RlubLrcXP_O47P-RzXc4j6zJHrC7rU-ntJx5B0VGjTTjqIVr-J_fXg

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Tue, 05 Dec 2017 11:44:11 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   12357
Md5:    a380b8a0874346a6aa16a674c481aa2a
Sha1:   579296ca2d41245674b3a3d4429a24c82461d03e
Sha256: a61c3b89b221fbd5edc1e25fec3a0bd550ea529e378e4fd449505c87fd55dac0
                                        
                                            GET /pagead/js/r20171129/r20110914/abg.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3410491531423553&output=html&h=600&slotname=6457240220&adk=2121935053&adf=807048394&w=300&lmt=1512473767&loeid=20040001%2C38893313&format=300x600&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512474250976&bpp=5&fdt=68&idt=282&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=728x90%2C580x400&correlator=571690591505&frm=20&ga_vid=2045014946.1512474248&ga_sid=1512474249&ga_hid=725952120&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=787&ady=397&biw=1159&bih=754&abxe=1&eid=38893303%2C21061122%2C41667001&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=329

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 30 Nov 2017 06:40:39 GMT
Expires: Thu, 14 Dec 2017 06:40:39 GMT
Etag: 3670727170429105090
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 25249
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 450212
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   25249
Md5:    c3abff25ca48d2e17d7ed334a08d4a64
Sha1:   62897dc07c7e92153469abf9972d655904fdb860
Sha256: 37a61ce200db317993b38ab8e0bf2e9b44f4963e13e0988f3e85e37b52d58067
                                        
                                            GET /pagead/images/x_button_blue2.png HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3410491531423553&output=html&h=600&slotname=6457240220&adk=2121935053&adf=807048394&w=300&lmt=1512473767&loeid=20040001%2C38893313&format=300x600&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512474250976&bpp=5&fdt=68&idt=282&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=728x90%2C580x400&correlator=571690591505&frm=20&ga_vid=2045014946.1512474248&ga_sid=1512474249&ga_hid=725952120&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=787&ady=397&biw=1159&bih=754&abxe=1&eid=38893303%2C21061122%2C41667001&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=329

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: image/png
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Mon, 04 Dec 2017 12:20:37 GMT
Expires: Tue, 05 Dec 2017 12:20:37 GMT
Etag: 291775052866240956
X-Content-Type-Options: nosniff
Server: cafe
Content-Length: 145
X-XSS-Protection: 1; mode=block
Age: 84214
Cache-Control: public, max-age=86400
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 16 x 15, 8-bit/color RGB, non-interlaced
Size:   145
Md5:    60b7612b7cde75ce329db6a6b0415b23
Sha1:   66c106bf496bb1ca11ecd7dda5816b36e7165a0e
Sha256: bc8347bb6ce7622050ab41f67dda0513db000d96158eceab4cfc01963d27fa58
                                        
                                            GET /hit?t23.6;r;s1176*885*24;uhttp%3A//www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy;0.5610575980447974 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.212.196.103
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Date: Tue, 05 Dec 2017 11:44:07 GMT
Server: 0W/0.8c
Location: http://counter.yadro.ru/hit?q;t23.6;r;s1176*885*24;uhttp%3A//www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy;0.5610575980447974
Content-Length: 32
Expires: Sun, 04 Dec 2016 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: FTID=1Q9eQ70UgB9e1Q9eQ7002GWj; path=/; expires=Tue, 04 Dec 2018 21:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  HTML document text
Size:   32
Md5:    3e9c09a8c5a87f266e047a596f48578c
Sha1:   07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
Sha256: 57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
                                        
                                            GET /hit;All_da_nnn_dn_realty?r;s1176*885*24;uhttp%3A//www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy;0.642151657982314 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         88.212.196.103
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Date: Tue, 05 Dec 2017 11:44:07 GMT
Server: 0W/0.8c
Location: http://counter.yadro.ru/hit;All_da_nnn_dn_realty?q;r;s1176*885*24;uhttp%3A//www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy;0.642151657982314
Content-Length: 32
Expires: Sun, 04 Dec 2016 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: FTID=1Q9eQ70UgB9e1Q9eQ7002GWl; path=/; expires=Tue, 04 Dec 2018 21:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  HTML document text
Size:   32
Md5:    3e9c09a8c5a87f266e047a596f48578c
Sha1:   07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
Sha256: 57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
                                        
