Overview

URL palashranjan.prv.pl/anal-ass-teen-tight.html
IP188.165.206.157
ASNAS16276 OVH SAS
Location France
Report completed2018-11-07 17:35:51 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-11-07 2 palashranjan.prv.pl/anal-ass-teen-tight.html Malware
2018-11-07 2 palashranjan.prv.pl/js/jquery-1.8.2.min.js Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 188.165.206.157

Date UQ / IDS / BL URL IP
2018-12-29 18:54:47 +0100
0 - 0 - 1 siotewellcres.opx.pl/arcon-502-skachat.html 188.165.206.157
2018-10-11 18:14:27 +0200
0 - 0 - 2 letsgok.prv.pl/most-hardcore-porn-ever.html 188.165.206.157
2018-10-09 04:52:17 +0200
0 - 0 - 2 paramananda.prv.pl/anal-bleaching-not-still.html 188.165.206.157
2018-10-09 04:40:10 +0200
0 - 0 - 2 nagendra.prv.pl/anal-free-sexy.html 188.165.206.157
2018-09-26 02:57:27 +0200
0 - 0 - 2 palashkusum.prv.pl/anal-ass-free-gaping-vids.html 188.165.206.157
2018-09-07 19:27:13 +0200
0 - 0 - 1 parvesh.prv.pl/anal-ejaculation-induced.html 188.165.206.157
2018-09-07 17:40:51 +0200
0 - 0 - 2 panchanan.prv.pl/share-market-analysis.html.0 188.165.206.157
2018-09-07 17:01:06 +0200
0 - 0 - 1 parvesh.prv.pl/anal-enjoy-sex-woman.html 188.165.206.157
2018-09-07 10:24:06 +0200
0 - 0 - 2 nagendra.prv.pl/anal-free-sex-virgin.html 188.165.206.157
2018-09-03 20:44:57 +0200
0 - 0 - 2 madangopal.prv.pl/wifeysworld-anal.html 188.165.206.157

Last 10 reports on ASN: AS16276 OVH SAS

Date UQ / IDS / BL URL IP
2019-03-26 14:18:33 +0100
0 - 0 - 2 www.miltoncocoeco.com/ 213.186.33.19
2019-03-26 14:15:46 +0100
0 - 0 - 1 https://secursprx.com/downloads/spyrixemployee.exe 158.69.229.62
2019-03-26 14:09:30 +0100
0 - 2 - 0 avantrodas.com.br/ 198.50.226.196
2019-03-26 14:01:47 +0100
0 - 0 - 1 themag.themagtime.com/Order002503.doc 192.95.35.66
2019-03-26 14:01:14 +0100
0 - 1 - 0 repair.secretlab.pw/ 158.69.123.138
2019-03-26 13:47:43 +0100
0 - 0 - 29 teambusiness35.com/ 167.114.117.237
2019-03-26 13:39:46 +0100
0 - 0 - 1 tv.negrestempestes.cat/ 176.31.172.131
2019-03-26 13:24:25 +0100
0 - 0 - 6 legalnest.mx/wp-includes/random_cormpat/netwo (...) 192.99.231.163
2019-03-26 13:16:25 +0100
0 - 0 - 1 https://secursprx.com/downloads/spyrixemployee.exe 158.69.229.62
2019-03-26 13:01:22 +0100
0 - 0 - 1 https://sensetecz-engineering.com/Opowering 198.27.84.202

No other reports on domain: prv.pl



JavaScript

Executed Scripts (61)


Executed Evals (0)


Executed Writes (44)

#1 JavaScript::Write (size: 257, repeated: 2) - SHA256: c40519db158fb94a757b25c3fce37d77b474b55dd45daf788d191234e2275bb5

                                        < div style = "height:0px;width:0px;overflow:hidden" > < iframe src = "https://eus.rubiconproject.com/usync.html?&geo=eu&co=no"
frameborder = "0"
marginwidth = "0"
marginheight = "0"
scrolling = "NO"
width = "0"
height = "0"
style = "height:0px;width:0px" > < /iframe></div > < /div>
                                    

#2 JavaScript::Write (size: 19, repeated: 1) - SHA256: ee9dba5a4625087c821d4b4a52cb1a74fa9c7dcee9f9ff76262624027fc6ba5d

                                        & amp;
cb = 15446844675
                                    

#3 JavaScript::Write (size: 19, repeated: 1) - SHA256: f6c9bff12269eb2728fcf9f8c4d4812a68e81e20556ed111eced81ca87f5e9df

                                        & amp;
cb = 27095129555
                                    

#4 JavaScript::Write (size: 19, repeated: 1) - SHA256: aafba55d022baa8df3363c7cc64ef8c9d3169d267ab3755eefdecd486862c2e5

                                        & amp;
cb = 28993735589
                                    

#5 JavaScript::Write (size: 19, repeated: 1) - SHA256: f38fbcd473830c36cfa9b637dd139996152c4a7037350892f962feaea673c0db

                                        & amp;
cb = 44027233818
                                    

#6 JavaScript::Write (size: 18, repeated: 1) - SHA256: 4ee0d20c079dc7763ba8e9907d6da89b0cdd07afed211609b22697a6d33a31e2

                                        & amp;
cb = 5960407216
                                    

#7 JavaScript::Write (size: 18, repeated: 5) - SHA256: e0215c16fadbc057d1be3260dc2234924c46fa5579ac861f11b11d7dc5a736c7

                                        & amp;
charset = UTF - 8
                                    

#8 JavaScript::Write (size: 62, repeated: 5) - SHA256: 228e371d8c54812e7c4f27f67113159c733151cd53e08ac3e7826e7cae48b110

                                        & amp;
loc = http % 3 A //palashranjan.prv.pl/anal-ass-teen-tight.html
                                    

#9 JavaScript::Write (size: 15, repeated: 1) - SHA256: 28430e02476fc7fc90ca0a86c44aa6980facffc57ac636e409dc4c51a64269da

                                        & cb = 88241327367
                                    

#10 JavaScript::Write (size: 15, repeated: 1) - SHA256: 4187ee5e4ab1a4b03aea51d4d51f2eadf3afcd035fd98e349f9bffc68ac6aa0d

                                        & cb = 88320892239
                                    

#11 JavaScript::Write (size: 14, repeated: 2) - SHA256: e5f73d24520e13f84b608bbd56702fc84964435449a7d3e48cd0b6e3f0f31d2f

                                        & charset = UTF - 8
                                    

#12 JavaScript::Write (size: 58, repeated: 2) - SHA256: d71662710f1384426e6912db7cba0c19906accc9279e557ce50da0a7d86248b1

                                        & loc = http % 3 A //palashranjan.prv.pl/anal-ass-teen-tight.html
                                    

#13 JavaScript::Write (size: 11, repeated: 7) - SHA256: d778419b5397605c21f7bb7f0475e79b701b8f0875051b5f8bda9862c565a474

                                        '></script>
                                    

#14 JavaScript::Write (size: 874, repeated: 1) - SHA256: 467e64d6a2ceaee89d5e83f187cb482a9bb43621414cb82539416165203c9663

                                        <!--  Begin Rubicon Project Tag -->
<!--  Site: PN Grupa Pino   Zone: prvpl_middle_ATF   Size: 160x600  -->
<!--  PLACEMENT: Above the Fold;   -->
< script language = "JavaScript"
type = "text/javascript" >
    rp_account = '10163';
rp_site = '132208';
rp_zonesize = '624724-9';
rp_adtype = 'js';
rp_smartfile = '[SMART FILE URL]';
rp_kw = 'prvpl';
rp_inventory = {
    Site: 'prvpl'
}; < /script> < script type = "text/javascript"
src = "https://ads.rubiconproject.com/ad/10163.js" > < /script>
    <!--  End Rubicon Project Tag --><div id='beacon_2915c526c6' style='position: absolute; left: 0px; top: 0px; visibility: hidden;'><img src='https://ox2.sterta.pl/www/delivery/lg.php?bannerid=810&amp;campaignid=222&amp;zoneid=245&amp;loc=http%3A%2F%2Fpalashranjan.prv.pl%2Fanal-ass-teen-tight.html&amp;cb=2915c526c6' width='0' height='0' alt='' style='width: 0px; height: 0px;' /></div>
                                    

#15 JavaScript::Write (size: 872, repeated: 1) - SHA256: 06c457f2447b091c5a3e05c122478e27ab1945254ce7e47c7fdeb88f5aa19064

                                        <!--  Begin Rubicon Project Tag -->
<!--  Site: PN Grupa Pino   Zone: prvpl_top_ATF   Size: 750x200  -->
<!--  PLACEMENT: Above the Fold;   -->
< script language = "JavaScript"
type = "text/javascript" >
    rp_account = '10163';
rp_site = '132208';
rp_zonesize = '624722-40';
rp_adtype = 'js';
rp_smartfile = '[SMART FILE URL]';
rp_kw = 'prvpl';
rp_inventory = {
    Site: 'prvpl'
}; < /script> < script type = "text/javascript"
src = "https://ads.rubiconproject.com/ad/10163.js" > < /script>
    <!--  End Rubicon Project Tag --><div id='beacon_bdbe87917b' style='position: absolute; left: 0px; top: 0px; visibility: hidden;'><img src='https://ox2.sterta.pl/www/delivery/lg.php?bannerid=809&amp;campaignid=222&amp;zoneid=223&amp;loc=http%3A%2F%2Fpalashranjan.prv.pl%2Fanal-ass-teen-tight.html&amp;cb=bdbe87917b' width='0' height='0' alt='' style='width: 0px; height: 0px;' /></div>
                                    

#16 JavaScript::Write (size: 888, repeated: 1) - SHA256: 0cf854087c4f68ca50d53a71967bc819b712c74c04ec7c03b8572f6fc43be24c

                                        <!-- kod w miejscu placementu prv.pl_ros_dbb -->
< div class = "spolecznoscinet"
id = "spolecznosci-337" > < /div>
    <!-- kod przed zamkniciem body -->
    < script type = "text/javascript" >
    var _qasp = _qasp || [];
_qasp.push('go');
_qasp.push(['setPAID', 'sadprv']); < /script> < script type = "text/javascript" >
    (function(d, x, a) {
        var z = d.createElement(x);
        z.type = 'text/javascript';
        z.src = a;
        var s = d.getElementsByTagName(x)[0];
        s.parentNode.insertBefore(z, s);
    })(document, 'script', 'https://s.spolecznosci.net/js/core2-min.20.js'); < /script><div id='beacon_0350906181' style='position: absolute; left: 0px; top: 0px; visibility: hidden;'><img src='http:/ / ox2.sterta.pl / www / delivery / lg.php ? bannerid = 624 & amp;
campaignid = 194 & amp;
zoneid = 32 & amp;
loc = http % 3 A % 2 F % 2 Fpalashranjan.prv.pl % 2 Fanal - ass - teen - tight.html & amp;
cb = 0350906181 ' width='
0 ' height='
0 ' alt='
' style='
width: 0 px;
height: 0 px;
' /></div>
                                    

#17 JavaScript::Write (size: 325, repeated: 1) - SHA256: 7e008e778f13ebf49b07acc728f3e7ed31ece1d0cd38d27aea6772bcd2abc8e3

                                        < a href = "http://ox2.sterta.pl/www/delivery/ck.php?oaparams=2__bannerid=273__zoneid=27__cb=35eb81c4fd__oadest=https://clk.tradedoubler.com/click?p=64960&a=2354327&g=24403710&pools=510263,385741"
target = "_blank" > < img border = "0"
src = "https://vht.tradedoubler.com/file/64960/2018/10/29/28955/750x200.jpg"
title = "eMAG&#46;pl" > < /a>
                                    

#18 JavaScript::Write (size: 673, repeated: 1) - SHA256: 8ed8f66a1bff8bae64211f92557423d9178c710841f299da68f43de519be2bae

                                        < div data - rp - type = "trp-display-creative"
data - rp - impression - id = "a6689d52-cf70-4e1a-b86c-31e9f6d89b66"
data - rp - aqid = "0:"
data - rp - acct - id = "10163" >
    < div style = "width: 0; height: 0; overflow: hidden;" > < img border = "0"
width = "1"
height = "1"
src = "http://beacon-eu2.rubiconproject.com/beacon/d/a6689d52-cf70-4e1a-b86c-31e9f6d89b66?oo=0&accountId=10163&siteId=132208&zoneId=624722&sizeId=40&e=6A1E40E384DA563B536B6D6A7AE6518039E2D4C44EDF90E4E17A1A68F2117D3DCB3B7CC7734C8FAB1BF2E35C8C639119ABCC67E9E609CD7C162064C50A72CC3EBC35454CF3DF3D2AE0F9CDFE437E96D6AC237D6FA0EBFC9A6240B348FC26EBCF49A3733AC84B7E2D0B244C7A58CB5AE8420AF219C712995483009FDB9DE7981633F8630F2FDB6069"
alt = "" / > < /div>
                                    

#19 JavaScript::Write (size: 827, repeated: 1) - SHA256: fabb4d6213dda5ddfdffc4ffbd5e3c2b989cdb7c61f3c41c3295f7f9ab394bf4

