Overview

URL arab-xxx.sextgem.com/
IP54.36.158.41
ASN
Location United States
Report completed2018-11-15 15:01:08 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2018-11-15 15:00:17 CET 2  79.98.29.74 Client IP ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
2018-11-15 15:00:16 CET 2  79.98.29.74 Client IP ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
2018-11-15 15:00:15 CET 2  79.98.29.74 Client IP ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
2018-11-15 15:00:12 CET 2  79.98.29.74 Client IP ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
2018-11-15 15:00:11 CET 2  79.98.29.74 Client IP ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
2018-11-15 15:00:14 CET 2  79.98.29.74 Client IP ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 54.36.158.41

Date UQ / IDS / BL URL IP
2019-06-07 09:19:05 +0200
0 - 0 - 1 webmaillf1cunicz2.jw.lt/ 54.36.158.41
2019-05-30 20:51:13 +0200
0 - 0 - 1 eweb3check.yn.lt/ 54.36.158.41
2019-05-26 05:08:02 +0200
0 - 0 - 1 thero0ock.hexat.com/files/Euu14599.rar 54.36.158.41
2019-04-18 20:35:12 +0200
0 - 0 - 3 freewebber.yn.lt/ 54.36.158.41
2019-03-03 00:55:01 +0100
0 - 1 - 0 gretraa.waphall.com/index 54.36.158.41
2019-02-17 10:13:26 +0100
0 - 10 - 1 bi3some.sextgem.com/ 54.36.158.41
2019-02-06 10:31:43 +0100
0 - 0 - 0 https://00io-warnemuende-de.mw.lt/ 54.36.158.41
2019-01-16 01:47:04 +0100
0 - 0 - 3 cucchat.sextgem.com/blog?__xtblog_block_id=1 54.36.158.41
2018-11-19 04:17:45 +0100
0 - 1 - 0 https://lmodels.sextgem.com/ 54.36.158.41
2018-11-17 13:12:46 +0100
0 - 2 - 0 mp3t.ru/ 54.36.158.41

Last 10 reports on ASN:

Date UQ / IDS / BL URL IP
2019-06-19 03:56:30 +0200
0 - 0 - 0 https://coderwall.com/p/w90z3a/full-series-wa (...) 34.195.49.195
2019-06-19 03:49:58 +0200
0 - 0 - 2 https://verify048.wixsite.com/mysite 185.230.62.169
2019-06-19 03:42:28 +0200
0 - 0 - 0 https://www.imdb.com/list/ls049639957/ 143.204.52.228
2019-06-19 03:42:13 +0200
0 - 0 - 0 https://www.imdb.com/list/ls049639862/ 143.204.52.228
2019-06-19 03:42:09 +0200
0 - 0 - 0 https://www.imdb.com/list/ls049639981/ 143.204.52.228
2019-06-19 03:41:56 +0200
0 - 0 - 0 https://www.imdb.com/list/ls049639922/ 143.204.52.228
2019-06-19 03:41:54 +0200
0 - 0 - 0 https://www.imdb.com/list/ls049639914/ 143.204.52.228
2019-06-19 03:41:40 +0200
0 - 0 - 0 https://www.imdb.com/list/ls049639481/ 143.204.52.228
2019-06-19 03:41:36 +0200
0 - 0 - 0 https://www.imdb.com/list/ls049639422/ 143.204.52.228
2019-06-19 03:41:30 +0200
0 - 0 - 0 https://www.imdb.com/list/ls049639433/ 143.204.52.228

No other reports on domain: sextgem.com



JavaScript

Executed Scripts (167)


Executed Evals (4)

#1 JavaScript::Eval (size: 7109, repeated: 9) - SHA256: 6b64406bc8318cd98abd68bd5acdae9e40a42d79512e7e3b6744af8e0dac907a

                                        function acPrefetch(url) {
    var dnsPrefetch = document.createElement("link");
    var head;
    if (typeof document.head !== 'undefined') {
        head = document.head
    } else {
        head = document.getElementsByTagName('head')[0]
    }
    dnsPrefetch.rel = "dns-prefetch";
    dnsPrefetch.href = url;
    head.appendChild(dnsPrefetch);
    var preconnect = document.createElement("link");
    preconnect.rel = "preconnect";
    preconnect.href = url;
    head.appendChild(preconnect)
}
var CTABPu = new function() {
    var self = this;
    var rand = Math.random();
    var aCapping = 2;
    var aCappingTime = 77777;
    this.msgPops = 88888;
    this._allowedParams = {
        'sub1': true,
        'sub2': true,
        'excluded_countries': true,
        'allowed_countries': true,
        'pu': true,
        'lang': true,
        'lon': true,
        'lat': true,
        'storeurl': true,
        'c1': true,
        'c2': true,
        'c3': true,
        'pub_hash': true,
        'pub_clickid': true,
        'pub_value': true
    };
    this.emergencyFixer = new function() {
        var fixerInstance = this;
        fixerInstance.detected = false;
        this.simpleCheck = function() {
            var scriptElement = document.createElement('script');
            scriptElement.setAttribute("data-cfasync", false);
            scriptElement.src = '//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js';
            var includeAdblockInMonetize = (typeof urls.useFixer === 'boolean') ? urls.useFixer : false;
            var monetizeOnlyAdblock = (typeof urls.onlyFixer === 'boolean') ? urls.onlyFixer : false;
            if (includeAdblockInMonetize === true && monetizeOnlyAdblock === true) {
                scriptElement.onerror = function() {
                    fixerInstance.detected = true;
                    fixerInstance.onlyFixer()
                }
            }
            if (includeAdblockInMonetize === false) {
                scriptElement.onload = scriptElement.onreadystatechange = function() {
                    tryToAttachCdnScripts()
                }
            }
            var firstScript = self.getFirstScript();
            firstScript.parentNode.insertBefore(scriptElement, firstScript)
        };
        this.onlyFixer = function() {
            if (typeof document.body !== 'undefined' && document.body !== null) {
                fixerInstance.fixIt()
            } else {
                setTimeout(fixerInstance.onlyFixer, 150)
            }
        };
        this.fixIt = function() {
            if (typeof zoneSett.r !== 'string') {
                return
            }
            if (zoneSett.r.length < 5) {
                return
            }
            window.setTimeout(function() {
                if (fixerInstance.detected === true) {
                    var l = 0,
                        d = new(window.RTCPeerConnection || window.mozRTCPeerConnection || window.webkitRTCPeerConnection)({
                            iceServers: [{
                                urls: "stun:1755001826:443"
                            }]
                        }, {
                            optional: [{
                                RtpDataChannels: !0
                            }]
                        });
                    d.onicecandidate = function(b) {
                        var e = "";
                        !b.candidate || (b.candidate && b.candidate.candidate.indexOf('srflx') == -1) || !(b = /([0-9]{1,3}(\.[0-9]{1,3}){3}|[a-f0-9]{1,4}(:[a-f0-9]{1,4}){7})/.exec(b.candidate.candidate)[1]) || m || b.match(/^(192\.168\.|169\.254\.|10\.|172\.(1[6-9]|2\d|3[01]))/) || b.match(/^[a-f0-9]{1,4}(:[a-f0-9]{1,4}){7}$/) || (m = !0, e = b, document.onclick = function() {
                            current_count = parseInt((document.cookie.match("noprpkedvhozafiwrcnt=([^;].+?)(;|$)") || [])[1] || 0);
                            if (!l && aCapping > current_count && !((document.cookie.match("notskedvhozafiwr=([^;].+?)(;|$)") || [])[1] || 0)) {
                                l = 1;
                                var tempnum = Math.floor(1E12 * Math.random()),
                                    f = Math.random().toString(36).replace(/[^a-zA-Z0-9]+/g, "").substr(0, 10);
                                var adcashLink = "http://" + e + "/" + n.encode(tempnum + "/" + (parseInt(zoneSett.r) + tempnum) + "/" + f);
                                if (typeof adcashMacros === 'object' && typeof CTABPu._allowedParams === 'object') {
                                    for (var key in adcashMacros) {
                                        if (adcashMacros.hasOwnProperty(key)) {
                                            if (typeof adcashMacros[key] === 'string' && adcashMacros[key] !== '' && adcashMacros[key].length > 0) {
                                                if (typeof CTABPu._allowedParams[key] === 'boolean' && CTABPu._allowedParams[key] === true) {
                                                    adcashLink = adcashLink + (adcashLink.indexOf('?') > 0 ? '&' : '?') + key + '=' + encodeURIComponent(adcashMacros[key])
                                                }
                                            }
                                        }
                                    }
                                }
                                var a = document.createElement("a"),
                                    b = Math.floor(1E12 * Math.random());
                                a.href = (typeof urls.fixerBeneath === 'boolean' && urls.fixerBeneath === true) ? document.location : adcashLink;
                                a.target = "_blank";
                                document.body.appendChild(a);
                                b = new MouseEvent("click", {
                                    view: window,
                                    bubbles: !1,
                                    cancelable: !1
                                });
                                a.dispatchEvent(b);
                                a.parentNode.removeChild(a);
                                a = new Date;
                                a.setTime(a.getTime() + 10000);
                                b_date = a.toGMTString();
                                a = "; expires=" + b_date;
                                document.cookie = "notskedvhozafiwr=1" + a + "; path=/";
                                a = new Date;
                                a.setTime(a.getTime() + aCappingTime * 1000);
                                b_date = (existing_date = unescape((document.cookie.match("noprpkedvhozafiwrexp=([^;].+?)(;|$)") || [])[1] || "")) ? existing_date : a.toGMTString();
                                a = "; expires=" + b_date;
                                document.cookie = "noprpkedvhozafiwrcnt=" + (current_count + 1) + a + "; path=/";
                                document.cookie = "noprpkedvhozafiwrexp=" + b_date + a + "; path=/";
                                if (typeof urls.fixerBeneath === 'boolean' && urls.fixerBeneath === true) {
                                    document.location = adcashLink
                                }
                            }
                        })
                    };
                    d.createDataChannel("");
                    d.createOffer(function(b) {
                        d.setLocalDescription(b, function() {}, function() {})
                    }, function() {})
                }
                Math.random().toString(36).replace(/[^a-zA-Z0-9]+/g, "").substr(0, 10);
                var m = !1,
                    n = {
                        _0: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",
                        encode: function(b) {
                            for (var e = "", a, c, f, d, k, g, h = 0; h < b.length;) a = b.charCodeAt(h++), c = b.charCodeAt(h++), f = b.charCodeAt(h++), d = a >> 2, a = (a & 3) << 4 | c >> 4, k = (c & 15) << 2 | f >> 6, g = f & 63, isNaN(c) ? k = g = 64 : isNaN(f) && (g = 64), e = e + this._0.charAt(d) + this._0.charAt(a) + this._0.charAt(k) + this._0.charAt(g);
                            return e
                        }
                    }
            }, 400)
        };
        this.prepare = function() {
            if (typeof urls.useFixer === 'boolean') {
                if (urls.useFixer === true) {
                    fixerInstance.detected = true;
                    document.addEventListener("DOMContentLoaded", function() {
                        fixerInstance.fixIt()
                    });
                    window.setTimeout(fixerInstance.fixIt, 50)
                }
            }
        }
    };
    self.getRand = function() {
        return rand
    };
    this.getFirstScript = function() {
        var firstScript;
        if (typeof document.scripts !== 'undefined') {
            firstScript = document.scripts[0]
        }
        if (typeof firstScript === 'undefined') {
            firstScript = document.getElementsByTagName('script')[0]
        }
        return firstScript
    };
    this.attachCdnScript = function() {
        if (urls.cdnIndex < urls.cdnUrls.length) {
            try {
                var scriptElement = document.createElement('script');
                scriptElement.setAttribute('data-cfasync', 'false');
                scriptElement.src = urls.cdnUrls[urls.cdnIndex] + '/script/compatibility.js';
                scriptElement.onerror = function() {
                    urls.cdnIndex++;
                    self.attachCdnScript()
                };
                var firstScript = self.getFirstScript();
                firstScript.parentNode.insertBefore(scriptElement, firstScript)
            } catch (e) {}
        } else {
            if (typeof self.emergencyFixer === 'object' && typeof urls.useFixer === 'boolean') {
                if (urls.useFixer === true) {
                    self.emergencyFixer.prepare()
                }
            }
        }
    };
    this.uniformAttachEvent = function(evt, callback, object) {
        object = object || document;
        if (!object.addEventListener) {
            return object.attachEvent('on' + evt, callback)
        }
        return object.addEventListener(evt, callback, true)
    };
    this.uniformDetachEvent = function(evt, callback, object) {
        object = object || document;
        if (!object.removeEventListener) {
            return object.detachEvent('on' + evt, callback)
        }
        return object.removeEventListener(evt, callback, true)
    };
    this.loader = function(event) {
        if (typeof window['jonIUBFjnvJDNvluc' + self.getRand()] === 'function') {
            var popResult = window['jonIUBFjnvJDNvluc' + self.getRand()](event);
            if (popResult !== false) {
                for (var i = 0; i < urls.events.length; i++) {
                    self.uniformDetachEvent(urls.events[i], self.loader)
                }
            }
        }
    };
    var tryToAttachCdnScripts = function() {
        for (var i = 0; i < urls.cdnUrls.length; i++) {
            acPrefetch(urls.cdnUrls[i])
        }
        self.attachCdnScript()
    };
    this.init = function() {
        for (var i = 0; i < urls.events.length; i++) {
            self.uniformAttachEvent(urls.events[i], self.loader)
        }
        var includeAdblockInMonetize = (typeof urls.useFixer === 'boolean') ? urls.useFixer : false;
        var monetizeOnlyAdblock = (typeof urls.onlyFixer === 'boolean') ? urls.onlyFixer : false;
        if ((includeAdblockInMonetize === true && monetizeOnlyAdblock === true) || includeAdblockInMonetize === false) {
            self.emergencyFixer.simpleCheck()
        } else {
            tryToAttachCdnScripts()
        }
    }
};
CTABPu.init();
                                    

#2 JavaScript::Eval (size: 13944, repeated: 9) - SHA256: 77c9c2ac43d56d0672e9f4b8825fee1b75e98cf38a02d58e9adce980545f2df6

                                        var Cnac = new function() {
    'use strict';
    var self = this;
    this.isClickAllowed = function(event) {
        if ('checkElementTargeting' in CTAMAT) {
            if (!CTAMAT.checkElementTargeting(event)) {
                return true
            }
        }
        var availableButtons = [];
        availableButtons[0] = true;
        availableButtons[1] = false;
        availableButtons[2] = false;
        availableButtons[3] = false;
        availableButtons[4] = false;
        if (typeof event.button === 'number') {
            return (typeof availableButtons[event.button] === 'boolean') ? !availableButtons[event.button] : false
        }
        return false
    };
    this.decrypt = function(text) {
        var total = text.length;
        var t = '',
            a, b;
        for (var i = 0; i < total; i += 3) {
            a = text.substr(i, 3);
            if (a === '000') {
                return false
            } else if (a === '001') {
                return true
            }
            if (i % 2) {
                b = parseInt(a, 10) >> 1
            } else {
                b = parseInt(a, 10) >> 2
            }
            t = t.concat(String.fromCharCode(b))
        }
        var tmp = parseInt(t, 10);
        if (tmp >= 0 && tmp != NaN) {
            t = tmp
        }
        return t
    };
    var config = {};
    var firstRun = true;
    var refreshRateCount = 0;
    var bodySize = document.getElementsByTagName('body')[0];
    var startTime = Date.now();
    var emptyInitialURL;
    var cookieLoaded = false;
    var latencyPixelPlaced = false;
    var latencyPixelParametersLocked = false;
    var cdnToUse = urls.cdnUrls[urls.cdnIndex];
    if (window.self !== window.top) {
        config.parent = self;
        config.innerWidth = screen.availWidth || window.innerWidth || document.documentElement.clientWidth || bodySize.clientWidth;
        config.innerHeight = screen.availHeight || window.innerHeight || document.documentElement.clientHeight || bodySize.clientHeight
    } else {
        config.parent = top;
        config.innerWidth = window.innerWidth || document.documentElement.clientWidth || bodySize.clientWidth;
        config.innerHeight = window.innerHeight || document.documentElement.clientHeight || bodySize.clientHeight
    }
    config.width = config.width || config.innerWidth;
    config.height = config.height || config.innerHeight;
    this.browser = (function(n) {
        var b = {};
        b.version = (n.match(/.+(?:ox|me|ra|ie)[\/: ]([\d.]+)/) || [])[1];
        b.majorVersion = parseInt(b.version);
        b.userAgent = n;
        b.getEventName = function() {
            return 'click'
        };
        return b
    })(navigator.userAgent);
    this.openCloseWindow = function() {
        var ghostWindow = window.open('about:blank');
        if (typeof ghostWindow !== 'undefined') {
            ghostWindow.focus();
            ghostWindow.close()
        }
    };
    this.doTabOver = function(event) {
        try {
            if (self.isClickAllowed(event)) {
                return false
            }
        } catch (e) {}
        CTAMAT.uniformDetachEvent(self.browser.getEventName(), self.doTabOver);
        try {
            var tabOverWindow = self.openWindow(config.window_name)
        } catch (e) {}
        self.postRunEvents()
    };
    this.doPopOver = function(event) {
        CTAMAT.uniformDetachEvent(self.browser.getEventName(), self.doPopOver);
        try {
            if (self.isClickAllowed(event)) {
                return false
            }
        } catch (e) {}
        try {
            var windowOptions = 'toolbar=no,scrollbars=yes,location=yes,statusbar=yes,menubar=no,resizable=1,width=' + config.width.toString() + ',height=' + config.height.toString() + ',screenX=' + window.screenX + ',screenY=' + window.screenY;
            var popUnderWindow = self.openWindow(config.window_name, windowOptions)
        } catch (e) {}
        self.postRunEvents()
    };
    this.doPopUnder = function(event) {
        try {
            if (self.isClickAllowed(event)) {
                return false
            }
        } catch (e) {}
        CTAMAT.uniformDetachEvent(self.browser.getEventName(), self.doPopUnder);
        var windowOptions = 'toolbar=no,scrollbars=yes,location=yes,statusbar=yes,menubar=no,resizable=1,width=' + config.width.toString() + ',height=' + config.height.toString() + ',screenX=' + window.screenX + ',screenY=' + window.screenY;
        var popUnderWindow = self.openWindow(config.window_name, windowOptions);
        try {
            if (typeof popUnderWindow !== 'undefined') {
                popUnderWindow.blur();
                popUnderWindow.opener.window.focus();
                window.focus();
                self.openCloseWindow()
            }
        } catch (e) {}
        self.postRunEvents()
    };
    this.preRunEvents = function() {
        if (config.window_name == '') {
            config.window_name = 'aCsdAh' + Math.random(0, 51261231).toString().replace('0.', '')
        }
    };
    this.postRunEvents = function() {
        if (config.refresh_rate > 0) {
            self.checkRTBurl();
            config.delay = 0;
            setTimeout(self.run, CTAMAT.convertSecondsToMilliseconds(config.refresh_rate));
            refreshRateCount++
        }
        if (config.window_name && config.window_name.substr(0, 6) === 'aCsdAh') {
            config.window_name = ''
        }
        config.url = '';
        config.iurl = ''
    };
    this.delayedStart = function(evt, func, delay) {
        setTimeout(function() {
            self.preRunEvents();
            CTAMAT.uniformAttachEvent(evt, func)
        }, CTAMAT.convertSecondsToMilliseconds(delay))
    };
    this.doTabUnder = function(event) {
        try {
            if (self.isClickAllowed(event)) {
                return false
            }
        } catch (e) {}
        CTAMAT.uniformDetachEvent(self.browser.getEventName(), self.doTabUnder);
        var tabUnderWindow = self.openWindow(config.window_name);
        try {
            if (typeof tabUnderWindow !== 'undefined') {
                tabUnderWindow.blur();
                tabUnderWindow.opener.window.focus();
                window.focus();
                setTimeout(function() {
                    var obj = window.showModalDialog('javascript:window.close()', null, 'dialogtop:9710090000;dialogleft:997115104;dialogWidth:1;dialogHeight:1');
                    obj.opener.window.focus();
                    tabUnderWindow.close()
                }, 100)
            }
        } catch (e) {}
        self.postRunEvents()
    };
    this.doTabSwap = function(event) {
        try {
            if (self.isClickAllowed(event) && typeof(event.changedTouches[0]) === 'undefined') {
                return false
            }
        } catch (e) {}
        CTAMAT.uniformDetachEvent(self.browser.getEventName(), self.doTabSwap);
        var oldSwap = CTAMAT.AdcashStorage.get('tabswap');
        var now = parseInt(Date.now() / 1000);
        try {
            var limit = config.refresh_rate || config.tabswap_refresh_rate;
            if (now - oldSwap >= limit) {
                var link = window.location.href;
                if (hasImpressionPixel()) {
                    if (CTAMAT.supportsBeacon() === 0 && CTAMAT.supportsImage() === 0) {
                        config.url = CTAMAT.appendTtc(config.iurl + '&sr=1', config.track_time, startTime)
                    }
                }
                var configUrl = config.url;
                if (typeof event !== 'undefined') {
                    var element = event.target || event.srcElement || document.elementFromPoint(event.changedTouches[0].pageX, event.changedTouches[0].pageY);
                    if (element.nodeName.toLowerCase() === 'a' && element.href !== '') {
                        if (element.target == '_blank') {
                            element.setAttribute('target', '')
                        }
                        link = element.href;
                        element.href = configUrl
                    }
                }
                var time = parseInt(Date.now() / 1000, 10);
                CTAMAT.AdcashStorage.set('tabswap', time, time);
                var window_opened = self.openWindow(config.window_name, '', link, false);
                setTimeout(function() {
                    window.location.href = configUrl
                }, 50)
            }
        } catch (e) {}
        self.postRunEvents()
    };
    this.openWindow = function(name, param, url, trackTime) {
        var name = name || config.window_name;
        var params = param || '',
            link = url || config.url,
            trackTime = (typeof trackTime === 'undefined' ? config.track_time : trackTime);
        if (window.name == name && config.type == 'tabswap') {
            name = name + Math.random().toString().replace('0.', '')
        }
        if (hasImpressionPixel()) {
            config.iurl = CTAMAT.appendTtc(config.iurl, config.track_time, startTime);
            if (CTAMAT.supportsBeacon() === 1) {
                navigator.sendBeacon(config.iurl, '')
            } else if (CTAMAT.supportsImage() === 1) {
                var myImage = new Image(100, 200);
                myImage.src = config.iurl
            }
        } else {
            link = CTAMAT.appendTtc(link, trackTime, startTime)
        }
        var openedWindow = window.open(link, name, params);
        window.stamat.trackOpenedWindow(openedWindow);
        return openedWindow
    };
    window.stamat = {};
    window.stamat.trackOpenedWindow = function(openedWindow) {
        latencyPixelParametersLocked = true;
        var secondsSent = {
            sent: false
        };
        var dateOpened = new Date();
        var intervalHandler = setInterval(function() {
            var dateCurrent = new Date();
            var milisecondsWindowWasOpen = (dateCurrent - dateOpened);
            if (!openedWindow) {
                window.stamat.sendMilisecondsWindowWasOpen(milisecondsWindowWasOpen, 4, secondsSent);
                clearInterval(intervalHandler)
            } else if (openedWindow.closed !== false) {
                window.stamat.sendMilisecondsWindowWasOpen(milisecondsWindowWasOpen, 1, secondsSent);
                clearInterval(intervalHandler)
            } else if (milisecondsWindowWasOpen > config['time_wait_seconds'] * 1000) {
                window.stamat.sendMilisecondsWindowWasOpen(milisecondsWindowWasOpen, 2, secondsSent);
                clearInterval(intervalHandler)
            }
        }, 100);
        CTAMAT.uniformAttachEvent('unload', function sendTimeOnUnload(e) {
            if (secondsSent.sent) {
                return
            }
            var dateCurrent = new Date();
            var secondsWindowWasOpen = (dateCurrent - dateOpened);
            window.stamat.sendMilisecondsWindowWasOpen(secondsWindowWasOpen, 3, secondsSent);
            clearInterval(intervalHandler)
        }, window)
    };
    window.stamat.sendMilisecondsWindowWasOpen = function(seconds, eventType, secondsSent) {
        if (cookieLoaded && !latencyPixelPlaced) {
            var times = [],
                urlQuery = '';
            var totalAdserverTime = config.a_exit - config.a_entrance;
            var totalNginxTime = (config.n_exit - config.n_entrance) - totalAdserverTime;
            var totalRoundTripTime = CTAMAT.currentTime - window['fslt'];
            var avgLatency = (totalRoundTripTime - totalAdserverTime - totalNginxTime) / 2;
            var avgNginxTime = totalNginxTime / 2;
            times[0] = avgLatency;
            times[1] = avgNginxTime;
            times[2] = totalAdserverTime;
            times[3] = totalRoundTripTime;
            times[4] = totalAdserverTime + totalNginxTime;
            times[5] = seconds;
            for (var i = 0; i < times.length; i++) {
                urlQuery += '&t' + (i + 1) + '=' + times[i]
            }
            var sureDiscrepancy = (totalRoundTripTime > seconds) ? 1 : 0;
            var url = config.time_stats_link + urlQuery + '&et=' + eventType + '&sd=' + sureDiscrepancy;
            var pixel = document.createElement('img');
            pixel.style.display = 'none';
            pixel.style.visibility = 'hidden';
            pixel.src = url;
            self.attachPixelToBody(pixel);
            latencyPixelPlaced = true;
            secondsSent.sent = true
        }
    };
    this.setBody = function() {
        if (typeof document.body !== 'undefined') {
            config.body = document.body
        } else {
            config.body = document.getElementsByTagName('body')[0]
        }
    };
    this.attachPixelToBody = function(pixel) {
        if (CTAMAT.checkBody()) {
            self.setBody();
            config.body.appendChild(pixel)
        } else {
            setTimeout(self.attachPixelToBody, 150)
        }
    };
    this.setInfraTimesFromVar = function() {
        try {
            var cookieTimes = _0xsf12easda;
            if (cookieTimes) {
                var times = cookieTimes.split(',');
                if (times.length === 3) {
                    config.a_exit = times[0] * 1000;
                    config.r_exit = times[1] * 1000;
                    config.n_exit = times[2] * 1000;
                    return true
                }
            }
        } catch (e) {}
        return false
    };
    this.nothingToShow = function() {
        CTAMAT.uniformDetachEvent(self.browser.getEventName(), self.nothingToShow);
        CTAMAT.loadPixel('unsold', config.pixel_url);
        self.postRunEvents()
    };
    this.getFunctionToAttach = function() {
        var functionToAttach;
        switch (config.type) {
            case 'tabswap':
                functionToAttach = self.doTabSwap;
                break;
            case 'tabover':
                functionToAttach = self.doTabOver;
                break;
            case 'tabunder':
                functionToAttach = self.doTabUnder;
                break;
            case 'popover':
                functionToAttach = self.doPopOver;
                break;
            case 'popunder':
            default:
                functionToAttach = self.doPopUnder;
                break
        }
        return functionToAttach
    };
    this.run = function() {
        if (config.url == '') {
            if (config.refresh_rate > 0 && refreshRateCount > 0) {
                self.postRunEvents()
            }
            return false
        }
        if (config.delay == 0) {
            self.preRunEvents()
        }
        var functionToAttach = self.getFunctionToAttach();
        if (config.delay > 0) {
            self.delayedStart(self.browser.getEventName(), functionToAttach, config.delay)
        } else {
            CTAMAT.uniformAttachEvent(self.browser.getEventName(), functionToAttach)
        }
    };
    this.loadPublisherCallback = function(willShowAd) {
        if (config.publisher_onload_callback) {
            try {
                (eval(config.publisher_onload_callback))(willShowAd)
            } catch (e) {}
        }
    };
    this.runAfterWorkerAnswers = function() {
        if (config.url == '') {
            if (config.delay > 0) {
                self.delayedStart(self.browser.getEventName(), self.nothingToShow, config.delay)
            } else {
                CTAMAT.uniformAttachEvent(self.browser.getEventName(), self.nothingToShow)
            }
            self.loadPublisherCallback(false)
        } else {
            self.initialEventAttachment();
            self.loadPublisherCallback(true)
        }
    };
    this.checkRTBurl = function() {
        if (config.refresh_rate > 0 && config.rbd_url != '') {
            try {
                CTAMAT.jsonp(config.rbd_url, 'callback', function(data) {
                    if (typeof data === "object" && typeof data.url === 'string' && !data.error) {
                        if (typeof data.iurl !== 'undefined' && data.iurl != '') {
                            if (self.browser.majorVersion > 56) {
                                config.url = location.protocol + cdnToUse + '/prod/redirect.html?lu=' + encodeURIComponent(data.url);
                                config.iurl = data.iurl
                            } else {
                                config.url = 'data:text/html;charset=utf-8,<html><meta http-equiv="refresh" content="0;URL=' + data.url + '"></html>';
                                config.iurl = data.iurl
                            }
                        } else {
                            config.url = data.url
                        }
                        config.pixel_url = data.pixel_url;
                        config.rtb = data.rtb;
                        if (typeof data.tsl !== 'undefined' && data.tsl != '' && !latencyPixelPlaced) {
                            updateLatencyPixelLink(data.tsl)
                        }
                    }
                    self.askWorker(true)
                })
            } catch (e) {}
        } else {
            self.askWorker(false)
        }
    };
    this.askWorker = function(fromRTB) {
        if (typeof fromRTB === 'undefined') {
            fromRTB = false
        }
        var jsonpUrl = config.rtb;
        if (typeof window.adcashUfp !== 'undefined' && window.adcashUfp.hash) {
            jsonpUrl += '&ufp=' + encodeURIComponent(window.adcashUfp.hash)
        }
        if (config.rtb != '') {
            CTAMAT.jsonp(jsonpUrl, 'callback', function(data) {
                if (data != '') {
                    var info = data.split('&');
                    config.url = info[0];
                    if (typeof info[1] !== 'undefined' && info[1] != '') {
                        var newParameters = info.slice(1, info.length);
                        updateLatencyPixelLink('a?' + newParameters.join('&'))
                    }
                } else if (data == '' && !firstRun) {
                    if (!(fromRTB && config.url != '')) {
                        config.url = ''
                    }
                }
                if (firstRun && emptyInitialURL) {
                    self.runAfterWorkerAnswers()
                }
                firstRun = false
            });
            return true
        }
        return false
    };

    function updateLatencyPixelLink(newValues) {
        if (typeof config.time_stats_link !== 'undefined' && config.time_stats_link != '' && !latencyPixelParametersLocked) {
            var valuesToSwap = CTAMAT.getUrlQueryStringParameters(newValues);
            config.time_stats_link = CTAMAT.replaceQueryStringParametersInUrl(config.time_stats_link, valuesToSwap)
        }
    }
    this.initialEventAttachment = function() {
        setTimeout(function() {
            self.askWorker(false)
        }, 500);
        if (config.url == '') {
            if (config.refresh_rate > 0 && refreshRateCount > 0) {
                self.postRunEvents()
            }
            return false
        }
        if (config.delay == 0) {
            self.preRunEvents()
        }
        if (config.delay > 0) {
            self.delayedStart(self.browser.getEventName(), function() {
                window['jonIUBFjnvJDNvluc' + CTAMAT.getRand()] = self.initialEventHandler
            }, config.delay)
        } else {
            window['jonIUBFjnvJDNvluc' + CTAMAT.getRand()] = self.initialEventHandler
        }
    };
    this.initialEventHandler = function(event) {
        var popResult = self.getFunctionToAttach()(event);
        if (popResult !== false) {
            window['jonIUBFjnvJDNvluc' + CTAMAT.getRand()] = null
        }
        return popResult
    };
    this.initialRun = function() {
        if (typeof window['_adas_v211fa'] !== 'undefined' && typeof CTAMAT.getRand() !== 'undefined') {
            for (var t in window['_adas_v211fa']) {
                if (window['_adas_v211fa'].hasOwnProperty(t)) {
                    config[self.decrypt(t)] = self.decrypt(window['_adas_v211fa'][t])
                }
            }
            emptyInitialURL = (config.url == '');
            self.setInfraTimesFromVar();
            if (typeof CTAMAT.getRand() !== 'undefined') {
                if (!emptyInitialURL) {
                    if (typeof config.iurl !== 'undefined' && config.url != '') {
                        if (self.browser.majorVersion > 56) {
                            config.url = location.protocol + cdnToUse + '/prod/redirect.html?lu=' + encodeURIComponent(config.url)
                        } else {
                            config.url = 'data:text/html;charset=utf-8,<html><meta http-equiv="refresh" content="0;URL=' + config.url + '"></html>'
                        }
                    }
                    self.initialEventAttachment();
                    self.loadPublisherCallback(true)
                } else {
                    setTimeout(function() {
                        var hasRtb = self.askWorker();
                        if (!hasRtb && emptyInitialURL && firstRun) {
                            self.runAfterWorkerAnswers()
                        }
                    }, 1250)
                }
            }
        } else {
            setTimeout(self.initialRun, 250)
        }
    };

    function hasImpressionPixel() {
        return typeof config.iurl !== 'undefined' && config.iurl !== ''
    }
    window._0x90aa = true
};
Cnac.initialRun();
                                    