                                            GET /cnt/samples/default/b57_left.gif HTTP/1.1 
Host: i.bigmir.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy
Cookie: U=dbf0e102

                                         
                                         193.239.71.100
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:11 GMT
Content-Length: 319
Last-Modified: Tue, 23 Jan 2007 13:14:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Etag: "45b60a33-13f"
Expires: Fri, 08 Dec 2017 11:44:11 GMT
Cache-Control: max-age=259200
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 7 x 17
Size:   319
Md5:    0d4e2c2b81f9bcc55503213e76d663cc
Sha1:   5df71fd127df928d0edffbd424a1b3d8991ae416
Sha256: ebae1af4a0fb8c6db224686c85f213adcaf37212e49c10edd4a722a06266913a
                                        
                                            GET /cnt/samples/default/b57_right.gif HTTP/1.1 
Host: i.bigmir.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy
Cookie: U=dbf0e102

                                         
                                         193.239.71.100
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:11 GMT
Content-Length: 314
Last-Modified: Tue, 23 Jan 2007 13:14:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Etag: "45b60a33-13a"
Expires: Fri, 08 Dec 2017 11:44:11 GMT
Cache-Control: max-age=259200
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 7 x 17
Size:   314
Md5:    c47e826215f5dad5640c6dfc2bd349dd
Sha1:   fe39b2b692b9a25b7de8660c297a5577b90855e8
Sha256: 1c4f8dd4d6014e189cfb9a8c41ddf3f1d1dab4bdd68c872334a63a291a5604ca
                                        
                                            GET /cnt/samples/default/b57_center.gif HTTP/1.1 
Host: i.bigmir.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy
Cookie: U=dbf0e102

                                         
                                         193.239.71.100
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Tue, 05 Dec 2017 11:44:11 GMT
Content-Length: 146
Last-Modified: Tue, 23 Jan 2007 13:14:27 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Etag: "45b60a33-92"
Expires: Fri, 08 Dec 2017 11:44:11 GMT
Cache-Control: max-age=259200
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 17
Size:   146
Md5:    df49900d91c7e7e2d62ade83ac459335
Sha1:   e3f9a4da722b4d0399fcf19ae82c4605fdca40d7
Sha256: 91084dabad218b0e62e313c102d801e7fec5d134a770524e46667a7b94db0d4d
                                        
                                            GET /news/js/info.min.js?t=1512474246 HTTP/1.1 
Host: st.directadvert.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy
Cookie: dadcm46=1; dadcm3=1; nid=w6EQhVomhoaLcAilLnZUAg==

                                         
                                         176.99.0.101
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Server: nginx/1.12.1
Date: Tue, 05 Dec 2017 11:44:12 GMT
Last-Modified: Thu, 27 Apr 2017 11:03:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5901d014-12c2"
Expires: Tue, 19 Dec 2017 11:44:12 GMT
Cache-Control: max-age=1209600
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2486
Md5:    5ebaa3313a62ac6b129dfab1780b7688
Sha1:   e23a583f722dda6c265edb4f9b1f5d3de69b8c0b
Sha256: 8b01583772a2e66f78ba0db52d735082059a69a324f1e2126ee4802b5da3d042
                                        
                                            GET /data/180807.js?nnn=180807&div=DIV_DA_180807&t=0.720127611047168 HTTP/1.1 
Host: code.directadvert.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy
Cookie: dadcm46=1; dadcm3=1; nid=w6EQhVomhoaLcAilLnZUAg==

                                         
                                         195.161.16.133
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=windows-1251
                                        
Server: nginx/1.12.1
Date: Tue, 05 Dec 2017 11:44:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR NOR"
Set-Cookie: s=7463240:7464382:7455808; expires=Tue, 12-Dec-2017 11:44:12 GMT; path=/; domain=directadvert.ru
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
Access-Control-Max-Age: 1728000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2343
Md5:    5f1849ef4ad88657443af36e8dd39a1d
Sha1:   dde8dae0c694e2a27d75a2bfed0f2554d15ea1ae
Sha256: db47858ffde4a46f583da70197ba8b7ced401e76f2f795fbf22209193a56a9ce
                                        