                                        < div data - rp - type = "trp-display-creative"
data - rp - impression - id = "e75133a7-2b94-4821-a7e6-15eb3371f728"
data - rp - aqid = "2676:25464867"
data - rp - acct - id = "10163" >
    < div style = "width: 0; height: 0; overflow: hidden;" > < img border = "0"
width = "1"
height = "1"
src = "http://beacon-eu2.rubiconproject.com/beacon/d/e75133a7-2b94-4821-a7e6-15eb3371f728?oo=0&accountId=10163&siteId=132208&zoneId=624724&sizeId=9&e=6A1E40E384DA563B6BB84E49B36DF15BC0E45313F23BF7F72CF7C5C968F76CE643AF21250AD5F1882CCEF3E43DCEB4E0ABCC67E9E609CD7C162064C50A72CC3EBC35454CF3DF3D2A3826CEC50550EE98EE77BEFE3AEB37E876F19EE37E4F5F0C8977453E5C43D349F616859E1B0F904F99B821619BD6794A5F74221EB30DB8CECEF7D0EB7E229D7345A002F28FD38E01C906E3D99347F00C1B306DECBE4FFA6986F7D9285AA10EC45B649108E47836AEB1C1FEFB4EDFEA1EECEFBAED4F45A61F8A0A4B185A425FC3CDA10306204D320B"
alt = "" / > < /div>
                                    

#20 JavaScript::Write (size: 86, repeated: 1) - SHA256: be5784110ba3e20cd4589ef94a0c65ebea058d3362262da625744b0b1d5d71d9

                                        < div id = "+ADFP1x"
style = "width:160px;height:600px;" > < /div><i style="display:none"></i >
                                    

#21 JavaScript::Write (size: 2720, repeated: 1) - SHA256: e93e78287e7b6b093bd22096f2feead0d2b979c1e259658059f578a19c908c91

                                        < div id = "left_box"
style = "display:none;" > <!-- kod w miejscu placementu Prv.pl_ROS_Skyscraper2 -->
    < div class = "spolecznoscinet"
id = "spolecznosci-1888" > < /div> < script type = "text/javascript" >
    var _qasp = _qasp || [];
_qasp.push('go');
_qasp.push(['setPAID', 'sadprv']); < /script> < script type = "text/javascript" >
    (function(d, x, a) {
        var z = d.createElement(x);
        z.type = 'text/javascript';
        z.src = a;
        var s = d.getElementsByTagName(x)[0];
        s.parentNode.insertBefore(z, s);
    })(document, 'script', 'https://s.spolecznosci.net/js/core2-min.20.js'); < /script><div id='beacon_350a3109ee' style='position: absolute; left: 0px; top: 0px; visibility: hidden;'><img src='http:/ / ox2.sterta.pl / www / delivery / lg.php ? bannerid = 901 & amp;
campaignid = 194 & amp;
zoneid = 81 & amp;
loc = http % 3 A % 2 F % 2 Fpalashranjan.prv.pl % 2 Fanal - ass - teen - tight.html & amp;
cb = 350 a3109ee ' width='
0 ' height='
0 ' alt='
' style='
width: 0 px;
height: 0 px;
' /></div><img src="https://ad.prv.pl/img/close_x.png" title="zamknij reklame" alt="zamknij" style="border: 1px solid #FF0000;position: relative;bottom: 18px;right: -15px;cursor: pointer;"  class="button_close"> < /div> < script type = "text/javascript" >
    function wndsize() {
        var w = 0;
        var h = 0;
        if (!window.innerWidth) {
            if (!(document.documentElement.clientWidth == 0)) {
                w = document.documentElement.clientWidth;
                h = document.documentElement.clientHeight;
            } else {
                w = document.body.clientWidth;
                h = document.body.clientHeight;
            }
        } else {
            w = window.innerWidth;
            h = window.innerHeight;
        }
        return {
            width: w,
            height: h
        };
    }
var w = document.body.clientWidth;
var wsize = wndsize();
var top_margin = 0;
var box_height = 600;
var box_width = 160;
var content_width = 1040;
top_margin = ((wsize.height - box_height) / 2);
$(document).ready(function() {
    var left_margin = (wsize.width - (content_width + (2 * box_width))) / 2;
    var left_box = document.getElementById('left_box');
    left_box.setAttribute('style', '* position: absolute !important;z-index: 2;text-align: right !important;');
    left_box.style.position = 'fixed';
    left_box.style.left = left_margin + 'px';
    left_box.style.width = box_width + 'px';
    left_box.style.height = screen.height + 'px';
    left_box.style.top = top_margin + 'px';
    left_box.style.display = 'block';
});

function resize_handler_left() {
    var wsize = wndsize();
    var top_margin = ((wsize.height - box_height) / 2);
    var left_margin = (wsize.width - (content_width + (2 * box_width))) / 2;
    var left_box = document.getElementById('left_box');
    left_box.style.left = left_margin + 'px';
    left_box.style.top = top_margin + 'px';
}
if ('attachEvent' in window) {
    window.attachEvent('onresize', resize_handler_left);
} else if ('addEventListener' in window) {
    window.addEventListener('resize', resize_handler_left);
} else {
    window.onresize = resize_handler_left;
} < /script>
                                    

#22 JavaScript::Write (size: 2693, repeated: 1) - SHA256: 4f053d6ee4745ce6c6e9bb12eda9ac4fa33f0b4bcc56c6075e031d7e23bc340d

                                        < div id = "right_box"
style = "display:none;text-align:left;" > < div class = "spolecznoscinet"
id = "spolecznosci-421" > < /div> < script type = "text/javascript" >
    var _qasp = _qasp || [];
_qasp.push('go');
_qasp.push(['setPAID', 'sadprv']); < /script> < script type = "text/javascript" >
    (function(d, x, a) {
        var z = d.createElement(x);
        z.type = 'text/javascript';
        z.src = a;
        var s = d.getElementsByTagName(x)[0];
        s.parentNode.insertBefore(z, s);
    })(document, 'script', 'https://s.spolecznosci.net/js/core2-min.20.js'); < /script><div id='beacon_f252f9d420' style='position: absolute; left: 0px; top: 0px; visibility: hidden;'><img src='http:/ / ox2.sterta.pl / www / delivery / lg.php ? bannerid = 707 & amp;
campaignid = 194 & amp;
zoneid = 82 & amp;
loc = http % 3 A % 2 F % 2 Fpalashranjan.prv.pl % 2 Fanal - ass - teen - tight.html & amp;
cb = f252f9d420 ' width='
0 ' height='
0 ' alt='
' style='
width: 0 px;
height: 0 px;
' /></div><img src="https://ad.prv.pl/img/close_x.png" title="zamknij reklame" alt="zamknij" style="border: 1px solid #ff0000;position: relative;bottom: 19px;left: -16px;cursor: pointer;" class="button_close"> < /div> < script type = "text/javascript" >
    function wndsize() {
        var w = 0;
        var h = 0;
        if (!window.innerWidth) {
            if (!(document.documentElement.clientWidth == 0)) {
                w = document.documentElement.clientWidth;
                h = document.documentElement.clientHeight;
            } else {
                w = document.body.clientWidth;
                h = document.body.clientHeight;
            }
        } else {
            w = window.innerWidth;
            h = window.innerHeight;
        }
        return {
            width: w,
            height: h
        };
    }
var w = document.body.clientWidth;
var wsize = wndsize();
var top_margin = 0;
var box_height = 600;
var box_width = 160;
var content_width = 1040;
top_margin = ((wsize.height - box_height) / 2);
$(document).ready(function() {
    var left_margin = (wsize.width - (content_width + (2 * box_width))) / 2;
    var left_box = document.getElementById('right_box');
    right_box.setAttribute('style', '* position: absolute !important;z-index: 2;text-align:left !important;');
    right_box.style.position = 'fixed';
    right_box.style.right = left_margin + 'px';
    right_box.style.width = box_width + 'px';
    right_box.style.height = screen.height + 'px';
    right_box.style.top = top_margin + 'px';
    right_box.style.display = 'block';
});

function resize_handler_right() {
    var wsize = wndsize();
    var top_margin = ((wsize.height - box_height) / 2);
    var left_margin = (wsize.width - (content_width + (2 * box_width))) / 2;
    var right_box = document.getElementById('right_box');
    right_box.style.right = left_margin + 'px';
    right_box.style.top = top_margin + 'px';
}
if ('attachEvent' in window) {
    window.attachEvent('onresize', resize_handler_right);
} else if ('addEventListener' in window) {
    window.addEventListener('resize', resize_handler_right);
} else {
    window.onresize = resize_handler_right;
} < /script>
                                    

#23 JavaScript::Write (size: 347, repeated: 1) - SHA256: 47300c20be9b837b426a118e286b22c6e33fba0672df775b8c1ea2d34ecb1f8e

                                        < div id = 'beacon_d637f948e3'
style = 'position: absolute; left: 0px; top: 0px; visibility: hidden;' > < img src = 'http://ox2.sterta.pl/www/delivery/lg.php?bannerid=0&amp;campaignid=0&amp;zoneid=44&amp;loc=http%3A%2F%2Fpalashranjan.prv.pl%2Fanal-ass-teen-tight.html&amp;cb=d637f948e3'
width = '0'
height = '0'
alt = ''
style = 'width: 0px; height: 0px;' / > < /div>
                                    

#24 JavaScript::Write (size: 283, repeated: 1) - SHA256: 4c3f1cd9667808188ac11916c7b36a5c18c05acc99cc0f65f368918f337e6417

                                        < script type = "text/javascript"
src = "http://optimized-by.rubiconproject.com/a/10163/132208/624722-40.js?&cb=0.8108004086122413&tk_st=1&rf=http%3A//palashranjan.prv.pl/anal-ass-teen-tight.html&rp_s=c&kw=prvpl&tg_i.Site=prvpl&p_pos=atf&p_screen_res=1176x885&ad_slot=132208_40" > < /script>
                                    

#25 JavaScript::Write (size: 281, repeated: 1) - SHA256: 5503b6bd7dd9b944c72d348cc402c30f3ed5a075858e341756c35e0b06fae706

                                        < script type = "text/javascript"
src = "http://optimized-by.rubiconproject.com/a/10163/132208/624724-9.js?&cb=0.4949369812131017&tk_st=1&rf=http%3A//palashranjan.prv.pl/anal-ass-teen-tight.html&rp_s=c&kw=prvpl&tg_i.Site=prvpl&p_pos=atf&p_screen_res=1176x885&ad_slot=132208_9" > < /script>
                                    

#26 JavaScript::Write (size: 104, repeated: 1) - SHA256: f8f04f68f653775d03ece9798b103203adc6d760717e788ef7d03cc2cc342684

                                        < script type = "text/javascript"
src = "http://s1.adform.net/stoat/613/s1.adform.net/bootstrap.js" > < /script>
                                    

#27 JavaScript::Write (size: 1293, repeated: 1) - SHA256: 66dbdf130e5e08fab850183c7945193fce15234d56e18d89c5292a5d9bda129b

                                        < script type = "text/javascript"
src = "http://track.adform.net/wpf/v2/N8a44j1c.lY5BNvcKyAdMUDFBpBeA0fUm0NUbNiqGEtrs1OeESG.B9H_jftckkCoq0NUbNiqUU8jCOrVQdg1kzoMpwoNJ9z4oYYLzZ1kzDlSgXTI1TA2wv4qnvtCsABIySy.aP3xihU_nvOegolzuTDRI_311cJy9qQtEwJ3tDNACCySy.aPjftckoOPIDxjAjEOSyS2SQbFYUMnGWpwoNSUC56MnGWVQdg3ZLQ0I0916eOGTcDhmr_nwxIrvTdPQp4UdHz15tHmVjpuajRgDQ4mktahY9ay.25.ea8RzvwPraefsruX6MmmjoaUeASFQ_A91zJlfgBG8qCMns_Gj5fmVLHi7Zv5ftvqU1jTcouU.AxzXgLz4QCwby92yMUDxwt.nJmcsDxqhyA_r_LwwKdBvpZfWfUXtStKjE4PIDzmkqzQ1NNlr4WySXvOyCmSh_vrHUTCyxGdoy.zwyUTzAKhJxRUfsyiqeqwarpO9sU98nC5ZyzDGG5e3NlY52DLrV9BNorW6Ts8kIRsLSTu_XVA4.L9.gJ0Nc1lF4XVPyPDI_XV4A90Nc6MeONc39lF7KXV401gJ.dTcKXV4jMk.EL0/adfserve/?CC=1&bn=25464867;rtbwp=F8E602E88579FAD4;rtbdata=hZCx8WgGkKfoBFukTTKVnOTCy8epk9KMXhyoGumQEe-X7vp-Oq5BwVbYwZKKydPGvuuNhtID8SM_aQTQ66CUJ7Itsrm5MM9zfN2LCHptKZoN1nd2vSl4V5CYKCBNghFGFfaVC_gMsd79ZMDuNCY2H2ORdsxEUKIIezBU_azUJc_uctZ9_b8-JteCI7QAz4xhqFj_MmnWufvrLgtmos69lnaUu8FworLg3CmDY90VXUlf-ywt7aMASSoUIuWa1x-aJ-pxjpm2NYDSm_MygVJ8g5YSSfGpIAn90;oobclicktrack=http%3a%2f%2fbeacon-nf.rubiconproject.com%2fbeacon%2fv2%2ft%2f0%2fe75133a7-2b94-4821-a7e6-15eb3371f728%2f;js=1;adfxid=1x;1064;set=en-US|en-US|1176X885|10.0452|150|600|24|8|3|7|0;fd=0|3&CREFURL=http%3A%2F%2Fpalashranjan.prv.pl%2Fanal-ass-teen-tight.html" > < /script>
                                    

#28 JavaScript::Write (size: 250, repeated: 1) - SHA256: be91f4efa9b2cc5a22df1aab061dc1bfb4c6275a67c43e01fd247a220235620c

                                        < script type = "text/javascript"
src = "https://imppl.tradedoubler.com/imp?type(js)pool(510263)a(2354327)preurl(http://ox2.sterta.pl/www/delivery/ck.php?oaparams=2__bannerid=273__zoneid=27__cb=35eb81c4fd__oadest=)778212803"
charset = "ISO-8859-1" > < /script>
                                    