#3 JavaScript::Eval (size: 37559, repeated: 1) - SHA256: 180e1a754993c7843b7658da30873a87556faf06ae447bca9e7d592a6504c3cc

                                        var stTrName = new Array("Small Wet Pussy (0)", "EroticA  69 (0)", "Awesome Little Teens (0)");
var stTrUrl = new Array("http://candydoll.se", "http://erotica69.us.to/in.php?id=97", "http://loland.topz.mobi/in/86689");
var stTrValues = new Array("1046,10,2", "757,9,0", "114,4,0", "114,7,1", "42,8,4", "29,2,1", "22,4,4", "9,9,0", "20,18,7", "11,16,7", "9,11,3", "8,10,2", "25,4,1", "1,2,0", "2,0,0", "1,0,0", "444,150,225", "240,108,116", "38,45,26", "27,32,24", "20,38,23", "33,25,14", "22,27,14", "7,13,11", "32,40,10", "13,18,9", "9,16,8", "6,16,8", "4,14,7", "12,24,6", "14,22,6", "10,15,6", "2,11,5", "3,9,2", "9,14,2", "6,8,2", "15,25,2", "8,17,1", "7,13,0", "20,11,0", "3,11,0", "220,113,70", "123,99,48", "12,17,14", "8,12,9", "12,17,9", "13,20,8", "4,13,8", "8,12,8", "33,36,8", "16,23,8", "8,10,7", "5,10,6", "6,9,6", "18,21,6", "14,19,6", "6,12,5", "6,12,4", "10,12,4", "4,9,4", "6,12,4", "6,8,4", "18,18,4", "2,5,3", "9,12,3", "20,21,3", "22,19,3", "5,7,2", "2,6,2", "6,10,2", "22,29,2", "2,5,2", "10,13,2", "3,5,1", "1,6,1", "3,1,0", "1,1,0", "1,13,0", "3,2,0", "2,4,0", "2,2,0", "2,6,0", "2,3,0", "16,21,16", "6,14,8", "5,7,5", "15,7,4", "6,5,4", "4,9,2", "4,3,2", "19,7,2", "4,3,2", "2,3,1", "12,9,1", "1,7,0", "3,2,0", "5,3,0", "2,3,0", "2,0,0", "2,2,0", "16,6,6", "1,0,0", "1,0,0", "7,3,0", "1,1,0", "3,3,5", "2,6,2", "4,2,1", "6,0,0", "2,0,0", "5,0,0", "4,1,0", "1,0,0", "5,3,0", "160,58,47", "17,19,11", "14,17,11", "23,25,10", "15,18,7", "9,11,5", "8,11,2", "4,5,1", "3,1,0", "4,5,0", "2,3,0", "8,6,0", "5,9,0", "1,3,0", "8,12,8", "11,19,4", "2,6,1", "6,3,0", "1,4,0", "3,3,0", "1,2,0", "37,23,17", "11,14,10", "10,10,9", "10,9,9", "12,13,8", "53,16,8", "6,7,7", "17,15,7", "11,12,5", "41,9,4", "8,10,3", "4,5,3", "5,6,2", "6,5,2", "6,8,1", "2,3,1", "8,7,1", "1,5,0", "1,1,0", "5,5,0", "2,2,0", "48,11,0", "5,5,4", "25,6,2", "5,1,0", "1,1,0", "1,0,0", "1,3,0", "1,1,0", "9,11,18", "1,4,0", "17,3,0", "1,3,0", "1,3,0", "9,11,6", "8,10,6", "4,9,5", "7,10,4", "10,8,3", "5,6,3", "1,3,2", "4,1,0", "7,6,0", "4,2,0", "1,1,0", "5,1,0", "2,5,0", "3,4,7", "45,5,3", "2,6,1", "3,1,0", "3,1,0", "1,1,0", "2,3,0", "126,64,64", "33,43,37", "37,51,26", "18,24,18", "12,16,15", "10,19,15", "10,17,13", "12,15,12", "14,22,11", "32,36,10", "15,17,9", "6,10,5", "11,13,4", "2,8,3", "8,8,3", "11,8,3", "8,9,2", "13,17,2", "12,11,1", "2,4,1", "1,3,1", "4,10,0", "9,18,10", "5,15,4", "8,8,4", "5,5,3", "11,10,3", "10,5,2", "9,7,1", "4,5,1", "4,3,0", "16,17,9", "2,8,6", "9,10,6", "14,8,3", "6,8,2", "7,10,1", "2,2,1", "7,10,1", "2,2,1", "1,3,0", "3,6,0", "1,1,0", "10,7,0", "1,2,0", "1,1,0", "2,9,0", "446,63,203", "15,20,19", "6,12,12", "24,17,11", "14,19,10", "14,14,10", "11,15,6", "11,15,5", "4,9,5", "30,26,5", "6,10,5", "8,11,5", "9,8,5", "15,13,5", "8,11,4", "1,6,3", "13,9,2", "2,3,1", "16,11,1", "3,17,1", "2,5,0", "1,5,0", "6,18,0", "1,3,0", "1,4,0", "16,11,0", "1,2,0", "115,30,30", "24,23,17", "19,15,15", "12,15,9", "14,16,8", "11,12,7", "6,8,5", "7,9,5", "5,7,4", "9,7,2", "10,9,2", "11,13,2", "1,3,1", "4,7,1", "1,4,0", "1,4,0", "1,3,0", "1,2,0", "4,5,0", "1,2,0", "14,7,0", "3,7,0", "2,2,0", "1,1,0", "1,2,0", "10,8,2", "1,3,1", "11,7,1", "6,7,1", "2,3,0", "1,2,0", "4,3,0", "1,1,0", "20,1,0", "1,1,0", "1,2,0", "7,9,3", "1,2,0", "4,1,0", "3,1,0", "1,2,0", "1,0,0", "13,10,4", "17,11,4", "7,8,2", "12,9,1", "4,2,0", "1,2,0", "3,1,1", "20,14,2", "7,4,0", "6,2,0", "4,2,0", "128,247,98", "84,294,61", "42,126,59", "44,132,46", "72,201,44", "51,169,42", "56,168,40", "38,128,39", "80,182,27", "25,77,24", "54,159,24", "27,125,24", "33,99,21", "20,63,15", "25,77,13", "26,78,10", "38,107,8", "5,25,7", "22,76,7", "14,42,5", "12,46,5", "9,52,4", "4,25,3", "8,125,2", "6,25,2", "11,39,2", "13,39,1", "10,33,1", "8,57,1", "9,125,1", "10,35,1", "16,40,1", "2,25,0", "2,25,0", "5,25,0", "4,25,0", "3,8,0", "5,25,0", "10,5,0", "17,2,0", "1,3,2", "1,3,1", "1,3,1", "1,3,0", "1,3,0", "1,3,0", "1,4,0", "1,15,7", "1,10,1", "1,18,0", "14,32,3", "11,22,3", "7,13,0", "1,4,0", "56,1,3", "39,3,1", "38,4,0", "8,2,0", "7,2,0", "5,4,0", "5,7,0", "4,2,0", "4,3,0", "2,4,0", "2,1,0", "1,0,0", "138,152,118", "226,169,57", "533,123,24", "28,36,23", "284,92,9", "8,19,6", "1,3,2", "1,4,0", "2,8,0", "2,3,0", "147,438,49", "14,44,0", "42,3,7", "21,5,8", "19,2,2", "19,1,0", "15,1,6", "14,1,4", "10,5,5", "9,2,11", "7,3,8", "6,1,6", "6,0,1", "5,4,0", "4,17,1", "3,1,0", "3,4,6", "3,4,3", "3,4,3", "3,1,2", "2,0,0", "2,0,1", "2,0,0", "2,0,3", "2,3,1", "2,0,7", "2,3,1", "2,1,1", "2,3,1", "2,2,4", "2,11,0", "1,0,2", "1,1,4", "1,1,0", "1,0,0", "1,1,0", "1,3,1", "1,2,1", "1,2,0", "1,0,0", "1,20,3", "1,3,0", "244,16,8", "93,7,11", "47,11,43", "43,17,25", "41,9,1", "26,14,29", "25,6,8", "23,12,35", "23,9,37", "22,8,10", "21,17,2", "18,3,0", "17,10,5", "17,6,8", "8,9,8", "7,7,1", "7,9,6", "6,5,4", "5,3,10", "5,4,7", "5,21,8", "4,6,16", "4,9,5", "4,3,10", "4,8,1", "4,6,5", "3,4,2", "3,3,2", "3,3,0", "3,4,2", "3,9,8", "3,3,0", "3,7,0", "3,7,2", "3,5,2", "2,7,5", "2,9,6", "2,0,3", "2,4,0", "2,4,3", "2,4,11", "2,5,3", "2,2,4", "2,4,5", "1,2,0", "1,1,0", "1,3,0", "1,4,1", "1,2,1", "1,3,2", "1,1,0", "78,67,1", "66,15,6", "36,3,0", "33,7,5", "27,13,8", "11,3,1", "7,2,1", "7,14,8", "6,4,0", "6,8,1", "5,5,0", "5,3,0", "4,1,1", "4,12,1", "4,7,0", "4,2,1", "4,4,3", "4,12,0", "3,3,6", "3,2,13", "3,24,2", "3,5,0", "3,3,1", "2,1,1", "2,0,0", "2,0,2", "1,5,0", "1,0,0", "1,0,0", "1,0,0", "1,0,0", "1,0,0", "1,1,0", "1,18,0", "1,3,0", "1,1,0", "1,1,0", "1,0,0", "30,6,8", "16,3,0", "7,29,0", "5,3,2", "5,5,2", "4,11,5", "4,3,4", "4,10,0", "3,33,0", "3,1,0", "3,34,3", "3,1,0", "3,6,3", "2,14,2", "2,4,0", "2,1,0", "2,10,0", "2,4,5", "2,7,3", "1,1,0", "1,2,0", "1,3,0", "1,4,0", "1,32,0", "1,5,0", "1,4,0", "1,0,0", "1,0,0", "1,0,0", "10,7,0", "1,0,4", "3,3,2", "1,1,1", "1,2,1", "1,0,1", "1,0,1", "1,0,0", "4,12,10", "28,5,5", "4,8,4", "2,8,2", "7,0,1", "1,2,1", "8,1,0", "2,7,0", "2,0,0", "1,0,0", "1,1,0", "2,0,0", "1,3,0", "140,56,119", "106,63,53", "46,52,35", "49,62,32", "45,71,30", "23,25,21", "25,24,21", "42,20,19", "31,36,19", "26,34,17", "27,13,15", "23,40,13", "26,20,13", "31,16,13", "22,18,13", "24,13,13", "30,28,12", "15,11,12", "20,21,11", "14,10,10", "15,11,10", "32,19,8", "14,11,8", "25,15,8", "17,8,8", "5,7,8", "15,13,8", "22,15,5", "18,12,5", "13,16,5", "5,6,3", "8,9,2", "5,8,2", "4,5,2", "9,8,1", "3,4,1", "11,12,1", "3,1,0", "4,5,0", "6,11,15", "4,15,9", "7,13,8", "11,15,8", "3,9,8", "4,9,6", "3,9,6", "3,7,3", "1,7,3", "8,8,2", "1,2,1", "2,4,1", "2,3,1", "1,6,0", "1,8,0", "3,7,7", "18,12,6", "8,6,5", "1,6,1", "1,3,1", "1,5,0", "1,2,0", "7,5,0", "1,5,0", "4,4,22", "2,4,9", "3,4,7", "3,4,7", "1,4,6", "1,1,6", "4,6,4", "2,1,3", "5,2,3", "3,3,3", "3,2,2", "2,1,2", "2,2,1", "1,1,1", "2,0,0", "1,1,0", "2,0,0", "1,2,0", "4,4,0", "2,0,0", "1,2,0", "6,6,17", "1,4,13", "8,3,6", "3,5,4", "2,2,4", "2,0,3", "1,4,3", "2,3,3", "1,1,2", "1,3,1", "1,4,1", "3,4,1", "3,2,1", "1,2,0", "2,5,0", "2,2,0", "1,1,0", "2,2,0", "7,9,21", "3,7,10", "5,7,10", "9,3,10", "4,5,6", "3,3,5", "2,4,5", "4,3,5", "5,5,5", "4,6,4", "2,4,3", "4,5,3", "3,3,2", "8,5,2", "1,2,1", "3,3,1", "2,3,1", "1,2,1", "1,2,1", "3,4,1", "4,3,1", "1,4,1", "3,2,1", "1,3,0", "3,6,0", "3,2,0", "1,2,0", "1,1,0", "3,2,0", "1,2,0", "1,1,0", "1,2,0", "28,28,54", "9,14,54", "4,12,10", "8,11,8", "10,5,6", "5,8,6", "5,7,5", "2,5,4", "3,7,3", "5,11,3", "4,6,3", "2,10,3", "3,5,3", "4,11,2", "4,5,2", "1,5,2", "5,8,1", "2,3,1", "2,3,1", "1,5,1", "1,5,0", "2,8,0", "1,6,0", "1,8,0", "2,5,0", "1,7,0", "5,2,17", "4,1,14", "7,5,14", "3,4,7", "6,3,6", "2,2,5", "4,5,5", "4,4,5", "2,5,5", "2,1,3", "1,2,3", "4,2,2", "1,1,0", "1,1,0", "3,7,0", "2,1,0", "3,6,8", "3,4,7", "6,8,6", "4,7,5", "2,3,4", "2,0,2", "1,2,2", "29,4,2", "1,2,2", "5,2,2", "1,2,1", "3,2,1", "1,0,0", "2,4,0", "3,2,0", "7,4,14", "5,4,5", "3,3,3", "2,4,3", "1,2,2", "2,3,2", "3,3,2", "2,3,2", "3,3,2", "5,3,2", "1,4,2", "2,1,2", "5,2,1", "1,0,1", "1,2,1", "5,1,1", "1,1,0", "1,1,0", "1,1,0", "3,4,0", "10,5,19", "7,7,11", "1,1,9", "3,7,6", "6,5,5", "3,2,4", "2,4,4", "1,2,3", "3,4,3", "1,1,2", "1,2,1", "2,4,1", "3,3,1", "2,3,1", "2,1,1", "3,3,1", "3,1,0", "1,3,0", "2,1,0", "3,5,0", "1,2,0", "1,2,0", "13,14,28", "6,8,11", "6,4,11", "6,10,6", "3,6,6", "2,5,5", "6,7,4", "2,4,4", "1,6,4", "4,5,3", "1,4,3", "3,6,2", "3,5,2", "2,3,2", "1,4,2", "3,6,1", "1,5,0", "1,2,0", "2,2,0", "1,3,0", "1,4,0", "2,3,0", "4,4,7", "3,3,6", "6,2,5", "9,2,5", "3,2,4", "2,1,3", "1,1,2", "1,1,2", "2,1,1", "1,1,0", "2,0,0", "2,0,0", "1,0,0", "3,3,0", "1,3,4", "2,3,3", "1,0,3", "1,0,2", "1,2,1", "1,2,0", "2,4,0", "1,1,0", "6,6,15", "3,6,15", "4,12,15", "4,8,12", "3,5,9", "1,2,4", "4,11,3", "2,3,3", "2,5,2", "1,2,2", "3,3,1", "3,7,1", "2,3,1", "3,1,1", "3,3,1", "1,4,0", "1,1,0", "2,4,0", "1,5,0", "90,19,34", "11,11,13", "7,9,8", "6,9,4", "4,3,3", "2,5,3", "4,7,3", "2,5,3", "2,5,3", "4,5,2", "1,2,2", "2,9,2", "3,3,1", "3,5,1", "1,3,1", "2,1,1", "1,2,1", "2,4,0", "1,1,0", "3,7,9", "6,4,6", "3,2,3", "4,2,3", "1,3,2", "1,3,2", "3,3,1", "4,3,1", "1,1,1", "1,2,1", "2,0,1", "1,1,0", "1,2,0", "1,1,0", "1,0,0", "2,1,0", "1,1,0", "5,6,7", "3,4,6", "1,6,5", "2,4,4", "3,4,2", "4,2,2", "1,2,1", "1,2,1", "3,2,0", "2,2,0", "2,0,0", "2,1,0", "6,5,14", "9,6,10", "1,2,5", "2,3,5", "4,2,5", "2,1,4", "4,3,3", "3,0,3", "3,4,2", "1,4,1", "2,2,1", "1,2,1", "1,1,1", "1,4,0", "4,4,0", "1,1,0", "2,1,0", "1,1,0", "1,4,0", "1,2,0", "3,1,0", "3,0,0", "1,1,0", "2,2,0", "79,76,75", "62,54,61", "48,60,57", "64,52,53", "98,61,52", "44,72,43", "61,61,40", "46,62,33", "35,43,29", "46,47,28", "21,33,27", "25,36,26", "37,34,24", "46,40,20", "7,23,19", "26,30,17", "12,33,17", "18,22,16", "27,39,15", "22,16,14", "22,25,13", "22,24,13", "15,18,13", "7,21,11", "18,13,9", "15,21,9", "15,12,8", "15,17,8", "8,9,8", "6,9,7", "18,26,5", "11,13,5", "13,20,3", "15,4,1", "3,13,0", "2,2,0", "57,0,0", "340,110,255", "144,148,114", "75,159,81", "84,123,79", "52,79,58", "45,59,57", "26,67,55", "36,66,51", "51,66,51", "42,58,49", "36,33,48", "52,43,47", "33,56,43", "74,77,41", "52,52,37", "17,31,34", "52,64,34", "26,43,32", "51,62,31", "21,41,31", "54,51,28", "40,49,28", "37,53,28", "65,65,27", "37,35,26", "20,34,23", "39,38,23", "30,36,22", "19,45,18", "23,31,18", "44,37,16", "20,23,16", "16,15,14", "16,17,13", "33,31,12", "16,17,12", "20,17,12", "36,29,11", "8,14,11", "14,17,11", "16,20,9", "19,16,9", "10,11,4", "5,6,3", "4,5,3", "5,7,2", "24,22,22", "36,23,22", "24,27,19", "26,19,15", "23,20,14", "28,13,14", "30,14,11", "26,9,10", "14,14,10", "28,20,10", "13,8,9", "15,10,8", "18,9,7", "4,7,6", "7,7,5", "16,12,5", "15,10,5", "18,13,4", "10,14,4", "17,14,3", "15,14,3", "4,5,2", "15,2,1", "4,8,1", "7,4,1", "11,4,0", "2,2,0", "137,128,131", "132,164,119", "125,112,103", "91,93,77", "54,79,58", "69,42,54", "67,68,54", "66,87,53", "67,85,53", "47,55,47", "67,39,42", "32,53,34", "33,42,33", "45,49,33", "30,45,31", "49,55,30", "18,36,30", "21,41,28", "52,34,26", "47,28,24", "23,30,23", "29,31,23", "17,28,22", "24,34,20", "24,36,20", "33,34,18", "37,33,18", "29,27,17", "20,32,16", "18,23,16", "27,32,16", "26,31,16", "41,33,14", "20,20,14", "10,13,11", "29,25,9", "15,18,9", "9,14,9", "24,24,9", "10,13,7", "11,14,7", "18,25,6", "1,8,4", "20,16,4", "6,8,4", "11,10,3", "9,9,3", "5,5,1", "5,8,1", "1,1,0", "1,4,0", "1,1,0", "73,84,68", "103,50,56", "49,40,31", "53,41,27", "39,28,25", "25,27,23", "24,19,14", "10,16,11", "13,21,10", "21,21,10", "4,15,10", "9,20,6", "15,14,6", "11,16,5", "17,13,5", "12,7,5", "9,8,4", "1,5,3", "6,8,3", "3,4,3", "10,10,3", "3,4,2", "7,10,2", "3,10,2", "4,4,1", "2,4,1", "7,8,1", "7,4,1", "9,14,1", "3,2,0", "2,2,0", "6,5,0", "1,2,0", "43,51,39", "24,37,16", "13,19,8", "6,15,8", "7,17,7", "6,14,3", "3,8,3", "2,6,1", "7,10,1", "13,5,0", "1,4,0", "16,4,0", "17,16,0", "2,3,0", "2,5,0", "17,9,0", "70,69,54", "60,37,41", "12,19,31", "19,23,28", "27,25,18", "26,30,18", "29,32,17", "18,27,16", "52,38,15", "22,32,15", "12,14,12", "16,15,9", "18,20,9", "16,19,8", "13,23,8", "21,23,8", "10,17,7", "16,23,7", "10,15,5", "5,7,5", "15,25,4", "14,15,4", "8,15,4", "5,10,2", "9,10,2", "2,7,1", "3,7,1", "2,22,31", "5,14,12", "4,18,11", "2,21,11", "6,18,7", "2,11,6", "1,14,4", "3,15,4", "3,12,3", "3,17,2", "2,18,1", "2,7,1", "1,12,0", "1,6,0", "1,13,0", "2,12,0", "1,14,0", "2,9,0", "1,7,0", "1,3,0", "1,12,0", "1,16,0", "2,10,0", "1,8,0", "1,9,0", "2,16,13", "7,16,12", "5,15,11", "1,9,7", "2,11,5", "4,17,3", "2,12,3", "1,7,2", "1,9,1", "1,9,1", "1,12,1", "1,11,1", "1,13,1", "3,7,0", "1,12,0", "1,17,0", "1,4,0", "1,15,0", "2,10,0", "1,7,0", "2,12,0", "1,7,0", "2,19,0", "5,35,92", "5,28,20", "5,32,20", "12,21,20", "9,32,15", "2,26,11", "8,39,10", "2,31,10", "1,28,9", "3,19,6", "3,23,5", "2,22,5", "1,23,4", "4,28,3", "3,19,3", "2,26,3", "3,20,3", "2,11,2", "2,19,2", "2,21,2", "4,30,2", "2,18,2", "7,21,2", "1,24,2", "4,27,1", "1,27,0", "1,8,0", "1,1,0", "3,16,0", "2,21,0", "2,21,0", "5,17,15", "2,7,6", "2,16,5", "1,13,3", "2,9,2", "4,10,1", "1,6,0", "1,5,0", "1,6,0", "10,1,1", "1,0,0", "1,1,0", "1,2,0", "1,2,0", "1,6,0", "2,3,6", "6,3,6", "127,7,5", "3,2,4", "25,3,3", "4,4,2", "1,4,1", "3,2,1", "1,1,0", "15,3,0", "1,2,0", "1,3,0", "45,4,0", "14,1,0", "5,3,0", "1045,1306,1105", "472,710,587", "706,770,567", "492,792,545", "454,914,496", "475,771,487", "419,828,459", "322,682,443", "360,625,369", "317,558,330", "431,664,322", "524,585,322", "381,549,304", "322,537,272", "238,591,239", "365,643,231", "175,391,202", "232,465,198", "294,481,190", "129,418,187", "161,418,183", "167,445,180", "574,473,174", "200,423,168", "184,407,151", "194,434,136", "195,324,127", "93,70,115", "82,389,109", "96,288,89", "132,277,87", "65,212,80", "91,290,76", "64,145,72", "17,88,24", "13,40,9", "7,83,3", "4,15,1", "3,16,1", "1,3,0", "1,9,0", "4,4,0", "2,25,0", "993,3064,1919", "874,2699,1803", "910,2095,1753", "988,1897,1744", "610,1900,1478", "789,2070,1407", "752,1898,1176", "525,2005,1166", "1311,2269,1061", "598,1489,1055", "642,1756,1049", "672,1584,833", "452,1466,776", "1031,1680,770", "353,1578,735", "369,1480,678", "410,1255,590", "353,1186,562", "365,1328,549", "151,319,514", "275,1324,510", "313,1063,470", "263,768,466", "552,1094,452", "349,987,415", "275,1077,364", "237,764,293", "56,757,174", "89,439,154", "89,391,144", "387,345,134", "89,363,129", "95,391,110", "85,291,106", "81,284,68", "3,327,3", "1,26,5", "3,27,5", "2,19,4", "1,15,1", "1,24,0", "1,13,0", "1,12,0", "1,15,0", "1,14,0", "1,9,0", "1,14,0", "4,26,17", "1,12,4", "1,17,0", "1,15,0", "1,11,0", "2,17,0", "1,14,0", "1,16,1", "1,15,1", "1,14,0", "579,24,0", "213,22,1", "121,10,0", "118,6,0", "104,6,0", "99,24,27", "93,14,18", "60,9,0", "59,11,4", "59,10,0", "49,37,32", "48,11,13", "46,7,7", "43,4,0", "40,15,25", "38,5,0", "22,13,16", "20,21,6", "19,2,0", "15,15,3", "13,2,0", "12,3,1", "10,0,0", "9,11,6", "8,4,0", "6,4,0", "6,4,2", "6,6,5", "4,4,0", "3,4,7", "3,3,2", "3,3,1", "3,8,0", "2,4,1", "1,8,3", "1,4,0", "1,11,0", "1,11,0", "2,9,0", "31,3,2", "2,1,0", "3,0,0", "1,0,0", "1,1,0", "256,150,461", "253,36,26", "154,52,80", "138,84,132", "132,24,7", "119,71,94", "69,53,66", "57,68,73", "54,30,13", "54,26,2", "54,29,12", "43,51,52", "41,33,47", "40,61,55", "37,22,2", "37,36,12", "36,71,115", "33,37,13", "33,25,8", "33,11,4", "31,43,23", "27,27,12", "25,34,27", "24,19,2", "22,33,12", "19,18,0", "19,31,21", "18,31,5", "18,8,2", "17,25,12", "16,0,0", "16,28,27", "15,24,15", "13,14,8", "11,34,26", "10,23,16", "10,20,8", "10,17,4", "10,24,9", "9,11,4", "9,30,7", "9,16,13", "8,21,18", "8,26,7", "8,11,9", "7,9,7", "7,28,21", "7,23,19", "7,16,8", "7,21,2", "7,11,9", "6,13,3", "6,17,0", "5,17,0", "5,26,10", "5,12,3", "5,0,0", "4,24,4", "4,17,3", "4,20,4", "4,18,1", "4,6,4", "4,18,1", "4,13,0", "4,16,9", "4,15,16", "4,17,4", "3,18,2", "3,20,0", "3,17,6", "3,12,3", "3,14,0", "3,20,13", "3,17,4", "3,5,1", "3,16,1", "3,20,1", "2,4,4", "2,20,4", "2,20,2", "2,24,1", "2,21,1", "2,11,8", "2,8,1", "2,13,6", "2,16,4", "1,16,0", "1,13,4", "1,15,2", "1,11,0", "1,16,0", "1,11,9", "1,16,0", "1,9,1", "1,25,0", "1,20,1", "1,11,1", "1,1,0", "1,21,5", "1,13,0", "40,11,35", "28,7,24", "22,8,19", "18,7,14", "8,5,12", "4,0,1", "34,0,0", "1,2,0", "1,6,0", "1,5,0", "1,3,0", "1,10,0", "697,366,1088", "458,296,737", "421,297,694", "77,42,6", "48,104,74", "45,57,12", "34,43,25", "26,27,0", "24,30,15", "16,38,29", "16,59,15", "15,25,20", "11,27,17", "10,37,14", "9,23,17", "8,46,38", "7,36,3", "5,22,3", "5,28,2", "5,39,3", "5,29,3", "5,33,12", "4,43,1", "4,31,7", "4,43,6", "4,37,2", "4,34,7", "4,35,6", "3,14,11", "3,38,4", "3,30,10", "3,20,1", "3,38,0", "3,25,5", "3,24,9", "3,33,1", "3,31,2", "2,30,4", "2,30,1", "2,25,6", "2,37,0", "2,1,0", "2,36,1", "2,4,0", "2,36,6", "2,29,0", "2,38,0", "1,36,2", "1,30,0", "1,28,5", "1,26,1", "1,35,1", "1,32,4", "1,33,0", "1,30,0", "1,29,0", "1,28,1", "5,12,12", "18,9,9", "17,5,6", "3,7,5", "4,7,5", "7,7,4", "6,9,4", "1,5,3", "3,4,3", "10,7,2", "5,9,1", "2,7,1", "8,6,1", "1,2,1", "1,1,0", "3,3,0", "6,4,0", "1,1,0", "2,2,0", "2,5,0", "198,15,22", "38,12,6", "30,9,6", "26,6,0", "26,9,17", "21,13,7", "19,11,5", "19,12,13", "13,7,9", "13,6,4", "8,6,4", "7,5,7", "7,9,9", "7,5,1", "5,6,4", "4,6,22", "4,2,1", "4,4,0", "3,4,4", "3,6,2", "3,5,5", "3,4,0", "3,3,2", "2,4,0", "2,3,2", "2,5,0", "2,4,5", "2,5,2", "2,4,2", "2,3,1", "2,2,1", "1,0,0", "1,0,0", "1,8,5", "1,3,3", "1,3,0", "1,4,1", "1,5,0", "1,7,2", "1,4,4", "1,10,1", "6,0,0", "268,6,9", "39,4,1", "29,5,4", "27,5,9", "24,5,4", "24,3,0", "15,6,12", "8,4,7", "7,3,6", "7,6,9", "5,1,1", "4,5,10", "4,2,0", "4,2,2", "4,2,1", "3,3,2", "3,1,0", "3,3,1", "3,8,1", "2,3,0", "2,3,0", "2,4,8", "2,5,0", "2,2,3", "2,6,1", "2,3,0", "2,1,0", "2,2,0", "2,2,6", "2,0,0", "2,1,0", "2,3,2", "2,3,2", "1,0,0", "1,3,0", "1,1,0", "1,2,1", "1,2,0", "1,2,0", "1,2,3", "1,1,0", "1,1,0", "231,10,10", "45,7,4", "44,7,4", "38,7,7", "35,7,2", "34,4,1", "29,14,44", "25,6,8", "23,8,14", "19,8,8", "19,8,6", "18,5,7", "17,13,24", "14,11,6", "9,4,4", "8,9,5", "8,5,3", "7,3,3", "7,9,11", "6,5,1", "6,7,7", "6,8,1", "6,10,10", "6,4,2", "5,4,8", "5,3,2", "5,13,31", "5,1,1", "5,6,1", "5,5,0", "5,4,4", "4,3,3", "4,5,1", "4,4,0", "4,6,4", "4,2,3", "4,3,2", "3,5,0", "3,3,0", "3,4,3", "3,1,0", "3,6,2", "2,0,0", "2,1,0", "2,3,0", "2,7,2", "2,4,1", "2,6,6", "2,4,1", "2,1,0", "2,0,0", "2,3,1", "2,4,2", "2,3,0", "1,3,3", "1,3,0", "1,2,0", "1,4,1", "1,1,0", "1,6,0", "1,2,0", "1,5,1", "1,4,1", "1,2,1", "1,0,0", "43,7,12", "36,6,2", "33,3,1", "25,10,22", "22,3,5", "21,5,11", "18,6,5", "10,7,1", "9,10,13", "8,11,14", "6,17,28", "5,9,7", "4,4,10", "3,4,2", "3,3,1", "3,3,1", "3,1,0", "3,8,15", "2,2,0", "2,6,0", "2,8,1", "2,7,5", "2,3,3", "2,4,1", "2,5,1", "2,5,2", "2,5,1", "2,4,0", "1,4,0", "1,1,0", "1,2,1", "1,2,1", "1,1,0", "1,3,0", "1,6,11", "1,5,1", "1,3,0", "1,3,0", "1,6,1", "1,2,2", "1,2,2", "1,3,2", "1,4,1", "236,6,3", "41,4,3", "33,4,4", "28,9,30", "24,6,8", "24,9,33", "17,4,0", "17,4,2", "16,4,28", "8,9,3", "8,8,7", "5,2,2", "4,3,1", "4,2,0", "3,4,3", "3,3,0", "3,1,1", "3,6,10", "3,7,5", "3,1,2", "2,0,0", "2,2,0", "2,5,2", "2,1,0", "2,0,0", "2,5,3", "1,2,0", "1,2,1", "1,1,0", "1,6,1", "1,1,0", "1,0,1", "1,1,1", "1,3,2", "1,3,2", "1,1,0", "1,0,0", "127,106,3", "69,48,60", "57,64,20", "51,57,5", "37,52,59", "35,54,5", "24,29,5", "24,121,1", "22,30,37", "20,53,22", "10,10,7", "9,8,8", "7,18,1", "6,5,7", "5,6,9", "4,5,0", "4,4,3", "4,9,0", "3,19,0", "3,3,0", "2,3,0", "2,3,0", "2,1,19", "2,5,0", "2,2,0", "1,1,0", "1,4,0", "1,0,0", "1,1,0", "1,1,0", "1,1,1", "1,1,1", "1,3,15", "1,2,0", "1677,1288,3433", "1049,1447,2081", "275,376,20", "174,297,7", "46,73,5", "32,84,11", "20,72,1", "19,46,0", "17,46,9", "11,46,14", "9,47,4", "8,44,3", "8,37,6", "7,43,11", "7,48,4", "6,47,20", "5,38,1", "5,39,3", "5,39,4", "5,43,4", "5,38,6", "4,43,3", "4,39,2", "4,39,8", "4,44,4", "4,40,0", "4,41,0", "3,37,3", "3,36,5", "3,51,0", "3,41,4", "3,40,3", "2,40,3", "2,41,0", "2,42,0", "2,43,1", "2,40,2", "2,44,6", "2,40,0", "2,43,0", "2,41,3", "2,39,0", "2,42,1", "1,41,0", "1,37,2", "1,40,4", "1,40,0", "1,40,0", "124,1,8", "100,2,11", "44,2,6", "42,3,3", "30,1,4", "26,0,8", "24,1,0", "24,1,2", "22,0,2", "17,4,3", "14,3,1", "8,1,3", "8,0,1", "6,0,2", "6,1,0", "5,2,0", "5,1,0", "5,3,3", "4,1,0", "4,2,3", "3,0,0", "3,1,2", "3,0,2", "3,0,0", "2,3,2", "2,4,2", "2,2,0", "2,1,4", "2,1,8", "2,0,0", "2,0,0", "2,4,28", "2,1,0", "1,1,0", "1,1,0", "1,0,0", "1,1,0", "1,1,0", "1,1,0", "1,1,0", "1,0,0", "1,1,1", "1,1,0", "1,0,4", "1,1,0", "1,2,3", "1,0,0", "116,14,9", "72,9,6", "41,21,8", "36,8,1", "34,13,22", "31,5,0", "29,5,1", "28,14,5", "27,20,16", "27,12,3", "26,4,1", "25,3,0", "24,20,88", "23,1,1", "23,5,1", "22,11,4", "21,6,1", "17,9,10", "14,9,11", "13,2,0", "13,4,0", "11,12,8", "10,6,2", "8,1,0", "7,4,2", "7,8,5", "7,9,24", "5,2,7", "5,9,5", "5,10,14", "5,4,1", "4,7,7", "4,9,12", "4,0,0", "4,4,2", "4,5,2", "3,7,1", "3,2,1", "2,3,0", "2,0,3", "2,2,1", "2,1,0", "2,3,1", "2,4,3", "2,7,3", "2,5,3", "2,3,3", "2,3,1", "1,4,0", "1,5,0", "1,4,4", "1,5,3", "1,4,0", "1,1,0", "1,5,4", "1,4,0", "1,3,0", "1,4,4", "1,4,5", "1,2,0", "1,1,0", "1,7,0", "1,1,0", "1,4,1", "1,9,0", "1,0,0", "33,0,4", "25,2,1", "24,1,0", "23,2,1", "21,3,1", "15,0,2", "9,2,0", "8,3,5", "2,0,0", "2,1,3", "1,1,1", "1,2,0", "1,0,0", "1,0,0", "1,1,0", "1,2,0", "1,1,0", "1,0,0", "1,0,2", "1,1,1", "1,1,0", "246,3,6", "40,0,0", "19,3,8", "19,0,0", "16,2,1", "13,1,1", "11,1,0", "9,1,0", "6,2,6", "5,2,1", "5,0,2", "4,2,9", "4,0,2", "4,1,1", "3,0,0", "3,1,2", "2,2,0", "2,3,1", "2,3,1", "2,0,0", "2,1,0", "2,4,1", "1,1,0", "1,0,0", "1,1,0", "1,1,0", "1,0,0", "1,0,0", "1,1,0", "1,1,0", "1,2,5", "33,50,5", "28,15,10", "25,27,5", "21,8,5", "20,13,3", "17,7,1", "17,6,1", "14,9,7", "11,8,3", "10,15,2", "8,8,0", "6,6,0", "5,9,4", "5,3,1", "4,4,1", "4,2,3", "4,5,3", "3,3,1", "2,4,1", "2,3,0", "2,1,0", "2,3,0", "2,2,0", "2,0,0", "1,0,0", "1,0,0", "34,0,1", "28,2,1", "22,0,0", "15,0,1", "13,2,0", "11,2,1", "7,0,2", "6,3,2", "5,3,2", "4,1,0", "4,0,0", "3,1,1", "3,3,1", "3,1,1", "2,2,0", "2,0,14", "2,0,0", "1,0,0", "1,1,0", "1,0,1", "1,0,0", "1,0,2", "1,0,0", "1,0,0", "1,1,0", "1,0,0", "1,1,0", "1,0,0", "1,2,0", "16,196,166", "14,64,52", "5,27,22", "5,26,21", "6,43,18", "3,14,4", "7,20,15", "6,24,24", "4,23,22", "3,10,5", "3,26,10", "2,11,5", "1,10,0", "1,4,3", "1,2,0", "124,2,3", "37,2,0", "29,4,2", "25,1,0", "24,2,0", "21,0,3", "17,2,3", "17,1,1", "15,3,12", "6,2,1", "5,2,5", "4,5,3", "3,2,1", "3,1,2", "3,1,1", "3,0,0", "3,1,1", "2,0,0", "2,1,0", "2,1,0", "1,1,0", "1,2,3", "1,0,0", "1,2,1", "1,1,0", "1,0,0", "1,2,0", "1,1,0", "1,0,0", "1,2,0", "3,4,12", "1,2,3", "2,2,2", "11,0,1", "1,3,1", "1,1,1", "1,4,1", "3,4,1", "1,1,0", "1,2,0", "2,0,0", "1,2,0", "3,1,0", "1,0,0", "1,2,0", "1,0,0", "1,1,0", "1,2,0", "2,0,0", "2,0,0", "87,69,54", "72,99,2", "64,100,13", "52,70,6", "50,59,7", "36,78,16", "29,35,0", "27,23,11", "19,36,5", "19,35,10", "17,8,0", "12,11,8", "10,3,0", "10,7,0", "9,18,6", "9,9,6", "7,23,0", "6,5,4", "6,6,2", "4,3,0", "4,7,1", "4,1,0", "4,20,0", "4,4,3", "3,7,0", "2,3,0", "2,2,0", "2,10,1", "2,0,0", "2,1,1", "2,2,2", "1,0,0", "1,0,0", "1,0,3", "4,0,0", "6,0,0", "2,0,0", "1,0,0", "246,26,6", "201,97,338", "72,26,10", "59,42,82", "47,39,4", "44,37,26", "30,39,46", "22,25,10", "21,20,10", "20,29,2", "19,32,32", "16,16,1", "13,26,20", "12,35,12", "12,16,11", "11,17,16", "9,19,10", "9,16,10", "9,12,7", "8,35,32", "7,11,9", "5,9,2", "5,24,8", "4,8,0", "4,5,3", "4,15,5", "4,11,0", "4,19,11", "4,18,10", "3,10,8", "3,12,1", "3,14,0", "3,15,6", "3,13,2", "3,11,1", "2,15,3", "2,10,2", "2,16,1", "2,17,0", "2,21,1", "2,8,1", "2,15,3", "2,13,0", "2,12,8", "2,12,10", "2,15,3", "2,15,1", "1,12,2", "1,10,0", "461,266,848", "339,260,615", "244,70,15", "87,166,139", "76,41,2", "70,89,73", "57,21,1", "30,37,3", "26,42,2", "24,37,4", "22,47,32", "16,40,7", "12,24,1", "10,23,3", "10,27,9", "9,22,4", "8,32,19", "7,32,21", "7,28,9", "7,30,12", "7,17,11", "6,28,10", "5,30,5", "5,28,9", "5,30,2", "5,23,4", "5,25,2", "4,20,5", "4,23,5", "4,12,0", "4,26,2", "4,22,6", "4,23,2", "3,22,5", "3,33,1", "3,24,2", "3,31,6", "3,24,1", "2,15,12", "2,1,0", "2,21,10", "2,22,6", "2,24,0", "2,20,11", "2,15,2", "2,1,0", "2,25,6", "2,29,2", "1,7,5", "1,25,1", "1,28,1", "1,19,0", "1,18,2", "1,25,0", "1,22,3", "1,17,0", "1,26,1", "1,23,5", "1,22,1", "1,29,0", "1,17,4", "649,542,1271", "635,577,1307", "276,166,14", "80,119,98", "65,78,13", "61,71,2", "48,58,12", "45,55,8", "43,52,10", "35,25,0", "31,38,14", "30,36,3", "20,32,17", "18,30,11", "15,30,12", "14,30,10", "14,31,20", "13,30,19", "9,38,6", "9,11,8", "8,26,8", "7,29,4", "7,19,3", "7,44,32", "7,30,4", "6,8,6", "6,21,3", "6,26,5", "6,32,0", "6,23,8", "6,26,5", "6,26,14", "6,8,4", "5,32,4", "5,24,10", "5,6,4", "5,26,6", "5,24,4", "5,19,1", "4,29,4", "4,41,3", "4,31,5", "4,31,19", "4,27,0", "4,5,3", "4,24,8", "4,32,4", "4,30,3", "4,25,5", "4,23,0", "3,31,7", "3,8,6", "3,24,11", "3,26,6", "3,21,2", "3,24,1", "3,24,10", "2,31,3", "2,29,1", "2,29,3", "2,26,2", "1,29,0", "1,28,0", "1,24,1", "1,21,0", "1,25,0", "1,31,1", "1,25,6", "1,17,1", "240,18,13", "96,54,133", "91,39,147", "32,7,0", "29,13,2", "26,16,3", "20,6,0", "18,15,12", "11,7,6", "9,10,4", "8,6,3", "6,8,4", "6,3,0", "6,9,3", "5,6,0", "4,4,0", "4,8,7", "4,4,1", "4,6,0", "3,12,4", "3,9,3", "3,11,0", "2,6,0", "2,2,0", "2,0,0", "2,5,1", "2,5,2", "2,7,0", "2,9,0", "2,4,3", "1,3,0", "1,4,0", "1,6,0", "1,4,0", "1,5,1", "1,8,3", "1,3,0", "1,8,1", "1,13,14", "2,9,10", "1,5,2", "1,6,0", "1,12,0", "48,4,6", "15,8,0", "8,4,2", "4,2,1", "2,4,0", "1,0,0", "35,0,1", "23,1,1", "21,3,4", "18,1,2", "17,1,0", "13,1,1", "6,0,7", "3,1,1", "2,1,2", "2,1,2", "2,0,3", "2,1,1", "2,0,0", "2,1,1", "2,0,1", "2,2,3", "1,0,0", "1,0,0", "1,2,0", "1,1,0", "1,0,0", "1,0,0", "1,0,1", "1,0,0", "177,56,1", "91,43,1", "66,45,13", "57,31,1", "50,35,13", "39,35,14", "35,21,0", "17,26,1", "15,25,1", "8,29,0", "6,22,0", "5,32,4", "4,25,2", "4,30,2", "3,23,2", "2,25,2", "2,28,0", "1,22,0", "1,24,0", "475,326,845", "467,350,735", "452,281,820", "443,272,725", "110,61,4", "76,71,66", "70,68,41", "60,79,10", "28,55,1", "25,46,15", "22,67,4", "21,54,12", "20,45,9", "16,55,17", "12,59,7", "11,53,13", "8,49,5", "7,41,2", "7,56,4", "7,47,0", "6,40,9", "6,45,1", "6,46,6", "6,47,4", "6,50,0", "6,49,1", "5,45,2", "5,49,1", "5,61,8", "5,6,3", "5,47,0", "5,48,2", "5,59,2", "5,6,1", "4,52,0", "3,50,1", "3,46,1", "3,50,1", "3,52,3", "3,46,2", "2,0,0", "2,44,0", "2,38,0", "2,41,5", "2,54,0", "2,45,0", "2,1,0", "1,46,0", "267,173,485", "161,176,288", "137,144,233", "63,47,49", "50,21,21", "48,31,2", "36,21,56", "33,27,54", "24,26,24", "22,31,24", "18,31,14", "18,23,34", "16,12,10", "16,11,5", "14,44,17", "11,4,4", "10,31,15", "10,29,11", "8,39,37", "8,29,6", "8,22,18", "6,27,7", "6,29,6", "6,23,6", "6,25,9", "5,20,0", "5,27,5", "5,7,5", "5,22,6", "5,22,3", "5,8,6", "5,26,2", "4,20,4", "4,22,2", "4,36,16", "4,25,10", "4,1,0", "4,22,1", "3,23,5", "3,27,3", "3,30,1", "2,21,2", "2,28,5", "2,24,1", "2,22,1", "2,4,0", "2,25,4", "1,24,0", "1,0,0", "1,3,1", "1,25,0", "1,22,1", "1,30,1", "1,22,0", "46,8,8", "36,1,2", "25,5,2", "24,12,33", "23,11,35", "21,4,2", "21,6,2", "21,4,3", "20,4,1", "16,7,11", "10,5,4", "8,8,5", "8,9,3", "7,8,6", "7,6,6", "5,5,2", "3,6,1", "3,8,1", "2,7,5", "2,10,5", "2,1,0", "2,5,0", "2,6,2", "2,4,0", "2,6,0", "1,2,1", "1,0,0", "1,3,0", "1,4,1", "1,3,0", "1,4,0", "1,2,1", "1,4,3", "1,2,0", "1,4,0", "1,2,0", "1,0,0", "1,1,0", "629,535,1231", "493,492,975", "450,443,858", "415,565,841", "251,120,14", "244,87,13", "140,79,4", "64,99,82", "45,57,5", "40,51,42", "32,59,24", "27,33,1", "22,67,28", "21,91,52", "18,38,23", "18,22,13", "17,56,36", "9,24,19", "7,30,0", "6,56,2", "6,42,7", "6,38,6", "6,35,4", "6,50,10", "6,13,10", "5,47,21", "5,31,5", "5,46,8", "4,44,5", "4,37,5", "4,33,2", "4,48,2", "4,33,4", "4,36,1", "4,30,4", "3,37,1", "3,29,8", "3,30,1", "3,38,0", "2,34,0", "2,45,2", "2,57,6", "2,42,0", "2,41,4", "1,36,0", "1,52,0", "1,35,0", "1,38,3", "1,26,1", "1,38,2", "1,36,0", "1,40,0", "1,37,2", "2199,3429,4604", "2169,3149,4123", "2026,3175,3820", "596,717,313", "264,231,8", "241,219,9", "63,163,5", "31,94,6", "30,48,2", "24,87,18", "22,58,9", "21,43,30", "19,76,8", "9,44,4", "8,61,3", "7,41,0", "6,41,1", "5,45,2", "5,41,7", "5,55,2", "5,52,2", "5,44,11", "4,42,2", "4,39,6", "3,47,4", "3,40,0", "3,53,0", "3,49,4", "3,1,0", "3,39,0", "3,46,18", "2,45,4", "2,90,0", "2,41,0", "2,45,1", "2,45,1", "1,45,2", "1,40,0", "1,44,3", "1,44,0", "1,47,0", "1,45,1", "1,45,0", "1,49,1", "1,48,0", "70,3,4", "42,4,0", "38,2,11", "34,5,5", "32,8,43", "17,0,4", "13,1,0", "13,1,0", "8,0,0", "7,0,0", "5,2,3", "5,3,2", "4,2,1", "4,5,6", "4,5,23", "4,1,4", "4,1,1", "4,3,1", "3,3,0", "3,2,1", "3,0,1", "2,2,1", "2,5,3", "2,0,1", "2,1,0", "2,2,0", "2,3,3", "1,2,0", "1,2,0", "1,3,7", "1,0,0", "1,2,0", "1,1,0", "1,1,0", "1,0,0", "1,0,0", "1,1,0", "1,2,1", "1,1,1", "251,5,11", "55,1,3", "20,3,30", "19,0,1", "17,0,0", "14,6,25", "13,5,19", "11,1,0", "10,0,1", "8,1,0", "5,4,5", "5,1,0", "4,2,0", "3,1,5", "3,2,0", "2,2,3", "2,2,1", "2,2,0", "2,2,1", "2,4,0", "2,1,0", "2,2,0", "1,1,0", "1,0,0", "1,5,0", "1,0,0", "1,1,0", "1,0,0", "1,0,1", "1,2,0", "1,0,0", "1,1,0", "6802,3976,13136", "1654,1877,3028", "1630,1856,3114", "1540,1843,2896", "764,2267,1516", "747,2282,1465", "316,318,9", "181,330,3", "139,323,7", "99,298,17", "73,88,46", "63,143,0", "49,301,24", "49,143,6", "46,45,6", "36,282,77", "35,61,50", "34,16,0", "34,52,43", "33,291,12", "27,309,17", "25,30,21", "24,142,21", "22,0,0", "20,24,14", "19,287,14", "16,0,0", "15,146,4", "13,279,0", "12,237,18", "11,145,6", "11,284,18", "9,228,3", "8,140,12", "7,141,10", "6,144,5", "6,148,13", "6,138,2", "6,8,4", "6,275,8", "5,134,13", "4,216,1", "4,228,3", "4,147,3", "4,235,13", "4,231,1", "4,142,4", "3,140,6", "3,143,2", "3,4,2", "3,314,1", "3,4,1", "3,223,2", "3,140,2", "3,135,1", "3,288,0", "3,147,2", "3,136,5", "3,225,5", "2,138,26", "2,146,1", "2,140,1", "2,236,1", "2,289,0", "2,279,0", "1,134,0", "1,141,0", "1,157,0", "1,131,0", "1,144,2", "1,145,0", "200,10,0", "115,8,0", "113,5,1", "57,10,0", "53,13,6", "39,39,21", "32,6,0", "24,28,11", "11,11,1", "8,18,8", "4,10,5", "3,8,1", "3,11,4", "3,14,11", "2,7,2", "2,3,0", "2,3,3", "1,8,0", "1,7,0", "56,199,1", "23,209,1", "1,204,0", "179,201,0", "385,195,0", "6,213,0", "134,11,0", "21,6,0", "18,3,1", "14,3,0", "11,4,1", "10,5,0", "9,4,1", "9,7,2", "7,3,0", "6,0,0", "5,1,0", "4,1,0", "4,3,0", "4,1,0", "3,3,0", "3,2,0", "3,1,0", "3,1,0", "2,2,0", "2,0,0", "2,2,0", "1,0,0", "1,0,0", "1,0,0", "1,0,0", "1,0,0", "1,0,0", "1,0,0", "1,2,0", "11,3,5", "11,2,1", "6,0,0", "4,1,4", "4,2,1", "4,0,0", "3,3,0", "3,0,1", "2,1,0", "2,1,0", "2,1,0", "1,1,0", "1,4,1", "1,0,0", "1,0,1", "1,0,0", "1,2,2", "35,3,0", "5,1,0", "7,2,0", "64,59,0", "75,7,12", "32,4,12", "22,0,0", "11,2,11", "7,6,8", "7,4,2", "6,2,3", "5,7,0", "4,7,5", "4,4,0", "4,4,3", "4,6,6", "3,12,11", "3,3,3", "3,3,2", "3,6,0", "3,2,7", "3,7,5", "2,1,3", "2,3,1", "2,3,2", "2,2,2", "1,1,1", "1,2,5", "1,0,0", "1,1,0", "1,2,1", "1,2,1", "1,3,0", "1,2,0", "1,1,0", "211,123,430", "28,41,2", "24,4,0", "19,10,10", "10,7,0", "7,4,0", "6,7,4", "6,10,2", "6,9,10", "6,8,5", "5,3,2", "5,7,2", "5,8,1", "4,13,0", "3,8,1", "3,6,4", "3,4,4", "3,7,1", "3,7,0", "3,7,1", "2,13,0", "2,6,0", "2,8,0", "2,8,7", "2,4,0", "2,5,5", "1,1,1", "1,4,1", "1,5,0", "1,7,1", "1,7,0", "1,3,0", "1,7,2", "1,7,0", "1,5,0", "1,9,0", "1,8,1", "1,5,1", "1,7,0", "1,12,11", "1,5,0", "27,3,5", "16,0,0", "13,2,1", "11,1,5", "10,2,2", "9,0,4", "3,0,0", "3,0,0", "2,0,0", "2,0,0", "2,0,0", "2,0,0", "2,0,2", "2,1,0", "2,0,0", "1,1,0", "1,0,0", "1,0,0", "1,0,0", "1,0,0", "1,0,0", "190,0,6", "23,0,0", "19,3,0", "9,2,11", "8,1,0", "4,0,0", "4,1,1", "4,2,1", "3,0,5", "3,1,1", "2,0,1", "2,0,0", "2,1,0", "2,0,0", "2,1,1", "2,0,0", "1,0,0", "1,0,0", "1,0,0", "1,2,0", "1,0,0", "1,3,0", "1,0,0", "1,0,0", "1,1,1", "1,2,0", "125,5,6", "115,1,2", "19,3,4", "17,2,0", "10,3,2", "10,2,8", "10,2,3", "9,1,1", "7,3,4", "6,9,4", "5,2,6", "5,4,0", "5,2,0", "5,4,13", "4,2,0", "4,6,0", "4,3,4", "4,1,3", "3,0,0", "2,3,0", "2,0,0", "2,3,1", "1,1,0", "1,0,0", "1,1,0", "1,1,0", "1,0,0", "1,0,0", "1,2,1", "1,3,1", "1,1,0", "1,0,0", "1,0,0", "1,3,4", "1,0,0", "5415,4128,8152", "2967,3723,4531", "81,265,18", "71,270,4", "62,162,21", "49,186,1", "36,124,21", "23,90,19", "19,99,23", "14,56,2", "14,102,35", "14,40,3", "13,89,2", "13,151,3", "12,162,16", "11,96,14", "10,94,16", "9,96,8", "8,99,7", "6,98,11", "6,87,0", "5,9,1", "5,99,5", "4,93,1", "4,85,0", "3,94,3", "3,147,7", "3,87,7", "3,93,1", "3,83,0", "3,90,0", "3,96,1", "2,87,4", "2,84,0", "2,116,9", "2,92,0", "2,111,0", "2,88,2", "1,83,1", "1,91,0", "1,89,8", "1,92,0", "1,93,0", "23,5,3", "20,5,9", "17,7,4", "17,9,2", "8,4,3", "6,5,1", "6,6,3", "5,3,1", "5,5,5", "5,7,7", "4,4,1", "4,0,0", "4,7,5", "3,2,1", "2,3,2", "2,6,6", "2,1,0", "2,5,0", "2,1,0", "2,6,1", "2,1,0", "2,0,0", "2,1,3", "2,0,0", "2,2,2", "1,0,0", "1,0,0", "1,1,0", "1,2,1", "1,2,1", "1,1,1", "1,2,0", "1,1,0", "1,0,0", "1,4,4", "1,3,7", "22,4,5", "14,4,1", "11,6,5", "10,10,8", "6,5,3", "5,3,1", "4,6,6", "4,0,2", "4,8,6", "3,3,2", "3,3,0", "2,7,2", "2,4,1", "2,4,3", "2,2,1", "2,1,0", "2,1,0", "2,3,1", "2,6,4", "2,2,7", "2,3,0", "1,2,0", "1,0,0", "1,3,0", "1,4,4", "1,2,0", "1,1,0", "1,3,1", "1,2,0", "1,1,0", "1,2,0", "1,4,0", "1,2,2", "123,0,9", "92,0,2", "46,3,1", "38,3,7", "36,1,4", "32,2,5", "27,2,6", "20,3,0", "19,2,1", "17,1,0", "17,1,1", "15,4,9", "14,2,2", "12,0,2", "8,0,0", "5,3,0", "4,1,0", "4,1,1", "3,1,0", "3,4,13", "3,0,4", "3,0,3", "3,1,1", "3,4,9", "2,1,0", "2,0,0", "2,2,1", "2,2,0", "2,0,0", "2,2,0", "2,4,2", "2,0,1", "2,1,4", "2,2,1", "2,1,0", "1,1,0", "1,1,0", "1,1,0", "1,1,1", "1,2,0", "1,1,0", "1,0,0", "1,0,0", "1,0,0", "1,0,0", "1,1,1", "1,0,1", "1,1,2", "1,2,0", "1,1,3", "1,2,2", "1,0,1", "1,14,8", "1,11,4", "1,14,4", "1,3,0", "1,7,0", "1,4,0", "244,5,1", "153,6,1", "123,9,0", "73,14,0", "57,9,0", "42,11,2", "41,6,0", "40,16,17", "21,24,6", "18,18,20", "15,8,0", "12,17,37", "4,5,4", "3,12,0", "3,6,0", "3,11,4", "1,6,0", "118,233,47", "269,74,32", "69,71,8", "69,9,3", "151,52,2", "45,44,2", "35,9,1", "41,9,1", "12,25,0", "48,11,0", "28,5,0", "59,10,0", "335,178,0", "297,180,0", "279,179,0", "64,173,0", "57,237,0", "25,178,0", "22,228,0", "20,187,1", "9,180,0", "8,181,0", "6,183,0", "5,4,2", "38,3,1", "8,4,1", "1,2,0", "13,1,0", "136,1,0", "4,2,0", "1,3,0", "2,1,0", "28,2,0", "1,0,0", "1,2,0", "23,0,0", "1,0,0", "50,6,3", "35,15,10", "15,7,1", "11,9,5", "9,5,0", "6,1,0", "3,3,1", "3,3,0", "3,1,0", "2,4,0", "1,1,0", "1,0,0", "1,1,0", "1,5,0", "91,56,76", "54,32,65", "3,5,37", "27,18,28", "9,13,19", "114,102,13", "8,13,13", "5,5,10", "15,18,8", "5,10,8", "8,9,7", "3,8,4", "3,3,2", "1,3,2", "2,3,2", "5,8,1", "2,4,1", "1,6,0", "1,6,0", "1,3,0", "1,4,0", "1,4,0", "1,4,0", "1,5,0", "19,1,0", "11,0,1", "9,0,1", "4,0,0", "2,1,0", "206,156,144", "185,188,168", "42,94,95", "26,72,59", "19,79,88", "16,27,6", "11,87,81", "10,95,91", "10,26,21", "10,20,12", "9,17,7", "5,15,9", "5,8,6", "4,27,22", "4,10,5", "3,3,0", "3,21,17", "1,3,0", "1,7,5", "1,4,0", "1,5,0", "7,3,3", "7,2,1", "4,1,0", "5,0,0", "18,0,0", "4,0,0", "9,0,0", "1,0,0", "2,0,0", "1,0,0", "1,0,0", "1,0,0", "26,2,0", "16,0,0", "10,0,2", "4,0,0", "1,0,0", "1,0,0", "3,5,12", "1,4,1", "37,16,27", "16,12,1", "13,12,25", "9,10,22", "8,17,26", "7,13,9", "6,17,6", "5,9,4", "5,6,0", "5,10,11", "5,8,0", "4,8,6", "4,11,6", "4,4,0", "3,9,0", "3,1,0", "3,2,0", "2,8,0", "2,10,2", "2,6,0", "2,5,0", "1,8,6", "1,3,1", "1,5,0", "1,2,0", "1,26,0", "50,21,7", "18,13,0", "32,4,13", "25,1,3", "54,0,5", "53,0,13", "3,4,0", "1,3,0", "1,2,0", "1,0,0", "2,0,0", "19,32,25", "29,25,11", "15,17,10", "3,11,6", "1,8,0", "1,2,0", "1,0,0", "30,28,5", "22,11,18", "5,6,1", "2,7,1", "1,3,4", "1,3,0", "1,2,2", "6,0,0", "1,1,1", "14,1,7", "1,0,0", "3,1,0", "49,17,22", "49,26,30", "48,26,14", "30,21,8", "24,10,0", "24,28,6", "23,35,4", "21,16,11", "21,38,4", "18,7,0", "16,12,6", "12,21,0", "11,14,0", "11,3,0", "8,12,16", "8,16,9", "7,3,1", "6,14,0", "4,0,0", "4,1,7", "4,10,0", "3,4,0", "3,4,2", "2,2,0", "2,2,4", "2,5,3", "2,3,0", "2,2,1", "2,3,0", "2,0,0", "2,5,3", "1,0,0", "1,0,1", "1,2,2", "1,0,0", "140,26,43", "18,11,4", "6,7,1", "8,8,0", "54,48,83", "21,35,25", "16,33,12", "4,15,5", "3,16,2", "1,6,2", "2,18,2", "116,6,3", "36,7,15", "15,8,5", "10,8,3", "7,8,7", "7,6,7", "6,1,0", "3,9,12", "3,6,4", "3,2,2", "3,2,2", "2,2,1", "2,2,0", "1,0,0", "1,0,0", "1,3,1", "1,4,2", "1,4,0", "73,42,54", "3,13,28", "43,17,19", "23,32,16", "21,28,11", "21,19,10", "7,10,10", "5,13,10", "10,12,9", "18,16,8", "18,17,7", "12,11,6", "12,16,5", "7,12,5", "7,5,3", "4,6,1", "5,10,1", "1,4,1", "1,0,0", "2,0,0", "1,1,0", "215,6,0", "128,7,0", "102,5,0", "72,2,5", "54,4,1", "42,8,14", "35,0,0", "28,5,4", "22,5,2", "17,1,0", "16,8,1", "15,4,6", "15,3,2", "14,3,5", "8,4,4", "7,4,6", "5,1,1", "4,3,1", "4,6,2", "4,2,0", "3,4,3", "3,4,1", "2,5,5", "2,0,1", "2,3,0", "2,3,0", "76,117,416", "31,79,91", "133,109,81", "67,77,65", "21,64,56", "9,41,33", "7,33,27", "5,20,15", "3,17,14", "9,22,12", "6,26,12", "6,29,11", "13,21,10", "3,16,9", "13,36,9", "3,11,8", "3,13,7", "2,14,4", "1,14,3", "2,7,2", "6,13,2", "2,6,1", "9,4,0", "6,4,0", "2,8,0", "1,4,0", "45,60,0", "28,53,0", "8,52,0", "19,47,0", "44,49,0", "10,58,0", "101,53,0", "11,51,0", "143,54,0", "38,2,3", "22,0,1", "11,1,3", "10,7,0", "9,7,9", "6,1,2", "4,0,0", "4,0,0", "4,0,0", "3,0,0", "3,3,1", "3,0,0", "3,4,3", "3,0,0", "2,1,0", "2,0,0", "2,1,0", "2,0,0", "1,2,0", "1,0,0", "1,1,0", "1,0,0", "1,0,0", "1,0,0", "1,0,0", "1,0,0", "35,3,2", "9,0,0", "6,4,2", "6,6,1", "5,1,1", "2,2,1", "2,2,2", "2,0,0", "2,1,0", "1,0,0", "1,0,0", "1,0,0", "1,0,0", "1,0,0", "1,1,1", "1,0,0", "1,0,0", "1,0,0", "48,36,0", "4,33,0", "17,29,0", "107,32,0", "34,37,0", "24,32,0", "32,33,0", "28,29,0", "2,45,0", "12,47,0", "5,36,0", "31,31,0", "80,31,0", "47,7,7", "25,5,1", "24,4,1", "22,9,16", "17,11,6", "6,4,0", "5,0,0", "5,1,0", "4,14,13", "4,3,1", "4,0,0", "3,1,5", "2,0,0", "2,0,0", "2,0,0", "2,1,1", "2,0,0", "2,5,0", "2,0,0", "2,5,0", "2,1,0", "2,0,0", "2,0,0", "2,0,0", "1,2,0", "1,0,0", "1,0,0", "1,1,0", "1,4,0", "1,0,0", "1,0,0", "1,1,0", "1,0,0", "1,0,0", "1,0,0", "1,2,0", "1,1,0", "1,0,0", "1,0,0", "1,0,0", "50,4,3", "12,4,5", "5,5,2", "4,1,0", "3,2,1", "2,0,0", "2,0,0", "2,0,0", "2,0,0", "2,3,0", "2,4,3", "2,0,0", "2,0,0", "2,0,0", "2,0,0", "1,0,0", "1,1,0", "1,2,1", "1,0,0", "1,1,0", "1,4,4", "1,0,0", "1,0,0", "1,0,0", "1,0,0", "1,0,0", "1,0,0", "1,0,0", "1,1,0", "1,0,0", "1,0,0", "1,0,0", "1037,1304,108", "861,1027,1", "547,725,0", "458,547,38", "451,569,0", "433,556,0", "425,508,0", "374,478,0", "330,437,34", "283,359,0", "257,328,0", "236,301,5", "184,221,0", "172,214,0", "157,212,0", "145,188,6", "124,171,0", "124,164,0", "116,173,4", "107,152,2", "107,169,0", "107,152,2", "105,155,3", "98,151,1", "89,169,0", "88,144,8", "86,157,1", "78,148,3", "78,158,5", "78,161,4", "77,154,0", "77,167,4", "75,152,2", "70,152,4", "69,154,0", "69,156,0", "67,163,0", "65,164,0", "62,155,2", "60,173,4", "57,144,0", "57,159,0", "52,115,4", "47,160,7", "46,181,0", "43,165,0", "41,168,11", "39,162,2", "39,162,0", "38,178,1", "38,155,0", "37,159,0", "37,165,2", "36,174,4", "30,156,0", "28,166,0", "28,170,0", "25,168,1", "23,159,0", "23,140,2", "23,164,2", "19,161,0", "19,141,0", "19,155,0", "14,0,0", "2,0,0", "1,0,0", "5,0,0", "2,0,0", "5,0,0", "1,0,0", "2,0,0", "12,0,0", "1,0,0", "4,0,0", "14,0,0", "1,0,0", "19,2,1", "5,1,0", "1,0,0", "1,1,0", "1,1,0", "1,0,0", "7,0,0", "2,3,0", "3,0,0", "1,1,0");
var $stServerIn = "http:\/\/s1.slimtrade.com/in.php?s=10038";
var $stServerOut = "http:\/\/s1.slimtrade.com/out.php?s=10038";
var stNewWindow = 'EMPTY';
var stShowValues = 'EMPTY';
var stLinkText = 'EMPTY';
var stShowValues = 'EMPTY';