                                            GET /hit?q;t23.6;r;s1176*885*24;uhttp%3A//www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy;0.5610575980447974 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy
Cookie: FTID=1Q9eQ70UgB9e1Q9eQ7002GWj

                                         
                                         88.212.196.103
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 05 Dec 2017 11:44:07 GMT
Server: 0W/0.8c
Connection: Close
Content-Length: 485
Expires: Sun, 04 Dec 2016 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: VID=1l9Apz3e-S9e1Q9eQ7002GXg; path=/; expires=Tue, 04 Dec 2018 21:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  GIF image data, version 87a, 88 x 15
Size:   485
Md5:    e79f2c7347cb2992408f47787c2d838d
Sha1:   257e1cacbdb9d1f8b89d5b2d900a72bff0fd2715
Sha256: 8fbc73b3d34f36066562cff680653afd5438f78e2f1512a1ba0169195f25ad86
                                        
                                            GET /hit;All_da_nnn_dn_realty?q;r;s1176*885*24;uhttp%3A//www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy;0.642151657982314 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy
Cookie: FTID=1Q9eQ70UgB9e1Q9eQ7002GWl

                                         
                                         88.212.196.103
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 05 Dec 2017 11:44:07 GMT
Server: 0W/0.8c
Connection: Close
Content-Length: 43
Expires: Sun, 04 Dec 2016 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: VID=1l9Apz3e-S9e1Q9eQ7002GXh; path=/; expires=Tue, 04 Dec 2018 21:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    fc94fb0c3ed8a8f909dbc7630a0987ff
Sha1:   56d45f8a17f5078a20af9962c992ca4678450765
Sha256: 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
                                        
                                            GET /pagead/js/lidar.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3410491531423553&output=html&h=600&slotname=6457240220&adk=2121935053&adf=807048394&w=300&lmt=1512473767&loeid=20040001%2C38893313&format=300x600&url=http%3A%2F%2Fwww.t.ks.ua%2Fv-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1512474250976&bpp=5&fdt=68&idt=282&shv=r20171129&cbv=r20170110&saldr=aa&prev_fmts=728x90%2C580x400&correlator=571690591505&frm=20&ga_vid=2045014946.1512474248&ga_sid=1512474249&ga_hid=725952120&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=787&ady=397&biw=1159&bih=754&abxe=1&eid=38893303%2C21061122%2C41667001&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=3&dtd=329

                                         
                                         216.58.201.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 05 Dec 2017 11:34:17 GMT
Expires: Tue, 05 Dec 2017 12:34:17 GMT
Etag: 9687863559344253809
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 33805
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 595
Alt-Svc: hq="googleads.g.doubleclick.net:443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   33805
Md5:    20921d7dc241df639584e4115e0dcae0
Sha1:   60f526df4c549af678c2daac7db0b0713a40ef15
Sha256: b32603ab3b8bac66ac537ca3013226065993f352407a96e63dc092b72bd86f59
                                        
                                            GET /cdn/images/100x100/13/4625213.jpg HTTP/1.1 
Host: cdn.directadvert.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy
Cookie: dadcm46=1; dadcm3=1; nid=w6EQhVomhoaLcAilLnZUAg==; s=7463240:7464382:7455808

                                         
                                         195.161.16.136
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.12.1
Date: Tue, 05 Dec 2017 11:44:12 GMT
Content-Length: 5670
Last-Modified: Fri, 01 Dec 2017 08:37:02 GMT
Connection: keep-alive
Etag: "5a2114ae-1626"
Expires: Thu, 04 Jan 2018 11:44:12 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
Access-Control-Max-Age: 1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   5670
Md5:    b68e11bd6b6aa7a060d132dbe5c906c7
Sha1:   54b36b5bb05f84bf3d6c7679d864209b0e9194a2
Sha256: 326696b52423cebe4039928665eccc4794cf157d2b13cea3b97af54e03096388
                                        
                                            GET /cdn/images/100x100/06/4632906.jpg HTTP/1.1 
Host: cdn.directadvert.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy
Cookie: dadcm46=1; dadcm3=1; nid=w6EQhVomhoaLcAilLnZUAg==; s=7463240:7464382:7455808