#29 JavaScript::Write (size: 727, repeated: 1) - SHA256: 8b7abff2c965342bc43aac9b9d96230350887aa6619e667ddb49e3b87626311f

                                        < script type = "text/javascript" >
    var uri = 'https://imppl.tradedoubler.com/imp?type(js)pool(510263)a(2354327)preurl(http://ox2.sterta.pl/www/delivery/ck.php?oaparams=2__bannerid=273__zoneid=27__cb=35eb81c4fd__oadest=)' + new String(Math.random()).substring(2, 11);
document.write('<sc' + 'ript type="text/javascript" src="' + uri + '" charset="ISO-8859-1"></sc' + 'ript>'); < /script><div id='beacon_35eb81c4fd' style='position: absolute; left: 0px; top: 0px; visibility: hidden;'><img src='http:/ / ox2.sterta.pl / www / delivery / lg.php ? bannerid = 273 & amp;
campaignid = 123 & amp;
zoneid = 27 & amp;
loc = http % 3 A % 2 F % 2 Fpalashranjan.prv.pl % 2 Fanal - ass - teen - tight.html & amp;
cb = 35e b81c4fd ' width='
0 ' height='
0 ' alt='
' style='
width: 0 px;
height: 0 px;
' /></div>
                                    

#30 JavaScript::Write (size: 77, repeated: 5) - SHA256: e031a23b01a07e92eee9e9504efa6ab21eac4b3552f81266e0ed94fd96c1e63b

                                        < script type = 'text/javascript'
src = 'http://ox2.sterta.pl/www/delivery/ajs.php
                                    

#31 JavaScript::Write (size: 516, repeated: 1) - SHA256: 3773d3a297420608cc45754d95d9a5cd984bdee2f2fb6ede00b3745b18bc2f9c

                                        < script type = 'text/javascript'
src = 'http://track.adform.net/adfscript/?bn=25464867;rtbwp=F8E602E88579FAD4;rtbdata=hZCx8WgGkKfoBFukTTKVnOTCy8epk9KMXhyoGumQEe-X7vp-Oq5BwVbYwZKKydPGvuuNhtID8SM_aQTQ66CUJ7Itsrm5MM9zfN2LCHptKZoN1nd2vSl4V5CYKCBNghFGFfaVC_gMsd79ZMDuNCY2H2ORdsxEUKIIezBU_azUJc_uctZ9_b8-JteCI7QAz4xhqFj_MmnWufvrLgtmos69lnaUu8FworLg3CmDY90VXUlf-ywt7aMASSoUIuWa1x-aJ-pxjpm2NYDSm_MygVJ8g5YSSfGpIAn90;OOBClickTrack=http://beacon-nf.rubiconproject.com/beacon/v2/t/0/e75133a7-2b94-4821-a7e6-15eb3371f728/' > < /script>
                                    

#32 JavaScript::Write (size: 78, repeated: 2) - SHA256: 44d3ac878c505add25b83a61fc8d5ca624d6b832034ee1c05513f638a803fcd1

                                        < script type = 'text/javascript'
src = 'https://ox2.sterta.pl/www/delivery/ajs.php
                                    

#33 JavaScript::Write (size: 1002, repeated: 1) - SHA256: dc6fa7a946a68c733830b127f505845bfb2c5f55f35b15e37ca459294d605a24

                                        < script type = 'text/javascript' > <!--//<![CDATA[
    var m3_u = (location.protocol == 'https:' ? 'https://ox2.sterta.pl/www/delivery/ajs.php' : 'http://ox2.sterta.pl/www/delivery/ajs.php');
var m3_r = Math.floor(Math.random() * 99999999999);
if (!document.MAX_used) document.MAX_used = ',';
document.write("<scr" + "ipt type='text/javascript' src='" + m3_u);
document.write("?zoneid=253");
document.write('&amp;cb=' + m3_r);
if (document.MAX_used != ',') document.write("&amp;exclude=" + document.MAX_used);
document.write(document.charset ? '&amp;charset=' + document.charset : (document.characterSet ? '&amp;charset=' + document.characterSet : ''));
document.write("&amp;loc=" + escape(window.location));
if (document.referrer) document.write("&amp;referer=" + escape(document.referrer));
if (document.context) document.write("&context=" + escape(document.context));
if (document.mmm_fo) document.write("&amp;mmm_fo=1");
document.write("'><\/scr" + "ipt>");
//]]>--></script>
                                    

#34 JavaScript::Write (size: 124, repeated: 1) - SHA256: 4b582d44340ca6a455fbb2d68028e1fd47706486ecc02132c074b6203141b88d

                                        < script type = 'text/javascript' > rp_requests = new RubiconAdServing.Requests();
rp_requests.sendRequest('624722-40'); < /script>
                                    

#35 JavaScript::Write (size: 123, repeated: 1) - SHA256: baa13aec7e2c77ac6b8afc178e7d492e7f94a462accd4c5313f16cd56b177ca2

                                        < script type = 'text/javascript' > rp_requests = new RubiconAdServing.Requests();
rp_requests.sendRequest('624724-9'); < /script>
                                    

#36 JavaScript::Write (size: 2263, repeated: 1) - SHA256: 209e5d2da71e3c9b21fc11a81b031c3502f67f1c2623efa118545e5247bfd243

                                        < style > body {
    margin: 0;padding: 0
} < /style><script type="text/javascript
">var _qasp = {iframe:true};_qasp.push_top=function(a,b){if(typeof(parent.postMessage)=="
function ") parent.postMessage("
pushxd: "+a+"~"+b," * ");};_qasp.push=function(a){if(a !== null && typeof(a) == "
object " && "
push " in a) {  if(a.length == 2) {this.push_top(a[0], a[1]);} else if(a.length==1) {this.push_top(a[0]);}  else if(a.length > 2) {this.push_top(a.shift(), a.join("~"));} else if(a.length>=1) {this.push_top(a[0]);}} else if(typeof(a) == "
string ") {this.push_top(a);}return 1;};var noad=function(){_qasp.push(["
noad ", 1888, 193575])};</script><script type="
text / javascript ">(new Image()).src=" //a.spolecznosci.net/avd/122748/193575/11001/1888/?o=1541608520834";</script>
    < noscript > < img height = "1"
width = "1"
style = "display:none;"
src = "//a.spolecznosci.net/avd/122748/193575/11001/1888/?o=1541608520834" > < /noscript> < div style = "height:0!important;width:100%;min-height:0!important;text-align:center;" > < /div> < style > # sad_1888 {
        text - align: center;
    } < /style> < script type = 'text/javascript' > <!--//<![CDATA[
    var m3_u = (location.protocol == 'https:' ? 'https://ox2.sterta.pl/www/delivery/ajs.php' : 'https://ox2.sterta.pl/www/delivery/ajs.php');
var m3_r = Math.floor(Math.random() * 99999999999);
if (!document.MAX_used) document.MAX_used = ',';
document.write("<scr" + "ipt type='text/javascript' src='" + m3_u);
document.write("?zoneid=245");
document.write('&cb=' + m3_r);
if (document.MAX_used != ',') document.write("&exclude=" + document.MAX_used);
document.write(document.charset ? '&charset=' + document.charset : (document.characterSet ? '&charset=' + document.characterSet : ''));
document.write("&loc=" + escape(window.location));
if (document.referrer) document.write("&referer=" + escape(document.referrer));
if (document.context) document.write("&context=" + escape(document.context));
if (document.mmm_fo) document.write("&mmm_fo=1");
document.write("'><\/scr" + "ipt>");
//]]>--></script><noscript><a href='https://ox2.sterta.pl/www/delivery/ck.php?n=a593321d&cb=INSERT_RANDOM_NUMBER_HERE' target='_blank'><img src='https://ox2.sterta.pl/www/delivery/avw.php?zoneid=245&cb=INSERT_RANDOM_NUMBER_HERE&n=a593321d' border='0' alt='' /></a></noscript>
                                    

#37 JavaScript::Write (size: 2256, repeated: 1) - SHA256: bf59c781c29a32d2c34353865c590195d2b2ec74d5d12208ba306d093b11e452

                                        < style > body {
    margin: 0;padding: 0
} < /style><script type="text/javascript
">var _qasp = {iframe:true};_qasp.push_top=function(a,b){if(typeof(parent.postMessage)=="
function ") parent.postMessage("
pushxd: "+a+"~"+b," * ");};_qasp.push=function(a){if(a !== null && typeof(a) == "
object " && "
push " in a) {  if(a.length == 2) {this.push_top(a[0], a[1]);} else if(a.length==1) {this.push_top(a[0]);}  else if(a.length > 2) {this.push_top(a.shift(), a.join("~"));} else if(a.length>=1) {this.push_top(a[0]);}} else if(typeof(a) == "
string ") {this.push_top(a);}return 1;};var noad=function(){_qasp.push(["
noad ", 337, 131519])};</script><script type="
text / javascript ">(new Image()).src=" //a.spolecznosci.net/avd/54867/131519/11001/337/?o=1541608520834";</script>
    < noscript > < img height = "1"
width = "1"
style = "display:none;"
src = "//a.spolecznosci.net/avd/54867/131519/11001/337/?o=1541608520834" > < /noscript> < div style = "height:0!important;width:100%;min-height:0!important;text-align:center;" > < /div> < style > # sad_337 {
        text - align: center;
    } < /style> < script type = 'text/javascript' > <!--//<![CDATA[
    var m3_u = (location.protocol == 'https:' ? 'https://ox2.sterta.pl/www/delivery/ajs.php' : 'https://ox2.sterta.pl/www/delivery/ajs.php');
var m3_r = Math.floor(Math.random() * 99999999999);
if (!document.MAX_used) document.MAX_used = ',';
document.write("<scr" + "ipt type='text/javascript' src='" + m3_u);
document.write("?zoneid=223");
document.write('&cb=' + m3_r);
if (document.MAX_used != ',') document.write("&exclude=" + document.MAX_used);
document.write(document.charset ? '&charset=' + document.charset : (document.characterSet ? '&charset=' + document.characterSet : ''));
document.write("&loc=" + escape(window.location));
if (document.referrer) document.write("&referer=" + escape(document.referrer));
if (document.context) document.write("&context=" + escape(document.context));
if (document.mmm_fo) document.write("&mmm_fo=1");
document.write("'><\/scr" + "ipt>");
//]]>--></script><noscript><a href='https://ox2.sterta.pl/www/delivery/ck.php?n=a78415d9&cb=INSERT_RANDOM_NUMBER_HERE' target='_blank'><img src='https://ox2.sterta.pl/www/delivery/avw.php?zoneid=223&cb=INSERT_RANDOM_NUMBER_HERE&n=a78415d9' border='0' alt='' /></a></noscript>
                                    

#38 JavaScript::Write (size: 11, repeated: 1) - SHA256: 6d9a954f79da1132473a63cbac55865d93b1b06e078eccf89746862582585b13

                                        ? zoneid = 223
                                    

#39 JavaScript::Write (size: 11, repeated: 1) - SHA256: 50c4db91062a06215704ffae7011f11517ba104df8654a386f8f5beb3c411089

                                        ? zoneid = 245
                                    

#40 JavaScript::Write (size: 11, repeated: 1) - SHA256: 3b6c87d4053fefbd45fe35e021cbece885c1f8c3c3d05247273eb98952ac5f1f

                                        ? zoneid = 253
                                    

#41 JavaScript::Write (size: 10, repeated: 1) - SHA256: 338ba8ac3964539192fcdddf65a2019c4af8938e67335fe8f26477567e11c417

                                        ? zoneid = 32
                                    

#42 JavaScript::Write (size: 10, repeated: 1) - SHA256: ad81639dd29f2b36713408f1fc00c11e6b05e67e582aa2022f0cf38926af0750

                                        ? zoneid = 44
                                    

#43 JavaScript::Write (size: 10, repeated: 1) - SHA256: 0f7666bfbcad08e59652620e18803c8dbc17a40bc538a0d41f62b61f50530668

                                        ? zoneid = 81
                                    

#44 JavaScript::Write (size: 10, repeated: 1) - SHA256: b17535b2f8d05260b8615cf95e59d4e74e344bb1b86e58441f820f3208f1a5d0

                                        ? zoneid = 82
                                    


HTTP Transactions (76)


Request Response
                                        
                                            GET /anal-ass-teen-tight.html HTTP/1.1 
Host: palashranjan.prv.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         188.165.206.157
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4860
Md5:    52ca09943a8e70e41fc13948ca9c3242
Sha1:   1d32efed8884884bbf7cb3e7ced3115567ffbb64
Sha256: 03431d2e11f782d469c782a5412c00a7543f37c76b663484d2aa520e1d0592bd

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /js/jquery-1.8.2.min.js HTTP/1.1 
Host: palashranjan.prv.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         188.165.206.157
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:16 GMT
Last-Modified: Wed, 28 May 2014 09:48:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5385b0d0-16cfc"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   38787
Md5:    7cd754ada95ce6442ae4955b27f505d5
Sha1:   501faa874aad1b926cccd8c9789f9ee1926e3414
Sha256: 24744c024f75c24a5238865d97d94e7e02a85cc84e4bcd78c8e865e1a6002a81

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /rodo.js HTTP/1.1 
Host: ad.prv.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         188.165.206.157
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:17 GMT
Last-Modified: Tue, 19 Jun 2018 09:59:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5b28d3f2-25d4"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2945
Md5:    4e69a04fd5f4262f9f7e945196aba997
Sha1:   a1d512315aa57bda711eb4b2d90a5124a5f48eb6
Sha256: 085b89db143183590cb58462176255cba399a18ed888af19aca052605d459fc7
                                        