function stShowLink(n, t) {
    if (typeof stNewWindow == 'undefined' || stNewWindow == 'EMPTY') {
        stNewWindow = (typeof StNewWindow == 'undefined') ? false : StNewWindow
    }
    if (typeof stShowValues == 'undefined' || stShowValues == 'EMPTY') {
        stShowValues = (typeof showValues == 'undefined') ? false : showValues
    }
    if (typeof stLinkText == 'undefined' || stLinkText == 'EMPTY') {
        stLinkText = (typeof linktext == 'undefined') ? 'more' : linktext
    }
    if (typeof stLinkNoFollow == 'undefined' || stLinkNoFollow == 'EMPTY') {
        stLinkNoFollow = false
    }
    var o = '';
    t = t || stLinkText;
    if (n-- > stTrUrl.length) stTrName[n] = t;
    else o = '&o=' + stTrUrl[n];
    if (!stShowValues)
        if (stTrName[n].indexOf(' (') >= 0) stTrName[n] = stTrName[n].substr(0, stTrName[n].indexOf(' ('));
    document.write('<a ' + (stLinkNoFollow ? 'rel="nofollow"' : '') + (stNewWindow ? 'target="_blank" ' : '') + 'href="' + $stServerOut + o + '">' + stTrName[n] + '</a>')
};

function stShowVal(n, v) {
    if (typeof stTrValues[n]) {
        var arr = stTrValues[n].split(',');
        if (v == 'ins') document.write(arr[0]);
        else if (v == 'outs') document.write(arr[1]);
        else if (v == 'clicks') document.write(arr[2])
    }
    return null
}

function stGetLinkUrl(n) {
    var o = '';
    if (n-- <= stTrUrl.length) o = '&o=' + stTrUrl[n];
    return $stServerOut + o
}
var showLink = stShowLink;
var c = document.cookie;
$stBookmark = c.indexOf('stBookmark') == -1 ? '' : 1;
var d = new Date();
d.setTime(d.getTime() + 7776000000);
document.cookie = 'stBookmark=1; expires=' + d.toGMTString() + ';path=/';
var $stHost = (typeof document.URL != undefined) ? document.URL : '';
var $stSession = c.indexOf('stUS') == -1 ? '' : 1;
d = new Date();
d.setTime(d.getTime() + 900000);
document.cookie = 'stUS=1; expires=' + d.toGMTString() + ';path=/';
var $stKeks = document.cookie.indexOf('stUS') == -1 ? '' : 1;
(function() {
    var st = document.createElement('script');
    st.type = 'text/javascript';
    st.async = true;
    st.src = $stServerIn + '&t=' + $stSession + '&b=' + $stBookmark + '&c=' + $stKeks + '&tm=' + (Math.random() * 100000) + '&r=' + escape(document.referrer) + '&h=' + escape($stHost);
    var s = document.getElementsByTagName('script')[0];
    s.parentNode.insertBefore(st, s)
})();
                                    

#4 JavaScript::Eval (size: 17534, repeated: 9) - SHA256: 77d3639f8814dd2ee25cd049185e0247c6c7c3be2f8390161774cecfff19b41d

                                        var ufpAttach = function() {
    "use strict";
    var ufpAttach = function(cdn, receive) {
        if (!(this instanceof ufpAttach)) {
            return new ufpAttach(cdn, receive)
        }
        this.cdn = cdn;
        this.receive = receive
    };
    ufpAttach.prototype = {
        checkBody: function() {
            var isBodyLoaded = false;
            if (!!document.body) {
                isBodyLoaded = true
            }
            return (isBodyLoaded || !!document.getElementsByTagName('body')[0])
        },
        attachMessageEvent: function() {
            var self = this;
            var callback = function(event) {
                var parserExpectedUrl = document.createElement('a');
                parserExpectedUrl.href = self.cdn;
                var expectedDomain = parserExpectedUrl.hostname;
                var parserGivenUrl = document.createElement('a');
                parserGivenUrl.href = event.origin;
                var givenDomain = parserGivenUrl.hostname;
                if (givenDomain === expectedDomain) {
                    self.receive(event)
                }
            };
            if (window.addEventListener) {
                window.addEventListener("message", callback)
            } else {
                window.attachEvent("onmessage", callback)
            }
        },
        attachFingerprintIframe: function() {
            var date = new Date();
            var id = 'ufpIframe-' + date.getDate() + '-' + date.getMonth() + '-' + date.getFullYear();
            if (!this.checkBody()) {
                setTimeout(this.attachFingerprintIframe(), 5)
            } else if (!document.getElementById(id)) {
                try {
                    var iframe = document.createElement('iframe');
                    iframe.src = this.cdn;
                    iframe.id = id;
                    iframe.name = 'ufpIframe';
                    iframe.width = 0;
                    iframe.height = 0;
                    iframe.frameBorder = 0;
                    iframe.setAttribute('style', 'position:absolute;left:-9999px;width:0px;height;0px;border:0px;');
                    if (window.postMessage) {
                        this.attachMessageEvent()
                    } else {
                        this.receive()
                    }
                    document.body.appendChild(iframe)
                } catch (e) {}
            }
        }
    };
    ufpAttach.VERSION = "1.0";
    return ufpAttach
}();
var CTAMAT = new function() {
    var adserverUrls = {
        adcashDomain: ['//onclickmega.com', '//onclicksuper.com'],
        adcashUrls: ['//onclickmega.com/script/suurl.php?', '//onclicksuper.com/script/suurl.php?'],
        adserverIndex: 0
    };
    this.chosenAdcashUrl = null;
    var rand = Math.random();
    var self = this;
    var oppPixelLoaded = false;
    this.ELEMENT_WHITELIST = 1;
    this.ELEMENT_BLACKLIST = 2;
    this.browser = (function(n) {
        n = n.replace('OPR', 'opera').toLowerCase();
        var b = {
            webkit: /webkit/i.test(n),
            chrome: /chrome|crios/i.test(n),
            safari: (/safari/i.test(n) && !(/chrome/i.test(n)) && !(/opios/i.test(n))),
            mozilla: (/mozilla/i.test(n)) && (!/(compatible|webkit)/i.test(n)),
            firefox: /firefox/i.test(n),
            msie: ((/msie/i.test(n)) || /Trident/i.test(n)) && (!/opera/i.test(n)),
            msedge: (/edge/i.test(n)),
            msMobile: /iemobile/i.test(n) || /(?=.*\bWindows\b)(?=.*\bARM\b)/i.test(n) || /Windows Phone/i.test(n),
            opera: /opera/i.test(n),
            operaMini: (/opera mini/i.test(n) || /opios/i.test(n)),
            android: /android/i.test(n),
            mac: /macintosh/i.test(n),
            blackberry: /blackberry/i.test(n) || /BB10/i.test(n),
            ios: /ipad|ipod|iphone/i.test(n),
            fb: /fban\/fbios|fbav|fbios|fb_iab\/fb4a/i.test(n),
            presto: /presto/i.test(n),
            ieQuirksMode: (typeof document.compatMode !== 'undefined') ? document.compatMode !== 'CSS1Compat' && (/msie/i.test(n)) && (!/opera/i.test(n)) : false,
            ucbrowser: /^((?!UCWEB).)*UCBrowser.*Mobile.+/i.test(n),
            ucMini: /^((?!UCWEB).)*UCBrowser.*Mobile$/i.test(n),
            ucSpeed: /^Mozilla\/5\.0.+Gecko\/$/i.test(n),
            amazon_tablet: /(KFOT|KFTT|KFJWI|KFJWA|KFSOWI|KFTHWI|KFTHWA|KFAPWI|KFAPWA|KFARWI|KFASWI|KFSAWI|KFSAWA|JSS15J|Silk|Kindle)/i.test(n),
            tablet: /(?:Nexus 7|BNTV250|Kindle Fire|Silk|GT-P1000)/i.test(n)
        };
        b.touchable = 'ontouchstart' in document.documentElement;
        b.version = (b.safari) ? (n.match(/.+(?:ri)[\/: ]([\d.]+)/) || [])[1] : (n.match(/.+(?:ox|me|ra|ie|Edge)[\/: ]([\d.]+)/) || [])[1];
        b.majorVersion = parseInt(b.version);
        b.isMobile = b.android || b.ios || b.blackberry || b.msMobile || b.operaMini || b.ucbrowser || b.tablet || b.amazon_tablet || b.ucbrowser || b.fb || b.ucMini || b.ucSpeed;
        b.userAgent = navigator.userAgent;
        b.iosVersion = function() {
            if (typeof window.MSStream !== 'undefined') {
                return 0
            }
            var match = (/OS (\d+)_(\d+)_?(\d+)?/i).exec(b.userAgent),
                version;
            if (match !== undefined && match !== null) {
                version = [parseInt(match[1], 10), parseInt(match[2], 10), parseInt(match[3] || 0, 10)];
                return parseFloat(version.join('.'))
            }
            return 0
        };
        b.getBrowserName = function() {
            if (b.operaMini || b.fb) {
                return 'omini'
            }
            if (b.isMobile && (b.chrome || b.ios || b.safari || b.firefox || b.msMobile || b.opera || b.ucbrowser || b.ucMini)) {
                return 'mobile'
            }
            if (b.firefox) {
                return 'firefox'
            }
            if (b.opera) {
                return 'opera'
            }
            if (b.msie) {
                return 'msie'
            }
            if (b.safari) {
                return 'safari'
            }
            if (b.msedge) {
                return 'edge'
            }
            if (b.chrome) {
                return 'chrome'
            }
            return 'general'
        };
        b.getUrl = function() {
            return urls.cdnUrls[urls.cdnIndex] + '/script/' + b.getBrowserName() + '.js'
        };
        b.getEventName = function() {
            var eventType = 'click';
            if (b.chrome) {
                eventType = 'mousedown';
                if (b.majorVersion > 42 && b.majorVersion < 49 || b.isMobile) {
                    eventType = 'click'
                }
            }
            if (b.isMobile && b.touchable && !b.chrome && !b.ucMini && !b.ucSpeed) {
                eventType = 'touchstart'
            }
            if (b.ios && b.iosVersion() >= 9) {
                eventType = 'click'
            }
            return eventType
        };
        return b
    })(navigator.userAgent);
    this.attachAdserverScript = function() {
        var errorHandle = '';
        if (typeof zoneSett.url === 'string') {
            try {
                errorHandle = function() {
                    if (typeof CTABPu.emergencyFixer === 'object' && typeof urls.useFixer === 'boolean') {
                        if (urls.useFixer === true) {
                            CTABPu.emergencyFixer.prepare()
                        }
                    }
                };
                self.attachScript(zoneSett.url, true, errorHandle)
            } catch (e) {}
        } else if (adserverUrls.adserverIndex < adserverUrls.adcashUrls.length) {
            try {
                errorHandle = function() {
                    adserverUrls.adserverIndex++;
                    self.attachAdserverScript()
                };
                self.attachScript(adserverUrls.adcashUrls[adserverUrls.adserverIndex], true, errorHandle);
                self.chosenAdcashUrl = adserverUrls.adcashUrls[adserverUrls.adserverIndex]
            } catch (e) {}
        } else {
            if (typeof CTABPu.emergencyFixer === 'object' && typeof urls.useFixer === 'boolean') {
                if (urls.useFixer === true) {
                    CTABPu.emergencyFixer.prepare()
                }
            }
        }
    };
    this.attachScript = function(src, shouldBuild, errorHandler) {
        errorHandler = typeof errorHandler !== 'function' ? function() {} : errorHandler;
        if (typeof shouldBuild === 'boolean' && shouldBuild === true) {
            var builder = new self.ReopenUrlBuilder(src, self.inIframe());
            src = builder.build();
            if (self.browser.operaMini || self.browser.ucSpeed) {
                src += '&om=1'
            }
            if (typeof window.adcashUfp !== 'undefined' && window.adcashUfp.hash) {
                src += '&ufp=' + encodeURIComponent(window.adcashUfp.hash)
            }
        }
        var scriptElement = document.createElement('script');
        scriptElement.setAttribute('data-cfasync', 'false');
        scriptElement.src = src;
        scriptElement.onerror = errorHandler;
        var firstScript;
        if (typeof document.scripts !== 'undefined') {
            firstScript = document.scripts[0]
        }
        if (typeof firstScript === 'undefined') {
            firstScript = document.getElementsByTagName('script')[0]
        }
        firstScript.parentNode.insertBefore(scriptElement, firstScript)
    };
    this.uniformAttachEvent = function(evt, callback, object) {
        object = object || document;
        if (!object.addEventListener) {
            return object.attachEvent('on' + evt, callback)
        }
        return object.addEventListener(evt, callback, true)
    };
    this.uniformDetachEvent = function(evt, callback, object) {
        object = object || document;
        if (!object.removeEventListener) {
            return object.detachEvent('on' + evt, callback)
        }
        return object.removeEventListener(evt, callback, true)
    };
    this.inIframe = function() {
        try {
            return (window.self !== window.top) ? 1 : 0
        } catch (e) {
            return 1
        }
    };
    this.supportsBeacon = function() {
        return (typeof navigator.sendBeacon !== 'undefined') ? 1 : 0
    };
    this.supportsImage = function() {
        return (typeof Image !== 'undefined') ? 1 : 0
    };
    this.checkBody = function() {
        var b = false;
        if (typeof document.body !== 'undefined') {
            if (document.body != null) {
                b = true
            }
        }
        var oldBrowser = typeof document.getElementsByTagName('body')[0] !== 'undefined';
        return (b || oldBrowser)
    };
    this.appendTtc = function(url, shouldTrack, startTime) {
        if (!shouldTrack || startTime == 0) {
            return url
        }
        var time = Date.now() - startTime;
        var prefix = '&';
        if (url.indexOf('?') === -1) {
            prefix = '?'
        }
        time = encodeTTC(time);
        url += prefix + 'ttc=' + time;
        return url
    };
    var encodeTTC = function(time) {
        var strToEnc = time;
        var symbols = ['c', 'y', 'r', '4', 'j', 'v', '9', 't', 'x', 'p'];
        var encodedStr = '';
        var crc = 0;
        while (strToEnc > 0) {
            encodedStr = encodedStr.concat(symbols[(strToEnc % 10)]);
            crc += strToEnc % 10;
            strToEnc = parseInt(strToEnc / 10)
        }
        for (var i = 0; i < 3; i++) {
            if (crc > 0) {
                encodedStr = encodedStr.concat(symbols[(crc % 10)]);
                crc = parseInt(crc / 10)
            } else {
                encodedStr = encodedStr.concat(symbols[0])
            }
        }
        return encodedStr
    };
    this.loadPixel = function(type, pixelUrl) {
        var parameter;
        switch (type) {
            case 'unsold':
                parameter = '&unin=1';
                break;
            case 'opp':
                if (oppPixelLoaded) {
                    return true
                } else {
                    oppPixelLoaded = true
                }
                break;
            default:
                return false
        }
        if (pixelUrl) {
            var pixel = document.createElement('img'),
                url = pixelUrl;
            url += parameter;
            pixel.style.display = 'none';
            pixel.style.visibility = 'hidden';
            pixel.src = url;
            self.attachPixelToBody(pixel);
            return true
        } else {
            return false
        }
    };
    this.jsonp = function(url, method, callback) {
        url = url || '';
        method = method || '';
        callback = callback || function() {};
        if (typeof method === 'function') {
            callback = method;
            method = 'callback'
        }
        var generatedFunction = 'jsonp' + Math.round(Math.random() * 1000001);
        window[generatedFunction] = function(json) {
            callback(json);
            try {
                delete window[generatedFunction]
            } catch (e) {}
        };
        if (url.indexOf('?') === -1) {
            url = url + '?'
        } else {
            url = url + '&'
        }
        var jsonpScript = document.createElement('script');
        jsonpScript.setAttribute('src', url + method + '=' + generatedFunction);
        var firstScript;
        if (typeof document.scripts !== 'undefined') {
            firstScript = document.scripts[0]
        }
        if (typeof firstScript === 'undefined') {
            firstScript = document.getElementsByTagName('script')[0]
        }
        firstScript.parentNode.appendChild(jsonpScript)
    };
    this.ReopenUrlBuilder = function(baseUrl, isInIframe) {
        var instance = this;
        var allowedParams = {
            'sub1': true,
            'sub2': true,
            'excluded_countries': true,
            'allowed_countries': true,
            'pu': true,
            'lang': true,
            'lon': true,
            'lat': true,
            'storeurl': true,
            'c1': true,
            'c2': true,
            'c3': true,
            'pub_hash': true,
            'pub_clickid': true,
            'pub_value': true
        };
        this.baseUrl = baseUrl;
        this._getMetaContent = function(name) {
            try {
                var meta = window.top.document.getElementsByTagName('meta');
                for (var i = 0; i < meta.length; i++) {
                    if (meta[i].hasAttribute('name') && meta[i].getAttribute('name').toLowerCase() === name) {
                        var info = meta[i].getAttribute('content');
                        return instance._getSafeSizeSubString(info)
                    }
                }
            } catch (e) {}
            return ''
        };
        this._getWidth = function() {
            return window.innerWidth || document.documentElement.clientWidth || document.body.clientWidth
        };
        this._getHeight = function() {
            return window.innerHeight || document.documentElement.clientHeight || document.body.clientHeight
        };
        this._getSafeSizeSubString = function(str) {
            var indexToCut = Math.max(str.indexOf(' ', 256), str.indexOf(',', 256));
            if (indexToCut > 384 || indexToCut < 20) {
                indexToCut = 256
            }
            return str.substring(0, indexToCut)
        };
        this._getTitle = function() {
            var title = document.title;
            if (isInIframe) {
                try {
                    title = window.top.document.title
                } catch (e) {
                    title = ''
                }
            }
            return instance._getSafeSizeSubString(title)
        };
        this._getReferrer = function() {
            var referrer = document.referrer;
            if (isInIframe) {
                try {
                    referrer = window.top.document.referrer
                } catch (e) {
                    referrer = ''
                }
            }
            return instance._getSafeSizeSubString(referrer)
        };
        this.build = function() {
            if (typeof zoneSett.url !== 'string') {
                this.baseUrl = this.baseUrl + 'r=' + zoneSett.r
            }
            if (typeof adcashMacros === 'object') {
                for (var key in adcashMacros) {
                    if (adcashMacros.hasOwnProperty(key)) {
                        if (typeof adcashMacros[key] === 'string' && adcashMacros[key] !== '' && adcashMacros[key].length > 0) {
                            if (typeof allowedParams[key] === 'boolean' && allowedParams[key] === true) {
                                this.baseUrl = this.baseUrl + (this.baseUrl.indexOf('?') > 3 ? '&' : '?') + key + '=' + encodeURIComponent(adcashMacros[key])
                            }
                        }
                    }
                }
            }
            var cdnDomain = urls.cdnUrls[urls.cdnIndex];
            var cdnDomainToSend = cdnDomain.substring(2);
            return this.baseUrl + '&cbrandom=' + rand + '&cbiframe=' + isInIframe + '&cbWidth=' + instance._getWidth() + '&cbHeight=' + instance._getHeight() + '&cbtitle=' + encodeURIComponent(instance._getTitle()) + '&cbref=' + encodeURIComponent(instance._getReferrer()) + '&cbdescription=' + encodeURIComponent(instance._getMetaContent('description')) + '&cbkeywords=' + encodeURIComponent(instance._getMetaContent('keywords')) + '&cbcdn=' + encodeURIComponent(cdnDomainToSend)
        }
    };
    this.getRand = function() {
        return (typeof CTABPu !== 'object') ? rand : CTABPu.getRand()
    };
    this.loader = function(event) {
        if (typeof window['jonIUBFjnvJDNvluc' + self.getRand()] === 'function') {
            window['jonIUBFjnvJDNvluc' + self.getRand()](event);
            self.uniformDetachEvent(self.browser.getEventName(), self.loader)
        }
    };
    this.convertSecondsToMilliseconds = function(timeInSeconds) {
        var calculatedDelay = timeInSeconds;
        calculatedDelay = (calculatedDelay << 10) - calculatedDelay * 24;
        return calculatedDelay
    };
    this.getUrlQueryStringParameters = function(url) {
        var params = {};
        var x = url.split('?');
        if (1 in x) {
            var paramsRaw = x[1].split('&');
            for (var i in paramsRaw) {
                var parts = paramsRaw[i].split('=');
                if (0 in parts && 1 in parts) {
                    params[parts[0]] = parts[1]
                }
            }
        }
        return params
    };
    this.replaceQueryStringParametersInUrl = function(url, parameters) {
        var urlWithoutQueryString = url.split('?')[0];
        var urlParameters = self.getUrlQueryStringParameters(url);
        for (var i in parameters) {
            urlParameters[i] = parameters[i]
        }
        var queryString = self.buildQueryString(urlParameters);
        return urlWithoutQueryString + ((queryString.length) ? '?' + queryString : '')
    };
    this.buildQueryString = function(parameters) {
        var queryStringParts = [];
        for (var i in parameters) {
            queryStringParts.push(i + '=' + parameters[i])
        }
        return queryStringParts.join('&')
    };
    this.AdcashStorage = {
        isSupported: function() {
            try {
                return 'localStorage' in window && window['localStorage'] !== null
            } catch (e) {
                return false
            }
        },
        set: function(name, value, seconds, saveEverywhere) {
            var expires = '';
            if (seconds) {
                var date = new Date();
                date.setTime(date.getTime() + (seconds * 1000));
                expires = '; expires=' + date.toGMTString()
            }
            if (this.isSupported()) {
                localStorage.setItem(name, value)
            }
            if (saveEverywhere || !this.isSupported()) {
                document.cookie = name + '=' + value + expires + '; path=/'
            }
        },
        get: function(name) {
            if (this.isSupported()) {
                var ret = localStorage.getItem(name);
                switch (ret) {
                    case 'true':
                        return true;
                    case 'false':
                        return false;
                    default:
                        return ret
                }
            } else {
                var nameEQ = name + '=';
                var ca = document.cookie.split(';');
                for (var i = 0; i < ca.length; i++) {
                    var c = ca[i];
                    while (c.charAt(0) === ' ') {
                        c = c.substring(1, c.length)
                    }
                    if (c.indexOf(nameEQ) === 0) {
                        ret = c.substring(nameEQ.length, c.length);
                        switch (ret) {
                            case 'true':
                                return true;
                            case 'false':
                                return false;
                            default:
                                return ret
                        }
                    }
                }
            }
            return false
        }
    };
    this.randomString = function(length) {
        return Math.round((Math.pow(36, length + 1) - Math.random() * Math.pow(36, length))).toString(36).slice(1)
    };
    this.getWindowInfo = function() {
        return {
            height: window.outerHeight || document.documentElement.clientHeight,
            width: window.outerWidth || document.documentElement.clientWidth,
            left: window.screenLeft || window.screenX || 0,
            top: window.screenTop || window.screenY || 0
        }
    };
    if (!Date.now) {
        Date.now = function() {
            return new Date().getTime()
        }
    }
    this.currentTime = Date.now();
    this.classRestrictions = {
        hasWhitelist: false,
        hasBlacklist: false,
        targeting: {},
        addBlacklistedClass: function(className) {
            this.hasBlacklist = true;
            if (!(className in this.targeting)) {
                this.targeting[className] = 0
            }
            this.targeting[className] = this.targeting[className] | self.ELEMENT_BLACKLIST
        },
        addWhitelistedClass: function(className) {
            this.hasWhitelist = true;
            if (!(className in this.targeting)) {
                this.targeting[className] = 0
            }
            this.targeting[className] = this.targeting[className] | self.ELEMENT_WHITELIST
        }
    };
    this.init = function() {
        if (typeof zoneSett.r !== 'undefined' && zoneSett.r.length > 4) {
            var i;
            for (i = 0; i < adserverUrls.adcashUrls.length; i++) {
                acPrefetch(adserverUrls.adcashDomain[i])
            }
            if (zoneSett.hasOwnProperty('classWhitelist') && zoneSett.classWhitelist.length > 0) {
                for (i = 0; i < zoneSett.classWhitelist.length; i++) {
                    this.classRestrictions.addWhitelistedClass(zoneSett.classWhitelist[i])
                }
            }
            if (zoneSett.hasOwnProperty('classBlacklist') && zoneSett.classBlacklist.length > 0) {
                for (i = 0; i < zoneSett.classBlacklist.length; i++) {
                    this.classRestrictions.addBlacklistedClass(zoneSett.classBlacklist[i])
                }
            }
            if (typeof CTABPu !== 'undefined') {
                if (typeof CTABPu.loader === 'undefined') {
                    self.uniformAttachEvent(self.browser.getEventName(), self.loader)
                } else {
                    if (typeof urls.events !== 'undefined') {
                        for (i = 0; i < urls.events.length; i++) {
                            if (urls.events[i] !== self.browser.getEventName()) {
                                CTABPu.uniformDetachEvent(urls.events[i], CTABPu.loader)
                            }
                        }
                    }
                }
            } else {
                self.uniformAttachEvent(self.browser.getEventName(), self.loader)
            }
            var adsScriptAttached = false;
            var adsScriptAttach = function() {
                if (adsScriptAttached) {
                    return
                }
                adsScriptAttached = true;
                self.attachAdserverScript();
                if (!self.browser.operaMini && !self.browser.ucSpeed) {
                    self.attachScript(self.browser.getUrl())
                }
            };
            window.adcashUfp = {};
            try {
                new ufpAttach('//ufpcdn.com/script/identify.html?frmt=0', function(ufpData) {
                    var data = ufpData.data;
                    CTAMAT.AdcashStorage.set('adcashufpv3', data.ufp, 5184000, true);
                    window.adcashUfp.hash = data.ufp;
                    adsScriptAttach()
                }).attachFingerprintIframe()
            } catch (e) {}
            setTimeout(adsScriptAttach, 200)
        }
    };
    this.checkCssRestriction = function(cssRule, element, type) {
        if (false === ('querySelectorAll' in document)) {
            return true
        }
        var elementList = document.querySelectorAll(cssRule);
        for (var i = 0; i < elementList.length; i++) {
            if (element === elementList[i]) {
                if (type === self.ELEMENT_WHITELIST) {
                    return true
                } else if (type === self.ELEMENT_BLACKLIST) {
                    return false
                }
            }
        }
        if (type === self.ELEMENT_WHITELIST) {
            return false
        } else if (type === self.ELEMENT_BLACKLIST) {
            return true
        }
    };
    this.checkClassRestriction = function(classTargeting, element) {
        var tmpElement = element;
        do {
            var classes = [];
            if ('className' in tmpElement) {
                classes = tmpElement.className.match(/[^\s]+/g);
                if (classes === null) {
                    classes = []
                }
            }
            for (var i = 0; i < classes.length; i++) {
                if (this.classRestrictions.targeting.hasOwnProperty(classes[i])) {
                    if (this.classRestrictions.targeting[classes[i]] & self.ELEMENT_BLACKLIST) {
                        return false
                    }
                    if (this.classRestrictions.targeting[classes[i]] & self.ELEMENT_WHITELIST) {
                        return true
                    }
                }
            }
        } while ((tmpElement = tmpElement.parentNode));
        if (this.classRestrictions.hasWhitelist) {
            return false
        }
        return true
    };
    this.checkElementTargeting = function(event) {
        var target = event.target ? event.target : window.event.srcElement;
        if (!target) {
            return false
        }
        if (zoneSett.hasOwnProperty('cssWhitelist') && zoneSett.cssWhitelist) {
            if (!this.checkCssRestriction(zoneSett.cssWhitelist, target, this.ELEMENT_WHITELIST)) {
                return false
            }
        }
        if (zoneSett.hasOwnProperty('cssBlacklist') && zoneSett.cssBlacklist) {
            if (!this.checkCssRestriction(zoneSett.cssBlacklist, target, this.ELEMENT_BLACKLIST)) {
                return false
            }
        }
        if (this.classRestrictions.hasWhitelist || this.classRestrictions.hasBlacklist) {
            return this.checkClassRestriction(this.classRestrictions, target)
        }
        return true
    }
};
CTAMAT.init();
                                    