                                         
                                         195.161.16.136
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.12.1
Date: Tue, 05 Dec 2017 11:44:12 GMT
Content-Length: 6257
Last-Modified: Mon, 04 Dec 2017 21:58:01 GMT
Connection: keep-alive
Etag: "5a25c4e9-1871"
Expires: Thu, 04 Jan 2018 11:44:12 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
Access-Control-Max-Age: 1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   6257
Md5:    99e22ad46089577724e0ef72a4740cd5
Sha1:   9e00c094bb587ad8dd0a9331fae6d2280fb1082b
Sha256: bd3ab8ef0891f88d1cd0178db03b4dbeb05c0dc9d775c8ac52d6268957878171
                                        
                                            GET /cdn/images/100x100/87/4634087.jpg HTTP/1.1 
Host: cdn.directadvert.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy
Cookie: dadcm46=1; dadcm3=1; nid=w6EQhVomhoaLcAilLnZUAg==; s=7463240:7464382:7455808

                                         
                                         195.161.16.136
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.12.1
Date: Tue, 05 Dec 2017 11:44:12 GMT
Content-Length: 4423
Last-Modified: Tue, 05 Dec 2017 09:22:02 GMT
Connection: keep-alive
Etag: "5a26653a-1147"
Expires: Thu, 04 Jan 2018 11:44:12 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
Access-Control-Max-Age: 1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   4423
Md5:    058e0ee651133c3e0c40bc75b4908101
Sha1:   a30d61237b6433d58fc8864257396e0d61346f18
Sha256: 1ca45859ec0ec926a7acf16628e0aebe94502a75437c3ccc6b7daf32dd2b69ec
                                        
                                            GET /hit;All_da_nnn_dn_realty?r;s1176*885*24;uhttp%3A//www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy;0.6166841405427266 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy
Cookie: FTID=1Q9eQ70UgB9e1Q9eQ7002GWl

                                         
                                         88.212.196.103
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Date: Tue, 05 Dec 2017 11:44:07 GMT
Server: 0W/0.8c
Location: http://counter.yadro.ru/hit;All_da_nnn_dn_realty?q;r;s1176*885*24;uhttp%3A//www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy;0.6166841405427266
Content-Length: 32
Expires: Sun, 04 Dec 2016 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: VID=1l9Apz3e-S9e1Q9eQ7002GYw; path=/; expires=Tue, 04 Dec 2018 21:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  HTML document text
Size:   32
Md5:    3e9c09a8c5a87f266e047a596f48578c
Sha1:   07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
Sha256: 57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
                                        
                                            GET /hit;All_da_nnn_dn_realty?q;r;s1176*885*24;uhttp%3A//www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy;0.6166841405427266 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy
Cookie: FTID=1Q9eQ70UgB9e1Q9eQ7002GWl; VID=1l9Apz3e-S9e1Q9eQ7002GYw

                                         
                                         88.212.196.103
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 05 Dec 2017 11:44:07 GMT
Server: 0W/0.8c
Connection: Close
Content-Length: 43
Expires: Sun, 04 Dec 2016 21:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
P3P: policyref="/w3c/p3p.xml", CP="UNI"
Set-Cookie: FTID=0; path=/; expires=Sat, 01 Jan 2000 00:00:00 GMT; domain=.yadro.ru


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    fc94fb0c3ed8a8f909dbc7630a0987ff
Sha1:   56d45f8a17f5078a20af9962c992ca4678450765
Sha256: 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 05 Dec 2017 11:44:12 GMT
Server: Apache
Last-Modified: Mon, 04 Dec 2017 01:44:52 GMT
Expires: Mon, 11 Dec 2017 01:44:52 GMT
Etag: 66782DB787408BFCD053E55C4C33ACA497AFAAD1
Cache-Control: max-age=481839,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp23
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    fce547f9fefac48ddc291fdc3381c3b8
Sha1:   66782db787408bfcd053e55c4c33aca497afaad1
Sha256: 4ef9055bb7659473c054d6d394717247accfb3c471a61f921766613adca4c5a9
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 05 Dec 2017 11:44:12 GMT
Server: Apache
Last-Modified: Sun, 03 Dec 2017 10:16:14 GMT
Expires: Sun, 10 Dec 2017 10:16:14 GMT
Etag: E86F5796B21C0AEEED44DE84BC96D0E9A5FE680B
Cache-Control: max-age=426121,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp23
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    8f4b1c251a6d4d2aa7fcb82821bef548
Sha1:   e86f5796b21c0aeeed44de84bc96d0e9a5fe680b
Sha256: 199d3ed92bda5c100c0977fe9f22ec3bb38686ecef07a00d884be93b1a605c15
                                        