                                            GET /static/img/main/grupa_pino.png HTTP/1.1 
Host: error.prv.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         188.165.206.157
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:17 GMT
Content-Length: 10369
Last-Modified: Tue, 19 Aug 2014 12:10:44 GMT
Connection: keep-alive
Etag: "53f33ec4-2881"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 600 x 25, 8-bit/color RGBA, non-interlaced
Size:   10369
Md5:    9767ee61556b65a7e3051c361c29af0d
Sha1:   9e92d5f0ea12a13f8acda80d4981f05a7a026ab0
Sha256: 377fd8ca6c95f77ab4ff1da63edd9cec59212ff006c551f599a3ff73e02794db
                                        
                                            GET /dane/c590d970c64e8062e81657ecda49090bdf950335.JPG HTTP/1.1 
Host: cdn.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         178.32.206.242
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:16 GMT
Content-Length: 43429
Last-Modified: Mon, 07 Jan 2013 12:22:33 GMT
Connection: keep-alive
Etag: "50eabe09-a9a5"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   43429
Md5:    9b01a820c3c8fc877d8171cacb05bf65
Sha1:   0c35e2525be907022a49d8a569b47179f3c53f84
Sha256: 0aa1baefdbe227c1a06f55f5a5546d99773183238592dd8e46ac7a51365b39a9
                                        
                                            GET /stats.php?url=palashranjan.prv.pl&t=a4&file=stats.js HTTP/1.1 
Host: stats.grupapino.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         188.165.206.157
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: 01074f47bc1aee350d6a16052562fe6fac034ef9=f71a3bc2c81fbbb23b563c244e4dea78; expires=Thu, 08-Nov-2018 16:35:17 GMT; Max-Age=86400


--- Additional Info ---
Magic:  ASCII C program text, with no line terminators
Size:   34
Md5:    687d91819e03291e884fd70a427f032e
Sha1:   f1668432d5cb1ab3919239fe57f8d8dc21d34f91
Sha256: b199d7759862fc5ab3f0e3cad9aadf3830199e5f612296ab0096c02045280787
                                        
                                            GET /static/img/main/logo_white.png HTTP/1.1 
Host: error.prv.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         188.165.206.157
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:17 GMT
Content-Length: 1848
Last-Modified: Tue, 19 Aug 2014 12:10:44 GMT
Connection: keep-alive
Etag: "53f33ec4-738"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 124 x 30, 8-bit/color RGBA, non-interlaced
Size:   1848
Md5:    b3382dabf4b0a07d0af68613b296efce
Sha1:   5453843be2fd68ce5eda5418b9998cad0eb0bef5
Sha256: 321e8d4b1cc435163eca4c5e1cdf52850ad5c135aa94576a6591d1db557e140c
                                        
                                            GET /server.php?type=billsource=palashranjan.prv.pl&medium=alias-404 HTTP/1.1 
Host: ad.prv.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         188.165.206.157
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1072
Md5:    3eff2d16d19dc2327bc668fa4ab569c5
Sha1:   c05e4070db57348905eec00f744754c72b44562f
Sha256: 204465d3b3910617172de0cfeca1c10c3432e7b2fabfaef476973c18b7d7a33b
                                        
                                            GET /gtm.js?id=GTM-K2DLWR HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         216.58.207.232
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Access-Control-Allow-Origin: http://www.googletagmanager.com
Access-Control-Allow-Headers: Cache-Control
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Wed, 07 Nov 2018 16:35:17 GMT
Expires: Wed, 07 Nov 2018 16:35:17 GMT
Cache-Control: private, max-age=900
Server: Google Tag Manager (scaffolding)
Content-Length: 27463
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   27463
Md5:    0f952b05435969362e2c29517fbfc8ae
Sha1:   3842055dfe17fe63bebe4cd622e73f793337ba0e
Sha256: e56de81a6fad2b4bbbc5e8a5fc66f45090fb1b39bbc31971c6447ccdf27a9a03
                                        
                                            GET /img/deal_logo.png HTTP/1.1 
Host: ad.prv.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ad.prv.pl/server.php?type=billsource=palashranjan.prv.pl&medium=alias-404

                                         
                                         188.165.206.157
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:17 GMT
Content-Length: 8085
Last-Modified: Thu, 08 Dec 2016 10:08:56 GMT
Connection: keep-alive
Etag: "58493138-1f95"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 185 x 84, 8-bit/color RGBA, non-interlaced
Size:   8085
Md5:    f96bcbec49b334a28f8bf28aa0167c36
Sha1:   b640a3514671be73def13bba03defd4b85f8c2d4
Sha256: 25b72e3ff015fd012c4d193950f34598cd7507c1e8b0df7cf2ec3e2480eab96c
                                        
                                            GET /www/delivery/ajs.php?zoneid=32&cb=27095129555&charset=UTF-8&loc=http%3A//palashranjan.prv.pl/anal-ass-teen-tight.html HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; path=/ OAID=11bc35f738b930640e461d3b55d0a797; expires=Thu, 07-Nov-2019 16:35:17 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  UTF-8 Unicode text, with very long lines
Size:   1267
Md5:    0336de7ebb087a8932a56c021de9e7fe
Sha1:   1f6ed4b7d49359fc10aadafe65f17695e39c4d66
Sha256: 900fc41b4b03c18b971ae84b6d15b89c327f1aaa63d732eeae085c14c55edddd
                                        
                                            GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2Fprvpl&show_faces=false&layout=button_count&ampwidth=150&send=false HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         31.13.72.36
HTTP/1.1 302 Found
Content-Type: text/html; charset="utf-8"
                                        
Location: https://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2Fprvpl&show_faces=false&layout=button_count&ampwidth=150&send=false
X-FB-Debug: IJlLQJntOUG5ObRAHdz5q3wtm6hk1agjGdADX6pNH+2FSM3yiZgOS2+k5crHOL4lszPqRN2yUMpaokRXdqW8Vg==
Date: Wed, 07 Nov 2018 16:35:17 GMT
Connection: keep-alive
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /www/delivery/lg.php?bannerid=624&campaignid=194&zoneid=32&loc=http%3A%2F%2Fpalashranjan.prv.pl%2Fanal-ass-teen-tight.html&cb=0350906181 HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=11bc35f738b930640e461d3b55d0a797

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: max-age=315360000
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=11bc35f738b930640e461d3b55d0a797; expires=Thu, 07-Nov-2019 16:35:17 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=117537
Date: Wed, 07 Nov 2018 16:35:18 GMT
Etag: "5be223fe-1d7"
Expires: Fri, 09 Nov 2018 01:14:15 GMT
Last-Modified: Tue, 06 Nov 2018 23:30:06 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    71a5e8dacf0ab8924baa4c8fc678d32b
Sha1:   2b796a345c71d4b17dc758e81035de48afd2c202
Sha256: 04d8c8f923e23ebd9cf60c1cf402e6a61bc8ab332d1a761789dd981373f8447f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=167226
Date: Wed, 07 Nov 2018 16:35:18 GMT
Etag: "5be2e687-1d7"
Expires: Fri, 09 Nov 2018 15:02:24 GMT
Last-Modified: Wed, 07 Nov 2018 13:20:07 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    4522f83d6e2e4e0767aa14c47a303b3e
Sha1:   3b38a174c62e0569e85d22edea7917062cc21027
Sha256: 9bf0e0c1928b9b32fdef22cbc93c0babb6cd5614a8ac9037ffe9354b7626ccdb
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Mon, 05 Nov 2018 02:42:59 GMT
Etag: 5F762857E08E73F9803324BD240C7E87F680F652
X-OCSP-Responder-ID: rmdccaocsp17
Content-Length: 472
Cache-Control: public, no-transform, must-revalidate, max-age=381415
Expires: Mon, 12 Nov 2018 02:32:13 GMT
Date: Wed, 07 Nov 2018 16:35:18 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   472
Md5:    d3788299c77d4b97c2726b3425a225dd
Sha1:   5f762857e08e73f9803324bd240c7e87f680f652
Sha256: 45947d00358642d09af5abbfe49bdd4831a5766d04d2f6aaff349ca9679b2aa1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 01 Nov 2018 21:27:34 GMT
Etag: 0823F01F9F8C75BF5414A58C61FD2F3497141F9D
X-OCSP-Responder-ID: rmdccaocsp15
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=103388
Expires: Thu, 08 Nov 2018 21:18:26 GMT
Date: Wed, 07 Nov 2018 16:35:18 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    43450835faf150042f50b35e7ed32648
Sha1:   0823f01f9f8c75bf5414a58c61fd2f3497141f9d
Sha256: 9f6a2f04f5bf0c1da5da8ce8d7df8432c7953c07d2d770a50848aca958429a2d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.18
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 01 Nov 2018 21:27:34 GMT
Etag: 5CDD5009CCC94DAF9E99BA9E0553690E0E4DB906
X-OCSP-Responder-ID: rmdccaocsp14
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=103283
Expires: Thu, 08 Nov 2018 21:16:41 GMT
Date: Wed, 07 Nov 2018 16:35:18 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    5de302391f2813d3921cfdb52bca4ac6
Sha1:   5cdd5009ccc94daf9e99ba9e0553690e0e4db906
Sha256: 480fc19216f48dd2919d46ff4b9b42abd893304618b834065c5df96ef8a92930
                                        
                                            GET /plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2Fprvpl&show_faces=false&layout=button_count&ampwidth=150&send=false HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         31.13.72.36
HTTP/1.1 200 OK
Content-Type: text/html; charset="utf-8"
                                        
Expires: Sat, 01 Jan 2000 00:00:00 GMT
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15552000; preload
Content-Encoding: gzip
Cache-Control: private, no-cache, no-store, must-revalidate
Vary: Accept-Encoding
Pragma: no-cache
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
timing-allow-origin: *
X-FB-Debug: FJFSL0f9VmC7+2XRgIKZowId2nWVSPBjv0djs4tcXb1KalnThbd/dJAPiKEXsvsggws+8ETyPaYbGS5fHlpPlw==
Date: Wed, 07 Nov 2018 16:35:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14946
Md5:    099fd70e4d47d225be88d5709e1f1d6d
Sha1:   c619560e6c93af5a383a14089ead598d6b6bfafd
Sha256: e2a1c959527df6aa47e240d882c713ff727d6b736d03f3e3b9fe884535c91f36
                                        
                                            GET /js/core2-min.20.js HTTP/1.1 
Host: s.spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         178.32.202.244
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:18 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
Expires: Wed, 07 Nov 2018 17:35:18 GMT
Cache-Control: max-age=3600, private
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   81269
Md5:    cbc412a3bc4eb0a3e95e2f13dd780c61
Sha1:   bf9ec92e0f15cd419a28b6014d404b787444da65
Sha256: 9d69edfaa7aaf75868478d5f918b57283dc19d3bf31e9a4f4c5033c614c0e4b0
                                        
                                            GET /www/delivery/ajs.php?zoneid=81&cb=28993735589&charset=UTF-8&loc=http%3A//palashranjan.prv.pl/anal-ass-teen-tight.html HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=11bc35f738b930640e461d3b55d0a797

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=11bc35f738b930640e461d3b55d0a797; expires=Thu, 07-Nov-2019 16:35:18 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   4198
Md5:    6aeac8ccf3fbf5753b630fa7525157cd
Sha1:   1e0153c785df71331966ab71cc36982cbfd5abf1
Sha256: 67e09c29366145146796dbf65cb035a7aa52d9f5f4019880c67bd27661bee025
                                        
                                            GET /xgemius.js HTTP/1.1 
Host: goldbach.hit.gemius.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         185.11.128.207
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Wed, 07 Nov 2018 16:35:18 GMT
Expires: Thu, 08 Nov 2018 04:35:18 GMT
Server: GHC
Accept-Ranges: none
Cache-Control: max-age=43200
Last-Modified: Tue, 11 Sep 2018 11:45:14 GMT
Vary: Accept-Encoding,Origin
P3P: CP="NOI DSP COR NID PSAo OUR IND"
Connection: keep-alive
Keep-Alive: timeout=10
Content-Length: 8945
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   8945
Md5:    3aa0ac434aa443646777a0a183c4c295
Sha1:   53d1d9fed2d343fef188626a5b18cc69e27b0e74
Sha256: 28624678c501738d0656dfd8ec35174f487a92ddb310fa8d2c98293034adf897
                                        
                                            GET /www/delivery/lg.php?bannerid=901&campaignid=194&zoneid=81&loc=http%3A%2F%2Fpalashranjan.prv.pl%2Fanal-ass-teen-tight.html&cb=350a3109ee HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=11bc35f738b930640e461d3b55d0a797

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: max-age=315360000
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=11bc35f738b930640e461d3b55d0a797; expires=Thu, 07-Nov-2019 16:35:18 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /www/delivery/ajs.php?zoneid=82&cb=44027233818&charset=UTF-8&loc=http%3A//palashranjan.prv.pl/anal-ass-teen-tight.html HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=11bc35f738b930640e461d3b55d0a797

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=11bc35f738b930640e461d3b55d0a797; expires=Thu, 07-Nov-2019 16:35:18 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   4148
Md5:    db56b084ce3aaa28b1ca9833b61f8c48
Sha1:   286b674ea90c01b3d15e13ef18329537d2129de2
Sha256: abc8611445b5f9a81a3ae2aa99c298f69a773bcd849d9d679db156253ad80783
                                        