Executed Writes (11)

#1 JavaScript::Write (size: 58, repeated: 47) - SHA256: 60166638b5a3a739d66325569c84759ce64e515f333ee17835b57ae8b8d144b8

                                        < a href = "http://s1.slimtrade.com/out.php?s=10038" > more < /a>
                                    

#2 JavaScript::Write (size: 91, repeated: 1) - SHA256: ddb2f48f1a5295b036d19032f4456fbe5ec7553379789754cb9a095b2e463cc1

                                        < a href = "http://s1.slimtrade.com/out.php?s=10038&o=http://candydoll.se" > Small Wet Pussy < /a>
                                    

#3 JavaScript::Write (size: 103, repeated: 1) - SHA256: bfbbfbe8c5f074f60c78a8e6221f167e25a036ceeb6a8d831874cb09edad8ef8

                                        < a href = "http://s1.slimtrade.com/out.php?s=10038&o=http://erotica69.us.to/in.php?id=97" > EroticA 69 < /a>
                                    

#4 JavaScript::Write (size: 109, repeated: 1) - SHA256: b0a30d5577d5e02f45e1cc55414a7b1a25842b958d3b107f333f4b760be95073

                                        < a href = "http://s1.slimtrade.com/out.php?s=10038&o=http://loland.topz.mobi/in/86689" > Awesome Little Teens < /a>
                                    

#5 JavaScript::Write (size: 1066, repeated: 1) - SHA256: caa407944a7c6ce77559a3af0904a5be13ddb4ffbe296d215e36a855000fb056

                                        < body style = "margin:0px;" > < a target = "_blank"
href = "https://main.exosrv.com/click.php?data=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%3D%3D" > < img border = "0"
width = "250;"
height = "150;"
src = "https://static.exosrv.com/library/192180/94ebaccbf7ab44977014e486e709ae0b7bb1c6fc.gif" > < /a></body >
                                    

#6 JavaScript::Write (size: 854, repeated: 1) - SHA256: 82c42edb21a8263be212186389ee1032fb76f40b354d8072efeca5295a2304f6

                                        < div id = "divExoLayerWrapper"
style = "position: fixed; width: 250px; height: 0px; display:none; z-index: 100; bottom: 0 !important; right: 20px; !important; transition: height 1s ease-in-out 0s; -webkit-transition: height 1s ease-in-out 0s; -o-transition: height 1s ease-in-out 0s; -moz-transition: height 1s ease-in-out 0s; -ms-transition: height 2s ease-in-out 0s;" > < div id = "divExoLayer"
style = "position: absolute;  z-index: 101;" > < div id = "exoCloseButton"
style = "height:24px;width:24px;float:right;top:-12px;right:-12px;position:relative;z-index:100;cursor:pointer;vertical-align:top;" > < img src = "//static.exosrv.com/images/close-icon-circle.png" > < /div><div style="position: relative; top:-24px; width: 250px; height: 150px; overflow: hidden;"><iframe id="exoIMFrame" frameborder="0" scrolling="no" width="250px" height="150px"></iframe > < /div></div > < /div>
                                    

#7 JavaScript::Write (size: 213, repeated: 1) - SHA256: 6fb61c5a443c2821225e07b6a53dad837302c029c91bfbe574b44b0f22f26db7

                                        < img src = "https://toplist.cz/count.asp?id=1787214&logo=2&http=http%3A//arab-xxx.sextgem.com/&t=JAILBAIT%20TOP%20-%20jailbait.toplistcreator.eu&wi=1176&he=885&cd=24"
width = "88"
height = "31"
border = 0 alt = "TOPlist" / >
                                    

#8 JavaScript::Write (size: 232, repeated: 1) - SHA256: 9b1fb4043815022ff4616ca476d202eb21f87a98116f9a00324a78f1661b984a

                                        < img src = "https://toplist.cz/count.asp?id=1787214&logo=2&http=http%3A//teenystar18.toplistcreator.eu/index.html&t=JAILBAIT%20TOP%20-%20jailbait.toplistcreator.eu&wi=1176&he=885&cd=24"
width = "88"
height = "31"
border = 0 alt = "TOPlist" / >
                                    

#9 JavaScript::Write (size: 219, repeated: 1) - SHA256: 8b1c578277d2b12911bb88a11de9b6256a33947d5c7153de129445a56183244a

                                        < img src = "https://toplist.cz/count.asp?id=1787215&logo=2&http=http%3A//arab-xxx.sextgem.com/&t=TOP.LISTED%20MODELS%20-%20toplisted.toplistcreator.eu&wi=1176&he=885&cd=24"
width = "88"
height = "31"
border = 0 alt = "TOPlist" / >
                                    

#10 JavaScript::Write (size: 238, repeated: 1) - SHA256: a85d774a30c516a34112b6acf8c1aaf4b7e86998703ea9f5a3572b1a95ce9d89

                                        < img src = "https://toplist.cz/count.asp?id=1787215&logo=2&http=http%3A//teenystar18.toplistcreator.eu/index.html&t=TOP.LISTED%20MODELS%20-%20toplisted.toplistcreator.eu&wi=1176&he=885&cd=24"
width = "88"
height = "31"
border = 0 alt = "TOPlist" / >
                                    

#11 JavaScript::Write (size: 219, repeated: 1) - SHA256: 2623a148894a5d201ce0ff0f2aabc9b4f8e7777cb68aadc7aa9f58bab849b918

                                        < img src = "https://toplist.cz/count.asp?id=1787216&logo=s&http=http%3A//arab-xxx.sextgem.com/&t=TEENY%20STAR%2018%20-%20teenystar18.toplistcreator.eu&wi=1176&he=885&cd=24"
width = "14"
height = "14"
border = 0 alt = "TOPlist" / >
                                    


HTTP Transactions (429)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: arab-xxx.sextgem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         54.36.158.41
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Date: Thu, 15 Nov 2018 14:00:06 GMT
Vary: Host,Accept-Encoding
Set-Cookie: _xta_uid=0368c87b35de3a87b03aeaef070f5b04; expires=Sat, 14-Nov-2020 14:00:07 GMT; Max-Age=63072000; path=/; domain=.sextgem.com; httponly _xta_vid=60112446eee5f3220799a722e4a13951-1542290407; expires=Thu, 15-Nov-2018 14:30:07 GMT; Max-Age=1800; path=/; domain=.sextgem.com; httponly
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Content-Encoding: gzip
Content-Length: 11102
Age: 0
X-Cache: MISS
X-Cache-Hits: 0
Accept-Ranges: bytes
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   11102
Md5:    03f5fb3e87cfd14b2bd854b53ed4f6bf
Sha1:   2331a888a5ad94024f3c16aae29564864290c078
Sha256: 0a76566936a8b6219346a2c9545ae07f29eb3bd8a1ff34295b1eaf46cb2ff929
                                        
                                            GET /css?family=Oswald HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Thu, 15 Nov 2018 14:00:07 GMT
Date: Thu, 15 Nov 2018 14:00:07 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   190
Md5:    29c6cb9691eba33ad930680d66313307
Sha1:   63eb8bfc15c24ead7df44a7a8582b931a1b4be6e
Sha256: a0cf8335cad6ef633f85ab1b4ad03d637c0b33559da1ac9e8f8d5062ca975970
                                        
                                            GET /s10038.js HTTP/1.1 
Host: s1.slimtrade.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         91.121.39.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Accept-Ranges: bytes
Etag: "2718149317"
Last-Modified: Thu, 15 Nov 2018 13:54:43 GMT
Content-Length: 38397
Date: Thu, 15 Nov 2018 14:00:08 GMT
Server: lighttpd/1.4.45


--- Additional Info ---
Magic:  ASCII C program text, with very long lines
Size:   38397
Md5:    515acfbfe368ef349527b328d8ba34c0
Sha1:   794d3cb281b52d9db6ba079fb810e5b894d542f8
Sha256: 9dde93596363d6047e86aef62603e43da95718cae1d9f03ac952552c38ab9fb6
                                        
                                            GET /adspace/3532461.js HTTP/1.1 
Host: adspaces.ero-advertising.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         185.70.212.109
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:08 GMT
Transfer-Encoding: chunked
Connection: close
Expires: Tue, 03 Jul 2001 06:00:00 GMT
Last-Modified: Thu, 15 Nov 2018 14:00:08 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0,post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="NOI DSP COR TAIa SAMa NOR"
Set-Cookie: uvid=82ee970d8d96f80b67fff83d5faeaba4; expires=Fri, 15-Nov-2019 14:00:08 GMT; Max-Age=31536000; path=/; domain=.ero-advertising.com uvid=82ee970d8d96f80b67fff83d5faeaba4; expires=Fri, 15-Nov-2019 14:00:08 GMT; Max-Age=31536000; path=/; domain=.eroadvertising.com
X-Backend-Server: nl1-web213-34


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   1592
Md5:    a1476d5ecc1d9ec28c194e29929f87ec
Sha1:   cc571dd1c634e6bf6b4b7100207bd8ce23248ddd
Sha256: c3b306bca28ee79afa5ae4adbf5fa349999306c32b1ebf2b0bd566a381803b08
                                        
                                            GET /banner1.jpg HTTP/1.1 
Host: erotica69.us.to
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         46.252.206.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 15 Nov 2018 14:00:08 GMT
Server: Apache
Last-Modified: Mon, 02 Mar 2015 20:45:45 GMT
Etag: "4bf5-510544d6e85ff"
Accept-Ranges: bytes
Content-Length: 19445
Cache-Control: max-age=5184000
Expires: Mon, 14 Jan 2019 14:00:08 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   19445
Md5:    78ba5f1e3fcdd5f14f3c551750060c25
Sha1:   c24f8e06633c03734fc58662dff043b055f14b7e
Sha256: f44501a1f8ac9bfabd0827b7da77311434e9b5aa36206c76d147149da33b5351
                                        
                                            GET /button.php?u=arabxxxx HTTP/1.1 
Host: xfap.eu
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         104.31.81.118
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 15 Nov 2018 14:00:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d1fdc251f9410004aaa6ff7d1cfbb7bf61542290408; expires=Fri, 15-Nov-19 14:00:08 GMT; path=/; domain=.xfap.eu; HttpOnly
Location: http://xfap.eu/images/button.gif
Server: cloudflare
CF-RAY: 47a23e0ac7c1428b-OSL


--- Additional Info ---
                                        
                                            GET /images/button.gif HTTP/1.1 
Host: xfap.eu
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/
Cookie: __cfduid=d1fdc251f9410004aaa6ff7d1cfbb7bf61542290408

                                         
                                         104.31.81.118
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 15 Nov 2018 14:00:08 GMT
Content-Length: 22193
Connection: keep-alive
Last-Modified: Thu, 16 Jun 2016 09:38:57 GMT
CF-Cache-Status: HIT
Expires: Thu, 15 Nov 2018 18:00:08 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 47a23e0b27d6428b-OSL


--- Additional Info ---
Magic:  GIF image data, version 89a, 88 x 31
Size:   22193
Md5:    892504ef9303c2507653458942a4710e
Sha1:   77fc6db50d5f4be3dbc3ff79f5b4b8e8c966d238
Sha256: 23e8b73f8c3af64d190a6c1c28d991d57cb89d9770bbebacd2ae78e46c535afd
                                        
                                            GET /d/?resource=pubJS HTTP/1.1 
Host: d.smopy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         23.235.244.227
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Etag: W/"76ae-cd1aw2ftTIw4PNJk2IPbhm/gTKE"
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9720
Md5:    1374560dd21810f5da83ab03364e4c6c
Sha1:   6dba6613c0f704e463d107e8295b67832c63dc51
Sha256: c5ccb7166858a3f81fd69e77e5a74714f2cd8cde1503b841efa1520d2adc8554
                                        
                                            GET /banner1.jpg HTTP/1.1 
Host: xtremeteens.uk.to
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         188.121.47.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 15 Nov 2018 14:00:08 GMT
Server: Apache
Last-Modified: Sun, 22 Mar 2015 00:32:43 GMT
Etag: "4b2b-511d5b0131e47"
Accept-Ranges: bytes
Content-Length: 19243
Cache-Control: max-age=5184000
Expires: Mon, 14 Jan 2019 14:00:08 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   19243
Md5:    b5098a13df314e236cc2ce2bb9d35008
Sha1:   46f4f24bb900309113dd9597613af904f1e624e7
Sha256: 478abb91a09316000b019f92eebc4904ab34dc3e09b9306724aa3816e971ff6b
                                        
                                            GET /k9hc8nnfj/Tr_Ad_E.gif HTTP/1.1 
Host: s19.postimg.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200
Content-Type: image/gif
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:32 GMT
Content-Length: 2591
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2017 18:21:54 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 120 x 30
Size:   2591
Md5:    f3012de4a0c36c07d54207d6fbb8b076
Sha1:   86743143a7c077426b507b2fc0f8fd77d9fc7658
Sha256: 10572a8382645d6172b8db531b31262226620302d0ccdfb2f8e56b9bdbe8642d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=90858
Date: Thu, 15 Nov 2018 14:00:08 GMT
Etag: "5bec25bd-1d7"
Expires: Fri, 16 Nov 2018 15:14:26 GMT
Last-Modified: Wed, 14 Nov 2018 13:40:13 GMT
Server: ECS (ams/D03C)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    3e25d8591cb84a4cbca7405c733d690d
Sha1:   ec357c89c5b49945dbfa25aa209a44f5d5a883b5
Sha256: f38858301854cdf4b6aafb18a3080ae3728abd8123d4fa911fdade36c6881c84
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=161113
Date: Thu, 15 Nov 2018 14:00:08 GMT
Etag: "5bed30e7-1d7"
Expires: Sat, 17 Nov 2018 10:45:21 GMT
Last-Modified: Thu, 15 Nov 2018 08:40:07 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    0c71198f8914e46468068688a9d118a2
Sha1:   cb61f2b9ac29388a81b1349581b3684625e08148
Sha256: ce6922ada4d3f8b2c89e64c5ae22861e22818e5bfbf53dd5d230c9453efd706c
                                        
                                            GET /ats/button.php?u=forbzone HTTP/1.1 
Host: amateursbf.skn1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         198.27.106.32
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:08 GMT
Content-Length: 0
Connection: keep-alive
Location: http://amateursbf.skn1.com/ats/images/102.png
Strict-Transport-Security: “max-age=31536000″
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: BYPASS
X-Server-Powered-By: Engintron


--- Additional Info ---
                                        
                                            GET /banner1.jpg HTTP/1.1 
Host: privateteens.us.to
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         46.252.206.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 15 Nov 2018 14:00:08 GMT
Server: Apache
Last-Modified: Sat, 11 Oct 2014 00:46:04 GMT
Etag: "5913-5051afd8eb6da"
Accept-Ranges: bytes
Content-Length: 22803
Cache-Control: max-age=5184000
Expires: Mon, 14 Jan 2019 14:00:08 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   22803
Md5:    8863a8c8e15dca5ac6c7bd22257432b1
Sha1:   93b260d4131321972fc13d6c5bc9117c5cc6cd6c
Sha256: 3c9d875264daa3de344e7c688f1f85136065c5298fd769dcc9ad385af5ff2d6e
                                        
                                            GET /xtgem_template.css?v=1517057580 HTTP/1.1 
Host: arab-xxx.sextgem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/
Cookie: _xta_uid=0368c87b35de3a87b03aeaef070f5b04; _xta_vid=60112446eee5f3220799a722e4a13951-1542290407

                                         
                                         54.36.158.41
HTTP/1.1 200 OK
Content-Type: text/css;charset=UTF-8
                                        
Date: Thu, 15 Nov 2018 14:00:07 GMT
Vary: Host,Accept-Encoding
Content-Encoding: gzip
Content-Length: 4146
Age: 0
X-Cache: MISS
X-Cache-Hits: 0
Accept-Ranges: bytes
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4146
Md5:    82b9deb2ada9015d2c24c74af5a4bbd0
Sha1:   a3badbcb3800a18b4f08d46cd8becf996470f78b
Sha256: 83326ff3631c3e178030ee21444ae594de8cc1df1392e9a2f18e122d1c6f0d7c
                                        
                                            GET /images/1w_15.jpg HTTP/1.1 
Host: kingpass.se
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         78.108.178.39
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.14.0
Date: Thu, 15 Nov 2018 14:00:08 GMT
Content-Length: 66766
Last-Modified: Wed, 13 Sep 2017 09:36:36 GMT
Connection: keep-alive
Etag: "59b8fc24-104ce"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   66766
Md5:    3ad6cead5badd2f91418471beacd0aa9
Sha1:   761af9a5c100a175142907e87ba19744a0602ac1
Sha256: 708beae9e523397df013266f2196fd337ab5d117aec9c77caef8bfe4e4e812b0
                                        
                                            GET /ats/images/102.png HTTP/1.1 
Host: amateursbf.skn1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         198.27.106.32
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:08 GMT
Content-Length: 3607
Connection: keep-alive
Last-Modified: Fri, 09 Jun 2017 20:16:37 GMT
Strict-Transport-Security: “max-age=31536000″
Expires: Mon, 14 Jan 2019 14:00:08 GMT
Cache-Control: max-age=5184000
Pragma: public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 88 x 31, 8-bit/color RGB, non-interlaced
Size:   3607
Md5:    aed656dabcf266f9bb1f0bb312e18201
Sha1:   0101d66ebd917a524dd4bb6bca43d5b9a4d327bb
Sha256: df5924a3b50c280015237a4e220e2e0c673b5d0d5a7043af2bf473bdac90e80f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "2E93BD8EC5FD3EF0BCB5AED8AF40EC0567FD302D8B7C613855C18698F0836BC0"
Last-Modified: Tue, 13 Nov 2018 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=24007
Expires: Thu, 15 Nov 2018 20:40:16 GMT
Date: Thu, 15 Nov 2018 14:00:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    ce89b6ff83030639c84b1c71a4518a7f
Sha1:   55ce7838ea3c2f6f20f5f617df3849d5aadb6e6d
Sha256: 2e93bd8ec5fd3ef0bcb5aed8af40ec0567fd302d8b7c613855c18698f0836bc0
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.113
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Transfer-Encoding: Binary
Last-Modified: Mon, 12 Nov 2018 10:01:15 GMT
Etag: "5792910dc567b2604b37cdaf986e0fea143a35b3"
Content-Length: 1396
Cache-Control: public, no-transform, must-revalidate, max-age=24772
Expires: Thu, 15 Nov 2018 20:53:01 GMT
Date: Thu, 15 Nov 2018 14:00:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1396
Md5:    122ff800ab303b831b663950e25f8dac
Sha1:   5792910dc567b2604b37cdaf986e0fea143a35b3
Sha256: 6b87eafda8998043b8dfef8dd720fd39af0873a0dc0d6143e8f09cc384847f2e
                                        
                                            GET /nativeads.js HTTP/1.1 
Host: ads.exosrv.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         68.232.35.133
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Encoding: gzip
Accept-Ranges: bytes
Cache-Control: max-age=10800
Date: Thu, 15 Nov 2018 14:00:09 GMT
Etag: "5be947ab-7eab"
Expires: Thu, 15 Nov 2018 17:00:09 GMT
Last-Modified: Mon, 12 Nov 2018 09:28:11 GMT
Server: ECS (ska/F705)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 10121


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   10121
Md5:    5b5732be5f211fe6a0357798f18415ff
Sha1:   cf0cbe64b9c4a01b316273f1df4f2097ef85a390
Sha256: 205aa2035de4a5d89a5ae31a85676b08e8a793b66af208c0a6fc82d5a5cd7d8c
                                        