                                            GET /data/181195.js?nnn=181195&div=DIV_DA_181195&t=0.361190979197961 HTTP/1.1 
Host: code.directadvert.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy
Cookie: dadcm46=1; dadcm3=1; nid=w6EQhVomhoaLcAilLnZUAg==; s=7463240:7464382:7455808

                                         
                                         195.161.16.133
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=windows-1251
                                        
Server: nginx/1.12.1
Date: Tue, 05 Dec 2017 11:44:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR OUR NOR"
Set-Cookie: s=7463240:7464382:7455808:7462757:7461415; expires=Tue, 12-Dec-2017 11:44:12 GMT; path=/; domain=directadvert.ru
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
Access-Control-Max-Age: 1728000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3373
Md5:    414eb074501ca9bea7b70aeec6d43ee8
Sha1:   cd53084062d19619c54795ae5942eeb7563e1157
Sha256: 9b23f4ab0a03e209f56bb7b18ae624726dda14b1776e4890ea07242f65cb4fdc
                                        
                                            GET /cdn/images/90x90/02/4632402.jpg HTTP/1.1 
Host: cdn.directadvert.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy
Cookie: dadcm46=1; dadcm3=1; nid=w6EQhVomhoaLcAilLnZUAg==; s=7463240:7464382:7455808:7462757:7461415

                                         
                                         195.161.16.136
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.12.1
Date: Tue, 05 Dec 2017 11:44:12 GMT
Content-Length: 6069
Last-Modified: Mon, 04 Dec 2017 16:55:01 GMT
Connection: keep-alive
Etag: "5a257de5-17b5"
Expires: Thu, 04 Jan 2018 11:44:12 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
Access-Control-Max-Age: 1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   6069
Md5:    962003ba498c6a4b79c25fbc3b7e93c2
Sha1:   45b18f2a9ec233f1b96eb0b18676715e497ffd33
Sha256: 8ddaa84367474ed7e5838feff79717d1aa1fa74a3cc481f76f62173d5e071ee4
                                        
                                            GET /cdn/images/90x90/13/4631013.jpg HTTP/1.1 
Host: cdn.directadvert.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy
Cookie: dadcm46=1; dadcm3=1; nid=w6EQhVomhoaLcAilLnZUAg==; s=7463240:7464382:7455808:7462757:7461415

                                         
                                         195.161.16.136
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.12.1
Date: Tue, 05 Dec 2017 11:44:12 GMT
Content-Length: 5868
Last-Modified: Mon, 04 Dec 2017 08:41:01 GMT
Connection: keep-alive
Etag: "5a250a1d-16ec"
Expires: Thu, 04 Jan 2018 11:44:12 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
Access-Control-Max-Age: 1728000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   5868
Md5:    bee7f8f6fc940009a2592cd54f2d6761
Sha1:   2f1f87c7835f5c927a11a012c0db4cb9a54ced2e
Sha256: be5ffffdd4b7e44e63f1aeac01198207f4965b90b1ae704a7612a2e9067747b9
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 05 Dec 2017 11:44:12 GMT
Server: Apache
Last-Modified: Sun, 03 Dec 2017 10:16:14 GMT
Expires: Sun, 10 Dec 2017 10:16:14 GMT
Etag: 7DEFD7AE058C9FA5E93D758ED2B274FD8FD7E348
Cache-Control: max-age=426121,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp32
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    baa2492cb8a205d549febea37749ffba
Sha1:   7defd7ae058c9fa5e93d758ed2b274fd8fd7e348
Sha256: 3aa1bd19f533806dd413a35410ef2d415546ed5375b6aa5247bf3a7d6b87f7c8
                                        
                                            GET /rich/0/8/462620308b HTTP/1.1 
Host: thumbs.ssp.rambler.ru
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.t.ks.ua/v-avarii-po-doroge-na-more-bla-bla-karom-voditel-hersonec-pogib-ternopolcy-tozhe-poluchili-travmy

                                         
                                         91.192.149.30
HTTP/1.1 200 OK
Content-Type: image/jpeg