                                            GET /fpdata.js?href=palashranjan.prv.pl HTTP/1.1 
Host: goldbach.hit.gemius.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         185.11.128.207
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Wed, 07 Nov 2018 16:35:19 GMT
Expires: Fri, 07 Dec 2018 16:35:19 GMT
Server: GHC
Accept-Ranges: none
Cache-Control: private, max-age=2592000
Last-Modified: Mon, 16 Jul 2012 10:03:40 GMT
Etag: PRIVATE7520710249
P3P: CP="NOI DSP COR NID PSAo OUR IND"
Connection: keep-alive
Keep-Alive: timeout=10
Content-Length: 264


--- Additional Info ---
Magic:  ASCII text
Size:   264
Md5:    eb9f141fc86f87ec8ed86bb68374a608
Sha1:   930bd6dea6f4b473b2b561dc4f876ef78e28cab8
Sha256: 103cd3b670fe90436681213a31fb17c7b18939e5309f90e76a6c6f81f4bcac6f
                                        
                                            GET /www/delivery/lg.php?bannerid=707&campaignid=194&zoneid=82&loc=http%3A%2F%2Fpalashranjan.prv.pl%2Fanal-ass-teen-tight.html&cb=f252f9d420 HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=11bc35f738b930640e461d3b55d0a797

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: max-age=315360000
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=11bc35f738b930640e461d3b55d0a797; expires=Thu, 07-Nov-2019 16:35:19 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /lsget.html HTTP/1.1 
Host: ls.hit.gemius.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         149.202.197.123
HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
                                        
Date: Wed, 07 Nov 2018 16:35:19 GMT
Expires: Fri, 07 Dec 2018 16:35:19 GMT
Server: GHC
Accept-Ranges: none
Cache-Control: private, max-age=2592000
Last-Modified: Mon, 16 Jul 2012 10:03:40 GMT
Etag: PRIVATE7520710249
Vary: Accept-Encoding,Origin,User-Agent
P3P: CP="NOI DSP COR NID PSAo OUR IND"
Connection: keep-alive
Keep-Alive: timeout=10
Content-Length: 2714
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2714
Md5:    93b0f843d79578eed4a93a0a743f094a
Sha1:   530fd8995d6ae24002376dffece8dc58763875d0
Sha256: 1104bbf5feef376074e6ea9ca499f6dfa52902f5e9c2c9965dae4b3cf0d61cea
                                        
                                            GET /rsrc.php/v3/yn/r/lH1ibRl5GKq.png HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2Fprvpl&show_faces=false&layout=button_count&ampwidth=150&send=false

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
timing-allow-origin: *
Expires: Tue, 05 Nov 2019 20:52:14 GMT
Content-MD5: LsIm49y5qOd6jowRdAWHyQ==
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
X-FB-Debug: xABPiIf5GiERsBm74WAOIwYsLn39Ih5F9p0rjAwMp0vDIbfaRCjCb5ZpL6K4CZ+LpxutTitaJQvduQMvIS5EoQ==
Date: Wed, 07 Nov 2018 16:35:19 GMT
Connection: keep-alive
Content-Length: 222


--- Additional Info ---
Magic:  PNG image, 16 x 16, 4-bit colormap, non-interlaced
Size:   222
Md5:    2ec226e3dcb9a8e77a8e8c11740587c9
Sha1:   3eeef1fffe964e01ca04216633d515b782671437
Sha256: 4c66cf58bddf9101dd5e3d83235728a64c8e7ef7032c4bcbbcc91b8aa7dcac18
                                        
                                            GET /www/delivery/ajs.php?zoneid=44&cb=15446844675&charset=UTF-8&loc=http%3A//palashranjan.prv.pl/anal-ass-teen-tight.html HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=11bc35f738b930640e461d3b55d0a797

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=11bc35f738b930640e461d3b55d0a797; expires=Thu, 07-Nov-2019 16:35:19 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   441
Md5:    407e84e5a06b4e56a745f2f980c98593
Sha1:   2ba3d96081013814ca0ea435969d683bf780c0a4
Sha256: 1718b705e4e46aacf2810fd29f4733e7c0506595e9aab0c08e59f44996adbb07
                                        
                                            GET /www/delivery/lg.php?bannerid=0&campaignid=0&zoneid=44&loc=http%3A%2F%2Fpalashranjan.prv.pl%2Fanal-ass-teen-tight.html&cb=d637f948e3 HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=11bc35f738b930640e461d3b55d0a797

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: max-age=315360000
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=11bc35f738b930640e461d3b55d0a797; expires=Thu, 07-Nov-2019 16:35:19 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.91
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "C0F52B4209FE28C5C12FF0A8AF44D1EBF4ADD58625BC9F5004006FC559B03AA0"
Last-Modified: Mon, 05 Nov 2018 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=43200
Expires: Thu, 08 Nov 2018 04:35:20 GMT
Date: Wed, 07 Nov 2018 16:35:20 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    a9d1e776d19828790d558c9fd37b9e80
Sha1:   195d8f467e3777e433d38c9a6801490c081bb43c
Sha256: c0f52b4209fe28c5c12ff0a8af44d1ebf4add58625bc9f5004006fc559b03aa0
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.121
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Transfer-Encoding: Binary
Last-Modified: Mon, 05 Nov 2018 10:03:15 GMT
Etag: "f4e1c93dab6b42d8bc2ca6573d155c9f26376ba6"
Content-Length: 1398
Cache-Control: public, no-transform, must-revalidate, max-age=8259
Expires: Wed, 07 Nov 2018 18:52:59 GMT
Date: Wed, 07 Nov 2018 16:35:20 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1398
Md5:    98ca9fe5f1a28f79c137b74ae2fe8d36
Sha1:   f4e1c93dab6b42d8bc2ca6573d155c9f26376ba6
Sha256: 62e1eccec222cdb2390f35ec6a80706e67d56ff4a82fbe5baaeab14533edf2b3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Sun, 04 Nov 2018 00:59:30 GMT
Etag: 0D30A155E1FEF32D33948C6E00A3023065D859BD
X-OCSP-Responder-ID: rmdccaocsp16
Content-Length: 280
Cache-Control: public, no-transform, must-revalidate, max-age=288879
Expires: Sun, 11 Nov 2018 00:49:59 GMT
Date: Wed, 07 Nov 2018 16:35:20 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   280
Md5:    8748b0ebcca8466ec224ce1c93fac900
Sha1:   0d30a155e1fef32d33948c6e00a3023065d859bd
Sha256: 48adbc9f0760ff84c026084f61c08a83ca7016524517d8fe16a164a0c3aa776b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.16
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 01 Nov 2018 21:27:34 GMT
Etag: E09F6DB6BA17E4A916AEF5D73F40978CE2189110
X-OCSP-Responder-ID: rmdccaocsp15
Content-Length: 313
Cache-Control: public, no-transform, must-revalidate, max-age=103310
Expires: Thu, 08 Nov 2018 21:17:10 GMT
Date: Wed, 07 Nov 2018 16:35:20 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   313
Md5:    34254e1342addf557c2ca29010c433ae
Sha1:   e09f6db6ba17e4a916aef5d73f40978ce2189110
Sha256: 756f20ade684520c4bc40127b25f919a959a108ce7d3b742f8976737ca6fc4a8
                                        
                                            GET /img/close_x.png HTTP/1.1 
Host: ad.prv.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         188.165.206.157
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:19 GMT
Content-Length: 620
Last-Modified: Wed, 02 Sep 2015 06:40:12 GMT
Connection: keep-alive
Etag: "55e699cc-26c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 14 x 14, 8-bit/color RGBA, non-interlaced
Size:   620
Md5:    95752efe60547ae27d0e79c46537dc1e
Sha1:   13f67926f33a5148c3b51f026c11abf38fb2a1f3
Sha256: d44fe33544eb7000a4be897820643c827d44076217f2ca3376bf3134409bb9fb
                                        
                                            GET /lsget.html?mode=new HTTP/1.1 
Host: ls.hit.gemius.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ls.hit.gemius.pl/lsget.html

                                         
                                         149.202.197.123
HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
                                        
Date: Wed, 07 Nov 2018 16:35:20 GMT
Expires: Fri, 07 Dec 2018 16:35:20 GMT
Server: GHC
Accept-Ranges: none
Cache-Control: private, max-age=2592000
Last-Modified: Mon, 16 Jul 2012 10:03:40 GMT
Etag: PRIVATE7520710249
Vary: Accept-Encoding,Origin,User-Agent
P3P: CP="NOI DSP COR NID PSAo OUR IND"
Connection: keep-alive
Keep-Alive: timeout=100
Content-Length: 2711
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2711
Md5:    bb319cac571327781c3cc69111f096f0
Sha1:   87da8893148d2ee736a9fb7f74d90248ca3a04ce
Sha256: a292c317f1ee9637853e204b250b618bf62a17bef6665d1c4bb2eca0e815aaf9
                                        
                                            GET /rsrc.php/v3iEpO4/yx/l/en_US/r13ICA4N4HX.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2Fprvpl&show_faces=false&layout=button_count&ampwidth=150&send=false
Origin: https://www.facebook.com

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Access-Control-Allow-Credentials: true
Cache-Control: public,max-age=31536000,immutable
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
timing-allow-origin: *
Expires: Thu, 07 Nov 2019 03:10:22 GMT
Content-MD5: nIf1GQxCkwwV/pzlt9gyEQ==
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Access-Control-Allow-Origin: *
X-FB-Debug: FNN7Mm7UNXuc/r7VHCy5e1NuMD5s0UMxY/SEyxJ9G8dDuu6CdaHRSyydsYnimb8TU6u90k4Mu2+INxBUXFnIAQ==
Date: Wed, 07 Nov 2018 16:35:18 GMT
Connection: keep-alive
Content-Length: 511381


--- Additional Info ---
Magic:  ASCII English text, with very long lines
Size:   511381
Md5:    9c87f5190c42930c15fe9ce5b7d83211
Sha1:   285627394f21f7924f1b33a62bbef03bd1b7ebed
Sha256: c4544b4bcc03d7319d17c74814d4b4c8dad7993ebff3b9562760cfbd845f9b14
                                        
                                            GET /_1541608520340/rexdot.js?l=90&id=bPA1ZotdXe3htQrOiB.DvMdRnDSwMNhFXpTX2Gu_NTz.z7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=-60&fv=Shockwave%20Flash%2010.0%20r45&href=http%3A%2F%2Fpalashranjan.prv.pl%2Fanal-ass-teen-tight.html&ref=&screen=1176x885&col=24&window=1176x754&ltime=774&lsdata=yAAQ2MRZcpdtOX4.HBg6XenaHj0KAN2sze4A3JkrP3r.17ZuoAQhhGjKdyvuyqNmE2P8jLqrxQ8Fr9vhdyXxzS3YGWkd/VwrIJCwpOaPei/&fpdata=XnBgJyd.InCmnbscES8ImlBe9fvvlqdlu6MQrM2nlIf.Y7&vis=3&lsadd= HTTP/1.1 
Host: goldbach.hit.gemius.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         185.11.128.207
HTTP/1.1 301 Moved Permanently
                                        
Date: Wed, 07 Nov 2018 16:35:20 GMT
Expires: Tue, 06 Nov 2018 16:35:20 GMT
Server: GHC
Accept-Ranges: none
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Set-Cookie: Gtest=KlQrgRGGQMGGMS98aRSQiql5ssGMXP8c25nSGokAYGStM5aS0lm2uxVBEM4G; Domain=hit.gemius.pl; Path=/; Expires=Sun, 09 Apr 2023 00:00:00 GMT
P3P: CP="NOI DSP COR NID PSAo OUR IND"
Location: /__/_1541608520340/rexdot.js?l=90&id=bPA1ZotdXe3htQrOiB.DvMdRnDSwMNhFXpTX2Gu_NTz.z7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=-60&fv=Shockwave%20Flash%2010.0%20r45&href=http%3A%2F%2Fpalashranjan.prv.pl%2Fanal-ass-teen-tight.html&ref=&screen=1176x885&col=24&window=1176x754&ltime=774&lsdata=yAAQ2MRZcpdtOX4.HBg6XenaHj0KAN2sze4A3JkrP3r.17ZuoAQhhGjKdyvuyqNmE2P8jLqrxQ8Fr9vhdyXxzS3YGWkd/VwrIJCwpOaPei/&fpdata=XnBgJyd.InCmnbscES8ImlBe9fvvlqdlu6MQrM2nlIf.Y7&vis=3&lsadd=
Connection: keep-alive
Keep-Alive: timeout=10
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /files/data.45.htm?Ho_palashranjan.prv.pl HTTP/1.1 
Host: spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         178.32.202.244
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:20 GMT
Last-Modified: Fri, 28 Sep 2018 09:14:02 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
Expires: Thu, 07 Nov 2019 16:35:20 GMT
Cache-Control: max-age=31536000, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   8577
Md5:    405e2654494364b943169e4a43812b1b
Sha1:   7a4969844116464b57b1d38f601ad0a046855073
Sha256: a48022d68e70fe46c9ce10d383c1b25036cf5d95773c51ec1d5273dfaee6a6de
                                        
                                            GET /__/_1541608520340/rexdot.js?l=90&id=bPA1ZotdXe3htQrOiB.DvMdRnDSwMNhFXpTX2Gu_NTz.z7&et=view&hsrc=1&initsonar=1&extra=&eventid=0&fr=1&tz=-60&fv=Shockwave%20Flash%2010.0%20r45&href=http%3A%2F%2Fpalashranjan.prv.pl%2Fanal-ass-teen-tight.html&ref=&screen=1176x885&col=24&window=1176x754&ltime=774&lsdata=yAAQ2MRZcpdtOX4.HBg6XenaHj0KAN2sze4A3JkrP3r.17ZuoAQhhGjKdyvuyqNmE2P8jLqrxQ8Fr9vhdyXxzS3YGWkd/VwrIJCwpOaPei/&fpdata=XnBgJyd.InCmnbscES8ImlBe9fvvlqdlu6MQrM2nlIf.Y7&vis=3&lsadd= HTTP/1.1 
Host: goldbach.hit.gemius.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: Gtest=KlQrgRGGQMGGMS98aRSQiql5ssGMXP8c25nSGokAYGStM5aS0lm2uxVBEM4G