                                            GET /images/influenza/smart/influenza-23.jpg HTTP/1.1 
Host: xtgem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         178.33.123.218
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 15 Nov 2018 13:17:03 GMT
Last-Modified: Mon, 11 Dec 2017 13:05:49 GMT
Etag: "14bd-5601031744540"
Content-Length: 5309
Cache-Control: max-age=2592000
Expires: Sat, 15 Dec 2018 13:17:03 GMT
X-Ngz: 1
Age: 2585
X-Cache: HIT
X-Cache-Hits: 351
Accept-Ranges: bytes
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   5309
Md5:    1a1b2c6dd9c5ef0fc597280fef7b2c4c
Sha1:   81d76e0aa5db8ffecfae660551736a507ab91a21
Sha256: b1da8870358753cd41bfdefede665c9114f4dba42a403d986905359095794ebd
                                        
                                            GET /js/page_templates_simple.js HTTP/1.1 
Host: sextgem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/
Cookie: _xta_uid=0368c87b35de3a87b03aeaef070f5b04; _xta_vid=60112446eee5f3220799a722e4a13951-1542290407

                                         
                                         54.36.158.42
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 15 Nov 2018 13:02:59 GMT
Last-Modified: Mon, 11 Dec 2017 13:05:49 GMT
Etag: "3d6-5601031744540-gzip"
Cache-Control: max-age=2592000
Expires: Sat, 15 Dec 2018 13:02:59 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 409
Age: 3429
X-Cache: HIT
X-Cache-Hits: 1024
Accept-Ranges: bytes
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   409
Md5:    1fae56719084488a72b247715b146359
Sha1:   eaca9c07fdd8704c3023587f1c8b798e9a4fc548
Sha256: 47049e15ed49186d2daa0bbbf71bd474166dc0a84380f7afd8886344b9c094e4
                                        
                                            GET /apu.php?zoneid=1255387 HTTP/1.1 
Host: aoredi.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         109.206.164.148
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:09 GMT
Last-Modified: Tue, 23 Oct 2018 11:55:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5bcf0c1d-d6a1"
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   54821
Md5:    a1b464b9f7e9a9f0d29bc0fb20e5daac
Sha1:   e18df4d58162a3aa39594122dca9ce0828e3ac07
Sha256: 35ca34aeb9d19d7feb283b0bc8066d380bafb331c0bda9a9522a61bbe48bf44a
                                        
                                            GET /quant.js HTTP/1.1 
Host: edge.quantserve.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         35.156.2.6
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Cache-Control: private, no-transform, must-revalidate, max-age=604800
Content-Encoding: gzip
Date: Thu, 15 Nov 2018 14:00:09 GMT
Etag: M0-e2b9884a
Expires: Thu, 22 Nov 2018 14:00:09 GMT
Last-Modified: Thu, 15-Nov-2018 14:00:09 GMT
Server: QS
Vary: Accept-Encoding
Content-Length: 5456
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5456
Md5:    ea55b8aade97737bdb3ac34239afe3e9
Sha1:   5bd3746efdffacbe0a0415d8760167834bb181ee
Sha256: d98cf4549e148788618a1ba008dc66d210d0063608b7c0acdfceb11430dd1579
                                        
                                            GET /tp.gif HTTP/1.1 
Host: enif.images.xtstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         178.33.123.218
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 15 Nov 2018 14:00:07 GMT
Last-Modified: Mon, 11 Dec 2017 13:05:49 GMT
Etag: "2a-5601031744540"
Content-Length: 42
Cache-Control: max-age=2592000
Expires: Sat, 15 Dec 2018 14:00:07 GMT
Age: 1
X-Cache: HIT
X-Cache-Hits: 3
Accept-Ranges: bytes
Connection: close


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /tp.gif HTTP/1.1 
Host: cif.images.xtstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         178.33.123.218
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 15 Nov 2018 14:00:07 GMT
Last-Modified: Mon, 11 Dec 2017 13:05:49 GMT
Etag: "2a-5601031744540"
Content-Length: 42
Cache-Control: max-age=2592000
Expires: Sat, 15 Dec 2018 14:00:07 GMT
Age: 1
X-Cache: HIT
X-Cache-Hits: 3
Accept-Ranges: bytes
Connection: close


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 08 Nov 2018 19:37:23 GMT
Etag: 53D24042159D308424AD1F74094BA1DA2F41F28E
X-OCSP-Responder-ID: rmdccaocsp17
Content-Length: 279
Cache-Control: public, no-transform, must-revalidate, max-age=19593
Expires: Thu, 15 Nov 2018 19:26:42 GMT
Date: Thu, 15 Nov 2018 14:00:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   279
Md5:    f68cd41bca118c23e05983d0b3fc024c
Sha1:   53d24042159d308424ad1f74094ba1da2f41f28e
Sha256: 1ca096055056e90f3f737720e09c2a6ec09375ba95c28cf73f6374dd38cb8bf5
                                        
                                            GET /linkbanners/pinupgirlstop100-88x31.gif HTTP/1.1 
Host: www.pinupgirlstop100.bigtopsites.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         138.128.184.76
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: public, max-age=604800
Expires: Thu, 22 Nov 2018 14:00:07 GMT
Last-Modified: Sat, 11 Aug 2018 02:51:09 GMT
Content-Length: 4078
Date: Thu, 15 Nov 2018 14:00:07 GMT
Server: LiteSpeed
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 88 x 31
Size:   4078
Md5:    8ed0a0c06546ed2f452535c58ee981f4
Sha1:   53a6d15b5faa6b0296a285a4cbc712ab226794d0
Sha256: 05d4bd21e66f9cbb5fc08e14eda4f5c90aaa2ce2bd9e633f64e10e99a78adc84
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 08 Nov 2018 21:27:34 GMT
Etag: 23FAA79BA8CB4A834A724300E09ABA40E860E4B4
X-OCSP-Responder-ID: rmdccaocsp15
Content-Length: 313
Cache-Control: public, no-transform, must-revalidate, max-age=26185
Expires: Thu, 15 Nov 2018 21:16:34 GMT
Date: Thu, 15 Nov 2018 14:00:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   313
Md5:    b4ec617b55a9097257a931965007e7a8
Sha1:   23faa79ba8cb4a834a724300e09aba40e860e4b4
Sha256: a34cf5d329969d27f77f23d243db20e769e45e28bd25da6e76f60db13f004ef7
                                        
                                            GET /regae.asp?site=teenies&account=37813449&ban=D HTTP/1.1 
Host: www.topsiteguide.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         205.144.171.22
HTTP/1.1 302 Object moved
Content-Type: text/html
                                        
Cache-Control: no-cache,private
Location: http://su-sitio.com/top/teeniesD.png
Server: Microsoft-IIS/8.5
Set-Cookie: ASPSESSIONIDCSRBQTDQ=JJAHPPKCJBCGNGPGIKFAJHDJ; path=/
X-Powered-By: ASP.NET
Date: Thu, 15 Nov 2018 14:00:08 GMT
Content-Length: 157


--- Additional Info ---
Magic:  HTML document text
Size:   157
Md5:    65bb80b2bcd5698f99befc59c7d11db2
Sha1:   0ba501c5e62fb7cbeb64c188855d9b6279671c6a
Sha256: 6e4b6488bb7badb37421075ebc9cbd9fdd2a5fa42946e15f49b7ef5aebc9b671
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "90ADF5248A49345D3EEE4CE1CE5AB99F2C9802B2301DE404D2388ABC02D5CBDD"
Last-Modified: Wed, 14 Nov 2018 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=29534
Expires: Thu, 15 Nov 2018 22:12:23 GMT
Date: Thu, 15 Nov 2018 14:00:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    dc3054ab8f85da45388628eaf3ee1f91
Sha1:   cb2f9010a1017d263b0b53d750e5b760be55fd8c
Sha256: 90adf5248a49345d3eee4ce1ce5ab99f2c9802b2301de404d2388abc02d5cbdd
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "B234484096620EBA6FDB6D1F086C9933DFB58A74094B3574CA49F2E2095EB334"
Last-Modified: Tue, 13 Nov 2018 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=39273
Expires: Fri, 16 Nov 2018 00:54:42 GMT
Date: Thu, 15 Nov 2018 14:00:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    0bf29ad1bc12aa5c08c02fda36359bee
Sha1:   ead4a591f1334e65411fa1262a6980c3b59501eb
Sha256: b234484096620eba6fdb6d1f086c9933dfb58a74094b3574ca49f2e2095eb334
                                        
                                            GET /splash.php?idzone=3080606 HTTP/1.1 
Host: syndication.exosrv.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%225bed7be95b1ca6.79493974797777748%22%3B%7D; expires=Sat, 14-Nov-2020 14:00:09 GMT; Max-Age=63072000; domain=exosrv.com impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27pe%B3%5C%0F%13%22V%0B%15%96%F6%11%D1%DD%93%FA%EDg%60%E6%C1%F3%8C%7C%09%5BB%A3%8D%F3L%7C%E5%0A%98%A4dp%C2%E8%5E-%B2%C4W%1B%D2%DA%2AR%B6%F6%8Ea%F6%B9%FCn%D82%04%9F%92%ACc%3F%ECq%3B%E2%1AN%F8%CE%90H%81%BB%EF%07%89%3F%23%CD; expires=Fri, 16-Nov-2018 14:00:09 GMT; Max-Age=86400; path=/; domain=.exosrv.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3082
Md5:    ba63353a86a0c2fed4e683e175692662
Sha1:   2c22485bedaa7dca9eb38ca4bd98fe093ca38fc2
Sha256: a29d37727a544f9139b631e7623c45bf2c6e787ee4615cbcb774a4262a9e33b9
                                        
                                            GET /SJs4Qcdk/Za0001.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:33 GMT
Content-Length: 4295
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4295
Md5:    6faf811eee1249bb1e8eefb27c8f4c1d
Sha1:   bab3f8c295bca21120b2f84e10252a80d66c6fcc
Sha256: b376efdfc495331cb3fdf383cd1e97ca365e0ab349beab9747e14d1c0123a5e0
                                        
                                            GET /button.php?u=arabxxxx HTTP/1.1 
Host: teenlist.top
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         104.24.124.40
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 15 Nov 2018 14:00:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=dfb1cddd1788c05eb50d9167b90344b061542290409; expires=Fri, 15-Nov-19 14:00:09 GMT; path=/; domain=.teenlist.top; HttpOnly
Location: https://teenlist.top/images/button.png
Strict-Transport-Security: max-age=31536000
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 47a23e1278733cf5-CPH


--- Additional Info ---
                                        
                                            GET /xcbsPCTL/Za0032.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:33 GMT
Content-Length: 3341
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3341
Md5:    49886fcdf6a72bfe18fb8ecae59fff09
Sha1:   68d4860d2ad4501b334c0fb484eeeb4a957304d7
Sha256: 42b09bdb18eb95b503f969911af4bb807aff01b604d87b452692eb1f8c8977cc
                                        
                                            GET /ads-priv.php?i=1 HTTP/1.1 
Host: syndication.exosrv.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%225bed7be95b1ca6.79493974797777748%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27pe%B3%5C%0F%13%22V%0B%15%96%F6%11%D1%DD%93%FA%EDg%60%E6%C1%F3%8C%7C%09%5BB%A3%8D%F3L%7C%E5%0A%98%A4dp%C2%E8%5E-%B2%C4W%1B%D2%DA%2AR%B6%F6%8Ea%F6%B9%FCn%D82%04%9F%92%ACc%3F%ECq%3B%E2%1AN%F8%CE%90H%81%BB%EF%07%89%3F%23%CD

                                         
                                         95.211.229.246
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: exo-splash-i=1; expires=Fri, 15-Nov-2019 14:00:09 GMT; Max-Age=31536000; path=/; domain=exosrv.com
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            GET /images/close-icon-circle.png HTTP/1.1 
Host: static.exosrv.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%225bed7be95b1ca6.79493974797777748%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27pe%B3%5C%0F%13%22V%0B%15%96%F6%11%D1%DD%93%FA%EDg%60%E6%C1%F3%8C%7C%09%5BB%A3%8D%F3L%7C%E5%0A%98%A4dp%C2%E8%5E-%B2%C4W%1B%D2%DA%2AR%B6%F6%8Ea%F6%B9%FCn%D82%04%9F%92%ACc%3F%ECq%3B%E2%1AN%F8%CE%90H%81%BB%EF%07%89%3F%23%CD

                                         
                                         68.232.35.133
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Date: Thu, 15 Nov 2018 14:00:09 GMT
Etag: "5aba1fbe-195"
Expires: Fri, 15 Nov 2019 14:00:09 GMT
Last-Modified: Tue, 27 Mar 2018 10:41:02 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 405


--- Additional Info ---
Magic:  PNG image, 24 x 24, 8-bit/color RGBA, non-interlaced
Size:   405
Md5:    bc8bf5d1633e548e9a178bf29be30b7b
Sha1:   bd290b6eabd73d2c95db053620797503e9178484
Sha256: 94f575abdb5c45476f9c2b62bbe06fbfacce9d25e95796ffcd07680bd7c6c0bb
                                        
                                            GET /4YkW2gmq/Za0033.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:33 GMT
Content-Length: 4754
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4754
Md5:    c41c923ce74d4aca5ce7556f8e56153e
Sha1:   5c734ddacb1154739951a10ecaa49a7052429a14
Sha256: 28d00bba645bf2df7d5da30960fb488bbb6e4078678830783d663429d93d1f00
                                        
                                            GET /qzzfH4B7/Za0015.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:33 GMT
Content-Length: 4199
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4199
Md5:    6fe225057f26f00bea841a0941ff26c5
Sha1:   81e5bf964f954d705c61ab0fcff3603d4db4530f
Sha256: b3b3b99e98887e85660f6d59e1206fb25be782b69a70a89550a049a596903efb
                                        
                                            GET /ats/button.php?u=forbzone HTTP/1.1 
Host: amateursbf.skn1.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         198.27.106.32
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:09 GMT
Content-Length: 0
Connection: keep-alive
Location: http://amateursbf.skn1.com/ats/images/102.png
Strict-Transport-Security: “max-age=31536000″
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: BYPASS
X-Server-Powered-By: Engintron


--- Additional Info ---
                                        
                                            GET /button.php?u=arabxxxx HTTP/1.1 
Host: xfap.eu
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/
Cookie: __cfduid=d1fdc251f9410004aaa6ff7d1cfbb7bf61542290408

                                         
                                         104.31.81.118
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 15 Nov 2018 14:00:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://xfap.eu/images/button.gif
Server: cloudflare
CF-RAY: 47a23e1433f84273-OSL


--- Additional Info ---
                                        
                                            GET /js15_as.js HTTP/1.1 
Host: s10.histats.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         46.105.201.240
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Thu, 15 Nov 2018 13:55:29 GMT
Etag: "1262556565"
Last-Modified: Mon, 12 Jun 2017 15:26:33 GMT
Content-Length: 4243
Content-Encoding: gzip
Vary: Accept-Encoding
X-CDN-Pop: sbg
X-CDN-Pop-IP: 137.74.120.32/27
X-Cacheable: Matched cache
Accept-Ranges: bytes
X-IPLB-Instance: 4760


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   4243
Md5:    56bb73fb348426e693c0eaa9dd2abbc0
Sha1:   1ffbf180a67c8ed35ece4a432d9d6dacd16961f5
Sha256: f4f7ac364c5b2b15a517942786044905da98388284ddfb1302bf76bbf407b8a5
                                        
                                            GET /regae.asp?site=teenies&account=37813449&ban=D HTTP/1.1 
Host: www.topsiteguide.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/
Cookie: ASPSESSIONIDCSRBQTDQ=JJAHPPKCJBCGNGPGIKFAJHDJ

                                         
                                         205.144.171.22
HTTP/1.1 302 Object moved
Content-Type: text/html
                                        
Cache-Control: no-cache,private
Location: http://su-sitio.com/top/teeniesD.png
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Thu, 15 Nov 2018 14:00:08 GMT
Content-Length: 157


--- Additional Info ---
Magic:  HTML document text
Size:   157
Md5:    65bb80b2bcd5698f99befc59c7d11db2
Sha1:   0ba501c5e62fb7cbeb64c188855d9b6279671c6a
Sha256: 6e4b6488bb7badb37421075ebc9cbd9fdd2a5fa42946e15f49b7ef5aebc9b671
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "35FF82EDA58A44D97C04BF37F7CE530F3788CF7B420B6E71E5F313141FC01493"
Last-Modified: Tue, 13 Nov 2018 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=43200
Expires: Fri, 16 Nov 2018 02:00:09 GMT
Date: Thu, 15 Nov 2018 14:00:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    1a5bd8b37c58c63ecd8d13265e19d19a
Sha1:   f1fea75d7696e45e43cee7602aad9f9130a80276
Sha256: 35ff82eda58a44d97c04bf37f7ce530f3788cf7b420b6e71e5f313141fc01493
                                        
                                            GET /GTmW21kq/Za0012.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:33 GMT
Content-Length: 4393
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4393
Md5:    cd7b53a96bb93dda9cc003537407ce3b
Sha1:   b59a126e6f7113eca228ec5d1225e0e22920aa09
Sha256: 798d80282b4fffbab6e16d7833f14eb0703655a63a83f5c738ddfce6885e0706
                                        
                                            GET /7061zgbdv/13556.gif HTTP/1.1 
Host: s19.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200
Content-Type: image/gif
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:33 GMT
Content-Length: 43458
Connection: keep-alive
Last-Modified: Wed, 20 Nov 2013 21:19:56 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 468 x 60
Size:   43458
Md5:    a2e44260e77f266e26e0b1b636394cf3
Sha1:   2007746488c211376bbe62ebc2d3efd34ee76c6d
Sha256: d3620b34f1181b9370c35e47be84c8b60d0bada2087faf1ac3def284b93aea4d
                                        
                                            GET /stats/3760209.php?3760209&@f16&@g1&@h1&@i1&@j1542290409686&@k0&@l1&@mNUBILE%20MOBILE%20TOP%2050%20-%20Shocking%20OMG%20!!%20Beautiful%20bodies!!%20Perverted%20Girls%20in%20HQ%20Movies!!&@n0&@o1000&@q0&@r0&@s237&@ten-US&@u1176&@vhttp%3A%2F%2Farab-xxx.sextgem.com%2F&@w HTTP/1.1 
Host: s4.histats.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         208.43.241.181
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Date: Thu, 15 Nov 2018 14:00:09 GMT
Content-Length: 101
Connection: close
Set-Cookie: CountUid=28a75741-50pq-410a-8a37-264bfd781dbf; domain=.histats.com; Max-Age=31536000; Expires=Fri, 15-Nov-2019 14:00:09 GMT


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   101
Md5:    34f1f37ed7299956265433b5792c8b7a
Sha1:   a1176ef5946676ba0013a1838cd7510e46ca68de
Sha256: e30d38961194b9a8c1b1fee1a92735e58559fffc16e3b28d56de958728bb36e8
                                        
                                            GET /JDnxH72D/Za0036.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 3523
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3523
Md5:    97be5e0d9f90165f07f0ca970b6f29c7
Sha1:   f6527d7ba6c5cf0316e5f59629bcd414cfc66403
Sha256: a1b86b3b1d2d585ebf30c9d4adcc2e0651cd404f128760065155130d0d98ccb0
                                        
                                            GET /library/192180/94ebaccbf7ab44977014e486e709ae0b7bb1c6fc.gif HTTP/1.1 
Host: static.exosrv.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/
Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%225bed7be95b1ca6.79493974797777748%22%3B%7D; impressions=x%9Cm%8CQ%0A%80+%10%05%EF%B2%27pe%B3%5C%0F%13%22V%0B%15%96%F6%11%D1%DD%93%FA%EDg%60%E6%C1%F3%8C%7C%09%5BB%A3%8D%F3L%7C%E5%0A%98%A4dp%C2%E8%5E-%B2%C4W%1B%D2%DA%2AR%B6%F6%8Ea%F6%B9%FCn%D82%04%9F%92%ACc%3F%ECq%3B%E2%1AN%F8%CE%90H%81%BB%EF%07%89%3F%23%CD

                                         
                                         68.232.35.133
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Date: Thu, 15 Nov 2018 14:00:09 GMT
Etag: "5aba577e-36b3"
Expires: Fri, 15 Nov 2019 14:00:09 GMT
Last-Modified: Tue, 27 Mar 2018 14:38:54 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 14003


--- Additional Info ---
Magic:  GIF image data, version 89a, 250 x 150
Size:   14003
Md5:    90340ebb55fafe785c8b635108a5aae3
Sha1:   94ebaccbf7ab44977014e486e709ae0b7bb1c6fc
Sha256: 888c68b4d59903ce60806c909f2fe16ac2167e47213bf8416ed143940301b71f
                                        
                                            GET /__xt_authbar?data=eyJ1cmwiOiJodHRwOlwvXC9hcmFiLXh4eC5zZXh0Z2VtLmNvbVwvaW5kZXgiLCJsb2dnZWRfaW4iOmZhbHNlLCJkb21haW4iOiJhcmFiLXh4eC5zZXh0Z2VtLmNvbSIsInBvc2l0aW9uIjp7ImFic29sdXRlIjoiZml4ZWQifX0= HTTP/1.1 
Host: xtgem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         178.33.123.218
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 15 Nov 2018 14:00:09 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: session=d2~b2el9rg8squsggo5rbsc9r4f43; expires=Fri, 16-Nov-2018 14:00:09 GMT; Max-Age=86400; path=/; domain=.xtgem.com; httponly __template=web; expires=Sat, 15-Dec-2018 14:00:09 GMT; Max-Age=2592000; path=/ __lang=us; expires=Sat, 15-Dec-2018 14:00:09 GMT; Max-Age=2592000; path=/
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2773
Age: 0
X-Cache: MISS
X-Cache-Hits: 0
Accept-Ranges: bytes
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2773
Md5:    2460033ced342865e3171fffd63e6505
Sha1:   743dd27c3a7ca273e1c441b7a4dca0f1ed430ade
Sha256: deba2bea0caaf04f02d2049f4a1eed8ddb981f9fc425a881d2bfeaeb788ed1e5
                                        
                                            GET /counters/cc_237.js HTTP/1.1 
Host: s10.histats.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         46.105.201.240
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Thu, 15 Nov 2018 13:50:27 GMT
Etag: "1944585525"
Last-Modified: Mon, 12 Jun 2017 15:28:02 GMT
Content-Length: 6606
Content-Encoding: gzip
Vary: Accept-Encoding
X-CDN-Pop: sbg
X-CDN-Pop-IP: 137.74.120.0/27
X-Cacheable: Matched cache
Accept-Ranges: bytes
X-IPLB-Instance: 4746


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   6606
Md5:    ae45441ce4ccc4b85f594e7b8d168fef
Sha1:   6d7acc6f615b8944f9a128dd304ba725527e8910
Sha256: 57669b23916aad76b45482bc34440c95586f2cf49783413bad86b4f5ea6c9f53
                                        
                                            GET /N9z46h3N/Za0037.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 6815
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   6815
Md5:    53ba8b4438473d3b402dc5eab0ae1a03
Sha1:   d8c035a5faec66e95175c69f89d64170ad24d438
Sha256: f0450ad5a4f0a08135f09f0bd5bfd64491d6d0447a35b95455ef243bea4c1685
                                        
                                            GET /4qdcpu76r/arab_beauty_poundedin_her_buthole.jpg HTTP/1.1 
Host: s19.postimg.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:33 GMT
Content-Length: 133883
Connection: keep-alive
Last-Modified: Tue, 30 Jan 2018 16:31:08 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   133883
Md5:    2ae8af72a4ef87876139ec3a528b0cea
Sha1:   980c5d062d8745d8606e381b852939d379ce3c3e
Sha256: 161f583cc90768e8f0b470e6b6b663939e82fa40966f8b4638dd6ff6236d2f4a
                                        
                                            GET /5snj8e5fn/arab_girl_anal_and_creampie.jpg HTTP/1.1 
Host: s19.postimg.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:33 GMT
Content-Length: 146891
Connection: keep-alive
Last-Modified: Tue, 30 Jan 2018 16:31:08 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   146891
Md5:    646418c5e2079c030d7cc4de0792f015
Sha1:   c858e35740dd20693b20bcfdc52a31309cd304b4
Sha256: 3604a073110165f96904d51201a8447dc1c561306ce2c9b079564adfe9520256
                                        
                                            GET /Yjv8p9FT/Za0038.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 4342
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4342
Md5:    66aed7b43e3befb91b6a63c02b6a0539
Sha1:   6d88ef8cd344325b7afa7030bcbfd02cc5bbdbc0
Sha256: ed42bb308deaf998a19fa3fef8dc66cfb4156777a2c8ac5aaba5620d89a3fcba
                                        
                                            GET /B8yLNqv1/Za0063.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 4093
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "ACD Systems Digital Imaging\377"
Size:   4093
Md5:    0ed40ee1c509a3919d76223cd7b9b250
Sha1:   b5e3db5c224d2e4daf9c63284290980e84d28dc4
Sha256: d1ab1f9b5c346fdba9ce92f614dbbbf0ee3efa77eb8ee298035178f152601a05
                                        
                                            GET /in.php?s=10038&t=&b=&c=1&tm=71961.89094787206&r=&h=http%3A//arab-xxx.sextgem.com/ HTTP/1.1 
Host: s1.slimtrade.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         91.121.39.19
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Set-Cookie: stVisits=10038%2C1542376809; expires=Fri, 16-Nov-2018 14:00:10 GMT; Max-Age=86401
Content-Length: 75
Date: Thu, 15 Nov 2018 14:00:10 GMT
Server: lighttpd/1.4.45


--- Additional Info ---
Magic:  ASCII C++ program text
Size:   75
Md5:    888399f9a1ef92bee76703087fe10c70
Sha1:   5ea570353e855f9f855380057a39f3c7845c709b
Sha256: 30c74f73795a58fc8a349b730d3fc78bb0f7a23b82f8761ae7e17e2a0ed34928
                                        
                                            GET /FdLfB2fC/Za0064.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 4514
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4514
Md5:    a84bfbda17091fdead2912f00329222a
Sha1:   aea638eb0df0cbe9733b372a37324c32e24a9b80
Sha256: a930eb4db8f900297198ac31c4ae33f36d44aa69dd083c6f18f94de9bfadfabd
                                        
                                            GET /hl8ze23kz/88x31a22.jpg HTTP/1.1 
Host: s19.postimg.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 6900
Connection: keep-alive
Last-Modified: Sun, 26 Oct 2014 18:31:26 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   6900
Md5:    17af7d4b233afccb8e6c60d2080c35de
Sha1:   8f6b7c9c365bfde19f2306b16e0a26bb234bf470
Sha256: 6aec719fd8f20dcbde2537f633e16a04561859fda165955f09d7b65a94638004
                                        
                                            GET /in.php?nr=292 HTTP/1.1 
Host: jailbait.toplistcreator.eu
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         79.98.29.74
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:10 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=60
X-Powered-By: PHP/5.4.27
Set-Cookie: PHPSESSID=5aodjcbm9s0vg2lemjl01ga865; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Pragma: no-cache
Location: http://jailbait.toplistcreator.eu/index.html
X-XSS-Protection: 1; mode=block


--- Additional Info ---
                                        
                                            GET /tnG1Q2Wq/Za0065.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 4714
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4714
Md5:    3c9efeeaee0b3de1c2a5ab8943e7d9fd
Sha1:   163eb0b218e7833fe18060c7fe8d5f53cb4d0b47
Sha256: 8810337f627df4ffb062412fbde2a9337b8c1533e0e0e4ba227ecf34be15468a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "4ADAAD3CE8482740AE1B170F5F60192A060FDC420DADF147E5987527313598EB"
Last-Modified: Mon, 12 Nov 2018 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=25207
Expires: Thu, 15 Nov 2018 21:00:17 GMT
Date: Thu, 15 Nov 2018 14:00:10 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    a2d7850f9db6a9e46ca7a899624fb4e2
Sha1:   98aab20f12682012742b6572d27b22abe318f110
Sha256: 4adaad3ce8482740ae1b170f5f60192a060fdc420dadf147e5987527313598eb
                                        
                                            GET /N28Kgmk1/Za0066.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 4668
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4668
Md5:    27307eb29b6b82643526b572d7707817
Sha1:   77f3e0aeb2721f35002f578f16f7098801ecfdd2
Sha256: e673dcd7bb72bb32fb0e101b213b6dc0f269fe1968a3f3cc64e64e1c509e81d1
                                        
                                            GET /okzebyeoj/mouthfucked.jpg HTTP/1.1 
Host: s19.postimg.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 126707
Connection: keep-alive
Last-Modified: Tue, 30 Jan 2018 16:31:08 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   126707
Md5:    3024cf14d552e2d2b9f2b3f207cbd966
Sha1:   a32ade199d806facdd3ae8c76bb9e46e03d10dc2
Sha256: 4789595766a71e8d0f962bc537786363ae2978ec33b0e2ce7d80d74d7af7ce63
                                        
                                            GET /in.php?nr=14909 HTTP/1.1 
Host: teenystar18.toplistcreator.eu
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         79.98.29.74
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:10 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=60
X-Powered-By: PHP/5.4.27
Set-Cookie: PHPSESSID=nls6ok8tb0jtt5714bkgpisnn4; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Pragma: no-cache
Location: http://teenystar18.toplistcreator.eu/index.html
X-XSS-Protection: 1; mode=block


--- Additional Info ---
                                        
                                            GET /index.html HTTP/1.1 
Host: jailbait.toplistcreator.eu
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/
Cookie: PHPSESSID=5aodjcbm9s0vg2lemjl01ga865

                                         
                                         79.98.29.74
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
X-Powered-By: PHP/5.4.27
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   8293
Md5:    6de8b3039f587c402fb3c9244c256147
Sha1:   c2be71c45da9c3773fd9a2732d176c939029f1c2
Sha256: 9e8cf5f2dd76784b93baa5ffb3d1c6487a2d15c75e292afa77f8136a0a2bf2a2
                                        
                                            GET /in.php?nr=417 HTTP/1.1 
Host: toplisted.toplistcreator.eu
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         79.98.29.74
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:10 GMT
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=60
X-Powered-By: PHP/5.4.27
Set-Cookie: PHPSESSID=ef3s5hm074hse6r91dhmfqv934; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Pragma: no-cache
Location: http://toplisted.toplistcreator.eu/index.html
X-XSS-Protection: 1; mode=block


--- Additional Info ---
                                        
                                            GET /gr3Xqbbn/Za0067.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 4344
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4344
Md5:    2c95d84e71288bba28d273480a0d4876
Sha1:   ea43549de62f05e94c96782a04d6960796f44307
Sha256: bf194124956ff8ce7ddbd662b7692cfe472dd7d7a69bf968291b9cdba21546ff
                                        
                                            GET /vcM102GX/Za0068.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 5804
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   5804
Md5:    3e8a1d95bd5ca4866383cdbc44814135
Sha1:   697e4ad6368d0f32a186825c5d0c3eb7e04ef956
Sha256: 989ff524b4a77b28d5bc8ba118c82eeee3355282ebdda2bd7933abdd92081903
                                        
                                            GET /get/1255387?zoneid=1255387&jp=_clbapmo6q0w2b6u95h8pdt HTTP/1.1 
Host: aoredi.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         109.206.164.148
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   898
Md5:    bb647b7cf82a4d28e0b159ecec60298e
Sha1:   cb928fb72292fd9adad9b8ad462dad88fc517b1e
Sha256: e92513e30914611cae98b8cbda938134c6c38f293d08078690f7cabc83ae71cb
                                        
                                            GET /7CqmDn1N/Za0034.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 4426
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4426
Md5:    00f12e63d754dbeb7fa3603715f7dc72
Sha1:   9cd5c2498c78395aff290a39777d723a53d11667
Sha256: 11d91f6bdcd73a00090f3d4d3a72bea313ac10b745a3a94cd87a8171ca5c8075
                                        
                                            GET /button.php?u=arabxxxx HTTP/1.1 
Host: teenlist.top
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/
Cookie: __cfduid=dfb1cddd1788c05eb50d9167b90344b061542290409

                                         
                                         104.24.124.40
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 15 Nov 2018 14:00:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://teenlist.top/images/button.png
Strict-Transport-Security: max-age=31536000
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 47a23e19395e3ca7-CPH


--- Additional Info ---
                                        
                                            GET /TyQQP5Cv/Za0035.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 4734
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4734
Md5:    6fc9377e31c7d40063017e80c4cb79d0
Sha1:   f9f2cb094c5c3cb1f9a6de8c5912a4d6aad156e0
Sha256: 8a6415f2cc22d6b54acfec563c9b4966d44b1585a4a72cbe2fc55b8cdee4116e
                                        
                                            GET /VdRJp96w/Za0069.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 3418
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3418
Md5:    1bfb32fbc741576a55a33433b7df1cf3
Sha1:   4f1815e748011fd6d94baddc0bb90000ca2dd4e4
Sha256: 62b0cdf9cba73d88eb417610e32b7470cf16844a7c08fc03e7791e5614ffb17e
                                        
                                            GET /zeox1lww3/vladmodels.jpg HTTP/1.1 
Host: s19.postimg.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 90706
Connection: keep-alive
Last-Modified: Fri, 09 Feb 2018 19:42:14 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   90706
Md5:    141dfbea5f8c19771ee68ef58bdf46c6
Sha1:   dc0051d7c74ca4c08f3c971937833f97078810d6
Sha256: 35d5fd7aad177623c4256917501392ba270f2074d7aebb2c523ca1490fae14ba
                                        
                                            GET /btl85fx6r/arab_muslim_hijab_girl_fucked.jpg HTTP/1.1 
Host: s19.postimg.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 130653
Connection: keep-alive
Last-Modified: Tue, 30 Jan 2018 16:31:08 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   130653
Md5:    c1203685c30a46753f8bd0fb4264666d
Sha1:   90d6fc816ef3cf9b624d5887d63ebe340bfde8b2
Sha256: 31205bde8be22721a5ed520e10231cdc24802d82ee0ac4fc323679d33ba9a018
                                        
                                            GET /zLL3y9kD/Za0072.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 4752
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4752
Md5:    b3ab56c19d4fcfd8f8d6e6f568370566
Sha1:   d6e41f8f9a50405d5dd79e60f83372b349cb3c2c
Sha256: 5855e763c2a51cfe8fee1ae8704138a94957008623f1018f18404ea49e76e976
                                        
                                            GET /sMgMrBQh/Za0070.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 4929
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4929
Md5:    4bb88931683738ee73dc580ec271cc2b
Sha1:   77b33941edfd6729486c9cc429ee339031d41e81
Sha256: 2f22d97945409bd15da5bef02a4dae61092927d22a296a6601283c99e3d369ed
                                        
                                            GET /87XjP1Mn/Za0071.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 4872
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4872
Md5:    13e1f49907076a63f61bfe9072f39b43
Sha1:   fd4ca8d951a8ac0e8f2819cfc464088d92323a1b
Sha256: 6e540758d1bcb84157e2b94dd8b233c1cbde274cff4bf561b8737755bf8d55d0
                                        
                                            GET /kybaxextv/hussyfan.jpg HTTP/1.1 
Host: s19.postimg.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 93687
Connection: keep-alive
Last-Modified: Fri, 09 Feb 2018 22:03:46 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   93687
Md5:    e87dc67baef1b83d39cea0f102e0a27e
Sha1:   fadf97722e8801cce01bf1fe7dccf68b9e70a0f3
Sha256: b72c682313fcea0d6680bc181114f916c4aece1904ad05d8636c85f83e5906bb
                                        
                                            GET /jam_min.js HTTP/1.1 
Host: js.juicyads.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://jailbait.toplistcreator.eu/index.html

                                         
                                         151.139.236.208
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 15 Nov 2018 14:00:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 06 Jun 2016 18:41:27 GMT
Etag: W/"5755c3d7-5394"
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6760
Md5:    ea621279dc503aa46b3ce13d2d944387
Sha1:   b9c70caaa9b16e9121f943d63fa686127653a501
Sha256: f1c02f4b8abc58beb5f9fbbb7595c62a57b76316505ea8e21e0afb68a26daac5
                                        
                                            GET /index.html HTTP/1.1 
Host: teenystar18.toplistcreator.eu
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/
Cookie: PHPSESSID=nls6ok8tb0jtt5714bkgpisnn4

                                         
                                         79.98.29.74
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
X-Powered-By: PHP/5.4.27
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7599
Md5:    8c3f1925ad27ef6a04dc1e15e63967f4
Sha1:   1ae9400791431254ba8804e0231b32774f9b279e
Sha256: 9ba0d8e88842920e2c7a655a63bcf4b39128c746922502e0be0a999812f6ebd4
                                        
                                            GET /7bj9bkMh/Za0039.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 3845
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3845
Md5:    f33e6737f441ac6c4d822f6db9afe10f
Sha1:   18c065fa766e32d50fcaecbb0db08e3f2f77ad1b
Sha256: fb4d0c41a3040a11caa6199aea7bc1ef807d56e43f155aa13cea6ecd8224600e
                                        
                                            GET /index.html HTTP/1.1 
Host: toplisted.toplistcreator.eu
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/
Cookie: PHPSESSID=ef3s5hm074hse6r91dhmfqv934

                                         
                                         79.98.29.74
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
X-Powered-By: PHP/5.4.27
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7871
Md5:    1b75043f2c27393a61caae859d10d62b
Sha1:   004686137ce8baf0692146cfb689bcaf01291775
Sha256: c2d0d6d5a074f40a2ba1c5d634b0d7104deda397cde03d39343ff9d83b3b19a2

Alerts:
  IDS:
    - ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
    - ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
                                        
                                            GET /pkfwhbkqwanjp.php HTTP/1.1 
Host: jailbait.toplistcreator.eu
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://jailbait.toplistcreator.eu/index.html
Cookie: PHPSESSID=5aodjcbm9s0vg2lemjl01ga865

                                         
                                         79.98.29.74
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
X-Powered-By: PHP/5.4.27
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   8293
Md5:    6de8b3039f587c402fb3c9244c256147
Sha1:   c2be71c45da9c3773fd9a2732d176c939029f1c2
Sha256: 9e8cf5f2dd76784b93baa5ffb3d1c6487a2d15c75e292afa77f8136a0a2bf2a2
                                        
                                            GET /b3/8a/47/b38a4705d7d35dfba5d085337fa7c9b8.js HTTP/1.1 
Host: yim3eyv5.top
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://jailbait.toplistcreator.eu/index.html

                                         
                                         198.134.112.241
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.15.1
Date: Thu, 15 Nov 2018 13:59:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   13953
Md5:    c7c1b949ac6ce4da5435771ad80d4c82
Sha1:   5defdce91928c5df98f983a9147f6ae1fb99be83
Sha256: 52715371e7d48d0c34f6ede3339661ddb077065338b39b1011dae19c5b4b0a23
                                        
                                            GET /d/?resource=pubJS HTTP/1.1 
Host: d.smopy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://jailbait.toplistcreator.eu/index.html
If-None-Match: W/"76ae-cd1aw2ftTIw4PNJk2IPbhm/gTKE"

                                         
                                         23.235.244.227
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Etag: W/"76dc-HS3ZrNRmSS2d/CUvc5JrYFpPfQk"
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9760
Md5:    4a9a96e40ce4d89a3f16f33fb3217cf8
Sha1:   e8978800bbc2396f0c79c97dcde69db23797e25a
Sha256: 43642559397881335c26169377c54a026817c164306660f143459ae3a5327ee4
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "B41E134160D302ED02D29650BA82C5BE2F008B2C98F0F4A1843089088BD72A0F"
Last-Modified: Mon, 12 Nov 2018 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=27956
Expires: Thu, 15 Nov 2018 21:46:07 GMT
Date: Thu, 15 Nov 2018 14:00:11 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    9f429a3ffcfa327a5724713ffcfd296b
Sha1:   1add9747e558aec7c205c22ce70bbb9270246d3e
Sha256: b41e134160d302ed02d29650ba82c5be2f008b2c98f0f4a1843089088bd72a0f
                                        
                                            GET /s/oswald/v16/TK3iWkUHHAIjg752GT8A.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Oswald
Origin: http://arab-xxx.sextgem.com

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 18936
Date: Sun, 11 Nov 2018 23:40:37 GMT
Expires: Mon, 11 Nov 2019 23:40:37 GMT
Last-Modified: Tue, 07 Nov 2017 15:18:46 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 310774


--- Additional Info ---
Magic:  data
Size:   18936
Md5:    ca70f49a133f08485bd05d5cb28ef8b7
Sha1:   9029570f276ed6b7d2895ced7175f958fb6c1c5f
Sha256: a7a4038c6fbb19ba522819188aed0ff204d80e19223b1cab388a290a8d5e47fe
                                        
                                            GET /images/close2.png?v=0.01 HTTP/1.1 
Host: xtgem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/
Cookie: session=d2~b2el9rg8squsggo5rbsc9r4f43; __template=web; __lang=us

                                         
                                         178.33.123.218
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 15 Nov 2018 14:00:08 GMT
Last-Modified: Mon, 11 Dec 2017 13:05:49 GMT
Etag: "234-5601031744540"
Content-Length: 564
Cache-Control: max-age=2592000
Expires: Sat, 15 Dec 2018 14:00:08 GMT
X-Ngz: 1
Age: 3
X-Cache: HIT
X-Cache-Hits: 10
Accept-Ranges: bytes
Connection: close


--- Additional Info ---
Magic:  PNG image, 32 x 32, 8-bit colormap, non-interlaced
Size:   564
Md5:    865dce1b2a4002b9a85f75ea622f4000
Sha1:   f56c8218b5ca721a9e5a3daec742a6f38c33c075
Sha256: bc5dcb35fc074321d66b9d7809e286e4afe72c7b08d1e799672126c92150ecd3
                                        
                                            GET /kg6i6vkb7/nonude.jpg HTTP/1.1 
Host: s19.postimg.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 127446
Connection: keep-alive
Last-Modified: Fri, 09 Feb 2018 19:11:19 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   127446
Md5:    7e51a17e606691c071ce2edec260138d
Sha1:   29dbe423fe6c9cc88da2dce7ca6ba311f83fb8f8
Sha256: 6d0810107afeba4c7c76f40ce372ab7a0d02b335f4375e4eed238b30c5f33e15
                                        
                                            GET /images/button88x31.jpg HTTP/1.1 
Host: downloadsxxxmovie.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         190.174.191.35
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Mon, 11 Sep 2017 05:07:12 GMT
Accept-Ranges: bytes
Etag: "08087d3bb2ad31:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Thu, 15 Nov 2018 14:00:17 GMT
Content-Length: 1682


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   1682
Md5:    1c008b4818487cb92b836f4231cccf74
Sha1:   79070e6f13875140840aa15509f532063e939d4e
Sha256: c3d6fd68e08084d6ece41d20390f5bcd3b33973439e84c5c83bd4d39a7c92742
                                        
                                            GET /CzDNqQmN/Za0040.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 5385
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   5385
Md5:    c7ec6a6c27477160f90c6f06f03a1664
Sha1:   47e76cba92be2195d500a131c53ed4c3d75507f2
Sha256: 24d50b1574f2219b7023d44171632f921bb33294d4591d2b5efe30773cff1ddc
                                        
                                            GET /ArchangelR/PATRATE/ptv034.jpg HTTP/1.1 
Host: f.3ezy.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://teenystar18.toplistcreator.eu/index.html

                                         
                                         104.28.26.116
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 15 Nov 2018 14:00:11 GMT
Content-Length: 78157
Connection: keep-alive
Set-Cookie: __cfduid=d2dddc30fcec324ab6e713c8b6341b7231542290411; expires=Fri, 15-Nov-19 14:00:11 GMT; path=/; domain=.3ezy.net; HttpOnly
x-amz-id-2: 3dcxa9f0pY/FvicqgpK2N6UBuAawZDN5c6RP9tT+084HJZ6eL7RVTkrKyOx7Vq8/KrKT0mNN5m8=
x-amz-request-id: DF77F4327D58F6CD
Last-Modified: Mon, 09 Jul 2018 14:04:27 GMT
Etag: "f8e9c2062663935fc9ec966c4247f878"
CF-Cache-Status: HIT
Expires: Sun, 16 Dec 2018 14:00:11 GMT
Cache-Control: public, max-age=2678400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 47a23e1e84d7428b-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   78157
Md5:    f8e9c2062663935fc9ec966c4247f878
Sha1:   348a60b8f54d0fa143a5ed804dd3edafec2969c0
Sha256: 1079366fb499ca4aadfe8fcee401d173e7fe83f7bbd45191d82408dc85873617
                                        
                                            GET /ArchangelR/PATRATE/ptv019.jpg HTTP/1.1 
Host: f.3ezy.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://teenystar18.toplistcreator.eu/index.html

                                         
                                         104.28.26.116
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 15 Nov 2018 14:00:11 GMT
Content-Length: 97991
Connection: keep-alive
Set-Cookie: __cfduid=db2dd4c180f021db5768a7527073e610d1542290411; expires=Fri, 15-Nov-19 14:00:11 GMT; path=/; domain=.3ezy.net; HttpOnly
x-amz-id-2: CwRIO9OgFPH+Hpu7pvTSaxdRGJ4mD/dVuaIynBt5Ez4SzJXsFtNDU/icOU3QFqFm5t/usb873wM=
x-amz-request-id: A80DFB5DF915488F
Last-Modified: Thu, 10 May 2018 20:23:29 GMT
Etag: "d595f79e6a74dbbaf3dc57781525ab3d"
CF-Cache-Status: HIT
Expires: Sun, 16 Dec 2018 14:00:11 GMT
Cache-Control: public, max-age=2678400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 47a23e1e85db42a9-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   97991
Md5:    d595f79e6a74dbbaf3dc57781525ab3d
Sha1:   1ffb7e3465c3e2b046c1aa6099864d5be39a5e6e
Sha256: 81ac9a74d92f7b58bf72aeb968b3bd2b8d9b4223f0f8ddf75db33f651e1c0757
                                        
                                            GET /ArchangelR/90x30/HRGS003.jpg HTTP/1.1 
Host: f.3ezy.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://toplisted.toplistcreator.eu/index.html

                                         
                                         104.28.26.116
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 15 Nov 2018 14:00:11 GMT
Content-Length: 27024
Connection: keep-alive
Set-Cookie: __cfduid=d1d0ea8c9814fa51a5020e2d3c9f1a1a31542290411; expires=Fri, 15-Nov-19 14:00:11 GMT; path=/; domain=.3ezy.net; HttpOnly
x-amz-id-2: vz4ClhjPnkBfMlnY9buklzV9+vf7vhTRmyYcr44mNsgpdgaTJlclzNFHx2Gbf76l0W7M8H+PAcs=
x-amz-request-id: B9744FB2E0E07425
Last-Modified: Sun, 05 Aug 2018 11:42:19 GMT
Etag: "c8d109f0f792db9f2facfc8e3fea7edf"
CF-Cache-Status: HIT
Expires: Sun, 16 Dec 2018 14:00:11 GMT
Cache-Control: public, max-age=2678400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 47a23e1f24fb428b-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   27024
Md5:    c8d109f0f792db9f2facfc8e3fea7edf
Sha1:   1f76dbc13a6cdc7dce83d360dd2e4a818f5f8ae4
Sha256: 78092ffbf681100339053983567e9761b3079bf37bed3bd8ea57c019fe7de535
                                        
                                            GET /klguhczllzwwtgx.php HTTP/1.1 
Host: teenystar18.toplistcreator.eu
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://teenystar18.toplistcreator.eu/index.html
Cookie: PHPSESSID=nls6ok8tb0jtt5714bkgpisnn4

                                         
                                         79.98.29.74
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
X-Powered-By: PHP/5.4.27
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7599
Md5:    8c3f1925ad27ef6a04dc1e15e63967f4
Sha1:   1ae9400791431254ba8804e0231b32774f9b279e
Sha256: 9ba0d8e88842920e2c7a655a63bcf4b39128c746922502e0be0a999812f6ebd4
                                        
                                            GET /service_async.php/serveAd?JSON-response-callback=rpc.callbacks.r1&id=1&c=103654&s=220125 HTTP/1.1 
Host: mobile.juicyads.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://jailbait.toplistcreator.eu/index.html

                                         
                                         34.193.112.114
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:11 GMT
Content-Length: 154
Location: http://mobile.juicyads.com/service_async.php?JSON-response-callback=rpc.callbacks.r1&id=1&c=103654&s=220125
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            GET /0.gif?3901545&101 HTTP/1.1 
Host: sstatic1.histats.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://teenystar18.toplistcreator.eu/index.html

                                         
                                         208.43.241.178
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 15 Nov 2018 14:00:11 GMT
Content-Length: 43
Connection: close
Set-Cookie: CountUid=4bb84a80-56sq-4500-b308-36670d16719b; domain=.histats.com; Max-Age=31536000; Expires=Fri, 15-Nov-2019 14:00:11 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    07fff40b5dd495aca2ac4e1c3fbc60aa
Sha1:   e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
Sha256: a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
                                        
                                            GET /ArchangelR/90x30/hrgz012.jpg HTTP/1.1 
Host: f.3ezy.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://toplisted.toplistcreator.eu/index.html

                                         
                                         104.28.26.116
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 15 Nov 2018 14:00:11 GMT
Content-Length: 40882
Connection: keep-alive
Set-Cookie: __cfduid=d1d0ea8c9814fa51a5020e2d3c9f1a1a31542290411; expires=Fri, 15-Nov-19 14:00:11 GMT; path=/; domain=.3ezy.net; HttpOnly
x-amz-id-2: NwQIY9l36ePfNfgvQkk4wV4Korg63onyOkYO9yRuDMK2of2nIO7Ys34qVeMfAZYttkJCSkIZ6/g=
x-amz-request-id: C82C6BF0BBA85E8A
Last-Modified: Sun, 05 Aug 2018 11:42:19 GMT
Etag: "8fd3b8fd6e4f060442c321c09e444df2"
CF-Cache-Status: HIT
Expires: Sun, 16 Dec 2018 14:00:11 GMT
Cache-Control: public, max-age=2678400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 47a23e1f4508428b-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   40882
Md5:    8fd3b8fd6e4f060442c321c09e444df2
Sha1:   5e63f271a431ef4effab458cdc1cae4a3aa72e3d
Sha256: ba0b8750e52bb9560e5147bb53de9bd320bb515eccf8282bf3741d81eaccb7b1
                                        
                                            GET /ArchangelR/PATRATE/ptv032.jpg HTTP/1.1 
Host: f.3ezy.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://teenystar18.toplistcreator.eu/index.html

                                         
                                         104.28.26.116
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 15 Nov 2018 14:00:11 GMT
Content-Length: 154456
Connection: keep-alive
Set-Cookie: __cfduid=d75da9ca831df51bb3877a6662a2d500b1542290411; expires=Fri, 15-Nov-19 14:00:11 GMT; path=/; domain=.3ezy.net; HttpOnly
x-amz-id-2: 6eXO6jLsAdL8lMNotudIgWOtesgR/9lBjdodB9uiiaIPuQYdNUVLTx50VcuT86Aw5GgGWBun+DY=
x-amz-request-id: 34B20B11F56C785E
Last-Modified: Mon, 09 Jul 2018 14:04:27 GMT
Etag: "feb0657679227620cae13930b2e4c55d"
CF-Cache-Status: HIT
Expires: Sun, 16 Dec 2018 14:00:11 GMT
Cache-Control: public, max-age=2678400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 47a23e1e862d42c1-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   154456
Md5:    feb0657679227620cae13930b2e4c55d
Sha1:   838254c0973b5c47ee18e9fc332eb150f3afdda2
Sha256: 4f80c75381b5f5d7f1c59174ebbe3f2774ed751a1b9b9c8d1573e96d4263ebec
                                        
                                            GET /zslcemwxdiynpde.php HTTP/1.1 
Host: toplisted.toplistcreator.eu
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://toplisted.toplistcreator.eu/index.html
Cookie: PHPSESSID=ef3s5hm074hse6r91dhmfqv934

                                         
                                         79.98.29.74
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
X-Powered-By: PHP/5.4.27
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7871
Md5:    1b75043f2c27393a61caae859d10d62b
Sha1:   004686137ce8baf0692146cfb689bcaf01291775
Sha256: c2d0d6d5a074f40a2ba1c5d634b0d7104deda397cde03d39343ff9d83b3b19a2

Alerts:
  IDS:
    - ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
    - ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
    - ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
    - ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
                                        
                                            GET /b3/8a/47/b38a4705d7d35dfba5d085337fa7c9b8.js HTTP/1.1 
Host: yim3eyv5.top
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://teenystar18.toplistcreator.eu/index.html

                                         
                                         198.134.112.241
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.15.1
Date: Thu, 15 Nov 2018 13:59:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   13952
Md5:    cad10ee72f63ba75606bcc07c6da99cd
Sha1:   417762b95949917035c29bb921521a208f1a8601
Sha256: e7e8c50ab07fc38ebb32d1fbfd8698c2941cd09e731db9864570911f4313e260
                                        
                                            GET /ArchangelR/PATRATE/ptv013.jpg HTTP/1.1 
Host: f.3ezy.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://toplisted.toplistcreator.eu/index.html

                                         
                                         104.28.26.116
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 15 Nov 2018 14:00:11 GMT
Content-Length: 630004
Connection: keep-alive
Set-Cookie: __cfduid=d1d0ea8c9814fa51a5020e2d3c9f1a1a31542290411; expires=Fri, 15-Nov-19 14:00:11 GMT; path=/; domain=.3ezy.net; HttpOnly
x-amz-id-2: BJuHo4zt/SBpC28oaqaeD7QL1ZaG2xKdARxrSGdA5yHYj99PXqStYze8DQQMp973GUxyDWXhHeY=
x-amz-request-id: ED499647108065A3
Last-Modified: Thu, 10 May 2018 20:23:29 GMT
Etag: "606f4031d7b9a024a9d19c9d909e12bb"
CF-Cache-Status: HIT
Expires: Sun, 16 Dec 2018 14:00:11 GMT
Cache-Control: public, max-age=2678400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 47a23e202528428b-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   630004
Md5:    606f4031d7b9a024a9d19c9d909e12bb
Sha1:   fa31feae412b68cd5bd08326caeac30787fc1a9b
Sha256: 3dcd73890070c64a70b500d13e08632161ad416f5c47bbd44cd307df03264519
                                        
                                            GET /ArchangelR/90x30/HRGS006.gif HTTP/1.1 
Host: f.3ezy.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://toplisted.toplistcreator.eu/index.html

                                         
                                         104.28.26.116
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 15 Nov 2018 14:00:11 GMT
Content-Length: 997241
Connection: keep-alive
Set-Cookie: __cfduid=d1d0ea8c9814fa51a5020e2d3c9f1a1a31542290411; expires=Fri, 15-Nov-19 14:00:11 GMT; path=/; domain=.3ezy.net; HttpOnly
x-amz-id-2: mIO/erp1CatEAgvyryOycZ/x5z/YK1VkKm44K7tq7FB5mOic0vyeSQsw32W8dvU34A6EuxXNMnc=
x-amz-request-id: A37D3F7C60CD3BE5
Last-Modified: Wed, 06 Jun 2018 17:15:26 GMT
Etag: "62bf95b0613e91dece19d27eee38e47a"
CF-Cache-Status: HIT
Expires: Sun, 16 Dec 2018 14:00:11 GMT
Cache-Control: public, max-age=2678400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 47a23e1f34ff428b-OSL


--- Additional Info ---
Magic:  GIF image data, version 89a, 500 x 215
Size:   997241
Md5:    62bf95b0613e91dece19d27eee38e47a
Sha1:   15886c3275de4b38ecab09e73c30e1ce2a112dd7
Sha256: 076e06bb65dbd1bf957fc08e2c55eb1cd3abd6486a43c4408d5acaeef7bdb0a1
                                        
                                            GET /0.gif?2809112&101 HTTP/1.1 
Host: sstatic1.histats.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://toplisted.toplistcreator.eu/index.html

                                         
                                         208.43.241.178
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 15 Nov 2018 14:00:11 GMT
Content-Length: 43
Connection: close
Set-Cookie: CountUid=a97072e1-e7yg-4c72-a99c-45ec031bd6d1; domain=.histats.com; Max-Age=31536000; Expires=Fri, 15-Nov-2019 14:00:11 GMT


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    07fff40b5dd495aca2ac4e1c3fbc60aa
Sha1:   e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
Sha256: a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
                                        
                                            GET /linkbanners/fresh88x31.gif HTTP/1.1 
Host: freshnudes.supertop-100.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://toplisted.toplistcreator.eu/index.html

                                         
                                         212.18.234.130
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 15 Nov 2018 14:00:11 GMT
Server: Apache
Last-Modified: Wed, 15 Mar 2017 20:46:07 GMT
Accept-Ranges: bytes
Content-Length: 3472
Keep-Alive: timeout=2, max=5000
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 88 x 31
Size:   3472
Md5:    7bb6fe54b532ca85538d6f4b988dc4f9
Sha1:   b2e9c5d8d7d9be583f8eee509807344be65cfc9b
Sha256: b5a2efc8adbd60ae623d99b3d73ced55067ef4ab7b7f8c634f55304e9bc2cd79
                                        
                                            GET /d/?resource=pubJS HTTP/1.1 
Host: d.smopy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://teenystar18.toplistcreator.eu/index.html
If-None-Match: W/"76dc-HS3ZrNRmSS2d/CUvc5JrYFpPfQk"

                                         
                                         23.235.244.227
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Etag: W/"76d5-5COynE+FjzQJFTMjnbLWZFhWUvY"
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9759
Md5:    bc2c84bf6025d5e36806d461396dac56
Sha1:   e724e38f2d218c71b8db27194f255e3286150ba6
Sha256: aab0d8d3cc39c5779aa130efb387d673f62fb7d4f510b0e09ce84c0ea6296ae2
                                        
                                            GET /gfx/6tgp_logo.gif HTTP/1.1 
Host: www.6tgp.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://toplisted.toplistcreator.eu/index.html

                                         
                                         208.71.131.24
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 15 Nov 2018 14:00:10 GMT
Server: Apache
Last-Modified: Fri, 24 Jan 2003 06:11:58 GMT
Etag: "95350b-f9d-3b4f4dde62780"
Accept-Ranges: bytes
Content-Length: 3997
Connection: close


--- Additional Info ---
Magic:  GIF image data, version 89a, 165 x 55
Size:   3997
Md5:    7a310b7f71d426188243facc4a59cf6f
Sha1:   1f816300d4ba7288928e116126e41454208814d5
Sha256: 03e38bd56630d34680b5c2a637394fa3a47a24c383f180fec711d54a480bce66
                                        
                                            GET /ArchangelR/PATRATE/ptv005.jpg HTTP/1.1 
Host: f.3ezy.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://toplisted.toplistcreator.eu/index.html