                                         
                                         185.11.128.207
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Wed, 07 Nov 2018 16:35:20 GMT
Expires: Tue, 06 Nov 2018 16:35:20 GMT
Server: GHC
Accept-Ranges: none
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Set-Cookie: Gtestem=~; Domain=hit.gemius.pl; Path=/; Expires=Fri, 1 Jan 2010 00:00:00 GMT Gdyn=KlxuFRaGQMGGMS98aRSQiql5ssGMXP8c25nSGokAYGStM5aS0lm2uxVBEGJSssX6nsGfGHZ9am2xx1GgxcxSD8CBI8l8MG..; Domain=hit.gemius.pl; Path=/; Expires=Sun, 09 Apr 2023 00:00:00 GMT
P3P: CP="NOI DSP COR NID PSAo OUR IND"
Connection: keep-alive
Keep-Alive: timeout=10
Content-Length: 452


--- Additional Info ---
Magic:  ASCII text
Size:   452
Md5:    18821d5d5417a878e1872d14d0a83892
Sha1:   e71c5ff20ea218260e9e4166d822043482af73d4
Sha256: 34e8ab09add627d3c25e3296c06429da22371d13bd35594493c9e02023d0bb0c
                                        
                                            GET /js/ads.js HTTP/1.1 
Host: s.spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://spolecznosci.net/files/data.45.htm?Ho_palashranjan.prv.pl

                                         
                                         178.32.202.244
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:20 GMT
Content-Length: 17
Last-Modified: Thu, 08 Jun 2017 09:02:05 GMT
Expires: Thu, 07 Nov 2019 16:35:20 GMT
Cache-Control: max-age=31536000, public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   17
Md5:    3b4ac5fef7680215ad89802b8ada27de
Sha1:   34d7faeb7d4208612463067910a1c6108145ae01
Sha256: 67ae887c73eb787ae3c9c187909ab72e6df7f1de667acc7926681ef158a23fbc
                                        
                                            GET /pet?s=prv&x=337,1888,421&h=421&safe=0&ut=&uu=null&cb=7848391182&uq=88740518634.968393&ref=http%3A%2F%2Fpalashranjan.prv.pl%2Fanal-ass-teen-tight.html&sp_gdpr=&n=0.14521783760099005 HTTP/1.1 
Host: a.spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         178.32.202.248
HTTP/1.1 302 Found
Content-Type: application/javascript; charset=UTF-8
                                        
Access-Control-Allow-Origin: *
Set-Cookie: v = 1541608520.585; Domain=.spolecznosci.net; Path=/; Expires=Fri, 07 Dec 2018 16:35:20 GMT
Location: /pet?s=prv&x=337,1888,421&h=421&safe=0&ut=&uu=null&cb=7848391182&uq=88740518634.968393&ref=http%3A%2F%2Fpalashranjan.prv.pl%2Fanal-ass-teen-tight.html&sp_gdpr=&n=0.14521783760099005&nr=1
Date: Wed, 07 Nov 2018 16:35:20 GMT
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /geo_snet?cb=extraDataCached HTTP/1.1 
Host: a.spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://spolecznosci.net/files/data.45.htm?Ho_palashranjan.prv.pl
Cookie: tgx=v%3A1%7CAd%3A0%7CSw%3A1176

                                         
                                         178.32.202.248
HTTP/1.1 302 Found
Content-Type: application/javascript; charset=UTF-8
                                        
Access-Control-Allow-Origin: *
Set-Cookie: v = 1541608520.798; Domain=.spolecznosci.net; Path=/; Expires=Fri, 07 Dec 2018 16:35:20 GMT
Location: /geo_snet?cb=extraDataCached&nr=1
Date: Wed, 07 Nov 2018 16:35:20 GMT
Content-Length: 0


--- Additional Info ---
                                        
                                            GET /pet?s=prv&x=337,1888,421&h=421&safe=0&ut=&uu=null&cb=7848391182&uq=88740518634.968393&ref=http%3A%2F%2Fpalashranjan.prv.pl%2Fanal-ass-teen-tight.html&sp_gdpr=&n=0.14521783760099005&nr=1 HTTP/1.1 
Host: a.spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: tgx=v%3A1%7CAd%3A0%7CSw%3A1176; v=1541608520.585

                                         
                                         178.32.202.248
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Last-Modified: Wed, 07 Nov 2018 16:35:20 GMT
Set-Cookie: v = 1541608520.585; Domain=.spolecznosci.net; Path=/; Expires=Fri, 07 Dec 2018 16:35:20 GMT
X-Runtime: 27
X-Runtime-details: a0-b0-c0-d13-da13-e15-f15-j15-k15-g21-y21-z27
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 07 Nov 2018 16:35:20 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1021
Md5:    3894c4099156100ba51aac8d17a403ca
Sha1:   ab70976ade0f086c0c4b835adecf37dc280c1bc0
Sha256: 9d5863f4b01638cc33206e5c1920f1071ff0d70fd7c8872ed2e1f6bfcaced5fb
                                        
                                            GET /geo_snet?cb=extraDataCached&nr=1 HTTP/1.1 
Host: a.spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://spolecznosci.net/files/data.45.htm?Ho_palashranjan.prv.pl
Cookie: tgx=v%3A1%7CAd%3A0%7CSw%3A1176; v=1541608520.798

                                         
                                         178.32.202.248
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Cache-Control: private, max-age=3600
Expires: Wed, 07 Nov 2018 17:35:20 GMT
Set-Cookie: v = 1541608520.798; Domain=.spolecznosci.net; Path=/; Expires=Fri, 07 Dec 2018 16:35:20 GMT
X-Runtime: 0
X-Runtime-details: a0
Date: Wed, 07 Nov 2018 16:35:20 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   195
Md5:    f07cf488ecec1043fd776cbf88df8b74
Sha1:   df64161ee72eef57916cfce1850bb7e62b36a383
Sha256: 8ccc32ac25ac3aa1c23926641098038a9f2257f68ae31c6f0d5ff7f6fe3bf0af
                                        
                                            GET /avd/54867/131519/11001/337/?o=1541608520834 HTTP/1.1 
Host: a.spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: tgx=v%3A1%7CAd%3A0%7CSw%3A1176; v=1541608520.585

                                         
                                         178.32.202.248
HTTP/1.1 301 Moved Permanently
                                        
Content-Length: 0
Location: https://a.spolecznosci.net/avd/54867/131519/11001/337/?o=1541608520834


--- Additional Info ---
                                        
                                            GET /avd/122748/193575/11001/1888/?o=1541608520834 HTTP/1.1 
Host: a.spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: tgx=v%3A1%7CAd%3A0%7CSw%3A1176; v=1541608520.585

                                         
                                         178.32.202.248
HTTP/1.1 301 Moved Permanently
                                        
Content-Length: 0
Location: https://a.spolecznosci.net/avd/122748/193575/11001/1888/?o=1541608520834


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         91.135.34.91
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "756AD1445B80953C788B2242A4633C36466527DED136EA61E97115AF6C6710C3"
Last-Modified: Wed, 07 Nov 2018 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=24781
Expires: Wed, 07 Nov 2018 23:28:22 GMT
Date: Wed, 07 Nov 2018 16:35:21 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    18bfbc3056ac6b56f4cbdbbec5ff0915
Sha1:   dd554bc91691a17c4dff64c0ea541c8606c05e94
Sha256: 756ad1445b80953c788b2242a4633c36466527ded136ea61e97115af6c6710c3
                                        
                                            GET /ls.php?x=Wo.55~Kr.NO~Re.3143244~Ad.0~Sw.1176~Os.WINDOWS-7000~Ua.FIREFOX-3~Ct.RESIDENTIAL~Isp.BROADNET%20AS~Pv.0&attr=%7B%22palashranjan.prv.pl%22%3A%7B%22pv%22%3A0%2C%22last%22%3A%222018-11-07T16%3A35%3A20.594Z%22%7D%7D HTTP/1.1 
Host: spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://spolecznosci.net/files/data.45.htm?Ho_palashranjan.prv.pl
Cookie: tgx=v%3A1%7CWo%3A55%7CKr%3ANO%7CRe%3A3143244%7CAd%3A0%7CSw%3A1176%7COs%3AWINDOWS-7000%7CUa%3AFIREFOX-3%7CCt%3ARESIDENTIAL%7CIsp%3ABROADNET%20AS; v=1541608520.798

                                         
                                         178.32.202.244
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:20 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Set-Cookie: tgx=v%3A1%7CWo%3A55%7CKr%3ANO%7CRe%3A3143244%7CAd%3A0%7CSw%3A1176%7COs%3AWINDOWS-7000%7CUa%3AFIREFOX-3%7CCt%3ARESIDENTIAL%7CIsp%3ABROADNET+AS; expires=Sat, 08-Dec-2018 16:35:20 GMT; Max-Age=2678400; path=/; domain=spolecznosci.net v=1541608520.798; expires=Sat, 08-Dec-2018 16:35:20 GMT; Max-Age=2678400; path=/; domain=spolecznosci.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   28
Md5:    7faa7d4c8047fe580db080af59ce3dcb
Sha1:   9a67ed1d0c415c55aaf22ba10b76a52e14b41e07
Sha256: a001374e40979a6c320d3ccb03f1818e951a8cae58d1654f8b641161760c8861
                                        
                                            GET /avd/54867/131519/11001/337/?o=1541608520834 HTTP/1.1 
Host: a.spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: tgx=v%3A1%7CWo%3A55%7CKr%3ANO%7CRe%3A3143244%7CAd%3A0%7CSw%3A1176%7COs%3AWINDOWS-7000%7CUa%3AFIREFOX-3%7CCt%3ARESIDENTIAL%7CIsp%3ABROADNET%20AS; v=1541608520.798

                                         
                                         178.32.202.248
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Set-Cookie: v = 1541608520.798; Domain=.spolecznosci.net; Path=/; Expires=Fri, 07 Dec 2018 16:35:20 GMT
Date: Wed, 07 Nov 2018 16:35:20 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    df16d33739defe9bda1f4c45d36fd7a7
Sha1:   ff7489a6dd9ab0d9a4b084315f5b9d77cf9fdf50
Sha256: 90252ef0aa9e3d36c861bbeaa1bd57b7f855333edf2957ab9473838a52e2dd7f
                                        
                                            GET /avd/122748/193575/11001/1888/?o=1541608520834 HTTP/1.1 
Host: a.spolecznosci.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: tgx=v%3A1%7CWo%3A55%7CKr%3ANO%7CRe%3A3143244%7CAd%3A0%7CSw%3A1176%7COs%3AWINDOWS-7000%7CUa%3AFIREFOX-3%7CCt%3ARESIDENTIAL%7CIsp%3ABROADNET%20AS; v=1541608520.798

                                         
                                         178.32.202.248
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Set-Cookie: v = 1541608520.798; Domain=.spolecznosci.net; Path=/; Expires=Fri, 07 Dec 2018 16:35:21 GMT
Date: Wed, 07 Nov 2018 16:35:21 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    df16d33739defe9bda1f4c45d36fd7a7
Sha1:   ff7489a6dd9ab0d9a4b084315f5b9d77cf9fdf50
Sha256: 90252ef0aa9e3d36c861bbeaa1bd57b7f855333edf2957ab9473838a52e2dd7f
                                        
                                            GET /www/delivery/ajs.php?zoneid=223&cb=88320892239&charset=UTF-8&loc=http%3A//palashranjan.prv.pl/anal-ass-teen-tight.html HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=11bc35f738b930640e461d3b55d0a797

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=11bc35f738b930640e461d3b55d0a797; expires=Thu, 07-Nov-2019 16:35:20 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  ASCII English text, with very long lines
Size:   1272
Md5:    ccc9ad5787e2eff94eb4739cc210c6d8
Sha1:   5f3bc5a4e95e7d41516fcb16928d78496ac55cfb
Sha256: 6f39f8a10da7dd3af928cde416c81921a6da1b7c82fef837ed056568859e1f2d
                                        
                                            GET /www/delivery/ajs.php?zoneid=245&cb=88241327367&charset=UTF-8&loc=http%3A//palashranjan.prv.pl/anal-ass-teen-tight.html HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=11bc35f738b930640e461d3b55d0a797

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=11bc35f738b930640e461d3b55d0a797; expires=Thu, 07-Nov-2019 16:35:20 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  ASCII English text, with very long lines
Size:   1274
Md5:    4aa4944e2ffd86774119a0ca63a56c0a
Sha1:   c9dd26bcdbf252e1799dcc51e76d6835947d1a39
Sha256: ff6668dfdd34fe35e4849d0dbf14d242e2a88cc07c467d6c74e4274d390e0170
                                        
                                            GET /www/delivery/lg.php?bannerid=810&campaignid=222&zoneid=245&loc=http%3A%2F%2Fpalashranjan.prv.pl%2Fanal-ass-teen-tight.html&cb=2915c526c6 HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=11bc35f738b930640e461d3b55d0a797

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: max-age=315360000
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=11bc35f738b930640e461d3b55d0a797; expires=Thu, 07-Nov-2019 16:35:20 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /www/delivery/lg.php?bannerid=809&campaignid=222&zoneid=223&loc=http%3A%2F%2Fpalashranjan.prv.pl%2Fanal-ass-teen-tight.html&cb=bdbe87917b HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=11bc35f738b930640e461d3b55d0a797