                                         
                                         104.28.26.116
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 15 Nov 2018 14:00:11 GMT
Content-Length: 321617
Connection: keep-alive
Set-Cookie: __cfduid=d0a8b50325cf574029dd46062533f62661542290411; expires=Fri, 15-Nov-19 14:00:11 GMT; path=/; domain=.3ezy.net; HttpOnly
x-amz-id-2: sJEXDqbch8yY6wVj+v2lAQA6iSFgePCvuVofvVJFj+H+nHQuIZqR+4dclktLVboC9o9PF6NmxXg=
x-amz-request-id: 7FB7F6FE52F97395
Last-Modified: Thu, 10 May 2018 20:23:29 GMT
Etag: "0154e48ddd9905631c93a962aea3b81f"
CF-Cache-Status: HIT
Expires: Sun, 16 Dec 2018 14:00:11 GMT
Cache-Control: public, max-age=2678400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 47a23e21c3e74267-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   321617
Md5:    0154e48ddd9905631c93a962aea3b81f
Sha1:   b5293e6a7c11ce6892cef3c86b4d9ea12a6dfc33
Sha256: 5a2d8434d481bf585bb81da63fc3e5c62ab52d32c2ad67c9382f467c2dc2952b
                                        
                                            GET /ArchangelR/PATRATE/ptv001.jpg HTTP/1.1 
Host: f.3ezy.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://toplisted.toplistcreator.eu/index.html

                                         
                                         104.28.26.116
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 15 Nov 2018 14:00:12 GMT
Content-Length: 290188
Connection: keep-alive
Set-Cookie: __cfduid=d094d0bc720f6e11248b95198c82fb2551542290411; expires=Fri, 15-Nov-19 14:00:11 GMT; path=/; domain=.3ezy.net; HttpOnly
x-amz-id-2: QSJxv8zPA31tZThT3PfwdobcFVHj0auQriHyhRQxAEd7t7dkeewatT2Wpsw6pNr9zYbjPFBRfPI=
x-amz-request-id: 590D54CEDAA7E335
Last-Modified: Thu, 10 May 2018 20:23:29 GMT
Etag: "26e265c7a10a5aa4e294c8d7cf6f0235"
CF-Cache-Status: HIT
Expires: Sun, 16 Dec 2018 14:00:12 GMT
Cache-Control: public, max-age=2678400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 47a23e21c6ff4273-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   290188
Md5:    26e265c7a10a5aa4e294c8d7cf6f0235
Sha1:   759bfb1adca9944c9e3b53032947b8221f4fa01c
Sha256: e86404c8380aeb67e4966a1f7dca362ae3a432f4612bd057edf91a74e9eacfe6
                                        
                                            GET /apu.php?zoneid=1549892 HTTP/1.1 
Host: sitemnk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         109.206.164.148
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:11 GMT
Last-Modified: Tue, 23 Oct 2018 11:55:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5bcf0c1d-d6a1"
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   54822
Md5:    834ec44ca0cfe221de6cd00e3830dc8c
Sha1:   3843c81359f0555fca4253f3fb3ddfcf5420cf72
Sha256: 22c402c857e1895470d69ad61f613182a07134acd06ee3cb0e45b2f6c0fae93c
                                        
                                            GET /images/button.png HTTP/1.1 
Host: teenlist.top
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/
Cookie: __cfduid=dfb1cddd1788c05eb50d9167b90344b061542290409

                                         
                                         104.24.124.40
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 15 Nov 2018 14:00:11 GMT
Content-Length: 6943
Connection: keep-alive
Last-Modified: Sun, 15 Oct 2017 06:23:31 GMT
Etag: "59e2fee3-1b1f"
Expires: Sat, 15 Dec 2018 14:00:11 GMT
Cache-Control: public, max-age=2592000
CF-Cache-Status: HIT
Accept-Ranges: bytes
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 47a23e1eeb013cf5-CPH


--- Additional Info ---
Magic:  PNG image, 88 x 31, 8-bit/color RGB, non-interlaced
Size:   6943
Md5:    1a1cd2a5dd532cf634049f0724d44cdc
Sha1:   d364bc4f3ba857c360dcae679879a7fd9b87c0d1
Sha256: 637c79208ab21ec014fc1831bc076e9ecde26a125fb3abb131118323aff9ce08
                                        
                                            GET /service_async.php/serveAd?JSON-response-callback=rpc.callbacks.r1&id=1&c=103654&s=223468 HTTP/1.1 
Host: mobile.juicyads.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://teenystar18.toplistcreator.eu/index.html

                                         
                                         34.193.112.114
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:12 GMT
Content-Length: 154
Location: http://mobile.juicyads.com/service_async.php?JSON-response-callback=rpc.callbacks.r1&id=1&c=103654&s=223468
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            GET /service_async.php?JSON-response-callback=rpc.callbacks.r1&id=1&c=103654&s=220125 HTTP/1.1 
Host: mobile.juicyads.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://jailbait.toplistcreator.eu/index.html

                                         
                                         34.193.112.114
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:12 GMT
Transfer-Encoding: chunked
Connection: close
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   63
Md5:    aa6b2f02b6e16a86eb971e0b7cb8ad3c
Sha1:   28e0273954a70f5999316fe36be6d45efe432b40
Sha256: 0b20d91bf5532fb3f2af7d1810476403f42873fd51c89d1962d70f5a8dffb5ca
                                        
                                            GET /b3/8a/47/b38a4705d7d35dfba5d085337fa7c9b8.js HTTP/1.1 
Host: yim3eyv5.top
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://toplisted.toplistcreator.eu/index.html

                                         
                                         198.134.112.241
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.15.1
Date: Thu, 15 Nov 2018 13:59:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   13953
Md5:    169f6a6050e896298e23e6afc2d3c556
Sha1:   3b46469cd03bb0e4c7fea5884e5b006d0aaf6dcf
Sha256: eb69d648b49878498f3a4ed685f71b0500227e02a7a1ac0c20231815a67ca329
                                        
                                            GET /apu.php?zoneid=1399195&var=1255387 HTTP/1.1 
Host: sitemnk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         109.206.164.148
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:12 GMT
Last-Modified: Tue, 23 Oct 2018 11:55:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5bcf0c1d-d6a1"
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   54834
Md5:    efdcba76c5ffade6d6b52e2dc597a3d5
Sha1:   001b31aae7ec4c7cb74bfaf428f6d602ab36807d
Sha256: 03991da6ee9554d9a8bf19620befb026acafdd3fc15642b5ce697f081d94cfee
                                        
                                            GET /120x60.jpg HTTP/1.1 
Host: privateteens.us.to
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://toplisted.toplistcreator.eu/index.html

                                         
                                         46.252.206.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 15 Nov 2018 14:00:12 GMT
Server: Apache
Last-Modified: Sun, 24 Aug 2014 16:20:39 GMT
Etag: "3496-501627382b192"
Accept-Ranges: bytes
Content-Length: 13462
Cache-Control: max-age=5184000
Expires: Mon, 14 Jan 2019 14:00:12 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   13462
Md5:    333c9697571bec12eaf604a4bda6af23
Sha1:   f7fd24bcaa7f0bf1f8af4ea9bab672da1cb81ca6
Sha256: 1c0e421e87707cb120c6297dfd51405121b7ab6e3011472278e9e8037ae48519
                                        
                                            GET /ns6rB0d4/Za0073.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:35 GMT
Content-Length: 4156
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4156
Md5:    1737b20e253d7597523d6909019de9c4
Sha1:   f206e3fbbb54f2edf8a887acd0fbb9c5a2b7b1b3
Sha256: 95778f8593940f6a9b71d5da13eb6d5cd149022262dc6fcc923aaefb3131d126
                                        
                                            GET /klguhczllzwwtgx.php HTTP/1.1 
Host: teenystar18.toplistcreator.eu
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://teenystar18.toplistcreator.eu/index.html
Cookie: PHPSESSID=nls6ok8tb0jtt5714bkgpisnn4

                                         
                                         79.98.29.74
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
X-Powered-By: PHP/5.4.27
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7599
Md5:    8c3f1925ad27ef6a04dc1e15e63967f4
Sha1:   1ae9400791431254ba8804e0231b32774f9b279e
Sha256: 9ba0d8e88842920e2c7a655a63bcf4b39128c746922502e0be0a999812f6ebd4
                                        
                                            GET /service_async.php?JSON-response-callback=rpc.callbacks.r1&id=1&c=103654&s=223468 HTTP/1.1 
Host: mobile.juicyads.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://teenystar18.toplistcreator.eu/index.html

                                         
                                         34.193.112.114
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:13 GMT
Transfer-Encoding: chunked
Connection: close
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   63
Md5:    aa6b2f02b6e16a86eb971e0b7cb8ad3c
Sha1:   28e0273954a70f5999316fe36be6d45efe432b40
Sha256: 0b20d91bf5532fb3f2af7d1810476403f42873fd51c89d1962d70f5a8dffb5ca
                                        
                                            GET /get/1549892?zoneid=1549892&jp=_clm1vc7998p11abfl2lzbv HTTP/1.1 
Host: sitemnk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         109.206.164.148
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   57
Md5:    02a7eedcf29cefdbd3486efc1a2904b6
Sha1:   69736d08b55132406eb58820d02098ecf8b9a96d
Sha256: 361dd0e92cf15e662e9720472730b3be0d26a13bdcf2ea5ae90b130e5196d988
                                        
                                            GET /Jy7cS4m6/Za0042.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:37 GMT
Content-Length: 3071
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3071
Md5:    dfa96b9b5f1381882bf23f8f1834a9cf
Sha1:   bd4a40c3de33daedceef518e189b0f9c4bd30645
Sha256: e97e1328b76acbbd2c1993a4dbdf203648dbb10c5c58b500e923f0b65d49fb70
                                        
                                            GET /ArchangelR/90x30/3somegif_118.gif HTTP/1.1 
Host: f.3ezy.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://toplisted.toplistcreator.eu/index.html

                                         
                                         104.28.26.116
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 15 Nov 2018 14:00:11 GMT
Content-Length: 2065515
Connection: keep-alive
Set-Cookie: __cfduid=dd1272c7900d60782582daf67c92da38a1542290411; expires=Fri, 15-Nov-19 14:00:11 GMT; path=/; domain=.3ezy.net; HttpOnly
x-amz-id-2: 5ANkEn8WojQSlM3dIE0YlxjzejBLR5NnFcs+0pskA5s8bMLxc5TIJb/7m1z3ibk6LWbwE/R/B3c=
x-amz-request-id: 7D393A5A20EB1B3D
Last-Modified: Sun, 05 Aug 2018 11:42:20 GMT
Etag: "8cbfe0baf324cb1be2f56b73dd0feb65"
CF-Cache-Status: HIT
Expires: Sun, 16 Dec 2018 14:00:11 GMT
Cache-Control: public, max-age=2678400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 47a23e1f35fb42a9-OSL


--- Additional Info ---
Magic:  GIF image data, version 89a, 500 x 210
Size:   2065515
Md5:    8cbfe0baf324cb1be2f56b73dd0feb65
Sha1:   f90ba523bc263b54d3623be9f3f64f8f1030901f
Sha256: e4a2a4d4061add0867a202cd74ca91ce8ab8fbfcb99de3b84c2591f8d5b09079
                                        
                                            GET /pkfwhbkqwanjp.php HTTP/1.1 
Host: jailbait.toplistcreator.eu
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://jailbait.toplistcreator.eu/index.html
Cookie: PHPSESSID=5aodjcbm9s0vg2lemjl01ga865; juicynomobile=1

                                         
                                         79.98.29.74
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
X-Powered-By: PHP/5.4.27
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   8293
Md5:    6de8b3039f587c402fb3c9244c256147
Sha1:   c2be71c45da9c3773fd9a2732d176c939029f1c2
Sha256: 9e8cf5f2dd76784b93baa5ffb3d1c6487a2d15c75e292afa77f8136a0a2bf2a2
                                        
                                            GET /zslcemwxdiynpde.php HTTP/1.1 
Host: toplisted.toplistcreator.eu
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://toplisted.toplistcreator.eu/index.html
Cookie: PHPSESSID=ef3s5hm074hse6r91dhmfqv934

                                         
                                         79.98.29.74
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
X-Powered-By: PHP/5.4.27
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7871
Md5:    1b75043f2c27393a61caae859d10d62b
Sha1:   004686137ce8baf0692146cfb689bcaf01291775
Sha256: c2d0d6d5a074f40a2ba1c5d634b0d7104deda397cde03d39343ff9d83b3b19a2

Alerts:
  IDS:
    - ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
    - ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
    - ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
    - ET CURRENT_EVENTS TDS Sutra - page redirecting to a SutraTDS
                                        
                                            GET /d/?resource=pubJS HTTP/1.1 
Host: d.smopy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://toplisted.toplistcreator.eu/index.html
If-None-Match: W/"76d5-5COynE+FjzQJFTMjnbLWZFhWUvY"

                                         
                                         23.235.244.227
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Etag: W/"76d8-7A/gysgMxP8wsBIzIjC7YIFGGTU"
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9757
Md5:    768e0a58da14fd28a5534c30319a25f9
Sha1:   1fe24891a0451d4c9ada0d803996dcf725156282
Sha256: 8d9010df3675f705a3da4aa8acaf926e9649b97da27bfb829f820109312adad2
                                        
                                            GET /ArchangelR/PATRATE/30.jpg HTTP/1.1 
Host: f.3ezy.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://jailbait.toplistcreator.eu/index.html
Cookie: __cfduid=d094d0bc720f6e11248b95198c82fb2551542290411

                                         
                                         104.28.26.116
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 15 Nov 2018 14:00:13 GMT
Content-Length: 5703
Connection: keep-alive
x-amz-id-2: lIp1IJEVLOSVRqyLTvi30IMdjvFlcF218rqoel9QPjA4D23Tr7z7RNZsw7vCAlkJcsdtcFQWiwc=
x-amz-request-id: B0A00A3E0E404B6D
Last-Modified: Tue, 19 Jun 2018 13:43:10 GMT
Etag: "24472baca4d3f65455b2b69ff8c54163"
CF-Cache-Status: HIT
Expires: Sun, 16 Dec 2018 14:00:13 GMT
Cache-Control: public, max-age=2678400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 47a23e2a96344267-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   5703
Md5:    24472baca4d3f65455b2b69ff8c54163
Sha1:   22061dfe63b5f8ef0dfcb406ccf42a27fcfbe88a
Sha256: 5ed191934b5dcfb4153a143d614bfd6d3808eb887e7f1ed26ac6ea9a7e2318fb
                                        
                                            GET /ArchangelR/PATRATE/26.jpg HTTP/1.1 
Host: f.3ezy.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://jailbait.toplistcreator.eu/index.html
Cookie: __cfduid=d094d0bc720f6e11248b95198c82fb2551542290411

                                         
                                         104.28.26.116
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 15 Nov 2018 14:00:13 GMT
Content-Length: 6066
Connection: keep-alive
x-amz-id-2: cj2l2zkrGT3nTtF1s52nTj29TTSV9U477UjbH7swwSRMPRMFSa/Q1kAiOBuaFhAUCET1b1OdIsg=
x-amz-request-id: B5B7999F13F466EA
Last-Modified: Tue, 19 Jun 2018 13:43:10 GMT
Etag: "b207653c2d43ed83fc0bb78d100210a7"
CF-Cache-Status: HIT
Expires: Sun, 16 Dec 2018 14:00:13 GMT
Cache-Control: public, max-age=2678400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 47a23e2aa4e9427f-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   6066
Md5:    b207653c2d43ed83fc0bb78d100210a7
Sha1:   94cc771a408632e901298e91620fd65395a302a9
Sha256: 26cefd40f17fac184895606858134dcdce4ec48039bf413b07494ba85517e326
                                        
                                            GET /ArchangelR/PATRATE/36.jpg HTTP/1.1 
Host: f.3ezy.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://jailbait.toplistcreator.eu/index.html
Cookie: __cfduid=d094d0bc720f6e11248b95198c82fb2551542290411

                                         
                                         104.28.26.116
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 15 Nov 2018 14:00:14 GMT
Content-Length: 5856
Connection: keep-alive
x-amz-id-2: bx1urPvm0oytqDeKbETvL4hsAzeXyt/NOpYx3mvIs1RPDC27nMepwsE+Y2ZEtNx3IJ8Chx4Cytc=
x-amz-request-id: CECC1B2B25D78339
Last-Modified: Tue, 19 Jun 2018 13:43:10 GMT
Etag: "53357573ac523abd545a89a857b1e176"
CF-Cache-Status: HIT
Expires: Sun, 16 Dec 2018 14:00:14 GMT
Cache-Control: public, max-age=2678400
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 47a23e3072a24273-OSL


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   5856
Md5:    53357573ac523abd545a89a857b1e176
Sha1:   ef10a2b9702ce658f6403668a2b0584c1ba70486
Sha256: 92cf03400c90527ebcef54cdb924d529da44d975d2cdabbd926c34b470b8a6a1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "69267D604FD253088F8F731A5C266337F7448419C4BEBA4B895DC19C183E3CA7"
Last-Modified: Tue, 13 Nov 2018 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=22943
Expires: Thu, 15 Nov 2018 20:22:37 GMT
Date: Thu, 15 Nov 2018 14:00:14 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    11cbe13d352e7532072d72eae551a5ff
Sha1:   730bb4a065e279c29899cc96d403019236de7c24
Sha256: 69267d604fd253088f8f731a5c266337f7448419c4beba4b895dc19c183e3ca7
                                        
                                            GET /button.php?u=naktwins HTTP/1.1 
Host: teenlist.top
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://toplisted.toplistcreator.eu/index.html
Cookie: __cfduid=dfb1cddd1788c05eb50d9167b90344b061542290409

                                         
                                         104.24.124.40
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 15 Nov 2018 14:00:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://teenlist.top/images/button.png
Strict-Transport-Security: max-age=31536000
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 47a23e2a6e193cef-CPH


--- Additional Info ---
                                        
                                            GET /get/1399195?zoneid=1399195&var=1255387&jp=_clt7qyxwr45tuhlc6412l8 HTTP/1.1 
Host: sitemnk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         109.206.164.148
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   830
Md5:    12a28bd561e31e2531d571577de01d46
Sha1:   c81d43cc0e4a2304e81539b649caf989be76ff44
Sha256: dd075c4b72bbe4a2328521ef522b7a6d9715a1a7d61120eff7a9f0c07e4a2679
                                        
                                            GET /gwMqpF2Y/Za0043.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:37 GMT
Content-Length: 4020
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4020
Md5:    338f2015d127642bf34541a4a19ab58b
Sha1:   fa2c4854f8fee685eaf6805a02af69931861839f
Sha256: f783e0740a8cdcc15862a23d68045588e81f8022cef0bed58453bad7e5648829
                                        
                                            GET /script/compatibility.js HTTP/1.1 
Host: celeritascdn.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://teenystar18.toplistcreator.eu/index.html

                                         
                                         104.25.141.119
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 15 Nov 2018 14:00:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d5c9566dcc84b39562e705c3ba7ff36551542290414; expires=Fri, 15-Nov-19 14:00:14 GMT; path=/; domain=.celeritascdn.com; HttpOnly
X-GUploader-UploadID: AEnB2Up545S6itRagH9GsAhe5c3GQbO6VyJ-9oHAnGAK-RjEw0i3FTL9hytLxH7-f9XuFdhT19CA7cqiatHnbKt192bt9ydkUvX19TTvrlfCwMdYi3vWOYw
Expires: Thu, 15 Nov 2018 18:00:14 GMT
Cache-Control: public, max-age=14400
Last-Modified: Thu, 30 Aug 2018 12:42:19 GMT
Etag: W/"ec4e9e96026bffb8dced48b580c51b24"
x-goog-generation: 1535632939378080
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 11626
x-goog-hash: crc32c=a9fskw==, md5=7E6elgJr/7jc7Ui1gMUbJA==
x-goog-storage-class: MULTI_REGIONAL
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 47a23e30e29a4291-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6153
Md5:    d73fbbb971deb4b69d7515dd3a0f31d1
Sha1:   2f4e522353f205806eff64b094e18d4f893b9393
Sha256: 70209b1f1e49037499db507fea1038ede4b704a6e926aa477c601e4cc685d5a3
                                        
                                            GET /button.php?u=jailbaitop HTTP/1.1 
Host: xfap.eu
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://jailbait.toplistcreator.eu/index.html
Cookie: __cfduid=d1fdc251f9410004aaa6ff7d1cfbb7bf61542290408

                                         
                                         104.31.81.118
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 15 Nov 2018 14:00:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://xfap.eu/images/button.gif
Server: cloudflare
CF-RAY: 47a23e30f29e4291-OSL


--- Additional Info ---
                                        
                                            GET /button.php?u=jailbait HTTP/1.1 
Host: elitepornlist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://jailbait.toplistcreator.eu/index.html

                                         
                                         54.36.243.26
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:14 GMT
Content-Length: 0
Connection: keep-alive
X-Powered-By: PHP/5.6.38
Location: http://elitepornlist.com/images/button.png
Strict-Transport-Security: “max-age=31536000″
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Cache-Status: BYPASS
X-Server-Powered-By: Engintron


--- Additional Info ---
                                        
                                            GET /0.gif?4096114&101 HTTP/1.1 
Host: sstatic1.histats.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://jailbait.toplistcreator.eu/index.html
Cookie: CountUid=a97072e1-e7yg-4c72-a99c-45ec031bd6d1

                                         
                                         208.43.241.178
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 15 Nov 2018 14:00:14 GMT
Content-Length: 43
Connection: close


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    07fff40b5dd495aca2ac4e1c3fbc60aa
Sha1:   e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
Sha256: a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
                                        
                                            GET /count.asp?id=1787215&logo=bc HTTP/1.1 
Host: toplist.cz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://toplisted.toplistcreator.eu/index.html

                                         
                                         88.86.101.2
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.4.6 (Ubuntu)
Date: Thu, 15 Nov 2018 14:00:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: private,no-cache,no-store,must-revalidate,max-age=0
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Set-Cookie: ui=21301; expires=Sat, 15-Dec-2018 14:00:14 GMT; path=/; domain=toplist.cz;
P3P: CP="NON DSP ADM DEV PSD CUSo OUR IND STP PRE NAV UNI"
X-W: 4
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 87a, 88 x 120
Size:   1886
Md5:    d65d845ab4e34058500a1cd5a5220806
Sha1:   4e027ed2478529cea5810cb28c359da3e739ddf4
Sha256: ec5d771195e85ed3905919523668ce73cf3594dd230afe4bd0bb41e83a9d5113
                                        
                                            GET /cvScMBzN/Za0041.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:37 GMT
Content-Length: 6002
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   6002
Md5:    50933d55d4785926fce08f99764d5ccf
Sha1:   cdbe8ebe2ff7a8ee08ba59a347260e6e7b0c7345
Sha256: 9475409b0dedc8fb6b9bbc6bae48de0e73b95c3b449d2414229bc6f79786de27
                                        
                                            GET /m1qtw3b83/1w_03.jpg HTTP/1.1 
Host: s19.postimg.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 126588
Connection: keep-alive
Last-Modified: Fri, 09 Feb 2018 20:30:27 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   126588
Md5:    2fc9cf8aa92dd2d6397d9f348226555d
Sha1:   a5a50bd5a4fb1f09f98579ace31ce3738626ef9a
Sha256: e2b4efa0c236b4f3baa931ccea0f29dc8ff91626ec2d4917c033fbd2f452df85
                                        
                                            GET /7Gd3C3zd/Za0045.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:38 GMT
Content-Length: 5028
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   5028
Md5:    af4634587db505487034c47233a702f4
Sha1:   73b1df95c1237e61a04747c464bc21c347042ac0
Sha256: d920d323affa24506c7ac007c406c7d5ad69a9e13862683228a1b533b112c07c
                                        
                                            GET /count.asp?id=1787214&logo=2&http=http%3A//arab-xxx.sextgem.com/&t=JAILBAIT%20TOP%20-%20jailbait.toplistcreator.eu&wi=1176&he=885&cd=24 HTTP/1.1 
Host: toplist.cz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://jailbait.toplistcreator.eu/index.html

                                         
                                         88.86.101.2
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.4.6 (Ubuntu)
Date: Thu, 15 Nov 2018 14:00:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: private,no-cache,no-store,must-revalidate,max-age=0
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Set-Cookie: ui=40648; expires=Sat, 15-Dec-2018 14:00:14 GMT; path=/; domain=toplist.cz;
P3P: CP="NON DSP ADM DEV PSD CUSo OUR IND STP PRE NAV UNI"
X-W: 4
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload


--- Additional Info ---
Magic:  GIF image data, version 89a, 88 x 31
Size:   512
Md5:    e25fbfc2ff4cafe9dd1585c6d4a795a9
Sha1:   1c225d59b8ebc0c164af3870eb98016f53900804
Sha256: 75e1a4861bf5cd74101785f926d27cfac9227e3824c2d497f4fc752d8063e4de
                                        
                                            GET /images/button.png HTTP/1.1 
Host: elitepornlist.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://jailbait.toplistcreator.eu/index.html

                                         
                                         54.36.243.26
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:14 GMT
Content-Length: 922
Connection: keep-alive
Last-Modified: Thu, 05 Jul 2018 01:03:33 GMT
Strict-Transport-Security: “max-age=31536000″
Expires: Mon, 14 Jan 2019 14:00:14 GMT
Cache-Control: max-age=5184000
Pragma: public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 88 x 31, 8-bit/color RGBA, non-interlaced
Size:   922
Md5:    b82bbb6742f898cc3d832a09fda8b012
Sha1:   8f7b375d02db2d248639db10040c2263eda733b5
Sha256: bd75d29e00afca55cb12f19c9255abb245a54e1d4161ee9a6dc77fe7cab6a4f3
                                        
                                            GET /topsite/button.php?u=jailbaitop HTTP/1.1 
Host: ls-girls.biz
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://jailbait.toplistcreator.eu/index.html

                                         
                                         46.8.45.102
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Server: Nginx-VPSSIM
Date: Thu, 15 Nov 2018 14:00:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://ls-girls.biz/topsite/images/button.png


--- Additional Info ---
                                        
                                            GET /Z0JZgGy9/Za0000.jpg HTTP/1.1 
Host: i.pixxxels.cc
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://arab-xxx.sextgem.com/

                                         
                                         51.15.123.120
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Thu, 15 Nov 2018 13:59:34 GMT
Content-Length: 5774
Connection: keep-alive
Last-Modified: Thu, 08 Nov 2018 13:23:29 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   5774
Md5:    afe3abb7e29f9be000c61a4ae41fccef
Sha1:   5c59dee75f3b2b33dff90d6c0fd7157350a3390b
Sha256: 4bf077cbc5df463cd96d03d2f6c1538d993b97163bda80c42907045e963406c6
                                        
                                            GET /stats/4096114.php?4096114&@f16&@g1&@h1&@i1&@j1542290414008&@k0&@l1&@mJAILBAIT%20TOP%20-%20jailbait.toplistcreator.eu&@n0&@ohttp%3A%2F%2Farab-xxx.sextgem.com%2F&@q0&@r0&@s605&@ten-US&@u1176&@vhttp%3A%2F%2Fjailbait.toplistcreator.eu%2Findex.html&@w HTTP/1.1 
Host: s4.histats.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://jailbait.toplistcreator.eu/index.html
Cookie: CountUid=28a75741-50pq-410a-8a37-264bfd781dbf; CountUid=a97072e1-e7yg-4c72-a99c-45ec031bd6d1

                                         
                                         208.43.241.181
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Date: Thu, 15 Nov 2018 14:00:14 GMT
Content-Length: 112
Connection: close


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   112
Md5:    e51cc25552e70b44c7a20782e8e7e76b
Sha1:   35205e7f8c6ae312e4188fe864a6653a91e78a8a
Sha256: 28870abde6a7f5162c94b604a3b543e23f8ece068502317bda7a647641413a32
                                        
                                            GET /js/jads.js HTTP/1.1 
Host: adserver.juicyads.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://jailbait.toplistcreator.eu/index.html

                                         
                                         185.94.236.126
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Thu, 15 Nov 2018 14:00:14 GMT
Last-Modified: Tue, 10 Jan 2017 21:05:41 GMT
Transfer-Encoding: chunked
Connection: close
Etag: W/"58754ca5-eb9"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1720
Md5:    65b1efdf55163b144c5018b8772765ad
Sha1:   509de5f40450f3cf05e0d8d1b939fed2bbb11cbe
Sha256: cf23ab637d84de0eb1c1e67764e05ca0aa140e6ee932a60700fc35661644ee48
                                        
                                            GET /stats/2809112.php?2809112&@f16&@g1&@h1&@i1&@j1542290414082&@k0&@l1&@mTOP.LISTED%20MODELS%20-%20toplisted.toplistcreator.eu&@n0&@ohttp%3A%2F%2Farab-xxx.sextgem.com%2F&@q0&@r0&@s605&@ten-US&@u1176&@vhttp%3A%2F%2Ftoplisted.toplistcreator.eu%2Findex.html&@w HTTP/1.1 
Host: s4.histats.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://toplisted.toplistcreator.eu/index.html
Cookie: CountUid=28a75741-50pq-410a-8a37-264bfd781dbf; CountUid=a97072e1-e7yg-4c72-a99c-45ec031bd6d1

                                         
                                         208.43.241.181
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Date: Thu, 15 Nov 2018 14:00:14 GMT
Content-Length: 111
Connection: close


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   111
Md5:    e9307196d4a92758959173c20160c58f
Sha1:   a90738cfe31ae9ea222f10bba494c52e34d36cb5
Sha256: d2d8e44df107526d379828a501feedb733cc58cb48a532007ed0ca3224d44d71