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: max-age=315360000
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=11bc35f738b930640e461d3b55d0a797; expires=Thu, 07-Nov-2019 16:35:20 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=155558
Date: Wed, 07 Nov 2018 16:35:21 GMT
Etag: "5be2c10b-1d7"
Expires: Fri, 09 Nov 2018 11:47:59 GMT
Last-Modified: Wed, 07 Nov 2018 10:40:11 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    dba8f785db3eb638e9dad3ac2a4c881c
Sha1:   21897e050804d13a9a3d4fa747b702741c5d8a1e
Sha256: 88b5383ec41c2771c596c131608475c19e7a251eba3113b82cc4e89a2c2aab78
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=150636
Date: Wed, 07 Nov 2018 16:35:21 GMT
Etag: "5be2a4e7-1d7"
Expires: Fri, 09 Nov 2018 10:25:57 GMT
Last-Modified: Wed, 07 Nov 2018 08:40:07 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    919363535ef0ef2a69233c41e96ee17e
Sha1:   afe5a72a36f01c2b43bec2344d5c207bf1b408f9
Sha256: b6c8dcd0e22e327c74682bd499c719ce4f85ee0a01c137619eeb9b844479ab48
                                        
                                            GET /ad/10163.js HTTP/1.1 
Host: ads.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         23.13.250.233
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: Apache
X-Powered-By: PHP/5.3.3
Content-Encoding: gzip
Content-Length: 7558
Cache-Control: max-age=1935
Expires: Wed, 07 Nov 2018 17:07:36 GMT
Date: Wed, 07 Nov 2018 16:35:21 GMT
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7558
Md5:    b5ac50f921c7e5f7ba554d7abc3fd7dd
Sha1:   393becfe2faa9ea630478fce951a92db781f97c0
Sha256: 72ff6b8c4437f21909ec3f4aa890998e0d21fe8a949c9de5b36f68ab3277bf98
                                        
                                            GET /a/10163/132208/624722-40.js?&cb=0.8108004086122413&tk_st=1&rf=http%3A//palashranjan.prv.pl/anal-ass-teen-tight.html&rp_s=c&kw=prvpl&tg_i.Site=prvpl&p_pos=atf&p_screen_res=1176x885&ad_slot=132208_40 HTTP/1.1 
Host: optimized-by.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         69.173.144.141
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Wed, 07 Nov 2018 16:35:21 GMT
Server: RAS 2.4
Set-Cookie: khaos=JO7DWS5R-28-JH9A; Domain=.rubiconproject.com; Path=/; Expires=Thu, 07-Nov-2019 16:35:21 GMT; Max-Age=31536000 ruid=; Domain=.rubiconproject.com; Path=/; Expires=Sat, 01-Jan-2000 00:00:00 GMT; Max-Age=0 rsid=BNyNUSjyr5MGGvPQIXgI1Z9rY5nNljM+9LaETRqNrnMWV4GhPHD/R/IBHPs+m8df3rUgoBYV9S2nIM5zJ7hpB7oE/Z8BeRSMfcam7ca9HOZgZNsutQruMDpW3C5jqAnCSZK8Zo8ACMFP; Domain=.rubiconproject.com; Path=/ ses40=132208^1; Domain=.rubiconproject.com; Path=/; Expires=Thu, 08-Nov-2018 06:59:59 GMT; Max-Age=51878 vis40=132208^1; Domain=.rubiconproject.com; Path=/; Expires=Thu, 08-Nov-2018 06:59:59 GMT; Max-Age=51878 audit=BRxbK4LkJi4yu96W6/nsH7ys6syQ6kjY1qX+3TmboTtdaqRKetJDVdxST3BaX1Ot0EK92Da/83pIF5TcVSYvV7WMy6KebrSTktlw1NR1BwY=; Domain=.rubiconproject.com; Path=/; Expires=Thu, 07-Nov-2019 16:35:21 GMT; Max-Age=31536000
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1116
Keep-Alive: timeout=5, max=84
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1116
Md5:    be893d9412656839bc32e7a7e432b520
Sha1:   efbecfd7dd92d72b0802e7b72d521d44482cda96
Sha256: a33f78f0ed063f09eaa7dab87dca46883ac31b9c878afd1d8d1b8adc1feeb847
                                        
                                            GET /a/10163/132208/624724-9.js?&cb=0.4949369812131017&tk_st=1&rf=http%3A//palashranjan.prv.pl/anal-ass-teen-tight.html&rp_s=c&kw=prvpl&tg_i.Site=prvpl&p_pos=atf&p_screen_res=1176x885&ad_slot=132208_9 HTTP/1.1 
Host: optimized-by.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         69.173.144.141
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Wed, 07 Nov 2018 16:35:21 GMT
Server: RAS 2.4
Set-Cookie: khaos=JO7DWS5R-1F-8L3V; Domain=.rubiconproject.com; Path=/; Expires=Thu, 07-Nov-2019 16:35:21 GMT; Max-Age=31536000 ruid=; Domain=.rubiconproject.com; Path=/; Expires=Sat, 01-Jan-2000 00:00:00 GMT; Max-Age=0 rsid=BNyNUSjyr5MGGvPQIXgI1Z9rY5nNljM+9LaETRqNrnMWV4GhPHD/R/IBHPs+m8df3rUgoBYV9S2nIM5zJ7hpB7oE/Z8BeRSMfcam7ca9HOZgZNsutQruMDpW3C5jqAnCSZK8Zo8ACMFP; Domain=.rubiconproject.com; Path=/ ses9=132208^1; Domain=.rubiconproject.com; Path=/; Expires=Thu, 08-Nov-2018 06:59:59 GMT; Max-Age=51878 vis9=132208^1; Domain=.rubiconproject.com; Path=/; Expires=Thu, 08-Nov-2018 06:59:59 GMT; Max-Age=51878 audit=BRxbK4LkJi4yu96W6/nsH7ys6syQ6kjY1qX+3TmboTtdaqRKetJDVdxST3BaX1Ot0EK92Da/83pIF5TcVSYvV7WMy6KebrSTktlw1NR1BwY=; Domain=.rubiconproject.com; Path=/; Expires=Thu, 07-Nov-2019 16:35:21 GMT; Max-Age=31536000
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Wed, 17 Sep 1975 21:32:10 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1246
Keep-Alive: timeout=5, max=44
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1246
Md5:    af89ea910bda81e324635c0c08c7a520
Sha1:   3d987846dd797031ab85c3306c128d801f824e83
Sha256: 479520455d447d50958ed73a342c2c703fdd40120cdae911d1beeb642383a390
                                        
                                            GET /www/delivery/ajs.php?zoneid=253&cb=5960407216&charset=UTF-8&loc=http%3A//palashranjan.prv.pl/anal-ass-teen-tight.html HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=11bc35f738b930640e461d3b55d0a797

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=11bc35f738b930640e461d3b55d0a797; expires=Thu, 07-Nov-2019 16:35:21 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   911
Md5:    c2e6e465ffbfd6bedb3a6168d57b1857
Sha1:   687b675546727f721a7ac2594683c887fc3596bb
Sha256: 48cf3171e356cb84a29671996688f9d325a5f0fa745ec18a7da2b529cf18e21b
                                        
                                            GET /adfscript/?bn=25464867;rtbwp=F8E602E88579FAD4;rtbdata=hZCx8WgGkKfoBFukTTKVnOTCy8epk9KMXhyoGumQEe-X7vp-Oq5BwVbYwZKKydPGvuuNhtID8SM_aQTQ66CUJ7Itsrm5MM9zfN2LCHptKZoN1nd2vSl4V5CYKCBNghFGFfaVC_gMsd79ZMDuNCY2H2ORdsxEUKIIezBU_azUJc_uctZ9_b8-JteCI7QAz4xhqFj_MmnWufvrLgtmos69lnaUu8FworLg3CmDY90VXUlf-ywt7aMASSoUIuWa1x-aJ-pxjpm2NYDSm_MygVJ8g5YSSfGpIAn90;OOBClickTrack=http://beacon-nf.rubiconproject.com/beacon/v2/t/0/e75133a7-2b94-4821-a7e6-15eb3371f728/ HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         37.157.4.40
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:21 GMT
Content-Length: 9716
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Set-Cookie: C=1; expires=Fri, 07-Dec-2018 16:35:21 GMT; path=/ adtrc=1; domain=adform.net; expires=Wed, 14-Nov-2018 16:35:21 GMT; path=/
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   9716
Md5:    90924d6d75a11f5d365263d42fe5495b
Sha1:   9c2727a7e548105b5ccecea3607da3be5bbd62b6
Sha256: fa0ae7b17d58f2fc4214191fa07bd1aad10116c2b8244b22648b5beb67ddaebd
                                        
                                            GET /beacon/d/e75133a7-2b94-4821-a7e6-15eb3371f728?oo=0&accountId=10163&siteId=132208&zoneId=624724&sizeId=9&e=6A1E40E384DA563B6BB84E49B36DF15BC0E45313F23BF7F72CF7C5C968F76CE643AF21250AD5F1882CCEF3E43DCEB4E0ABCC67E9E609CD7C162064C50A72CC3EBC35454CF3DF3D2A3826CEC50550EE98EE77BEFE3AEB37E876F19EE37E4F5F0C8977453E5C43D349F616859E1B0F904F99B821619BD6794A5F74221EB30DB8CECEF7D0EB7E229D7345A002F28FD38E01C906E3D99347F00C1B306DECBE4FFA6986F7D9285AA10EC45B649108E47836AEB1C1FEFB4EDFEA1EECEFBAED4F45A61F8A0A4B185A425FC3CDA10306204D320B HTTP/1.1 
Host: beacon-eu2.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: khaos=JO7DWS5R-1F-8L3V; rsid=BNyNUSjyr5MGGvPQIXgI1Z9rY5nNljM+9LaETRqNrnMWV4GhPHD/R/IBHPs+m8df3rUgoBYV9S2nIM5zJ7hpB7oE/Z8BeRSMfcam7ca9HOZgZNsutQruMDpW3C5jqAnCSZK8Zo8ACMFP; ses40=132208^1; vis40=132208^1; audit=BRxbK4LkJi4yu96W6/nsH7ys6syQ6kjY1qX+3TmboTtdaqRKetJDVdxST3BaX1Ot0EK92Da/83pIF5TcVSYvV7WMy6KebrSTktlw1NR1BwY=; ses9=132208^1; vis9=132208^1

                                         
                                         69.173.144.152
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: private, max-age=0, no-cache
Expires: 01 Jan 1970 10:00:00 GMT
Pragma: no-cache
Content-Length: 43
Date: Wed, 07 Nov 2018 16:35:21 GMT
Server: Rubicon Project


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /beacon/d/a6689d52-cf70-4e1a-b86c-31e9f6d89b66?oo=0&accountId=10163&siteId=132208&zoneId=624722&sizeId=40&e=6A1E40E384DA563B536B6D6A7AE6518039E2D4C44EDF90E4E17A1A68F2117D3DCB3B7CC7734C8FAB1BF2E35C8C639119ABCC67E9E609CD7C162064C50A72CC3EBC35454CF3DF3D2AE0F9CDFE437E96D6AC237D6FA0EBFC9A6240B348FC26EBCF49A3733AC84B7E2D0B244C7A58CB5AE8420AF219C712995483009FDB9DE7981633F8630F2FDB6069 HTTP/1.1 
Host: beacon-eu2.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: khaos=JO7DWS5R-28-JH9A; rsid=BNyNUSjyr5MGGvPQIXgI1Z9rY5nNljM+9LaETRqNrnMWV4GhPHD/R/IBHPs+m8df3rUgoBYV9S2nIM5zJ7hpB7oE/Z8BeRSMfcam7ca9HOZgZNsutQruMDpW3C5jqAnCSZK8Zo8ACMFP; ses40=132208^1; vis40=132208^1; audit=BRxbK4LkJi4yu96W6/nsH7ys6syQ6kjY1qX+3TmboTtdaqRKetJDVdxST3BaX1Ot0EK92Da/83pIF5TcVSYvV7WMy6KebrSTktlw1NR1BwY=

                                         
                                         69.173.144.152
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: private, max-age=0, no-cache
Expires: 01 Jan 1970 10:00:00 GMT
Pragma: no-cache
Content-Length: 43
Date: Wed, 07 Nov 2018 16:35:21 GMT
Server: Rubicon Project


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /stoat/613/s1.adform.net/bootstrap.js HTTP/1.1 
Host: s1.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: adtrc=1

                                         
                                         37.157.5.71
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Last-Modified: Wed, 07 Nov 2018 11:53:13 GMT
Cache-Control: public, max-age=100000
Expires: Thu, 08 Nov 2018 20:19:43 GMT
X-Cache-Status: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14157
Md5:    e12deb2d11a25b76bcc5d9f0e93de25c
Sha1:   8d8024ffb8fad49db134b53841ea1a3b59a69294
Sha256: 272080b38234fee923d3fab327ad511041901ee6359f207dbd4d965effb7d9cc
                                        
                                            GET /wpf/v2/N8a44j1c.lY5BNvcKyAdMUDFBpBeA0fUm0NUbNiqGEtrs1OeESG.B9H_jftckkCoq0NUbNiqUU8jCOrVQdg1kzoMpwoNJ9z4oYYLzZ1kzDlSgXTI1TA2wv4qnvtCsABIySy.aP3xihU_nvOegolzuTDRI_311cJy9qQtEwJ3tDNACCySy.aPjftckoOPIDxjAjEOSyS2SQbFYUMnGWpwoNSUC56MnGWVQdg3ZLQ0I0916eOGTcDhmr_nwxIrvTdPQp4UdHz15tHmVjpuajRgDQ4mktahY9ay.25.ea8RzvwPraefsruX6MmmjoaUeASFQ_A91zJlfgBG8qCMns_Gj5fmVLHi7Zv5ftvqU1jTcouU.AxzXgLz4QCwby92yMUDxwt.nJmcsDxqhyA_r_LwwKdBvpZfWfUXtStKjE4PIDzmkqzQ1NNlr4WySXvOyCmSh_vrHUTCyxGdoy.zwyUTzAKhJxRUfsyiqeqwarpO9sU98nC5ZyzDGG5e3NlY52DLrV9BNorW6Ts8kIRsLSTu_XVA4.L9.gJ0Nc1lF4XVPyPDI_XV4A90Nc6MeONc39lF7KXV401gJ.dTcKXV4jMk.EL0/adfserve/?CC=1&bn=25464867;rtbwp=F8E602E88579FAD4;rtbdata=hZCx8WgGkKfoBFukTTKVnOTCy8epk9KMXhyoGumQEe-X7vp-Oq5BwVbYwZKKydPGvuuNhtID8SM_aQTQ66CUJ7Itsrm5MM9zfN2LCHptKZoN1nd2vSl4V5CYKCBNghFGFfaVC_gMsd79ZMDuNCY2H2ORdsxEUKIIezBU_azUJc_uctZ9_b8-JteCI7QAz4xhqFj_MmnWufvrLgtmos69lnaUu8FworLg3CmDY90VXUlf-ywt7aMASSoUIuWa1x-aJ-pxjpm2NYDSm_MygVJ8g5YSSfGpIAn90;oobclicktrack=http%3a%2f%2fbeacon-nf.rubiconproject.com%2fbeacon%2fv2%2ft%2f0%2fe75133a7-2b94-4821-a7e6-15eb3371f728%2f;js=1;adfxid=1x;1064;set=en-US|en-US|1176X885|10.0452|150|600|24|8|3|7|0;fd=0|3&CREFURL=http%3A%2F%2Fpalashranjan.prv.pl%2Fanal-ass-teen-tight.html HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: C=1; adtrc=1

                                         
                                         37.157.4.40
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:22 GMT
Content-Length: 2526
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Set-Cookie: cid=-8358985495919445887,0,0,0,0; expires=Sun, 06-Jan-2019 16:35:22 GMT; path=/ uid=-8358985495919445887; domain=adform.net; expires=Sun, 06-Jan-2019 16:35:22 GMT; path=/ TPC=1541608522008; domain=adform.net; expires=Wed, 14-Nov-2018 16:35:22 GMT; path=/
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), max speed
Size:   2526
Md5:    a4cb6f53ae920d29315a9d108e4941cc
Sha1:   e4c8866c79f4e7c1a5bc187f5689644ad55dfe21
Sha256: d865a6d286a64e0b4395f1341336877ae09bc8abd3e19c9247ea8953eb69aa49
                                        
                                            GET /stoat/613/s1.adform.net/load/v/0.0.162/e/8gBBwAA/i/8IG-xAAAACAA/r:AdConstructor:contents/ImageTag:types/Standard HTTP/1.1 
Host: s1.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: adtrc=1; uid=-8358985495919445887; TPC=1541608522008

                                         
                                         37.157.5.71
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Last-Modified: Wed, 07 Nov 2018 11:53:13 GMT
Cache-Control: public, max-age=100000
Expires: Thu, 08 Nov 2018 20:22:02 GMT
X-Cache-Status: MISS
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   35988
Md5:    a66030478f7001dab9bf45b0c00187d9
Sha1:   dff7425d8ec21b5dba776d33840994829bafb23b
Sha256: 0b4f3b30edebfb796d5f3dc6df6e5b5f5e6c296d8370712f7196fa62d957a5e3
                                        
                                            GET /Banners/27427254/27427254.jpg?bv=2 HTTP/1.1 
Host: s1.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: adtrc=1; uid=-8358985495919445887; TPC=1541608522008

                                         
                                         37.157.5.71
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:22 GMT
Content-Length: 68307
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Wed, 10 Oct 2018 13:03:59 GMT
Etag: "5bbdf8bf-10ad3"
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=604800
Strict-Transport-Security: max-age=0
X-Cache-Status: MISS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   68307
Md5:    0f1bb8562ba52acc83f1a65b545509b3
Sha1:   a2bceca81f1827cfb75fd1340e35aca23cdf8a8e
Sha256: 9079a04537a74e375b1d7b2a33aa91f540e784648856d1e5e123c41181afef1a
                                        
                                            POST /gsdomainvalsha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 07 Nov 2018 16:35:22 GMT
Content-Length: 1564
Connection: keep-alive
Set-Cookie: __cfduid=d9130bb6dc8882172f20b010d3f57db031541608521; expires=Thu, 07-Nov-19 16:35:21 GMT; path=/; domain=.globalsign.com; HttpOnly
Last-Modified: Wed, 07 Nov 2018 13:59:40 GMT
Expires: Sun, 11 Nov 2018 13:59:40 GMT
Etag: "61f056bfe18f026f9bea3877778cd72ea29d1c7f"
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: REVALIDATED
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4761366de0d6427f-OSL


--- Additional Info ---
Magic:  data
Size:   1564
Md5:    86d8f648c3dab230bcfe081447edbcbe
Sha1:   61f056bfe18f026f9bea3877778cd72ea29d1c7f
Sha256: a3e04ac1f4dddc76c8e5e8daea6e12e4cfe262909a339da674782b6767d1ca9d
                                        
                                            GET /usync.html?&geo=eu&co=no HTTP/1.1 
Host: eus.rubiconproject.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: khaos=JO7DWS5R-1F-8L3V; rsid=BNyNUSjyr5MGGvPQIXgI1Z9rY5nNljM+9LaETRqNrnMWV4GhPHD/R/IBHPs+m8df3rUgoBYV9S2nIM5zJ7hpB7oE/Z8BeRSMfcam7ca9HOZgZNsutQruMDpW3C5jqAnCSZK8Zo8ACMFP; ses40=132208^1; vis40=132208^1; audit=BRxbK4LkJi4yu96W6/nsH7ys6syQ6kjY1qX+3TmboTtdaqRKetJDVdxST3BaX1Ot0EK92Da/83pIF5TcVSYvV7WMy6KebrSTktlw1NR1BwY=; ses9=132208^1; vis9=132208^1

                                         
                                         104.123.140.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.3.3
P3P: CP="NOI CURa ADMa DEVa TAIa OUR # BUS IND UNI COM NAV INT"
Last-Modified: Tue, 06 Nov 2018 16:14:07 GMT
Content-Encoding: gzip
Content-Length: 7379
Cache-Control: max-age=66935
Expires: Thu, 08 Nov 2018 11:10:57 GMT
Date: Wed, 07 Nov 2018 16:35:22 GMT
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7379
Md5:    edf473d6031e20a0df12080569051480
Sha1:   b158b059cd334ccdebc2378db4439a779e5a9f30
Sha256: 0eb4070d9a6b9c0b9782d59a3f91cd8e0dac46ceafd0d8cc73f241b118ac0d62
                                        
                                            GET /imp?type(js)pool(510263)a(2354327)preurl(http://ox2.sterta.pl/www/delivery/ck.php?oaparams=2__bannerid=273__zoneid=27__cb=35eb81c4fd__oadest=)778212803 HTTP/1.1 
Host: imppl.tradedoubler.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html

                                         
                                         34.241.211.83
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=ISO-8859-2
                                        
Access-Control-Allow-Origin: *
Cache-Control: private, max-age=0
Date: Wed, 07 Nov 2018 16:35:21 GMT
P3P: policyref="http://tracker.tradedoubler.com/w3c/p3p.xml",CP="NOI DSP COR NID CUR OUR NOR"
Pragma: no-cache
Server: TXServerHttp
Set-Cookie: BT=1z11zzZ1z1DWsLTzaWJ7J1fzzHx1y6x1z9yaWJ7J1f;expires=Thu, 07-Nov-2019 16:35:22 GMT;path=/;domain=.tradedoubler.com PI=1z11z1zZ1z2TajqFzBRJoy1y20mWCyyyy63RYyId1y29D9f0yyy2SYVx1plw;expires=Thu, 07-Nov-2019 16:35:22 GMT;path=/;domain=.tradedoubler.com UI=1z11zzZ1zqgd9VzI2eyE35Z;expires=Thu, 07-Nov-2019 16:35:22 GMT;path=/;domain=.tradedoubler.com PL=1z11zzZ1z2B2rsVz2ZdbyI1b9yFJN5yy-3FiO48y3tJPw1z1ucfyI1b9yFJN5yy-3FiO48y4I8hEw1;expires=Thu, 07-Nov-2019 16:35:22 GMT;path=/;domain=.tradedoubler.com
Content-Length: 343
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   343
Md5:    2d00fefe5d33d080fccd178c28b7a9f5
Sha1:   71cb28005f362949802c7a301b112579a8bd7e20
Sha256: c67d2773f8a48ab695faf857d13f56519f924540bb2648b83f5134c91917d782
                                        
                                            GET /csimpr/?bn=25464867&csi=H-uhikv5Zsk0sMJnxGptI4jwKjGgZaWSvvOgEC01Dp9ZNEnQZv8dZNUnYzuUmFPiHu2R2veuGmOETtnzP7dmGC-fQ4oksVlWWstRevRS-IBIonU-bXY4JA2 HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: C=1; adtrc=1; cid=-8358985495919445887,0,0,0,0; uid=-8358985495919445887; TPC=1541608522008

                                         
                                         37.157.4.40
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Expires: -1
Access-Control-Allow-Origin: *
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /www/delivery/lg.php?bannerid=273&campaignid=123&zoneid=27&loc=http%3A%2F%2Fpalashranjan.prv.pl%2Fanal-ass-teen-tight.html&cb=35eb81c4fd HTTP/1.1 
Host: ox2.sterta.pl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: OAGEO=NO%7C%7C%7C%7C59.95%7C10.75%7C%7C%7C%7C%7C; OAID=11bc35f738b930640e461d3b55d0a797

                                         
                                         87.98.238.81
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: max-age=315360000
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Access-Control-Allow-Origin: *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=11bc35f738b930640e461d3b55d0a797; expires=Thu, 07-Nov-2019 16:35:22 GMT; Max-Age=31536000; path=/


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /file/64960/2018/10/29/28955/750x200.jpg HTTP/1.1 
Host: vht.tradedoubler.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: BT=1z11zzZ1z1DWsLTzaWJ7J1fzzHx1y6x1z9yaWJ7J1f; PI=1z11z1zZ1z2TajqFzBRJoy1y20mWCyyyy63RYyId1y29D9f0yyy2SYVx1plw; UI=1z11zzZ1zqgd9VzI2eyE35Z; PL=1z11zzZ1z2B2rsVz2ZdbyI1b9yFJN5yy-3FiO48y3tJPw1z1ucfyI1b9yFJN5yy-3FiO48y4I8hEw1

                                         
                                         143.204.47.2
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 38485
Connection: keep-alive
Date: Mon, 29 Oct 2018 13:52:28 GMT
Server: Apache
Last-Modified: Mon, 29 Oct 2018 13:40:30 GMT
Etag: "9655-5795e36648f80"
Accept-Ranges: bytes
Cache-Control: max-age=604800, public
Expires: Mon, 05 Nov 2018 13:52:28 GMT
Age: 182573
X-Cache: Hit from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Id: e2EIrKQMkNv3rbY1UKXK3lxE8THeecUHwlXUUoDdsSh5b2bmPjkoqA==


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   38485
Md5:    5fe8e60d35b361550c3c3f299aff6fe7
Sha1:   eba556a332fa5b1561ac44acf5ec074176187ce6
Sha256: e2f62f40104e43694bc9b89c2b5afd671a3f3068df3152958611f8eb5cff6d9a
                                        
                                            GET /serving/unload/?version=15&unload=-8358985495919445887@@25464867,4276043386887152475,43|0|0|0|0|0|0|0|0||0|0|31|facbad76ddc2488a9d71a3c7b81eba4b7eb2671e_1|||1|0|0|uz-7gB7j4J6KnZcU24VSIaacOXPXvkvBIAEqXnwrZ1dSBrMsmF0JqSHkIXMq9FK4mVKB6saG2-41|||10 HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: C=1; adtrc=1; cid=-8358985495919445887,0,0,0,0; uid=-8358985495919445887; TPC=1541608522008

                                         
                                         37.157.4.40
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Expires: -1
Access-Control-Allow-Origin: *
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /serving/unload/?version=15&unload=-8358985495919445887@@25464867,4276043386887152475,43|0|0|0|0|0|0|0|0||0|0|31|facbad76ddc2488a9d71a3c7b81eba4b7eb2671e_1|||1|0|0|uz-7gB7j4J6KnZcU24VSIaacOXPXvkvBIAEqXnwrZ1dSBrMsmF0JqSHkIXMq9FK4mVKB6saG2-41|||10 HTTP/1.1 
Host: track.adform.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://palashranjan.prv.pl/anal-ass-teen-tight.html
Cookie: C=1; adtrc=1; cid=-8358985495919445887,0,0,0,0; uid=-8358985495919445887; TPC=1541608522008

                                         
                                         37.157.4.40
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Wed, 07 Nov 2018 16:35:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Cache-Control: no-cache, no-store, must-revalidate, no-transform
Pragma: no-cache
Expires: -1
Access-Control-Allow-Origin: *
P3P: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015